gtasearcher Posted May 23, 2009 Share Posted May 23, 2009 (edited) I believe it was 2-3 weeks ago when I had to reformat my PC because of Conficker/Kido Anyway, in this time, Kaspersky Internet Security 2009 didn't detect any virus on my pc but some fake alarms for CLEO GXTHook as Win32.AutoRun. Now, Kaspersky detected "Heur.Trojan.Win32.Generic" in one of the applications which were actually batches transformed into .exes. Problem is, I said one application: Designer's Security 1.0. And, looking in the task manager, I see 2 3 svchost.exes - one from the SYSTEM, another one from LOCAL AREA, and the last from NETWORK. I ran Kaspersky's Kido Remover, didn't detect anything. Now I'm running a full system scan, and it detected other Heurs in System Volume Information. So my pc is virused again... Will I have to reformat again? I have very important data on it Edited May 23, 2009 by gtasearcher Link to comment Share on other sites More sharing options...
Girish Posted May 23, 2009 Share Posted May 23, 2009 Don't you get an option to quarantine or delete the file when it alerts you of the trojan? Try quarantining it. If you can't, delete it. If you still can't get rid of it, there is a manual method which is kind of user specific. To obtain that manual fix, ask for help over here: http://forum.kaspersky.com/index.php?showforum=19 The moderators at the Kaspersky forum will help you out. Link to comment Share on other sites More sharing options...
gtasearcher Posted May 23, 2009 Author Share Posted May 23, 2009 (edited) Well, it automaticly quarantined them. So it seems I got rid of them, but problem is - I hope they won't come back But is it normal to have 2 3 svchost.exe running at the same time? Edited May 23, 2009 by gtasearcher Link to comment Share on other sites More sharing options...
anus Posted May 23, 2009 Share Posted May 23, 2009 Yep, perfectly normal. I have the exact three you mentioned running right now. Link to comment Share on other sites More sharing options...
gtasearcher Posted May 23, 2009 Author Share Posted May 23, 2009 So: - no more Heurs - no other viruses - perfectly normal svchosts Can that be called that my PC is safe? Link to comment Share on other sites More sharing options...
copperwire93 Posted May 23, 2009 Share Posted May 23, 2009 (edited) Hmm? I have 5 svchost.exe 2 on system, 2 Network Service and 1 for local service. But I don't think my PC has virus because I always monitor my PC health It's normal! Edited May 23, 2009 by copperwire93 Link to comment Share on other sites More sharing options...
Girish Posted May 23, 2009 Share Posted May 23, 2009 So: - no more Heurs - no other viruses - perfectly normal svchosts Can that be called that my PC is safe? Yup, as safe as it can be. Kaspersky, FTW!! Link to comment Share on other sites More sharing options...
Wolf68k Posted May 23, 2009 Share Posted May 23, 2009 When it finds something in System Volume Information that means System Restore files. Simple fix is to disable System Restore, then do the full scan and fix anything it finds, then if you really want to you can enable System Restore again. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now