SVCHOST...where in windows is it?

Discussion in 'adware, spyware & hijack cleaning' started by MAL, May 18, 2004.

Thread Status:
Not open for further replies.
  1. MAL

    MAL Registered Member

    Joined:
    May 18, 2004
    Posts:
    8
    Location:
    Canada
    I wanted to know where the file svchost.exe was supposed to be located in the windows xp pro directory... it seems i have a copy in my windows folder and in system32 but I doubt the legitimacy of the one in the windows folder... i think i stumbled upon an undetected trojan and alot of weird files have been apearing hidden in my windows folder... 3 including that one sent to NOD32 for testing... the svchost.exe file is 13.7k ... sounds fishy...
     
  2. snapdragin

    snapdragin Administrator

    Joined:
    Feb 16, 2002
    Posts:
    8,415
    Location:
    Southern Ont., Canada
    Hi Mal,

    The legitimate svchost.exe file will be in your Windows System32 folder. If it is located anywhere else, then it will probably be a malware file.

    Please follow the instructions over here: https://www.wilderssecurity.com/showthread.php?t=15913

    Then create a folder on your C: drive and unzip HijackThis into it. Do not put HijackThis in the Temp folders or on your Desktop as backups there will be easily lost. Once HijackThis is in it's own folder, double-click the HijackThis.exe file to open the program, then click the "Scan" button. Once the scan is finished, the Scan button will change into a "Save Log" button. Save the log and open it in Notepad, then copy and paste ALL the contents of the log here in a post

    Please do NOT fix anything in HijackThis until advised by an Expert. Most of what it lists will be harmless and even essential to your computer's operation.

    Regards,

    snap
     
Thread Status:
Not open for further replies.