Blocking SvcHost

[Jim Simon]

How do you people who have Agnitum Outpost block the SCVHOST queries coming in? There are dozens each day.

My cable company has to get through, but what do I do about the others. It's a pain trying to set up a block on each one.

TIA

[DuaneB]

If you are seeing 'SCVHOST' instead of 'SVCHOST', then you probably have a worm (possibly W32/Agobot-S).

Agobot is in the same family as Gaobot. The Gaobot Removal tool from Symantec might get rid of it for you.

W32.Gaobot Removal Tool
http://securityresponse.symantec.com...oval.tool.html

[Jim Simon]

Sorry, I had a typo, its SVCHOST.

[SuperSparks]

I use Outpost Pro, and I don't get any SVCHOST messages at all. I wonder if you might have some malware on your PC.

Run these two removal programs first, after updating the definitions:

Spybot S & D

Adaware

If you still experience problems, unzip this program into its own permanent folder, run it and post the logfile in our Hijack This Logfile forum here:

Hijack This

Virtual Dr Hijack This Forum

Please read these instructions before posting logfiles:

http://discussions.virtualdr.com/sho...hreadid=167915

[Jim Simon]

I posted the hijackthis log. I checked some of the url's of the people wanting in thru SVCHOST and some were government agencies, some were cable ISP's, some were colleges.