Unsure if this is a Trojan?

[Irish_PXzyan]

Hey.

I have been attacked by something..I think...iam unsure what to think about it..but I do beleave its a trojan of some sort

Here it is:

At Startup it trys to install microsoft Word 2000..I click cancel but it comes back again...now it keeps doing this for 20 cancel clicks!!! then it all stops....when I Launch Tuneup Utilities and go to currently running programs..it shows 4 SVNhost files that look different from the other...they are RED and are shown as Dangerous. I terminate all 4 and they are gone...but of course they startup all the time...even if I uncheck them so they wont start up on boot.....they still come up anyway! so they are trojans right??

They also take up 15megs of ram each also.

Is there anything I can do to get rid of these annoying things??

 

[psyko12]

Do you have an anti virus? Go safe mode and do a system scan, also if u have the software called hi jack this, post a hi jack scan log, so other people can help out , but try doing a virii scan first

 

[HookeyStreet]

Just download NOD32, that will kill it, and another nasties that you have on your system

 

[psyko12]

Just download NOD32, that will kill it, and another nasties that you have on your system

Yeah try that too been using that for a year now, and it beats crap out of norton, in terms of resource usage and scanning

 

[Irish_PXzyan]

Yea I am aware of Anti-viruses and I know whats good out there!!

I already have NOD32 lol. But it does nothing about it!
I guess I should go into safe mode and do a virus scan!!! oh god..the damn effort!!

Thanks alot peeps!

 

[Irish_PXzyan]

Ok downloaded that program and here is the log file!

Should I restart the computer also and let those 4 trojans be running in the backround??

 

[Irish_PXzyan]

Ok downloaded that program and here is the log file!

Should I restart the computer also and let those 4 trojans be running in the backround??

Oh my bad!!

 

[psyko12]

do a scan before terminating those processes so others can see the hijack log

 

[Irish_PXzyan]

Yea I just done a scan! pitty tho..I am unsure what to make of it

 

[psyko12]

svchosts are system related files/processes, I don't know about svnhosts maybe virii, or worm, try using online scanners also run hijack log after boot or don't terminate those processes... and uhm a little googling for that exe file usually gives information about it.. Let's wait for the pros hehe

 

[Jess Stingray]

svchost.exe is the only s__host file there should be running. You have a virus. Keep an eye out for scvhost as well, thats a virus too. It looks like the real thing, but the c and v are the wrong way round.

 

[psyko12]

W32/Agobot-GW - Worm - Sophos threat analysis
as svnhost.exe and creates the following registry entries to run itself ... Microsoft Update Event = svnhost.exe. Registry entries are also created under: ...
www.sophos.com/security/analyses/w32agobotgw.html

Its a virii or malware found it off google.... Hope that helps out

 

[Irish_PXzyan]

Ok I had a feeling they were viruses! bloody hell..how did I manage to get them....I am careful on what I download....

Ok so...I will restart the computer..let them do there annoying thing and do a scan..then come back here and put the log on here and see what yee guys can make of it.

I will be gone for a good 15 mins btw! I need my mug of tea

 

[psyko12]

Try googling for a malware/virii remover or try "START>RUN>mrt" ms own malware remover tool or something like that or try googling for a good svnhost.exe cleaner.

Here are some ways:

http://www.pcprivacysolutions.com/spyware/AGOBOT.asp

more info on your problem:

http://www.spywaredata.com/spyware/threat_list/AGOBOT-GZ/result.php

 

[Irish_PXzyan]

Ok I just restarted and here is the log file with those 4 running viruses.

 

[psyko12]

read my post above, I gave you a link on how to fix it, and another link with an information for it

 

[Irish_PXzyan]

oh yes! I missed that hehe! thanks for the assistence!

 

[psyko12]

Anytime mate hope you get your system purified , I treat virii like the ghost/demons in exorcist

 

[Irish_PXzyan]

hehe! ive never had any issues with viruses and take them seriously!! Now that I have bloody got them for the first time....my god..whats become of me!!!
Next I will be calling a priest over here to bless my rig!

 

[psyko12]

LOL, I just treat my pc as a person, coz I've spent most of my earnings for it lol.. Am I crazy, hahaha well don't want to get my investment ruined.. Rofl glad your pc is safe and sound now

 

[DRDNA]

also install AVG Anti-Rootkit it free heres a link>> http://free.grisoft.com/doc/downloads-products/us/frt/0?prd=arw it will rid your system of nasties that the OS can not see.

 

[Steevo]

Comodo firewall. AVG Free,