svchost.exe issue.potentialy dangerous

[guwere]

So here is my problem.When I go to see the processes running on my computer and I can see 9 images running under the name of svchost.exe 2 of which have over 20,000 K Mem Usage.What should I do because I have read that svchost.exe could be in some cases Generic Host Process for Win32 Services and in others a trojan

[bookworm]

Originally Posted by guwere

So here is my problem.When I go to see the processes running on my computer and I can see 9 images running under the name of svchost.exe 2 of which have over 20,000 K Mem Usage.What should I do because I have read that svchost.exe could be in some cases Generic Host Process for Win32 Services and in others a trojan

Get these 2 programes, download, install, update and run and clear anything they find
http://www.download.com/Ad-Aware-SE-...bj=dl&tag=top5

http://www.safer-networking.org/en/index.html

both are free

Hope this helps

[oddjob]

Hi guwere

Yes, occasionally svchost can eat up too much CPU. This can suggest an infection of something bad.

Could also be malware under the name "scvhost". Note the crafty spelling change. Malware writers hope you won't notice. Check to ensure your Running Processes are spelt correctly.


The two links bookworm gave will indeed be useful but you may find they don't do the whole job. Your svchost Processes may still be eating up CPU power.

Even if you find those tools do fix the problem I still recommend you do the following for your peace of mind. You never know with malware ... it could be lurking somewhere hidden. This will help root out any lingering issues.


Download Ewido/AVG Anti Spyware from here ….

http://www.ewido.net/en/

It has a fully working 30 day trial period.

Install it and update it to the latest definitions.

Do NOT use it yet.


Now boot to safe mode. Here’s a “how to” if you’re not sure ..

http://service1.symantec.com/SUPPORT...01052409420406


When in safe mode run a full system scan with AVGAS and let it fix what it wants to.

REMEMBER TO SAVE THE SCAN REPORT and also remember where you saved it.

[FOOTNOTE > this is a good program to use as an “on demand” scanner even after the trial period is over. Keep it updated and use it to scan your computer from time to time].

----------------------------


Next download HijackThis from here ...

http://www.majorgeeks.com/download3155.html

In "normal" mode" ...
unzip & install it ...
open the program ...
from the menu click on "Do a system scan and save a logfile".

Copy and paste both the AVG AS scan report and the HJT logfile to this thread.

More specific removal instructions will follow if anything is revealed.


OJ