I had the every each symptom that susey here talked about. I ran the norton antivirus with the last updates (god knows how I downloaded it) also I used a free software named "fixblast". A free software from the symantec corporation, especially designed for w32.blaster.worm virus but none could find the virus. Do any of you think that it could be something else? I also tried to download the last updates for win2k but thanks to the crashing internet explorer I was unable to do it. Do you think it would help had I been able to download it?

0

Susey says, "Just uninstall the lot and start your windows from scratch". Well you seem to be taking it in stride. I, too, have this "svchost.exe has generated errors & will be closed by windows" message. With a fresh install, what's to prevent it from happening again?

0

I've just done a complete reinstall of windows2000 because of this message, including a reformat of the partition. less than a minute into some online time to download an antivirus update, the error message popped up again. so much for a reinstallation. By the way, I tried a simple reinstall of Win2K before going to this extreme measure and the reinstall was completely fubared. Never seen anything like it. I'm currently online using my Linux OS. tim

0

Having exactly the same problem. scvhost error every 5 minutes and everything stops - no cut, paste copy, no outlook express and all kinds of things not working. Have tried the blaster removal tool from symantec - but nothing was found. Is this some new virus ?

0

The same problem as tim. win2k with no sp installed. I have tried the fixblast from symantec and it didn't detect any virus. I have reinstalled the system (removing and creating the NTFS partition) and a few minutes from connecting to the internet, the message is shown. Then the usual sympthoms: no drag and drop, etc. Besides, svchost.exe process spread along 6Mb of memory, three times the memory it used to use. Does anyone know something about this bug/virus?

0

I have the same problem, but you know what, I think, that problem is generated by norton, who here has norton antivirus or norton security, I bet you that all of you, so, symantec has the power to send you that problem by internet by any reason, no upgrade the software or other Why I am telling this, because I installed norton security 2002 last year and the expiration is aug/28 and didnt renew the software after that I started to get the problem

0

nice conspiracy theory, but no, we don't all have Norton.

0

I have read that the ms patch semms to work. My problem now is that SP2 is needed to install the patch, and, you know, a dial up connection, at least 100 MB of SP... I think I'll (and many of us too, I guess) have a lovely weekend. By the way, I had no Norton antivirus installed.

0

You know what irks me (besides getting a friggin virus?) is the over complicated documentation on how to kill the damn thing. After reading both Symantec and Microsoft's sites, I still needed to find a simple way to remove the virus. There was 'some' good info buried within all the words, but then I found this site which clearly points out what to do: *************DO VISIT www.microsoft.com first. On their homepage is a downloadable fix or patch that you will need*************** THEN CHECK OUT THIS SITE....................IT HELPED ME.......................... http://www.sophos.com/support/disinfection/blastera.html (THANKS, SOPHOS!) YOU MIGHT WANT TO VISIT THE SITE. THEIR STEPS TO RESOLVE THE PROBLEM APPEARS TO HAVE WORKED FOR ME. HERE IS AN EXCERPT: ==================== How do I remove W32/Blaster-A manually? To remove W32/Blaster-A manually on Windows 95/98/Me and Windows NT/2000/XP: ensure you have installed Microsoft patch MS03-026 and implemented as many of the steps mentioned above as is feasible. press Ctrl+Alt+Del in Windows NT/2000/XP click Task Manager and select the Processes tab look for a process named msblast.exe in the list click the process to highlight it click the 'End Process' (in Windows 95/98/Me 'End Task') button close Task Manager. Search for the file msblast.exe in the Windows system folder (usually a subfolder of Windows or WINNT) and delete it. In Windows NT/2000/XP you will also need to edit the following registry entry. The removal of this entry is optional in Windows 95/98/Me. Please read the warning about editing the registry. At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens. Before you edit the registry, you should make a backup. If in doubt, contact your network administrator. Incorrect editing of the Windows Registry can cause system failure. Locate the HKEY_LOCAL_MACHINE entry: HKLM\Software\Microsoft\Windows\CurrentVersion\Run in the righthand pane select windows auto update = msblast.exe and delete it if it exists. Close the registry editor. You should reboot your computer and repeat the above process to ensure all traces of the worm have been removed from your system.

0

All the same problems, I tried the re-install, having convinced myself it was not the balster worm, I even had SP4 loaded. All the symptoms are the same, once you connect the message pops up, the internet is then 1/2 paralysed, most of the links are not possible. On email you cannot reply as you get out off memeory messages, and in explorer, you lose the ability to cut and paste. I have downloaded FixBlast from Symantec, it said it found an infected file, but even after this, no progress. I am now going to switch the sodding thing off until Tuesday!. Any other ideas.....please!!

0

I agree with Larry, I ran the RESOLVE exe from Sophos.com and it seems to have removed it (from both my drives). I could then go to the Microsoft site and run the Patch MS03-026 (and do all those things i could do b4 like copy and paste, click links, etc. Simple, NO Windows re-installs, just 2 steps Thanks Larry and thanks Sophos

0

I wish I would have seen some of these comments and especially the very clear and concise procedure outlined above by Larry before I invested so much time in this. However, while the Symantec tool says it didn't find it, running that and then installing the MS patch as per Security Bulletin MS03-026 "seems" (knocking on wood) to have driven out the devils from within my McAfee "protected" machine. Thanks to all.

0

Great, TechC-- Glad it worked. I also trust that you 'searched' your machine for "msblast" and checked the REGISTRY (as mentioned). This ensures that all remnants of the worm are removed. Periodically, I'm still doing a quick search on my machine for msblast.......... and I'm still in the clear. Good luck to all. Larry

0

I have been fighting(!) this virus for some time now. Though I am beginning to think that I have not been infected in the first place. The reader may wonder how someone would be fighting a virus which has not yet infected him. Well what led me to such a thought is an article I read at the windows update site. The article has been written by the microsoft pros so I have my full confidence in it. İt stated that continuous system craches could still be a result of the virus which has not been able to enter the machine but has been trying to enter the machine through some port. This also complies with the fact that neither fixblast nor norton av nor pc-cillin have been able to fnd a trace of it on my computer. So what I did was this: 1- I first downloaded the program "tiny personal firewall" from download.com then set the settings to close the ports as larry from the forum http://www.computing.net/windows2000/wwwboard/forum/50456.html has explained 2- then I downloaded the windows updates. 3- everything is working fine. Don't let it slip your mind that the virushas never been found on my computer. İf ny of the aforementioned programs have detected anything then I guess it should first be cleaned, the machine hardbooted and then tried to be protected against a ny virus attack. also don't forget to visit the forum 50456 that I mentioned above. I would be happy to learn if this information has been helpful to anyone. thamks;

0