The Annoying svchost.exe problem!!!!

pirate · 05-28-2004, 05:57 AM

I have had a problem in Windows 2000. Every so often svchost.exe will shut down causing errors. Now I have installed service pack 4 and that usually gets rid of the problem every other time, it keeps coming up not allowing me to disconnect. Its not a virus coz i got up to date protection and it didnt find one, Any help?

tw · 05-28-2004, 10:16 AM

Quote:

Originally posted by pirate
I have had a problem in Windows 2000. Every so often svchost.exe will shut down causing errors.

What does the system (event) log report?

perth · 05-28-2004, 10:38 AM

Yeah, it would help to know what the exact error message is. Failing that, MS has a pretty decent knowledge base which does a great job of helping the motivated find answers to a great many problems you might experience.

pirate · 05-29-2004, 05:38 AM

The problem is months ago before I installed the latest service pack for Windows, it kept coming up in a dialog box that svchost.exe had generated errors had an error log is being created. I installed the service pack and it got rid of it, now, the problem is, something shuts down the same way svchost.exe shuts down, does exactly what svchost.exe does, but it does not bring up a dialog box. So that might be a little bit more info?

perth · 05-29-2004, 09:15 AM

So you're no *sure* it has anything to do with svchost.exe? We're gonna need error and event logs.

pirate · 05-29-2004, 10:47 PM

I found out a little bit of information, it occured the same time erros started to appear. I found the error occured and here it states:

The Remote Procedure Call (RPC) service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: No action.

Every error that I have had that didnt popup with any error messages, this one might be a prime suspect

tw · 05-29-2004, 10:51 PM

You are still not providing the so important information in the Event log. Use Window's Help if you don't know what the Event log is.

pirate · 05-29-2004, 10:52 PM

forgot to add that this stupid messenger window comes up and its not spyware, or a virus, never seen it before

pirate · 05-29-2004, 10:56 PM

i can get into the event viewer to view the errors, but what wouild you like me to show you, the expanded error, that describes it, or a screenshot?

Torrere · 05-29-2004, 11:47 PM

Messenger Service is a spam recepticle built in to Windows. It's meant for an administrator to be able to send machines on a network, but I think that it's most commonly used for spam. Ignore it. You can disable it by going into the Administrative Tools and disabling that service.

It might be most helpful if you copy the text of the event log and paste it here verbatim.

pirate · 05-29-2004, 11:50 PM

The Remote Procedure Call (RPC) service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: No action.

Thats what it says

mbpark · 05-30-2004, 10:10 AM

Pirate,

What's happening is that you don't have a firewall, and you're getting HIT with a ton of things designed to cause havoc on your system.

Do not pass go, just download Kerio Personal Firewall or Zone Alarm ASAP. Even better, go out and buy a Linksys Cable/DSL router if you have broadband. You're leaving yourself open for many things that are messing with you.

What's happening is that you're leaving things open on the Internet, which is a bad idea, and those things are crashing certain system services that run under SVCHOST.EXE, like internal Windows code (RPC Service).

You're lucky. Most of these virii cause XP to crash hard. Yours just cause 2000 to give you those errors.

Get a darn firewall ASAP!

Mitch

pirate · 05-30-2004, 08:27 PM

I do have a firewall

Sygate Personal Firewall 5.5

Is that good enough?

mbpark · 05-30-2004, 08:53 PM

Pirate,

Any decent firewall would block MSRPC traffic, as well as Messenger traffic.

Sygate isn't good enough. Kerio Personal Firewall is. ZoneAlarm is.

Mitch

Carbonated_Brains · 06-02-2004, 09:36 AM

Errors in svchost.exe on a Win2k system suggest you have a variant of the blaster worm, actually.

05-28-2004, 05:57 AM	#1
pirate Burn anything in 3 minutes...Guaranteed!!!!! ! Join Date: Jan 2004 Location: Mackay Posts: 48	The Annoying svchost.exe problem!!!! I have had a problem in Windows 2000. Every so often svchost.exe will shut down causing errors. Now I have installed service pack 4 and that usually gets rid of the problem every other time, it keeps coming up not allowing me to disconnect. Its not a virus coz i got up to date protection and it didnt find one, Any help?

05-29-2004, 10:52 PM	#8
pirate Burn anything in 3 minutes...Guaranteed!!!!! ! Join Date: Jan 2004 Location: Mackay Posts: 48	forgot to add that this stupid messenger window comes up and its not spyware, or a virus, never seen it before Attached Images

05-30-2004, 10:10 AM	#12
mbpark Lecturer Join Date: Jan 2001 Location: Carmel, Indiana Posts: 761	Dude, get a firewall or a router! Pirate, What's happening is that you don't have a firewall, and you're getting HIT with a ton of things designed to cause havoc on your system. Do not pass go, just download Kerio Personal Firewall or Zone Alarm ASAP. Even better, go out and buy a Linksys Cable/DSL router if you have broadband. You're leaving yourself open for many things that are messing with you. What's happening is that you're leaving things open on the Internet, which is a bad idea, and those things are crashing certain system services that run under SVCHOST.EXE, like internal Windows code (RPC Service). You're lucky. Most of these virii cause XP to crash hard. Yours just cause 2000 to give you those errors. Get a darn firewall ASAP! Mitch

05-30-2004, 08:53 PM	#14
mbpark Lecturer Join Date: Jan 2001 Location: Carmel, Indiana Posts: 761	Pirate, apparently not! Pirate, Any decent firewall would block MSRPC traffic, as well as Messenger traffic. Sygate isn't good enough. Kerio Personal Firewall is. ZoneAlarm is. Mitch

05-28-2004, 10:38 AM	#3
perth Strong Silent Type Join Date: Mar 2002 Location: Fort Collins, CO Posts: 1,949	Yeah, it would help to know what the exact error message is. Failing that, MS has a pretty decent knowledge base which does a great job of helping the motivated find answers to a great many problems you might experience.

05-29-2004, 05:38 AM	#4
pirate Burn anything in 3 minutes...Guaranteed!!!!! ! Join Date: Jan 2004 Location: Mackay Posts: 48	The problem is months ago before I installed the latest service pack for Windows, it kept coming up in a dialog box that svchost.exe had generated errors had an error log is being created. I installed the service pack and it got rid of it, now, the problem is, something shuts down the same way svchost.exe shuts down, does exactly what svchost.exe does, but it does not bring up a dialog box. So that might be a little bit more info?

05-29-2004, 09:15 AM	#5
perth Strong Silent Type Join Date: Mar 2002 Location: Fort Collins, CO Posts: 1,949	So you're no sure it has anything to do with svchost.exe? We're gonna need error and event logs.

05-29-2004, 10:47 PM	#6
pirate Burn anything in 3 minutes...Guaranteed!!!!! ! Join Date: Jan 2004 Location: Mackay Posts: 48	I found out a little bit of information, it occured the same time erros started to appear. I found the error occured and here it states: The Remote Procedure Call (RPC) service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: No action. Every error that I have had that didnt popup with any error messages, this one might be a prime suspect

05-29-2004, 10:51 PM	#7
tw Read? I only know how to write. Join Date: Jan 2001 Posts: 11,933	You are still not providing the so important information in the Event log. Use Window's Help if you don't know what the Event log is.

05-29-2004, 10:56 PM	#9
pirate Burn anything in 3 minutes...Guaranteed!!!!! ! Join Date: Jan 2004 Location: Mackay Posts: 48	i can get into the event viewer to view the errors, but what wouild you like me to show you, the expanded error, that describes it, or a screenshot?

05-29-2004, 11:47 PM	#10
Torrere a real smartass Join Date: Dec 2001 Location: Kirkland, WA Posts: 1,121	Messenger Service is a spam recepticle built in to Windows. It's meant for an administrator to be able to send machines on a network, but I think that it's most commonly used for spam. Ignore it. You can disable it by going into the Administrative Tools and disabling that service. It might be most helpful if you copy the text of the event log and paste it here verbatim.

05-29-2004, 11:50 PM	#11
pirate Burn anything in 3 minutes...Guaranteed!!!!! ! Join Date: Jan 2004 Location: Mackay Posts: 48	The Remote Procedure Call (RPC) service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: No action. Thats what it says

05-30-2004, 08:27 PM	#13
pirate Burn anything in 3 minutes...Guaranteed!!!!! ! Join Date: Jan 2004 Location: Mackay Posts: 48	I do have a firewall Sygate Personal Firewall 5.5 Is that good enough?

06-02-2004, 09:36 AM	#15
Carbonated_Brains Does it show up here when I type? Join Date: Oct 2003 Location: Between the smoky layers of a prosciutto sandwich! Posts: 355	Errors in svchost.exe on a Win2k system suggest you have a variant of the blaster worm, actually.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)