Ok, we need to do a search. From safe mode, inside the command prompt, type this:
dir svchost.exe /s /b
The search can take up to a few minutes to complete, depending on the number of files on your computer.
So once you find one (the C:\WINDOWS\$NtServicePackUninstall$\svchost.exe is a good example), you're going to copy it to system32. It'll look like this:
COPY c:\windows\DIRECTORY\svchost.exe %systemroot%\system32
(So to give you an example, COPY C:\WINDOWS\$NtServicePackUninstall$\svchost.exe %systemroot%\system32)
Give that a try and let me know please?
That is a bad example - you shouldn't recommend the use of the svchost.exe file from the C:\WINDOWS\$NtServicePackUninstall$ folder. This will just create more potential problem in the future. In short, by doing this you will create a mismatch of the versions. The $NtServicePackUninstall folder contains files that existed prior to the install of a Service Pack.
Yeah, the problem is though, if no other copy of svchost exists, and there isn't a windows CD, we have nothing to get her up and running enough to continue working. I'll look into this more. Thanks for the feedback!
Do I need to change the directory because when I type in the dir svchost.exe /s /b it says file not found but it is pulling from my documents and settings.
Ack, thanks Mark! Sometimes the fingers go flying faster than my brain I guess.
I went to http://service.mcafee.com/FAQDocument.aspx?id=TS100969&cid=77152 on an unaffected laptop and downloaded the automatic .exe file.
Opened my damaged laptop in safe mode (as myself and not as administrator.)
Popped in my usb stick went to it, double clicked it and off it went.
Now all appears well and back to normal though I've yet to test it all fully.
Thanks for this solution.