|Multiple instances of svchost.exe are normal but it should be in c:\windows\system32. |
Download, updtate & run anti malware from malwarebytes.org
If that doesn't help, then run hijack this. You have to find what's creating it, in the registry.
How do you know when a politician is lying? His mouth is moving.