W32.Francette.Worm

[Doug Raber]

this worm has attached itself to syshost.exe file in my
system 32 file in my windows file and I can't get it out
please help me

 

[Wesley Vogel]

Doug;

The existence of the file syshost.exe is an indication of a possible
infection
W32.Francette.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.francette.worm.html

The process syshost.exe _is_ the virus.

 

[Sadie]

Firstlease confirm the spelling "syshost.exe".
If you are absolutely certain of the spelling,and it is
precisely as you have typed it,boot into safe mode and
try to delete it,as "syshost.exe" is NOT a legitimate XP
file.

The true XP file is named svchost.exe. It is a legitimate
programme,which is not malicious, found in the System32
directory.DO NOT DELETE svchost.exe from system 32.

I will run a search at the virus library for specific
removal instructions for W32.Francette.Worm.It is
extremely rare.

Sadie

 

[Sadie]

http://securityresponse.symantec.com/avcenter/venc/data/w3
2.francette.worm.html

Extensive removal instructions you might need.Follow them
all carefully.

Sadie