Search Results
(displaying 201 results)
(displaying 201 results)
Name | Filename | Description | Status |
Windows Default Configuration | svchost.exe | Added by the Troj/Dloader-U Trojan! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
zztp | svchost.exe | Added by the Trojan.Tannick.B Trojan! Note: Located in \%WINDIR%\System32\zztp\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
[filename] | svchost.scr | Added by the Troj/Banker-CC Trojan! Note: Located in \%WINDIR%\System32\ | X |
_svchost.con | svchost.com | Added by the W32.Erkez.C@mm WORM! Note: Located in \%WINDIR%\System32\ | X |
F-Secure 2005 | svchost.exe | Added by the Troj/Bifrose-CH TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
hellfire | svchost.exe | Added by the TROJ_LEOX.D Trojan! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! read the topic. | X |
Microsoft dll Host Service | svchost.exe | Added by the Backdoor.Win32.Rbot.bms Worm! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! read the topic. | X |
Microsoft machine | svchost.exe | Added by the Backdoor.Win32.Rbot.aeu Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! read the topic. | X |
nano | svchost.exe | Added by the Troj/Nano-A Trojan! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
renascimento | svchost.exe | Added by the Trojan-Spy.Win32.Banker.gax Trojan! Note: Located in \%WINDIR%\help\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
reseurce | svchost.exe | Added by the Troj/Lineage-FV Trojan! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Runner | svchost.exe | Added by the Troj/AdClick-AG Trojan! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
spoolsv | svchost.exe | Added by the Troj/Dloader-FI Trojan! Note: Located in \%WINDIR%\help\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Zone Labs Client Ex | svchost.exe | Added by the W32.Netsky.F@mm Worm! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Windows DLL Services | svchost.exe | Added by the AGENT.H spyware! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Windows Stortup | svchost.exe | Added by the Troj/Toger-V Trojan! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
WinUp | svchost.exe | Added by the WORM_SILLY.BR Worm! Note: Located in \%WINDIR%\random 4-digit name\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
\SysInit | svchost.exe | Added by the Troj/Startpa-BD TROJAN! Note: Located in \%Program Files%\Common Files\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
startkey | svchost.exe | Added by a variant of the Troj/Agent-FPL Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! Note: Use SDFix under supervision. | X |
Microsoft Device Manager | svchost.exe | Added by a variant of the IRCBOT Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! Note: Use SDFix under supervision. | X |
Global Startup: | svchost.exe | Added by the Win32.Worm.VB.Ymeak.A Note: Located in %allusersprofile%\Start Menu\Programs\Startup\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
SVCHOST Generic application | svchost.exe | Added by the Troj/Daemoni-AT Trojan! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate file in \%WINDIR%\System32\ Note: Use SDFix under supervision. | X |
SVCHOST.EXE | svchost.exe | Trojan! Use SDFix. This is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! Note: Located in \%WINDIR%\system32\drivers\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ | X |
Msn | svchost.exe | Identified by AVG as Trojan Horse Clicker.Vms. Note: Located in \%ROOT%\ Note: This entry is loaded through one of the "Policies" startup keys. | X |
MsnHost | svchost.exe | Identified by AVG as Trojan Horse Clicker.Vms. Note: Located in \%ROOT%\ Note: This entry is loaded through one of the "Policies" startup keys. | X |
WindowsUpdate | svchost.exe | Added by a the Troj/Agent-DR TROJAN! W32.HLLW.Astef WORM! W32.HLLW.Repsan WORM! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Video Driver | svchost.exe | Detected as not-a-virus:Monitor.Win32.007SpySoft.308 by Kaspersky | X |
(blank) | svchost.exe | Added by the Added by the Troj/Delf-UX TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! Note: Has a blank entry under the Startup Item/Name field | X |
Windows Firewall | svchost.exe | Added by the Troj/Proxy-HT Trojan! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Windows Internet Manager | svchost.exe | Added by the Troj/IRCBot-AAC worm and IRC backdoor. Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! Note: Use SDFix under supervision. | X |
Windows Security Manager | svchost.exe | Added by the W32.Antinny.AX Worm! Note: Located in \%WINDIR%\System32\Microsoft\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Windows Service Host | svchost.exe | Added by the W32.Cone.B@mm Worm! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Windows Service Host | svchost.exe | Added by the W32/Kalel-C Worm! Note: This is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! Check the topic for further information. | X |
Windows Services Host | svchost.exe | Added by the W32.Cone@mm or W32.Cone.E@mm WORMS! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Windows Taskmanager | svchost.exe | Added by a variant of the IRCBOT Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! Note: Use SDFix under supervision. | X |
Windows Xp Service Pack 2 | svchost.exe | Added by the Troj/Xplos-A Trojan! Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! read the topic. | X |
WindowsServicesStartup | svchost.exe | Added by the Win32.Worm.P2P.Puce.B Worm! Note: Located in \%Documents and Settings%\Local Settings\Temp\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! read the topic. | X |
MsnLoad | svchost.exe | Identified by AVG as Trojan Horse Clicker.Vms. Note: Located in \%ROOT%\ Note: This entry is loaded through one of the "Policies" startup keys. | X |
WindowsUpdate | svchost.exe | Added by the Troj/Agent-V TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
WindowsUpdate | svchost.exe /s | Added by the Troj/Bdoor-IK TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
WindowsUpdatem2 | svchost.exe | Added by the TSPY_DUPA.B Note: This worm\trojan is located in C:\%WINDIR%\ folder. Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
winlogon | svchost.exe | Identified as a variant of the W32.Mandaph Worm. Note: Located in %userprofile%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! Note: Use SDFix under supervision. | X |
winlogon | svchost.exe | Added by the W32/AHKHeap VIRUS! Note: Located in \%ROOT%\heap41a\ Note: Do not remove the legitimate file in \%WINDIR%\System32\ | X |
winservice | svchost.exe | Added by the BackDoor-CVK Trojan! Note: Located in \%WINDIR%\Services\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
WinService32 | svchost.exe | Added by the 007_Spy_Software keystroke logger/monitoring program. remove unless self installed! - NOTE - this file is placed in a Program Files\Common Files\Microsoft Shared\DAO\System32 folder, and should NOT be confused with the legitimate Windows svchost.exe process, always located in the Winnt\System32 or Windows\System32 folder, and which moreover should NOT figure in Msconfig/Startup! | X |
wlinles | svchost.exe | Added by the W32/Liji-A Virus! Note: Located in \%WINDIR%\System32\Spool\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
wnddrv | svchost.exe | Aded by an unidentified TROJAN! - NOTE - this file is placed in the Winnt or Windows folder, and should NOT be confused with the legitimate Windows svchost.exe process, always located in the Winnt\System32 or Windows\System32 folder, and which moreover should NOT figure in Msconfig/Startup! | X |
wsock32 | svchost.exe | Added by the TROJ/HORST-A WORM! - NOTE - this file is placed in the Winnt or Windows folder, and should NOT be confused with the legitimate Windows svchost.exe process, always located in the Winnt\System32 or Windows\System32 folder, and which moreover should NOT figure in Msconfig/Startup! | X |
xor | svchost.exe | Added by the Backdoor.Xordoor Trojan! Note: Located in \%WINDIR%\System32\xor\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Policies | Svchost.exe | Added by the Dropper.Generic4.QEB TROJAN! Note: Located in \%Windir%\%System%\WinDir\ Note: Do not remove the legitimate (svchost.exe) file which is always found in \%Windir%\%System%\ | X |
Microsoft.Network | svchost.exe | Identified by Microsoft as Worm:Win32/SillyShareCopy.gen. Information at Threat Expert. Note: Located in %AppData%\Microsoft Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32 | X |
mslivemsn | svchost.exe | Identified by Kaspersky as Trojan.Win32.Swisyn.ackn. Information at Threat Expert. Note: Located in %ProgramFiles%\Windows NT\Accessories Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32 Note: This entry is loaded through one of the "Policies" startup keys. | X |
Svchost | svchost.exe | Added by the Trojan Horse TROJAN! Note: Located in \%WINDIR%\%System%\dllcache\ Note: DO NOT delete the svchost.exe file unless found to be bad. | X |
Microsoft? Operating System: | svchost.exe | Added by the Troj/Agent-PAF TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\%System%\ | X |
Windows Updater | svchost.bat | Added by the Mal/MSIL-AZ malware. Note: Located in \%TEMP%\ | X |
winsupdate | svchost.exe | Added by the Troj/Agent-RHZ Trojan! Note: Located in \%Allusersprofiles%\ Note: Do not remove the legitimate (svchost.exe) file which is always found in \%Windir%\%System%\ | X |
{6G34RU1G-X1DT-1747-18RA-3GW6VJYWERK8} | Svchost.exe | Added by the Generic.dx!txw!C17E0F036A4C TROJAN! Note: Located in \%Windir%\%System%\winbooterr\ Note: The Object name is random. | X |
tray_ico1 | svchost.exe | Malware that uninstalls your antivirus program and then display alerts pretending to be that antivirus program. This infection should not be confused with the legitimate C:\Windows\System32\svchost.exe infection. Note: Located in \%Windir%\update.tray-14-0 Note: Do not remove the legitimate (svchost.exe) file which is always found in \%Windir%\%System%\ | X |
winomc | svchost.exe | Added by the CXmal/FkSvc-Q malware. Note: Located in \%Windir%\%System%\Restore\ | X |
Windows upgrade | svchost.exe | Identified as Antivirus 2011 Edition limitée, a fake anti-malware application. These so-called "rogues" use intentional false positives to convince users that their systems have been compromised. Information at Malwarebytes Note: Located in %AppData%\AVS Note: Do not delete svchost.exe located in the %system% directory | X |
HKLM | Svchost.exe | Added by the Dropper.Generic4.QEB TROJAN! Note: Located in \%Windir%\%System%\WinDir\ Note: Do not remove the legitimate (svchost.exe) file which is always found in \%Windir%\%System%\ | X |
HKCU | Svchost.exe | Added by the Dropper.Generic4.QEB TROJAN! Note: Located in \%Windir%\%System%\WinDir\ Note: Do not remove the legitimate (svchost.exe) file which is always found in \%Windir%\%System%\ | X |
Svchost | svchost.exe | Added by the Virus.Win32.AutoRun Note: The Hosts file may have been modified. Note: Located in \%WINDIR%\regedit\ | X |
WinUpdaterstd | svchost.exe | Added by the Troj/VBObfus-E Trojan. Note: Located in \%Windir%\WinUpdaterstd\ Note: Do not remove the legitimate (svchost.exe) file which is always found in \%Windir%\%System%\ | X |
System Update | svchost.exe | Added by the Troj/Malex-P Trojan. Note: Located in \%Windir%\System\ Note: Do not remove the legitimate (svchost.exe) file which is always found in \%Windir%\%System%\ | X |
RegSvc32 | svchost.exe | Added by the Mal/VB-ABH malware. Note: Located in \%AppData%\Microsoft\ Note: Do not remove the legitimate (svchost.exe) file which is always found in \%Windir%\%System%\ | X |
svchost | svchost.exe | Related to ACCDFISA Protection Program ransomware computer infection that pretends to encrypt your files using AES encryption and then locks you out of the Windows desktop. Note: Located in \ProgramData%\local\ Note: Do not remove the legitimate svchost.exe file which is always found in \%Windir%\%System%\ | X |
Yahoo Messsenger | svchost.exe | Unidentified malware. Note: Located in \%AppData%\Roaming\support\ Note: Do not remove the legitimate (svchost.exe) file which is always found in \%Windir%\%System%\ | X |
AdobeCom | svchost.exe | Added by the Troj/DwnLdr-JXB Trojan. Note: Located in \%AppData%\ Note: Do not remove the legitimate (svchost.exe) file which is always found in \%Windir%\%System%\ | X |
SunJavaUpdateSched | svchost.exe | Dropped by Backdoor.Win32.Bifrose.fxv - see this Threat Expert Report Note: Located in %AllUsersProfile% | X |
SunJavaUpdateSched | svchost.exe | Identified by Microsoft as Infostealer trojan, Worm:Win32/Gamarue.I Note: Located in %AllUsersProfile% | X |
PCI Compliant SCard | svchost.exe | Identified by Symantec as Infostealer.Vskim Note: Located in %UserProfile%\Application Data | X |
Service Host Process for Windows | svchost.exe | Added by the Service Host Process for Windows Troj/Mdrop-GAR. Note: Located in \%Documents and Settings%\\Application Data\ | X |
Host-process Windows (Rundll3.exe) | svchost.exe | Added by the Host-process Windows (Rundll3.exe) description. Note: Located in \%Documents and Settings%\\Application Data\ | X |
Java Update | svchost.exe.exe | Added by the Troj/Agent-LMM TROJAN! Note: Located in \%WINDIR%\ | X |
MsnConvert | svchost.exe | Identified by AVG as Trojan Horse Clicker.Vms. Note: Located in \%ROOT%\ Note: This entry is loaded through one of the "Policies" startup keys. | X |
MsnMessendger | svchost.exe | Identified by AVG as Trojan Horse Clicker.Vms. Note: Located in \%ROOT%\ Note: This entry is loaded through one of the "Policies" startup keys. | X |
PolicyRun | svchost.exe | Identified by Sophos as W32/SillyFDC-AW. Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ Note: This entry is loaded through one of the "Policies" startup keys. | X |
WinampAgent | svchost.exe | Added by an unidentified malware. Note: Located in \%WINDIR%\System32\drivers\ | X |
WinampAgent5 | svchost.exe | Added by an unidentified malware. Note: Located in \%WINDIR%\System32\drivers\ | X |
*svchostBoot | svchost.exe | Identified by Kaspersky as Trojan-Downloader.Win32.Agent.bede Note: Located in \%AppData%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ | X |
winlogon | svchost.exe | Added by the an unidentified TROJAN! Note: Located in \%Documents and Settings%\Users\ Note: Winlogon should be be started at startup. Note: Do not remove the legitimate program file in \%WINDIR%\%System%\ | X |
WinSVCHost | svchost.exe | Added by a Trojan.MSIL.Agent.z TROJAN! Note: Located in \%WINDIR%\%System%\ms\ Note: Do not remove the legitimate program file in \%WINDIR%\%System%\ | X |
Cleanup | svchost.exe | Added by the Troj/Agent-JRR Note: Located in \%UserProfile%\Contacts\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\%System%\ | X |
Microsoft WinHost | svchost.exe | Added by the AdTool.Win32.VB.a Note: Located in \%Program Files%\Common Files\Microsoft WinHost\ | X |
Processor | svchost.exe | Added by the Troj/AdClick-FR TROJAN! Note: Located in \%ROOT%\ Note: Do not remove the legitimate program file in \%WINDIR%\%System%\ | X |
WinAppLog | svchost.exe | Related to Spyware.StingKeyLogger keystroke logger/monitoring program - remove unless you installed it yourself! Note: Located in \%Program Files%\StingWare\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | U |
System Drivers | svchost.exe | Added by the Troj/PWS-BFT TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate program file svchost.exe in \%WINDIR%\%System%\ | X |
svchost Agent | svchost.exe | Identified by Kaspersky as Trojan.Win32.Autoit.ci. Information at Threat Expert Note: Located in %ProgramFiles%\System32\28463 | X |
Policies | svchost.exe | Identified by Kaspersky as Backdoor.Win32.Bifrose.bovq. Information at Threat Expert Note: Located in %windir%\System32\Services Note: This entry is loaded through one of the "Policies" startup keys. Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ | X |
Bios | svchost.exe | Identified by Kaspersky as Backdoor.Win32.Bifrose.bovq. Information at Threat Expert Note: Located in %windir%\System32\Services Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ | X |
RaidDrivers | svchost.exe | Unidentified malware believed to be a Bifrost variant. Information at Threat Expert Note: Located in %windir% Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ | X |
winsys32 | svchost.exe.exe | Identified by Microsoft as Virus:Win32/Sality.G. Information at Threat Expert Note: Located in %AppData%\system32 | X |
User Agent | svchost.com | Added by the Worm.Win32.AutoIt.rm WORM! Note: Located in \%AppData%\mplf\ Note: Spreads via removable media. | X |
winupd32 | svchost.exe | Identified by Kaspersky as Trojan.Win32.Swisyn.wsx. Information at Threat Expert Note: Located in %Windir%\system Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ | X |
incognito | svchost.exe | Identified by Microsoft as Backdoor:Win32/IRCbot.SX. Information at Threat Expert Note: Located in %windir%\system32 Note: Ensure you do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ | X |
winserviceEx | svchost.exe | Identified by Kaspersky as Trojan.Win32.Sasfis.ttz. Information at Threat Expert Note: Located in %windir%\help Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ | X |
winserviceEx | svchost.exe | Unidentified malware. Information at Threat Expert Note: Located in %windir%\help Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ | X |
Microsoft WPCEmail | svchost.exe | Added by the Troj/Sniffer-N Note: This worm\trojan is located in C:\Windows\ (Win9x/Me), C:\%WINDIR%\ (XP/WinNT/2K) Note: This is not the legitimate Windows Process. (Which is found in the System32 folder.) | X |
Generic Host Process for Win32 Services | svchost.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This is not the legitimate Windows Process. (Which is found in the System32 folder.) This worm\trojan file is found in the Windows or Winnt folder. | X |
GNP Generic Host Process | svchost.exe | Added by the Troj/Zapchas-R TROJAN! Note: This file is placed in the C:\Winnt\System or C:\Windows\System folder, and should NOT be confused with the legitimate Windows svchost.exe process, always located in the Winnt\System32 or Windows\System32 folder, and which moreover should NOT figure in Msconfig/Startup! | X |
GNP Generic Host Process | svchost.exe | Added by the Troj/Zapchas-AA TROJAN! Note: This one replaces svchost.exe in the System32 folder with a copy of Mirc on (NT/2000/XP) systems and just adds svchost.exe to the System folder on (95/98/ME) systems. | X |
Host Process | svchost.exe | Added by the BKDR_IRCBOT.AGF Backdoor Trojan. Note: Located in %userprofile%\svchost.exe (on Windows Vista) or %windir%\fonts (on Windows XP or 2000) Note: Use SDFix under supervision. Note: This infection should not be confused with the legitimate C:\Windows\System32\svchost.exe file. Note: Read the link, allows remote access | X |
I just want to say I love Milko and I need a drink | svchost.exe | Added by W32.Chiko Note: Located in \%ROOT%\Documents and Settings\Administrator\Local Settings\Application Data\ Note: This is not the legitimate Windows Process which is found in the System32 folder.) | X |
KAVPersonal | svchost.exe | Added by the Troj/Lineage-V TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
LocalSystem | svchost.exe | Added by the EHU Adware! Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
microsoft | svchost.exe | Added by the W32.HLLW.Astef or W32.HLLW.Repsan WORMS! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Microsoft (R) Windows Configuration Backup Service | svchost.exe | Added by the Backdoor.Ranky.X TROJAN! Note: This worm\trojan is located in %Windir%\mapping\, %Windir%\security\, %Windir%\config\ on these platforms Win9x/Me/XP/WinNT/2K | X |
Microsoft Genetic Procress | svchost.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\%WINDIR%\ folder. | X |
Microsoft Genuine Logon | svchost.exe | Added by the WORM_SDBOT.EXT Worm! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Microsoft Service Host Process | svchost.exe | Added by the WORM_KRYNOS.B WORM! Note: Located in \%WINDIR%\Help\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Generic Host Process | svchost.exe | Added by the Troj/Dloader-NX TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Microsoft ® Windows Configuration Backup Service | svchost.exe | Added by the HackerDefender SDBot TROJAN! Note: ROOTKIT INFECTION Note:This is not the legitimate Windows Process. (Which is found in the System32 folder.) This worm\trojan is located in C:\WINDOWS\config\ | X |
Microsoft ® Windows Configuration Manager | svchost.exe | Added by an unidentified TROJAN! Note: of the Win32/Rbot Family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Note: Normally this operating file is located in C:\WINDOWS\system32\ | X |
Mircosoft DNS Service | svchost.exe | Added by the Troj/IRCBot-AK TROJAN! Note: Located in \%WINDIR%\System32\Driver\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Monitoring Service | svchost.exe | Added by the W32.Cone.C@mm TROJAN! Note: Located in \%WINDIR%\Task\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
MStask | svchost.exe | Added by the Troj/LdPinch-BV TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
NetStart | svchost.exe | Added by the W32/Mkar-A VIRUS! Note: Located in \%WINDIR%\System>\Netstart\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Network maneger | svchost.exe | Added by a variant of the IRCBOT Note: Located in \%WINDIR%\system\ Note: Use SDFix under supervision. Note: Do not remove the legitimate file in \%WINDIR%\System32\ | X |
Network Service | svchost.exe | Added by the Win32.Omal.C Trojan. Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
NortonVPlus | svchost.exe | Added by the Troj/Roamer-A Trojan. Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
ntuser | svchost.exe | Added by a variant of the WORM_SOCKS.D WORM! Note: Located in \%WINDIR%\System32\drivers\ Note: Use SDFix under supervision. Do not delete the the legitimate file in C:\WINDOWS\System32\ | X |
NvClipRsv | svchost.exe | Added by the W32/Dumaru-AK Worm! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
tjstartup | svchost.exe | Added by the Backdoor.Tjserv TROJAN! Note: Located in path to the executable Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
CDriver | svchost.exe | Added by a a variant of the Trojan-Clicker.Win32.Delf.it malware. Note: Located in \%ROOT%\Backup_Drivers\ This infection should not be confused with the legitimate file Note: Located in \%WINDIR%\System32\svchost.exe. | X |
(original file name) | svchost.scr | Added by Troj/Bancban-CX and Troj/Bancban-DA TROJANS! Note: Located in \%WINDIR%\System32\ Note: Read the link, keylogger/password stealing TROJAN(S) involved. | X |
(random) | svchost.scr | Added by Troj/Bancban-CY Trojan! Note: Read the link, keylogger/password stealing TROJAN(S) involved. | X |
(random) | svchost.exe | Added by the Troj/Bancban-JC TROJAN! Note: Read the link, keylogger/password stealing TROJAN(S) involved. | X |
1 | svchost.scr | Added by PWSteal.Bancos.X Trojan. Note: Read the link, keylogger/password stealing TROJAN(S) involved. | X |
333 | svchost.exe | Added by the Troj/JD-A Trojan! Note: Located in \%ROOT%\Syswm1i\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! Note: Read the link, steals information | X |
Administrator | svchost.scr | Added by the Backdoor.Novacal TROJAN! Note: Located in \%ROOT%\Fonts\ Note: Read the link, keylogger/password stealing trojan(s) involved. | X |
alpha | svchost.exe | Added by a a variant of the Trojan-Clicker.Win32.Delf.it malware. Note: Located in \%ROOT%\Backup_Drivers\ This infection should not be confused with the legitimate file Note: Located in \%WINDIR%\System32\ | X |
alpha | svchost.exe | Identified as a variant of the Trojan-Clicker.Win32.Delf.it malware. Note: Located in \%ROOT%\various folder name\ This infection should not be confused with the legitimate C:\Windows\System32\ Note: Use SDFix under supervision. | X |
Auto Update | svchost.exe | Added by the Troj/DumarDl-A TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Auto Updates | svchost.exe | Added by the Troj/Cheuko-A TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
beta | svchost.exe | Added by a a variant of the Trojan-Clicker.Win32.Delf.it malware. Note: Located in \%ROOT%\Backup_Drivers\ This infection should not be confused with the legitimate file Note: Located in \%WINDIR%\System32\ | X |
beta | svchost.exe | Identified as a variant of the Trojan-Clicker.Win32.Delf.it malware. Note: Located in \%ROOT%\various folder name\ This infection should not be confused with the legitimate C:\Windows\System32\svchost.exe file. Note: Use SDFix under supervision. | X |
Online Service | svchost.exe | Added by the W32.Hostidel.Trojan.B or Infostealer.Tarno.B TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
CDriver | svchost.exe | Identified as a variant of the Trojan-Clicker.Win32.Delf.it malware. Note: Located in \%ROOT%\various folder name\ This infection should not be confused with the legitimate C:\Windows\System32\svchost.exe file. Note: Use SDFix under supervision. | X |
COM++ System | svchost.exe | Added by a variant of the LOVGATE WORM! | X |
Configuration Loader | svchost.exe | Added by the W32/ParaDrop-A WORM! Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
DDriver | svchost.exe | Added by a a variant of the Trojan-Clicker.Win32.Delf.it malware. Note: Located in \%ROOT%\Backup_Drivers\ This infection should not be confused with the legitimate file Note: Located in \%WINDIR%\System32\ | X |
DDriver | svchost.exe | Identified as a variant of the Trojan-Clicker.Win32.Delf.it malware. Note: Located in \%ROOT%\various folder name\ This infection should not be confused with the legitimate C:\Windows\System32\svchost.exe file. Note: Use SDFix under supervision. | X |
defragsys | svchost.exe | Added by the Troj/Bifrose-TH TROJAN! Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
DriverCheck | svchost.exe | Added by the Troj/Delf-KR TROJAN! Note: Located in \%ROOT%\DriverLoad\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
DriverLoad | svchost.exe | Added by the Troj/Delf-KR TROJAN! Note: Located in \%ROOT%\DriverLoad\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
France | svchost.exe | Added by a variant of W32.MIMAIL.C WORM! **Note this is not the valid svchost.exe as described for Win2K or WinXP | X |
gamma | svchost.exe | Added by a a variant of the Trojan-Clicker.Win32.Delf.it malware. Note: Located in \%ROOT%\Backup_Drivers\ This infection should not be confused with the legitimate file Note: Located in \%WINDIR%\System32\ | X |
gamma | svchost.exe | Identified as a variant of the Trojan-Clicker.Win32.Delf.it malware. Note: Located in \%ROOT%\various folder name\ This infection should not be confused with the legitimate C:\Windows\System32\svchost.exe file. Note: Use SDFix under supervision. | X |
System | svchost.exe | Added by the Troj/LdPinch-AU or Troj/LdPinch-BD and Troj/LdPinch-BH TROJANS! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
svchost | svchost.exe | Added by the W32.HLLW.Morb@mm WORM! or Infostealer.Tarno TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Svchost | svchost.exe | Added by the W32/Moze-A Worm! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
svchost | svchost.exe | Added by the Troj/Bancban-HL Trojan! Note: Located in \%WINDIR%\config\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
SVCHOST Generic application | svchost.exe | Added by the Troj/Daemoni-O Trojan! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
svchost Netware Manager | svchost.exe | Added by the W32.Exvid.A@mm Worm! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Svchost Service | svchost.exe | Added by the W32/VB-DVQ Worm! Note: Located in \%WINDIR%\help\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
SVCHOST.EXE | SVCHOST.EXE | Added by the Troj/Wrmscan-A Trojan! Note: Located in \%WINDIR%\help\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
svchost.exe | svchost.exe | Added by the Troj/PWSjx-A Trojan! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
svchost.exe | svchost.exe | Added by the Backdoor.Bifrose.D Trojan! Note: Located in \%ROOT%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
SVHOST | SVCHOST.EXE | Added by the W32.Zori.A Virus! Note: Located in \%WINDIR%\System32\SVCHOSTV\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
sws.exe | svchost.exe | Added by the Dialer.GlobalDialer Global-Dialer S.L. Note: Located in \%Program Files%\GlobalDialer\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
P0w3rF1Y | svchost.exe | Added by the Troj/Bdoor-MM TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
system configure | svchost.exe | Added by the Troj/Lineage-C TROJAN! Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
System Host Service | svchost.exe | Added by the W32.Cone.F@mm Worm! Note: Located in \%WINDIR%\task\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
System Manager | svchost.exe | Added by the Troj/Banker-AE Trojan! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
System Process | svchost.exe | Added by the Troj/AdClick-AG TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
System Update2 | svchost.exe | Added by the Troj/Autotroj-C TROJAN! Note: This is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! read the topic | X |
SystemCheck | svchost.exe | Added by the Troj/Delf-KR TROJAN! Note: Located in \%ROOT%\DriverLoad\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
SystemDriverCheck | svchost.exe | Added by the Troj/Delf-KR TROJAN! Note: Located in \%ROOT%\DriverLoad\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
SystemDriverLoad | svchost.exe | Added by the Troj/Delf-KR TROJAN! Note: Located in \%ROOT%\DriverLoad\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
SystemReg | svchost.exe | Added by the BKDR_DEWIN.E TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Task Manager | svchost.exe | Added by the W32/Sohana-P WORM! Note: This is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! read the topic. | X |
Task Monitoring Service | svchost.exe | Added by the W32.Cone.D@mm WORM! Note: Located in \%WINDIR%\task\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
svc | svchost.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\%WINDIR%\ folder. Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Online Service | svchost.exe | Added by the W32.Hostidel.Trojan.C TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Perfomance Settings | svchost.exe | Added by the Troj/Tofger-AP TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Photoshop | svchost.exe | Added by the Troj/Cdopen-E Trojan! Note: Located in \%Program Files%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
PowerManager | Svchost.exe | Added by the W32/Jeefo VIRUS! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Recoveru systems | svchost.exe | Added by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in a %temp%\ folder. Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
regedit | svchost.exe | Added by the Trojan.Hotword.B TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
sds20 | svchost.exe | Added by the Spyware.InlookExpress SPYWARE! Note: Located in \%ROOT%\sds20\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Service Host | SVCHOST.EXE | Added by the Troj/Daoser-A TROJAN! Note: Located in \%WINDIR%\System32\Services\{C922CCC4-CF61-4589-A0D1-828160704853}\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Service Host Driver | svchost.exe | Added by the W32.Hiton@mm WORM! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Service Process | SVCHOST.EXE | Added by the W32.Darker.Worm WORM! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Services | svchost.exe | Identified as a variant of the VirTool:Win32/DelfInject.gen!AM malware. Note: Located in \%WINDIR%\ Note: Use SDFix under supervision. | X |
Setup experation | svchost.exe | Added by the Troj/Tofger-AW TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Shell | svchost.exe | Added by the Backdoor.Doyorg TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
SNP Generic Host Process | svchost.exe | Added by the Troj/Zapchas-O TROJAN! Note: Located in \%WINDIR%\System\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Srv32Win | Svchost.exe | Realtime-Spy keylogger (monitoring program). Given a "U" recommendation because it depends if you intentionally installed it. If you didn't treat it as "X" and uninstall or remove | U |
SSL | svchost.exe | Added by an unidentified VIRUS! | X |
startkey | svchost.exe | Added by the Troj/Agent-FPL TROJAN! Note: Located in \%WINDIR%\System\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
SVC | svchost.exe | ElfSpy keystroke logger/monitoring program - remove unless you installed it yourself! - this file should NOT be confused with the legitimate Windows svchost.exe process, always located in the Winnt\System32 or Windows\System32 folder, and which moreover should NOT figure in Msconfig/Startup! | U |
SVCHOST | svchost.exe | Added by the System1060 homepage hi-jacker. Note: Located in WindowsSystem1060\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
357AA41A-B7A8-4632-A27D-5B980B25CF43 | [path to svchost.exe] | Added by the Troj/Small-AQ TROJAN! Note: Located in \%WINDIR%\SYSTEM32\wbem\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
svchost | system32:svchost.exe | Identified as a variant of the Backdoor.Win32.Poison malware. This infection is a Alternate Data Stream file which requires certain tools to remove. Get help from a malware removal forum. Note: Use SDFix under supervision. | X |
(Default) | rundll32.exe svchost.dll | Identified by Kaspersky as Worm.Win32.AutoRun.gde. Information at Threat Expert Note: Located in %Programfiles%\Tecent | X |
svchost | svchost.exe /nosplash | Added by the Troj/Bancban-DH TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Shell | Explorer.exe [path] svchost.exe | Added by the Backdoor.Doyorg TROJAN! Note: Located in \%WINDIR%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
WinDLL (svchost.dll) | rundll32.exe svchost.dll, start | Added by a variant of the IRCBOT TROJAN! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted. The "svchost.dll" file is found in the System (9x/Me) or System32 (NT/2K/XP) folder | X |
Windows Driver Adapter | svchost.exe /driver-auto | Added by the W32/Antinny-K WWORM! Note: Located in \%WINDIR%\System32\Drivers\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup! | X |
Winlogon Shell | Explorer.exe %System%\1032\svchost.exe | Added by the W32.Kipis.M@mm WORM! Note: Do not remove the legitimate explorer.exe file which is always found in \%WINDIR%\ | X |