Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Shortly after going on-line, a
dialog box appears: "sychost.exe
has generated errors & will be
closed by Windows. You will need
to restart the program. an error
log has been created."After that, certain buttons on web
sites no longer function, for
instance the LOG-ON button on my
bank web site. Most other
functions of web-surfing are OK
though. When you try to
disconnect, the icon in the tray to
the lower right will not enlarge
nor allow you to disconnect. Only
by shutting down the computer can
the phone line be disconnected.Booting up and reconnecting, the
same scenario --everything works
fine until the error dialog box
quoted above shows up in a few
minutes.I have tried to find the file
sychost.exe, but searching in
Windows Explorer cannot find it. I
thought maybe this problem had to
do with Internet Explorer, so I
downloaded the latest enhancements.
This had no effect. I downloaded
Netscape, and used it as a browser,
but again no effect on the
sychost.exe problem. So it must be
something in windows 2000 program
itself.Thanks everyone for your thoughts.

I have exactly the same problem, but surely you mean svchost.exe?
I'm not a computer guy, so I don't know what that program does; however, I suspect the problems are caused by this "blaster" worm everyone's talking about f---ing up the registry.
I've installed Norton anti-virus, and used Symantec's removal tool (available from http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html), both of which tell me that my computer is now free of W32.Blaster.Worm, but the problem persists. Any suggestions would be gratefully received. Thanks.

Have someone get and burn service pack 3 and service pack 4 to CD for your Win2K system other wise you are SOL or you may have to have them send it to you on CD.
you may be able to go to www.panda.com and run the on line antivirus to remove the existing problem ,go to task manager and look for msblaster.exe and end task also end task on dllhost that might solve partially problem till you can get and install all patches.
Also check your error logs under computer management you will find some indication of what has failed to run or is being shut down
If this does not work post the error messages that show and the time stamp in relationship to each problemDon't forget to restart in a last good boot mode also remember to run chkdsk/r grom the command prompt on all your drives that might help clear up and repair existing problems
contributing to your misery.Still one more method would be to extract and replace the offending svchost.exe from
the original CD which may then enable to avoid reloading windowsgood luck I am researching this and ,may have more to add in the next 12 hours

Here are more related bits and pieces culd from many sources
Q. Why are there so many copies of svchost.exe on my machine?
A. Svchost is a generic host process that hosts services run from DLLs. During development, it's customary to separate new or changing services to increase the reliability and ease of troubleshooting; thus, on a beta OS version, you see more svchost processes running than on a release version.
To find out what's inside each copy of svchost.exe, use the Resource Kit Support Tools' tlist.exe (with the -s switch). (You need to install the Support Tools from \support\tools on your product CD-ROM; they don't install by default.) Below is sample output from the tlist command:
C:\>tlist -s
0 System Process
4 System
176 smss.exe
208 csrss.exe Title:
172 winlogon.exe Title: NetDDE Agent
256 services.exe Svcs: Eventlog,PlugPlay
268 lsass.exe Svcs: Netlogon,PolicyAgent,ProtectedStorage,SamSs
320 svchost.exe Svcs: RpcSs
420 svchost.exe Svcs: AudioSrv,Browser,CryptSvc,Dhcp,dmserver,
EventSystem,FastUserSwitchingCompatibilityServices,helpsvc,HidServ,
lanmanserver,lanmanworkstation,Netman,Nla,Schedule,seclogon,SENS,
ShellHWDetection,TermService,ThemeService,TrkWks,uploadmgr,W32Time,
WmdmPmSp,wuauser
480 svchost.exe Svcs: Dnscache
500 svchost.exe Svcs: LmHosts,Messenger,RemoteRegistry,SSDPSRV,WebClient
544 spoolsv.exe Svcs: Spooler
660 DKService.exe Svcs: Diskeeper
800 svchost.exe Svcs: winmgmt
1092 explorer.exe Title: Program Manager
1244 ctfmon.exe Title:
900 ISATRAY.exe Title: IsaTray
1344 NAVAPW32.exe Title: Norton AntiVirus Auto-Protect
1212 FRONTPG.exe Title: Microsoft FrontPage - D:\asp
www.ntfaq.com\NTFAQ\5apr2001.htm
428 NAVAPSVC.exe Svcs: NAV Auto-Protect
1376 ALERTSVC.exe Svcs: NAV Alert
1372 PowerDVD.exe Title: PowerDVD
444 OUTLOOK.exe Title: Tasks - Microsoft Outlook
1268 msmsgs.exe Title:
1436 MDM.exe Title: OleMainThreadWndName
632 WINWORD.exe Title: DDE Server Window
1404 IEXPLORE.exe Title: Q250320 - Description of Svchost.exe -
Microsoft Internet Explorer
1348 cmd.exe Title: E:\WINDOWS\System32\cmd.exe - tlist -s
1428 tlist.exe
Many services, drivers, and modules load at system startup and are essential to system operation. Even though they show up in Task Manager, they're still critical.The svchosts are defined in the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost.
Some sucess stories in clearing the problem
http://www.annoyances.org/exec/forum/win2000/t1060646378
Well, you need to do the following on the particular svc that is tying up your resources to see which program is involved:
To view the list of services that are running in Svchost:
Click Start on the Windows taskbar, and then click Run.
In the Open box, type CMD, and then press ENTER.
Type Tasklist /SVC, and then press ENTER.
Tasklist displays a list of active processes. The /SVC switch shows the list of active services in each process. For further information about a process, type the following command, and then press ENTER:
Tasklist /FI "PID eq processID" (with the quotation marks)Then you should at least know what the culprit is.
also you might find
If you don't use Windows messenger and you think that is what is causing your svchost problem you can do one of two things.
1. Close windows messenger and go in your program files folder and rename the folder named Messenger to Messenger Backup
OR
2. Just delete the Messenger folder if you are sure you are never going to use it.
This may or may not solve your problem but everytime you load outlook windows messenger loads again. This solution never lets messenger load again until you rename the folder Messenger. This also lets you save memory.

I've sorted my problem out - perhaps this will help OFG.
There is a patch called Windows2000-KB823980-x86-ENU obtainable from http://www.microsoft.com/security/incident/blast.asp, but I couldn't run it initially because I hadn't kept up to date with service packs.
I downloaded the latest service pack SP4express_EN.exe from http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=dc27b8c6-2a5a-4399-ad3d-4a97a25f41d9 and installed it, thinking that was it - job done. Unfortunately the problem OFG describes was still there, however, after then running the patch all seems to be going just fine :0).
If you go to http://v4.windowsupdate.microsoft.com/en/default.asp you can find out which bits of microsoft stuff you're missing.

This is the MBlast Worm. If you look in your Admin Tools-Event Log you will find problems with DCOM and the Service Manager.
Go to this URL that has the fix for this.
http://www.datafellows.fi/download-purchase/tools.shtmlHappy Trails
&
Have a Fine Microsoft Day

Updated URL for the above fix...
http://www.datafellows.fi/v-descs/msblast.shtml
Dave L
Have a fine MS Day

remove the virus and run the microsoft patch listed here....
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |