Computing.Net > Forums > Security and Virus > Help!!! svrhost.exe!!!!

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

Help!!! svrhost.exe!!!!

Reply to Message Icon

Original Message
Name: cumanzor
Date: July 19, 2004 at 19:40:37 Pacific
Subject: Help!!! svrhost.exe!!!!
OS: Windows XP Pro Ver.2002
CPU/Ram: Intel Pentium IV 2.4 GH,
Comment:

Hey I think my PC got infected, when I start my computer Zone Alarm detects that some svrhost.exe was trying to access the web, so i blocked it... but i can't see it in the process manager and a while ago my PC went slower and the PF Use was getting higer, very quickly, so I had to restart... then i started a check with Norton Antivirus but it closes...!!! I don't know what to do!!


Report Offensive Message For Removal


Response Number 1
Name: JPQ
Date: July 19, 2004 at 19:55:46 Pacific
Reply: (edit)

Report Offensive Follow Up For Removal

Response Number 2
Name: murve
Date: July 19, 2004 at 20:06:22 Pacific
Reply: (edit)

hi cumanzor,
lets try this:
first of all lets disable your system restore to flush out whatever virus or malware thats in your restore folder.
next get the latest defs for your anti-virus, adaware, spybot, and your anti-trojan if you have one. if not go to www.thepublicworks.com, go to free anti-trojan section and link to ants. there you will get A Squared anti-trojan, get the latest defs also.
next, lets go into safe mode, by hitting the F8 key while you are rebooting your computer.
in safe mode, scan your computer with all those programs mentioned above, and delete all the files they find. clean your cache, temp files, history and cookies folders. make sure that you see all your hidden files.
clean out your recycle bin.
reboot into normal mode, and re enable your system restore.
all the best,
murve



Report Offensive Follow Up For Removal

Response Number 3
Name: cumanzor
Date: July 19, 2004 at 21:26:46 Pacific
Reply: (edit)

HUGE!!!! I'm messed up!!! Can't open System Restore (sure I won't use it anyway), it give some error about can't find framedyn.exe. It gives the same message with other programs but after clicking ok the program still starts... Spybot-SD (updated) doesn't find anything...
Guess what!!! system restore is completly messed up... can't even see the system restore properties in the system properties window... Help really!ยช!!


Report Offensive Follow Up For Removal

Response Number 4
Name: cumanzor
Date: July 19, 2004 at 21:38:18 Pacific
Reply: (edit)

actually the file is svnhost.exe (not svrhost.exe) as I said before


Report Offensive Follow Up For Removal

Response Number 5
Name: www
Date: July 19, 2004 at 21:48:32 Pacific
Reply: (edit)

Report Offensive Follow Up For Removal


Response Number 6
Name: www
Date: July 19, 2004 at 21:52:56 Pacific
Reply: (edit)

and here's the info on disabling and re-enabling system restore.


Report Offensive Follow Up For Removal

Response Number 7
Name: cumanzor
Date: July 19, 2004 at 22:49:25 Pacific
Reply: (edit)

ok, I'm in Safe Mode right now... using the Symantec Gaobot Fix tool... hoping it works... when I try to use System Restore it gives me the following message: (it is in spanish, ill try to put it in english)

"Error starting application because framedyn.dll wasn't find. Reinstalling the application may solve the problem"

framedyn.dll?? What is it? How can I restore it? Maybe I've already eliminated the virus but System Restore doen't work...

help....


Report Offensive Follow Up For Removal

Response Number 8
Name: cumanzor
Date: July 19, 2004 at 23:04:00 Pacific
Reply: (edit)

here's the error message in english:

rundll32.exe - Unable To Locate Component

This application has failed to start because framedyn.dll was not found. Re-installing the application may fix this problem.

hoping someone can help me


Report Offensive Follow Up For Removal

Response Number 9
Name: cumanzor
Date: July 19, 2004 at 23:54:36 Pacific
Reply: (edit)

i finally made system restore work... I use the Agobot/Gaobot removing tool, it found nothing, I restart, hoping i wasn't infected anymore... my NAV doens't seem to work, i can't use notepad cause it screwed up, and no system restore point... must say... God help me... cause it seems that nothing works now... sudenly this svnhost.exe tried to connect to lowcase.com (67.18.94.154)
So,they got me... even with the RCP vulnerability patch they managed to screw things again... yeah 100% of CPU in svchost.exe... I just don't know what to do any help??


Report Offensive Follow Up For Removal






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home








Do you have your own blog?

Yes
No
I did before
I will soon


View Results

Poll Finishes In 5 Days.
Discuss in The Lounge
Poll History




Data Recovery Software