Unfixable Virus

[dreissig]

There's a virus that attacks the service host program within Windows 2000. You know you have it when the system prompts you, "Svchost.exe has generated errors and will be closed by Windows. You will need to restart the program."

It does have some nasty symptoms. You can't cut and paste after you get the error message. You can't disconnect from the Internet. You can't get a patch from Microsoft because it won't let you into the site.

I've upgraded everything including the service packs on the O/S and the browser. Symantec's web site acknowledges the virus and says "We're working on it." Any other suggestions?

[scottcsmith]

1. Can you run your virus software in safe mode?

I had a virus and Norton wasn't fixing it. I re-booted into Windows XP safe mode, and then ran Norton again. It corrected the problem. You may want to give it a try.

[Kellanved]

2. this sounds like Blaster

Should that be true:
1) Remove Blaster (for example with the Symantec tool)
2) Install all updates (including Win2K SP4 and IE6 SP1)
3) System should return to normal.


Edit: check these documents:
http://www.microsoft.com/security/incident/blast.asp
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html