svchost.exe error

[Paula]

Have done all Windows Updates, installed Service Pack 4
and still continue to get the following error message
constantly:

"Svchost.exe has generated errors and will be closed by
windows. You will need to restart the program."

Please advise as to how to resolve this issue.
Thank you

 

[Gerry Rigney]

Hi Paula

It looks as though you have been infected with the blaster
worm or one of it's varients.

Go to microsoft website and seerch for "blaster worm patch"
download and install it.
Then go to one ov the antivirus sites such as
www.symantec.com and download the latest standalone virus
removal tools such as stinger, run this and that should
solve your prob.

Hth
Gerry

 

[dcdon]

Hi Paula,

Scan your computer with Symantec online (it in the center, click on security
check, and the next window choose Virus scan)
http://www.symantec.com/nav/nav_9xnt/

When it has run write down or print the names of virus found. Let it remove what
it will. After ward Go to Google and type the virus name adn you should find the
Symantec Virus removal instructions. If they have a fixtool use it, but be sure to
do everything it says in THAT order.

Here is another page they have that has a multiplicity of fixtools.
http://www.symantec.com/avcenter/tools.list.html

Please go to this site www.spychecker.com and get you an antivirus program (AVG by
www.grisoft.com is one), a Firewall (www.zonelabs.com has a free one the will work
to keep hackers out of your machine, anti Malware like Ad-aware (one spychecker
site), and SpyBot S&D (on spchecker site also). You need these to keep your
computer safe.


good computing,
don
-----------------




Hi Paula

It looks as though you have been infected with the blaster
worm or one of it's varients.

Go to microsoft website and seerch for "blaster worm patch"
download and install it.
Then go to one ov the antivirus sites such as
www.symantec.com and download the latest standalone virus
removal tools such as stinger, run this and that should
solve your prob.

Hth
Gerry

 

[Paula]

I have done all this and even bought Norton System Works
2003, installed and ran after updating but still receive
this error. That's why I'm so stumped!!!!!

 

[Andy Cowley]

Its Blaster, you haven't got it necessarily but its got your IP. You need
to download the DCOMbobulator. I can't remember where from though.

 

[Andy Cowley]

Microsoft's patch sucks I'm afraid. Once Blaster has infected your machine
it attacks you again from a remote server. It exploits a vulnerability in
the DCOM module. DCOM is pretty useless for everything except Blaster, so
it can be safely deactivated. You need to download a utility called
DCOMbobulator from

http://grc.com/dcom/

this will deactivate DCOM and stop the problem. You have to turn it off
and close the open port that it will find. I had this problem for about
six months before I found the solution so I know how frustrating it is.
This definitely works though!

Good luck

 

[Enkidu]

No, it doesn't suck. There are two patches for the RPC vulnerability
and a patch for DCOM. If you have the DCOM one and the second, later,
one you are safe. Actually, I believe that with the second RPC patch
you are safe, but I not 100% sure. You may still need the DCOM one.

Cheers,

Cliff