Need help with Win2000 Pro - Ford Forums - Mustang Forum, Ford Trucks, Ford Focus and Ford Cars

Pearly · 08-11-2003, 19:13

I have been getting an error message today related to the 'svchost.exe' file.

It reads:

"svchost has generated errors and will be closed by Windows. You will need to restart the application. An error log is being created."

This causes windows functions such as cut/copy/paste to disappear. When I click on links they do not open, disables drag and drop, and a few other things. It's becoming really annoying as it's been happening every time I connect to the net. It hasn't happened yet while not connected. I can only fix it if I restart my machine.

Now I know what the 'svchost' file is for, and why it's there, as after about the 3rd time, I tried to delete the little f***er, but it didn't let me so I was forced to do some homework on the net, but I was unable to find a solution to my problem.

Can anyone help me with this?

xdc351 · 08-11-2003, 19:23

Win2000 was pretty good to me when I ran windows, never had this problem. I've asked around and nobody at my work has had it fail on them either.

Could only suggest installing SP3 or try copying a good svchost file into the same directory and see if will let you replace it.

3Toed · 08-11-2003, 19:33

Pearly, it's a virus that's only just come out. Check out these links for more info:

http://securityresponse.symantec.com...ster.worm.html

http://www.trendmicro.com/vinfo/viru...WORM_MSBLAST.A

Pearly · 08-11-2003, 20:23

Quote:

Originally Posted by 3Toed

Pearly, it's a virus that's only just come out. Check out these links for more info:

http://securityresponse.symantec.com...ster.worm.html

http://www.trendmicro.com/vinfo/viru...WORM_MSBLAST.A

Ah, I knew you'd know something!!

Thanks a billion.

/me owes 3Toad a beer

No wonder I couldn't find anything on it, it was only detected 11th of Aug!

xdc351 · 08-11-2003, 20:55

Hehehe, hadn't heard of blaster causing that problem, mabye i should stop posting on FF and get back to work....

XWGT · 08-11-2003, 22:18

Make sure you install the Windows security patch as well, or else the virus will simply keep re-infecting. Its a dog of a thing.
Have a good read of the write up on the virus. It only infects 2000/XP, but causes some dramas elsewhere as well

Cheers

Dellboy999 · 08-11-2003, 22:53

The virus is actually svchost32.exe I thought, and it creates a directory under your winnt called lumina (I think), and if you search your registery you will find under a key called RUN a commend to start it when windows starts.

Well thats what I had on my PC, so i just deleted the files and removed the registery entry.

AND thats svchost32.exe NOT svchost.exe which is a standard windows process.

Dellboy999z

carazy · 08-12-2003, 01:16

There is another security hole that was discovered this morning at 4am RPC call error makes computer restart when connecting to the net.
Computer restarts then back to normal but the hole is still there.
Get the latest MS patch and it's fine.
Or just block a port with the firewall (can't remeber the port so block all of them ;-)

Pearly · 08-12-2003, 23:49

Thanks all.

Fixed it.

It was the MSBLAST.exe worm.
Downloaded SP2 for Win2k (which I should have done long ago), then downloaded this http://www.microsoft.com/technet/tre...n/MS03-026.asp .
Then I ran a removal tool XWGT was kind enough to supply me with (thanks mate), and then installed that (^ link) download. Seems to be fine now. Will set up a firewall as soon as I can to help in the future. I also disabled most of the 'remote services' on my machine.

LunaticSVT · 08-13-2003, 00:39

Got to love MSBLAST.exe it is hitting everyone around here on my ISP. I am getting probed as I type this out.