SSVICHOSST virus

Virus File Name:

ssvichosst.exe (having a folder icon)

<filename> (a file inside a folder having the same name as the folder, having folder icon)

Symptoms:

You are unable to open TaskManager, Regedit, CMD, Msconfig, etc.

Some windows open for fractions of seconds and suddenly gets closed. Like TaskManager, Regedit, etc.

No command works in ’command’ window, except ‘exit’.

The Tools>FolderOptions is gone in the Windows Explorer.

You cannot see your hidden files.

Your system has become too slow. As the virus process takes up almost half of the resources.

Behind the screen:

The virus copies the virus file “SSVICHOST.EXE” to C:Windows and to C:WindowsSystem32 .

It runs its process SSVICHOSST.EXE as the background process under User.

Processes with the other file name may also be running with the WindowTitle ‘AutoIt v3′.

It adds a startup program in HKCUSoftwareMicroSoftWindowsCurrentVersionRun as ‘Yahoo Massangger***’

Adds a value in registry, HKLMSystemControlSet001ServicesSchedule ‘AtTaskMaxHours’=0.

Complete detail

SOLUTION:

Download and run my HEAL FOR SSVICHOSST

or follow this long procedure . . .

End Task*
———-
1. On desktop> right-click> new> shortcut
2. Enter
 taskkill.exe /F /FI “IMAGENAME eq ssvichosst.exe”
3. Next> finish
4. Double click the shortcut file just created

*In some case, if this “taskkill.exe” file is not available in the windowssystem32 directory (esp. in laptops), then try to get it from someone’s comp.

Enable Task Manager
——————-
1. Start> run

 reg add HKLMSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem /v DisableTaskMgr /t REG_DWORD /d 0 /f

2. Start> run

 reg add HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem /v DisableTaskMgr /t REG_DWORD /d 0 /f

Enable CMD
———-
1. Start> run

 reg add HKLMSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem /v DisableCmd /t REG_DWORD /d 0 /f

2. Start> run

 reg add HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem /v DisableCmd /t REG_DWORD /d 0 /f

Enable Regedit
————–
1. Start> run

 reg add HKLMSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem /v DisableRegistryTools /t REG_DWORD /d 0 /f

2. Start> run

 reg add HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem /v DisableRegistryTools /t REG_DWORD /d 0 /f

Folder Option & Hidden Files
—————————-
1. Start> run

 reg add HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer /v NoFolderOptions /t REG_DWORD /d 0 /f

2. Start> run

 reg add HKLMSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer /v NoFolderOptions /t REG_DWORD /d 0 /f

3. Start> run

 reg add HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced /v Hidden /t REG_DWORD /d 1 /f

4. Start>run

 reg add HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedFolderHiddenSHOWALL /v CheckedValue /t REG_DWORD /d 1 /f
 

reg add HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedFolderHiddenSHOWALL /v DefaultValue /t REG_DWORD /d 2 /f

 reg add HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedFolderHiddenNOHIDDEN /v CheckedValue /t REG_DWORD /d 2 /f
 

reg add HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedFolderHiddenNOHIDDEN /v DefaultValue /t REG_DWORD /d 2 /f

Delete Virus Files**
——————–
1. Start> run> CMD
 del %windir%ssvichosst.exe /a /f /q
 del %windir%system32ssvichosst.exe /a /f /q

**Do not double click these files, otherwise you have to start from the begining

Delete Startup Launch of Virus***
———————————–

1. Start> run
 reg delete HKCUMicrosoftWindowsCurrentVersionRun /v Yahoo Messengger

Fix for ” Windows cannot find ssvichosst
—————————————–

1. START> RUN > type CMD > now paste the following
reg add “HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogon” /v Shell /t REG_SZ /d Explorer.exe

 this procedure is to remove the error that comes whenever you restart windows
  something like “could not find SSVICHOSST” or “error loading SSVICHOSST” or “windows cannot find ssvichost”

DOWNLOAD

Heal for SSVICHOSST 

Download Page for other heals

PRECAUTION:

Never double click on removable devices in MyComputer.

Always right-click and Explore

if you have any other problem or any doubt about the step then plz do contact me. i’m always there to help you.