svchost.exe problem

[Dan]

Any ideas? svchost.exe shuts down shortly after connecting
to ISP via dialup. This has happened both before and after
wiping hard drive, restoring entire system, and updating
with Service Pack 4.

Error message in Event Viewer is as follows:

Source: Event System
Category: Event System
Event ID: 4097
The COM+ Event System detected a bad return code during
its internal processing. HResult was 800706BA from line 42
of \eventsystemobj.cpp.

Sometimes the HResult is 800706BF.

I searched Microsoft's online resources and found similar
but not exactly the same errors.

System Details:
Model: Gateway E-4600
BIOS: Intel Corp. GB85010A.15A.0028.P09.0103091412
03/09/2001
CPU: Intel Pentium 4, 1300 MHz
Standalone installation of Windows 2000 Professional.

Thanks for any help you can provide.

 

[Pegasus \(MVP\)]

You're probably infected with a virus. Check the many
existing posts that have "svchost" in the Subject line.

 

[Guest]

Since I wiped my hard drive and reinstalled the software, I first updated Norton AntiVirus, enabled Auto Protect as always, and did a complete system scan. I also ran Symantec's FixBlast tool and followed a friend's suggestion to use HouseCall. None of these turned up any Blaster virus, but HouseCall did identify and clean one instance of "malware.worm_nachi.A" that Norton did not catch. I have also run Ad Aware. After all these virus-checking and cleaning efforts, the problem reoccurred at the next opportunity, so I ran the Norton system scan again and again found nothing

Bottom line: not finding a virus to explain this problem, have done the disk formatting and service pack installation, etc. Am I at a dead end? Please advise..

 

[Pegasus \(MVP\)]

Scan your PC with an independent external virus
scanner, e.g. on www.antivirus.com ("free online scan").

Since I wiped my hard drive and reinstalled the software, I first updated

Norton AntiVirus, enabled Auto Protect as always, and did a complete system
scan. I also ran Symantec's FixBlast tool and followed a friend's suggestion
to use HouseCall. None of these turned up any Blaster virus, but HouseCall
did identify and clean one instance of "malware.worm_nachi.A" that Norton
did not catch. I have also run Ad Aware. After all these virus-checking and
cleaning efforts, the problem reoccurred at the next opportunity, so I ran
the Norton system scan again and again found nothing.

Bottom line: not finding a virus to explain this problem, have done the

disk formatting and service pack installation, etc. Am I at a dead end?
Please advise...

 

[Guest]

Thanks for your help. I had run the online scan from antivirus.com (HouseCall) and it had found nothing. However, after all the failed scans and applications of FixBlast, Norton AV did give me a couple of "found Blaster worm at c:\windows\system32\tftp2080" so I rethought the virus angle. After installing a Microsoft security update (per Security Bulletin MS03-039), the problem finally went away (several hours of unimpeded online activity so far)

For everyone's benefit, I think the following link provides a good set of steps to take even if the worm escapes detection as it seems to have been doing with me: http://www.microsoft.com/security/incident/blast.asp. I would have been much better off ignoring the lack of results from virus scans and taking action on the assumption that the worm or its effects were indeed there

Your help has been a great blessing -- thanks again