Tom's Guide | Tom's Hardware | Tom's Games
 |
 |
 |
Hi guys I have exactly the same problem! I have the svchost.exe...Ive installed the patch and ran the tool from symantec to fix it but when I got to task manager its still there and getting bigger...if you do find out how to overcome this please post the results or any suggestions, please please all help will be welcome thankyou!
svchost.exe is a normal windows file. The existance of it does not mean you are infected. The virus is called msblaster.exe.
You will always see svchost.exe, or possibly several of them depending on what you are doing, in the task manager.
0 
I have Windows 2k, and I have that virus, I get the same message about how svchost.exe has generated errors and will be closed, now I think mine is worse since Norton seems to not be working at all, I need to know what I can do about it or is my only choice to format the whole computer?
0
I just formatted my computer and when I plug in my LAD I get the message that svchost.exe has generated an application error. When I check the application log (after I unplug the LAD and restart) it says that DrWatson is the source of this. Is this a virus or is it something else? And can anyone help me fix this? It just started about 2-3 days ago.
0
I would try removing the worm manually. About 2 years ago our company was hit with the SirCam worm (the first month I began IT work ...). I ran both Norton's and McAfee's tools multiple times but the file was never removed from the registry plus it hid out as a hidden file in the recycle bin. Emptying the recycle bin wouldn't even get rid of it, you had to hit delete from inside the recycle bin. It also resided in the rundll32 file. Point being, it probably had become more sophisticated and adapted by then, thus as hard as they tried to keep updated, the removal tools are not perfect and not preemptive.
Norton's/Symantec has a good description of how to manually remove it but be very careful in the registry. If you mess it up, it will be more of a nightmare for you. Be very methodical about following the instructions.
Here is the Norton's Symantec link :
http://www.sarc.com/avcenter/venc/data/w32.blaster.worm.html#removalinstructions
Also, here is a desription from Microsoft about svchost.exe. It will help you understand it a bit better. I found this by searching www.technet.com (it's a Microsoft site). There is tons of usefull readings and tips there.
http://support.microsoft.com/default.aspx?scid=kb;en-us;250320
Good Luck
Vanessa
0
I forgot to mention, DrWatson is Microsoft's debugging program. Here's a link about DrWatson.
http://www.microsoft.com/windowsxp/home/using/productdoc/en/default.asp?url=/windowsxp/home/using/productdoc/en/drwatson_overview.asp
0
Hi, guys,
There are already many reports about this worm and many suggestions. The simple method is just download and install W2K SP4. Then run blastfix.com and do what it requests. It should be done. I fixed the problem and computer is running normal for 1 day so far.
0
i have the svchost.exe error message.. although i installed the new windows 2000
sp 4 .. and it did jack for the svchost so i think the best way is to FORMAT C: then as soon as you installed windows 2000 download and install sp 4 and all your virus checkers and you will be FREE from the svchost.exe virus.....thats my opinion and i am going to try it out...will get back to you if i find any other way to stop it without FORMATTING.
0
i did every thing that Lymel has said and i guess its going fine with me till now, atleast..but there is something that i dont understand...when initially i got this damn problem of "svchost.exe"..i tried to fix it using repair option in setup and also using sfc/scannow in command prompt..i am talking about windows2000 here...but all two of those didnt fix it up and then i formatted my drive and installed a new fresh copy on windows2000 but that damn error of "svchost.exe" came again...how can it come again? i mean everything was supposed to vanish after using format command then how the hell did it come back again?...any ideas?...and also i didnt see any msblast.exe running in current running processes in task manager...
thanks to Lymel for his advice anyways
0
Yes this is a pain in the ass but if you use the patch and then run your anti-virus software it should take care of it. Also you can try ctl-alt-del and bring up task mgr. Go to processes and delete blast.exe from the processes. Everything should work after that.
0
Man this is a Nasty Beast. Go to the following URL and look for F-Lovsan.zip
this will fix the MBlast Worm.http://www.datafellows.fi/download-purchase/tools.shtml
BTW---This is a free tool...no purchase needed....
Dave L
Have a Fine Microsoft Day
0
Remove the virus as listed above...
Then patch your computer with link listed here...
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp
0
i have also got the svchost.exe error message and its causing me alot of problems, i just wanted to know can this affect the internet. i have got internet explorer and have got problems when loading pages up....... e.g hotmail. has anyone else got the same problem too.any suggestions wellcome
0
Have you been gettting a dialogue come up that says "svchost.exe has generated errors, program will shutdown" ?
If so, this is what is happening. It is taking control of your Internet connection long enough to install the worm. Then shuts you down and re-boots. This allows Hacker to acces you Confidentials. Most of the attacks have been during windows updates (as I experienced last night).
Could not disconnect modem, updates failed, then modem started recieving data so I thought Microsoft was trying to restart updates.
WRONG. Finally shutdown and restarted only to have antivirus report w32.blaster.worm had been detected and could not repair so it deleted it.
svchost.exe is a windows system file but the one that has been causing problems is bogus and reported by Norton Firewall as a hack attack
and reports no Virus. It installs the worm in C:\ winnit\system32\msblast.exe. Delete this file if it exists. Their are three other variants to this
named: penis.exe, teekids.exe, and billy( no ext.).To clean up you need to be disconnected from Internet,(uplug dsl's from wall). Run the fixblast.exe
from Norton. In XP you have to disable system restore, run fix, then re-enable restore and shutdown(not restart) and wait 30 secs or so to reboot. Run regdit to search for penis.exe, teekids.exe, and billy and delete if found. You need to go to windows updates to install security patch( it will be listed in description text noting the worm). If you have a firewall installed, before doing this it would be wise to activate it and block if svchostexe. attempts to ping you. Spent 3hrs. plus fixing a freinds PC yesterday.
If you have any problems don't call me, call Symantec or Microsoft
J
0
Unfortunately I have been another victim of msblaster.exe.
Here's what I suggest (this works for Windows 2000, I'm not sure about other models):
1. Download FixBlast.exe from Symantec website (http://securityresponse.symantec.com/avcentre/FixBlast.exe) and save to disk.
2. Whilst connected to the internet, press Ctrl + Alt + Del. Go to task manager and then processes. Click on msblast.exe and click 'end process'.
3. Run FixBlast to find and delete the virus. Do this by going to Start, Run and then type a:\FixBlast.exe. Click ok then click start to run the program (windows 2000 instructions only).
4. Download latest Windows service pack for you version of windows(from www.microsoft.com).
5. Download Blaster Worm critical security patch for your version of windows (www.microsoft.com).
This should do the trick. To check, go to Start then search for file and folders called msblast.exe. Hopefully, no file will be found.
I did this and my PC seems ok now.
Hope this helps!
0
To Fix This Problem: svchost.exe error
Download windows2000-KB823980-x86-ENU.exe form Microsoft, you will find it under the link containing blaster worm patch. Place it on your desktop.
Now download windows2000 service pack 4, you can find this using the download section on Microsoft website using search options. Select Windows2000 service pack 4 express etc, it should be the second option. This pack is about 536Kb, place it on your desktop.
Now install this pack, the pack will check for which updates you require and download them for you. The max requirements is approx 32Mb. You do not need to install service pack 1,2,3. Service Pack4 will cover all of these.
Once downloaded install the Pack but DO NOT RESTART YOUR PC. Now double click windows2000-KB823980-x86-ENU.exe on your desktop and install your patch. Restart your PC.
This will repair any damage to your system.
Please note that the Blaster Worm is not always responible for this error.
GalVcom Support
0
I followed the above suggestions (SP4, Blaster patch) and seem to have solved the problem but now I can't download anything from the net. Anybody know how to fix this (W2000 with Norton firewall)?
0  |
 |
 |
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |
