Where is it alright for svchost.exe to be?

Read the article that everyone's commenting on.
Subscribe to the RSS Feed for comments on this article.

I am having a problem i have not seen on the internet at all. scvhost.exe has rooted itself in windows/win32/oobe/scvhost.exe...not only has not one article on the internet show it in that directory but it makes the computer absolutley go beserk. the only way to keep my computer responding is to keep task manager open. if I close it 100's of svchost open and cause a reboot. i cant seem to find a way to stop it.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

As the article indicates, that's highly suspicious of a virus, and you need to
run an *up to date* anti-virus scan with a good scanner.

Leo

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFHLKngCMEe9B/8oqERAvalAJ0f3Ul6p9PaN3jOKgC1Dvbe+UDogQCeIcCc
Mct8FOdYq47SJpJp+RcCx/k=
=HHTz
-----END PGP SIGNATURE-----

"Windows cannot find 'E:\windows\svchost.exe'. Make sure you typed the
name correctly, and then try again. To search for a file, click Start
button, and then click Search.

i tried everythin...as you have said(maybe not)
i even tried updating my windows xp and hotfix and those kinda stuff...but the problem reappears everytime i started my windows....i need help terribly...."

The same thing has happened to me. How do I fix this?

What if it's located C:\Documents and Settings\BACK UP MY DOCs\SvcHost.exe is this normal?

Thanks Leo, I was having a problem with svchost.exe taking up all of my CPU.
Turned out after using the Process Explorer you recommended that it was the HP printer and software I installed a while ago. A network polling service was hogging all of the CPU through svchost.exe. I turned off the automatic service and fixed the problem.

Andrea

i was threatened w/ this "svchost" cause i saw it in a USB i plugged in the computer. i deleted the thing at my C drive but it keeps on recoming so i stopped all processes having svchost.exe and deleted all svchost files found in my pc. After I read this, im troubled. It looks like I really need the svchost.exe in the folder system32... What shall I do? Thanks for the help.

Hi Leo,

I have BitDefender which tells me I have that my
C:\WINDOWS\system32\=>:svchost.exe is infected with a Trojan.Generic.138368. Bit defender can't seem to get rid of it, same goes for Norton 360. I thought it was ok to have the svchost.exe. in this location...Any ideas?

Carol

Hello Leo, I have the same Problem with Bitdefender and Trojan.Generic.138368 - like Carol !!
LoloXP

I found a SVCHOST.EXE-2d5fbd18.pf located in C:\windows\Prefetch. Should I delete it? I regularly run an up tp date Symantec anti virus scan as well "spyware terminator" and it hasn't noted this as a virus. Thanks

was having the svchost.exe problem not only taking up 100% of my cpu usage but also popping up all kinds of porn in a non-explorer window not detectable as an application. With the process explorer I found a copy of svchost.exe running from a suspicious directory C:\google.com\svchost.exe lol. Renamed the file. Restarted the computer. Problem solved. Now to delete that little bastard...

To post a comment on "Where is it alright for svchost.exe to be?", please return to that article's main page.