Running Windows 2000, Netscape 4.79 & I have been getting a message that
application SVCHOST.EXE is closing down. When this occurs I can't
disconnect or the close modem, can't search files, get an "unexpected
error" prompt when trying to access Network Dialup Connections. This
problem started today and only occurs when I'm connected to my ISP.
Restarting or shuting down several times hasn't helped.
Any info & advice about this issue would be appreciated.

"Thomas Zand" <zandtom@ix.netcom.com> wrote in message news:3F385155.D7018FFB@ix.netcom.com...

I have got the same problem today (I am not using Netscape).
It is first time that I have got such a problem.

--------- Message Box#1 ---------
svchost.exe has generated errors and
will be closed be closed by Windows.
You will need to restart the program.

An error log is being created.
-------------------------------------

--------- Message Box#2 ---------
There was a problem starting the Office Assistant.
Would you like to try reinstalling it?
------------------------------------

I did shutdown, turned on my computer.
Three minutes - the problem occurred again.

=======================
Alex Vinokur
mailto:alexvn@connect.to
http://up.to/alexvn
=======================

Alex Vinokur said:

Via google
http://www.google.com/search?hl=en&ie=ISO-8859-
1&q=%22svchost.exe+has+generated+errors%22
or http://tinyurl.com/jqb2

Anything there that would help?

Thomas,

I am running Windows 2000 and yesterday evening (11/8) saw the same
problem, SVCHOST.EXE closes and then I can't disconnected the modem.

A colleague has reported the same.

This must be some sort of new virus.

Anyone got any more info?

Regards,
Tim.

Thomas Zand <zandtom@ix.netcom.com> wrote in message news:<3F385155.D7018FFB@ix.netcom.com>...

"Richard" <anom@anom> wrote in news:bh9mvl08gg@enews3.newsguy.com:

Its new so your scanner didn't find it. You probably did't download it
or get it by e-mail anyhow. An infected computer scans for remote
computers with a certain port open, vulnerable remote computers then
will download a copy of the worm.

X-No-Archive: Yes
Alex Vinokur said:

Help | Index type the word log

On Tue, 12 Aug 2003 15:19:20 -0400, a team of surgeons from
alt.usenet.kooks removed the following benign growth from Meat Plow:

But we now know which software firewall's weaknesses to exploit.

How st00pid is it to post to Usenet which firewall you use?

--
PJR :-)
mhm34x8
news:alt.fan.pjr
(also in google groups)
http://www.petitmorte.net/pjr/
(will not work in your obsolete browser)

"Brian H¹©" <no.spam@this.addy.ta> wrote in message news:6i5_a.10071$Kx1.142676@newsfep4-glfd.server.ntli.net...
[snip]

Thanks.

So, log file on Windows 2000 is _only_ (!) Dr. Watson tools - drwtsn32 (?)

=====================================
Alex Vinokur
mailto:alexvn@connect.to
http://mathforum.org/library/view/10978.html
=====================================

Alex -
1. For starters, you may be infected with the new "lovsan worm" now
infecting machines worldwide. Check any antivirus website for the cure.
This worm typically causes svchost.exe and other problems. You may not
need to bother with logs.

2. Most logs have the file extension .log. To find all logs, use
Explorer's Search, and scan your %systemroot% partition for files: *.log

Alex Vinokur wrote:

On Tue, 12 Aug 2003 23:23:25 +0300, Alex Vinokur <alexvn@bigfoot.com>
wrote:



Not quite


Control panel -> admin tools -> Event viewer



--
Using M2, Opera's revolutionary e-mail client: http://www.opera.com/m2/

On Tue, 12 Aug 2003 15:37:46 +0300, "Alex Vinokur" <alexvn@bigfoot.com>
wrote:

Start and then run, and then type
compmgmt.msc and then click OK.

Look under the event viewer.

Other places to is the DrWatson folder in
C:\Documents and Settings\All Users\Documents\DrWatson

"Peter" <xxx@xxx.xxx> wrote in message news:nmrijv8ejfqbnk1sjr4qgmut0ra6rrotoj@4ax.com...
For instance, I have got a Error Message :
---------------------------------
Stuff
An error log is being created
---------------------------------

Should I search something (what?) under the event viewer ?
Should I search something (what?) under the DrWatson folder ?

==========================================
Alex Vinokur
mailto:alexvn@connect.to
http://sourceforge.net/users/alexvn
http://www.simtel.net/search.php?act...e=Alex+Vinokur
==========================================

Thomas Zand <zandtom@ix.netcom.com> wrote in message news:<3F385155.D7018FFB@ix.netcom.com>...
This appears to be a symptom on the blaster worm attempting to access
your Windows 2000 system. You need to install the security update or
otherwise close the port.

http://www.microsoft.com/security/in.../blast_faq.asp

A good explanation can be found at:

http://www3.ca.com/virusinfo/virus.aspx?ID=36265

"The worm attempts to infect both Windows 2000 and Windows XP systems.
One of the offsets used by the worm must be different for each of
these operating systems, in order for the exploit it uses to work.
Since the worm does not know what operating system the target machine
is running, it guesses. There is an 80% chance it will attempt to
exploit Windows XP, and a 20% chance it will attempt to exploit
Windows 2000.

If the worm guesses incorrectly and the remote machine is vulnerable,
the process svchost.exe on the target machine will crash. The system
may become unstable, but the infection will*fail. "

==-=-==
Note to bypass spam filter put NOSPAM in the SUBJECT line of e-mails.