pls help to remove the virus (svhost)

ctissera

Member
Jun 11, 2007
194
1
0
in my computer there is a hidden file named svhost , this file auto generated in all drivers and with this hdd drives not open normally when i double click, i think this is a virus, when i write click on hdd drive there is a default action highlighted for auto run,

machan pls help me to fix this problem use the attached for more detail,

virus guards also not catch this,,, anyone know how to remove this pls tell me ASAP

my-com.gif
file.gif

thanx
 

fallenzeraphine

Active member
  • Jan 29, 2008
    1,385
    9
    38
    this is a Virus Named Mydoom its pretty dangerouse...boot in safe mode and make it stop running when the windows is starting up...search and delete all the files that have the name svhost DONT DELETE SVCHOST cause its a system file...disable system restore...use msconfig to remove it from the RUN list
    Also, remove FireDaemon from the run list (if its there, if not its allright)

    and also remove the Autorun.inf files from all drives....
    seems u have more than one virus on ur system...u might want to reformat the complete drive just to make sure nothing stays hidden..and if all fails

    DO ALL OF THIS IN SAFE MODE
     

    Dan01

    Active member
  • Oct 16, 2006
    3,789
    6
    38
    38
    No one know Where i live
    fallenzeraphine said:
    this is a Virus Named Mydoom its pretty dangerouse...boot in safe mode and make it stop running when the windows is starting up...search and delete all the files that have the name svhost DONT DELETE SVCHOST cause its a system file...disable system restore...use msconfig to remove it from the RUN list
    Also, remove FireDaemon from the run list (if its there, if not its allright)

    and also remove the Autorun.inf files from all drives....
    seems u have more than one virus on ur system...u might want to reformat the complete drive just to make sure nothing stays hidden..and if all fails

    DO ALL OF THIS IN SAFE MODE

    svhost not a system file man.
    the system file is. "svchost.exe"
    38385972gl0.jpg


    anika ban system restore eka navaththanna epa. ethkota mokak hari case ekak unoith restore karannath baha...
     
    Last edited:

    Dan01

    Active member
  • Oct 16, 2006
    3,789
    6
    38
    38
    No one know Where i live
    ctissera said:
    in my computer there is a hidden file named svhost , this file auto generated in all drivers and with this hdd drives not open normally when i double click, i think this is a virus, when i write click on hdd drive there is a default action highlighted for auto run,

    machan pls help me to fix this problem use the attached for more detail,

    virus guards also not catch this,,, anyone know how to remove this pls tell me ASAP

    thanx

    machan Restore ekak dalabalapan. dan file eka infrect vela nisa oka navattanna tikak amaru vei.
     

    Ranhiru

    Member
    Feb 2, 2007
    6,438
    42
    0
    Inside FIREFOX
    Dan01 said:
    svhost not a system file man.
    the system file is. "svchost.exe"
    38385972gl0.jpg


    anika ban system restore eka navaththanna epa. ethkota mokak hari case ekak unoith restore karannath baha...

    hehe datz what he said man....
    read it again and see

    search and delete all the files that have the name svhost DONT DELETE SVCHOST cause its a system file


    :D:D:D:D:D
     

    fallenzeraphine

    Active member
  • Jan 29, 2008
    1,385
    9
    38
    jesus u guys....i said not to delete SVCHOST not SVHOST read the post clearly....and Mydoom virus use System restore to hide it self and even after u remove it it can still infect ur machine frm system restore cache...if u dont know how to fix it dont give people wrong advice....i dont try to help others if i dont know for a fact i can help..
    and Ctissera if u want to fix this u must disable system restore..infact i recomend not to use system restore atall
     

    Ranhiru

    Member
    Feb 2, 2007
    6,438
    42
    0
    Inside FIREFOX
    fallenzeraphine said:
    jesus u guys....i said not to delete SVCHOST not SVHOST read the post clearly....and Mydoom virus use System restore to hide it self and even after u remove it it can still infect ur machine frm system restore cache...if u dont know how to fix it dont give people wrong advice....i dont try to help others if i dont know for a fact i can help..
    and Ctissera if u want to fix this u must disable system restore..infact i recomend not to use system restore atall

    True...datz what he said :yes::yes:
     

    x-pert

    Member
    Jun 13, 2006
    20,952
    77
    0
    fallenzeraphine is correct :)

    svhost = W32.Mydoom.I@mm worm

    Distributed via the Internet through e-mail

    The worm has its own SMTP engine : which means it gathers E-mails from your local computer and re-distributes itself. In worst cases this worm can allow attackers to access your computer, stealing passwords and personal data

    Recommendation

    DISABLE AND REMOVE svhost.exe IMMEDIATELY. This process is most likely a virus or trojan.

    http://www.liutilities.com/products/wintaskspro/processlibrary/svhost/

     

    dhanushka7171

    Member
    Apr 3, 2007
    5,732
    1
    0
    38
    -Chilaw-UK-
    Almost all viruses creates a autorun.inf virus in the computer.
    Tell us what the virus actually does to the computer.

    Manual removal in removable media:
    1. create a dummy "autorun.inf" file by using notepad.
    2. send the file to the removable media. If the virus is present, the computer wil ask whether to replace. Click yes.
    3. Pull out the pen drive immediately! This is because, if the virus is running in the memory, it will immediately replace your autoru.inf file.