TROJAN: svchost.exe(1036)

This is a win32 variant.

The computer is an acer ASPIRE ONE Netbook.

NOD32 anti-virus, and Malwarebytes are installed.

Assistance would be greatly appreciated.

.

When was last A/Virus update?
Try going into safe mode and run virus scan or can't you?

Virus signatures update every hour.

Tried safe mode, wasted many hours, the Trojan is found but can not remove it.

.

google.com
download rkill, and all it's variants.
pick one, and run it, THEN when it's finished run malware bytes and it should be removed.

__________________
John HAUL AWAY, OR CRUSHED CARS!!! HELP ME keep the cars out of the crusher! A/C Thread
"as I ride with my a/c on... I have fond memories of sweaty oily saturdays and spewing R12 into the air. THANKS for all you do!

My drivers:
1987 190D 2.5Turbo
1987 560SL convertible
1987 190D 2.5-5SPEED!!!

1987 300TD
2005 Dodge Sprinter 2500 158"WB
1994GMC 2500 6.5Turbo truck... I had to put the ladder somewhere!

Might not be able to get in.

Just finished loading them on a thumb drive.
Loading into her machine now.

.

NOD32 still finds but will not touch it.

Malwarebytes is running now.

The Trojan is taking huge resources = slow...

I recently had an issue where I was able to go back and have the computer reset a day or so earlier. I don't remember how I went about it. If I remember I'll let you know.

Can you go back to set it some time in the past?

__________________
Jim

If you reset more than a week to a previous set point, Malwarebytes will work in non-safe (normal)mode,or always has for me.

__________________
Strelnik
Invest in America: Buy a Congressman!

1950 170SD
1951 Citroen 11BN
1953 Citroen 11BNF limo
1953 220a project
1959 180D
1960 190D
1960 Borgward Isabella TS 2dr
1983 240D daily driver
1983 380SL
1990 350SDL daily driver alt
3 x Citroen DS21M, down from 5
3 x Citroen 2CV, down from 6

It is called system restore, and I have had to do it a few times before too! If it has Windows Vista or Windows 7 you can search at the bottom of the Start Menu. Just search System Restore. They you can go back a few days, and you shouldn't have the Trojan anymore, unless it was acquired before the reset.

Let us know if you can boot into safe mode. Right before the Windows loading screen press F8 and select "Safe mode without networking". Then run the A/V software. Safe mode will only load the most essential drivers to run. Svchost is network-related so you should select without networking...I am not positive if it loads or not anyways but that's your best first move.

__________________
TC
Current stable:
- 2004 Mazda RALLYWANKEL
- 2007 Saturn sky redline
- 2004 Explorer...under surgery.

Past: 135i, GTI, 300E, 300SD, 300SD, Stealth

What OS? Any files on the machine she needs?

-J

__________________
1991 350SDL. 230,000 miles (new motor @ 150,000). Blown head gasket

Tesla Model 3. 205,000 miles. Been to 48 states!
Past: A fleet of VW TDIs.... including a V10,a Dieselgate Passat, and 2 ECOdiesels.
2014 Cadillac ELR
2013 Fiat 500E.

windows xp home sp3
unknown school stuff.


.

Daughter here--
I was helped by an awesome guy on NOD32's tech support. He used remote access to get the nasty thing taken care of. Thanks for the help, everyone!


.

Do yourself and your daughter a favor, install Avast antivirus, free version.

After install, schedule a boot scan for next time the computer starts, then restart. Never found one yet that it can't get rid of.

Malwarebytes is good, but will only work after boot, whereas Avast will run and remove prior to boot up. Many viruses can't be removed by software which is running through the OS, gotta run before windows is fully operational.

__________________
On some nights I still believe that a car with the fuel gauge on empty can run about fifty more miles if you have the right music very loud on the radio. - HST

1983 300SD - 305000
1984 Toyota Landcruiser - 190000
1994 GMC Jimmy - 203000

https://media.giphy.com/media/X3nnss8PAj5aU/giphy.gif