Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I've recently got problems with pop-up windows saying either "explorer has generated errors and will be shut dowN" or "svchost.exe has generated errors and will be closed down by windows". I usually get these messages shortly after I've connected to Internet.
Both or one of them causes following errors: I can't close down my Internet connection. I
can't write an email through Outlook Express cause another popup says I'm running out of
memory when I try to open a new mail. Opening for example control panel shows another design than usual. Copy and paste between my harddrive and anything online does sometime not work. I have Windows 2000 Pro with SP4 and Internet Explorer 6.0 Sp1. Please help me with this irritationg problem. There are no more upgrades, are there??

This is what is attacking you
http://securityresponse.symantec.com/avcenter/security/Content/8205.html
http://www.microsoft.com/technet/treeview/default.as
;`(
It got me yesterday. Personal firewalls,
like PGP corp desktop, do offer _some_ protection,
but I've seen heavy attacks even
crash the firewall, requiring its reinstallation.
Maybe I just need to configure the firewall
better, though.See the following two webpages:
http://securityresponse.symantec.com/avcenter/security/Content/8205.html
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp

Hi.. I discovered that I also hv the same problem. I had tried running the patches, but it only applies to svc pack 2 and above.Well, I didn't upgrade its svc pack and don't intend to temporarily, do you think there'd be an alternate way to remove the worm? Pls help...
my email is maxtro@lycos.co.uk. your help is truly appreciated.

Same problems with my PC (win2000 pro)
With this patch now it works fine.
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp

I have exactly same problem. Have been suffering for last 3-4 days, not realizing it is virus attack. All of you have been a great help, THANKS a lot!
I have same concerns as John's. What to do if I don't want to apply service packs 1 and 2? Mainly because downloads and installation will take hours.
Any help is appreciated!
Thanks again.

Agent Smith got me too...but I havent finished with him yet!!!
Go Here:
http://vil.nai.com/vil/content/v_100547.htm
It has a very detailed explanation regarding
the worm.It also tells you how to remove the $%@$%er manually. Unfortunately you need to install service pack 2...which is what I am downloading at the moment....on a freakin 56K internal laptop modem...... >:(
I can't find any other way... the patch fix for this worm released by microsoft requires Service Pack 2 wich sucks in my case, as it will @#%%$% up my documentum client. Fortunately though, there is an option to create SP2 uninstall files which you can run later once you have erradicated Agent Smith... ;PDont forget to remove any TFTP files in sys32 and also msblast.exe.
You also need to edit the registry. The above link explains how to do all of this manually.Cheers!
Neo

I had the warm, I have defeated it! Yeah!
As you know, more detailed info about this warm are on http://vil.nai.com/vil/content/v_100547.htm which mentions 2 ways to get ride of the warm: one is automatic with the patch + the Datfiles and one is manual listed below (and that's what I did):
Apply the MS03-026 patch at:
http://microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532-3DE40F69C074&displaylang=en
Reboot
Terminate the process msblast.exe
Delete the msblast.exe file from your WINDOWS SYSTEM32 directory (typically c:\windows\system32 or c:\winnt\system32)
Edit the registry
Delete the "windows auto update" value from
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Runand Voila', I don't have the virus anymore.;-)
After that I even installed a personal firewall which was suggested by microsoft (OutpostInstall.exe) it's free.I am not sure if you can do this withouth having SP$, but I think so, just try!

All you guys,
THANKS A LOT !!!
I got rid of the blaster worm. By the way, domenico, is outpost firewall doing ok according to you ?

Oh dear God I have the worm too, and I didn't realise it was a virus at all!! Does anybody know if it will destroy any files, especially word files as I have had to re-install word?

THANK YOU SO MUCH FOR THE HELPFUL information and links. We have been struggling with this terrible virus for a few days now... trying to repair and salvage the machine. You saved us from reformatting our hard drive.
PS - doesn't creator have better things to do with their time than create worms/virus??? get a life.
thanks a bunch.
cheers
padawan

As soon I go online, I get message " svchost.exe has generated errors and will be closed by windows.You will need to restart the program".I installed a Semantec firewall and executed Norton Antivirus SW.I have installed Welchia.exe and executed. It removed Blaster & Welchia viruses. But still I get the above message.Few days back the cut, copy & pest functions did not work.Do I need to install any patches? Pl.advise. Your help is greatly appreciated.

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |