svchost.exe

[oldad]

In Quick Access when checking Task Mgr Processes :

SVCHOST.EXE is shown as SVCHOST,COM Trojan.32Neshuta and should be immediately deleted.

There are 6 of these listed in Processes
4 in System
1 in Local Service
1 in Network Service

MS Malicious Malware Removal tool, Trend Micro Internet Security and a few free Trojan scans donot detect these so I question as to the difference in .EXE and .COM whether the SVCHOST.EXE is really a trojan

Would appreciate any advice and or comments re this

Thanks in advance

 

[Roberto]

In Quick Access when checking Task Mgr Processes :

SVCHOST.EXE is shown as SVCHOST,COM Trojan.32Neshuta and should be
immediately deleted.

There are 6 of these listed in Processes
4 in System
1 in Local Service
1 in Network Service

MS Malicious Malware Removal tool, Trend Micro Internet Security and a few
free Trojan scans donot detect these so I question as to the difference in
..EXE and .COM whether the SVCHOST.EXE is really a trojan

Would appreciate any advice and or comments re this

Thanks in advance

see this symantec article
http://www.sarc.com/avcenter/venc/data/w32.neshuta.html

D/L and run these from safe mode
http://www.trendmicro.com/download/dcs.asp
get the latest pattern files here
http://www.trendmicro.com/download/viruspattern.asp
next run this
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

rgds
Roberto

 

[oldad]

Thanks Roberto,
Still not convinced SVCHOST.EXE is a trojan as searach shows it as a generic host process for win32 services and Company is Microsoft Corporation.

Searach for SVCHOST.COM shows nothing.

Regards...oldad


In Quick Access when checking Task Mgr Processes :

SVCHOST.EXE is shown as SVCHOST,COM Trojan.32Neshuta and should be
immediately deleted.

There are 6 of these listed in Processes
4 in System
1 in Local Service
1 in Network Service

MS Malicious Malware Removal tool, Trend Micro Internet Security and a few
free Trojan scans donot detect these so I question as to the difference in
.EXE and .COM whether the SVCHOST.EXE is really a trojan

Would appreciate any advice and or comments re this

Thanks in advance

see this symantec article
http://www.sarc.com/avcenter/venc/data/w32.neshuta.html

D/L and run these from safe mode
http://www.trendmicro.com/download/dcs.asp
get the latest pattern files here
http://www.trendmicro.com/download/viruspattern.asp
next run this
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

rgds
Roberto

 

[steam3801]

In Quick Access when checking Task Mgr Processes :

SVCHOST.EXE is shown as SVCHOST,COM Trojan.32Neshuta and should be immediately deleted.

There are 6 of these listed in Processes
4 in System
1 in Local Service
1 in Network Service

MS Malicious Malware Removal tool, Trend Micro Internet Security and a few free Trojan scans donot detect these so I question as to the difference in .EXE and .COM whether the SVCHOST.EXE is really a trojan

Would appreciate any advice and or comments re this

Please, what is "Quick Access"?

 

[Ronnie Vernon MVP]

Please, what is "Quick Access"?

steam3801
ASCII a silly question, get a silly ANSI

Quick Access InfoBar.
Free plugin for the XP Taskmanger. Provides a link for each running process
that you can click to get information on that process.

Works very well.

Quick Access InfoBar
http://www.processlibrary.com/quickaccess/