Question:

Help with svchost.exe (possible trojan) - read details please?

by Guest33478  |  earlier

0 LIKES UnLike

In the last day now, I've seen on my task manager that svchost.exe appears 7 times - under user name SYSTEM 4 times, LOCAL SERVICE once, and NETWORK SERVICE twice. The memory usages vary from 1000 K to 48000 K.

Remember, this is new - and my CPU usage is high now, regularly 70%. I see on wikipedia this article http://en.wikipedia.org/wiki/Svchost

but I need some extra help from you all. I am now running McAffee virus scan, though I'm not sure that will do the job. And I don't want to just close the processes, for fear of messing up my computer.

Also, I need some help understanding this wikipedia article. I am decent with computers, but not like that :)

It says: "Due to being widespread among running processes, svchost.exe has long been a common disguise used by malware to hide its presence from the user. (One of the common trojan horses deceptively uses scvhost.exe). Users may then run tasklist with no arguments and match the reported PIDs with the previously shown Svchost instances. If memory usage appears abnormal, the user can look up the service names shown by their command on the internet to see if it is a known service or malware."

And what am I supposed to do after I find out which malware it is?

Please help me out. It would also be good if someone good with these things could message me or I message you to get further help, because this definitely is something not good on my computer, from where I know not.

THANKS

 Tags:

   Report

2 ANSWERS


  1. svchost is a system application but it often imitated by viruses, closing them does nothing, although one of the svchost applications is particularly bad, it forces your computer to restart if you close it, I've never understood this but anyways, anti virus software should detect this virus. I would suggest reformatting your computer, make sure you back up your personal files (and anyone else's) before doing so though. Usually you boot from a CD or from a partition on the hard drive, you can do it yourself, don't pay someone to do it, it takes like a day and most of that is time where the computer is doing everything.


  2. I have used computers since they were first invented.  

    Go to this link and look down the page where you can scan to see if Svchost.exe need to be repaired in your registry.  (Svchost.exe is a part of your Windows Operating System, and it can not be taken out).

    http://www.neuber.com/taskmanager/proces...

    I know and trust Neuber Germany.  

    I recommend that you download the free version of Superantispyware.  I use this software for ten years and swear by this software to find viruses and spyware without any conflict to your own antiviurs.

    http://www.superantispyware.com  Update and run and in depth scan.  Free you must update daily on a manual basis or purchase and get auto. updates.  I am quite sure that if you have a virus in your system, this software will find and either clean or quarantine.    

    I am a Clincial Psychiatrist and have a legal and moral obligation to keep my pc 100% clean.  So I only use trusted software, plus I am a registered beta tester on a spare PC.  And I would never recommned any software to you that I am not using myself.   Or have not tested prior to being available to the general public.

    Mind Doctor, France  

Question Stats

Latest activity: earlier.
This question has 2 answers.

BECOME A GUIDE

Share your knowledge and help people by answering questions.