svchost.exe

talkshowhost · 6 Dec 2006 at 19:16

scvhost.exe

just downloaded AVG anti spyware and did a quick scan with it and came up with this entry below which i quarantined see pic below

the problem i now have is that when i restart my computer it comes up wiht a message about not being able to find scvhost.exe etc etc.

so...is it actually a virus/spyware or not and if so how do i get rid of these messages on startup. There doesn't seem to be an entry for this in msconfig so i'm lost.

any help much appreciated.

Beansprout · 6 Dec 2006 at 19:18

svchost.exe is a legit Windows app, whereas your virus scanner caught scvhost.exe which looks like a virus

Start > run > msconfig > look in the Startup tab for any references to scvhost.exe (but be careful not to misread)

Ace of Spades · 6 Dec 2006 at 19:20

avg found something called scvhost not to be confused with svchost!

talkshowhost · 6 Dec 2006 at 19:26

^ just edited my first post as that was a typo. it found svchost.exe which i realise is a windows app but surely it shouldn't come up wih this on a scan??

there is only one entry is msconfig for this but i've tried disabling and the messages still pop up :confused:

GTO · 6 Dec 2006 at 19:36

Check again.

Look at the picture, it found scvhost not svchost.

scvhost - scvhost.exe
Worm which tries to disguise by using a similar name with the Windows process, svchost. svchost is an important system process required by Windows, while scvhost is actually the worm W32.HLLW.Gaobot (also known simply as GAOBOT).
This worm connects to an IRC server as a bot, where it is controlled by hackers to perform DoS attacks on other IRC users.

talkshowhost · 6 Dec 2006 at 19:40

sorry im getting all confused here now lol

i just tried msconfig again and the messages have gone. so i can safely now delete it as it shouldn't be there !

thanks for your help guys as always