Have you checked Windows Update to make sure there aren't other security
patches you are missing? We had to upgrade to SP4 and get all the patches
on before we got away from what you are describing.

It's my understanding that msblast uses an 80/20 rule for "mischief", in
that 80% of the time it guesses XP and 20% of the time it guesses NT for
system it is on. If it guesses wrong, it blows up svchost.

"Colin" <Colin@UrgentMail.com.not> wrote in message
news:000d01c36b2f$d8700200$a601280a@phx.gbl...