More svchost.exe questions

[Wendie]

Hi,
I have been reading all about this file on lots of
threads, I seem to have another problem with it which I
don't know how to solve. Brat boys downloaded lots of
viruses and one of them damaged the svchost.exe in
winnt/system32/drivers. I've put the machine back
together, took the hard drive out and slaved it to
another and removed the viruses, 9 different ones in all,
brats, and put it back. Had to reinstall Norton (yes,
completely wiped it before I reinstalled)because it was
corrupt. Now I have an odd problem, I cannot get on the
symantec site, neither to download virus definitions, nor
any other page. I can access any other website but not
symantec. Live update is unreachable, I've done the
download the latest liveupdate, etc, have all the patches
for Win2k. Searched thru symantecs lack of knowledge
base. I tried looking in services and none of the remote
services can start. Remote access connection manager
won't start, and one says it can't find
winnt/system32/drivers/svchost.exe. Is this a legit file
or has one of the viruses moved the executable path? I
did a second option repair, didn't work. It is driving
me nuts, I got everything working again but this and it
isn't much use to have internet access if I can't use
Norton! Am I barking up the right tree? I am sure the
viruses screwed up some host protocol somewhere but I
can't find it! Any suggestions would be appreciated, at
this point I am left with clean reinstall so I will try
anything to avoid that.
Thanks!
Wendie

 

[Enkidu]

Hi,
I have been reading all about this file on lots of
threads, I seem to have another problem with it which I
don't know how to solve. Brat boys downloaded lots of
viruses and one of them damaged the svchost.exe in
winnt/system32/drivers. I've put the machine back
together, took the hard drive out and slaved it to
another and removed the viruses, 9 different ones in all,
brats, and put it back. Had to reinstall Norton (yes,
completely wiped it before I reinstalled)because it was
corrupt. Now I have an odd problem, I cannot get on the
symantec site, neither to download virus definitions, nor
any other page. I can access any other website but not
symantec. Live update is unreachable, I've done the
download the latest liveupdate, etc, have all the patches
for Win2k. Searched thru symantecs lack of knowledge
base. I tried looking in services and none of the remote
services can start. Remote access connection manager
won't start, and one says it can't find
winnt/system32/drivers/svchost.exe. Is this a legit file
or has one of the viruses moved the executable path? I
did a second option repair, didn't work. It is driving
me nuts, I got everything working again but this and it
isn't much use to have internet access if I can't use
Norton! Am I barking up the right tree? I am sure the
viruses screwed up some host protocol somewhere but I
can't find it! Any suggestions would be appreciated, at
this point I am left with clean reinstall so I will try
anything to avoid that.
Thanks!

Wendie, you still have traces of the virus(es) on the system. I don't
think that winnt/system32/drivers is a valid path for svchot.exe so if
something is trying to use that, it's something to do with the
virus(es). I don't suppose you noted what the viruses were? If you did
you could read the removal instructions for the virus on Symantec's or
any other AV vendor's site. Many viruses need manual removal of rogue
registry entries, unless there is a specific removal tool. You cannot
totally remove viruses by running the AV program in many cases,but I'm
not sure why.

If you have nine viruses, and don't know which they are, you may be
better off scrapping the OS entirely and re-installing. However you
could locate as many virus removal tools as possible from the last
five or six viruses and run those. If you do not have the virus, it
won't do any harm. It may help.

Cheers,

Cliff