Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

msdos.pif and svchost.exe


  • Please log in to reply
3 replies to this topic

#1 sakaman

sakaman

  • Members
  • 43 posts
  • OFFLINE
  •  
  • Local time:05:23 PM

Posted 13 September 2005 - 03:33 PM

hi everyone. I am running windows XP.

task manager shows about three "msdos.exe" I tried to close them but nothing When i close all of them they just reappear

what is "svchost.exe"? task manager shows 5 svchost.exe
when i close one of them appears a windows that says that NT client....(and something there is a clock counting backwards) and after a while window shut down


thanks a lot, Sakaman.

BC AdBot (Login to Remove)

 


#2 Bonk

Bonk

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:05:23 PM

Posted 13 September 2005 - 03:41 PM

First msdos.exe is a Adult content downloader ....not good,,second svchost.exe is a windows file and are usually OK and you should not delete them. But you should checkout msdod.exe unless you have it for a reason.

#3 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:05:23 PM

Posted 13 September 2005 - 03:50 PM

From Symantic

msdos.exe:

W32.HLLW.Ssdx is a worm that spreads using the KaZaA file-sharing program. It copies itself as the following files:

* C:\MSDOS.EXE
* C:\My Documents\Windows.EXE
* A:\NewFolder.EXE
http://securityresponse.symantec.com/avcen....hllw.ssdx.html

What resident Anti-Virus program are you using?
After updating your virus definitions run a full virus scan from safe mode.

Also recomended are running scans using Adaware and Spybot Search and Destroy, choosing "fix items found", also using "safe mode". Update both these before using and if you don't already have the latest versions of these anti-malware programs, download, install, and update them and then run the scans.

Additionally, run a few of the web based anti-virus and anti-malware scans that are available (using Internet Explorer).
online trojan scans here -
http://scan.sygatetech.com/pretrojanscan.html
http://windowsecurity.com/trojanscan
Web based online Antivirus and anti-malware scans: (these can be run regardless of whatever else you are using. You must use Internet Explorer to run these.)

Kaspersky Anti-Virus Web Scanner
http://www.kaspersky.com/service?chapter=161739400#betatest

Windows Security Trojanscan
http://www.windowsecurity.com/trojanscan/trojanscan.asp

Panda Activescan (IE only)
http://www.pandasoftware.com/activescan/co...n_principal.htm

Trend Micro antivirus and malware scan:
http://housecall-beta.trendmicro.com/en/st...orp.asp?id=scan

Etrust Anti-virus web scanner
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx


Run at least a few of the above.

Let us know what happens.

#4 sakaman

sakaman
  • Topic Starter

  • Members
  • 43 posts
  • OFFLINE
  •  
  • Local time:05:23 PM

Posted 13 September 2005 - 03:59 PM

thanks a lot i'll try everything you said :D




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users