If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)

Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

scvhost.exe

LoLth · 2003-08-14 09:00:37

a bit of a weird one this, In the last three days I have had four calls relating to scvhost.exe terminating. Last night, my own pc had scvhost.exe close (while downloading the MS security patch for the DCOM RPC vulnerability but I think that's just coincidence). After I ran the patch, everything was grand again. Now, I…

14-08-2003 9:00am

#1

LoLth

Registered Users, Registered Users 2 Posts: 10,339 ✭✭✭✭

Join Date: February 1998

Posts: 9351

a bit of a weird one this,

In the last three days I have had four calls relating to scvhost.exe terminating. Last night, my own pc had scvhost.exe close (while downloading the MS security patch for the DCOM RPC vulnerability but I think that's just coincidence).

After I ran the patch, everything was grand again. Now, I know that scvhost.exe is a DLL container but why would it be failing, and what benefit would there be of making it fail (assuming it is an external attack). Could it be a precursor to the Lovesan/msblast infection? or just an amazing coincidence?

0

Comments

#2 14-08-2003 9:21am

v10

Registered Users, Registered Users 2 Posts: 1,866 ✭✭✭

Join Date: February 2002

Posts: 1674

This is all part off the virus ''W32.Blaster.Worm''.

As long as msblaster.exe is running (check the processes tab of task manager) it will keep knocking off svchost.exe.

The patch should have stopped the problem but not deleted the virus. Run a search for msblaster.exe and delete it if found.

I presume you are running Windows 2000 because I think the virus had a different effect on XP.

0
#3 14-08-2003 9:41am

LoLth

Registered Users, Registered Users 2 Posts: 10,339 ✭✭✭✭

Join Date: February 1998

Posts: 9351

ran stinger in safemode.. no infection (this was just before the error occurred). Also, while downloading the patch, I did not get a RPC termination error... so no msblast32 there.

One of the calls is an xp machine. (mine is 2k). according to anyhting I can find on the ms site it recommends updating ot the latest service pack, my 2k machine is SP3 (I dont trust sp4 yet) but the xp machine is bang up to date - with the exception of the blaster patch which is being installed today.

0
#4 14-08-2003 9:45am

GuanYin

Closed Accounts Posts: 15,552 ✭✭✭✭

Join Date: March 2002

Posts: 14305

This has been covered in another thread....

http://www.boards.ie/vbulletin/showthread.php?s=&threadid=109749

has all the details needed to fix the issue.

0
#5 14-08-2003 10:26am

LoLth

Registered Users, Registered Users 2 Posts: 10,339 ✭✭✭✭

Join Date: February 1998

Posts: 9351

thanks, I will look into that list of services.

0