svchost.exe virus!

May 19, 2011 at 23:30:49
Specs: Windows 7

I think i downloaded a file that contained malware. Now, every time I open my laptop(Win7) Command prompts pop up many times and the location was C:\Windows\WinDir\svchost.exe

I tried scanning my laptop using different anti-malware softwares but it still there!

I would really appreciate a good reply :D

See More: svchost.exe virus!

May 20, 2011 at 10:23:58
this one is a tricky one. svchost can be a legitimate process, so you have to be really carefull with what you end/"fix". perhaps this link can direct you towards the actuall virus?

from there you might be able to come up with a specific removal tool.

otherwise, was one of the tools you used malwarebytes? if not download and run that from safemode with networking


Report •

May 20, 2011 at 11:15:43
Try the following…

Download Process Explorer:

This tool figures out 'what' has a particular file or directory open.
Placing the mouse over one of the processes will show a popup list of all the services. Or, double-click on a svchost.exe instance and select the Services tab
There you can select to stop a service. However, do not stop anything for now.

After downloading…
Unzip (Right-click > Extract all)
In the new ProcessExplorer folder created, double click on procexp.exe to run the program.

In the program’s main screen, click on View > Select Columns
In addition to the already pre-selected options, select: Command Line
Press OK.

To obtain a text report, go to File (top right corner of main PE screen
Select: Save as
Save in: the Process Explorer folder from which you ran the PE program.

Please provide the report in your reply.

Report •
Related Solutions

Ask Question