New
#1
File Name.exe and svchost.exe virus?
Hello.
My friend borrowed my laptop earlier this morning and he returned it to me after 3 hours. Upon checking my laptop status, I saw to new processes: File name.exe and svchost.exe. I end it's processes and check the msconfig. I saw two new checked start-up entry: svchost.exe and Windows Application. On command tab, I tried tracing the windows application start-up entry. It is located on Appdata\Roaming\File Name.exe. But when I search it, File Name.exe doesn't seem to exist. Also, I tried searching the location of svchost.exe (Appdata\Local\Temp\svchost.exe). But it doesn't exist too. I tried un-checking the two unknown start-up entry. But whenever I click "apply" button, the two entry will automatically be checked. Also, I did run my antivirus (ESET Smart Security 7). It found 4 virus on Operating Memory. The virus was named as "chrome.exe(4044)" located in operating memory and was recognized as Win32/Spatet.T trojan. My AV says that it has been cleaned. But whenever I scan it again, the chrome.exe(4044) is still there.
Thanks!
Last edited by BryanJames16; 13 Nov 2014 at 03:41. Reason: second problem added