svchost.exe errors

[rrose selavy]

Many occurances of svchost.exe "Exception Privileged Instruction" followed
by "cannot write referenced memory."

Getting many of these occurances.

Have Firewall. Have McAfee Active Shield.

 

[Alan Illeman]

Many occurances of svchost.exe "Exception Privileged Instruction" followed
by "cannot write referenced memory."

Getting many of these occurances.

Have Firewall. Have McAfee Active Shield.

I'm not familiar with McAfee products. Is the 'Active
Shield' your firewall? When was the last time you did an
anti-virus scan of your whole system? Sounds like Blaster.

svchost is a 'listening' application. Run ActivePorts and
see for yourself. In my firewall (Kerio 2.1.5) I set individual
rules to block incoming TCP (but not UDP) to svchost, mstask
and SYSTEM.

Last question: are you running on the internet as Administrator?
- because if you are, a virus can assume your permissions and
play havoc with your system.

 

[rrose selavy]

I'm not familiar with McAfee products. Is the 'Active

Shield' your firewall?

Both are McAfee products, but seperate.

Sounds like Blaster.

Yes, sounded like Blaster to me too which is why I indicated the Mcafee
installations. I ran a scan just prior to posting and found no
viruses/worms/trojans, etc. Ran Adaware and Search and Destroy also.

svchost is a 'listening' application. Run ActivePorts and
see for yourself. In my firewall (Kerio 2.1.5) I set individual
rules to block incoming TCP (but not UDP) to svchost, mstask
and SYSTEM.

Not sure how all that functions. Don't know what UDP stands for.

Last question: are you running on the internet as Administrator?
- because if you are, a virus can assume your permissions and
play havoc with your system.

No. Not as Administrator.

 

[Rajiv Pandya]

This is blaster virus and you should install AVG Antivirus
to avoid this error, and you pl. install zone alaram
firewall whenever svchost.exe try to access internet this
firewall can ask you at that time you stop that
application.

I have also this type of problem in past and now my
problem is solved, hoping that your problem will also be
solved...

Rajiv Pandya
Param Web Solutions, Rajkot ( Gujarat-India )
www.paramwebs.com
(e-mail address removed)

 

[Jason Hall [MSFT]]

--------------------

From: "rrose selavy" <[email protected]>
References: <[email protected]>

Subject: Re: svchost.exe errors
Date: Thu, 3 Jun 2004 08:41:15 -0700


Both are McAfee products, but seperate.


Sounds like Blaster.

Yes, sounded like Blaster to me too which is why I indicated the Mcafee
installations. I ran a scan just prior to posting and found no
viruses/worms/trojans, etc. Ran Adaware and Search and Destroy also.


Not sure how all that functions. Don't know what UDP stands for.



No. Not as Administrator.

---------------------

Ya, not Blaster. Blaster doesn't cause this error as far as I know.

SVCHOST.EXE is a process that's sole purpose is to host other services. You
may find that more than one instance of SVCHOST.EXE is running, this is
perfectly normal. Any particular instance of SVCHOST.EXE will potentially
have many services running within it (which can of course, make
troubleshooting difficult).

Now....Windows services are pretty solid (or at least, nothing that can't
be fixed by a hotfix), so it is unlikely that it is one of "our" services
that is causing the issue (SFC /SCANNOW will resolve any possible
corruption issues). What is MORE likely, is that you have a third-party
service loading up that has a bug in it. Make a list of these services
(using msconfig.exe from an XP machine or from the Web) and systematically
disable them to find the cause.

--
~~ JASON HALL ~~
~ Performance Support Specialist,
~ Microsoft Enterprise Platforms Support
~ This posting is provided "AS IS" with no warranties, and confers no
rights.
~ Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
~ Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.