Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Hey all,
I have a problem that is bugging me and is getting really annoying. When I dial-up to the net I get this error that says something like...'svchost.exe has generated errors and will be shut down the program needs to be restarted' or something like that. Now before anyone goes gets a link to a microsoft page that says try this and that...I have already tried that one and it didnnt work.
To my knowledge it is caused from some novell software called group wise...the thing is that I have never installed this program and so I dont know where the error is coming from and how to fix it.
I have tried format and reienstall but that didnt work...it still comes up. I have tried putting XP Pro on my computer and that well...just shuts down my computer ever 10 minutes. I dont know what to do. I am at a loss. I could go back to 98se....but I dont want to do that.
If anyone has any suggestions or things for me to try...that would be soo cool.
Is it possible that its a sever side thing to the company that I am dialing up to?
Lymel

welcome to the blaster worm!! since no one is helping you i will. this thing drove me crazy also. first, when the pc boots up (winxp) hit ctrl+alt+delete to stop it from shutting down. if you are on win2k, when the pc boots up to the desktop, hit ctrl+alt+delete and go to process-image name-and look for msbalster.exe. click on it and hit end task. this will stop it from activating. with this done, go to msn.com or msnbc.com. they have an article about the blaster-lovesan-billy worm. they have links to sites with fixes also. i recomend symantecs fix called fixblast.exe. I used to remove the worm and i am up and running fine. i hope that helps you out.

Hey thanks for that....I think my computer is ok now :).
I never thought that a virus could do something like that....I am guessing that they are getting more clever huh.
I am not sure if that was the prob...but I ran the microsoft fix and all seemed to work just fine.
Thanks again.

Hi guys.
I appear to have exactly the same problem as Lymel, but having followed Joe's advice, fixblast.exe detected no worm!
I have the latest updates of Norton installed and scans reveal nothing untoward.
One thing though, I haven't updated with the microsoft patches because my old panasonic kx-p6100 won't work with them.
Any ideas?
Cheers

I too am having the same problem and like CeeJay, fixblast.exe detects no worm. There is no msblast.exe file running either. However I still keep getting the svchost.exe error message.
Please help!

I'm at the same stage as many of you, except possibly worse in that I've tried downloading and running the Symantec tool and the MS patch, only to be told that I don't have a high enough level of Service Pack on my machine. I spent several hours trying to download Service Pack 4 last night, to find my Internet connection kept crashing. I've just ordered a CD for this, but am told I could have a 2-3 week wait! Is there any chance I will be able to solve this worm problem in the meantime - it's playing havoc with everything, and I can't even use Excel...
Please help!
Sue

Remove virus if it is there.
Patch system with this microsoft patch.
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp
If nothing else, it should help to prevent the virus.
Gary

hi all
i also seem to have a problem with the msblast.exe.
in the taskmanager i saw the msblast.exe was running.
i downloaded the fixblast.exe and it detected 1 worm.
i thought my problems would be over by now, but it seems like i still have problems with internet explorer and my filebrowsing. photoshop i also slightly buggy.can anyone give me some tips?

just to clear things up...If you dont load the proper patch from microsoft after you to the fixblast from symantec you will not remain protected!!!!..... it important to do both other wise you will not keep the problem from happening again.... after you do both of those... upsdate your virus program to the latest definitions (I will just assume we all have virus protection)

Hi,
In my case, the Norton Antivirus has been detecting the worm automatically, while the machine is on and connected to the net. However, the SVCHOST.exe crashes after the virus has been 'cleaned'. How is it coming in, I fail to understand, as I have just visited Google and other such trusted sites, and not opened any attachnments on the comp. Should I download the remover utility and de worm the machine ?My system has 2000.
Thanks,
Rajeev

Same thing happened to me with my win2k. I received a msg like "Svchost.exe has generated errors and will be shut down" after which search, copy etc didn't work. Booting up solved the problem, but after a few minutes it happened again. I checked if my pc has the worm, but no: 1) there is no msblast*.* file anywhere in the PC.
2) Auto run is not in the registry
3) Task manager shows there is no msblast program running
4) None of my files contain the string "Love you san".I fixed the problem with the Microsoft patch. After that I keep on receiving these warning msgs from my firewall (Sygate) about the RPC ovetrflow attempts. Usually I got about 1 warning msg per day. Now I get one in every five minutes.
Could it be that even though you don't have the worm, attempts to penetrate your system cause svchost to crash, making your PC dysfunctional?

Like many of you I am running win2K and am having problems where I was originially getting the svchost shut down message but could find no trace of msblast in the processes panel. Also my computer has not been shutting itself down (yet) but is really unreliable - can't open IE in new window and my Outlook isn't working properly and I get script errors when I try and use Add/delete programmes. Also my Norton Anti-virus has failed and says please install. Anyone else having similar problems? Can anyone help?

I downloaded symantec fix, but nothing was found. Search for alllllllllll lnown names as msblast.exe, msblast*.*, and many others listed on symantec and trend sites. But nothing was found, I actually found the msblast in the registry.
NOW NOW I found the new name! It's DLLHOST.exe located under %SystemPath%/System32/wins, wich measures 10kb compared to the 8kb of the original dllhost.exe (see the difference between capital and lower letters also), which also contains a SVCHOST.exe which is actually TFTPD.exe only renamed!!!! WOW!!! I FOUND A NEW VERSION OF THIS F@#$&$%&/&(ING WORM!
This creates serious calls to itself into the regitry under the appearance of RPCPatch (I haven't downloaded anything of this yet). Apart than the one located under the Internet explorer registry (msblast) search for it and you'll find.
Please confirm my teory and if true spread it. I believe it's a new variant of the worm.
Help, I must agree in something with this worm "Billy, stop making money and FIX THIS S.H.I.T.!"

![]() |
Unable to drag/drop copy/...
|
Editing Registry in Repai...
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |