sychost problems

[simon]

Hi.

I'm having a "sychost" problem on my machine. I'm running
Windows 2000 pro on a pentium 733, with no service pack
updates, although I do have IE6 installed but this doesn't
seem to make a difference if I uninstall it.
What happens is: When i go online everything is OK for
about 2 minutes until I get the error message:

"sychost has generated errors and will now close". Event
viewer tells me "The Remote Procedure Call(RPC) service
terminated unexpectedly. It has done this 1 time(s). The
following corrective action will be taken in 0
milliseconds: No action."

This results in: Most links don't work, popups don't work,
loading another web page takes ages, java errors, can't
disconnect, can't reconnect, can't move icons anywhere on
the computer, the contents of the control pannel folder
move into a scrolling sidebar, the contents of the windows
folder disappears completey. I'm sure there's other
effects that I just haven't noticed yet. After restart
everything back to normal.

It maybe coincidence but the problem started after a
failed attempt to network to one other machine using my on
motherboard 82559 Fast ethernet LAN. It dosen't seem to
make a difference to the problem if this is disabled or
not and the failed network connection has now been deleted.

Usually I would have reformated my system disc, install W
98 before installing W 2000 and setup a nice new system.
For some reason I'm unable to do this too. Either this is
because I've forgotten how or there's something wrong. My
win 98 boot floppy won't let me format drive c: I've done
it before several times; What have I forgotten? So I
installed another Win2000 system (dual boot), very basic,
the problem is still there though in the second sys. Does
this mean its a hardware problem?

Today I went out and bought a copy of Norton SystemWorks
2003. This has had no effect. Norton stops working once
the Sychost error has been generated.


Hope someone can help!

many thanks in advance.

Simon

 

[neo [mvp outlook]]

You have picked up the Blaster, Welchia, or Nachi worm. You will need to
get a minimum of SP2 + security hotfix 824146 applied.

To get yourself cleaned up from the worm(s), you will need to download the
cleanup tools from Symantec (http://www.sarc.com) and boot your computer
into safe mode. Run the clean up tools for Blaster & Welchia. Reboot and
apply SP2 + the security fix while the computer is offline from the network.

 

[Raymond Lang]

-----Original Message-----
You have picked up the Blaster, Welchia, or Nachi worm. You will need to
get a minimum of SP2 + security hotfix 824146 applied.

We still have several folks in our facility reporting
constant svchost.exe errors. All of them are at SP3 with
all available hotfixes, have running and updated virus
software, and have been checked for MSBlast/Nachi. All of
the machines are reporting clean as a whistle, yet they
all constantly fall flat on their faces with this error at
random times of the day.

I have yet to see a fix for this. A suggestion to go to
SP4 does not fix it, as we continue to see it happening on
the test system. It does not happen to every user, but
just certain ones. So far we've heard nothing from
Microsoft on a fix.

-Raymond Lang
End User Support
The Boeing Company
Ft. Walton Beach, FL

 

[Wolfgang Kaml]

I have been running the Blaster, Welchia, and Sobig
Removal tool, non of them was finding any virus. Also,
Norton reports the system as clean as well. Running SP3.

Searching in the dark ... sounds just like Microsoft...

Raymond, have you found "Windows 2000 Hotfix - KB824146"
in the list of "Currently installed programs"
in "Add/Remove Programs" (Control Panel) as well?

Wolfgang

 

[me_here]

do any of your programs require
dcom to be active .. in my experience none so far do .. so you could try
steve gibsons decombobulater and see if this problem stops .. it also
reenables DCOM if you need it www.grc.com decom being the vulnerable
service used by many worms .. it seems to me it's residing somewhere locally
good luck