Case1:
Problem Reported:
Windows XP users are not able to paste a file/folder on the system from any Login (Administrator / User).
For example, if i right-click on any file/folder either through desktop or through windows explorer, I can click on the "COPY" option, but when i right-click to the destination folder/path (anypath) then the "PASTE" and " PASTE SHORTCUT" options will be greyed-out and so cannot paste the file/folder.
You can copy & paste the file/folders from CMD prompt using COPY command.
You can copy & paste contents in text editor like Notepad.
All the systems were having Windows XP Professional and eScan ISS SMB updated till date.
Below abnormal behaviours were found on the problematic systems:
1) In Services.msc : "Extended" view is completely blank (blue screen). (screenshot attached).
While "Standard" view shows the services but many missing/disabled services, especially "Remote Procedure Call (RPC)" service was missing.
Doesn't allow to start any service manually from "Standard" view.
2) Any Application when minimized is not displayed on task bar, but can be opened through task manager using "Bring to front" option.
3) "Network connections" view shows Blank.
4) If you try to run any application having .msi extension (Windows Installer Package), gives error as "service not running ...."
Solution:
Scanned the system with eScan and with other virus/rootkit removal tools, but didn't find any infection/suspicious process.
Then,
1) Browse to the below path in the registry and you wll find the value data as %SystemRoot%\system32\rpcss.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\Parameters]"ServiceDll"
When checked through CMD prompt found that the file rpcss.dll was missing from c:\windows\system32 folder.
Copied the file from a working Windows XP system through command prompt and restarted the system.
After restarting the pc, copy & paste started working properly and all the above mentioned abnormal behaviour restored back to normal.