svchost.exe

[frustrated]

after reloding win 2000 pro on my PC, getting error
message when online. svchost.exe has caused an error and
will be terminated. Ran tlist -s to see what service
related to this instance of svchost.exe, came up with
RpcSs. Services manager says this service is running
automatic, but PC not disconnecting dial up connection
without logging user off.

 

[Torgeir Bakken (MVP)]

after reloding win 2000 pro on my PC, getting error
message when online. svchost.exe has caused an error and
will be terminated. Ran tlist -s to see what service
related to this instance of svchost.exe, came up with
RpcSs. Services manager says this service is running
automatic, but PC not disconnecting dial up connection
without logging user off.

Hi

This could be the caused by a worm (Welchia/Blaster)...

Download and install this one:

MS03-039: Buffer Overrun In RPCSS Service Could Allow Code Execution
http://support.microsoft.com/?kbid=824146

at the same time, you should install the following updates as well:
http://www.microsoft.com/technet/security/bulletin/MS03-043.asp
http://www.microsoft.com/technet/security/bulletin/MS03-049.asp

After you have patched your computer and rebooted, to cleanup the worm that
might already has infected you:

I would recommend that you run a cleanup tool, e.g. Stinger.exe from McAfee,
it removes 30+ virus/worms in one sweep, including all MSBlaster variants
(McAfee name W32/Lovsan.worm), Welchia (McAfee name W32/Nachi.worm)
and Sobig.f

McAfee AVERT Stinger
http://vil.nai.com/vil/stinger/

After this, if you haven't got it already, you should install an antivirus
program and keep the virus signature files updated at all times.

 

[frustrated]

A virus scan turned up 2 versions of virus. msblast, and
teekids. cleaned virus's and installed anti-virus
software. Thanks for the help.