scvhost.exe produced errors in Windows 2000 Pro.


When ever I click the icon to connect to dsl I get scvhost.exe produced errors.

After that some of the programs like Windows Media don't work when I try to
open it. The program is frozen and flashes when I open it. It also say there
is some errors in R.P.C. something.

Also the desktop icons are frozen on desktop it can't be moved to a different
position. The C:\program files folder can't be opened and displayed.

And the add/remove program icon in control panel no programs are displayed
and the close button displays cl&ose there instead.


What should I do to cure this problem?

Thanks.

Bun Mui

Bun Mui wrote:
Sounds like a viral meltdown to me.........hmmm.and it happens when you try
to connect.......and things work when not trying to connect>>>>>hmmmmm.

First thing this puppy would do is run my virus program. And then see what
others here think You might search for a logfile appcompat.txt and look it
over as I have just done recently.
Write down any errors produced and Google them and furnish them here, too.

--
longshotjohn 7

http://www.smartgroups.com/groups/hot2trot


The world is a dangerous place, not because of those who do evil, but
because of those who look on and do nothing. --Albert Einstein

"Bun Mui" <bunmui@elvis.com> wrote in message
news:1c44efd2.0308310941.6127ae9f@posting.google.c om...
Concidering recent virus events, do a checkup for the msblast virus.

Boot into Safe Mode and start your registry editor:
Start / Run / regedit

Navigate to:
HKEY_LOCAL_MACHINE
+Software
+Microsoft
+Windows
+CurrentVersion
+Run

In the right-hand pane, look for any entry/ies that include
MSBLAST.EXE, PENIS32.EXE or TEEKIDS.EXE and
DELETE it/them.
These are the files associated with the different variants:
Variant A - msblast.exe
Variant B - penis32.exe
Variant C - teekids.exe

You just disabled the worm from running at startup, so boot into
normal mode again, and turn off ALL system restores to purge
your system.

Open Windows Explorer to the ..\Windows\System32\ or
...\WinNT\System32\ folder and DELETE *any* of the
files named above.

Next, go to the ..\Windows\Prefetch\ or ..\WinNT\Prefetch\
and find the reference to the above file/s (any reference will
be similar to: <filename.exe>-<alphanumerics>.PF), for example,
msblast.exe-0235D8H6.pf, and DELETE it/them.

Now you can download and install the patch, configure your
firewall and update your virus scanner.

Virus Alert About the Blaster Worm and Its Variants
http://support.microsoft.com/search/...b;en-us;826955

Microsoft Security Bulletin MS03-026
http://www.microsoft.com/technet/sec...n/MS03-026.asp

What you should know about the Blaster worm
http://www.microsoft.com/security/incident/blast.asp

Windows RPC DCOM Buffer Overflow Remote Exploit (MS03-026)
http://www.k-otik.com/exploits/07.25.winrpcdcom.c.php

How to Use The KB 823980 Scanning Tool to Identify Host Computers
That Do Not Have The 823980 Security Patch (MS03-026) Installed
http://support.microsoft.com/search/...b;en-us;826369

W32.Blaster.Worm
http://www.symantec.com/avcenter/ven...ster.worm.html

W32.Blaster.B.Worm
http://www.symantec.com/avcenter/ven...er.b.worm.html

W32.Blaster.C.Worm
http://www.symantec.com/avcenter/ven...er.c.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/ven...oval.tool.html


On 31 Aug 2003 10:41:18 -0700, in
<1c44efd2.0308310941.6127ae9f@posting.google.com >
Bun Mui scrawled:

--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html