View Full Version : Svchost.exe-21DF826A.pf.. Trojan?
I B r E a K I
May 25, 2006, 02:01 PM
I know about svchost.exe and its functions, but when I noticed it running from my own profile instead of SYSTEM and NETWORK, I kind of panic. I then started up a search titled, "svchost.exe" to find any viruses or trojans that would disguise themselves as an svchost.exe file, "svchost.exe-21DF826A.pf" and the genuine svchost.exe application popped up. Being incredibly brave, I double clicked the foreign file but ti wouldn't run since my computer didn't recognize what program created it. I then deleted it and rebooted to run in Safe Mode to search for any more problems. Everything seemed fine till I rebooted again. Now, two more foreign files disguised as "svchost.exe" popped up in the search window.. This is the only day Ive encountered this problem, I'm very worried as to what is going on. Please help? ANY solution is appreciated, thank you.
EDIT: Now, 5 minutes after this post, my computer is running at a constant 100% CPU Usage.. Just a little more info on the symptoms, if any one can respond, it will be greatly appreciated.
Curlyben
May 25, 2006, 02:47 PM
Time to end the offending task and run some serious anti virus.
A good one to try is Trend Housecall (http://housecall.trendmicro.com/)
Here's some more information about .pf files (the real ones anyway); PF Extension (http://www.fileinfo.net/extension/pf)
Basically the .pf extension is currently being used to hide malware (ie trojans, worms, viruses etc) as most users aren't aware what they do.
As a very basic rule of thumb, if you don't recognise the extension, then DON'T open it !
I B r E a K I
May 25, 2006, 03:28 PM
Thank you, I'm running the scan now, I'll let you know what's up after the scan is completed.
I B r E a K I
May 25, 2006, 04:19 PM
Well, I tried running the scan, but it kept cutting off. I tried it once more but it cut off once more. I have no idea how to treat it otherwise. Thank you for the website though.
The scan did serve some purpose however, it did identify the Trojan and some other Adware/Spyware programs on my computer. It also confirmed that the Beta Version for Windows Defender kind of sucks since it didn't detect the infections after 4 scans.. xD!
Once again, thank you for your help and suggestions, appreciate it.
Hopefully, when I move out of my mom's house this summer, I don't have to share my computer (getting a new one) and put it to risk by letting ignorant asses (Sister and her boyfriend) use the computer (nothing but Limewire.. ).
Once again, thank you.
(Sorry for the double post)
LTheobald
May 25, 2006, 11:49 PM
Download Ad-Aware & Spybot: S&D (links below). Load them up and let them update but don't run the scan yet. Instead, shut down and restart in Safe Mode. Once in safe mode, load up the programs again and run the scans. The combination of these programs should get any spyware or trojans on your PC.
I B r E a K I
May 26, 2006, 10:27 AM
-bows-
Thank you for this, I did everything you said and its gone..
Sister - 213 Infections
Me - 3
System - 2
I also downloaded Zone Alarm since it looked like Windows' Firwall wasn't working too good. Thank you, VERY much. Thank you as well Curlyben, I appreciate al the help. :cool: