http://www.symantec.com/security_response/writeup.jsp?docid=2003-040217-2506-99&tabid=2Your virus...
Originally posted by StarPuppy:
is it listed in the startup processes?
Originally posted by blahshit:
ouh.. i went to the symatec web thingy to check it out.. they ask me to stop a process named svch0st.exe or something like that in task manager.. but i saw 7 of this in processes tab.. nothing in control panels leh.. everything clean.. btw, how come i cannot find the virus file 1 even after i use the link given by the anti virus software? it's like it's invisible leh.. the folder dun have that file.. but i can still find it when i use "run"..
The link given above... says the virus will start when you start PC, not seen in Task Manager... and note the word SIMILAR... it doesn't mean SAME...
Originally posted by StarPuppy:
svchost is needed when u run anything that uses net application
meaning..MSN needs one svchost..your IE needs one more svchost
have u tried viewing system file and folders?
Wrong. svchost is needed for more than this. What I've explained, is just a part only. Did you read the Bleeping Computer link?
svchost is needed for handling processes executed from DLLs. All programs used in Windows will use some sort of DLLs... and svchost is used to handle them. Some common processes, like logging in and out, is handled by svchost.exe. Security features in XP, particularly lsass.exe, uses svchost.exe as well.
Networking is only part of what svchost handles.
READ. Also the read the Bleeping Computer link provided in the thread that you've started.
There's a thread which I've started on running processes in XP.
http://tech.sgforums.com/?action=thread_display&thread_id=237062Also, TS mentioned svch
0st.exe, not svch
ost.exe. Read carefully, O has be replaced with 0 (zero), common mistake made by people when hunting for processes and professionals.
Originally posted by blahshit:
think i have a firewall... not sure also.. lol
Not think, is must have. After your PC is cleaned, that is.
Originally posted by blahshit:
GTSERVER2006KEY.DLL
Interesting... looks like you have hacker(s) accessing your PC.