Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

welchia out- still: problems with svchost.exe and antivirus blocked

Status
Not open for further replies.

15031981

Technical User
Nov 5, 2003
1
RO
Please, I really need help!

I am running Kaspersky AVP on Windows XP. The last virus found on my computer was the worm Welchia. Then, for some reason, I couldn't access anymore my antivirus program. I downloaded the disinfection tool from Symantec, ran it, the worm was out.

Stil, I have 2 problems on my hands:
- I still can not access the antivirus program (AVP) though I see it in the TaskManager (the AVPM utility).
- I have a problem with the svchost.exe though the disinfection tool deleted the instances of the vechia worm, respectivly the fake svchost.exe and the fake dllhost. exe, also the registry entries.
My CPU is running at 100%. When I try the "end process" manoeuver, the typical msblast worm window appears, showing the error from "Service Host NT" or something and the reboot in 60 seconds message. I managed to stop that from happening by running the command "shutdown -a".
Still my antivirus won't work and everytime I restart my computer the CPU activity is back to 100% and the svchost. exe process is overcharging it.
PLUS: I downloaded the patches from Microsoft, that were supposed to fix the svchost.exe problem, but surprise! when installing them (on drive D ------ I have more then 1 partitions made) I get the message "Setup could not verify the integrity of the file Update. inf. make sure the Cryptographic service is running on this computer". The funiiest part: thet srvice IS running on my computer!!!


So please, if anyone has any idea in order to save me from the dooming "format c:" command, pls pls let me know. I'm all out of those.
 
Have you installed sp1 for xp? If not install it and try again to run patch. Or run the cryptofix.bat program found at " ".

Did you turn off system restore before running the fix for Welchia? Also need to disable any antivirus programs prior to running fixwelch.exe.

PLEASE LET ME KNOW IF THIS HELPS! THANKS!!
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top