not able to shutdown due to process syshost.exe

  • Thread starter Thread starter Kateel VIJAYANANDA
  • Start date Start date
K

Kateel VIJAYANANDA

Hi,

I am running windows XPO Professional on my IBM LAPTOP.

I am not able to shut down my laptop.

When I look at the list of processes, I have a process
called syshost.exe. When I kill this process, I am able
to shutdown.

Also, this process generates a file called lol.dll in
C:\WINDOWS\SYSTEM32 directory. Norton Antivirus says that
this file is infected with a virus and is not able to
delete this file. This file (lol.dll) disappeares when I
kill the process syshost.exe

Has anybody encountered this problem before?

Is it possible to find out which program is launcing this
process syshost.exe?

Any help on this topic is most appreciated.


Best regards

----- Vijay
 
I think syshost may be spyware try Adaware or Spybot to try and clear the
problem. The process svchost.exe is the official windows file.

Neil
 
go to start then run type regedit find the keys
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersi
on\Run]

look for [Microsoft IIS] C:\WINDOWS\system32\syshost.exe
right click on it and delete.

you can go to google and search lol.dll and find info on
this.
 
Kateel said:
Hi,

I am running windows XPO Professional on my IBM LAPTOP.

I am not able to shut down my laptop.

When I look at the list of processes, I have a process
called syshost.exe. When I kill this process, I am able
to shutdown.

Also, this process generates a file called lol.dll in
C:\WINDOWS\SYSTEM32 directory. Norton Antivirus says that
this file is infected with a virus and is not able to
delete this file. This file (lol.dll) disappeares when I
kill the process syshost.exe

Has anybody encountered this problem before?

Is it possible to find out which program is launcing this
process syshost.exe?

Any help on this topic is most appreciated.


Best regards

----- Vijay
Click to expand...

It's associated with a worm:

http://securityresponse.symantec.com/avcenter/venc/data/w32.francette.worm.html
 
Back
Top