svvchost

Same info. I came across and was wondering the same thing. However, the OP did say it was not showing as running in Task Manager. That is one of the reasons I asked for the property values. Perhaps it has been detected my one of the scanners and quarantined(?). Leaving only harmless empty folders(?). Would be curious what his settings are. Not at all familiar with the XP firewall. Weather it creates logs, if you can block on an individual basis.

 

i did a complete scan with spysweeper picking up nothing and nod finding trelew which i can't delete (only has the leave option) which i copied to quaratine also nod has a couple of other files in quarantine that can't be deleted from other scans.

we did have a problem with a disgruntled e-bay seller who wasn't happy with a negative feed back and e-mailed some nasty pics and comments which were sent to e-bay security.

so whats the next move

thanx again for all the help

 

IMO. The easiest would be found here -> http://spywarefiles.prevx.com/RRDGGH18316765/svvchost%2Eexe.html or here -> http://http//fileinfo.prevx.com/adware/qq8f8a23967886-SVVC18316765/SVVCHOST.EXE.html The most complete here -> http://gladiator-antivirus.com/forum/index.php?showtopic=10517
The sure way is f\disk. Maybe not an option in your case.

 

I think the best way is to post a HJT log as Snowbound sugested.
Personally before going that way I will download, update and and scan with

SuperAntiSpyware Free
AVG antispyware free
plus Kaspersky online scan--

Just to see what they find, removal is next step after making sure that the detection is correct.

All this will not hurt in my opinion.

 

ok guys here's the hyjackthis file you asked for. i downloaded and ran the free previx program. it found a couple of infections that nod or spysweeper didn't find. i hit the delete button by accident before i copied down what it found.
again i want to thank you for all your help.....

~Log removed - Please post your log at the link Snowbound provided.~ >> http://gladiator-antivirus.com/forum/index.php?showtopic=10517

 

I think you misunderstood snowbound.

 

oop's sorry I don't understand why i am going to another forum

 

Wilders no more provides HJT log analysis.
Ur best way to go is as advised.

 

Sorry gentlemen.... don't know how I missed it after reading countless posts in this forum.

 

They will take good care of you. Let us know how things workout.

 

That they did... vundo was running amok... lophuut over at gladiators took great care of me and and as a result I have a clean system... thanks everyone for all the help... Now I have a ? about nod which I'll take over to the other forum...

for those lurkers out there... go over to gladiators and do a search for svvchost or fed-up to see how he did it...cause I personally have no idea.

 

LoL,

i would think most don't but no matter, all is clean again.



snowbound

 

thanks SB for your help... i am sure i'll be back for more help in the future

 

You're welcome(the good people at Gladiator's did all the work).

Enjoy the forums.



snowbound

 

after allowing Msn to connect, there are serveral attempt of Msn using svchost, OLE and firefox to connect. Comodo's alerts are high on these.

Do i allow them? After blocking them, my PC freeze...