Question:
Help! my pc has a virus in it.?
n00b
2006-11-22 07:21:42 UTC
the virus is a trojan horse (vshost2.exe). i tried using Norton but it said it cant repair it : (

I tried connecting to the Internet the other day but failed. Could it be the virus?

And my pc has used up a lot of memory recently. Could it be the virus?

Any answers will do. please help. thanks everyone
Twenty answers:
2006-11-22 07:24:24 UTC
keep it wrapped nice and warm and put it to bed !
Zella
2016-08-21 11:08:48 UTC
2
2006-11-22 07:44:35 UTC
if you have an internet connection..



1) Try Hijack this. Run it (do a system scan), you dont need to save a log file unless you want to. Find the entry vshost2.exe and check the box then click the fix checked button. The file will be repaired or deleted.

Use a registry cleaner and clean your registry.



or...

2) Download and use the trial version of trojan remover



if you do not

Create a new restore point.



1) Run MSConfig. (Start->Run->(then type) msconfig) If the file is in the start up list disable it from starting.

2) Restart your machine

3) Run Regedit (Start->Run->Regedit). Left Click on the My computer icon in the left hand pane so it is highlighted. Then select edit->find and type in vshost2.exe. Right click on any entry you find and delete them.

4) Restart your PC.



To ensure the file is not there or active navigate to C:\\Windows\System32 and examine the folder to ensure it is not there.



Some trojans/virures react adversely if you delete them directly but if it is still there delete it and then repeat the above solution.

If any of this fails (shouldn't do) restore the system back to its former state.
RAS
2006-11-22 16:24:58 UTC
I suggest that you try to carryout system restore to a day previous to the day when there was no virus. The problem is likely to be solved. Then,You insatll a standard antivirus soft ware such as Norton, AVG , Avast ( free antivirus software and Ad-aware, Ewido ( free spyware removers). You can download free softwares at

http://fixit.in/antivirus.html and http://fixit.in/spywareremover.html
Eric R
2006-11-22 07:45:17 UTC
Do a virus scan of your PC.



Do a search and delete any vshost2.exe files from your computer.



Do a registry search and delete any registry keys that have vshost.exe



Reboot your computer



Download the latest and greatest virus definition files andscan your PC again.



You may also want to create a bootable floppy and run virus scan from there.



It's just a virus no need to start from scratch.
2006-11-22 07:27:00 UTC
a trojan horse allows your pc to be remotely controlled.

the bad news: the attacker could have used this remote control to install other software and modify your computer.



the best thing would be to start with a complete and fresh install of your operating system (i.e. windows).

since you don't know what has been done to your pc, it is not sufficient to remove the trojan horse :(
rlh242424
2006-11-22 07:26:25 UTC
Try going in to Safe Mode and running Norton again. To get into safe mode...



Restart Computer

hit F8 repeatly until you get the next screen

use you arrow keys to go up to Safe Mode

hit enter

hit enter on the next screen as well



Now you will have your log in screen. It will look very big. This is normal. Log in to a account with admin. privledges. Now run Norton and see if it can repair it now.



Good Luck
2014-08-21 18:53:48 UTC
There are a lot of different ideas about what is the best antivirus software on the market. I tried a lots of AV programs. The best for me is Avira, the latest version is amazing, it's realiable, safe. You can get it for free here http://bitly.com/1r4RK20
2014-08-14 21:08:22 UTC
Hi,

Avira is the most update free software you can use to get rid of viruses, trojan and worms. Download http://j.mp/1sW3Toh

You should definitly try it

Best
comn8u
2006-11-22 07:24:46 UTC
Take the definition that Norton's gives it and do a search on Symantec website. They will give you a difficult steps on how to remove it.



And try not to download from anywhere.
Ben
2006-11-22 07:25:12 UTC
Try runing a spyware scan that some times can handle the stuff norton cant you should have one with your yahoo package
sarah c
2006-11-22 09:29:35 UTC
A trojan horse is not a virus, and an anti virus won't remove it. You need an anti spyware.



Before attempting to remove malware you must switch off System Restore as back up files will be hiding in there, and it will just restore itself. Go to Start - programs - accessories - system tools - system restore.

Run your anti virus and anti spyware in Safe Mode. To get into Safe Mode repeatedly press the F8 key after the bios screen loads but before Windows loads. You'll know if you made it because the screen will be at 800 x 600 and your pc will be slow.



Then beef up your security. Its easier to prevent malware getting on to your sytem in the first place rather than trying to remove it. All the following programs are free for personal use;



You need to install one firewall.

The Windows firewall doesn't stop malware on your pc from dialling out.

http://www.zonelabs.com Zone Alarm firewall

http://www.comodogroup.com/ - Comodo security suite.



You need to install one anti virus;

http://free.grisoft.com/freeweb.php/doc/2/ -AVG anti virus or

http://www.avast.com - Avast Antivirus



You need all three anti spyware programs;

http://www.ewido.net - AVG(Ewido) anti trojan.

http://www.lavasoft.com - Ad-Aware SE Personal anti adware

http://www.safer-networking.org - Spybot Search and Destroy anti spyware



And these are useful utilities;

Shields Up security site;

https://www.grc.com - check your firewall works

http://www.grc.com/optout.htm - grc anti spyware program and info.



http://www.mozilla.com/ Firefox web browser and Thunderbird e-mail program.

http://www.opera.com/ Opera web browser

Instal both these web browsers, turn off javascript on one and use that browser for vising unknown websites. They don't support Active X so thats one less way for problems to get on your pc.



http://spywarewarrior.com/rogue_anti-spyware.htm - The Spyware Warrior site identifies fake anti spyware programs.

http://www.ccleaner.com Cr*pcleaner Registry cleaner and privacy tool

http://www.mailwasher.net/ -spam filter

Winpatrol is a handy utility that tracks cookies on your pc and stops unwanted changes to your startup folder.

http://www.winpatrol.com

Spywareblaster works with Internet Explorer and Firefox. It won't uninstall spyware that is already on your pc, but it will prevent hijacks and other malicious changes to your browser.

http://www.javacoolsoftware.com

http://www.siteadvisor.com -MacAffee Site Advisor warns about malware on sites you are about to visit.

http://www.sys-shield.com - AbsoluteShield File Shredder

http://heidi.ie/eraser - Eraser file shredder

http://www.softpedia.com/get/Antivirus/Lavasoft-ARIES-Rootkit-Remover.shtml - Aries Rootkit remover.



Remember to update and run all of you anti malware programs at least once a week.
skelomalso
2006-11-22 07:25:41 UTC
Try logging on to McAfee website they have tools to help remove viruses and trojans.

Good luck.
rage.dave
2006-11-22 07:24:57 UTC
try running your virus scan again and instead of repairing it just get the system to delete or quarantine it and this should solve your problem
zpeerally
2006-11-22 10:25:41 UTC
download avast, adaware,spybot search&destroy or buy norton antivirus and make a full system scan.
nufc mad
2006-11-22 08:19:16 UTC
try to quaranteen it iv it cant b deleted it usual lets u quareentine it
robert r
2006-11-22 07:33:49 UTC
go to trendmicro & download cwshredder this works

good luck
Bird
2006-11-22 07:34:42 UTC
if you can, back up what you can, then format your whole system and start over. if you cant find anything to get rid of it
2006-11-22 11:43:32 UTC
download xoftspy and then use that to remove it it will work!!!
bagmouss
2006-11-22 07:32:41 UTC
it's actually the SVCHOST2.EXE



Security patches below



http://www.microsoft.com/technet/security/bulletin/MS03-026.mspx

http://www.microsoft.com/technet/security/bulletin/MS03-001.mspx

http://www.microsoft.com/technet/security/bulletin/MS03-007.mspx


This content was originally posted on Y! Answers, a Q&A website that shut down in 2021.
Loading...