To whom it may concern; I have recently got a svchost.exe error, *and the same problem exist even after i reformatted the whole hard drive... (I reformatted my c-drive many times already, but the same program error is still there!) here is the error message and the problem: message: Program Error svchost.exe has generated errors and will be closed by windows. you will need to restart the program. Ann error log is being created. problem: every time I connect to the internet, this error message will pop out within 5-10 minutes, then I can't get to the right URL in address bar, the copy and paste function won't work, links in e-mail address doesn't take me anywhere... and I can't even open the search file from start. these symptoms continued untill I restart the PC. But, once I connect to internet... the same proplem occured within five to ten minutes. my condition: PC, P4 1.7 GHZ, 256 DDR Ram, windows 2000 professional, using ie and out look express. DSL connection with an external DSL modem. Could someone please tell me how I can get ripof this problem once and for all? (...other than buying a new PC though... >_.) Thanks, and I wish all well. L.L. p.s. I tried to delete the svchost.exe file through regedit... but teh one as defult can not be removed... ?

0

The svchost error occurs (and other problems as well) when your PC is "harassed" by another PC that is infected with w32.blaster.worm (even if your PC is not infected) if you lack the Windows patch for RPC buffer overflow. Get the Windows patch. Go to microsoft.com & click on "Update: Actions for Blaster Worm", or hurry to www.microsoft.com/security/incident/blast.asp. Hmmm, I wonder if your PC will stay alive long enough to download the 898KB file. If not get a buddy to download it & burn you a CD, or buy & load a firewall and set it to block certain ports as described on the Microsoft pages on this worm. A firewall will keep the worm from bothering you while you get & apply the patch.

0

Yes, a firewall is what you need, and everybody should get one ASAP. Block tcp ports 135, 139 and udp port 69. That will stop this worm dead.

0

Removal of the virus does not fix the damage. Remove the virus and then run the following Microsoft patch. http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp

0

i ve put a downloadable zip in my shared folder on kazza for people who are having problems with links called msblast.zip

0

Heres something that may be useful if you're having resource problems even after deleting the worm: Suggest replace wscript.exe Reason: The worm even if deleted seems to also have already created subprograms [don't know where] which will still start wscript on bootup causing 99% CPU usage creating system problems. If you get rid of wscript then at least your system resources will be not be used up. This is how you get rid of wscript.exe: WFP will pop up an alert if you try to delete/rename a dllcache'd file like wscript.exe on Windows 2000 Professional So you overwrite it with another file. Suggest copy notepad.exe to replace wscript.exe c:\winnt\system32\dllcache\notepad.exe c:\winnt\system32\dllcache\wscript.exe copy c:\winnt\system32\dllcache\notepad.exe c:\winnt\system32\dllcache\cscript.exe copy c:\winnt\system32\dllcache\notepad.exe c:\winnt\system32\wscript.exe copy c:\winnt\system32\dllcache\notepad.exe c:\winnt\system32\cscript.exe WFP is not intelligent enough to know when one protected file is overwritten with a copy of another. This way, even with the file associations still intact, your users are safe. In fact, better than safe - now clicking on those .vbs attachments will pop a lot of ugly-looking code up in a notepad window! That will give them a scare, and they'll give you a call - which gives you a chance to find out how and where .vbs files are getting in in the first place. Notice that this sequence of commands should be rerun after every application of a Windows service pack, or a patch that affects wscript.exe or cscript.exe, etc. I don't believe any legitimate uses for either wscript.exe or cscript.exe exist other than an Administrator calling it directly from the command line. This will not get rid of the svchost error - you need to install the patch to do that: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp If anyone though knows where the subroutines are that pop up wscript.exe on bootup [even when the worm has been deleted] that would be helpful. regdz fletch

0

Thank you all, i really appreciate your kindly help, thanks. ^_^. cheers, and i wish you all well. L.L. (p.s. it's now over an hour, and the svchost.exe error message didn't show up... now i am once again a happy cat. thanks. ^_^.)

0

Me too. A happy cat. Ran the patch, didn't install the firewall though (too hard to configure). First time on this site. This is great. Thanks everyone. TT

0

Expert Double D Me2 Alrite let me explain this bull $h!T aigh neways Their is this little worm virus called the Msblaster worm if u got windows 2000 or Xp u will have a good chance of getting the worm the worm will save on ure hard drive and will spread my advice to yall is to first make sure u got the worm one wayt is to use NAV another is to c if u have ne1 of the symptoms below Symptoms: -U cant drag files -U cant copy or paste - Your Contorl Panel is screed up - If it says u have Low memory and cant preform a task -When u pres Ctrl Alt Del and click Task Man u find sumtin like MSBlaskter If u have neone of those things i advice u to get a anti virus program. If now possible try to download the worm removal kit. After deleting the worm in stall the patch at the microsoft website (www.microsoft.com) IMPORTANT: The damage the worm did on ure hard drive wen it was on utr HD will still be their if i were u i would get Service Pack 4 which can be found in Microsoft Website. After installling it all ure corrupted files should be back to normal. People who have warranty ask the person to format ure computer it would be smart and wont have to go threw hours of work. I myself have got the virus out of my computer and 2 of my friends and my cousins. If u got nemore questions about the worm post ure message and if u want a responce bye me type "Double D me2" And ask ure question i will respond every hour

0

I am on Win2K. Since Wednesday or Thursday, I have received the error message "svchost.exe has generated errors. . ." every time I began using Internet Explorer. After that error prompt, I could still search for things or look at pages on the internet but anywhere from 25-30% of elements would be unavailable--meaning I could get a web page up but could not access their dropdown menus or select a link. This was also happening on my desk top (icons would not activate, drop down lists were dead, etc) thereby requiring me to restart the entire system in order to get everything back and usable. I downloaded the Service Pack 4 and the worm patch from Microsoft's website and installed. I then installed the worm patch. On a 56K that took a few hours so I let it do its thing while I came and went. I also updated the latest through Norton and did a system scan. I have been using my IExplorer nearly all day today and have not yet run into the same error message that has plagued me for the past several days--usually from the first few moments I open up IExplorer. Hope this helps some of you.

0

Hi everybody, First of all thanx for everyone that helps about the "svchost.exe error" by the worm. I get rid of the symptoms of the worm by installing Win2000 service pack 4 and the patch from http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp but I wanna ask a question: Is installing servicepack 4 and the patch from the microsoft page enough to remove the the worm from the computer or prevent the worm's hazardous effects? or it is just a filter for svchost.exe error... If it is not removed or the other effects are not prevented what can be done? I think jus2pure said about a removal kit, what is that and where can we found it? Thanks again for sharing your knowledge...

0

The best way to kill svchost.exe problem and MSBlaster: .INSTALL LINUX. I think that Micro$oft will never open the windows source code because it's plenty of bugs... and will be a shame.. hahaha

0

After 2 years or so running Win 2000 my system became so corrupted and nonfunctional that format and reinstall was the only option. Now I have just formatted the hard drive after days of data backup - and within 2 mins after reinstaling Win2000 I open IE to download windows updates and get the svchost.exe error. I dont care whether this is a virus or just general microsoft software "features" but as I cannot actually download any updates due to the error basically the only thing I can do with my Win2000 disk is throw it in the bin. Luckily I never paid any $ for that heap of $#!* anyway. Who seriously pays for software like this that doesnt even function after three years use? How long will it take for Microsoft corp to crash and everybody realise there are better options? Microsoft isn't even compatible with itself. I've never paid $ for a piece of Microsoft software yet and never will.

0

to solve "svchost.exe", Update to window service pack 4or above and install ZONE ALARM, problem solved!!!

0

Trying not to sound like a broken record here but the things that they are saying are true. I was having the same svchost.exe error, I found this and many other websites and the predominant suggestion was to: A)Update windows to service pack 3 or higher(stop whining I got it done and I can't connect higher than 26.4 KBS! It takes a while but it's totally nessesary!). B)Download the patch listed in bulletin MS03-026 C)Use a fire wall to stop this from occuring again. I have been working on this since last night around 11p, it is currently 4:24p and I have not had the svchost.exe error. It has been 45 minutes since logging on now. I know it sounds like a lot of grunt work....but you have to update, you have to get the patch....it truly is the only way.

0