BleepingComputer.com: cannot get rid of svchos1at.exe

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

cannot get rid of svchos1at.exe trojan horse wont go away !

#1 User is offline   westside_gangsta 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 5
  • Joined: 03-June 05

Posted 03 June 2005 - 04:43 AM

Hello, this is my first post so I'm not really sure how everything works etc, but here goes.

About 4 days ago i noticed that my modem was disconnecting all the time and attempting to dial to another number (upon which i pulled the line out of the phone socket!)
I'm on windows 98 second edition, running Norton system works 2002 & preventon firewall.

So i updated my virus definitions, (to 31st may 2005), and it identified download.Trojan in the file c:ied_s7.cab.
Upon which i deleted it & it hasn't returned.

However, i was still getting this svchos1at comming up every time i launched Internet explorer. Norton jumps up & deletes it each time, but it always re-spawns.
I looked down the task list & noticed some unusual names, namely: msexploren as well as svchos1at.

I then searched for their directories and deleted svchos.exe, svchos1at and msexploren.

I hoped this might clear it up, but svchos1at keeps popping up every time i launch Internet explorer 6.
Norton handles it each time, but it is only dealing with the effect and not the cause....

How do i go about getting rid of this ?

Any help would be much appreciated. :thumbsup:

#2 User is offline   tg1911 

  • Lord Spam Magnet
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Site Admin
  • Posts: 18,571
  • Joined: 06-May 04
  • Gender:Male
  • Location:SW Louisiana

Posted 03 June 2005 - 10:27 AM

I suggest you post a HijackThis log for examination.

Read the pinned post in the HijackThis forum, here
Please read, and follow, all directions carefully.

Then, run a log, and post it in the HJT forum, at this link. Do not, fix anything, yet.
A member, of the HJT Team, will help you out.
It may take a while to get a response, because the HJT Team are very busy. Please, be patient, these people are volunteers. They will help you out, as soon as possible.

NOTE:
Once you have made the post, please, DO NOT make another post in the HJT forum, until it has been responded to by a member of the HJT Team. The first thing they look for, when looking for logs to reply to, is 0 replies. If you make another post, there will be 1 reply. The team member, glancing over the replies, might assume someone is already helping you out, and will not respond. So, just make your post, and let it sit there, until a team member responds. This way you will be taken care of, in the most timely manner.
MOBO: GIGABYTE GA-MA790X-UD4P, CPU: Phenom II X4 955 Deneb BE, HS/F: CoolerMaster V8, RAM: 2 x 1G Kingston HyperX DDR2 800, GPU: eVGA GeForce 9800 GTX+, PSU: Antec TruePower Modular 750W, Soundcard: Asus Xonar D1, Case: CoolerMaster COSMOS 1000, Storage: Internal - 2 x Seagate 250GB SATA, 2 x WD 1TB SATA; External - Seagate 500GB USB, WD 640GB eSATA, 3 x WD 1TB eSATA

Become a BleepingComputer fan: Facebook

#3 User is offline   westside_gangsta 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 5
  • Joined: 03-June 05

Posted 03 June 2005 - 10:59 AM

[FONT=Arial][FONT=Arial][FONT=Arial]Thanks, I have done so... lets hope this thing can be removed!

#4 User is offline   tg1911 

  • Lord Spam Magnet
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Site Admin
  • Posts: 18,571
  • Joined: 06-May 04
  • Gender:Male
  • Location:SW Louisiana

Posted 03 June 2005 - 11:42 AM

Your quite welcome, westside_gangsta.
Our HJT Team should be able to get you fixed up.
MOBO: GIGABYTE GA-MA790X-UD4P, CPU: Phenom II X4 955 Deneb BE, HS/F: CoolerMaster V8, RAM: 2 x 1G Kingston HyperX DDR2 800, GPU: eVGA GeForce 9800 GTX+, PSU: Antec TruePower Modular 750W, Soundcard: Asus Xonar D1, Case: CoolerMaster COSMOS 1000, Storage: Internal - 2 x Seagate 250GB SATA, 2 x WD 1TB SATA; External - Seagate 500GB USB, WD 640GB eSATA, 3 x WD 1TB eSATA

Become a BleepingComputer fan: Facebook

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users