Re: DON\'T CLICK ON THE LINK IN THE \"is this 4 real...\" THREAD
 

[ QUOTE ]
[ QUOTE ]
[ QUOTE ]
[ QUOTE ]
I was stupid enough to click the FTP was down thing about a week ago. The guy who made the trojan was a fking idiot. Im assuming this is the same guy.

Just go into your program files/ and look for the newest created folder. The guy disguisted a java install as the trojan. Look for a folder named svchost, inside that folder their was the java that was needed to install to watch this video(trojan exe). Just go to ur task manager and close all svchost.exe, and thene delete the folder named svchost that was recently created. Then your all good =]

[/ QUOTE ]

are you kidding me??? there is an SVCHOST.EXE running just now on my machine!

tell me you are joking with computer n00bs like me, pls...

[/ QUOTE ]
SVCHOST is a normal computer process. Many trojans mimick it with the same name. If you have MORE THAN ONE, it should be a cause for concern.

[/ QUOTE ]

[censored]!! i have SIX running! but i don't have the emando thing in my regedit...

[/ QUOTE ]
read above. sorry for the mis-info

Re: DON\'T CLICK ON THE LINK IN THE \"is this 4 real...\" THREAD
 

go to task manager and sort by CPU power....if there's a svchost up there using a lot it is bad

Re: DON\'T CLICK ON THE LINK IN THE \"is this 4 real...\" THREAD
 

What I have on mine is svcholt not svchost

Re: DON\'T CLICK ON THE LINK IN THE \"is this 4 real...\" THREAD
 

[ QUOTE ]
but if the trojan is svchost it should be taking up a lot of CPU power %, right?

[/ QUOTE ]
Not necessarily. I don't know what all this trojan does, but screen scraping is not a very CPU intensive process.

Re: DON\'T CLICK ON THE LINK IN THE \"is this 4 real...\" THREAD
 

more than one you say?

http://img511.imageshack.us/img511/3074/svvrj5.jpg


edit: sorry, didnt hit the refresh button before I posted

Re: DON\'T CLICK ON THE LINK IN THE \"is this 4 real...\" THREAD
 

Guys look up where your svchost are located, if their located in ur windows/ ur good. If their located in ur program files/ ur infected.

Re: DON\'T CLICK ON THE LINK IN THE \"is this 4 real...\" THREAD
 

I have a svchost that is 20,000K and the others are very small is this bad?

Actually I remember this being on my machine for awhile now but all my virus scans and etc never show anything.

Re: DON\'T CLICK ON THE LINK IN THE \"is this 4 real...\" THREAD
 

I don't I have any...

Re: DON\'T CLICK ON THE LINK IN THE \"is this 4 real...\" THREAD
 

[ QUOTE ]
Guys look up where your svchost are located, if their located in ur windows/ ur good. If their located in ur program files/ ur infected.

[/ QUOTE ]

how do u do that from windows task manager? I click on it and nothing happens.

Re: DON\'T CLICK ON THE LINK IN THE \"is this 4 real...\" THREAD
 

ya i had a bunch of svholt running and that was also the folder that had been installed in program files that tercet said.

i ended all of those processes and deleted the folder in C:Program Files