Svchost.exe

Discussion in 'NOD32 version 2 Forum' started by nintendoman, Dec 25, 2006.

Thread Status:
Not open for further replies.
  1. nintendoman

    nintendoman Registered Member

    Joined:
    Dec 22, 2006
    Posts:
    10
    A backdoor of a trojan attacked my friend computer. After he reboot the computer he gets error about the svchost.exe. The computer became very slow and the task manager didnt work.He scannned with the nod32 and didnt find anything. Whats the problem? Is it the svchost ot a virus and how do you fix it?
    A quick answer will be helpful
    Regards Alex
     
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Please submit the file to samples @ eset.com with a link to this thread in the subject. If it's not located in the windows/system32 folder, rename it and restart the computer.
     
  3. nintendoman

    nintendoman Registered Member

    Joined:
    Dec 22, 2006
    Posts:
    10

    Thanks for the quick answer and for the information but im afraid that the internet on his computer doesnt work now:(
    How do i do now?
    Please help
    Regards Alex
     
  4. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Any chance of transferring it on a USB stick?
     
  5. nintendoman

    nintendoman Registered Member

    Joined:
    Dec 22, 2006
    Posts:
    10
    Nope that doesnt work
     
  6. ASpace

    ASpace Guest

    Have you tried repairing Winsock in order to get the internet working ?
     
  7. Stephanos G.

    Stephanos G. Registered Member

    Joined:
    Mar 29, 2005
    Posts:
    720
    Location:
    Cyprus
  8. proactivelover

    proactivelover Registered Member

    Joined:
    Apr 7, 2006
    Posts:
    840
    Location:
    Near Wilders Forums
    i also get Infected with this virus
    1.when it execute it connet to internet(i use firwall so i deny it to access to internet
    2.install it to run at system startup(use this free h**p://www.mlin.net/StartupCPL.shtml programe to disable it from startup)
    3.install it self on window folder(on safe mode delete it by searching Svchost.exe file)
    4.disable taskmanager and registry manager
    do this thing after delete Svchost.exe file
    1.use anyother registry manager(i use TuneUp Utilities 2007 it has startup manager,registry manager,process manager and many other)
    2.HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
    3.see screenshort
    4.and change the both RegistryTools and TaskMgr value to 0(if it is 1)
    now all done
    making thing easy is better world
     

    Attached Files:

    • eee.jpg
      eee.jpg
      File size:
      90.9 KB
      Views:
      259
Thread Status:
Not open for further replies.