My SVCHOST.exe file is infected with Backdoor.litmus.203. Norton cannot repair or quarantene. I believe I need to replace it with a clean copy. Where can I obtain one? Thanks!

Mooselook, Follow the Removal Instructions for Windows XP at the link below. Backdoor.Litmus.203 Removal Instructions HTH Tufenuf

Mooselook, If you look under "Technical Details" at the link I gave you in my Response Number 1 you'll see this. Backdoor.Litmus.203 is a variant of Backdoor.Litmus. When Backdoor.Litmus.203 runs, it performs the following actions: Copies itself as one of the following: %Windir%\Litmus\Erm.exe %Windir%\img32b\image32.exe %Windir%\Litmus\mm.exe %Windir%\Appsvc\svchost.exe %Windir%\winsys\winsys.exe NOTE: %Windir% is a variable. The Trojan locates the Windows installation folder (by default, this is C:\Windows or C:\Winnt) and copies itself to that location. The original Windows XP "svchost.exe" is in the C:\WINNT\System32 directory (folder). The "svchost.exe" file that the virus created is in the C:\Windows or C:\WINNT folder. Note the different location. Just try following the Removal Instructions exactly as stated at that link. You shoudn't need to replace the original "svchost.exe" file. Tufenuf

Thank You, Tufenuf. Worked great and I am now virus-free. You are a gentleman and a scholar! --**Mooselook**--