Desktop

Ask something
Discussion Locked

Error Message

0 helpful
3 replies

by oalrez

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
My OS is W2K on an IBM Netvista with up to date McAfee virus protection version 4.5.0 SP1. When I open an Excel or Word document, after about 10 minututes, I get the message "Cannot use Object Linking and Embedding". I then get the svchost.exe error and have to terminate the application. I also found out that I cannot copy and paster from dir to dir. IE can get to our intranet but I get no reponse when I try to get to the internet through our firewall. When I reboot, it seems to clear up until I launch the MS Office applications again.

3 replies

by pocono

This is usually a symptom of the Blaster virus. Are you sure your Mcafee engine and virus dats are all up to date?

I would also look to Mcafee or Symantec to find and use the blaster removal tool and make sure you update your O.S. with the proper security updates.....Hope this helps....

by jschein

you have the blaster & gaobot virus...

Must have these two patches to stop it :

KB823980
KB824146

Also, using 4.5.0 sp1, works, but there is a new corporate one of 7.0 I would suggest of going into nai's website and upgrading.

Go into CMD prompt.

Type cd\winnt\system32
Dir svcho*.exe

Do you see svchos1.exe?

Type ren svchos1.exe virus.000

Go into your task manager --> Processes.. Sort by name. Do you see SVCHOS1.EXE? Right click on it, select debug (must be an admin) and when the box comes up, say ok.

Install those two patches... go into regedit.

Do a search in the root for svchos1.exe . Delete all instances.

Go back to the root and do a search for msblast.exe . Delete that as well.

Also, while you do this, if you see a folder called configuration loading - delete that folder.

Reboot. update antivirus and do a full scan.

by donmars

You may actually have a Macro Virus in your computer. Since you mention the problem shows up when you use Office, and I assume therefore Word, then what may be happening is that even though you may rid Virii from your computer you actually recreate it when using Word. Macro viruses spread by having one or more auto-execute macros in a document. By opening or closing the document or using a replaced command, you activate the virus macro. As soon as the macro is activated, it copies itself and any other macros it needs to the global macro file "normal.dot." After they are stored in normal.dot they are available in all opened documents. At this point, the macro viruses try to spread themselves to other documents, usually by including an AutoClose macro that attaches the virus macros to the document and saves it.
I forget where to find the Normal.Dot file but use search to find it and delete it after you do a virus scan! Word documents (.DOC files) cannot contain macros, only Word templates (.DOT files) can contain macros.

This discussion is closed to new replies.