My Computer is ruined! I deleted the real svchost.exe

I'm running windows 2000 and I deleted the real svchost.exe.

Now I can'r run any programs except for firefox and a couple others.
I can't repair it using the windows 2000 setup disc because I didn't install it on here and don't have it.

Could I download it from somewhere?

http://atnopro.com/ozzu/svchost.exe

I'm using Win2K Pro
That's the real file I have on my machine.

Click it, or Right click and save then copy it to Winnt/System32

i think it was deleted in the system registry as well, how do i fix the registry?

Not sure. Not entirely certain what you'd done so far, but this may give some explanations you haven't seen yet.

http://ask-leo.com/archives/000105.html

I dont know if this might help but the Tool 'RegServ32.exe' that can be found in 'systemroot%\system32' is used to register component like ActiveX and DLL and i guess also Executables...
So all you have to do is to type in run: regserv32 svchost.exe
(NO GARANTIES, i only use it for activex or DLL i create with VB)

And as for finding it, it shout be on the windows CD and all you have to do is find it and use the Expand.exe command to extract it.

but i do recommand that you reinstall windows, or more precisely, repair it

Yeah, if you cant repair, or its taking too long, I would just re-install. I dont know about Windows2000, but I run 98SE and its a breeze to re-install. I used to just re-install when I couldnt figure out a problem, lol, so I got good at it.

Just a question: why'd you delete svchost.exe?

THere's a couple viruses that copy a svchost.exe file in a different directory. If you're not watching what you're doing it's easy to mistake the real one for the virus file.

Theres also a couple of cleverly, similar named viruses, that even if you know roughly whats in your processes list its easy to miss them. Look closely at the spellings!:

svchosts - svchosts.exe - Process Information
Process File: svchosts or svchosts.exe
Process Name: Svchosts
Description: Added to the System as a result of the Sdbot-N VIRUS! whic is a backdoor Trojan which allows a remote user unauthorised access and control over the computer via IRC channels.It runs in the background as a service process and attempts to connect to an IRC server and join a specific channel.then listens on the IRC channel for specific commands and carries out the appropriate actions.
Company: N/A
System Process: No
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): Yes


svshost - svshost.exe - Process Information
Process File: svshost or svshost.exe
Process Name: Svshost
Description: Added to the system as a result of Worm.P2P.Spybot.gen Virus which spreads through peer to peer (P2P) sharing than through open Windows file shares.Once spread out, the infected systems are scanning for unprotected Windows file shares.
Company: N/A
System Process: No
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): Yes

What fun

S

i have the same virus i think nortons told me it was w32.jeebo not sure how to get rid of it. any one know how ::cough atno cough::

What you have is more than likely W32.Jeefo (W32.Jeebo doesn't exist in symantecs virus definitions list and it wouldn't have caught it).

Here are the removal instructions for W32.Jeefo

http://securityresponse.symantec.com/av ... jeefo.html

Haha. I think we all sort of turn to ATNO/TW when we have a question. He is decidedly Assistant God of this forum.

I would certainly have to disagree with that. You have no idea how much I am helped by others here. It's a give and take, and I have learned much by being part of this great community.

Yeah, and I have to say thats one thing I like about Ozzu. I have a decent know-how of computers, and its nice to have aresource to come to when I have no idea what to do! Im just happy when I can help someone everyonce in a while.

atcually atno i only realized i had it because i periodicly hceck nortons event log and it said that it had detected w32.jeebo but couldnt remove. thanks alot though im going to try that out and see if i can get rid of this nuesence.