Malware... URGENT

[an-225]

I have five svchost.exes running,  two in SYSTEM, one in LOCAL SERVICE and two in NETWORK SERVICE.

As of right now: Local Service: mem usage: 4,128K
Network Service: 3,924K and 3,328K
SYSTEM: 4,488K and 38,236K.

The last one CANNOT be right, downloading AVG right now. Done a cache dump. No slow-down through normal PC use, only some slowdown in the Stalker: Shadow of Chernobyl menu. This slowdown is what prompted me to check through task manager.

[Mazza]

You have a virus for sure.... Run scans

[Slotback]

errr.

Svhost are windows services grouped together.

I have five.

Everyone has five.

start, run, services.msc  .... disable them there

[an-225]

Eh, I have only ever noticed up to three at one time. Did a scan and there was a trojan lurking around in System 32, it should have been deleted but just in case I'm scanning again.

[Wii]

Eh, I have only ever noticed up to three at one time. Did a scan and there was a trojan lurking around in System 32, it should have been deleted but just in case I'm scanning again.

I have 10 svchost.exe's running ranging from local service to network service to system.

[Groundbound1]

Yup, I have six running myself, and no viruses or malware that I know of. (I do my best to avoid such things)

[T1MT1M]

Lol i lose. I have 15. But its so much effort to go through and shut all the ones down that i don't use.


I think I'll do it after format .

[a1]

I have about 5. You are mistaken to another one that looks like it. I was too until I read closer.

[NickN]

normal function of Windows

your seeing nothing abnormal




If you are worried about Malware... download install, update and do a full scan with Malwarebytes

all gone

It wont fix the payload if you have already been hit but it will kill the mother bug


http://www.malwarebytes.org/


getting rid of the payload is a different story and sometimes takes special tools to do it such as Combofix and SDfix (dangerous to use without supervision)

[T1MT1M]

At work we found a good way of getting rid of extremely bad viruses that most programs won't fix but this only works if the main virus isn't attached to an important windows file. Find the file that is the virus delete it everywhere you can find it in the registry then simply rename the file, restart and delete it .

But you gotta know what is what when your using that method.