Svchost.exe Application error

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Julian Over (anonymous_at_discussions.microsoft.com)
Date: 08/18/04 

Date: Wed, 18 Aug 2004 13:38:14 -0700

I had this a while ago - it's caused by a worm. Have a
look at these items:
MS03-039: A Buffer Overrun in RPCSS Could Allow an Attacker
to Run Malicious Programs
MS03-026: Buffer Overrun in RPC May Allow Code Execution
For additional information about the Blaster worm and the
Nachi worm, click the following article numbers to view the
articles in the Microsoft Knowledge Base:

826955 Virus alert about the Blaster worm and its variants

826234 Virus alert about the Nachi worm
>-----Original Message-----
>Hello,
>I'm facing an error.
>
>I have in my local network, many desktops on Windows 2000
Professional with
>SP4 which receive at frequent intervals, the following
message:
>
>Svchost.exe Application error
>The instruction at "0xe0403a68" referenced memory at
""0xe0403a68". The
>memory could not be read. Click on Ok to terminate the
program or click on
>cancel to debug the program.
>
>Can anyone help me ?
>Thanks for your support.
>
>
>.
>

Relevant Pages

  • Re: ? Nachi-worm over
    ... This a technical support newsgroup, ... Plus the worm tries to make you think ... >> 826955 Virus Alert About the Blaster Worm and Its ... >> 826234 Virus Alert About the Nachi Worm ...
    (microsoft.public.security.virus)
  • Re: New anti-blaster worm attempts to fix RPC/DCOM vuln - W32/Nachi.worm
    ... >> A new worm has also been discovered that exploits the MSRPC DCOM ... >> vulnerability that is not related to the MS Blast variants. ... >> exploiting the WebDAV vulnerability in Microsoft's IIS 5 Web Server. ... >> The Nachi worm is technically superior to its predecessors. ...
    (alt.computer.security)
  • New anti-blaster worm attempts to fix RPC/DCOM vuln - W32/Nachi.worm
    ... New variants of the MS Blast worm have been detected in the wild. ... exploiting the WebDAV vulnerability in Microsoft's IIS 5 Web Server. ... The Nachi worm will infect vulnerable Windows XP machines using ...
    (alt.computer.security)
  • Re: terminating the RPC service
    ... Virus Alert About the W32.Blaster.Worm Worm ... Windows must shut down because> the Remote Procedure Call was terminated unexpextdedly. ...
    (microsoft.public.sqlserver.security)
  • Re: New anti-blaster worm attempts to fix RPC/DCOM vuln - W32/Nachi.worm
    ... New variants of the MS Blast worm have been detected in the wild. ... > exploiting the WebDAV vulnerability in Microsoft's IIS 5 Web Server. ... The Nachi worm will infect vulnerable Windows XP machines using ...
    (alt.computer.security)