What is this message/how do i get rid
- Thread starter bobby123
- Start date
- Status
D
DelJo63
restore from a restore point will not recover the file; it only reverts the registry
to the date requested!
A restore point is not the same thing as a backup.
to the date requested!
A restore point is not the same thing as a backup.
D
DelJo63
that's the functionality of SFC /SCANNOW, not restore
AlbertLionheart
Posts: 1,997 +3
svchost.exe is an essential windows file but it should be in c:\windows\system32, not where this error thinks it is.
This attempt to run a copy from the wrong file location is perhaps the result of a fixed virus infection - does this make sense?
You could also look in msconfig (Start > run > [msconfig] > OK) for an instruction to run the program from this location - if you find it you can disable it.
This attempt to run a copy from the wrong file location is perhaps the result of a fixed virus infection - does this make sense?
You could also look in msconfig (Start > run > [msconfig] > OK) for an instruction to run the program from this location - if you find it you can disable it.
D
DelJo63
That's correct. any copy running elsewhere is bogus
first, get a command prompt and issue
Code:
dir \windows\system32\svchost.exenow follow these instructions
D
DelJo63
follow the insturctions shown -- you have some virus and the instructions will
allow us to diagnose which one.
allow us to diagnose which one.
AlbertLionheart
Posts: 1,997 +3
jobeard means you to follow the instructions on the post given by Howard on
https://www.techspot.com/vb/topic65943.html
click on this to open the post - it would be a good idea to print it!
https://www.techspot.com/vb/topic65943.html
click on this to open the post - it would be a good idea to print it!
howard_hopkinso
Posts: 21,238 +17
Your system is infected with malware.
svchost.exe should not be in the C:\windows directory. This means that a malicious process is trying to locate a bogus copy of svchost.exe.
Go and read the Viruses/Spyware/Malware, preliminary removal instructions. Follow all the instructions exactly.
Post fresh HJT, AVG Antispyware and Combofix logs as attachments into this thread, only after doing the above.
Also, let me know the results of the AVG Antirootkit scan.
Regards Howard
This thread is for the use of bobby123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
svchost.exe should not be in the C:\windows directory. This means that a malicious process is trying to locate a bogus copy of svchost.exe.
Go and read the Viruses/Spyware/Malware, preliminary removal instructions. Follow all the instructions exactly.
Post fresh HJT, AVG Antispyware and Combofix logs as attachments into this thread, only after doing the above.
Also, let me know the results of the AVG Antirootkit scan.
Regards Howard
This thread is for the use of bobby123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
howard_hopkinso
Posts: 21,238 +17
Without seeing the rest of the requested log files, I won`t be able to say with any certainty whether your system is clean.
You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.
Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how HERE.
In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE.
Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).
F3 - REG:win.ini: load=C:\WINDOWS\svchost.exe
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
Click on the fix checked button.
Close HJT.
Locate and delete the following bold files and/or directories(if there).
C:\WINDOWS\svchost.exe
Reboot into normal mode and rehide your protected OS files.
Post a fresh HJT log as well as the rest of the requested log files.
Regards Howard
This thread is for the use of bobby123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.
Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how HERE.
In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE.
Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).
F3 - REG:win.ini: load=C:\WINDOWS\svchost.exe
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
Click on the fix checked button.
Close HJT.
Locate and delete the following bold files and/or directories(if there).
C:\WINDOWS\svchost.exe
Reboot into normal mode and rehide your protected OS files.
Post a fresh HJT log as well as the rest of the requested log files.
Regards Howard
This thread is for the use of bobby123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
howard_hopkinso
Posts: 21,238 +17
Nothing wrong there mate.
Regards Howard
This thread is for the use of bobby123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
Regards Howard
This thread is for the use of bobby123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
sorry but where is windows explorer cos iwent to tools and options and asked for show hidden folders and files. Located and deleted the BHO(no name) but couldnt find the other 1. Also how is it possible to locate that synchot thing you said.
I restarted and the message isnt coming anymore
I restarted and the message isnt coming anymore
howard_hopkinso
Posts: 21,238 +17
If the file isn`t there, don`t worry about it. That`s why I said(if there)lol.
Just post a fresh HJT log.
Regards Howard
This thread is for the use of bobby123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
Just post a fresh HJT log.
Regards Howard
This thread is for the use of bobby123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
- Status