DJRunner & SVC Host Viruses

Status
Not open for further replies.

Lolly

Baseband Member
Messages
40
After just getting rid of the GAOBOT virus last week & every other poosible virus i've just found out that these two "djrunner.exe and svchost.exe" didnt disappear..

Cant find a solution for them anywhere.. Im using Norton AntiVirus Software & ive tried Stinger on them (neither of them are detecting the viruses)

Have any of ye guys had encounters with either of these? If so, how did you go about getting rid of them?

I'm not very knowledgable when it comes to viruses etc.. so ALL help would be really appreciated.

Thanks
 
Please download Adaware from the link below first
http://www.lavasoftusa.com/software/adaware/. & update it B4 scanning.
In settings under 'scanning,' have it set to
'scan within archives,'
'scan active processes,'
'scan registry,'
'deepscan registry'
'scan my IE Favourites for banned URL's,'
'scan my host's file.'
In 'tweaks' under 'scanning engine' set it to 'unload recognised processes during scanning.'
Also in 'tweaks' under 'cleaning engine' set it to 'Automatically try to unregister
objects prior to deletion' & 'let Windows remove files in use at next reboot.'
Select 'activate in-depth scan' before starting scan.
When the scan is finished select 'next.'
Remove what it finds by placing a check in the box to the left of the object. Reboot
-----------------------------------------------------------------------------------------------

Create a folder on your hard drive somewhere like in "My Documents" and name it Hijackthis
Download 'Hijack This to its own folder http://www3.ns.sympatico.ca/c.bennett03/moboswindowclinic1.html
Doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log, load it in Notepad, and copy its contents here. Most of what it lists
will be harmless or even essential, don't fix anything yet.
__________________
 
Sorry for the late reply

Sorry for replying late but thanks so much for answering me. I did as you told (thanks so much for the detailed instructions, perfect for me coz i don't have a clue what to do).

Ad-aware found 14 files & i deleted them & here is my hijack this log. I deleted somethings on it that i dont want shown here (company name etc..) but here's most of it.

****************************************************

Logfile of HijackThis v1.97.7
Scan saved at 11:52:10, on 29/07/2004
Platform: Windows XP (WinNT 5.01.2600)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\LAVASOFT\AD-AWA~1\Ad-aware.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Lolly\VIRUS SCANS\HIJACK THIS\HijackThis.exe
 
DMo224 said:
Can you post the rest of the log?

Dave :D

Hi DAve,
I really don't wanna post it in case my boss sees it! He doesnt like us using forums on work pc! Can i send you a private message with it??
 
Status
Not open for further replies.
Back
Top Bottom