Windows 10: SVCHOST.EXE hijacked.

Today I did stupid thing I tell everyone not to do. Connected someone's HDD and tried to run a program on it. WD started running like crazy and sai something about stopping something but I couldn't see what. Shut it down, disconnected disk, run Malwarebytes and it lit up like a Christmas tree finding several dozen malware instances. I though, fine got rid of them but upon reboot found that some unnamed process grabbing 60 - 70% of CPU which doesn't happen even with heavy games. Traced 2 processes to C:\Windows\SysWOW64\svchost.exe
Run full WD scan and nothing was found, running Eset online scan now and it seem to have found some 6 instances of some malware/threats, didn't finish scan yet so can't see what it found.

:)

 

Hijack this help me

looks like its svchost, because its a common host for viruses and my hijackthis doesn't list my svchost in the irregularities, and its basically a pub for viruses and i wouldn't be suprised if theres a virus in there... just delete svchost(use unlocker or use linux) and replace it with a fresh svchost (i'll give you mine if you'd like)

 

RAM Died: svchost error

svchost is part of the OS, it just interacts with other aspects.

 

What does the svchost do?

Lots of Windows services are tied to the SVChost, and /or are listed as SVChost in the process list(s).

Unfortunatley with Vista, there's a lot more dependencies between the services, and thus you'll be FORCED to run more instances of SVChosts; unlike XP where things were more independent and you could disable more features resulting in less SVChost instances. That and XP and Vista are different.

Regardless of your Windows version, you can check out some service slimming guides or goto Black Viper's website and take his advice. Depending on your needs you may be able to cut down the amount of SVChost running, and save some RAM.

XP should never have an SVChost using 50mb. Vista however can.