How to Remove svchost.exe Virus | svchost.exe Malware Removal

What is Svchost.exe?

The svchost.exe is an executable file of Microsoft Windows and is tagged as a Generic Host Process for Win32 Services. This is an important Windows file and it is used to load the required DLL files that are used with Microsoft Windows and Windows programs that run on your computer. Some Malware often uses a process by the name “svchost.exe” to mimic the windows process.

The orginal file is located only in c:\windows\system32 or c:\winnt\system32 depending on versions of Windows OS. If the file that is located in any other location, then we can conclude that the system is infected with malware.

svchost.exe provides a service which is used by Windows Defender. There are multiple instances provided by svchost.exe which are used for many operations. One instance may provide single operation and other instance provide several service to windows.To know the service which are currently running. Go to Task Manager and click Processes tab. Click Show all process and Right-click an instance of svchost.exe, and then click Go to Service(s). The services associated with the process are highlighted on the Services tab.

Affected OS/Platform: Windows

How to find System is affected by Svchost.exe malware

Step 1: Open the Task Manager with a CTRL+ALT+DEL key combination

Step 2: Right click on the svchost.exe and Select Open File Location The Open File Location will be showing you the path where the file is actually located c:\windows\system32 or c:\winnt\system32.

If it gets open in some other folder or file location, then it is sure that the system is infected with svchost.exe malware.

How to remove the svchost.exe virus from the system using Comodo Antivirus?

Download our award-winning Comodo Antivirus software

Installation configuration frames will be displayed. Select the configuration you would like to apply

Select Customize Configuration option and arrange installers, configuration, and file location.

Once the Installation is Finished, restart your PC.

Comodo Internet Security starts to update the software for virus protection. It takes sometime to get updated.

After the update, a Quick scan is executed.

If threats are found upon completion of scanning, you will be prompted with an alert screen.

The Antivirus Software will clean all malware including svchost.exe virus.

Windows OS PC Security Softwares:

Related Resources:

Website Malware Directory Resources:

Malware Entries

First Seen: 06 February 2009 at 11:36 pm

No.	Company	File Type	SHA1	MD5	Malware Name	Digitally Signed	File Version	Product Version	Submitted From	Malware Behavior
1	Acoustica Inc.	Executable	1c80c1a7be5dd3b7 1e8205166d57f17a 7fc118af	4c9a59bcdb40e39f 0c72820f381b9ab2	TrojWare.Win 32.Injector. ADKK	No	2, 0, 18, 0	2, 0, 18, 0	United Kingdom	N/A
2	1994	Executable	037eb1e7089e828a 3b9b45e032cff7b7 7ddf4a62	76f973ac86143f85 916d041389984e39	TrojWare.Win 32.Miser.I	No	2.04.0003	2.04.0003	10.224.1.116/32	N/A
3	N/A	Executable	31478e6e996cb2f7 f9b0d4c2ce9ac088 28b0a2cb	e6d6685365d60593 5189f6512e03b19d	Application. Win32.Adware .RuKoma.A	Yes	N/A	N/A	185.150.154.131/32	N/A
4	Tencent	Executable	f904baffceb56a4d cbae23788066e290 963a380d	fa508241066ee437 5d8bcbe6b843baa5	TrojWare.Win 32.Magania.~ AAD	No	1, 57, 1961, 0	1, 57, 1961, 0	Internal Submission	N/A
5	N/A	Executable	0d2d9664df8ece53 bf037549123ffb5b 5a387d8a	ca40516db1c91895 64538a862bc7d17a	Application. Win32.Monito r.Spy.~OL	No	N/A	N/A	Internal Submission	N/A
6	NULL	Executable	049c34d55d31e987 a204f536174b21a8 d5911601	f7f724517b39e2af 1fc8263d60afa177	Unclassified Malware	No	1.0.0.0	1.0.0.0	Internal Submission	N/A
7	Tencent	Executable	78bb1482113a230e dbf74c2fa68ebb3a 7d1bdb29	e6f22990f0bd3f45 e123bba6baf75b8f	TrojWare.Win 32.Magania.~ AAD	No	1, 57, 1961, 0	1, 57, 1961, 0	Internal Submission	N/A
8	Microsoft Corporation	Executable	1996590bd966cb29 27ed76553176bb8b 615697d8	487c06e7ad972cb7 9c1f3d6a9bf3ac82	MalCrypt.Ind us!	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Russian Federation	N/A
9	N/A	Executable	7dfb9c5e528971a4 990f669aba7f9037 212a3afd	6d38927335771d51 ed8a3e8de2e422c4	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	Morocco	N/A
10	Macromedia, Inc.	Executable	d4e5eb07b999ca47 cc3c1c8d465bb087 8a48b851	0fe56475f9e3e27b 330096616e2ee9c1	Virus.Win32. Ramnit.K	No	7,0,14,0	7,0,14,0	Philippines	N/A
11	N/A	Executable	3eaba5d1946eb224 316a8d4c0bfff798 a5458b62	5c02a45aae15d246 a9fab7aef100e042	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	United Kingdom	N/A
12	N/A	Executable	a5fff2a5f8f5f188 b42ad708954dab11 7246511c	5533abf652f1022f 9ac8c8e818a89351	Heur.Suspici ous	No	N/A	N/A	United States	N/A
13	Tencent	Executable	8ec5556385246bf7 2249a2e06e7a2cb0 f4003f5c	70f101c523266235 5a91660a28651af4	TrojWare.Win 32.Zegost.IN A	No	1, 57, 1961, 0	1, 57, 1961, 0	Internal Submission	N/A
14	Microsoft	Executable	1270252a30701d7a 2460a824aea7eacb e289b952	098f4872a41640c7 5203752b40c43144	TrojWare.Win 32.VB.OSKB	No	1.00	1.00	United Kingdom	N/A
15	N/A	Executable	253894860de0301d 4e956ce1b7029143 cf16a267	5d3da46a1a40ba1b aff24c14af2a26e3	Win32.Jeefo. A	No	N/A	N/A	Poland	N/A
16	Cronosoft	Executable	c5a66c82ab502bdf 6322b18a2487435b 5338ee1d	7cc569dcc12f69f9 1dfc2af73c33966b	Virus.Win32. Virut.Ce	No	10.10	10.10	Trinidad and Tobago	N/A
17	N/A	Executable	35e74d5b7ce1da6c a2b96d76dee0b11a d02cb1fb	b1cac1ada45559a8 56fe89864323880d	TrojWare.Win 32.TrojanDro pper.Binder. v	No	N/A	N/A	91.239.95.28/32	N/A
18	N/A	Executable	c89f560e6247cac9 57cad5ab8a20e384 e0e0a486	26530bab1c72d62c 4852534344b9da68	Win32.Mkar.E	No	N/A	N/A	Ukraine	N/A
19	Microsoft Corporation	Executable	d1ea74bd828b04ce 996a33f98f447aab bbf17549	9683c568accde386 3f96d1db678c3358	Virus.Win32. Expiro.CG	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	159.146.10.141/32	N/A
20	Microsoft Corporation	Executable	21e9e0bb48e67062 599f4a28d300994f 3150ec0c	17750b217ee388cc 128b7b990da4368f	TrojWare.Win 32.Spy.Banke r.Gen	No	N/A	1.0.0.0	Internal Submission	N/A
21	N/A	Executable	8d19bcb33d1eb98c 4dc64d899932a2ad dc90497c	228eb050c0d28e16 c068c23018f64cee	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	181.61.132.10/32	N/A
22	Microsoft	Executable	d30926742eca837d 7d3548f3ceebd14e 6a36c45e	16c9ff30d2ed6ef5 374c6a1e27750a3b	TrojWare.Win 32.UMal.vbco z	No	1.0.0.0	1.0.0.0	10.165.10.222/32	N/A
23	Microsoft	Executable	1c50f88b7a908e6b 4dc2dba0e5730edc 41ce12c1	0dc0959829130835 f93278b35709b102	TrojWare.Win 32.VB.OSKB	No	1.00	1.00	Colombia	N/A
24	N/A	Executable	1073e3e27151607a 134ca276ec3c3901 6243d233	eb02107195f2a9e7 212f262c799b9c1d	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	Venezuela	N/A
25	NULL	Executable	0df0281e26c13dc9 f1e6caed997baefa 73f58a6f	16129e19a5ae41f7 ccc8f8cb188784a0	Unclassified Malware	No	2.03.0001	2.03.0001	10.224.1.116/32	N/A
26	N/A	Executable	1c0f0079c329a054 51cc69cb9dac6eee 82974050	0b6bbdb71222a8f0 8b2b82578b8bdcd2	Unclassified Malware	No	N/A	N/A	Internal Submission	N/A
27	N/A	Executable	9df863a9d3c677fe 3f709d96d350c695 ac27a52e	64769bf8fdadf44e 973ca85e782a4a24	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	103.78.219.3/32	N/A
28	N/A	Executable	61341a56fc064997 4fa3691aacee697d 932d893a	f96c091d5168e981 94389348adf592ef	TrojWare.Win 32.TrojanDro pper.Binder. v	No	N/A	N/A	91.239.95.28/32	N/A
29	Microsoft	Executable	1bc143a5692e7550 789dbf3ca2927edd 60d55ffa	801ca5b4abf56111 26bfa1af148ab7be	TrojWare.Win 32.VB.OSKB	No	1.00	1.00	Peru	N/A
30	Microsoft Corporati逧n	Executable	308aa5261be1874a 322f55d726515d75 767c8aec	5a4747fc864d58d6 3e06e24b00ef690d	TrojWare.Win 32.Kryptik.K AZ	No	5.2.3790.4 566 (srv03_sp2 _qfe.09080 5-1438)	5.2.3790.4 566	Internal Submission	N/A
31	Redondo	Executable	1ea5a0bb45789de5 1fd39fe1257767ce 1b022ede	c4b6d916790a34ee f6c71cfea4526d8f	TrojWare.Win 32.TrojanDro pper.Agent.V CC	No	3.45.0005	3.45.0005	Internal Submission	N/A
32	N/A	Executable	f2c47a958917412b 11852e4ce9491070 276c7fde	602eba2385f9682a b48559cad8d8a17e	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	Philippines	N/A
33	N/A	Executable	6a20309ea0e39d38 b3c4d4b41608f7cb 869fa2dd	98616c4c953d5f67 e11a617970b777ec	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	Morocco	N/A
34	N/A	Executable	492bae04efd7049a 1dce8fdc5c616451 40ed202e	209ed86b9d6182ec 8ea95a331a02c4b3	Backdoor.Win 32.Amtar.vna	No	N/A	N/A	Brazil	N/A
35	Microsoft	Executable	95a2e40e36307194 7922c5963ae375a4 84f81269	7721ea3dae61a394 69d6a6f2e506685a	TrojWare.Win 32.Kryptik.G T	No	1.00	1.00	Vietnam	N/A
36	N/A	Executable	c6f294debfb4323e eeee4e0e38f37d01 3e10bd88	d42493817963dc46 ad318949fcccf002	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	Venezuela	N/A
37	Tencent	Executable	42b319cf1ac38fc9 4159cd9636732e48 38314e2d	368fdb173eff682d 56a34c894014fc78	TrojWare.Win 32.Magania.~ AAD	No	1, 57, 1961, 0	1, 57, 1961, 0	Internal Submission	N/A
38	N/A	Executable	7ffeb1bcb3fcc8b9 efc00b72343b1cc3 5a54aae5	b9379f7a5b6e94d6 2a62635fbed4e118	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	Pakistan	N/A
39	N/A	Executable	edddac854b4b482e 190521cb05d8f3b8 c81a080b	6f4fcabfeb69997b f31e5fa382fad9a4	Worm.Win32.D elf.nj	No	N/A	N/A	China	N/A
40	Windows (R) Win 7 DDK provider	Executable	6439827587255651 66eaa02af1c52e1a 3c7424ef	f105258798f10531 e2df2a81f67a9d76	TrojWare.Win 32.Trojan.Ag ent.Gen	No	9.3.7800.2 1715	9.3.7800.2 1715	Brazil	N/A
41	NULL	Executable	42c26766d16cb9c2 1c3a95bac84b88bc 1469d7c5	a8caf03b50c424e9 639580cdcc28507b	Heur.Suspici ous	No	1, 0, 0, 1	1, 0, 0, 1	Internal Submission	N/A
42	N/A	Executable	484e004faf68965c 2e46ab92924a8593 f70a1496	3635790791dca6ad bdf464dcac14c480	TrojWare.Win 32.ButeRat.P P	No	N/A	N/A	Internal Submission	N/A
43	NULL	Executable	253d0eaf957524a1 01ac4a07ed7bec5c 0896197d	c242eeff0c2f1e0b f6531079b74b10bb	Unclassified Malware	No	0.0.0.0	0.0.0.0	Internal Submission	N/A
44	NULL	Executable	951e1a7912e3019d 8e96ecf9098ff879 0dc98385	c2be33709a42b54a f6dd938eec6f337f	Heur.Suspici ous	No	1, 0, 48, 05	1, 0, 48, 05	Internal Submission	N/A
45	N/A	Executable	a0a3b7d3a7aa48eb b7f638cb65810433 d6f51e72	c95be3b51632de94 22be5855f4876bd9	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	Venezuela	N/A
46	N/A	Executable	a2fb28cbe6b7940c 9178c8dc4f0c8f8a 4b906c1b	3d8478922f2a95c5 a5bf60a9a0f6795a	Unclassified Malware	No	N/A	N/A	United States	N/A
47	µßµµ	Executable	4e755fda05a7e5d2 f246f746d21ddb1e 1ab890a8	05a31eaadbb3b3ae 810d7415cffda041	Unclassified Malware	No	6.1.5.2	7.6.2.3	United Kingdom	N/A
48	Auto Debug System	Executable	9e6ee262006c3cab 0857bfa1ff020212 b5ebebe4	7facf547115b145b c20adf9f2e939147	TrojWare.Win 32.Buzus.rfg w	No	1, 1, 1, 10	1, 1, 1, 10	Russian Federation	N/A
49	Lionel Playworld	Executable	bba051a418568988 415ccf5fcc51a138 b48526ae	d8efcc460403997c 2b5bc549e1e68a4c	TrojWare.Win 32.Agent.ife ty	No	76.8.1.1	76.8.1.1	10.165.10.222/32	N/A
50	Microsoft	Executable	b07ebfc3f6a9577e 62c7804ea2134302 bb074288	42fe092e97c8ac0a c3fa39fcc3e71a74	TrojWare.Win 32.VB.OSKB	No	1.00	1.00	181.64.57.247/32	N/A
51	N/A	Executable	5fda9be06756e6ed 0141ac8417fa3ff5 010c8fcd	7b992936a199e917 d565a38b4f4e530f	TrojWare.MSI L.Kryptik.ES	No	N/A	N/A	United Kingdom	N/A
52	N/A	Executable	7c1c520f255b61b5 cdb127bc5d51b77b dda4bdf5	e92a9602e5a62064 14f6763c3ba8305f	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	Venezuela	N/A
53	N/A	Executable	c3a6d66f9272bada b2b7948cb7c26622 0f1006b7	fc6ad96d59cc177c c6fc25c263c11d86	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	Vietnam	N/A
54	NULL	Executable	6af5a9e1cff63240 7262750b8b08e482 6b8dd0ed	be8fd6e6a370aa78 f9f7dd419af1e68a	Heur.Suspici ous	No	1.00	1.00	Internal Submission	N/A
55	Tencent	Executable	054841d53f269a96 94655af8cc463fa5 1c6f15f6	9aa8dbf276d35593 dfd1b36b22c95c17	TrojWare.Win 32.Magania.~ AAD	No	1, 57, 1961, 0	1, 57, 1961, 0	Internal Submission	N/A
56	Microsoft	Executable	007e36a53a498318 c7a9485f87ea2681 d257f837	6590ad094a6c37f4 eae18c7257be8736	TrojWare.Win 32.VB.OSKB	No	1.00	1.00	United Kingdom	N/A
57	N/A	Executable	c83a914988115bb4 a2f5a41f7ac929b4 15a4faaf	fafc44ccfb015a9f 53e5c93e2861e197	Unclassified Malware	No	N/A	N/A	Internal Submission	N/A
58	N/A	Executable	02c900a4492e55a3 0503ea7fe4fa2336 0fcc63db	70817e13029001ab 63a7c0027a4aaecd	TrojWare.Win 32.Packed.PN C	No	N/A	N/A	Internal Submission	N/A
59	N/A	Executable	120a2146a9f78a19 8e8dfc0f817d771f a94bdeb8	31e2ef53c6ec0a88 3b9121a1eda3931e	TrojWare.Win 32.Magania.~ AAD	No	N/A	N/A	Internal Submission	N/A
60	N/A	Executable	227df47dbb3c48a6 ba945faa17861194 6cb35eb4	993837f7c329519c bc134b742407214b	Unclassified Malware	No	N/A	N/A	162.255.24.42/32	N/A
61	N/A	Executable	69b790920dc5b9ab c5decc25d754d84d 7cce8d3d	b858e9b1f80c285d 0cf7689f54d21b24	Backdoor.Win 32.RmtSvc.as d	No	N/A	N/A	Internal Submission	N/A
62	SkhEayqmyP	Executable	ef8bf0f188778c8a 7314d73edf9e1d77 35191a67	869ef4c63be3dd01 cde9c9c91b4d889e	Unclassified Malware	No	7.12.0082	7.12.0082	Internal Submission	N/A
63	N/A	Executable	68093b872693d5a0 0a08aacad61b4ced d719a628	cea8e22c37c297c4 7d7b8fc0a14fe403	TrojWare.Win 32.VB.QOTY	No	1.00	1.00	Venezuela	N/A

1 2 3...16

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Safe Entries

First Seen: 06 May 2008 at 1:41 pm

No.	Company	File Type	SHA1	MD5	Digitally Signed	File Version	Product Version	Submitted From
1	N/A	Executable	a802bd37b91accba 45391bfd50b337bb 15d44efb	7bef0e87abecbe18 e50835c0839906db	No	N/A	N/A	Internal Submission
2	Microsoft Corporation	Executable	da0ff4006859a758 0aba81f486f692de ad2014fe	8f078ae4ed187aaa bc0a305146de6716	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Internal Submission
3	Microsoft Corporation	Executable	8fbf73dbc557be21 bc4b229d67c1f94d 84a253ff	a22d7b3594c381ef b3395a072725fe95	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Internal Submission
4	N/A	Executable	95d4bcbf60a3a489 0858c7c39faaaa83 ee569c8b	9ea1560c138be592 e5a38f46689916e3	No	N/A	N/A	Internal Submission
5	N/A	Executable	7f6bbc2631938496 74021e1add533a96 5002bcf5	37a3c03034e0db21 bd11248f728c0a16	No	3, 3, 6, 1	N/A	Internal Submission
6	Microsoft Corporation	Executable	6d43a102a1646197 85ed33ad87cb59ec 3f047ce5	dda2d46da1f0bd25 d6eb0194cb3ab3e4	No	5.2.3790.3 959 (srv03_sp2 _rtm.07021 6-1710)	5.2.3790.3 959	Internal Submission
7	N/A	Executable	1239bbd299df3675 33f479a851e3a029 f76b3308	d582a51cf51bd619 bab6aa8ae2ed7428	No	3, 3, 6, 1	N/A	Internal Submission

1 2

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Malware Search Engine

How to Remove “svchost.exe”

What is Svchost.exe?

How to find System is affected by Svchost.exe malware

How to remove the svchost.exe virus from the system using Comodo Antivirus?