Question About a Virus

[-Avid-]

Hey, I got sent a file over skype. It was infected. It was a scvhost file. It made it look like it was supposed to be in the program files folder, but it is supposed to be sVchost.

Anyway, I keep pressing esc. and it keeps coming back up. When I first clicked ok it brought me to a site called MeatSpin()biz. That was bad...

So, what can I do to remove this? I restart my computer and it still does its thing were it keeps coming up.

If you can help me MUCH thanks would be appreciated.

[Mythico]

Avid, I will add you on skype and help you out

---

Added you. I am online when ever your ready :)

[UGP Josh]

ok this is what you do:

1.) go into task manager(right click blue bar at bottom)>processes>all processes>scroll down to the svchost, and the one that has your computers name to the right of it, end that process tree.

2.) your going to want to do a system restore to the day before you download this file.
3.) (you will not lose your saved data, only downloaded items.)
4.) now your going to want to do a virus scan, and even though his rat may be FUD, (or virus) you could probably still find it.
5.) if it is still in your computer add my skype for further help: Skypename: Elysiantime


im here to help

[Dule76]

UGP josh, basically that! If you still need help, contact me, I'm the head of virus removal after all :P

[-Avid-]

(10-17-2011 09:14 AM)UGP Josh Wrote:  ok this is what you do:

1.) go into task manager(right click blue bar at bottom)>processes>all processes>scroll down to the svchost, and the one that has your computers name to the right of it, end that process tree.

Yes, i have already looked for the process when it popped up. There was no scvhost. I will do a system restore from about a week ago when I get home. Thanks.

[Feckhed]

What's wrong with meatspin?

I show it to school boys all the time...


On-topic, why did you accept a file over skype from some random person?

[UGP Josh]

Yes, i have already looked for the process when it popped up. There was no scvhost. I will do a system restore from about a week ago when I get home. Thanks.

well this is going to be kind of a pain but.. right click all tasks that look just plain out weird, like they dont belong on your comp, if its something like..

c:/user/appdata/dataroaming

something similar to that, then its probably the rat, if it has like local temp at the end, i wouldnt suggest deleting that, just system restore, but either way system restore so you can get it completely off your computer.

[Mythico]

Ya, would give what they said a try and let us know if you have any other issues.

[Smyly]

Download MalwareBytes Here and scan your computer then remove the viruses.

[UGP Josh]

yea i suggest to download malwarebytes and next dude go to http://www.sandboxie.com download their tool open it in sandboxie to check some suspicious things first.. then maybe you can backtrace their ip and freak them out!