Re: How to reinstall ...

Dear Chuck,

Thanks for the advice. Stinger did find the w32/Nachi!tftpd virus in
C:\windows\system32\wins\SVCHOST.exe

It removed this ok and I cleaned up afterwards (removed the wins directory.

The other scans did not reveal anything else of importance.

Nothing has really changed with the original network problem. It may be that
my Norton anti virus partially removed this beast but completely.

Itis still likely that the key network files may have been "damaged" and I
think a clean reinstall of these may help.

I will check with the other forums on that.

Thanks for your help

Speedy

"Chuck" wrote:

> On Tue, 5 Apr 2005 23:55:02 -0700, Speedy <Speedy@xxxxxxxxxxxxxxxxxxxxxxxxx>
> wrote:
>
> >Dear Chuck, thanks for your most comprehensive answer. I appologise for an
> >error in my original post, it is SVCHOST, not SVHOST.
> >
> >Having said that, I had to use winsockxpfix once to restore my internet
> >connection most probalby after malware removal. I have Adaware, Spybot, MS
> >antispy and Spysweeper on top of Norton antivirus.
> >
> >I will run through your list of things to check things again fully. I
> >appreciate the order of these tools is important.
> >
> >Just a question, to ensure one has a clean version of SVCHOST and related
> >network stuff (I believe there are a number of DLL's) how would one do that?
> >
> >Best regards,
> >
> >Speedy
>
> Speedy,
>
> Ensuring a clean computer is never a one step process. The bad guys are
> constantly trying new tricks (this week, for your entertainment, we have "DNS
> Cache Poisoning, which could affect anybody, because it starts with your ISP).
> http://isc.sans.org/diary.php?date=2005-04-04
>
> That said, Norton AntiVirus, complemented by AA, MSAS, and SSD, should provide a
> good start. You could try any of these online scanners too:
> <http://www.bitdefender.com/scan/license.php>
> <http://www.pandasoftware.com/activescan>
> <http://www.ravantivirus.com/scan/>
> <http://security.symantec.com/ssc/home.asp>
> <http://housecall.trendmicro.com/housecall/start_corp.asp>
>
> If svchost is indeed your problem, and you don't have any malware infection as
> the primary cause of your problems, you might end up doing a system repair. In
> that case, you might get more comprehensive advice from a more general forum,
> maybe microsoft.public.windowsxp.help_and_support, or
> microsoft.public.windowsxp.perform_maintain.
>
> --
> Cheers,
> Chuck
> Paranoia comes from experience - and is not necessarily a bad thing.
> My email is AT DOT
> actual address pchuck sonic net.
>
.

Relevant Pages

  • Re: computer protiction
    ... but got a virus anyway. ... If you don't wish to follow all of the advice immediately, ... using Windows XP "prettifications". ... You should at least turn on the built in firewall. ...
    (microsoft.public.security)
  • Re: computer protiction
    ... Thank you for your advice and I will take it. ... but got a virus anyway. ... a "Windows" operating ... firewall can be found ...
    (microsoft.public.security)
  • Re: hacktool.rootkit HELP
    ... | Thanks for the advice. ... Norton Antivirus reported the following: ... |>> online virus scanners and Norton antivirus numerous times and all ... |>> The virus definitions date that found this problem was 10/19/05. ...
    (microsoft.public.security.virus)
  • Re: hacktool.rootkit HELP
    ... Thanks for the advice. ... >> online virus scanners and Norton antivirus numerous times and all seemed ... > Norton and get AVG free. ...
    (microsoft.public.security.virus)
  • Re: Is this a ghost?
    ... corresponded that they should all perform virus scans. ... > I run ME, Outlook Express, & have DSL. ... > On 8/28/03, a family friend, Chuck Seastrand, died. ... > designed by Microsoft, that Microsoft would be the most ...
    (microsoft.public.security.virus)
Loading