Svchost.exe has generated errors and will be closed by Windows...


G

Guest

I have Win2K pro SP4. I have Mcafee AV with definitions up to date. I log on to the network daily at work. For one week, I am experiencing the error message "Svchost.exe has generated errors and will be closed by Windows..." --AND-- I cannot connect to the internet either through the dial up or company LAN. I am however able to browse the network folders and drives. I have downloaded and applied both MS03-026 and MS03-039. I have run the FixBlast and FixWelchia tools from Symantec. No viruses were found. I have also downloaded and run the DCOMbobulator. It claimed that DCOM service and the corresponding TCP port were already disabled and the computer is already protected. I have read all the recent threads and am still getting the error message and unable to connect. Any ideas.................


Qamar
 
Ad

Advertisements

B

Brad

Yes I have had this problem many times at home and at
work. The problem seems to be an rpc buffer overrun. To
fix this get the rpc vuln patch. This has fixed every
occasion I have had with this problem. I think it is
KB41246 or something like that.
-----Original Message-----
I have Win2K pro SP4. I have Mcafee AV with definitions
up to date. I log on to the network daily at work. For one
week, I am experiencing the error message "Svchost.exe has
generated errors and will be closed by Windows..." --AND--
I cannot connect to the internet either through the dial
up or company LAN. I am however able to browse the network
folders and drives. I have downloaded and applied both
MS03-026 and MS03-039. I have run the FixBlast and
FixWelchia tools from Symantec. No viruses were found. I
have also downloaded and run the DCOMbobulator. It claimed
that DCOM service and the corresponding TCP port were
already disabled and the computer is already protected. I
have read all the recent threads and am still getting the
error message and unable to connect. Any
ideas.................
 
M

Marina Roos

You still might be infected.

Open Taskmanager and look for the msblast.exe, mspatch.exe or
teekids-proces. Kill it and go to www.sophos.com\support\disinfection to get
the removaltool. This removaltool will clean your registry too. After that
install ms03-039 from microsoft to prevent from happening again. (You won't
need the ms03-026, because it is superceeded by ms03-039.)
--
Regards,

Marina

Qamar said:
I have Win2K pro SP4. I have Mcafee AV with definitions up to date. I log
on to the network daily at work. For one week, I am experiencing the error
message "Svchost.exe has generated errors and will be closed by
Windows..." --AND-- I cannot connect to the internet either through the dial
up or company LAN. I am however able to browse the network folders and
drives. I have downloaded and applied both MS03-026 and MS03-039. I have run
the FixBlast and FixWelchia tools from Symantec. No viruses were found. I
have also downloaded and run the DCOMbobulator. It claimed that DCOM service
and the corresponding TCP port were already disabled and the computer is
already protected. I have read all the recent threads and am still getting
the error message and unable to connect. Any ideas.................
 
G

Guest

Thanks Marina and Brad

Brad, what you are suggesting is Knowledge Base article about the Blaster Virus and I have already downloaded and installed that update

Marina, I have checked taskmanager as per your suggestion and no such processes are running there

Qamar
 
Ad

Advertisements

M

Marina Roos

It can't hurt to run that removaltool from Sophos again. Does Add/Remove
Programs show that the ms03-039 (hotfix 824146) is installed?

--
Regards,

Marina

Qamar said:
Thanks Marina and Brad.

Brad, what you are suggesting is Knowledge Base article about the Blaster
Virus and I have already downloaded and installed that update.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top