Svchost.exe and Service Pack Upgrade Problems

[Robert]

Three Problems

1. When Internet Explorer connects to the Internet the
following message appears.

Svchost.exe has generated errors and will be closed by
Windows.

The article in the Knowledge Base at
http://support.microsoft.com/default.aspx?scid=kb;en-
us;259275 covers this but I don't know what to do with
this information.

2. Windows 2000 service pack 4 will download but will not
install.

3. Service Pack 2 downloads but will not install.

What do I need to do to solve these problems?

 

[Fabio]

Hi Robert

Looks as if you are infected with the MS Blaster/Welchia Worm. Try this:

- First, ensure that you have a copy of the *Netowork* Install of either the
SP2, SP3 or SP4 for Windows. (you can also use a Network Install downloaded
by a friend of yours/on a CD and copy it to your PC)


To get the SP2 Network Install, go here:
http://www.microsoft.com/Windows2000/downloads/servicepacks/sp2/download.asp
(~100 MB)


Howver, I suggest that you should download and install the Network
Installation of
Windows 2000 SP4.

Go here to download it:
http://www.microsoft.com/Windows2000/downloads/servicepacks/sp4/download.asp

Direct Download Link:
http://download.microsoft.com/download/E/6/A/E6A04295-D2A8-40D0-A0C5-241BFECD095E/W2KSP4_EN.EXE
(~130 MB)

If you don't want to download anything then you can order SP4 on CD.
Shipping+Handling costs apply. To order go here:
http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/ordercd.asp.

or:
Order the CD by Phone or Fax
Call (800) 360-7561
Fax (716) 447-7330

a.. Request part number C11-03228 for SP4 English
b.. Request part number C11-03229 for SP4 French


Using a Download Manager will allow you to interrupt/resume when you like.
Get a free Download Manager here:

LeechGet: http://www.leechget.de/


Some Shareware Download Managers are:

GetRight: http://www.getright.com

FlashGet: http://www.flashget.com/

Go!Zilla: http://gozilla.com/index.htm

and many more...


- Once you have a the Netowork of SP2 or above for Windows 2000 on your
Harddisk, your first step is done.


- As a second step, download those two free Tools:


Free W32.Blaster.Worm Removal Tool:

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

Direct Link: http://securityresponse.symantec.com/avcenter/FixBlast.exe


Free W32.Welchia.Worm Removal Tool:

http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

Direct Link: http://www.symantec.com/avcenter/FixWelch.exe


As a last download, download the MS Security Patch which will protect you
against Blaster from here:

Security Bulletin MS-03-026:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp


Direct Link to the Patch Download:

http://www.microsoft.com/downloads/...46-F541-4C15-8C9F-220354449117&displaylang=en


- Make sure you remember the Directory where you saved it to disk.



- Once you have downloaded both tools and the Security Patch, *disconnect*
your PC from the Intenet/Network immediately, best by plugging out the
Modem/Router Cable.

- After being *disconnected* from any Network, run both of those Tools which
will disinfect your System.

- After the disinfection, start the Installation of the Service Pack.

- Reboot when prompted.

- Make sure that your PC is still *not* connected to any Network after
Reboot.

- Now, apply the previsously downloaded MS Security Update.

- Run the Worm Removal Tools again and reboot.

- Now you can plug your cables back in and go online.


Dont forget to visit Windowsupdate as well to ensure you have all the othere
critical Patches too.


Hope this helps. Regards,

Fabio

 

[Elaine D.]

When I had that happen, guess what? I had the Blaster.Worm
on my computer! I also noticed that while I had Explorer
open these words were constantly scrolling across:
Finalizing Insallation. The only way I could get offline
was to go to Start, reboot. The only way I could get the
scrolling words off was to actually unplug my phone cord
from the wall! The Blaster was installing software on my
computer to sell from it, I suspect. The one thing I did
keep seeing over and over was the error message you
mentioned. Once I went to SARC and downloaded the fix and
the checkfix (you need to go into DOS to run the checkfix
to verify the validity of the fix to make sure it actually
comes from Symantec), then I ran the fix, it scanned my
whole computer and said yes, indeed Blaster was there and
it got rid of 3 things that it was doing to my computer.
Then it sent me to a URL with the patch for the
Blaster.Worm, since I had not been able to get to the
Windows Update page to get the fix. Hope this helps.
Elaine