SVCHOST Error

[eko976]

What is svchost.exe error?
I get this error at loading the Windows XP and then the system shuts down automatically

I started in last good known configuration
then I got IE Explorer error and again that SVCHOST error

I did system restore , same thing happaens

[minsonngo]

What is the exact error message?

[eko976]

That is the message:

SVCHost.exe error
Windows is shutting dowwn in 60 sec!

[gonzo4904]

are you on a broadband connection. if so, unplug your modem and start up the computer. if it doesnt re-start, then you are probably experiencing a windows exploit. see the windows XP forum for information

its basically a bufferoverflow exploit of the RPC(Remote Procedure Call). It is a known issue and can be corrected by installing critical update 823980.

[burningrave101]

Me and half a dozen of my buddies on another forum were in irc chat today and we all started experiencing this same problem yesterday and it was really starting to get on my nerves. Later today i did a search on google for Remote Procedure Call terminating unexpectedly and found LOTS of results and also found a link to the patch from microsoft that fixed this ignorant problem and got us all back on track again .

[eko976]

The Remote Procedure Call (RPC) service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Reboot the machine.

That is the message !!!

dO WHERE i CAN INSTALL UPDATES?
Thank you for fast help

[Cricket]

Check out these threads: Eliminating the RPC exploit for good

What to do if you get an error message about RPC

Cricket

[minsonngo]

Two of my computers were infected and here was what I did to resolve the problem. The problem you have is caused by a worm that exploits the RPC Flaw in Windows. Below is how to remove the worm and patch Windows so the worm cannot infect your computer again. Make sure you follow the instructions carefully.

Obtaining and running the tool

NOTE: You need administrative rights to run this tool on Windows 2000, or Windows XP.
Download the FixBlast.exe file from:

http://securityresponse.symantec.co...er/FixBlast.exe

Save the file to a convenient location, such as your downloads folder or the Windows Desktop (or removable media that is known to be uninfected, if possible).

Close all the running programs before running the tool.
If you are running Windows XP, then disable System Restore. Refer to the section, "System Restore option in Windows Me/XP," for additional details.

CAUTION: If you are running Windows XP, we strongly recommend that you do not skip this step. The removal procedure may be unsuccessful if Windows XP System Restore is not disabled, because Windows prevents outside programs from modifying System Restore.

Double-click the FixBlast.exe file to start the removal tool.
Click Start to begin the process, and then allow the tool to run.

NOTE: If, when running the tool, you see a message that the tool was not able to remove one or more files, run the tool in Safe mode. Shut down the computer, turn off the power, and wait 30 seconds. Restart the computer in Safe mode and run the tool again. All the Windows 32-bit operating systems, except Windows NT, can be restarted in Safe mode. For instructions, read the document "How to start the computer in Safe Mode."

Restart the computer.
Run the removal tool again to ensure that the system is clean.
If you are running Windows XP, then re-enable System Restore.
Run LiveUpdate to make sure that you are using the most current virus definitions.

When the tool has finished running, you will see a message indicating whether W32.Blaster.Worm infected the computer. In the case of a worm removal, the program displays the following results:

Total number of the scanned files
Number of deleted files
Number of terminated viral processes
Number of fixed registry entries

After you have completed the worm removal process, proceed to the link below and download the patch. Once the patch download is complete, execute the patch to prevent future infection.

http://www.microsoft.com/technet/tr...in/MS03-026.asp