Home Forums Classifieds Blogs Today's Posts Search Social Groups



  
SIGN-UP
Notices

Glock Talk
Welcome To The Glock Talk Forums.

 
  
Reply
 
Thread Tools Display Modes
Old 07-15-2004, 18:40   #1
Big Dog Dad
Senior Member
 
Join Date: Jun 2000
Location: S.W. Pa
Posts: 317
svchost.exe - what is it?

My firewall keeps poping up blocking svchost.exe. Does anyone know what this is or what it does? It's in the windows sub but so have been a lot of other spyware and popup programs. I really enjoy spending half of my time on the PC trying to eliminate problems caused by these little hacker geeks and the other time trying to fix problems caused by the other larger Gates geek. I think it's time to go to the dark side and buy an Apple.

-=BDD=-
__________________
NRA Life Member
"Some People Are Like Slinkies. They're Not Really Good For Anything, But They Bring a Smile To Your Face When Pushed Down The Stairs."
Big Dog Dad is offline   Reply With Quote
Old 07-15-2004, 19:13   #2
saber41
Guest
 
Posts: n/a
Re: svchost.exe - what is it?

Quote:
Originally posted by Big Dog Dad
I think it's time to go to the dark side and buy an Apple.
...or install linux

check here for your svchost question:
http://support.microsoft.com/default...b;en-us;314056
  Reply With Quote
Old 07-15-2004, 19:42   #3
10 Ring Tao
Red White Blue
 
10 Ring Tao's Avatar
 
Join Date: Sep 2003
Location: Southeast Michigan
Posts: 7,081
There is a virus that spreads itself through the kazaa network that will masquerade as Svchost.exe. It copies itself into the windows folder. This comes to mind because I've never known the legit svchost.exe to try and access the net, and I keep close dibs on what programs are doing via my firewall.

Do/did you have kazaa?

Do you have an up to date virus scanner?
(If not go to http://housecall.trendmicro.com for a free scan.)

http://securityresponse.symantec.com...llw.cozit.html
__________________
...an ordinance that seeks to reduce the murder rate, by disarming those owners who are not criminals, makes about as much sense as fighting alcoholism by prohibiting beer sales to Mormons.

Visit to help!!-->
To view links or images in signatures your post count must be 10 or greater. You currently have 0 signatures.

Last edited by 10 Ring Tao; 07-15-2004 at 19:51..
10 Ring Tao is offline   Reply With Quote
Old 07-15-2004, 21:36   #4
Harlequin
I need a weapon
 
Harlequin's Avatar
 
Join Date: Sep 2003
Location: East Central Indiana
Posts: 1,351
From Black Viper's website:

http://www.blackviper.com/WIN2K/win2...t_Notification
__________________
Big Dawg #1254: G21 and G30
"If someone has a gun and is trying to kill you, it would be reasonable to shoot back with your own gun." The Dalai Lama, (May 15, 2001, The Seattle Times) speaking in Portland, Oregon, when asked by a girl how to react when a shooter takes aim at a classmate
Harlequin is offline   Reply With Quote
Old 07-16-2004, 22:30   #5
physicsdevil
Member
 
Join Date: Jan 2000
Location: California
Posts: 75
It's a standard component that manages dlls and services.
physicsdevil is offline   Reply With Quote
Old 07-20-2004, 17:47   #6
Big Dog Dad
Senior Member
 
Join Date: Jun 2000
Location: S.W. Pa
Posts: 317
If truly is infected, can I replace it somehow? I basicaly understand what it does (I think), so how can I replace it with a legitimate copy?

-=BDD=-
__________________
NRA Life Member
"Some People Are Like Slinkies. They're Not Really Good For Anything, But They Bring a Smile To Your Face When Pushed Down The Stairs."
Big Dog Dad is offline   Reply With Quote
Old 07-20-2004, 20:25   #7
10 Ring Tao
Red White Blue
 
10 Ring Tao's Avatar
 
Join Date: Sep 2003
Location: Southeast Michigan
Posts: 7,081
Quote:
Originally posted by Big Dog Dad
If truly is infected, can I replace it somehow? I basicaly understand what it does (I think), so how can I replace it with a legitimate copy?

-=BDD=-
No no, the virus doesn't infect the legit svchost.exe, it creates a new file of the same name in a different location. The bad one just needs to be deleted leaving the legit one alone, and then your registry needs to be cleaned. Pretty much all you need to know about the bad one is in the symantec link above. Again, get a free scan from http://housecall.trendmicro.com just in case.
__________________
...an ordinance that seeks to reduce the murder rate, by disarming those owners who are not criminals, makes about as much sense as fighting alcoholism by prohibiting beer sales to Mormons.

Visit to help!!-->
To view links or images in signatures your post count must be 10 or greater. You currently have 0 signatures.
10 Ring Tao is offline   Reply With Quote
Old 07-23-2004, 07:40   #8
0100010
Senior Member
 
0100010's Avatar
 
Join Date: Sep 1999
Location: DFW
Posts: 3,359


To learn the actual sources and filenames that are generating the processes you can see in Task Manager, download and run Process Explorer - http://www.sysinternals.com . If one or more of your svchost.exe processes is a virus, you can see what and where the offending file is located. Then it's a simple matter of accessing the hard drive in safe mode command prompt, to delete the offending file.
__________________
Member #1001 | 357Sig | Kalashnikov | TechTalk | Lone Star Glockers
SheepDog
0100010 is offline   Reply With Quote

 
  
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump




All times are GMT -6. The time now is 05:20.




Homepage
FAQ
Forums
Calendar
Advertise
Gallery
GT Wiki
GT Blogs
Social Groups
Classifieds


Users Currently Online: 601
169 Members
432 Guests

Most users ever online: 2,672
Aug 11, 2014 at 2:31