'scvhost.exe' = virus?

Hom3r · 10-02-2006, 00:41

Is scvhost.exe a virus, I have several of the running, and no AV s/w has detected it, (AVG, Trend, Norton).

if so how do I delete it.

**David F** · 10-02-2006, 00:42

svchost is present in windows.I dunno if theres a virus that creates one why do you think that it has?

Hom3r · 10-02-2006, 00:45

I was looking in windows task manager (processes) and this file is running about 6 times under different User names.
A search on google is saying this is a trojan.

**Rob** · 10-02-2006, 00:46

Hmm, I have 7 of them running at the moment - some as user name "system" some as "network service, and one as "local service"

And I thought avast was current. time for a scan with Panda me thinks.

NB moving to Virus & Security

Hom3r · 10-02-2006, 00:47

this from google
http://www.google.co.uk/search?sourc...vhost%2Eexe%27

not a happy bunny

bopdude · 10-02-2006, 00:47

Quote:

Originally Posted by david.ewles

Is scvhost.exe a virus, I have several of the running, and no AV s/w has detected it, (AVG, Trend, Norton).

if so how do I delete it.

Simple answer, no its not, its a windows process, sometimes a virus may take on the name, google brings up loads of links.

Heres one

BTW I have 5 running

EDIT, must type faster ...lol

Hom3r · 10-02-2006, 00:49

done a file search cannot find it??

---------- Post added at 00:49 ---------- Previous post was at 00:47 ----------

it doesn't help when google says w32 virus, that can clog memory.

Pia · 10-02-2006, 00:51

Looks from the links posted above that SCV could be a trojan, but the similar named SVC is a Windows Process, like bopdude says

bopdude · 10-02-2006, 00:57

Quote:

Originally Posted by david.ewles

done a file search cannot find it??

---------- Post added at 00:49 ---------- Previous post was at 00:47 ----------

it doesn't help when google says w32 virus, that can clog memory.

This link says that it could be the W32.Blaster virus, what if any symptoms are you having, google fo a removal tool and run it, just in case.

---------- Post added at 00:57 ---------- Previous post was at 00:54 ----------

This link tells you how to determine what each instance of svchost is, and what service its linked to, if any, also gives a link for removal via a d/l link.

HTH

**David F** · 10-02-2006, 01:00

If it was the blaster worm and you dont have a fire wall your system will restart after a minutes warning once it finds the internet.The early blaster32 simply say in start up and you could disable it but a firewall should block it

Is the files you have found svc or scv?

Hom3r · 10-02-2006, 01:08

I think I had better go to bed I miss typed I should have typed 'SVCHOST.EXE'. and not 'SCVHOST.EXE'.

I would double check if I was anybody reading this, a simple mistake.

---------- Post added at 01:08 ---------- Previous post was at 01:06 ----------

http://windowsxp.mvps.org/svchost.htm

that does say about a SVC virus

**Maggy J** · 10-02-2006, 01:12

I'm contemplating yet another award after reading this thread.

Summat along the lines of checking facts before posting in the virus section and frightening the boojums out of simple folk.

Anyone got any suggestions as to how to word it?

Pia · 10-02-2006, 01:25

Quote:

Originally Posted by david.ewles

I think I had better go to bed I miss typed I should have typed 'SVCHOST.EXE'. and not 'SCVHOST.EXE'.

I would double check if I was anybody reading this, a simple mistake.

---------- Post added at 01:08 ---------- Previous post was at 01:06 ----------

http://windowsxp.mvps.org/svchost.htm

that does say about a SVC virus

You're right, but it's a simple typo that's made me more aware when checking task manager processes and scanning for these nasty trojans, dunno about anyone else!

Paul · 10-02-2006, 06:46

svchost = service host. A generic process that Windows uses to handle certain processes within the operating system. You can in theory have as many svchosts running as are needed by Windows to handle all the processes requiring it.
http://www.liutilities.com/products/...brary/svchost/
As others have said though, be very careful what you type into Google when investigating these things as a slip of even one letter could be the difference between a nice happy windows system and a system you just knackered up by deleting a very much needed process

bayonet · 10-02-2006, 07:02

If you mean svchost.exe then check this link

http://www.processlibrary.com/direct...host/index.php

If you mean scvhost.exe then check this link

http://www.processlibrary.com/direct...host/index.php