windows xp - .../system32/SSCVIIHOST.exe missing!!!

[markjoseph]

what happened to my computer!? it suddenly infested by virus, causing it to
run significantly slow, btw i have no internet connection i rent a computer
in a computer cafe, so i have to download a Free anti-virus software (AVG
free) and manage to delete all of the viruses corrupting my system, then
after nuetralising all the viruses, my computer run smoothly again as it was
before then i ended my session(i shut dowm the computer) the next day i
started a new session but at the start the desktop appeared with a notice
that a file
'SSCVIIHOST.exe' (if the file's name is incorrect please do correct me) is
missing! and then my system started to slow again!
what is going on? how can i bring back the file again? btw the anti-virus
had identified the said file to be a virus so it was imediatly deleted!
please help me!

 

[Bob I]

That's not a file you want, that IS the virus file that was deleted. Go
to Start, Run, enter MSCONFIG, and then in the "Startup" uncheck the
entry that refers to that file.

 

[Thee Chicago Wolf]

what happened to my computer!? it suddenly infested by virus, causing it to

run significantly slow, btw i have no internet connection i rent a computer
in a computer cafe, so i have to download a Free anti-virus software (AVG
free) and manage to delete all of the viruses corrupting my system, then
after nuetralising all the viruses, my computer run smoothly again as it was
before then i ended my session(i shut dowm the computer) the next day i
started a new session but at the start the desktop appeared with a notice
that a file
'SSCVIIHOST.exe' (if the file's name is incorrect please do correct me) is
missing! and then my system started to slow again!
what is going on? how can i bring back the file again? btw the anti-virus
had identified the said file to be a virus so it was imediatly deleted!
please help me!

SSCVIIHOST is not a windows service file, this is probably some virus
or baddie. SVCHOST.EXE is a normal Windows file. You'll likely need a
cleaner.

- Thee Chicago Wolf

 

[Gerry]

Mark

You can import malware on floppy disks , CDs and DVDs.

Does that information help you identify the source of the infestation?

Is AVG still installed? Select the Test Center and open the Virus Vault.
What was the name of the virus?


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Elmo]

What happened to my computer!? It suddenly infested by virus, causing it to
run significantly slow. btw I have no internet connection; I rent a computer
in a computer cafe, so I had to download a Free anti-virus software (AVG
free) and managed to delete all of the viruses corrupting my system. Then
after neutralizing all the viruses, my computer ran smoothly again as it was
before. Then I ended my session (I shut down the computer). The next day I
started a new session but at the start the desktop appeared with a notice
that a file
'SSCVIIHOST.exe' (if the file's name is incorrect please do correct me) is
missing! and then my system started to slow again!
What is going on? How can I bring back the file again? btw the anti-virus
had identified the said file to be a virus so it was immediately deleted!
Please help me!

The registry still has a reference to the file, which can be removed,
but if the computer's slowing again, I suspect you're still infected.

 

[Malke]

The registry still has a reference to the file, which can be removed,
but if the computer's slowing again, I suspect you're still infected.

I think you're absolutely correct, Elmo. I just saw this file yesterday
while working on a client's machine that was severely infested with Vundo,
Zlob, and other trojans and malware. That box required a flatten/clean
install. The OP should probably do the same or take the machine to
competent computer tech.

Malke

 

[Ken Blake, MVP]

what happened to my computer!? it suddenly infested by virus, causing it to
run significantly slow, btw i have no internet connection

Although the internet is the most common way to get a virus infection
these days, it's certainly not the only way.

Any time you read any electronic media (floppy, CD, DVD, thumb drive,
flash drive, etc.) in your computer, there's a risk that it's
infected, and if so, unless you have anti-virus protection, your
computer will get infected.

 

[Plato]

Although the internet is the most common way to get a virus infection
these days, it's certainly not the only way.

Any time you read any electronic media (floppy, CD, DVD, thumb drive,
flash drive, etc.) in your computer, there's a risk that it's
infected, and if so, unless you have anti-virus protection, your
computer will get infected.

"and if so, unless you have anti-virus protection, your computer 'will
get' [is at HIGH risk of getting] infected."

 

[markjoseph]

The registry still has a reference to the file, which can be removed,
but if the computer's slowing again, I suspect you're still infected.

hi sir, thank you all for the post. i appreciate them well.

but can you tell me how to remove the 'reference of the file' in the registry?
btw 'regedit.exe' is disabled although i am the administrator, i suspect
that this problem is caused by the virus itself so - how can i enable
registry editing?

 

[Elmo]

hi sir, thank you all for the post. I appreciate them well.

but can you tell me how to remove the 'reference of the file' in the registry?
btw 'regedit.exe' is disabled although I am the administrator, I suspect
that this problem is caused by the virus itself so - how can I enable
registry editing?

http://www.kellys-korner-xp.com/xp_tweaks.htm
Line 213. Disable or Enable Registry Editing Tools

It's possible some malware was deleted by your a/v software, but the
reference to the file was not removed from the registry.

Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,
type the name of the file into the search pane. Click "Find Next", and
when located, delete the reference to the file. Press F3 to continue
the search.

You can click File, Export, and save the entry to the Desktop. If you
remove it and there's a problem, double-click the .reg file you exported
to the Desktop and it'll be added to the registry again. You can create
a restore point before editing the registry too.

You could click Start, Run, type MSCONFIG, click OK, click the StartUp
tab, and deselect the item(s). When you restart the computer, you will
be warned that you're running in the Diagnostic mode; click to not alert
you again, and OK out. You won't see the message again. But I think
it's best to just remove the references from the registry.