.

Svchost.exe

<<

Pheonix 7102

Newbie
Newbie

Posts: 2

Joined: Sat Dec 06, 2008 12:11 am

Post Sat Dec 06, 2008 12:18 am

Svchost.exe

ok, i am really new to ethical hacking and i would l love to learn how for one thing. But that is a subject for another time. anyway my antivirus(s) are picking up a FAKE Svchost.exe dropper and it says that the virus is in windows and is svchost.exe. ok I know this sounds simple right? well I heard that svchost.exe under normal conditions is a legitimate system file. so when i remove it with my antivirus it asks me to reboot. so i do and run the scan after rebooting. it's still there. so should i boot into safe mode and remove it or is svchost actually supposed to be in my windows folder and i shouldn't remove it. if so, what can I do to get rid of it. when my antivirus isn't blocking it, it keeps firefox from running, and around 4:30 or so it makes all my files look empty and my computer is basically useless until i reboot. i know that its maleware so what should i do?
<<

jason

User avatar

Hero Member
Hero Member

Posts: 1013

Joined: Sat Jun 21, 2008 6:23 pm

Location: USA

Post Sat Dec 06, 2008 11:37 am

Re: Svchost.exe

Grab spybot:

http://www.safer-networking.org/en/download/index.html

and let us know exactly what it thinks it finds.
<<

loki

Newbie
Newbie

Posts: 2

Joined: Mon Dec 08, 2008 12:03 am

Post Mon Dec 08, 2008 12:09 am

Re: Svchost.exe

What if you scan again before boot?
Does it show again?
<<

sgt_mjc

Sr. Member
Sr. Member

Posts: 294

Joined: Tue Feb 05, 2008 8:34 am

Location: AL

Post Mon Dec 08, 2008 1:08 pm

Re: Svchost.exe

Svchost.exe can be seen several times on a clean XP system. Use Spybot or similar to check as well as an AV you trust. Run the scans within safe mode. Safe mode loads just the minimum that Windows needs to function. Good luck.
Mike Conway
CISSP
CompTia Security +
C|EH
<<

blackazarro

User avatar

Sr. Member
Sr. Member

Posts: 368

Joined: Sun Aug 13, 2006 5:31 pm

Post Mon Dec 08, 2008 1:58 pm

Re: Svchost.exe

Nice article explaining Svchost.exe:

http://www.howtogeek.com/howto/windows- ... t-running/
Security+, OSCP, CEH

Return to Malware

Who is online

Users browsing this forum: No registered users and 1 guest

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software