Forum Home
Press F1
 
Thread ID: 88331 2008-03-23 22:16:00 svhost.exe Nomad (952) Press F1
Post ID Timestamp Content User
652242 2008-03-23 22:16:00 Windows 2000. I have 2 entries under task manager - processes. Is something wrong here?

With the following PID:
732
468

One is about 9MB and the other is 5MB.
When Windows starts up .. the HDD rumbles a lot .. and via processes one of them has gone up to like 30MB .... then the figure drops and the HDD stops rumbling....

Anything unusual ..


Thanks
Nomad (952)
652243 2008-03-23 22:19:00 Correction I have 3x, the other is 14MB. Nomad (952)
652244 2008-03-23 22:23:00 Well, I got 6 cost me around 63MB memory :)

Usually, it is normal to have more than one svhost.exe processes running depends on what kind of or how many system service running.
CharlesC (13531)
652245 2008-03-23 22:43:00 Is it svhost, or svchost.exe??

Theres a diff, svhost is a worm (ie: Mydoom uses it / malware), svchost is a windows file
Speedy Gonzales (78)
652246 2008-03-23 22:58:00 Kill it, if its svhost.exe, and do a virus scan. Speedy Gonzales (78)
652247 2008-03-24 00:48:00 Is it svhost, or svchost.exe??

Theres a diff, svhost is a worm (ie: Mydoom uses it / malware), svchost is a windows file

Yeah, you are right SVCHOST.exe is a good one.
CharlesC (13531)
652248 2008-03-24 01:57:00 Thanks its svcghost.exe so its fine .. have done spybot checks.. Nomad (952)
652249 2008-03-24 02:10:00 Thanks its svcghost.exe so its fine .. have done spybot checks..

Spybot isnt a virus scanner, get a virus scanner

That file is either a backdoor trojan, or an IRC worm / trojan.

If the name of the file isn't svchost.exe, it isnt safe

Kill it in task manager
Speedy Gonzales (78)
652250 2008-03-24 02:40:00 Oops. It is svchost.exe without the G :D
I'll do a virus scan .. with AVG.
Nomad (952)
1