System 32

[kishen]

Hi,

I was wonder if anyone can help me, I put my laptop on standby and then I started it up and i got a threat detected, I looked around the net and everyone is saying to leave that file it's a very important windows file, but its reading it from my D: drive, is this a virus or not?

thanks in advanced

Kishen

[Knife Party]

have you been watching teh prons again? :D

[simsie]

Is Windows installed on D? As that is where the Virus's file name points to!

[rmorris003]

thats in your system restore so just clear it out or delete the file

[kishen]

Windows is installed on C drive

[simsie]

Then the virus appears to be in an old install of windows or something, on your D drive?

[JRosenfeld]

You can clear system restore just for the D; drive: open system restore, click on system restore settings, click on the D drive, click settings, check turn off system restore for this drive, OK/Apply/OK out.

That will remove all the restore points for the D; drive and so get rid of the infection found in one of the restore points of that drive. It will njot affect the restore points for the C; drive.

I would also do a complete AV scan of the D: drive to make sure nothing on there is infected..

[soldier1st]

people that say it is a critical file dont know what they are talking about..it is in your system restore files so to fix it it turn off system restore for that drive then turn it back on and it will be gone as the system restore files that were created were deleted,malware often likes to go into your system restore files as when you make a restore point and you got a virus in there it will be restored if you used system restore and that restore point.

[Yusuf M. Veteran]

Hello kishen,

First thing's first, it is a virus and it should be removed. Leaving it there would put your computer at unnecessary risk.

Here's what you'll do:

1. Disable system restore in Windows Vista for the infected drive. (click here for a small guide).
   
2. Scan your computer for any threats (that includes all drives, just incase).
   
3. Remove any detected threats.
   
4. Enable system restore in Windows Vista (Refer to step 1 and backtrack).
   

NOTE: Disabling system restore for the D: drive will remove all restore points.

[Panacik]

Hi,

I was wonder if anyone can help me, I put my laptop on standby and then I started it up and i got a threat detected, I looked around the net and everyone is saying to leave that file it's a very important windows file, but its reading it from my D: drive, is this a virus or not?

thanks in advanced

Kishen

You need to understand that the process is a required process and is being used to hock the virus. You shouldnt delete the svchost.exe, but you CAN delete the other file.

You will need to show hidden files and folders, as well as protected files and folders, otherwise you may not see te folder or file in question.

[sibot]

Heal the file. It wouldn't make a difference, its in your system restore anyway. And AVG Free 8 sucks. I miss the old version, the new ones just ugly.

[kishen]

Thanks for your help guys,

I healed it and got rid of AVG, Done a full scan using F-secure and it didnt find the virus.

once again thanks for the help.