RE: Safe mode - svchost.exe
From: Lawrence Tse (Tse_at_discussions.microsoft.com)
Date: 11/02/04
- Next message: Gary Smith: "Re: Icons"
- Previous message: John Wunderlich: "Re: Red x in place of images"
- In reply to: Menno Hershberger: "Safe mode - svchost.exe"
- Next in thread: Menno Hershberger: "RE: Safe mode - svchost.exe"
- Reply: Menno Hershberger: "RE: Safe mode - svchost.exe"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 1 Nov 2004 21:07:02 -0800
The happening of this problem probably because some hidden service is running
through svchost.exe. It can be a virus, adware, or trojan horse. In some
case, antivirus program may not be able to detect and disinfect your system
in 100%.
In safe mode, Windows will only load with minimal set of drivers, some aux.
drivers like network adapter (except you choose "safe mode with networking",
display adapter will be disabled, hence it may limit the activity of the
malicious code, especially in network area. Poorly written virus may then
generate error when certain attacking target is not available.
Not only the malicious code, even operation of NAV activities may be
restricted by safe mode as well. However, you still have to depend on
antivirus software to tackle the problem. However, you may need to update
your virus definition file before scanning. In order to get a clean scanning
environment, you can think about attaching the hard drive to another system
for scanning, or a clean boot CD like WindowsPE to aid scanning. Third
party WinPE is also a good choice but not good to mentioned here. Try using
google to find it out.
Wish this may help.
Lawrence Tse
"Menno Hershberger" wrote:
> I'm working on a Windows 2000 Pro machine that gives me the following error
> only in Safe Mode:
> "svchost.exe has generated errors and will be closed by Windows". I can
> cancel the message a couple of times and it'll stay away. My reason for
> being in Safe Mode was to run Norton Antivirus. NAV will come up to the
> status window and "refreshing" but it doesn't go any further. And it won't
> scan.
> In normal mode I don't get the error and Norton will run properly. I put a
> copy of msconfig.exe on it and disabled a lot of obvious bad stuff, but of
> course that wouldn't effect Safe Mode.
> I've Googled and found several references to the error message, some
> relating it to the W32.Blaster. Ran FixBlast.exe (from Norton) and it found
> nothing. I really didn't find anything about it happening in Safe Mode.
> This guy just got DSL and that's when all these problems arose. First was a
> Norton popup you couldn't get rid of which found "Backdoor.Ranky" in a file
> called "fgsh.exe"
> Norton only found one "Download.Trojan" on the full scan and deleted it.
> But still the problem with Safe Mode. How do I fix it?
>
> --
> --- I haven't lost my mind. It's backed up on disk somewhere. ---
>
- Next message: Gary Smith: "Re: Icons"
- Previous message: John Wunderlich: "Re: Red x in place of images"
- In reply to: Menno Hershberger: "Safe mode - svchost.exe"
- Next in thread: Menno Hershberger: "RE: Safe mode - svchost.exe"
- Reply: Menno Hershberger: "RE: Safe mode - svchost.exe"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
