Says that svchost.exe is missing

[Guest]

Whenever I log onto my computer a message comes up that says: Windows cannot
find 'C:\windows\svchost.exe' When I run Norton Windoctor it says that there
is a missing program file and that the problem cannot be fixed. My DVD drive
has not been working properly in addition to this. What does this mean? Do I
need to reprogram my computer in order to find the file and how do i do that
if i have to?
Thank you.

 

[Steve N.]

Whenever I log onto my computer a message comes up that says: Windows cannot
find 'C:\windows\svchost.exe' When I run Norton Windoctor it says that there
is a missing program file and that the problem cannot be fixed. My DVD drive
has not been working properly in addition to this. What does this mean? Do I
need to reprogram my computer in order to find the file and how do i do that
if i have to?
Thank you.

I find it extremely hard to believe you are able to boot up or login at
all without svchost.exe, it is even required in Safe Mode. Are you sure
you've got it spelled correctly? If it is actually scvhost.exe or
svchos1.exe then you've got a virus.

Update your a/v and scan in Safe Mode.

Steve

 

[Detlev Dreyer]

Whenever I log onto my computer a message comes up that says: Windows
cannot find 'C:\windows\svchost.exe'

The system file "svchost.exe" is located in the \Windows\System32
folder. Files with names similar to system files are often malware.
Scan your system for viruses and spyware.

 

[David H. Lipman]

From: "Jess" <[email protected]>

| Whenever I log onto my computer a message comes up that says: Windows cannot
| find 'C:\windows\svchost.exe' When I run Norton Windoctor it says that there
| is a missing program file and that the problem cannot be fixed. My DVD drive
| has not been working properly in addition to this. What does this mean? Do I
| need to reprogram my computer in order to find the file and how do i do that
| if i have to?
| Thank you.

Dump the contents of the IE Temporary Internet Folder cache (TIF)
Start --> Settings --> Control Panel --> Internet Options --> Delete Files

Dump the contents of the Mozilla FireFox Cache
Tools --> Options --> Privacy --> Cache --> Clear

1) Download TrendMicro Sysclean by one of the following 2 methods

Trend Sysclean Method 1
---------------------------------------
Download the utility SYSCLEAN_FE at the following URL --
http://www.ik-cs.com/got-a-virus.htm
SYSCLEAN_FE automates the download and execution process of the Trend Sysclean Package.
Direct URL --
http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe


Trend Sysclean Method 2
---------------------------------------
Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\sysclean")

Download SYSCLEAN.COM and place it in that directory.
Download the signature files (pattern files) by obtaining the ZIP file.
For example; lpt613.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.

2) Download and install Ad-aware SE (free personal version v1.05)
http://www.lavasoftusa.com/
3) Update Adaware with the latest definitions then exit the software.
4) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
5) Reboot your PC into Safe Mode and shutdown as many applications as possible
6) Using the Trend Sysclean and Ad-aware SE utilities, perform a Full Scan of your
platform and clean/delete any infectors found
7) Restart your PC and perform a "final" Full Scan of your platform using both Trend
Sysclean and Ad-aware SE
8) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
9) Reboot your PC.
10) Create a new Restore point

* * * Please report back your results * * *

 

[Steve N.]

Jess <[email protected] wrote:




The system file "svchost.exe" is located in the \Windows\System32
folder. Files with names similar to system files are often malware.
Scan your system for viruses and spyware.

Good catch Detlev. I didn't notice the absence of the System32 directory
in the path 1st time around.

Steve

 

[Detlev Dreyer]

Good catch Detlev. I didn't notice the absence of the System32
directory in the path 1st time around.

Thanks, Steve. Anyway - you were also correct. If that *system* file
is missing, Windows wouldn't start at all.

 

[Steve N.]

Thanks, Steve.

You're welcome.

Anyway - you were also correct. If that *system* file
is missing, Windows wouldn't start at all.

Yeah, that's what got me scratching my head. I even booted into Safe
Mode to be sure, and yep - there were 3 instances of good ol' svchost
running.

Steve

 

[David H. Lipman]

From: "Steve N." <[email protected]>


| Yeah, that's what got me scratching my head. I even booted into Safe
| Mode to be sure, and yep - there were 3 instances of good ol' svchost
| running.
|
| Steve

The name SVCHOST is used by *many* infectors that are both viral and non-viral malware. In
addition, there are *many* infectors that use a variation of the name such as; SCVHOST.

I can't tell you how many times I have see or read posts concerning SVCHOST on Win9x/ME
platforms. That's a gurantee that the Win9x/ME platform is infected since there is no
SVCHOST.EXE on not NT based platforms.

As soon as I saw the subject of the post I was 99% sure the OP was either currently infected
or had been infected and the PC wasn't properly cleaned.

 

[Steve N.]

From: "Steve N." <[email protected]>


| Yeah, that's what got me scratching my head. I even booted into Safe
| Mode to be sure, and yep - there were 3 instances of good ol' svchost
| running.
|
| Steve

The name SVCHOST is used by *many* infectors that are both viral and non-viral malware. In
addition, there are *many* infectors that use a variation of the name such as; SCVHOST.

I can't tell you how many times I have see or read posts concerning SVCHOST on Win9x/ME
platforms. That's a gurantee that the Win9x/ME platform is infected since there is no
SVCHOST.EXE on not NT based platforms.

As soon as I saw the subject of the post I was 99% sure the OP was either currently infected
or had been infected and the PC wasn't properly cleaned.

Yep. You're right there.

Steve