I need help with svchost.exe

[Hellow]

Ok, i believe that this is a virus. I have 6 copies of scvhost.exe running in task manager. Two of them are network services, two are system services, and one is a local service. I have scanned my computer with my security suite but i still get ads. Zone Alarm says that scvhost.exe request permission to axcess the internet. My computer often tops out at 100% cpu usage and its a copy od scvhost.exe. Any ideas how to fix this???

[Blue_Frog]

Hey Reggie --

First off, i have 6 instances of SVCHOST.exe running on my computer, and i know that i'm not infected with anything. However, having done a quick check on Google, it appears that a file with the same name can also be dropped into your system as a trojan.

From an earlier thread about viruses I posted in, heres some information to go by to help you along. I can try to help point you in the right direction for cleaning your computer if you like

Having said that, once a virus is detected in your computer - depending on the virus type (virus, worm, trojan, etc.), theres several ways to tackle the problem. Could you give us a little information>

- What was the full name of the infected file that it found (filename.***)
- What was the full virus name?
- What operating system do you have (windows xp home, windows 2000, etc.)?
- What is the antivirus you currently have on your computer, the software version, and what is the date of the virus definitions (the most recent update?)

This way we could help to point you in the right direction for removal -- and depending on the problem, Symantec (Norton) has a ton of free tools on the website to help remove the problem.

------

Also ... some links
Symantec Free Online Scanner (only tells you the infection name, does not clean)
http://security.symantec.com/sscv6/...id=ie&venid=sym

Symantec Trialware Page (30 days free)
http://www.symantec.com/home_homeof...loads/index.jsp

McAfee Trialware Page (30 days free)
http://www.mcafee.com/us/downloads/index.html

E-Trust Innoculate Trialware Page (30 days free)
http://www3.ca.com/solutions/Collat...CT=19506&ID=271

E-Trust Free Online Scanner (scans not cleans)
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx


*** Note: Do not install more than one antivirus on your computer at a time - they will conflict with each other based on the way they interact with your operating system ***


Also, since we're touching on virus problems, an entire other class of problems can come up with Spyware, Ad-ware, etc. Try ...

Lavasoft Adaware
http://www.majorgeeks.com/Ad-Aware_...sonal_d506.html

Spybot Search and Destroy
http://www.majorgeeks.com/SpyBot-Se...troy_d2471.html

[Blue_Frog]

Here are a couple of links about SVCHOST.exe that might be useful to read -- \

What is SVCHOST -- http://support.microsoft.com/kb/314056

More -- http://www.neuber.com/taskmanager/pr...chost.exe.html

About svchost using 100% CPU -- http://searchwincomputing.techtarget...249678,00.html

[Hellow]

The thing is is that this dosent occur on my laptop, only on my desktop. I have just eliminated a herd of viruses, malwarem and adware on my desktop but it still does it. It also jumps to 100% cpu power often, sometimes locking up forcing me to restart. It gets on my nervs becaues i have had my desktop for 5 years and it has worked unfailingly. Ok im on the internet on my desktop wjich is setting right next to me and my old home page was www.google.com/ig and now its www.example.net/some/place/. oes that help ya out any?

[Blue_Frog]

The thing is is that this dosent occur on my laptop, only on my desktop. I have just eliminated a herd of viruses, malwarem and adware on my desktop but it still does it. It also jumps to 100% cpu power often, sometimes locking up forcing me to restart. It gets on my nervs becaues i have had my desktop for 5 years and it has worked unfailingly. Ok im on the internet on my desktop wjich is setting right next to me and my old home page was www.google.com/ig and now its www.example.net/some/place/. oes that help ya out any?

Well, the last thing sounds like a browser hijack. I assume that even when you change the default page in "Tools - Internet Options" (if using IE), it changes right back after the program restarts? There are tons of malware programs that do this unfortunately, so picking one is like a needle in a haystack hunt without names.


A couple ?s

1. What antivirus do you have? What are the virus data definitions date?
2. What anti-spyware program are you using? What is the spyware data definitions date?

These programs are only as good as the most current updates.

Once they are both updated the most current, then run scans on your system. Write down what the infections are (the names of the Viruses / Trojans / Malware / Spyware / etc.) -- this information is necessary to help clean out the systems.

If you can add that information here, that would be great

[Hellow]

Anti - virus: AVG Anti Virus free edition
Signatures: 06/08/2007

Anti - spyware: Spybot Search and Destroy
Signatures: 06/08/2007

I had to use Trend Micro's Houescall to get rid of my infectons because neither program listed above found them. I dont remember the names of them, though.