I am getting a notice as follows"Program error svc host has generated
errors and will be closed by Windows. You will need to restrart the
program. An error log is being. a box with OK" I click OK and continue
to operate with out any problem. I close down and start up again and I
still get this notice. The only thing I notice is when I click the
icon at the botton of the screen to bring up the internet connection
screen so I can discontinue the internet connection it no longer
works.I then go to start close down the computer which also
disconnects the interenet connection.
Can you help? I am usuing Windows 2000 professional

---

Request for Question Clarification by denco-ga on 13 Aug 2003 16:19 PDT

Howdy cycas!

What is the lastest service pack (SP) that you have installed?

Thanks!  denco-ga

---

Clarification of Question by cycas-ga on 13 Aug 2003 17:44 PDT

I don't know what service pack sp means. Can you explain exactly what this is?

---

Request for Question Clarification by denco-ga on 13 Aug 2003 20:06 PDT

Howdy Cycas,

If you go to "My Computer" and then "Contol Panel" and then "System" you
should see some information, such as System: Microsoft Windows 2000 and
then Professional Edition, followed by the Service Pack number, like:

Service Pack 3

If you could provide this information, it might help the researchers.

A service pack (usually referred to as an "SP") are major updates that
are done to the Windows operating system, in this case Windows 2000.

Thanks!  denco-ga

---

Clarification of Question by cycas-ga on 14 Aug 2003 03:11 PDT

Servuce pack 1 I hope this is what you need.

---

Request for Question Clarification by chellphill-ga on 14 Aug 2003 06:35 PDT

Hi cycas-ga!
About how long has this problem been happening?

---

Clarification of Question by cycas-ga on 14 Aug 2003 07:21 PDT

only in the last two or three days.Everything works perfectly ( I have
a Thinkpad T22) In the last two days every now and then that notice
appears. When I click OK on the notice it disapears and every thibg
continues OK only as I said when i click on the icon  at the bottom of
the screen that brings up internet connection screen and allows you to
dissconnect from the internet, it doesnt work and I have to go to
start and then shut down which dissonnects when it shuts down. Can you
help?

Hello cycas-ga!

Since this problem has only been occurring for the past 2-3 days, I
would say this is the result of the Blaster worm.

If you take a look at the following posts, you can see that your not
alone with this issue!
http://www.computing.net/windows2000/wwwboard/forum/50495.html

Here is another example (take notice of the posts towards the bottom
starting on August 11th)
http://www.experts-exchange.com/Operating_Systems/Win2000/Q_20621670.html#8555880

More information on the Blaster worm (aka msblaster, w32/blaster,
w32/lovsan.worm)
http://www.swcp.com/msblaster-info.html
"Some symptoms of infection are:
Error message that svchost.exe (or other software) has generated
errors and must be restarted.
Not being able to copy and paste in various applications
System instability - applications that stop suddenly with no error
message and will not restart
Unusual network traffic
Virus software that will not function properly
Inability to install new software "

You might be able to do a search (start, search, for files or folders)
for a file called msblast.exe (it may or may not show up) But if you
do locate it, you may find that this file can not be deleted, fixed or
repaired by a virus software that hasn't been updated in a while.

According to Symantic's security response
(http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html)
"W32.Blaster.Worm is a worm that exploits the DCOM RPC vulnerability
(described in Microsoft Security Bulletin MS03-026) using TCP port
135. The worm targets only Windows 2000 and Windows XP machines. While
Windows NT and Windows 2003 Server machines are vulnerable to the
aforementioned exploit (if not properly patched), the worm is not
coded to replicate to those systems. This worm attempts to download
the msblast.exe file to the %WinDir%\system32 directory and then
execute it. The worm has no mass-mailing functionality."

Here is the Security update that Microsoft issued a month ago, about
the venerability which the blaster worm exploits. (it also gives you
information on how to obtain the patch and other available Windows
updates)
http://www.microsoft.com/security/security_bulletins/ms03-026.asp


Microsoft has a site entitled "What You Should Know About the Blaster
Worm" (http://www.microsoft.com/security/incident/blast.asp)
Which has important information such as:
How to tell if your computer is infected
What operating systems it affects
as well as 4 steps for home users.
These steps will guide you on where to obtain a firewall, or how to
configure tcp/ip filtering in Win2k so that you can block the affected
ports on your computer so that it can be patched, and where you can
obtain the appropriate update for you computer.
It also lists several resources for anti virus software, so that you
can obtain your anti virus vendors current updates (aka virus
definitions) and 4 sources where you may obtain a worm removal tool.

Additional sources for removal or detection: (keep in mind that due to
the wide spread impact of the current situation, that many of these
sites may be extremely slow, or temporarily unavailable)

http://www.pandasoftware.com/support/card.aspx?id=1563&IdIdioma=2
Panda software's PQREMOVE utility

http://housecall.antivirus.com/
Free online virus scan

If you have any questions about the information in which I have
provided, do feel free to request a clarification of my answer.
And please be sure to allow me enough time to respond to your
clarification request before rating the answer.
 
Thanks so much!
chellphill-ga

Search Terms used:
msblaster
msblaster svchost

---

Request for Answer Clarification by cycas-ga on 14 Aug 2003 11:46 PDT

Many thank but I went to to Microsoft site and after I got to the
section where I right click and go to properties I get " An unexpected
error  occured" and when I click ok I cannot proceed any futher. What
do I do.

---

Clarification of Answer by chellphill-ga on 15 Aug 2003 11:52 PDT

Hi cycas,
Can you show me the exact web address you are talking about?
Where were you right clicking when you got that error message?
(Were you right clicking on something on that page? Or did it instruct
you to right click on something on your computer?)

Excellent and very speedy help.I did what you said a second time and
it worked perfectly. Many many thanks