Help! svchost-errors...?

[RichB]

Help please guys!

This last few days I keep getting a pop-up telling me that "svchost has generated errors - you will have to restart the program"

Not noticed much else going wrong though?
Anyone know what is wrong and is it easy to fix?

Cheers Rich...

[plotloss]

Run a virus scanner...

If you already have, are you using W2K or XP, if so, what do the logs say?

[RichB]

Hi Matt, I ran a full virus check last night and found nothing. I'm running Win 2K but haven't looked at the logs, perhaps I'll get my techie mate ot take a look at it! That stuff's all black-magic to me Rich...

[Roadrage]

svchost - svchost.exe - Process Information
Process File: svchost or svchost.exe
Process Name: Service Host Process
Description: Application that works as a host process for services that run from dynamic link libraries.
Company: Microsoft Corp.
System Process: Yes
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): No
Common Errors: N/A

[GregE240]

Couple of things:

1) Machine is infected with Blaster worm - go into Task Manager and see if a task called msblast.exe is running. End it, run Regedit and remove the following:

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun: msblast.exe

Delete file msblast.exe from C:windowssystem32

2) Apply MS Patch MS03-026 (KB823980) - this may fix it.

3) Also apply SP4 if not already.

Get back on here if still a problem.

Cheers,

Greg

[Plotloss]

Thats what I thought, but wont a virus scan pick it up?

[GregE240]

Maybe. Maybe not, Matt.

My moneys on the hotfix

[agent006]

Plotloss said:

Thats what I thought, but wont a virus scan pick it up?

Depends if the definistions have been updatd since 1997.

[RichB]

agent006 said:

Plotloss said: Thats what I thought, but wont a virus scan pick it up? Depends if the definistions have been updatd since 1997.

What the virus definintions? It's updated from Symantec daily - used to do it weekly but seems daily is better these days. :-( Rich... I'll take a look in the register to see what I can find. Err... Rich...

edited to add, just took a look and no msblast.exe running. And coincidentally the pc has been running ok today. It's all black magic I tell you!

>> Edited by RichB on Thursday 11th March 18:46