Svchost.exe help please

WeezleXX89 · Jan 8, 2007

hey guy i got attacked with a virus i can seem to delete which maxed my CPU percentage, slow internet and hard to access folders. I called my buddy James and he said that its a virus read whats in you task manager. I said a bunch of svchost.exe. He said its a virus. what did i do? I beleived my buddy and i deleted the file Which was important i guess. when i restated my computer, theres, no start bar and i can access my computer. what do i do to fix this?

Thanks
Weezlexx89

WeezleXX89 · Jan 8, 2007

i cant even go on safe mode. what do i do guys. any suggestions?

jiggamanjb · Jan 8, 2007

Yea, never delete that file. Anywho, to retrieve it:

If you deleted svchost.exe from your system32 folder follow these steps:

Boot from your Windows XP disk and use recovery console, follow the onscreen stuff and put the admin password in that you setup when you installed windows, you should now be at a prompt EXAMPLE: C:\WINDOWS>

At the end of the prompt type: cd F:\I386
F is the letter of the drive where your XP disk is so you will need to change it to your drive letter. The prompt should now be F:\I386>

After the prompt type: Expand svchost.ex_ C:\windows\system32
C is the letter of you HD were windows XP is installed, needs to be changed accordingly. At the prompt type: exit
Your sytem will re-boot and you will now have a copy of svchost.exe in your system32 folder again.

after that I would boot to safe mode, run a virus scan both offline and online, run Adaware, Spybot, CWshredder, CCleaner, and HijackThis and enter the log in here

oh, and try to stay off the internet with the pc till you get it fixed as it will just get worse

WeezleXX89 · Jan 8, 2007

so theres a virus causing this?

jiggamanjb · Jan 8, 2007

no, it's because the svchost file is gone, but you can never be too sure

WeezleXX89 · Jan 9, 2007

i just wiped my hard drive and im doing better lol. no viruses.

jiggamanjb · Jan 9, 2007

lol, that'll do it

WeezleXX89 · Jan 9, 2007

yup sad to say lol.

amazon10x · Jan 9, 2007

Svchost.exe is a used to run services. In your case, there was probably a virus which names its executable Svchost.exe and you deleted the wrong one. Or, it could have been a virus running under a legitimate Svchost.exe.

At any rate, reformatting and reinstalling was probably the best course of action.

WeezleXX89 · Jan 9, 2007

also how can you tell which is which. can i go to search and type the svchost.exe and delete the one that doesn't say location win32 or is there more that i shouldn't touch?

amazon10x · Jan 10, 2007

If it's not in %SystemRoot%\System32 then it is bad. You can use Process Explorer to see what path svchost.exe is running from. You can also see, if it is a legitimate svchost, which services it is running.

WeezleXX89 · Jan 10, 2007

oh cool thanks guys.

Svchost.exe help please

WeezleXX89

Member

WeezleXX89

Member

jiggamanjb

Member

WeezleXX89

Member

jiggamanjb

Member

WeezleXX89

Member

jiggamanjb

Member

WeezleXX89

Member

amazon10x

Member

WeezleXX89

Member

amazon10x

Member

WeezleXX89

Member

Similar threads