Topic: Exception EOleSysError in module iMeshClient.exe at 000C8D09

[nrchy]

The assembled PC I'm using runs on WindowsXP. After being connected to the net, i suddenly got disconnected. I restarted and when the restart was finished and i'm already on the desktop, an error message flashed on-screen saying:


Exception EOleSysError in module iMeshClient.exe at 000C8D09. The RPC server is unavailable.


From then on, I couldn't cut&paste, I couldn't drag items/files/icons, I couldn't connect to the net, and worst, when i open windows media player and nero burning rom it says that "The RPC server is unavailable" and that there is a "COM/OLE error."
I uninstalled my iMesh v4 and uninstalled a few unimportant programs in that pc of mine. I tried following the msblast removal tool by symantec and tried connecting to the net using another computer. Using that other computer, i searched the web for information on things like:
-RPC server
-RPC server is unavailable
-Exception EOleSysError in module
I also tried accessing:
-www.imesh.com/help/
-www.imesh.com/guide.shtml
-www.imesh.com/forums/search.php
-www.imesh.com/forums/viewtopic.php?t=43111

I am not a good computer technician because i'm just an average high school student in the Philippines.
What do i do? Pls. help me. My important school files are stored in that pc of mine and i can't afford to just let go of them and reformat my entire pc.
Pls. somebody help me. I don't mean to be rude or somethin like that but I just need a solution and an answer to my problem.
Thank you very much and Merry Christmas plus a Happy New Year!
Thank you once again.


**Note: I am using another computer to connect to the net and subscribe to forums to ask for help. Thank you.

[Simon]

Hello nrchy, and  

I'm no expert myself, but don't worry, I'm sure someone will be able to help you with this.  In the meantime, if you find an answer elsewhere, we would be pleased if you could let us know, as it may help someone else.

[Dack]

http://www.pestpatrol.com/PestInfo/I/iMesh.asp

You've been infected with a nasty bit of spyware/malware/file sharing software.

Manual removal (from the link consists of) requires you to do the following. Programfilesdir is wherever you usually store your program files - usually c:\Program Files,

Open up the task manager and kill the following processes.

programfilesdir+\imesh\client\imeshclient.exe
programfilesdir+\imesh\client\imesh_336.exe
programfilesdir+\imesh\client\ttil_imesh.exe
programfilesdir+\imesh\client\unwise.exeezstub.exe
stub.exe

Then you need to unregister the DLLs by doing a start->run and then type the following (the c:\winnt is wherever your system directory for XP is)
regsvr32 /u c:\winnt\cnbabe.dll
regsvr32 /u c:\winnt\f1.dll
regsvr32 /u c:\winnt\sysldr.dll


Then (fun this isn't it ) remove these entries from the registry

HKEY_CLASSES_ROOT\.imusr
HKEY_CLASSES_ROOT\imesh.document
HKEY_CLASSES_ROOT\imeshc~1.dochostuihandler
HKEY_CLASSES_ROOT\imusr.document
HKEY_CLASSES_ROOT\mime\database\content type\application/x-imesh
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\imesh
HKEY_CURRENT_USER\software\netscape\netscape navigator\suffixes\application/x-imesh
HKEY_CURRENT_USER\software\netscape\netscape navigator\suffixes\application/x-imeshusr
HKEY_CURRENT_USER\software\netscape\netscape navigator\user trusted external applications\c:\program files\imesh\client\imeshclient.exe
HKEY_CURRENT_USER\software\netscape\netscape navigator\viewers\application/x-imesh
HKEY_CURRENT_USER\software\netscape\netscape navigator\viewers\application/x-imeshusr
HKEY_LOCAL_MACHINE\software\classes\.imesh
HKEY_LOCAL_MACHINE\software\classes\.imusr
HKEY_LOCAL_MACHINE\software\classes\imesh.document
HKEY_LOCAL_MACHINE\software\classes\imeshc~1.dochostuihandler
HKEY_LOCAL_MACHINE\software\classes\imusr.document
HKEY_LOCAL_MACHINE\software\classes\mime\database\content type\application/x-imesh
HKEY_LOCAL_MACHINE\software\classes\mime\database\content type\application/x-imeshusr
HKEY_LOCAL_MACHINE\software\imesh
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\imesh
HKEY_USERS\s-1-5-21-725345543-1078145449-1343024091-500\software\imesh
HKEY_USERS\s-1-5-21-725345543-1078145449-1343024091-500\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\imesh
HKEY_USERS\s-1-5-21-725345543-1078145449-1343024091-500\software\netscape\netscape navigator\suffixes\application/x-imesh
HKEY_USERS\s-1-5-21-725345543-1078145449-1343024091-500\software\netscape\netscape navigator\suffixes\application/x-imeshusr
HKEY_USERS\s-1-5-21-725345543-1078145449-1343024091-500\software\netscape\netscape navigator\user trusted external applications\c:\program files\imesh\client\imeshclient.exe
HKEY_USERS\s-1-5-21-725345543-1078145449-1343024091-500\software\netscape\netscape navigator\viewers\application/x-imesh
HKEY_USERS\s-1-5-21-725345543-1078145449-1343024091-500\software\netscape\netscape navigator\viewers\application/x-imeshusr

Then delete these files:
commonprograms+\imesh\imesh.lnk
commonprograms+\imesh\uninstall imesh.lnk
desktopdir+\imesh.lnk
profilepath+\start menu\programs\imesh\imesh.lnk
profilepath+\start menu\programs\startup\imesh.lnk
programfilesdir+\imesh\client\antivirus_install.exe
programfilesdir+\imesh\client\help\bsscdht1.js
programfilesdir+\imesh\client\help\bsscdht2.js
programfilesdir+\imesh\client\help\bsscdhtm.js
programfilesdir+\imesh\client\help\ftsbody.htm
programfilesdir+\imesh\client\help\ftsdhtml.htm
programfilesdir+\imesh\client\help\ftsform.htm
programfilesdir+\imesh\client\help\helpfile.css
programfilesdir+\imesh\client\help\helpfile.htm
programfilesdir+\imesh\client\help\helpfile\assigning_download_priority.htm
programfilesdir+\imesh\client\help\helpfile\changing_the_skin.htm
programfilesdir+\imesh\client\help\helpfile\contacting_a_user_that_you_are_downloading_from.htm
programfilesdir+\imesh\client\help\helpfile\contacting_a_user_who_is_downloading_from_you.htm
programfilesdir+\imesh\client\help\helpfile\contacting_other_users.htm
programfilesdir+\imesh\client\help\helpfile\contacting_us.htm
programfilesdir+\imesh\client\help\helpfile\crashing_on_launch.htm
programfilesdir+\imesh\client\help\helpfile\crash_when_downloading.htm
programfilesdir+\imesh\client\help\helpfile\crash_while_sharing.htm
programfilesdir+\imesh\client\help\helpfile\disconnections.htm
programfilesdir+\imesh\client\help\helpfile\downloading.htm
programfilesdir+\imesh\client\help\helpfile\downloads_remain_queued_.htm
programfilesdir+\imesh\client\help\helpfile\download_status.htm
programfilesdir+\imesh\client\help\helpfile\finding_other_imesh_users.htm
programfilesdir+\imesh\client\help\helpfile\hiding_the_skin.htm
programfilesdir+\imesh\client\help\helpfile\inviting_a_friend_to_download_imesh.htm
programfilesdir+\imesh\client\help\helpfile\personalizing_your_imesh_look.htm
programfilesdir+\imesh\client\help\helpfile\personalizing_your_imesh_preferences.htm
programfilesdir+\imesh\client\help\helpfile\previewing_your_files.htm
programfilesdir+\imesh\client\help\helpfile\registering.htm
programfilesdir+\imesh\client\help\helpfile\searching_for_files.htm
programfilesdir+\imesh\client\help\helpfile\selecting_your_imesh_look.htm
programfilesdir+\imesh\client\help\helpfile\sending_a_file_link.htm
programfilesdir+\imesh\client\help\helpfile\sending_a_file_link_by_email.htm
programfilesdir+\imesh\client\help\helpfile\sending_a_file_link_to_a_user_on_your_contacts_list.htm
programfilesdir+\imesh\client\help\helpfile\sharing_by_using_the_share_wizard.htm
programfilesdir+\imesh\client\help\helpfile\sharing_files_using_the_media_manager.htm
programfilesdir+\imesh\client\help\helpfile\sharing_your_files.htm
programfilesdir+\imesh\client\help\helpfile\special_features_and_new_additions.htm
programfilesdir+\imesh\client\help\helpfile\the_ignore_list.htm
programfilesdir+\imesh\client\help\helpfile\troubleshooting.htm
programfilesdir+\imesh\client\help\helpfile\unable_to_view_another_user_s_file_list.htm
programfilesdir+\imesh\client\help\helpfile\using_skins.htm
programfilesdir+\imesh\client\help\helpfile\viewing_a_user_s_shared_files.htm
programfilesdir+\imesh\client\help\helpfile\viewing_uploading_files.htm
programfilesdir+\imesh\client\help\helpfile\viewing_your_files_with_the_media_manager.htm
programfilesdir+\imesh\client\help\helpfile\welcome_to_imesh.htm
programfilesdir+\imesh\client\help\helpf_ns.css
programfilesdir+\imesh\client\help\idxbody.htm
programfilesdir+\imesh\client\help\idxdhtml.htm
programfilesdir+\imesh\client\help\idxform.htm
programfilesdir+\imesh\client\help\idxlist.htm
programfilesdir+\imesh\client\help\navframe.htm
programfilesdir+\imesh\client\help\navpane1.htm
programfilesdir+\imesh\client\help\navpane2.htm
programfilesdir+\imesh\client\help\tabframe.htm
programfilesdir+\imesh\client\help\tocdhtml.htm
programfilesdir+\imesh\client\help\toclist.htm
programfilesdir+\imesh\client\help\webhelp3.js
programfilesdir+\imesh\client\help\_blank.htm
programfilesdir+\imesh\client\imeshclient.exe
programfilesdir+\imesh\client\imesh_336.exe
programfilesdir+\imesh\client\ttil_imesh.exe
programfilesdir+\imesh\client\unwise.exe
programfilesdir+\imesh\client\unwise.iniantivi~1.exe-22cd0047.pf
antivi~1.exe-2a5b64f4.pf
cd_ins~1.exe-0621d916.pf
cnbabe.dll
cnbabe.exe-0733f4b9.pf
commonname pp v sb.doc
ezstub.exe
f1.dll
fsg.exe-3347552e.pf
fsg_3202.exe-00ebad4d.pf
ftimesh.exe-271fdfdd.pf
glj21.tmp-00298706.pf
helpfile.ftp
helpfile.hhc
helpfile.hhk
helpfile.hhs
imeshv3.exe-283f0307.pf
imesh_~1.exe-0d062460.pf
install.log
license agreement.lnk
license.txt
licensep.txt
mib.dat
privacy_policy.txt
regsvr32.exe-396dea2c.pf
rundll32.exe-4325edb5.pf
rundll32.exe-48139b07.pf
rundll32.exe-50da9272.pf
skin.imeshdef
stub.exe
stub.exe-33168b43.pf
sysldr.dll
ttil_i~1.exe-0f1a5bf0.pf
winnet.exe-0f9b7dff.pf

Then you can remove the directories:
commonprograms+\imesh
profilepath+\start menu\programs\imesh
programfilesdir+\imesh

Once you've done that you'll probably need to reboot your machine to start everything as normal.

THEN
Download and run spybot from security.kolla.de and install, run, do the updates, check for spyware/malware and fix it, then choose the immunize option to minimize your risks of future infestation.

ALSO
You need to do your Microsoft updates as a lot of the drive by installs (which is what sounds like happened to you) have been fixed.

Phew!

[Michelle]

Wow I'm impressed at that.  

   

[Dack]

ALSO

http://cexx.org/lspfix.htm

Would be a recommendation for the new.net spyware fix. If it gets corrupt it blows away your TCP Stack and you end up being unable to access the Internet (sound familier )

As the help support for iNet says:

Recomended action1: Make sure imesh is closed, goto control panel/add remove programs and look for these entries "CommonName", "New.Net" [commonName and New.Net must be removed with the uninstaller, removing it manually couldl result in a complete collapse of your TCP/IP stack and you will not be able to access the net, to uninstall you must be connected to the net and it will only work with internet explorer] "FT remove" "F1", and "My Search" delete any you find once you have done this reboot the PC and open imesh, install a copy of "Adaware" or "Spybot" run one or the other or both. Delete all entries close adaware. This should fix this problem.

Mind you I would have to seriously wonder about having software installed that has as one of their recommendations:

- Are you running a firewall? Try disabling it.

 

[lobo]

@Dack
It will take me all christmas to read that post my friend

Brian

[Simon]

Well I was wondering if there might be a removal tool available.  It does seem extremely long winded to delete it manually.  

[Dack]

Spybot and pest patrol should do it

They seem to leave the Gain/Gator trickler and newdotnet behind though. (Which require removal through the add/remove programs). Also if the newdotnet stuff gets corrupted then it blows away the TCP stack and will require repair.

Since he couldn't download anything then it was worth putting the manual removal option.

[Simon]

Maybe using Ad Aware as well might help.  I've had Gator before, and I agree it's a pain to get rid of.

He said he was using another PC to seek help, so he could hopefully d/load Spybot onto a CD and run it on his infected machine.  In safe mode?