How do I correct on a Windows 2003 server box, a problem with SVCHOST.EXE termination immediately when the splash disappears on boot?

Posted on 2009-04-15
Last Modified: 2012-05-06
Last time my server went down.   I had to shut it down hard.  When it came up, immediately after the splash screen disappears and the "Preparing Network Connections" comes up.
SVCHOST.EXE - APPLICATION ERROR.  It will do this numerous times ( like for every service ).
It will finally let me log in, but 75% of my services will not load and it I try to load them, they give me the same SVCHOST error. Is SVCHOST corrupted, and if so why do some load and some don't?
Question by:mrcoolbreeze
    LVL 31

    Expert Comment

    by:Rodney Barnhardt
    Have you tried booting it without the network cable connected? Can the system boot fine in safe mode?
    Check the event viewer for errors and see if they match any shown here:

    Author Comment

    WIll try the network cable now.
    No it hasn't booted into safemode. It throws the EXACT same error in safe mode.
    Event viewer won't even let me read anything, nor will services.
    I found that odd, but aren't they dependent on another service?
    LVL 31

    Expert Comment

    by:Rodney Barnhardt
    I just double checked, and the event log does not have any dependencies.

    Author Comment

    So that would tend to make me believe viral?
    Scanning it now outside the system.
    I had already ran a WELCH (maybe WELSH) fix on it already since that tends to infect SVCHOST.

    Author Comment

    Finally got this system back up.
    I had to replace SVCHOST.EXE with another copy from 2003 Server CD.
    Nothing else worked.
    Ran a couple of virus scans, found a root kit and some a GMAIL.SYS trojan.
    But the final fix was replacing SVCHOST.EXE

    Accepted Solution

    Question PAQ'd, 125 points refunded, and stored in the solution database.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
    Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
    This video is in connection to the article "The case of a missing mobile phone (". It will help one to understand clearly the steps to track a lost android phone.
    In this sixth video of the Xpdf series, we discuss and demonstrate the PDFtoPNG utility, which converts a multi-page PDF file to separate color, grayscale, or monochrome PNG files, creating one PNG file for each page in the PDF. It does this via a c…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now