Endpoint Protection

 View Only
  • 1.  Is it any Virus attack

    Posted Dec 31, 2011 01:41 AM

    Thanks

    Regards,

    Anil



  • 2.  RE: Is it any Virus attack

    Broadcom Employee
    Posted Dec 31, 2011 02:40 AM

    Hi Anil,

    There is no picture, can you please attach it again?



  • 3.  RE: Is it any Virus attack

    Posted Dec 31, 2011 03:33 AM
      |   view attached



  • 4.  RE: Is it any Virus attack

    Posted Dec 31, 2011 03:40 AM

    Hello, use Process Explorer to see what process is hosted by SvcHost.exe and submit it to Symantec for analyse.

    All error message aren't cause by virus. Try to check the computer's memory and hard drive for health status by some utility.



  • 5.  RE: Is it any Virus attack

    Posted Dec 31, 2011 03:41 AM

    Hi pete

    The error message is as follows.

    c:\windows\system32\svchost.exe

    The NTVDM Cpu has encountered an illegal instruction.

    CS:0e4c IP:0116 OP:63 72 6f 73 6f Choose 'Close' to terminate the Application



  • 6.  RE: Is it any Virus attack

    Posted Dec 31, 2011 05:08 AM

    Kindly review the Event which has generated on same time.



  • 7.  RE: Is it any Virus attack

    Posted Dec 31, 2011 07:36 AM
      |   view attached

    Hi Anil,

    This is not a virous attack may be some try to kill windows local services that's why you are showing this error. please find attachment for your referance.

     



  • 8.  RE: Is it any Virus attack
    Best Answer

    Broadcom Employee
    Posted Dec 31, 2011 09:15 AM

    It may not be virus, however it might be corrupted. http://forums.techguy.org/windows-xp/941820-16-bit-ms-dos-subsystem.html

    My suggestion to you would to be to try to boot in safemode, and go internally and copy svchost.exe from C:\WINDOWS\system32 to C:\WINDOWS or start in safemode with cmd and run sfc /scannow
    or boot from CD and repair system files if OS not bootable.

     

    You still can submit the file to Symantec security response team using you support entitlement.

    https://submit.symantec.com/websubmit/bcs.cgi

    https://submit.symantec.com/websubmit/essential.cgi



  • 9.  RE: Is it any Virus attack

    Posted Jan 02, 2012 12:27 AM

    Thanks pete it worked.

    am marking this as a solution.



  • 10.  RE: Is it any Virus attack

    Broadcom Employee
    Posted Jan 02, 2012 12:54 AM

    Great :-), however ensure the best security practices are followed in the environment.