Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Trojan.Dropper/SVCHost-Fake repost on c:\windows\temp\svchost,exe and ComboFix fails to complete scan

  • This topic is locked This topic is locked
2 replies to this topic

#1 joliett


  • Members
  • 12 posts
  • Local time:02:01 AM

Posted 13 September 2011 - 02:10 AM

My original post was started here: http://www.bleepingcomputer.com/forums/topic418738.html/page__pid__2406181#entry2406181

My WINDOWS XP laptop computer is running slow and takes a very long time to boot. I am an advanced computer user, and after running MALWAREBYTES & HIJACK THIS - nothing unusual.

SUPER ANTISPYWARE reports Trojan.Dropper/SVCHost-Fake as the file C:\windows\temp\svchost.exe. Attempts to delete the file fail because when the computer reboots it gets created again. SuperAntispyware attemts to remove the Trojan but before the computer reboots I get an error that flashes on the screen saying SVCHost Application Error at certain memory address (it flashes too quickly to copy) and now I get this error every time I shut down.

ComboFix will start to run then stalls before the first scan completes.

TDSSKiller reports no threats found.

DEFOGGER reports no cd emulation software.

GMER log is attached as ark.txt

DDS tool begins to scan than hangs my computer (in safe mode and regular). It starts to scan than after half a screen of scan (the # signs scan indicator scans up to the end of the word "where"), it hangs, and I have to reboot.

Attached Files

  • Attached File  ark.txt   21.61KB   0 downloads

Edited by Orange Blossom, 13 September 2011 - 02:11 AM.
Revealed URL. ~ OB

BC AdBot (Login to Remove)


#2 joliett

  • Topic Starter

  • Members
  • 12 posts
  • Local time:02:01 AM

Posted 14 September 2011 - 12:03 PM

I bit the bullet on this issue and formatted the drive and reinstalled the operating system. Laptop is now working great, trojan - gone, of course;
This only happened twice in 25 years of computing.

Thanks for being there...

#3 Budapest


    Bleepin' Cynic

  • Moderator
  • 23,579 posts
  • Gender:Male
  • Local time:04:01 PM

Posted 14 September 2011 - 05:56 PM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users