SVCHOST

[trbal]

Hi
I have eset smart security with updated database 3707. My eset keeps on popping up a message object c:\windows\svchost.exe
threat win32/PSW.wow.cmu.trojan cleaned by deleting quarantined. The message is up all the time. In the main screen i have 302 attacks and still going up help please.

[Marcos]

Have you tried deleting the file in safe mode? You could also try installing EAV v4 beta which is able to remove resistant threats.

[trbal]

Thanks

svchost is system file isnt it? I will try 4 will keep u updated anyway i have done a file submission also.

[Marcos]

Originally Posted by trbal

Thanks

svchost is system file isnt it? I will try 4 will keep u updated anyway i have done a file submission also.

c:\windows\system32\svchost.exe is a system file, but it doesn't mean it's necessarily clean.

[trbal]

Ok

I found one more in c:\windows have deleted in safe mode but when i log back it gives me the same pop up as virus detected.

[trbal]

Thanks Marco

4 Beta did th job it did also detect other 2 variants not detected by 3.0672