Soldato
- Joined
- 18 Oct 2002
- Posts
- 4,898
Some of our affected machines wouldn't recognise removable media unless they were booted into Safe Mode and logged in as a local administrator.
Our procedure was:
Boot into Safe Mode, log in as local admin and rename Program Files\McAfee to something else.
Reboot back to safe mode.
Copy svchost.exe to Windows\System32 from a CD or USB stick.
Reboot Windows into normal mode. You might want to pull the network cable at this point as you'll have no AV running, but we didn't bother.
Rename Program Files\McAfee back to this.
Run Superdat file to update.
Our procedure was:
Boot into Safe Mode, log in as local admin and rename Program Files\McAfee to something else.
Reboot back to safe mode.
Copy svchost.exe to Windows\System32 from a CD or USB stick.
Reboot Windows into normal mode. You might want to pull the network cable at this point as you'll have no AV running, but we didn't bother.
Rename Program Files\McAfee back to this.
Run Superdat file to update.