"svchost.exe" crash

[Ken]

Am running Win2K Prof. and within ten minutes after I log
on, I get message: "svchost.exe has generated errors and
will be closed." This disables a lot of services such as
drag & drop, copy & paste, my printer, imbedded links,
etc. I've tried formatting my hard drive and reinstalling
Windows, and recently put a new motherboard in, and I
still get the same message. Anyone have any ideas on what
might be causing this?

 

[David H. Lipman]

Nachi/Welchia worm maybe ?

Go to McAfee (http://www.mcafee.com/myapps/mfs/default.asp) and/or Trend
(http://housecall.antivirus.com ) and perform an online scan of your platform.

If you can't access the Internet, obtain McAfee's Stinger http://vil.nai.com/vil/stinger/
and download it from another PC and then copy it to yours then use Stinger to scan your PC.

Please report back your results.

Dave



| Am running Win2K Prof. and within ten minutes after I log
| on, I get message: "svchost.exe has generated errors and
| will be closed." This disables a lot of services such as
| drag & drop, copy & paste, my printer, imbedded links,
| etc. I've tried formatting my hard drive and reinstalling
| Windows, and recently put a new motherboard in, and I
| still get the same message. Anyone have any ideas on what
| might be causing this?

 

[Dave Patrick]

These may help.

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
http://support.microsoft.com/?kbid=826955

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
Microsoft Certified Professional [Windows 2000]
http://www.microsoft.com/protect.


:
| Am running Win2K Prof. and within ten minutes after I log
| on, I get message: "svchost.exe has generated errors and
| will be closed." This disables a lot of services such as
| drag & drop, copy & paste, my printer, imbedded links,
| etc. I've tried formatting my hard drive and reinstalling
| Windows, and recently put a new motherboard in, and I
| still get the same message. Anyone have any ideas on what
| might be causing this?

 

[David H. Lipman]

ADDENDUM:

I forgot to mention that *IF* the Nachi/Welchia worm is detected, then you must install
following patch for the RPC/RPCSS Buffer Overflow Vulnerability that is addressed by
Microsoft Security Bulletin MS03-39 http://support.microsoft.com/?kbid=824146 otherwise
you'll just be reinfected.

Dave

 

[Guest]

Ran the McAfee scan and found nothing. Also
ran "FixBlast" for Blaster worm, and also found nothing.
My monitor is starting to go south on me. Would that have
anything to do with it?

-----Original Message-----
Nachi/Welchia worm maybe ?

Go to McAfee

(http://www.mcafee.com/myapps/mfs/default.asp) and/or Trend

(http://housecall.antivirus.com ) and perform an online scan of your platform.

If you can't access the Internet, obtain McAfee's Stinger http://vil.nai.com/vil/stinger/
and download it from another PC and then copy it to yours

then use Stinger to scan your PC.

 

[Dave Patrick]

No

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
Microsoft Certified Professional [Windows 2000]
http://www.microsoft.com/protect.


<snip>
| My monitor is starting to go south on me. Would that have
| anything to do with it?