Hi my moms computer got a virus some how (thinking it came over the network from me or my brothers computer) But she did not have any virus protection software. Anyways now here start menu bar has disappeared and i can't get it back. There is a process called svchost.exe that is taking up 99% of the CPU, and it has a status of Network Status. I really cannot afford to reformat so PLEASE help me, this virus is pissing me off. I've tried installing Trend Micro Internet Securities, but microsoft installer won't run. And when i close that svchost.exe instance of the process a window pops up saying i have 50 seconds until the computer shutdown. PLSEASE HELP ME. Thank you in advance :)

in general, that is a windows service and shoudl not be stopped. but I guess there is a virus that may be using this service. If you can get info on W32.Welchia.Worm get the windows update at http://www.microsoft.com/technet/security/bulletin/ms04-011.msp

heres a removal tool at symantec http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

Hi Steve ... Try doing the following of my list but first try to download AVG free version from here... http://free.grisoft.com/freeweb.php/doc/2/ Then download hijckthis and have someone to view your log , here where you can get hijackthis from http://www.snapfiles.com/get/hijackthis.html Here where if you like you can post your hijackthis log for assistance http://spywarewarrior.com/index.php http://forums.net-integration.net/ http://computercops.biz/forums.html Now if you have an Anti-Virus Program which is fairly new ( mostly under a year )and you are sure that you are still recieving update definitions ? Then update yours now .... Then afterward download a few programs , Like these here below first one is Ad aware ( free Version ) http://www.lavasoft.de/support/download/ Start up this program , What you need to get is the most latest update for it ,run JUST the "updated" option and afterward close the program for later use ... Next program >> Spybot Search and Destroy ( Free ) http://www.safer-networking.net/en/download/index.html Next Program >> SpywareBlaster ( Free ) http://www.javacoolsoftware.com/sbdownload.html Next Mcafee Stinger http://vil.nai.com/vil/stinger/ Okay now perform this operation from this website below http://support.microsoft.com/?kbid=310405 Okay this is next to perform below : Click Start. >>Open My Computer. Select the Tools menu and click Folder Options. Select the View Tab. Under the Hidden files and folders heading select Show hidden files and folders. Uncheck the Hide protected operating system files (recommended) option. Click Yes to confirm. Click OK. DON'T WORRY ABOUT THE WARNING POP UP WINDOW THIS IS NORMAL , just click yes Now its time to start your computer in Safe Mode How to start up in safe mode , there is 2 ways in doing so , just choice one method only ... Look at this website below http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo Okay once in safe mode do the following : Clear out the Temporary internet files and other temp files. Go to Start > Settings > Control Panel >Internet Options. Under the General tab click the Delete temporary internet files, delete all Offline content as well. Clear out Cookies ... Now close eveything and be back at your desktop Now click the start buttom > then the Search/Find option > click Files or folders > in the named box, type: *.tmp , click search afterward choose Edit > select all -> File > delete. Empty/delete the entire contents of the C:\Windows\temp folder and C:\temp folder, (Contents only but not the folder itself.) This one too if it is there C:\Documents and Settings\username\Local Settings\Temp\ Delete the recycling bin ... Now start up Mcafee Stinger and afterward Ad Aware and just basically perform the options its set at for now ... And remove whatever it finds ... Start spybor search and destory and do the same with this program Also with the spyware blaster , just clean what it finds .... Now use your Anti - Virus Program and run it and see what it finds ...If your anti-virus finds anything try the repair option first, if that can't be done then delete the file... Now restart your computer back to normal mode and reset the setting back too...Once your computer is up and running do the following : http://support.microsoft.com/?kbid=310405 and this next >>> : http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/xpsysrst.mspx Okay after all that was done and you want to be sure its clean go to these anti virus scan sites and do the scan from each site if you like http://www.trendmicro.com/download/dcs.asp http://windowsxp.mvps.org/Scanners.htm http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

www.trendmicro.com has an online scan engine that you can run from the browser. It is good and can be a big help to get the machine cleaned up.

Stinger is a good tool, give it a shot. Man who fish in other man's well often catch crabs