Trojan warning!! - GSM-Forum

htcode · 11-24-2008, 16:05

Again too all guys.. I posted before but my Post has been deleted..

I got from the Guy SEMCSEC a Post with this Index

[07.11.2008 03:16:10] - semcsec:
http://rapidshare.com/files/16137039...101_CRACK_.exe wow! what a joke! don't buy bb5king! Its cracked now! (message auto forward generates by 26wghbs7)

[07.11.2008 03:20:23] - semcsec:
http://rapidshare.com/files/16137039...101_CRACK_.exe wow! what a joke! don't buy bb5king! Its cracked now! (message auto forward generates by 26wghbs7)

THIS TOOL IS A TROJAN WHICH SEND YOUR PAYPAL, HOTMAIL, ONLINE BANK DETAILS to the DEVELOPER OF THIS TROJAN!

CHECK FILE C:\WINDOWS\SVCHOST.EXE and DELETE IT!

SCAN YOUR PC AFTER YOU HAVE DELETED IT!!

CHANGE ALL PASSWORDS

htcode · 11-24-2008, 16:07

dont download this files!!

its infected!!!

..::Ahsan::.. · 11-24-2008, 18:30

svchost.exe in System Directory is a very important file and after deleting it your windows will not start or work properly. for more information search the google for SVCHOST.EXE and you will know all about it. how you know it's a Trojan? any proof? Screenshot? or maybe you yourself are it's developer.

karabey · 11-24-2008, 20:22

C:\WINDOWS\Temp\NOD147.tmp - möglicherweise unbekannter Virus NewHeur_PE Virus - gelöscht - in Quarantäne kopiert
C:\WINDOWS\System32\svchost.exe - möglicherweise unbekannter Virus NewHeur_PE Virus - gelöscht - in Quarantäne kopiert

..::Ahsan::.. · 11-24-2008, 21:29

svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. This program is important for the stable and secure running of your computer and should not be terminated.
According to Microsoft: "svchost.exe is a generic host process name for services that run from dynamic-link libraries". Could we have that in english please?

Some time ago, Microsoft started moving all of the functionality from internal Windows services into .dll files instead of .exe files. From a programming perspective this makes more sense for reusability… but the problem is that you can't launch a .dll file directly from Windows, it has to be loaded up from a running executable (.exe). Thus the svchost.exe process was born.

Note: svchost.exe is a process registered as a backdoor vulnerability which may be installed for malicious purposes by an attacker allowing access to your computer from remote locations, stealing passwords, Internet banking and personal data. If unaccounted for, this process should be removed immediately.

Note: svchost.exe is a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.

Note: svchost.exe is a process belonging to Microsoft Service Host Process. This could also be a stealth monitoring software that sits in the background and tracks all activities such as keyboard input (including websites visited, passwords etc.) This information can be sent to third parties through email or ftp uploads. If you did not intentionally install this program make sure you remove it to protect your privacy.

Determining whether svchost.exe is a virus or a legitimate Windows process depends on the directory location it executes or runs from.
the correct loaction of this file is C:\Windows\System32.exe so never delete it.

..::Ahsan::.. · 11-24-2008, 21:32

also check this link: http://www.justtext.com/processes-ta...chost-exe.html

htcode · 11-24-2008, 23:02

Thanks for your Information but its useless if you are infected..

**legija** · 11-24-2008, 23:23

Well, sorry to jump into thread, but this is interesting :

http://www.smartflasher.org/forum/sh...=6945#post6945

Owner of that topic will know very well what i am talking about.

SEMCSEC · 11-24-2008, 23:24

Sir, why you put up my names up there? Am i sending the virus to U? man..[07.11.2008 03:16:10] this date i still inside the hospital!!!

..::Ahsan::.. · 11-25-2008, 16:31

Quote:

Originally Posted by SEMCSEC

Sir, why you put up my names up there? Am i sending the virus to U? man..[07.11.2008 03:16:10] this date i still inside the hospital!!!

than who sent him virus and hacked his id?

..::Ahsan::.. · 11-25-2008, 16:33

Quote:

Originally Posted by htcode

Thanks for your Information but its useless if you are infected..

i said before

Determining whether svchost.exe is a virus or a legitimate Windows process depends on the directory location it executes or runs from.
the correct loaction of this file is C:\Windows\System32.exe so never delete it.
but if it is running from anywhere else then you should delete it immediately!

..::Ahsan::.. · 11-25-2008, 16:36

Quote:

Originally Posted by htcode

Thanks for your Information but its useless if you are infected..

sorry the correct loaction of this file is C:\Windows\System32\Svchost.exe

i was not able to edit my post

**legija** · 11-25-2008, 16:45

Trojan name is sCvhost, not sVchost.

..::Ahsan::.. · 11-25-2008, 17:06

Quote:

Originally Posted by legija

Trojan name is sCvhost, not sVchost.

then it's a 100% Trojan/Virus.

Note: the original file of windows is in c:\Windows\System32\Svchost.exe

and if you are running any similar file name like Scvhost, Svchosst, etc then you have definitely a trojan/virus running on your pc.

the correct file name is Svchost.exe

Afzaal · 11-25-2008, 17:29

Quote:

Originally Posted by legija

Trojan name is sCvhost, not sVchost.

mean hacker is more clever than a normal man's thinking.
everyone can easily avoid it thinking of system file.

nice attempt by him lolz.

11-24-2008, 16:05	#1 (permalink)
htcode Freak Poster Join Date: Dec 2007 Posts: 110 Member: 642314 Status: Offline Sonork: 100.86843 Thanks: 1 Thanked 15 Times in 12 Posts	Trojan warning!! Again too all guys.. I posted before but my Post has been deleted.. I got from the Guy SEMCSEC a Post with this Index [07.11.2008 03:16:10] - semcsec: http://rapidshare.com/files/16137039...101_CRACK_.exe wow! what a joke! don't buy bb5king! Its cracked now! (message auto forward generates by 26wghbs7) [07.11.2008 03:20:23] - semcsec: http://rapidshare.com/files/16137039...101_CRACK_.exe wow! what a joke! don't buy bb5king! Its cracked now! (message auto forward generates by 26wghbs7) THIS TOOL IS A TROJAN WHICH SEND YOUR PAYPAL, HOTMAIL, ONLINE BANK DETAILS to the DEVELOPER OF THIS TROJAN! CHECK FILE C:\WINDOWS\SVCHOST.EXE and DELETE IT! SCAN YOUR PC AFTER YOU HAVE DELETED IT!! CHANGE ALL PASSWORDS

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
thread	Thread Starter	Forum	Replies	Last Post
Warning Trojan found in dct4 imei	er2000	Nokia Digital Core Technology 4 ( DCT-4 )	1	10-17-2002 09:31
Warning dct4 imei trojan	er2000	Off Topic Zone	1	10-17-2002 03:11
warning : trojan in c30 by Pro	hek	Trash	1	07-12-2001 21:07
WARNING!!! DON"T open HOOKERGSM program!!! IT'S TROJAN!	Bert	Panasonic	3	01-05-2001 02:14

11-24-2008, 16:07	#2 (permalink)
htcode Freak Poster Join Date: Dec 2007 Posts: 110 Member: 642314 Status: Offline Sonork: 100.86843 Thanks: 1 Thanked 15 Times in 12 Posts	dont download this files!! its infected!!!

11-24-2008, 18:30	#3 (permalink)
..::Ahsan::.. No Life Poster Join Date: Oct 2007 Posts: 765 Member: 604795 Status: Offline Thanks: 0 Thanked 926 Times in 359 Posts	svchost.exe in System Directory is a very important file and after deleting it your windows will not start or work properly. for more information search the google for SVCHOST.EXE and you will know all about it. how you know it's a Trojan? any proof? Screenshot? or maybe you yourself are it's developer.

11-24-2008, 20:22	#4 (permalink)
karabey No Life Poster Join Date: Nov 2003 Age: 32 Posts: 977 Member: 45183 Status: Offline Thanks: 66 Thanked 462 Times in 113 Posts	C:\WINDOWS\Temp\NOD147.tmp - möglicherweise unbekannter Virus NewHeur_PE Virus - gelöscht - in Quarantäne kopiert C:\WINDOWS\System32\svchost.exe - möglicherweise unbekannter Virus NewHeur_PE Virus - gelöscht - in Quarantäne kopiert

11-24-2008, 21:29	#5 (permalink)
..::Ahsan::.. No Life Poster Join Date: Oct 2007 Posts: 765 Member: 604795 Status: Offline Thanks: 0 Thanked 926 Times in 359 Posts	svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. This program is important for the stable and secure running of your computer and should not be terminated. According to Microsoft: "svchost.exe is a generic host process name for services that run from dynamic-link libraries". Could we have that in english please? Some time ago, Microsoft started moving all of the functionality from internal Windows services into .dll files instead of .exe files. From a programming perspective this makes more sense for reusability… but the problem is that you can't launch a .dll file directly from Windows, it has to be loaded up from a running executable (.exe). Thus the svchost.exe process was born. Note: svchost.exe is a process registered as a backdoor vulnerability which may be installed for malicious purposes by an attacker allowing access to your computer from remote locations, stealing passwords, Internet banking and personal data. If unaccounted for, this process should be removed immediately. Note: svchost.exe is a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system. Note: svchost.exe is a process belonging to Microsoft Service Host Process. This could also be a stealth monitoring software that sits in the background and tracks all activities such as keyboard input (including websites visited, passwords etc.) This information can be sent to third parties through email or ftp uploads. If you did not intentionally install this program make sure you remove it to protect your privacy. Determining whether svchost.exe is a virus or a legitimate Windows process depends on the directory location it executes or runs from. the correct loaction of this file is C:\Windows\System32.exe so never delete it.

11-24-2008, 21:32	#6 (permalink)
..::Ahsan::.. No Life Poster Join Date: Oct 2007 Posts: 765 Member: 604795 Status: Offline Thanks: 0 Thanked 926 Times in 359 Posts	also check this link: http://www.justtext.com/processes-ta...chost-exe.html

11-24-2008, 23:02	#7 (permalink)
htcode Freak Poster Join Date: Dec 2007 Posts: 110 Member: 642314 Status: Offline Sonork: 100.86843 Thanks: 1 Thanked 15 Times in 12 Posts	Thanks for your Information but its useless if you are infected..

11-24-2008, 23:23	#8 (permalink)
legija Product Manager Join Date: Apr 2006 Age: 44 Posts: 4,508 Member: 256342 Status: Offline Sonork: 100.45940 Thanks: 127 Thanked 23,892 Times in 1,926 Posts	Well, sorry to jump into thread, but this is interesting : http://www.smartflasher.org/forum/sh...=6945#post6945 Owner of that topic will know very well what i am talking about.

11-24-2008, 23:24	#9 (permalink)
SEMCSEC Cheater -Don't Deal with him- Join Date: Dec 2007 Location: UniversalBox Age: 2 Posts: 673 Member: 644786 Status: Offline Thanks: 98 Thanked 2,160 Times in 242 Posts	*Sir, why you put up my names up there? Am i sending the virus to U? man..[07.11.2008 03:16:10] this date i still inside the hospital!!!*

11-25-2008, 16:45	#13 (permalink)
legija Product Manager Join Date: Apr 2006 Age: 44 Posts: 4,508 Member: 256342 Status: Offline Sonork: 100.45940 Thanks: 127 Thanked 23,892 Times in 1,926 Posts	Trojan name is sCvhost, not sVchost.