Shane Posted October 29, 2006 Share Posted October 29, 2006 Yesterday my son disabled the firewall and virus software on my PC so he could do some stuff to get his PC talking to mine or something. Anyhow he has now put it all back together and everytime I boot up the Talktalk security software thingy flashes up as the desktop appears and tels me that SVCHOST is trying to connect and is maybe a virus etc. Looking on google I am sure it is. So I ran the scan part of the security software and it found a virus (but not svchost), deleted it and I re-booted it and of course it did the same thing again. Anyone know what I should be doing to get rid of it? I wouldn't care but he is a 3d programming wizard and knows about this shit and has pissed off to the pub! Link to comment Share on other sites More sharing options...
MrRalphMan Posted October 29, 2006 Share Posted October 29, 2006 Shane, Dont panic.. Have a look here And here Looks like someone has used the MS name of the process to write a Virus. As long as it's running from the system32 Dir then you should be fine. Paul. PS.. Give you son a slap, anything he did should have been done properly and through the firewall. Disableling the FW is a fools game... But hey it's not his PC is it... Link to comment Share on other sites More sharing options...
Shane Posted October 29, 2006 Author Share Posted October 29, 2006 Hi Paul, Thanks for that. Bit double dutch to me but get the idea. Yes it is in system32 so thats something at least. Dont really want to have to buy more security software though. Noticed machine seems to be much much slower between functions, but maybe am being paranoid. Link to comment Share on other sites More sharing options...
MrRalphMan Posted October 29, 2006 Share Posted October 29, 2006 Shane, That wasn't a suggestion to buy the software, if you've got a firewall that's good. What about AV software.. Paul Link to comment Share on other sites More sharing options...
Pabs Posted October 29, 2006 Share Posted October 29, 2006 a firewall is good, but without any AV software you're open to the elements, so to speak. Usually booting into safe mode will stop the virus from starting up, and then you can delete the file that is known to be the virus, and then reboot. I use a tool known as Hijackthis to remove a lot of viruses, but you really do need to know what you are doing to use it, otherwise things can go very wrong. Link to comment Share on other sites More sharing options...
MrRalphMan Posted October 29, 2006 Share Posted October 29, 2006 I use AVG for anti virus, found it to be very good. Moved from Norton 2004 as it was eating up my machines resources. clicky click Link to comment Share on other sites More sharing options...
Shane Posted October 29, 2006 Author Share Posted October 29, 2006 The software I am using is f-secure which is recommended when you first install and log on to talktalk broadband. It updates supposedly all the time, detects viruses and spyware and provides a firewall. Up until now it has been great. But now I am not so sure. It could just be that the PC became infected for the really short time he disabled the software, but that seems a bit unlucky doesn't it? Just done a full pc scan and it found a malware and disinfected it,on re-boot it seemed to be ok. Will let you know how it goes over the next day or so. Thanks for your help guys. Certainly seemed to boot up a bit quicker. Link to comment Share on other sites More sharing options...
Shane Posted October 29, 2006 Author Share Posted October 29, 2006 Shane, PS.. Give you son a slap, anything he did should have been done properly and through the firewall. Disableling the FW is a fools game... But hey it's not his PC is it... I know, little sod. he has been trying to network his machine with mine and then use my broadband connection. he said that the firewall was stopping him from doing something or another and he had to disable it for a minute. We used to have NTL broadband and a ethernet router to connect both machines, but i changed provider to talktalk and the modem has only USB so to get both machines working he did it this way. Link to comment Share on other sites More sharing options...
MrRalphMan Posted October 29, 2006 Share Posted October 29, 2006 I know, little sod. he has been trying to network his machine with mine and then use my broadband connection. he said that the firewall was stopping him from doing something or another and he had to disable it for a minute. We used to have NTL broadband and a ethernet router to connect both machines, but i changed provider to talktalk and the modem has only USB so to get both machines working he did it this way. If you want to go back to using a router, there are plenty of cheap BB Routers with built in ADSL modems. Shouldn't cost too much. Just plug the it into the ADSL port and once configured, you have a 4 port router connected to your BB provider. Here's an example of one. Paul. Link to comment Share on other sites More sharing options...
Fifty Posted October 30, 2006 Share Posted October 30, 2006 svchost.exe is a normal system file and not a virus Rich Link to comment Share on other sites More sharing options...
Shane Posted October 30, 2006 Author Share Posted October 30, 2006 svchost.exe is a normal system file and not a virus Rich Thanks, it seems that the adware uses this .exe and this is activated on boot up. This is how it seems after reading up on it anyhow. Since the AV software identified and quarrantined the malware it seems to be ok. At work at the mo, so proof will be when I get home this eve and boot up again. Link to comment Share on other sites More sharing options...
Recommended Posts
Please sign in to comment
You will be able to leave a comment after signing in
Sign In Now