What is svuhost.exe?

Question

i recently got a security alert from my antivirus (avast) saying that it had found a virus in my system32 folder and i should reboot and run the boot time scan so i did.

It found a virus in the system32 folder and it was a file called svuhost.exe.

When i googled svuhost.exe i got a lot of results saying it was a trojan downloader but there was much in depth information so i just wondered.

Answer 1

.exe means it is a executable file meaning it is either a startup program by some other program on your computer or it could possibly be a key file used by another program, it could also possibly be a malware program imbeded in some thing you recently downloaded or added to your computer... try typing the file name into a search engine and see what it comes up with

or use one of these to see some information or remove it off of your computer and possibly any other traces  it will likely leave behind

malwarebytes

http://www.download.com/Malwarebytes-Ant...

house call

http://www.download.com/Trend-Micro-Hous...

spybot s&d

http://www.download.com/Spybot-Search-De...

spy sweeper

http://www.download.com/1770-2001_4-0.ht...

Answer 2

You have done the right thing by moving it to the chest.

This is not a system file.....but uses a similar name to try

and go unnoticed....real one is Svchost.exe and there are

up to 7 or 8 in Xp and a few more in vista.The usual rule is

quarantine(chest) for a few days ....if everything is working

normal...then delete if you wish....but can do no harm if left.

For info on what it was ....take your choice..

Trojan Downloader

http://www.superantispyware.com/definiti...

Threat expert ...they identify it as A network-aware worm that attempts to replicate across the existing network(s)

A malicious trojan horse or bot that may represent security risk for the compromised system and/or its network environment

http://www.threatexpert.com/report.aspx?...

Anyway well done to you and Avast for removing it.

Answer 3

Avast has already identified it as a trojan.

This one is mocking the system file name almost.

Trojan's are bad.  They collect your personal information, and send it back to their maker.

Don't quaranteen, do delete.

^j^