sorry for late reply here, been running round like a headless chicken and driving around to sites to remedy! Fix i been using with success is to install 5859dat from disk and after that copy over svchost from an unaffected machine. Reboot and robert is your mothers brother. If it starts trying to shutdown again, go start-run, and type in 'shutdown -a'. Aborts shutdown. Symptoms i have seen on affected machines include no start bar, changed start bars to grey (not classic, just a greyed bar) and bsod. Also seems to shut off all connectivity. Just finished having started at half6 this morning. Waiting on an epo deployable solution......could be waiting a while. Apologies if i have taught anyone to suck eggs, and again sorry i didnt get on earlier to update