svchosl.pif - Dangerous
%sysdir%\svchosl.pif
Manual removal instructions:
Antivirus Report of %sysdir%\svchosl.pif:
%sysdir%\svchosl.pif
Worm W32.Inzae.A@mm
It is a mass-mailing worm that uses its own SMTP engine for spreading.
1. Adds to Windows startup.
2. Creates the following files:
System%\inzax.exe
%System%\sw.exe
%System%\sx.exe
%System%\sz.exe
%System%\m.zip
3. Deletes files with extensions:
.asm .asp .bdsproj .bmp .c .cpp .cs .csproj .css .doc .dpr .frm .gif .h .htm .html .iso .jpeg .jpg .mdb .mp3 .nfm .nrg .pas .pcx .pdf .php .ppt .rar .rc .rc2 .reg .resx .rpt .sln .txt .vb .vbp .vbproj .wav .xls
4. Download its updates if computer is connected to Internet.
5. Sends its body by e-mails.
Remove it from startup using RegRun Startup Optimizer.
%sysdir%\svchosl.pif | Malware |
%sysdir%\svchosl.pif | Dangerous |
%sysdir%\svchosl.pif | High Risk |
It is a mass-mailing worm that uses its own SMTP engine for spreading.
1. Adds to Windows startup.
2. Creates the following files:
System%\inzax.exe
%System%\sw.exe
%System%\sx.exe
%System%\sz.exe
%System%\m.zip
3. Deletes files with extensions:
.asm .asp .bdsproj .bmp .c .cpp .cs .csproj .css .doc .dpr .frm .gif .h .htm .html .iso .jpeg .jpg .mdb .mp3 .nfm .nrg .pas .pcx .pdf .php .ppt .rar .rc .rc2 .reg .resx .rpt .sln .txt .vb .vbp .vbproj .wav .xls
4. Download its updates if computer is connected to Internet.
5. Sends its body by e-mails.
Remove it from startup using RegRun Startup Optimizer.
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.