Asked By
myrna hatch
30 points
N/A
Posted on - 03/09/2012
Could you please explain what svchost.exe trojan is? Is it harmful or just a not problem thing?
What is svchost.exe trojan in networks
Hey Myrna!
You asked a good question about svchost.exe.
Often when we press Alt+Ctrl+Del we go to Task Manager. Here we can see many Svchost.exe files.
Now the question is what is Svchost.exe?
We can define it in three ways.
1. Basically it is a process which generates Trojan. Trojan is a virus which can allow the intruders to enter in your PC or Laptop and steal all the important information like your passwords, your interbanking, and your more personal details. Trojan must be removed from your system because it's a security risk. There are many softwares in the market that can fix it.
2. It is process that is related to all MS service Host Process, which monitors all your input (all inputs you enter from your keyboard like websites, passwords, logins etc.). There can be a misuse of this information by sending it to third party.
3. Svchost.exe installed by a attacker for the malicious purpose that can allow the access of attacker to your PC or Laptop.
What is svchost.exe trojan in networks
I think I can relate to your topic. When my computer was infected before I noticed a different file running in the background. I usually check the files running in the background with the Windows Task Manager and that is where I see it. But the difference is that, it is spelled differently. I’m familiar with the “svchost.exe” file running in the background and I know this is not a virus. The other file I saw was spelled as “scvhost.exe” and this is the virus that my antivirus got removed.
Normally, “svchost.exe” runs different processes under Microsoft Windows Services and most of them use the username “SYSTEM”, “NETWORK SERVICE”, or “LOCAL SERVICE”. But not all processes under “SYSTEM” are services. If you suspect that the “svchost.exe” file that runs in the background of your computer is not the legit file from Windows but a virus running silently, you need to check the exact location of that file. There are Trojan viruses that disguise themselves exactly as the legit “svchost.exe” file. The legit “svchost.exe” file is located in C:WINDOWSsystem32. If the “svchost.exe” file is located in a different folder or location then you are probably infected with a Trojan. Download the latest version of Norton Internet Security from Norton™ by Symantec | Downloads | Product Downloads to remove the Trojan “svchost.exe”.
