How to Remove the svchost.exe virus from PC

What is Svchost.exe?

The svchost.exe is an executable file of Microsoft Windows and is tagged as a Generic Host Process for Win32 Services. This is an important Windows file and it is used to load the required DLL files that are used with Microsoft Windows and Windows programs that run on your computer. Some Malware often uses a process by the name “svchost.exe” to mimic the windows process.

The orginal file is located only in c:\windows\system32 or c:\winnt\system32 depending on versions of Windows OS. If the file that is located in any other location, then we can conclude that the system is infected with malware.

svchost.exe provides a service which is used by Windows Defender. There are multiple instances provided by svchost.exe which are used for many operations. One instance may provide single operation and other instance provide several service to windows.To know the service which are currently running. Go to Task Manager and click Processes tab. Click Show all process and Right-click an instance of svchost.exe, and then click Go to Service(s). The services associated with the process are highlighted on the Services tab.

Affected OS/Platform: Windows

How to find System is affected by Svchost.exe malware

Step 1: Open the Task Manager with a CTRL+ALT+DEL key combination

Step 2: Right click on the svchost.exe and Select Open File Location The Open File Location will be showing you the path where the file is actually located c:\windows\system32 or c:\winnt\system32.

If it gets open in some other folder or file location, then it is sure that the system is infected with svchost.exe malware.

How to remove the svchost.exe file from system using Comodo Antivirus?

Download our award-winning Comodo Antivirus software

Installation configuration frames will be displayed. Select the configuration you would like to apply

Select Customize Configuration option and arrange installers, configuration, and file location.

Once the Installation is Finished, restart your PC.

Comodo Internet Security starts to update the software for virus protection. It takes sometime to get updated.

After the update, a Quick scan is executed.

If threats are found upon completion of scanning, you will be prompted with an alert screen.

The Antivirus Software will clean all malware including svchost.exe.

Windows OS PC Security Softwares:

Related Resources:

Website Malware Directory Resources:

Malware Entries

First Seen: 06 February 2009 at 11:36 pm

No.	Company	File Type	SHA1	MD5	Malware Name	Digitally Signed	File Version	Product Version	Submitted From	Malware Behavior
1	N/A	Executable	54ab2a9ca2436e12 1683946efefaa095 b15fb794	e23378f8080d23cf a4cf728df4c41a9c	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	186.167.245.92/32	N/A
2	Acoustica Inc.	Executable	1c80c1a7be5dd3b7 1e8205166d57f17a 7fc118af	4c9a59bcdb40e39f 0c72820f381b9ab2	TrojWare.Win 32.Injector. ADKK	No	2, 0, 18, 0	2, 0, 18, 0	United Kingdom	N/A
3	N/A	Executable	43d40904ed1b71ec 9b8e5820ac3d5c68 e4d3f940	06f1483026bafe0b a5ce821297a9aaa0	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	United States	N/A
4	1994	Executable	037eb1e7089e828a 3b9b45e032cff7b7 7ddf4a62	76f973ac86143f85 916d041389984e39	TrojWare.Win 32.Miser.I	No	2.04.0003	2.04.0003	10.224.1.116/32	N/A
5	N/A	Executable	31478e6e996cb2f7 f9b0d4c2ce9ac088 28b0a2cb	e6d6685365d60593 5189f6512e03b19d	Application. Win32.Adware .RuKoma.A	Yes	N/A	N/A	185.150.154.131/32	N/A
6	Microsoft	Executable	690124d4eb268a5a 525372c1a39f4662 b736186c	b963d54f1fa9fea1 cc037ab0398b4ac1	TrojWare.Win 32.VB.OSKB	No	1.00	1.00	Vietnam	N/A
7	Microsoft Corporation	Executable	e3746284b1087702 16d7be0b6dfe53da 5676df30	be79814d25005b44 9457189aa1312d08	Unclassified Malware	Yes	1.00.0033	1.00.0033	Brazil	N/A
8	N/A	Executable	9ca7f44804158b5d 198b8e8750de52c6 20f8536a	17854e338138076d 7540297adbefc217	Unclassified Malware	No	1.0.0.0	N/A	Internal Submission	N/A
9	N/A	Executable	d18d4c66933cede5 093e6e679d8933f4 d42efea6	3155ddb2b95f9e12 90667839a8a2c946	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	185.104.253.51/32	N/A
10	N/A	Executable	98ec37b48031eecb 7f2a06eabd324b07 79373542	d15e8aff67a1efb7 78ad21e63ab8a4cf	Unclassified Malware	No	1.0.0.0	1.0.0.0	Internal Submission	N/A
11	Tencent	Executable	f904baffceb56a4d cbae23788066e290 963a380d	fa508241066ee437 5d8bcbe6b843baa5	TrojWare.Win 32.Magania.~ AAD	No	1, 57, 1961, 0	1, 57, 1961, 0	Internal Submission	N/A
12	N/A	Executable	0d2d9664df8ece53 bf037549123ffb5b 5a387d8a	ca40516db1c91895 64538a862bc7d17a	Application. Win32.Monito r.Spy.~OL	No	N/A	N/A	Internal Submission	N/A
13	N/A	Executable	fa26c3726e837979 d9a7d10ff3887080 50a36718	dd9965304eecd38b 33fc07754ff83536	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	Canada	N/A
14	Google Inc.	Executable	bc6d062803b5871f 2688592d08e901bb 2d057ace	d00c07b900f4e4ff f48cdfba496bc913	Unclassified Malware	No	67.0.3396. 99	67.0.3396. 99	Russian Federation	N/A
15	Tencent	Executable	78bb1482113a230e dbf74c2fa68ebb3a 7d1bdb29	e6f22990f0bd3f45 e123bba6baf75b8f	TrojWare.Win 32.Magania.~ AAD	No	1, 57, 1961, 0	1, 57, 1961, 0	Internal Submission	N/A
16	N/A	Executable	1de7a9cda76ae22a 2cac5efb2c15ed1b aa6a47c7	851619f413b94e4c 17a681329d4b1f82	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	Vietnam	N/A
17	Microsoft	Executable	fc9887fd69bafc57 abe79c15e2e34a59 ed7530aa	751d08066c9b5411 b5aa81df809fb071	TrojWare.Win 32.VB.OSKB	No	1.00	1.00	179.192.82.96/32	N/A
18	Microsoft	Executable	9167b76776d3fce4 7aef8815c14169b0 a9ba3d4e	2caaf7139f45b2b0 44322c76aa255252	TrojWare.Win 32.VB.OSKB	No	1.00	1.00	Philippines	N/A
19	N/A	Executable	a19bb56deee4f7d2 4a18a458865a8678 b28520d4	42642fceddaa60dd 81092ff5f4af1f65	Heur.Suspici ous	No	N/A	N/A	Internal Submission	N/A
20	Macromedia, Inc.	Executable	d4e5eb07b999ca47 cc3c1c8d465bb087 8a48b851	0fe56475f9e3e27b 330096616e2ee9c1	Virus.Win32. Ramnit.K	No	7,0,14,0	7,0,14,0	Philippines	N/A
21	SOFTWIN S	Executable	2869a5504d991d3d ea07e2dd86e12472 209ce471	2266fa0cfb228c64 33fb6af708a4c14d	Packed.Win32 .MUPX.Gen	No	106.42.73	106.4	Poland	N/A
22	N/A	Executable	a5fff2a5f8f5f188 b42ad708954dab11 7246511c	5533abf652f1022f 9ac8c8e818a89351	Heur.Suspici ous	No	N/A	N/A	United States	N/A
23	Tencent	Executable	8ec5556385246bf7 2249a2e06e7a2cb0 f4003f5c	70f101c523266235 5a91660a28651af4	TrojWare.Win 32.Zegost.IN A	No	1, 57, 1961, 0	1, 57, 1961, 0	Internal Submission	N/A
24	N/A	Executable	9ea0895228357066 1979a744eaa63014 7a70490a	5b119b76894bb201 626de1ddf527d202	Unclassified Malware	No	N/A	N/A	China	N/A
25	N/A	Executable	253894860de0301d 4e956ce1b7029143 cf16a267	5d3da46a1a40ba1b aff24c14af2a26e3	Win32.Jeefo. A	No	N/A	N/A	Poland	N/A
26	Cronosoft	Executable	c5a66c82ab502bdf 6322b18a2487435b 5338ee1d	7cc569dcc12f69f9 1dfc2af73c33966b	Virus.Win32. Virut.Ce	No	10.10	10.10	Trinidad and Tobago	N/A
27	N/A	Executable	0df0281e26c13dc9 f1e6caed997baefa 73f58a6f	16129e19a5ae41f7 ccc8f8cb188784a0	Unclassified Malware	No	2.03.0001	2.03.0001	10.224.1.116/32	N/A
28	Microsoft Corporation	Executable	fd9261f9910efe99 374f8cea189195fb 4d50963e	55dc8befb20f7740 d06244f09be69406	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	156.213.171.239/32	N/A
29	Microsoft Corporation	Executable	21e9e0bb48e67062 599f4a28d300994f 3150ec0c	17750b217ee388cc 128b7b990da4368f	TrojWare.Win 32.Spy.Banke r.Gen	No	N/A	1.0.0.0	Internal Submission	N/A
30	TODO: <公司名>	Executable	a1449e5613940f9b bbc86235b0396636 5e54698d	ce0f5a6435a960d0 a69d62aeda374ffa	Backdoor.Win 32.Beaugrit. C	No	1.0.0.1	1.0.0.1	10.224.25.177/32	N/A
31	Microsoft	Executable	8ef2ce67e84631bf 4279f927ae3a2ce0 283c5898	f006ac4fa52c4c7e 3f123eadd3ce708e	TrojWare.Win 32.VB.OSKB	No	1.00	1.00	179.105.113.236/32	N/A
32	N/A	Executable	1c0f0079c329a054 51cc69cb9dac6eee 82974050	0b6bbdb71222a8f0 8b2b82578b8bdcd2	Unclassified Malware	No	N/A	N/A	Internal Submission	N/A
33	N/A	Executable	049c34d55d31e987 a204f536174b21a8 d5911601	f7f724517b39e2af 1fc8263d60afa177	Unclassified Malware	No	1.0.0.0	1.0.0.0	Internal Submission	N/A
34	Microsoft Corporati逧n	Executable	308aa5261be1874a 322f55d726515d75 767c8aec	5a4747fc864d58d6 3e06e24b00ef690d	TrojWare.Win 32.Kryptik.K AZ	No	5.2.3790.4 566 (srv03_sp2 _qfe.09080 5-1438)	5.2.3790.4 566	Internal Submission	N/A
35	N/A	Executable	15b0323152ae14cf a4044c08b73c9936 f37c9586	7aeee43a72bfd4a4 0c117d94179ed2da	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	Uruguay	N/A
36	Redondo	Executable	1ea5a0bb45789de5 1fd39fe1257767ce 1b022ede	c4b6d916790a34ee f6c71cfea4526d8f	TrojWare.Win 32.TrojanDro pper.Agent.V CC	No	3.45.0005	3.45.0005	Internal Submission	N/A
37	N/A	Executable	6af5a9e1cff63240 7262750b8b08e482 6b8dd0ed	be8fd6e6a370aa78 f9f7dd419af1e68a	Heur.Suspici ous	No	1.00	1.00	Internal Submission	N/A
38	N/A	Executable	fd6a0a87653edd52 5c18fd2196210d50 36b5c189	83365979ea727066 7d38d39242842497	Backdoor.MSI L.Bladabindi .A	No	N/A	N/A	138.186.107.27/32	N/A
39	Microsoft	Executable	da92fff36a6eafde 1dd6b3b656441bcc 1d9548c8	1d66e9ea3202ea80 6999e6748a4f5114	TrojWare.Win 32.VB.OSKB	No	1.00	1.00	186.167.250.39/32	N/A
40	N/A	Executable	492bae04efd7049a 1dce8fdc5c616451 40ed202e	209ed86b9d6182ec 8ea95a331a02c4b3	Backdoor.Win 32.Amtar.vna	No	N/A	N/A	Brazil	N/A
41	Microsoft	Executable	95a2e40e36307194 7922c5963ae375a4 84f81269	7721ea3dae61a394 69d6a6f2e506685a	TrojWare.Win 32.Kryptik.G T	No	1.00	1.00	Vietnam	N/A
42	Tencent	Executable	42b319cf1ac38fc9 4159cd9636732e48 38314e2d	368fdb173eff682d 56a34c894014fc78	TrojWare.Win 32.Magania.~ AAD	No	1, 57, 1961, 0	1, 57, 1961, 0	Internal Submission	N/A
43	N/A	Executable	71024238b013a289 d3cb0854a9928267 b31e621a	b36aa24347109051 1c3cfa099e26f8a1	Packed.Win32 .MUPACK.~KW	No	N/A	N/A	10.224.25.177/32	N/A
44	Windows (R) Win 7 DDK provider	Executable	6439827587255651 66eaa02af1c52e1a 3c7424ef	f105258798f10531 e2df2a81f67a9d76	TrojWare.Win 32.Trojan.Ag ent.Gen	No	9.3.7800.2 1715	9.3.7800.2 1715	Brazil	N/A
45	N/A	Executable	21ef4452bc97627e 0443f1ec373d7b73 a0966002	ab210a5bf80c56e2 5065c9ffdb46ed6f	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	103.96.107.11/32	N/A
46	N/A	Executable	484e004faf68965c 2e46ab92924a8593 f70a1496	3635790791dca6ad bdf464dcac14c480	TrojWare.Win 32.ButeRat.P P	No	N/A	N/A	Internal Submission	N/A
47	N/A	Executable	bbf3e24f368a82f1 3537fd8f9ea690c9 44fae9c9	30eff7b561d7ca2d 9b5c75140e8d3f32	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	Romania	N/A
48	N/A	Executable	7bc9be715cf6f021 87bf633a5e1fb43c 678860f8	3eb368b607eabaa6 5507690d2613309e	Unclassified Malware	No	1.0.0.0	1.0.0.0	Canada	N/A
49	N/A	Executable	a0a3b7d3a7aa48eb b7f638cb65810433 d6f51e72	c95be3b51632de94 22be5855f4876bd9	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	Venezuela	N/A
50	N/A	Executable	951e1a7912e3019d 8e96ecf9098ff879 0dc98385	c2be33709a42b54a f6dd938eec6f337f	Heur.Suspici ous	No	1, 0, 48, 05	1, 0, 48, 05	Internal Submission	N/A
51	N/A	Executable	a2fb28cbe6b7940c 9178c8dc4f0c8f8a 4b906c1b	3d8478922f2a95c5 a5bf60a9a0f6795a	Unclassified Malware	No	N/A	N/A	United States	N/A
52	N/A	Executable	ab046fe7eef893f2 9c61a49cf4c10b7e 7b7f8307	9737be52a0a59af8 7711f01772f09000	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	185.104.253.51/32	N/A
53	N/A	Executable	95aa3f3cce088673 777a11ea768a25aa 59130737	70653f3c8823a093 f434124604062e65	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	Indonesia	N/A
54	N/A	Executable	42c26766d16cb9c2 1c3a95bac84b88bc 1469d7c5	a8caf03b50c424e9 639580cdcc28507b	Heur.Suspici ous	No	1, 0, 0, 1	1, 0, 0, 1	Internal Submission	N/A
55	N/A	Executable	253d0eaf957524a1 01ac4a07ed7bec5c 0896197d	c242eeff0c2f1e0b f6531079b74b10bb	Unclassified Malware	No	0.0.0.0	0.0.0.0	Internal Submission	N/A
56	Microsoft Corporation	Executable	b46d8a51291311f4 ca7ea729a9c536d0 c83f36ea	03a67bcddc372d97 37d5a716d110dbf5	Unclassified Malware	No	3.1.2.1	3.1.2.1	Russian Federation	N/A
57	Microsoft	Executable	4b1a7c231b397de4 fa925af4e9bd0cba e9b1f3ad	830c07447ce1b227 fa937bf96898c799	TrojWare.Win 32.VB.OSKB	No	1.00	1.00	Venezuela	N/A
58	µßµµ	Executable	4e755fda05a7e5d2 f246f746d21ddb1e 1ab890a8	05a31eaadbb3b3ae 810d7415cffda041	Unclassified Malware	No	6.1.5.2	7.6.2.3	United Kingdom	N/A
59	Auto Debug System	Executable	9e6ee262006c3cab 0857bfa1ff020212 b5ebebe4	7facf547115b145b c20adf9f2e939147	TrojWare.Win 32.Buzus.rfg w	No	1, 1, 1, 10	1, 1, 1, 10	Russian Federation	N/A
60	N/A	Executable	5fda9be06756e6ed 0141ac8417fa3ff5 010c8fcd	7b992936a199e917 d565a38b4f4e530f	TrojWare.MSI L.Kryptik.ES	No	N/A	N/A	United Kingdom	N/A
61	N/A	Executable	01b095c0de85bee7 7c1272be45c0cf29 1bbc6145	7ee3e9ca68a3487d d68f983867c76a5d	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	Philippines	N/A
62	Tencent	Executable	054841d53f269a96 94655af8cc463fa5 1c6f15f6	9aa8dbf276d35593 dfd1b36b22c95c17	TrojWare.Win 32.Magania.~ AAD	No	1, 57, 1961, 0	1, 57, 1961, 0	Internal Submission	N/A
63	Microsoft	Executable	0c761a14f6755b97 ba5639e0cdd3f470 3b28f621	77cc3f852dfa0244 190626bc8c6e91ea	TrojWare.Win 32.VB.OSKB	No	1.00	1.00	Philippines	N/A
64	N/A	Executable	c83a914988115bb4 a2f5a41f7ac929b4 15a4faaf	fafc44ccfb015a9f 53e5c93e2861e197	Unclassified Malware	No	N/A	N/A	Internal Submission	N/A
65	N/A	Executable	02c900a4492e55a3 0503ea7fe4fa2336 0fcc63db	70817e13029001ab 63a7c0027a4aaecd	TrojWare.Win 32.Packed.PN C	No	N/A	N/A	Internal Submission	N/A
66	N/A	Executable	120a2146a9f78a19 8e8dfc0f817d771f a94bdeb8	31e2ef53c6ec0a88 3b9121a1eda3931e	TrojWare.Win 32.Magania.~ AAD	No	N/A	N/A	Internal Submission	N/A
67	N/A	Executable	69b790920dc5b9ab c5decc25d754d84d 7cce8d3d	b858e9b1f80c285d 0cf7689f54d21b24	Backdoor.Win 32.RmtSvc.as d	No	N/A	N/A	Internal Submission	N/A
68	SkhEayqmyP	Executable	ef8bf0f188778c8a 7314d73edf9e1d77 35191a67	869ef4c63be3dd01 cde9c9c91b4d889e	Unclassified Malware	No	7.12.0082	7.12.0082	Internal Submission	N/A

1 2 3...17

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Safe Entries

First Seen: 06 May 2008 at 1:41 pm

No.	Company	File Type	SHA1	MD5	Digitally Signed	File Version	Product Version	Submitted From
1	N/A	Executable	a802bd37b91accba 45391bfd50b337bb 15d44efb	7bef0e87abecbe18 e50835c0839906db	No	N/A	N/A	Internal Submission
2	Microsoft Corporation	Executable	da0ff4006859a758 0aba81f486f692de ad2014fe	8f078ae4ed187aaa bc0a305146de6716	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Internal Submission
3	Microsoft Corporation	Executable	8fbf73dbc557be21 bc4b229d67c1f94d 84a253ff	a22d7b3594c381ef b3395a072725fe95	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Internal Submission
4	N/A	Executable	95d4bcbf60a3a489 0858c7c39faaaa83 ee569c8b	9ea1560c138be592 e5a38f46689916e3	No	N/A	N/A	Internal Submission
5	N/A	Executable	7f6bbc2631938496 74021e1add533a96 5002bcf5	37a3c03034e0db21 bd11248f728c0a16	No	3, 3, 6, 1	N/A	Internal Submission
6	Microsoft Corporation	Executable	6d43a102a1646197 85ed33ad87cb59ec 3f047ce5	dda2d46da1f0bd25 d6eb0194cb3ab3e4	No	5.2.3790.3 959 (srv03_sp2 _rtm.07021 6-1710)	5.2.3790.3 959	Internal Submission
7	N/A	Executable	1239bbd299df3675 33f479a851e3a029 f76b3308	d582a51cf51bd619 bab6aa8ae2ed7428	No	3, 3, 6, 1	N/A	Internal Submission

1 2

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Malware Search Engine

How to Remove “svchost.exe”

What is Svchost.exe?

How to find System is affected by Svchost.exe malware

How to remove the svchost.exe file from system using Comodo Antivirus?