svchost.exe

Lately I have been getting an svchost.exe error. I was browsing some warez site lets say and I accidently installed "Clear Search" on my computer and I cannot delete it. I think this might be the cause of the svchost.exe error. I cannot copy and paste after getting this error and windows media player doesnt launch. Other programs have problems too. Anyone know how to fix this?

[Keefe]

I would start by running a virus scan. If you don't have one, go to Trend Micro's Online scan here -> http://housecall.trendmicro.com/hous...start_corp.asp

Then, install ad-aware located here -> http://www.techwarelabs.com/download...ion=file&id=40

Make sure to update that before you run it.

Also, run msconfig and delete all of the extra stuff that you don't want starting up when you boot your computer.

While you are in there disable the "windows messaging service" to block those annoying windows messanger pop-ups.

That should take care of your problems.

that didnt seem to pick anything up and im still getting the errors

You've got the Blaster virus. You need to do a proper scan of your computer with up-to-date definition strings to get rid of it. You might still get the error show up, though.

To eliminate it you need to go through the removal steps that Symantec has outlined. Escpecially run the program called FixBlast.exe

http://securityresponse.symantec.com...oval.tool.html

yeah its the blaster, i ve had it, too! i removed blaster, but svchost.exe prob was still there. Have u got Win2000?

If it is, u have still got the blaster (or again)...
U need, like WinXP, a securitypatch from Microsoft (for Win2000)!
Then the blaster wont come back to ur computer, because the DCOM-Gap is closed!

This is the DirectDL for Patch (Win2000): http://www.soft-ware.net/download.as...80-x86-DEU.exe


- draw the Patch
- go Offline
- run FixBlaster from Symantec again
- install the Patch
- restart
- and enjoy



sorry for my bad english!

Okay Im getting the svchost error as well. When I try to delete it it says that I cant delete it cuz Windows is using it. Ive read some stuff about the svchost error but everyone seems to have either Windows 2000 or Windows XP ... I have Windows 98. Can someone please help me? I ran the HouseCall virus scan that Keefe suggested and it didnt find anything. Please either post a reply here or email me at goddess_cheryl@sbcglobal.net and put "svchost" in subj line. Thanks =)

[Jason425]

ok wait, svchost is NOT A VIRUS, it comes running with windows.. if you do manage to delete it, you're screwed, i assume. Rid your system of the virus and you shouldn't have problems.

Okay I know that svchost is a legit program but Ive also read that a virus is associated with it and its masking itself in a secondary svchost program. Did I read wrong info? Why would I get the "svchostc" error msg when I try to logoff if all programs have been shut down?

Ive received a couple emails about this so I thought Id touch base and letcha know how I fixed my problem with the svchost errors. I had something called "Online Service" that started up when Windows loaded once I unchecked the box so it wouldnt load my problem was solved. Yours may not be the "Online Service" so run thru the steps below just to make sure. Hope it works for ya.

~*~ Cheryl ~*~


The issue you are experiencing may be the result of a program that runs during startup. Some programs may not automatically start after
Msconfig has been run. However, most programs can be opened using a manual method. Perform the following steps to determine which program is causing the issue.

1. From the Start menu, click Run. In the Run dialog box, type:
Msconfig. Click OK.

2. Click the Startup tab, and then clear each check box on the list.

3. After all items on the Startup tab have been cleared, click OK, and
then restart your computer when you are prompted.

4. Determine whether the issue is resolved.

Follow these steps if the issue is resolved.

Note: If the issue is intermittent, you may need to test the computer
for that specific issue until you feel comfortable that the issue would
have reappeared.

1. From the Start menu, click Run. In the Run dialog box, type:
Msconfig. Click OK.

2. On the Startup tab, select the first check box in the list. Click
OK, and then restart your computer when prompted.

Note: Some of the first check marks should include, but are not limited
to, the following items: SystemTray, TaskMonitor, ScanRegistry,
PCHealth
Updates, *StateMgr, LoadPowerProfile, and GoBack Polling Service.

3. Determine whether the issue is resolved.

4. After you are confident that the issue has been resolved, repeat
steps 1 through 3, but select the next check box in the list.

When the issue returns, the last check box that was cleared is loading
a
program that is preventing Windows from working properly. After the
item that is causing the issue is discovered, leave the check box
cleared, and then verify that all other startup items are selected. If
the computer continues to function properly, reconnect any external
devices that may have been disconnected in previous troubleshooting
steps. If the computer still continues to function properly,
troubleshoot the cleared startup item that is causing the issue. A
common troubleshooting step is to remove and reinstall the associated
program.

I had the same problem with a false svchost.exe. In my case it spawned a ton of IEXPLORER.EXE processes which in the end caused my computer to become very unstable.

The real svchost is (under win2k) located at \winnt\system32\svchost.exe (with a backup copy in \winnt\system32\dllcache\svchost.exe), but the fake was placed in \winnt\svchost.exe. The fake was also about 2kb smaller than the real one, and didn't have any identity information, which the real one has.

It had created a registry key under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run so it would start each time the computer booted, and when run it attempts to download "http://download.online-dialer.com/connect.php?od-stnd22", which appears to be a modem hijacker or "porn dialer".

I have not yet figured out which program it came in with.