scvhost virus

[new]

My brother is having problems with a scvhost virus. His anti virus keeps popping up telling him of the threat, but running the anti virus doesn't find anything. Same with Microsoft Essentials and Spyware software. MSE also pops up warning of the threat, but again doesn't remove it. The virus appears to be trying to load an exe as it keeps filling up his Temp folder with garbage messages. He is running Win 7 Home Premium. Anyone found a way of removing this virus. I have read several pages on this from Google search, but most just link to the dowload of software which needs to be paid for and which may not be any better than his existing Anti Virus software in removing this threat.

 

[Airbot]

Might use something like CCleaner and just use the cleaner part to clean the temp files, and type system configuration in the start menu and look under the startup tab to see if you can see any suspicious startup item, and disable it. Or if you're not sure, post a screenshot of it.

Then try downloading something like Malwarebytes, update it, and boot into safe mode and run a full scan, maybe scan with MSE in safe mode too.

Does the AV give any full name of the virus?

 

[new]

Thanks, I'll get him to try your suggestions.

 

[Jacee]

Also, if he hasn't used MalwareByte's Anti-Malware, have him download Malwarebytes' Anti-Malware to the desktop
|MG| Malwarebytes Anti-Malware 1.42 Download
* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.

 

[new]

Thanks again, I told him to do as suggested and he has told me that it appears to have worked as he hasn't had any more warning messages pop up.

 

[Airbot]

That's good news new. Thanks for letting us know.

 

[Jacee]

Yes, thanks for replying back.