Windows 2000 svchost.exe error
-
:confused:This may not be the right place to post this but have a look at it recently my previous hard disk failed and i replaced it with a new one and i installed windows 2000 pro service pack 4, i retrived my data from the faulty drive and was doing good till i start connecting to the net; now i get the error svchost.exe the referenced memory could not be accessed. i searched and seen many articles explaining what the cause might be , some suggest a virus or worm, others may be installing the microsoft security patch or downloading the norton tools for fixing the blaster or welch worm might fix the problem, the microsoft web site suggests editing the registry might solve the problem. I have a theory how this might have been caused I first copied the data from the faulty drive on my friends pc; maybe i got the virus from there and i connected the previous drive to my pc at home so may be if it's a virus thats where i got it from. Now i have the following symptoms when i connect to the internet the error message appears and i closed the svchost.exe no system crash but various odd things showed up i could not copy/paste, move files, and cliking on a URL and open in a new window could not work, add/remove programs in control panel looked funny, Norton Anti Virus 2004 was disabled could not launch it again even after i rebotted, the regedit.exe and regedt32.exe don't work till now ,wasn't able to disconnect i had to manually remove the phone line or restart the computer.windows update could not work..... After the first encounter with the error message i rebooted the computer and start connecting again then i saw that the domain field in the connection settings was empty i retyped the server and got connected again boom!!! i see the error message again now all the symptoms show up again if i don't connect some of the problems still persist as Norton couldn't start, regedit and regedt32 don't work In the Middle of connection i see the error message that says internet explorer generated errors and stuff then when i say don't send a new IE window is launched Then i downloaded Windows2000-KB823980 security patch as i start to excute the program it exits as soon as it starts then i downloaded windows2000-KB833330 and i excute it it starts and suddenly exits. now i see a new message that says your registry size is low increase the registry size it was 18Mb now i made it to 20MB still no change I really tried everything; -Editing the registry is impossible since r
-
:confused:This may not be the right place to post this but have a look at it recently my previous hard disk failed and i replaced it with a new one and i installed windows 2000 pro service pack 4, i retrived my data from the faulty drive and was doing good till i start connecting to the net; now i get the error svchost.exe the referenced memory could not be accessed. i searched and seen many articles explaining what the cause might be , some suggest a virus or worm, others may be installing the microsoft security patch or downloading the norton tools for fixing the blaster or welch worm might fix the problem, the microsoft web site suggests editing the registry might solve the problem. I have a theory how this might have been caused I first copied the data from the faulty drive on my friends pc; maybe i got the virus from there and i connected the previous drive to my pc at home so may be if it's a virus thats where i got it from. Now i have the following symptoms when i connect to the internet the error message appears and i closed the svchost.exe no system crash but various odd things showed up i could not copy/paste, move files, and cliking on a URL and open in a new window could not work, add/remove programs in control panel looked funny, Norton Anti Virus 2004 was disabled could not launch it again even after i rebotted, the regedit.exe and regedt32.exe don't work till now ,wasn't able to disconnect i had to manually remove the phone line or restart the computer.windows update could not work..... After the first encounter with the error message i rebooted the computer and start connecting again then i saw that the domain field in the connection settings was empty i retyped the server and got connected again boom!!! i see the error message again now all the symptoms show up again if i don't connect some of the problems still persist as Norton couldn't start, regedit and regedt32 don't work In the Middle of connection i see the error message that says internet explorer generated errors and stuff then when i say don't send a new IE window is launched Then i downloaded Windows2000-KB823980 security patch as i start to excute the program it exits as soon as it starts then i downloaded windows2000-KB833330 and i excute it it starts and suddenly exits. now i see a new message that says your registry size is low increase the registry size it was 18Mb now i made it to 20MB still no change I really tried everything; -Editing the registry is impossible since r
Leyusha wrote: This may not be the right place to post this but have a look at it Yes, that is the right place that you post this thread. Leyusha wrote: now i get the error svchost.exe the referenced memory could not be accessed. Of course, according to my experience, your computer is infect with w32.blaster.worm[^]. To solve this problem, try to keep your document away in the safe place. Then go to any PC that is not infect with the virus and download the following files step by step: 1. Download security patch KB823980[^]. 2. Download security patch KB824146[^]. 3. Download MS03-026 scanner tool[^]. This tool is used to verfiy that you install the above security patch success or not. 4. Donwload Blaster remove tool[^] from norton website. Then copy all of these files to the infect computer via CDROM. Do not connect your infect computer to the network or the internet. Then try to install the security patch one by one as I order in the list. If it is not install in the normal mode, try to restart your computer in the safe mode and install the security patch one by one follow by the list that I order for you. Leyusha wrote: i dow
-
Leyusha wrote: This may not be the right place to post this but have a look at it Yes, that is the right place that you post this thread. Leyusha wrote: now i get the error svchost.exe the referenced memory could not be accessed. Of course, according to my experience, your computer is infect with w32.blaster.worm[^]. To solve this problem, try to keep your document away in the safe place. Then go to any PC that is not infect with the virus and download the following files step by step: 1. Download security patch KB823980[^]. 2. Download security patch KB824146[^]. 3. Download MS03-026 scanner tool[^]. This tool is used to verfiy that you install the above security patch success or not. 4. Donwload Blaster remove tool[^] from norton website. Then copy all of these files to the infect computer via CDROM. Do not connect your infect computer to the network or the internet. Then try to install the security patch one by one as I order in the list. If it is not install in the normal mode, try to restart your computer in the safe mode and install the security patch one by one follow by the list that I order for you. Leyusha wrote: i dow
-
Leyusha wrote: This may not be the right place to post this but have a look at it Yes, that is the right place that you post this thread. Leyusha wrote: now i get the error svchost.exe the referenced memory could not be accessed. Of course, according to my experience, your computer is infect with w32.blaster.worm[^]. To solve this problem, try to keep your document away in the safe place. Then go to any PC that is not infect with the virus and download the following files step by step: 1. Download security patch KB823980[^]. 2. Download security patch KB824146[^]. 3. Download MS03-026 scanner tool[^]. This tool is used to verfiy that you install the above security patch success or not. 4. Donwload Blaster remove tool[^] from norton website. Then copy all of these files to the infect computer via CDROM. Do not connect your infect computer to the network or the internet. Then try to install the security patch one by one as I order in the list. If it is not install in the normal mode, try to restart your computer in the safe mode and install the security patch one by one follow by the list that I order for you. Leyusha wrote: i dow
I did the steps u recommended that is i downloaded the patches u pointed out in an isolated labtop burned them to a cd then when i tried to install them it failed then i switched to safe mode and installed the patches and i ran the scanner tool it says failed to initialize socket or so but after that i scanned for the worm using the blaster worm removal tool still no change one thing i noticed after i installed the 2nd patch in windows start up is a message box saying svchost.exe the program is currently in use or some similar message. Even after scanning my pc and Norton claims that there is no worm; i can not see contents of program files and windows in normal mode control panel's add/remove programs is corrupted, can not open regedit and regedt32, what is happening really ??? i wonder if it is only the blaster worm ???!!! In the task manager i saw "SWchost.exe" not "svchost.exe" and i killed the process i also see cool.exe created when i tried to open windows folder what is cool.exe and SWchost.exe??? I have sophos anti virus should i install it instead of norton,should i be installing any fire walls like zonealarm or what ?? why am i not able to see contents of my folders???
-
I did the steps u recommended that is i downloaded the patches u pointed out in an isolated labtop burned them to a cd then when i tried to install them it failed then i switched to safe mode and installed the patches and i ran the scanner tool it says failed to initialize socket or so but after that i scanned for the worm using the blaster worm removal tool still no change one thing i noticed after i installed the 2nd patch in windows start up is a message box saying svchost.exe the program is currently in use or some similar message. Even after scanning my pc and Norton claims that there is no worm; i can not see contents of program files and windows in normal mode control panel's add/remove programs is corrupted, can not open regedit and regedt32, what is happening really ??? i wonder if it is only the blaster worm ???!!! In the task manager i saw "SWchost.exe" not "svchost.exe" and i killed the process i also see cool.exe created when i tried to open windows folder what is cool.exe and SWchost.exe??? I have sophos anti virus should i install it instead of norton,should i be installing any fire walls like zonealarm or what ?? why am i not able to see contents of my folders???
-
I finally found out the problem m pc is infected with the Dumaru virus and i removed it using the norton and sophos tools but the problems still persist i.e folders not showing contents and so on.... Any further updates
It's possible that the virus has corrupted your files beyond recovery. One last-ditch approach would be to reinstall Win2K on the new drive (to ensure an undamaged configuration) and install your antivirus software on it. Make sure the AV software is fully updated and working correctly. Then shut down and add the old drive as a secondary hard drive. On startup, nothing on that drive should be executed at boot up, so any viruses on it will be inactive. You can then scan the drive and let the AV software repair or delete and infected files there, after which it should be safe to copy the files that survive to the new drive. You can then remove the second drive and trash it. This assumes, of course, that the old drive is still functional enough to run for a little while. If not, you're probably out of luck.:( "If it's Snowbird season, why can't we shoot them?" - Overheard in a bar in Bullhead City
-
I finally found out the problem m pc is infected with the Dumaru virus and i removed it using the norton and sophos tools but the problems still persist i.e folders not showing contents and so on.... Any further updates
Leyusha wrote: problems still persist i.e folders not showing contents and so on.... Because you are using windows 2000 I'm not sure too but if your are using windows xp pro, you should use command
SFC /scannowfrom the command prompt. This command will check your system file and repaire any system file that is corrupt. Leyusha wrote: I finally found out the problem m pc is infected with the Dumaru virus Remember that next time if you think that you computer affect with the virus, the most importance thing is search for the virus name. Sometime our anti-virus is just detect the virus but could not clean/delete it. Because some virus need the special method or tool to delete it, you should find any method to detect for the virus name then search it on the internet about the method to clean it.
A thousand mile of journey, begin with the first step. APO-CEDC Save Children Norway-Cambodia Office