svchost.exe has generated errors . . .

[Guest]

SVChost.exe has generated errors & will be closed by Windows. YOu will need
to restart. An error log is being created.


Windows 2000 Pro SP4
all updates prior to 01 Oct 2005
re-formatted hard disk drive & re-installed Windows & apps about 6 weeks ago
to get rid of redundant / incompatible

software. I had been using Norton AV & Roxio Easy Media Creator. I am now
using Panda Platinum Internet Security 2005 &

Nero 6.

Athlon 1700+
512 MB
80 GB Western Digital, IDE HDD; 4 partitions.


Today, I attempted to perform "routine maintenance"; chkdsk & defrag.
I ran error checking, checked both boxes, accepted invitation to run chkdsk
at reboot because exclusive access to Hard disk

drive was required.

Using msconfig.exe, I set computer to boot to safe mode so I could run
defrag in safe mode. I have done these things in the

past, with no problems.

Login screen appeared. I typed my password, but nothing appeared. Computer
unresponsive to keyboard / mouse input. I

pulled the power cord after waiting 5 minutes.

I restarted the PC.

Error message appeared after I logged in.
SVChost.exe has generated errors & will be closed by Windows. YOu will need
to restart. An error log is being created.

I re-ran chkdsk, as described above. I used task manager to run
msconfig.exe, set it to use original boot.ini. I am now in normal mode.

1. Where is the error log stored?

2. What should I do, short of backup, re-format, re-install?

Thanks for your help.

 

[Dave Patrick]

1.) In the application log of Event Viewer
2.) If you connected to any network before applying these then it may be
blaster and or sasser virus.

http://www.microsoft.com/technet/security/bulletin/MS03-043.mspx
http://www.microsoft.com/technet/security/bulletin/MS03-049.mspx

To do a clean install, either boot the Windows 2000 install CD-Rom or setup
disks. The set of four install disks can be created from your Windows 2000
CD-Rom; change to the \bootdisk directory on the CD-Rom and execute
makeboot.exe (from dos) or makebt32.exe (from 32 bit) and follow the
prompts.

When you get to the point, delete the existing NTFS and or other partitions
found. After you delete the partition(s) abort the install, then again
restart the pc booting the CD-Rom or setup disks to avoid unexpected drive
letter assignments with your new install.

Be sure to apply these to your new install before connecting to any network.

http://download.microsoft.com/download/E/6/A/E6A04295-D2A8-40D0-A0C5-241BFECD095E/W2KSP4_EN.EXE
http://www.microsoft.com/technet/security/bulletin/MS03-043.mspx
http://www.microsoft.com/technet/security/bulletin/MS03-049.mspx

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| SVChost.exe has generated errors & will be closed by Windows. YOu will
need
| to restart. An error log is being created.
|
|
| Windows 2000 Pro SP4
| all updates prior to 01 Oct 2005
| re-formatted hard disk drive & re-installed Windows & apps about 6 weeks
ago
| to get rid of redundant / incompatible
|
| software. I had been using Norton AV & Roxio Easy Media Creator. I am
now
| using Panda Platinum Internet Security 2005 &
|
| Nero 6.
|
| Athlon 1700+
| 512 MB
| 80 GB Western Digital, IDE HDD; 4 partitions.
|
|
| Today, I attempted to perform "routine maintenance"; chkdsk & defrag.
| I ran error checking, checked both boxes, accepted invitation to run
chkdsk
| at reboot because exclusive access to Hard disk
|
| drive was required.
|
| Using msconfig.exe, I set computer to boot to safe mode so I could run
| defrag in safe mode. I have done these things in the
|
| past, with no problems.
|
| Login screen appeared. I typed my password, but nothing appeared.
Computer
| unresponsive to keyboard / mouse input. I
|
| pulled the power cord after waiting 5 minutes.
|
| I restarted the PC.
|
| Error message appeared after I logged in.
| SVChost.exe has generated errors & will be closed by Windows. YOu will
need
| to restart. An error log is being created.
|
| I re-ran chkdsk, as described above. I used task manager to run
| msconfig.exe, set it to use original boot.ini. I am now in normal mode.
|
| 1. Where is the error log stored?
|
| 2. What should I do, short of backup, re-format, re-install?
|
| Thanks for your help.
|
|

 

[David H. Lipman]

From: "Dave Patrick" <[email protected]>

| 1.) In the application log of Event Viewer
| 2.) If you connected to any network before applying these then it may be
| blaster and or sasser virus.

It is not Lovsan/Blaster nor Sasser related.

 

[Guest]

DP:
No, it is not a virus, per on board & online scans.

Your attention to my plight is appreciated.

WC

1.) In the application log of Event Viewer
2.) If you connected to any network before applying these then it may be
blaster and or sasser virus.

http://www.microsoft.com/technet/security/bulletin/MS03-043.mspx
http://www.microsoft.com/technet/security/bulletin/MS03-049.mspx

To do a clean install, either boot the Windows 2000 install CD-Rom or setup
disks. The set of four install disks can be created from your Windows 2000
CD-Rom; change to the \bootdisk directory on the CD-Rom and execute
makeboot.exe (from dos) or makebt32.exe (from 32 bit) and follow the
prompts.

When you get to the point, delete the existing NTFS and or other partitions
found. After you delete the partition(s) abort the install, then again
restart the pc booting the CD-Rom or setup disks to avoid unexpected drive
letter assignments with your new install.

Be sure to apply these to your new install before connecting to any network.

http://download.microsoft.com/download/E/6/A/E6A04295-D2A8-40D0-A0C5-241BFECD095E/W2KSP4_EN.EXE
http://www.microsoft.com/technet/security/bulletin/MS03-043.mspx
http://www.microsoft.com/technet/security/bulletin/MS03-049.mspx

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| SVChost.exe has generated errors & will be closed by Windows. YOu will
need
| to restart. An error log is being created.
|
|
| Windows 2000 Pro SP4
| all updates prior to 01 Oct 2005
| re-formatted hard disk drive & re-installed Windows & apps about 6 weeks
ago
| to get rid of redundant / incompatible
|
| software. I had been using Norton AV & Roxio Easy Media Creator. I am
now
| using Panda Platinum Internet Security 2005 &
|
| Nero 6.
|
| Athlon 1700+
| 512 MB
| 80 GB Western Digital, IDE HDD; 4 partitions.
|
|
| Today, I attempted to perform "routine maintenance"; chkdsk & defrag.
| I ran error checking, checked both boxes, accepted invitation to run
chkdsk
| at reboot because exclusive access to Hard disk
|
| drive was required.
|
| Using msconfig.exe, I set computer to boot to safe mode so I could run
| defrag in safe mode. I have done these things in the
|
| past, with no problems.
|
| Login screen appeared. I typed my password, but nothing appeared.
Computer
| unresponsive to keyboard / mouse input. I
|
| pulled the power cord after waiting 5 minutes.
|
| I restarted the PC.
|
| Error message appeared after I logged in.
| SVChost.exe has generated errors & will be closed by Windows. YOu will
need
| to restart. An error log is being created.
|
| I re-ran chkdsk, as described above. I used task manager to run
| msconfig.exe, set it to use original boot.ini. I am now in normal mode.
|
| 1. Where is the error log stored?
|
| 2. What should I do, short of backup, re-format, re-install?
|
| Thanks for your help.
|
|

 

[Guest]

DHL:
It is not a virus, but thanks for your attention to my plight.

The message does NOT occur when I boot to normal mode.

Paired with error message is a note about a problem with 1 of my AV
program's files. I don't think I had booted to safe mode since installing
the different AV program, about 6 weeks ago. I think this is a false alarm.

WC