CONHOSTS.EXE - Dangerous
%TEMP%\SYMANTEC\CONHOSTS.EXE
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
CONHOSTS.EXE is known as: Trojan:Win32/Dabvegi.A [Microsoft] Trojan.VB [Ikarus].
MD5 of CONHOSTS.EXE = 15E8E80791E551733149CEEA853B08FC
CONHOSTS.EXE size is 69632 bytes.
Full path on a computer: %TEMP%\SYMANTEC\CONHOSTS.EXE
Related Files:
%TEMP%\SYMANTEC\DWM.EXE
%APPDATA%\E11E.576
%APPDATA%\MICROSOFT\CONHOST.EXE
%TEMP%\1.TMP
%TEMP%\SYMANTEC\CSRSS.EXE
%TEMP%\SYMANTEC\CONHOSTS.EXE
%TEMP%\SYMANTEC\NVRSEL.DLL
%TEMP%\SYMANTEC\NVRSFI.DLL
%TEMP%\SYMANTEC\NVRSFR.DLL
%TEMP%\SYMANTEC\NVRSHE.DLL
%TEMP%\SYMANTEC\NVRSHU.DLL
%TEMP%\SYMANTEC\NVRSIT.DLL
%TEMP%\SYMANTEC\NVRSNL.DLL
%TEMP%\SYMANTEC\NVRSNO.DLL
%TEMP%\SYMANTEC\NVRSPT.DLL
%TEMP%\SYMANTEC\NVRSSK.DLL
%TEMP%\SYMANTEC\NVRSSL.DLL
%TEMP%\SYMANTEC\NVRSSV.DLL
%TEMP%\SYMANTEC\NVRSTR.DLL
%TEMP%\SYMANTEC\RCUSBWDM.SYS
%TEMP%\SYMANTEC\RICHTX32.OCA