svchost.exe removal

[Ghonzo]

Hey guys was wondering if anyone know how to remove svchost.exe just noticed on my task bar today I have this trojan...

For those who dont know svchost.exe is a trojan that allows hackers to remote control and steal pw from your computer so check and see if you got it.

Btw svchost is a valid Window files but on task bar if you see multiple of 10+ you might wanna check it out cause you're bound to have a virus hiding in it.

Also watch out for Trusted Installer. I heard theres some virus that hides in it and it will cause your computers to freeze few secs to minutes mostly cause its writing a crap ton of registry in secs to your computer.

 

[v.Kamikaze]

try combofix. do you know which trojan it is, specifically?

 

[[sfg]iants]

Okay, the key is to find out where the file is located and take it off your startup services so it does not start on startup so you can delete it. In your processes right click on the virus and open up file location. Make sure you don't delete the actual system file, obviously. Then your going to go to your startup services ( in search type in msconfig ) and for startup selection your going to load diagnostic startup. This will make sure you only load the most basic startup processes. You should be able to delete it after that. It might be branched out, not much you can do manually unless you know exactly where the viruses are located. I would run Malwarebytes followed by a microsoft security essentials to see if it catches anything. Check your add/remove programs list as well and delete anything that looks weird, stuff you don't remember installing. This is the best I could tell you without actually seeing the computer.

Edit: if you delete the real svchost your probably fucked, make a system restore point before you delete anything.

 

[A-Rich]

I only have 22 instances of svchost running. haha
Virus schmirus.

 

[Ghonzo]

Okay, the key is to find out where the file is located and take it off your startup services so it does not start on startup so you can delete it. In your processes right click on the virus and open up file location. Make sure you don't delete the actual system file, obviously. Then your going to go to your startup services ( in search type in msconfig ) and for startup selection your going to load diagnostic startup. This will make sure you only load the most basic startup processes. You should be able to delete it after that. It might be branched out, not much you can do manually unless you know exactly where the viruses are located. I would run Malwarebytes followed by a microsoft security essentials to see if it catches anything. Check your add/remove programs list as well and delete anything that looks weird, stuff you don't remember installing. This is the best I could tell you without actually seeing the computer.

Edit: if you delete the real svchost your probably fucked, make a system restore point before you delete anything.

Yea i already did that problem was that trojan wasnt running on startup was a bit tricky to get rid of it but got it removed

 

[Dickfor.]

C-C-C-C-C-COMBOFIX

 

[A-Rich]

C-C-C-C-C-COMBOFIX

Man, Killer Instinct was awesome.

 

[mbenson]

i had that damn thing on my main system last year. took me a few days to get rid of. what a pain in the ass it was.