Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: scvhost.eve - process or virus

19 Oct 2013   #1
joecrashed

Windows 7 Home Premium 64 bit
 
 
scvhost.eve - process or virus

I have run different online scanners as well as my Norton AV, Malwarebytes, and Defender, and am fairly confident I am virus free. However, when going through the Norton Log, I came across numerous instances of where it blocked scvhost from accessing different processes. I downloaded UniBlues Process QuickLinks, to help decypher what process is what, and saw that for svchost.exe it can either be a legitimate process, or about 3 or 4 different Trojans. How on earth do you tell the legit processes apart from the virus? I understand that svchost process is needed to launch .dll files, and is legit, but can't find any info on how to tell a legit instance of it from a virus; other than understanding that enabling heuristic detection on Norton analyzes how something is running (which I always keep cranked up to High, or agressive)

Thanks for helping me understand this! ;-)


My System SpecsSystem Spec
.

19 Oct 2013   #2
LMiller7

Windows 7 Home Premium 32 bit
 
 

Instances of svchost.exe located in the windows\system32 folder will be legitimate. Elsewhere probably malware. You can determine this by adding the "command line" column in Task Manager, details tab. Don't confuse svchost.exe with scvhost.exe which would usually be malware. The name similarity is deliberately intended to cause confusion.
My System SpecsSystem Spec
19 Oct 2013   #3
whs
Microsoft MVP

Vista, Windows7, Mint Mate, Zorin, Windows 8
 
 

The svchost.exe itself is no virus. If anything, Norton may tag a .dll running under the svchost.exe. I have, however, never seen a .dll that was found to be a virus.

You may get more insight if you run Process Explorer and find out which .dlls are running (right click on the svchost.exe in question and go to Properties > Services tag).
My System SpecsSystem Spec
.


20 Oct 2013   #4
A Guy

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x64 SP1
 
 

You might like this little program calles svchost Viewer. It will shwo you the PID of each running instance, and what processes are running under it

svchost viewer - Home

Clicking on each child process will give you a description. A Guy
My System SpecsSystem Spec
Reply

 scvhost.eve - process or virus




Thread Tools





Similar help and support threads
Thread Forum
scvhost.exe virus
I have a virus in the System32 directory called svchost.exe Avast says it's trying to connect to an URL and blocking it but the message keeps popping up I am now trying to download Malwarebytes Anti-Malware to remove it but every time I try to download something it's failing because apparently...
General Discussion
Windows 7, scvhost.exe hogging up ram.
Recently I was getting physical memory issues on Windows 7 32Bit since it only allows 3.5gb of ram but I have 6gbs. Where as scvhost.exe was hogging about 1,500,000KB's which is about 1.5GB's of memory most of the time which ate up a lot of physical memory. I decided to reformat my computer to...
Performance & Maintenance
Scvhost exe using too much ram
Titel says all. Schvost exe is using too much physical memory and i need help to fix this. It uses over 150K Kb of memory. Please help me
Performance & Maintenance
Serious UpLoading through scvhost.exe
I noticed a thread back in June where someoen had a problem with downloading through scvhost.exe. My problem is Uploading whan I am on the net. There can be as many as 80-100 open ports all connected through scvhost.exe and as "HOST" names. I have loaded all makes of Spyware/Malware programmes and...
General Discussion
scvhost process
svchost.exe process has no services running in the task manager that I can tell but is using 110,336K memory isn't this odd?
Performance & Maintenance
scvhost virus
My brother is having problems with a scvhost virus. His anti virus keeps popping up telling him of the threat, but running the anti virus doesn't find anything. Same with Microsoft Essentials and Spyware software. MSE also pops up warning of the threat, but again doesn't remove it. The virus...
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 00:29.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App