|this what norton detected? C:\Windows\temp\xxxx.tmp\svchost.exe |
okay i not very clear what happening.
actually this kind malware is not svchost.exe . something create it automatic and recreate after you deleted.
the main host to create this file always hiden in C:\WINDOWS\Prefetch - if you using windows.
host in this folder can recreate or do anything writers need it.
try delete in safemode or hijack and trace this files. it not just only 1 file. it will be many files with diferent names. i hope this will help you.