You may have been hit by the RPC worm that's now in the wild. Apparently the MS03-026 patch for the RPC security flaw introduces a DOS vulnerability in the DCOM service which causes that service to crash, which in turn would generate a number of svchost.exe errors. After applying the patch, turn off the DCOM service, and follow the removal instructions for the worm http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MSBLAST .A or http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.htm l HTH. Regards, Amer Karim Nautilis Information Systems e-mail: amerk@xxxxxxxxx, mamerk@xxxxxxxxxxx -----Original Message----- From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-bounce@xxxxxxxxxxxxx]On Behalf Of Hazen Woods Sent: 11 August 2003 07:24 To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] svchost.exe System is Win2K SP2. In last two days, periodically, a popup window appears saying that <svchost.exe> had unexpected error and closed. In same time frame, my dial up to ISP, via TCP/IP starts acting weird in that when I right-click on the icon of the 2 desktops and then click on "Status", instead of getting the properties page for that connection I get nothing. Are the two related? What is svchost.exe and how do I diagnose/solve the problem? Hazen Woods Austin, TX USA eCS and Win2k Pro what a combination ******************************************************** This Week's Sponsor - RTO Software / TScale What's keeping you from getting more from your terminal servers? Did you know, in most cases, CPU Utilization IS NOT the single biggest constraint to scaling up?! Get this free white paper to understand the real constraints & how to overcome them. SAVE MONEY by scaling-up rather than buying more servers. http://www.rtosoft.com/Enter.asp?ID=148 ********************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm ******************************************************** This Week's Sponsor - RTO Software / TScale What's keeping you from getting more from your terminal servers? Did you know, in most cases, CPU Utilization IS NOT the single biggest constraint to scaling up?! Get this free white paper to understand the real constraints & how to overcome them. SAVE MONEY by scaling-up rather than buying more servers. http://www.rtosoft.com/Enter.asp?ID=148 ********************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm