Scvhost.exe

[darkorb]

Is that good or bad? cuz i try and end task it, and whenver i restart computer, it comes back up

i had torrented something before, and it came with a trojan, but the norton internet securities 06 says it blocked it so i dont no

 

[WC Annihilus]

That thing is fine. Not quite sure what exactly it does, but it's a normal windows process. There should actually be around 4 or 5 of them runnin at all times

 

[darkorb]

http://weboperative.com/OCIDB/admin.php?op=details&D=/Darkorb&F=virus.JPG

i think ur thinking of SVCHOST.exe

i have that and SCVHOST.exe

 

[WC Annihilus]

Ah, right. Well, according to this it's a virus man: http://www.liutilities.com/products/wintaskspro/processlibrary/scvhost/

 

[mrapoc]

scvhost.exe - scvhost - Process Information

Process File: scvhost.exe or scvhost

Process Name: W32/Agobot-S virus

scvhost.exe is a process which is registered as W32/Agobot-S virus. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.

OHHHHHHHH NO Run several scans immediately!!

 

[darkorb]

i have done ad-aware scan, cleaned, still there

norton anti virus, scanned, nothing came up

 

[FarFarAway]

Xsoftspy mate or X²

 

[mrapoc]

think its called xoftspy and i can't find X²??

 

[Rastalovich]

If u`ve got an SCV and Norton didn`t find it I want some serious answers.

If it`s up2d8, u`ve done a scan, and they`re raking in multimillions with their product spread, not finding such a blatent infection is scandalous.

 

[WC Annihilus]

Well this is Symantec's (Norton creator if you didn't know ) info on it: http://www.symantec.com/smb/security_response/writeup.jsp?docid=2005-060113-5434-99&tabid=2

 

[PV5150]

Check for these registry entries, and look for it in C:\Windows\System32 if using Windows XP

Or alternatively, Microsoft Knowledge base

 

[Rastalovich]

Well this is Symantec's (Norton creator if you didn't know ) info on it: http://www.symantec.com/smb/security_response/writeup.jsp?docid=2005-060113-5434-99&tabid=2

Symantec, Norton`s aquirer ?

 

[WC Annihilus]

Symantec, Norton`s aquirer ?

O really? I had always thought they made it

 

[darkorb]

i bought uniblue, and did their scan, and it said i have 8000 spyware

surprised ad-aware tdidnt find them

anyways, seems like its not their, im at my christmas party right now, ill che if its there when i get home

merry christmas u guys!@!@!@!@1

 

[darkorb]

i got rid of it, but i restarted my comp and got this

 

[jiffz]

Looks as if you've got rid of the actual file but the registry entry remains. So, when your PC boots, it goes looking for the file but fails. Either go into the registry yourself or use a registry cleaner.

 

[chudley]

Have you disabled thet system restore feature, some viruses use that as a way of reinfecting. Disable it then run your virus removal software from safe mode and edit registry at this point too. After you are happy re enable system restore.