svhost

[Tacklebox]

Hi All,
I'm just getting over an msblast attack. I was able to
get rid of it, however when the PC boots up it takes an
unusually long time to load user profiles and I get a pop
up (cmd type) looking to run the svhost exe. I checked
the system32 folder against a machine that hadn't been
infected and the svhost is not in the clean pc. I tried
removing it from the system32 folder and rebooting, but
it still runs during startup.

Any Suggestions?

Thank You

TB

[Chris Lanier]

Is it svhost.ext or svchost.exe?

See the MSKB here for a description of svchost.exe in Windows 2000 and XP.
http://support.microsoft.com/default.aspx?scid=KB;en-us;q250320

"Tacklebox" > wrote in message
...
> Hi All,
> I'm just getting over an msblast attack. I was able to
> get rid of it, however when the PC boots up it takes an
> unusually long time to load user profiles and I get a pop
> up (cmd type) looking to run the svhost exe. I checked
> the system32 folder against a machine that hadn't been
> infected and the svhost is not in the clean pc. I tried
> removing it from the system32 folder and rebooting, but
> it still runs during startup.
>
> Any Suggestions?
>
> Thank You
>
> TB

[Tacklebox]

No, it's not the svchost. The svchost is also in the
uninfected machine, which is what leads me to believe
this exe is a problem. Also when I looked for "svhost"
in the knowledge base I was directed to info about
msblaster.
>-----Original Message-----
>Is it svhost.ext or svchost.exe?
>
>See the MSKB here for a description of svchost.exe in
Windows 2000 and XP.
>http://support.microsoft.com/default.aspx?scid=KB;en-
us;q250320
>
>"Tacklebox" > wrote in message
...
>> Hi All,
>> I'm just getting over an msblast attack. I was able to
>> get rid of it, however when the PC boots up it takes an
>> unusually long time to load user profiles and I get a
pop
>> up (cmd type) looking to run the svhost exe. I checked
>> the system32 folder against a machine that hadn't been
>> infected and the svhost is not in the clean pc. I
tried
>> removing it from the system32 folder and rebooting, but
>> it still runs during startup.
>>
>> Any Suggestions?
>>
>> Thank You
>>
>> TB
>
>
>.
>