svchost.exe

[Michael]

Mcafee found the 'svchost.exe' file to be infected by the
nachi.worm and they instructed me to manually remove the
file.

Do I need to replace this file in order for my computer
to function properly? It seems to be working fine so far
but want to know if I need it or not.

 

[Chris Lanier]

Goto
http://www.pchell.com/virus/welchia.shtml

 

[Guest]

Thanks Chris. This site also recommended me to delete
the 'svchost.exe' file and am wondering if it is needed
for anything? or was it just installed from the worm?

 

[Bruce Chambers]

Greetings --

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Alex Nichol]

Mcafee found the 'svchost.exe' file to be infected by the
nachi.worm and they instructed me to manually remove the
file.

Do I need to replace this file in order for my computer
to function properly? It seems to be working fine so far
but want to know if I need it or not.

If you successfully removed the file, it will have been replaced in
seconds from the cache of uninfected components

 

[Peter Hutchison]

Mcafee found the 'svchost.exe' file to be infected by the
nachi.worm and they instructed me to manually remove the
file.

Do I need to replace this file in order for my computer
to function properly? It seems to be working fine so far
but want to know if I need it or not.

There are two version of svhost.exe, one is valid, the other is a
virus. The virus one is in c:\windows\system32\wins, the valid one
lives in c:\windows\system32.
You do not need to replace, it just delete it.

Peter Hutchison
Windows FAQ
http://www.pcguru.plus.com/

 

[Peter Hutchison]

Mcafee found the 'svchost.exe' file to be infected by the
nachi.worm and they instructed me to manually remove the
file.

Do I need to replace this file in order for my computer
to function properly? It seems to be working fine so far
but want to know if I need it or not.

Also, to prevent reinfection, you must download security updates from
MS windowsupdate site.

Peter Hutchison
Windows FAQ
http://www.pcguru.plus.com/

 

[bryn ford]

test

There are two version of svhost.exe, one is valid, the other is a
virus. The virus one is in c:\windows\system32\wins, the valid one
lives in c:\windows\system32.
You do not need to replace, it just delete it.

Peter Hutchison
Windows FAQ
http://www.pcguru.plus.com/