I Need a New Copy of the "SVHOST.EXE" File

[DoveTurnedHawk]

It's a win32 system file that I just discovered is infected with a virus, and cannot be repaired. I just searched the Microsoft boards and Google, but can't find anything helpful.

Can anyone point me to how I might be able to do this? Thanks!

DTH

[donco6]

1. Are you SURE???

Who said it was infected? This is a common prank through email. Be careful!

[DoveTurnedHawk]

2. I Just Did a Virus Sweep

Using the "avast!" scanner. It indicated the file was infected.

DTH

[cosmicaug]

4. You didn't mention your OS.

You didn't mention your OS but, as I recall, that file doesn't exist in Windows 9x (since those versions don't use services) so it must be XP (or maybe 2000, etc.). In the XP install cd, it will be found in the \i386 directory. Go there using the commandline and look for "SVH*.*" and it should turn up the needed file or files. Note that it will have to be expanded with the "EXPAND" command.

[OKNancy]

3. Is it svchost?

anyway type it svchost.exe virus in google...tons of stuff about it.

[cosmicaug]

6. Correction.

OKNancy wrote:

Is it svchost?

You are correct, it is "SVCHOST.EXE". I believe the "svc" part of it stands for service.

[GAspnes]

5. start here

http://securityresponse.symantec.com/avcenter/venc/data/backdoor.socksbot.html

[DoveTurnedHawk]

7. Thanks Everyone

I did a little more research, and it appears the "svhost.exe" file is different from "svchost.exe" and moreover, it appears that the "svhost.exe" file can just be deleted safely without incident, after reading some of the commentary on it.

Thanks!

DTH

[cosmicaug]

8. Yup.

DoveTurnedHawk wrote:

I did a little more research, and it appears the "svhost.exe" file is different from "svchost.exe"...

Yup, the name is just made to sound like "SVCHOST.EXE" (presumably so that when one sees it in the list of files accessing the internet it won't arouse suspicions). If it will reassure you, I just searched for "SVHOST.*" in my system and such files don't exist on my system (Windows XP).