RE: SVCHOST.DLL - Backdoor.Trojan - where can I get a clean ..

From: Curtis Koenig [MSFT] (curtisko_at_online.microsoft.com)
Date: 01/27/04


Date: Tue, 27 Jan 2004 21:11:18 GMT

Hi Sven,
Svchost.exe is a valid Windows file, it does not appear the svchost.dll is.
I would suggest you allow your antivirus program to quarantine or remove
this file as neccessary.

--
Curtis Koenig
Support Engineer
Product Support Services, Security Team
MCSE, MCSES, CISSP
This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit.  Thanks!
--------------------
>From: "Sven" <anonymous@discussions.microsoft.com>
>Subject: SVCHOST.DLL - Backdoor.Trojan - where can I get a clean ..
>Date: Sun, 25 Jan 2004 07:31:51 -0800
>
>My good friend Norton AntiVirus reported that it has 
>detected the "Backdoor.Trojan" virus in 
>C:\WINNT\SVCHOST.DLL 
>
>Can I replace this file with a clean version and where do 
>I get it? The SVCHOST.EXE and SVCHOST.DLL were both 
>modified Nov-08-2003 06:58:42 PM
>
>Thanks
>Sven
>
>
>
>


Relevant Pages

  • Re: MyDoom Virus in Exchange
    ... Your antivirus program detected the virus, and isolated the infected file in ... infected file AT ALL. ... DO want to delete it rather than keep in in quarantine, ...
    (microsoft.public.security.virus)
  • Re: TROJ_SCTHOUGHT C
    ... If an antivirus program detects a virus before it infects your system, ... in the configuration for you to set either to quarantine or delete if repair ...
    (microsoft.public.security.virus)
  • Re: explorer.exe file
    ... Try running your antivirus program in Safe mode. ... The virus software can ... > not quarantine this file. ...
    (microsoft.public.security)
  • Re: Deleting a file
    ... Doesn't your antivirus program delete or quarantine them for you? ... MS MVP - Windows XP Shell/User ...
    (microsoft.public.windowsxp.basics)
  • Re: 556 Null Byte in Data keeps me from sending mail to a .NET Ac
    ... The only thing that comes to mind is perhaps a corrupted install of SP2. ... Did you have an antivirus program running in the background while installing ... Jim Pickering, MVP-Outlook Express ... >> Please reply only to newsgroup. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)

Loading