Member Avatar for GREENHOUSE

hi, got rid of alot of viruses trojans and nasties. but this one stays through it all and wont delete. I keep picking them up downloading. Its called (deepscan generic ranky BC391OEE):!: its getting found in system 32/ driver/ svchost.exe. Will i have to reinstall? Any ideas will be most appreciated.

greatfully greenhouse.

  • 2 Contributors
  • 2 Replies
  • 80 Views
  • 3 Days Discussion Span
  • Latest Post Latest Post by GREENHOUSE

Dani AI

Generated

Seeing an svchost-like binary sitting under System32\drivers is a major red flag: the real Service Host runs from C:\Windows\System32\svchost.exe and hosts Windows services. A copy in the drivers folder usually means something is masquerading as a system component or was installed as a driver. ultimately wiped and reinstalled, which is often the safest route when core files and drivers are compromised. was right to suggest AV scanning as a first step, but persistent components often require offline tools or manual cleanup.

Practical checklist to follow if this happens again:

  • Isolate the PC from networks immediately.
  • Try Safe Mode for a quick scan; if the file cannot be removed, boot a rescue environment (bootable antivirus or Linux live USB) and delete the binary from outside Windows.
  • Use tools to investigate before deleting: Process Explorer to confirm running path and digital signature, Autoruns to find and disable autostart entries, and upload the suspect file to VirusTotal to check detections. (Autoruns and Process Explorer are available from Microsoft Sysinternals.)
  • Inspect Services and driver entries (look under the Services list and HKLM\SYSTEM\CurrentControlSet\Services) for unfamiliar names pointing to that path.
  • If removal succeeds, run a full offline scan (Microsoft Safety Scanner or a reputable offline rescue tool) before reconnecting.

When repair is uncertain, back up only personal files (scan them separately), then do a clean OS install. Afterward, update the OS, install current malware protection, change passwords, and restore data only after scanning. For reference on how svchost works and for official cleanup tools, see the Microsoft Service Host documentation and the Sysinternals utilities.

Recommended Answers

All 2 Replies

Member Avatar for Joshua Gourgues

Download AVG ANTIVIRUS and AVG Antispyware here http://free.grisoft.com, update them, and then scan with them.... should fix your problem ;-)

Member Avatar for GREENHOUSE

thanks but i had to reinstall as there were too many thanks anyway

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.