hello i think my computer is infected with something im not sure tho

 

Worm:win32/Ainslot.A

 

svchost.exe

 

where detected as severe threats... says it can steal passwords aww fuck , what do i do?

What program is telling you this information?

 

Scan and remove with these:

http://windows.microsoft.com/en-us/windows/security-essentials-download

http://www.malwarebytes.org/

http://www.avast.com/en-us/index

 

YES download and scan with ALL THREE.

 

But your best bet would be to backup your data and just reformat your entire computer.

This deletes everything and makes a fresh install, only way you can be 100% sure you're all safe.

 

Good luck! Don't go downloading random things!

windows defender told be , once i turned it on ...it appears my protection keeps turning itself off

i have windows 8 btw... O_O

Doesn't matter what OS you have really, just get a handful of good scanners and run a full scan with them all and remove anything detected.

Reformat is the safest bet though!

 

Also, to have better chances, boot info Safe Mode, and then run all of the scans/remove.

this is probably a RAT, have you downloaded anything lateley?

check you're Roaming/Appdata

svchost.exe is harmless,

it's when problems occur when important operating system files become misconfigured, deleted or damaged. This is a common problem with computers that don't get maintained regularly. Eventually the system becomes overloaded with problems and begins to crash and display errors. You may also notice your system becoming very slow due to high CPU and memory usage.

 

 

 

As for the Worm, that's a bit more serious...
Like most worms, Worm:Win32/Ainslot.A will spread itself to new computers through removable drives. This is done by Worm:Win32/Ainslot.A creating hidden copies of itself along with Autorun files that cause Worm:Win32/Ainslot.A to execute whenever the drive is accessed by a new PC. As long as you’re careful about network security and removable drives, your PC will be fairly safe from Worm:Win32/Ainslot.A infection.

In addition to making copies in base drive locations, Worm:Win32/Ainslot.A copies itself to a subdirectory of the Documents and Settings folder as a fake ‘winlogon.exe’ file. Since this file name is naturally visible part of the Windows environment, Worm:Win32/Ainslot.A can be difficult to detect as a running proces

svchost.exe is harmless,

it's when problems occur when important operating system files become misconfigured, deleted or damaged. This is a common problem with computers that don't get maintained regularly. Eventually the system becomes overloaded with problems and begins to crash and display errors. You may also notice your system becoming very slow due to high CPU and memory usage.

 

 

 

As for the Worm, that's a bit more serious...

Like most worms, Worm:Win32/Ainslot.A will spread itself to new computers through removable drives. This is done by Worm:Win32/Ainslot.A creating hidden copies of itself along with Autorun files that cause Worm:Win32/Ainslot.A to execute whenever the drive is accessed by a new PC. As long as you’re careful about network security and removable drives, your PC will be fairly safe from Worm:Win32/Ainslot.A infection.

In addition to making copies in base drive locations, Worm:Win32/Ainslot.A copies itself to a subdirectory of the Documents and Settings folder as a fake ‘winlogon.exe’ file. Since this file name is naturally visible part of the Windows environment, Worm:Win32/Ainslot.A can be difficult to detect as a running proces

copy pasta. svchost.exe is NOT harmless. I could make a virus and call it svchost.exe

Click start, type "taskmgr" and click it. Go to processes, End the process "Svchost.exe" and any other suspicious looking programs running.

Again, Click start, type "msconfig" and click it. Navigate to startup, and uncheck anything with "HKCU" in it. If you want, uncheck everything.

Now, navigate to %appdata% and delete any .exe's.

Navigate to %temp% and delete all.

Also, open CMD and type netstat -n. This will give you a list of everyone who's connecting to you, assuming you're ratted.

 

Grats, you've manually removed a virus. If you need help inbox me.

 

 

Edited October 18, 201312 yr by jekkel