svchost virus

[Ken]

Hi,

I have Win2k and my antivirus found a virus in
svchost.exe and it can not remove it.

Is there a way to get a new copy of svchost.exe?

Thanks,
Ken

 

[David H. Lipman]

First, you posted in the WRONG place !

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.scripting.virus.discussion
microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

Secondly are you sure that the legitimate file is infected and not a virus loading from an
alternate location called 'svchost.exe.' Svchost.exe is the target name of many infectors
often they use that name but don't infect the legitimate file.

In addition you have not mentioned the AV software package, the name of the infector found
in 'svchost.exe' nor the path to the infected file.

Dave



| Hi,
|
| I have Win2k and my antivirus found a virus in
| svchost.exe and it can not remove it.
|
| Is there a way to get a new copy of svchost.exe?
|
| Thanks,
| Ken

 

[Gerry Voras]

Get into safe mode, and run your antivirus from there.

 

[Saga]

How many instances of svchost.exe should there be?

Let's see... I have

svchost. exe SYSTEM
svchost. exe LOCAL SERVICE
svchost. exe NETWORK SERVICE
svchost. exe SYSTEM
svchost. exe SYSTEM

Is this normal? In fact, I think I'll do some research, as I don't
even know what svchost is for, so first I'll see about that,
then maybe I can answer my own question.

My svchost.exe sometimes fails, giving a msgbox indicating
that it is closing down. I too suspected a virus, but the PC
checked out clean. Interesting.

Saga

 

[Saga]

Answered

http://ask-leo.com/archives/000030.html