svchost.exe - Application Error

[corpcomp]

Having just downloaded wingate to get the touchy feely thing before recomending it to a client, and I have been subjected to the following error.

svchost.exe - Application Error
The instruction at "0xe03c3a68" referenced memory at "0xe03c3a68". The memory could not be "read".

This error has only occured since I installed wingate (vanilla install)

Wingate seems to still be working, but this message eludes me as to why it has come about.

I also find that when a client attempts to connect to the internet, the modem dials out and once the connection is established the browser returns a DNS error, but after a couple of minutes the page is able to be displayed. This happens with all pages.

System overview:
XP1700+, 512Mb, onboard vid. nothing spectacular.
WIN2KSP4 Advanced server (stand alone mode)
IIS & SQL2K server on same machine.
Single NIC with multiple IP (all on same subnet)
Single dialup adapter (56K modem)

Any comments would be most appreciated.


Fred

[genie]

Does svhost.exe report this problem upon startup?

[corpcomp]

No, the service takes some time before it presents itself, but typicaly appears the first time a dialup connection is established. Nothing is reported in any of the event logs which isn't much help. Am continueing to perform further tests to establish what may be causitive.

[Pascal]

I also find that when a client attempts to connect to the internet, the modem dials out and once the connection is established the browser returns a DNS error, but after a couple of minutes the page is able to be displayed. This happens with all pages.

In the configuration of the DNS/WINS resolver in WinGate, add the DNS servers as specified by your ISP. Manual servers gain presedence over automatically discovered servers, as far as I know, so this might speed up detection of them.

However, when you say a "couple of minutes", is this a fairly significant delay or relatively close to the end of the dial-in sequence ?

[n0ticer]

corpcomp,

sounds like svchost.exe is infected with blaster worm...
and if so, some fixes are available from symantec (FixBlast.exe)

[corpcomp]

Thankyou for that comment.

Tested the server and sure enough, you were correct.

Sorry, but I feel like a clown, as I didn't even think of an attack of any type, but then I checked the paperwork for the server only to find that "no antivirus software had been installed" and even worse, it wasn't even planned for installation.

I am pleased to say that now the system has the latest version of ServerProtect operating now.

And better still, Wingate seems to be function as I would have expected. Some minor issues, but I am sure they are easily resolved.


Thankyou.

[n0ticer]

glad ur prob has been resolvd

u may also consider installing these freebies, to keep ur server threat free & in good shape :)

Ad-Aware
SpywareBlaster
Spybot Search & Destroy
a² Malware Protection
AVG Anti-virus

:)