svchostz.exe problem

uflbret · Jun 23, 2004

Hi all, I'm a newbie here. Been trolling for a little while and thought it very beneficial to join as you have a great site!!
My problem is this....I've got some type of spyware/malware on my system that I can't get rid of. I have run Adaware6.0, I have run Norton's, and have a firewall. It won't go away!! Adaware found different things wrong, but it keeps coming back. I believe the host program is svchostz.exe I'm unable to delete this file. I have a screenshot of what my browser looks like after its been hijacked. It's got a bunch of worms having sex. Sounds funny but this is getting really frustrating. Please help!! I don't want to have to spend $100 taking my cpu in and having it fixed. Thanks!!

-Bret

Major Attitude · Jun 23, 2004

Is Nortons up to date? I would try online scanners first, our links section has a bunch of them, but Trends is pretty good:

http://housecall.trendmicro.com/

You may need Hijack This and remove lines with svchostz in it, for example:
O4 - HKLM\..\RunServices: [Socket Utility] C:\WINDOWS\System32\svchostz.exe

Good chance its not being removed because the file is in use on every boot, these can be a pain. See if you can find files named netda, netdb and so on as wel, because your problem sounds similar to this trojan:

http://www.symantec.com/avcenter/venc/data/pf/backdoor.nibu.e.html

chaslang · Jun 24, 2004

Check this out: http://www.sophos.com/virusinfo/analyses/trojdaemonie.html

Log in or Sign up

svchostz.exe problem

uflbret Private E-2

Major Attitude Co-Owner MajorGeeks.Com Staff Member

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Log in or Sign up

svchostz.exe problem

uflbret Private E-2

Major Attitude Co-Owner MajorGeeks.Com Staff Member

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Useful Searches