Home
You are here: Home > Security >

svchost.exe help

Time:2009-03-31 17:38Source:svchost Writer:svchost Click:
As of two days ago, svchost.exe keeps trying to access the Internet (ZoneAlarm pop up) and each time it seems to try and connect to a different IP. I've been denying access but I've noticed that I have five svchost.exe's in my processes (Task manager)
  As of two days ago, svchost.exe keeps trying to access the Internet (ZoneAlarm pop up) and each time it seems to try and connect to a different IP. I've been denying access but I've noticed that I have five svchost.exe's in my processes (Task manager). Each of them are also using a different amount of memory.

svchost.exe 16,224 K
svchost.exe 4,956 K
svchost.exe 8,768 K
svchost.exe 4,512 K
svchost.exe 6,116 K

That's the order they come up in.

I don't know for how long there have been five svchosts running but the ZA popups started coming up two days ago after I visited a torrent site. After I went to the page and went to download the torrent file, the page froze and I got a two ZA pop ups, one of them was svchost.exe. I allowed both of them access (But only once) and I also opened the page in IE (I use firefox for everything unless some pages don't work). After I exited the page I got xpantivirus malware and two trojan horses. I scanned with SUPER AntiSpyware and AVG (Free editions) and got rid of the infections.

I don't think I've ever had more than one svchost.exe running, and that was the one using 16,224 K of memory. I know what svchost.exe is and I'm sure it's not svhost.exe (A virus I believe). I'm also running Windows 2000.

Sounds like your PC would be a great candidate for our excellent "Pre-work" and then Security Team scrutiny
------fengexian----------------------------
Recommended Content