Go Back   Computer Forums > General Computing > Hardware
Click Here to Login
Join Computer forums Today


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 07-28-2005, 03:21 PM   #1
Baseband Member
 
Join Date: Jun 2005
Posts: 32
Default trojan in the windows folder

hm... i got about 3 viruses in the system32 folder.. i know that that folder holds most of the important files that makes xp work.

shdocsv.dll ~
svcnt.exe ~
notepad.com ~

hm.. i quarantined all of these.. and i tried opening notepad and it works fine. does anyone know what the other two files are for and if i should delete them
__________________

yoshie is offline   Reply With Quote
Old 07-28-2005, 04:39 PM   #2
In Runtime
 
Join Date: May 2005
Posts: 427
Default

complete name: Trojan.W32/E-eliminator
E-eliminator creates the file SHDOCSV.DLL
-----------------------------------------

Do some googling for the other one...
__________________

r53s is offline   Reply With Quote
Old 07-28-2005, 05:59 PM   #3
Fully Optimized
 
dyserq's Avatar
 
Join Date: Jul 2005
Posts: 2,281
Default Re: trojan in the windows folder

Hmm just don't go deleting random files from system32 cause they keep your os operating
Sometimes if you try to delete Trojan.W32/E-liminator you may not be able to because it is running an active process
You need to terminate that process before you delete or ele you will no tbe able to
dyserq is offline   Reply With Quote
Old 07-29-2005, 04:32 AM   #4
Baseband Member
 
Join Date: Jun 2005
Posts: 32
Default Re: trojan in the windows folder

hm....... yep.. i tried to REPAIR it in safe mode but that failed... but its in quarantine anyway and my pc seems to work ok... you think i should delete both or just the shdocsv
yoshie is offline   Reply With Quote
Old 07-29-2005, 05:37 AM   #5
Fully Optimized
 
Join Date: May 2005
Posts: 1,690
Default Re: trojan in the windows folder

moveonboot: http://www.snapfiles.com/get/moveonboot.html
1)download this file

2).Run Task Manager(CTRL+ALT+DELETE):
C:\WINDOWS\System32\intel32.exe
C:\WINDOWS\system32\svcnt.exe
End these processes

3).Find and delete these files (use move on boot)
C:\WINDOWS\System32\intel32.exe
C:\WINDOWS\system32\svcnt.exe
C:\WINDOWS\system32\shdocsv.dll

***note*** the intel32,exe is normally companioned with svcnt.exe but may not be there if it is get rid of it too.

to use move on boot Just drag and drop to the program and it will take care of it on the next bootup. you can drop as many files as you need to but I would keep it less than 5

let us know how it comes out so others can see also
lurkswithin is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off



All times are GMT -5. The time now is 10:24 AM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Search Engine Friendly URLs by vBSEO 3.6.0