Trying to repair WksPatch(1).exe and SVCHOST.EXE in vault AVG Software

Discussion in 'Computer Support' started by Bun Mui, Apr 30, 2004.

  1. Bun Mui

    Bun Mui Guest

    I have Windows Xp Home Edition.

    When I checked with AVG software. It says I had Nachi type virus.

    2 files were affect and put in vault.

    But when I tried to repair them. It said I was not able to.


    WksPatch(1).exe

    was in

    C:\Windows\system32\config\systemprofile\localsetting\temporary Internet Files

    SVCHOST.EXE

    was in

    C:\Windows\system32\drivers\svhost.exe



    AVG Software showed my system was Windows Professional 2000 even though my
    computer is Windows XP Home Edition.


    What should I do?

    Thanks.


    Bun Mui
     
    Bun Mui, Apr 30, 2004
    #1
    1. Advertising

  2. Bun Mui

    Unk Guest

    Turn off System Restore:
    To disable System Restore, Click Start, Programs, Accessories, System Tools,
    System Restore, System Restore Settings, "System Restore" tab, and check the
    box. "Turn Off System Restore on all drives", click "Apply" and "OK".

    To delete previous restores Click Start, Accessories, System tools, Disk
    Cleanup, "More Options" tab, "System Restore" section, "Clean up" button,
    click Yes

    http://www.securemost.com/articles/trou_5_welchia.b.htm
    http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.d.worm.html

    W32.Blaster.Worm Removal Tool
    http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

    This is a link to a small FREE program by McAfee Anti-virus named Stinger.
    It will scan your system for 36 known viruses and trojans (including the new
    W32/MyDoom worm) and repair them. You don't need McAfee anti-virus installed
    on your computer... this is a stand alone program.
    http://vil.nai.com/vil/stinger/


    On 29 Apr 2004 20:26:44 -0700, (Bun Mui) wrote:

    >I have Windows Xp Home Edition.
    >
    >When I checked with AVG software. It says I had Nachi type virus.
    >
    >2 files were affect and put in vault.
    >
    >But when I tried to repair them. It said I was not able to.
    >
    >
    >WksPatch(1).exe
    >
    >was in
    >
    >C:\Windows\system32\config\systemprofile\localsetting\temporary Internet Files
    >
    >SVCHOST.EXE
    >
    >was in
    >
    >C:\Windows\system32\drivers\svhost.exe
    >
    >
    >
    >AVG Software showed my system was Windows Professional 2000 even though my
    >computer is Windows XP Home Edition.
    >
    >
    >What should I do?
    >
    >Thanks.
    >
    >
    >Bun Mui
     
    Unk, Apr 30, 2004
    #2
    1. Advertising

  3. Bun Mui

    °Mike° Guest

    http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.html

    http://www.sophos.com/virusinfo/analyses/w32nachia.html

    http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_NACHI.A

    http://www3.ca.com/threatinfo/virusinfo/virus.aspx?ID=36372

    What you should know about the Nachi Worm
    http://www.microsoft.com/security/antivirus/nachi.asp


    On 29 Apr 2004 20:26:44 -0700, in
    <>
    Bun Mui scrawled:

    >I have Windows Xp Home Edition.
    >
    >When I checked with AVG software. It says I had Nachi type virus.
    >
    >2 files were affect and put in vault.
    >
    >But when I tried to repair them. It said I was not able to.
    >
    >
    >WksPatch(1).exe
    >
    >was in
    >
    >C:\Windows\system32\config\systemprofile\localsetting\temporary Internet Files
    >
    >SVCHOST.EXE
    >
    >was in
    >
    >C:\Windows\system32\drivers\svhost.exe
    >
    >
    >
    >AVG Software showed my system was Windows Professional 2000 even though my
    >computer is Windows XP Home Edition.
    >
    >
    >What should I do?
    >
    >Thanks.
    >
    >
    >Bun Mui


    --
    Basic computer maintenance
    http://uk.geocities.com/personel44/maintenance.html
     
    °Mike°, Apr 30, 2004
    #3
  4. Bun Mui

    Duane Arnold Guest

    (Bun Mui) wrote in
    news::

    > I have Windows Xp Home Edition.
    >
    > When I checked with AVG software. It says I had Nachi type virus.
    >
    > 2 files were affect and put in vault.
    >
    > But when I tried to repair them. It said I was not able to.
    >
    >
    > WksPatch(1).exe
    >
    > was in
    >
    > C:\Windows\system32\config\systemprofile\localsetting\temporary
    > Internet Files
    >
    > SVCHOST.EXE
    >
    > was in
    >
    > C:\Windows\system32\drivers\svhost.exe
    >
    >
    >
    > AVG Software showed my system was Windows Professional 2000 even
    > though my computer is Windows XP Home Edition.
    >
    >
    > What should I do?
    >


    You should be looking very hard as to what is happening/running on that
    machine.

    I'll tell you off the top of the bat, the svchost.exe should be running
    out of the Winnt/system32 for Win NT 4.0 and Win 2k and it should be
    running out of Windows/system32 for Win XP and Win 2K3. No subdirectories
    off of *syste32* or any other directories as they be *TROJANS*. That also
    includes dllhost.exe.

    You can use Active Ports (free) to look at connections in real time. You
    may want to put a short-cut for Active Ports in the Start-up folder to
    view what connections are being made at boot when the machine is at its
    most vulnerable time period.

    You may also want to use Process Explore (free) to look inside a running
    process if you see a process is making connections to unknown remoter IP
    (s) to see what processes/programs it is running.

    You should try to better secure the XP O/S from attack.

    http://www.uksecurityonline.com/index5.php

    You can consider using the Host as a prevention measure after you clean
    things up.

    http://www.mvps.org/winhelp2002/hosts.htm
    http://www.snapfiles.com/get/hoststoggle.html

    Duane :)
     
    Duane Arnold, Apr 30, 2004
    #4
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Jim Chapman

    Trojan Horse cannot be put in vault by AVG free version

    Jim Chapman, Aug 7, 2003, in forum: Computer Support
    Replies:
    1
    Views:
    554
    °Mike°
    Aug 7, 2003
  2. O.Phooey

    AVG's virus vault.

    O.Phooey, Jun 5, 2004, in forum: Computer Support
    Replies:
    6
    Views:
    3,926
    O.Phooey
    Jun 6, 2004
  3. PC

    AVG virus vault

    PC, Nov 28, 2004, in forum: Computer Support
    Replies:
    19
    Views:
    1,107
    Old Gringo
    Nov 30, 2004
  4. Andy Mann

    AVG Virus vault

    Andy Mann, May 23, 2005, in forum: Computer Support
    Replies:
    7
    Views:
    7,116
    ellis_jay
    May 23, 2005
  5. Val

    AVG Virus Vault

    Val, Apr 14, 2010, in forum: General Computer Support
    Replies:
    0
    Views:
    1,225
Loading...

Share This Page