nagios
+ Reply to Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 19

Thread: svchost.EXE where it shouldn't be. (I think)

  1. #1
    Unregistered Guest

    Question svchost.EXE where it shouldn't be. (I think)

    Hey hey! I recently downloaded Bazooka Spyware Detector, and it reported that svchost.exe was in my %WinDir% and that it was NOT supposed to be there.

    It gave me a list of instructions to get rid of it manually, and a list of things that put it there and how to get rid of those manually as well. I've tried about 7 of the *0 solutions given, it svchost.exe still remains. I ran Norton AntiVirus 200* to check for trojans and what not, but nothing comes up.

    I am mainly concerned about this because it seems to be interrupting my online gaming, making things difficult to get done... Please help!!

    Also, I downloaded spybot, and it keeps detecting something called DOS Exploit everytime I run it, even with consecutive scans/fixes. X_x

  2. #2
    Unregistered Guest
    C:\WINDOWS\system*2 thats where is should be at if your on XP. =svchost.exe

  3. #3
    Unregistered Guest
    It's there also. I suppose I should have said that I have an EXTRA svchost.exe in my WINDOWS folder, and I don't know what keeps putting it there. X_x

  4. #4
    Unregistered Guest

    Smile

    Lol you have been exploited by some scriptkiddies

    They used the exploit spybot said to install a ftp on a port between 0 and 65000 :S

    Just install a firewall mate :P
    And update da windows

  5. #5
    Unregistered Guest
    why does svchost take up soooo much p memery?

  6. #6
    Unregistered Guest
    i am running windows XP home Edition and i'm having problems with my online gaming experiance as well, i looked up my tasks and it appears that i have 4 svchost.exe's running

    (i.e. 2 in system, * in local service, and * in network service)
    (60,7*2k total memory usage by svchost.exe)
    how can i tell which ones are real or not?

  7. #7
    Unregistered Guest
    You got a Welchia Worm if your getting explorer errors, its from downloading porn games I'm serious. Norton cant get rid of it, its protected because its a system process and your explorer errors wont let you look at it anyway / Format :c

  8. #8
    Unregistered Guest

    Lightbulb

    It appears that you have a Lovesan (Dumaru, BackDoor or some of a kind) virus in your system.
    To evidence the fact of infection try to find with your search function these files: svohost.exe, swchost.exe. If you find them in your %windir%/system*2 folder - be sure your workstation is infected, you can also find the file svohost.exe in your processes in the task manager.
    To get rid of it try to download a free utility from [url]http://www.kaspersky.com/[/url] or update your existing Antivirus and scan for viruses again. Good luck!

  9. #9
    Unregistered Guest

    Wink Re: svchost.EXE where it shouldn't be. (I think)

    Originally posted by Unregistered
    Hey hey! I recently downloaded Bazooka Spyware Detector, and it reported that svchost.exe was in my %WinDir% and that it was NOT supposed to be there.

    It gave me a list of instructions to get rid of it manually, and a list of things that put it there and how to get rid of those manually as well. I've tried about 7 of the *0 solutions given, it svchost.exe still remains. I ran Norton AntiVirus 200* to check for trojans and what not, but nothing comes up.

    I am mainly concerned about this because it seems to be interrupting my online gaming, making things difficult to get done... Please help!!

    Also, I downloaded spybot, and it keeps detecting something called DOS Exploit everytime I run it, even with consecutive scans/fixes. X_x
    Try [url]http://www.thebugs.ws/news/show.shtml?id=55[/url] if you got Dos Exploit problem

  10. #10
    Unregistered Guest
    hey guys...there's a simple way to detect if u r using windows XP ...u get to see this file running in the processes tab under IMAGE NAME...now to the right side u see another list which states username....now if the username beside the various instances of svchost.exe is nethyin other than : LOCAL SERVICE,NETWORK SERVICE,SYSTEM ....( chances r its ur own windows user login )...then goto: c:/windows/system*2 folder n delete the file...

  11. #11
    Join Date
    May 2001
    Posts
    218

    Arrow DSO exploit

    Also, I downloaded spybot, and it keeps detecting something called DOS Exploit everytime I run it, even with consecutive scans/fixes.
    DSO exploit still found by SpybotS&D after scan and fix is a SpybotS&D bug. If you fixed it with SpybotS&D it is gone but still reported in later scans. This bug is fixed in SpybotS&D beta and new version will be released in a few days.
    Blacksheep

  12. #12
    Unregistered Guest

    Exclamation

    Originally posted by Unregistered
    You got a Welchia Worm if your getting explorer errors, its from downloading porn games I'm serious. Norton cant get rid of it, its protected because its a system process and your explorer errors wont let you look at it anyway / Format :c
    Symantec has a tool to remove the Welchia Worm; easy on the format c: tough guy.

  13. #13
    Unregistered Guest
    Hi I searched for the svchost.exe in my computer and found it was in * separate folders.


    C:\WINDOWS\system*2

    C:\WINDOWS\ServicePackFiles\i*86

    C:\WINDOWS\SoftwareDistribution\Download\6ca7b*a8efd5a*b6f87fff**5a2eb*8*


    are any of these not supposed to be present? any help would be greatly appreciated. thanks.

  14. #14
    Unregistered Guest
    I think that's visrus

    C:\WINDOWS\SoftwareDistribution\Download\6ca7b*a8efd5a*b6f87fff**5a2eb*8*

    It may be downloaded from IE in surfing.

    But to delete it correctly you have to use AVP antivirus.

  15. #15
    Unregistered Guest
    I think that's virus

    C:\WINDOWS\SoftwareDistribution\Download\6ca7b*a8efd5a*b6f87fff**5a2eb*8*

    It may be downloaded from IE in surfing.

    But to delete it correctly you have to use AVP antivirus.

+ Reply to Thread

Similar Threads

  1. HELP!! svchost.exe
    By walterplatypus in forum Viruses and Trojans
    Replies: 9
    Last Post: 01-21-2011, 07:56 PM
  2. svchost.exe
    By Unregistered in forum Viruses and Trojans
    Replies: 3
    Last Post: 08-10-2004, 11:38 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts