|
|
#1
06-14-2007, 08:33 PM
|
|||
|
|||
locating a file that doesn\'t want to be found
i have a program running called svhhost.exe and i'm fairly sure it's a virus based on what i've read online about it. i deleted the registry entries associated with it, but i can't find it in the system32 folder, where it's supposed to be
i have show hidden files and folder selected so it should be there. i ran a search for it but nothing. but when i type in c:\windows\system32\svhhost.exe in firefox, i get the option to save it. anyone have any idea how to locate it so i can delete it? would it be a stupid idea to type in that path into firefox, then save it into system32 and then delete it? 
|
|
#2
06-14-2007, 08:39 PM
|
|||
|
|||
|
Re: locating a file that doesn\'t want to be found
i jsut found this online at mcafee
Summary : Trojan.Net-SVHHost.Process Company : Unknown Description : Network trojan component Trojans are programs that can appear to serve a legitimate purpose but actually have an unwanted or harmful effect. A large segment of trojan programs download other harmful software components to a user's PC without his/her knowledge. This application is most likely downloaded and installed by another application that is considered to be adware or spyware.
|
|
#3
06-14-2007, 08:47 PM
|
|||
|
|||
|
Re: locating a file that doesn\'t want to be found
[ QUOTE ]
i have a program running called svhhost.exe and i'm fairly sure it's a virus based on what i've read online about it. i deleted the registry entries associated with it, but i can't find it in the system32 folder, where it's supposed to be i have show hidden files and folder selected so it should be there. i ran a search for it but nothing. but when i type in c:\windows\system32\svhhost.exe in firefox, i get the option to save it. anyone have any idea how to locate it so i can delete it? would it be a stupid idea to type in that path into firefox, then save it into system32 and then delete it? [/ QUOTE ] Details how to remove svhhost.exe
|
|
#4
06-14-2007, 10:21 PM
|
|||
|
|||
|
Re: locating a file that doesn\'t want to be found
There are several possibilities: Some other program might be downloading it or creating and running it on the fly. The malware may have put a rootkit on your machine, which means that the malware has modified system program to make svhhost.exe invisible. Since you can see the file in Firefox, it seems likely that exporer has been modified to make the file invisible. Does it show up if you do "dir" in a command prompt? If so you might be able to delete it from the command prompt. You will probably have to kill it's process with the task manager in order to delete it, or delete it in safe mode.
|
 |
|
|
Linear Mode
