How do I restore svchost.exe?

  • Thread starter Thread starter news.microsoft.com
  • Start date Start date
N

news.microsoft.com

I just found that svchost.exe on my laptop is infected with the gaobot.ae
worm. I deleted the offending registry entries but can't find out how to
restore an uninfected copy of svchost.exe. I've searched the net for a few
hours and decided to turn to the experts ;-)

Thanks in advance for any help.

R. Jones
Win2k SP4
Dell Inspiron 7500
 
Worms do not infect files (viruses do). So worm is just a program which sits on user's computer and which sends itself to other computers on the network (by any means). This means that if you deleted the worm body there is nothing to cure there. That file didn't contain anything useful.
 
Symantec's online scanner found svchost.exe and winhlpp32.exe (yes -
winhlpP.exe) to be infected with W32.HLLW.GAOBOT.AE.
Win2k's File Signature Verification utility also indicates that svchost.exe
was modified on 10/7/2003 (all my other files appear to be dated around
1999).

So are you saying svchost.exe is not infected?


Dmitry Kulshitsky said:
Worms do not infect files (viruses do). So worm is just a program which
Click to expand...
sits on user's computer and which sends itself to other computers on the
network (by any means). This means that if you deleted the worm body there
is nothing to cure there. That file didn't contain anything useful.
 
Back
Top