Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: scvhost.eve - process or virus

19 Oct 2013   #1

Windows 7 Home Premium 64 bit
scvhost.eve - process or virus

I have run different online scanners as well as my Norton AV, Malwarebytes, and Defender, and am fairly confident I am virus free. However, when going through the Norton Log, I came across numerous instances of where it blocked scvhost from accessing different processes. I downloaded UniBlues Process QuickLinks, to help decypher what process is what, and saw that for svchost.exe it can either be a legitimate process, or about 3 or 4 different Trojans. How on earth do you tell the legit processes apart from the virus? I understand that svchost process is needed to launch .dll files, and is legit, but can't find any info on how to tell a legit instance of it from a virus; other than understanding that enabling heuristic detection on Norton analyzes how something is running (which I always keep cranked up to High, or agressive)

Thanks for helping me understand this! ;-)

My System SpecsSystem Spec
19 Oct 2013   #2

Windows 7 Pro 64 bit

Instances of svchost.exe located in the windows\system32 folder will be legitimate. Elsewhere probably malware. You can determine this by adding the "command line" column in Task Manager, details tab. Don't confuse svchost.exe with scvhost.exe which would usually be malware. The name similarity is deliberately intended to cause confusion.
My System SpecsSystem Spec
19 Oct 2013   #3
Microsoft MVP

Vista, Windows7, Mint Mate, Zorin, Windows 8

The svchost.exe itself is no virus. If anything, Norton may tag a .dll running under the svchost.exe. I have, however, never seen a .dll that was found to be a virus.

You may get more insight if you run Process Explorer and find out which .dlls are running (right click on the svchost.exe in question and go to Properties > Services tag).
My System SpecsSystem Spec

20 Oct 2013   #4
A Guy

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x64 SP1

You might like this little program calles svchost Viewer. It will shwo you the PID of each running instance, and what processes are running under it

svchost viewer - Home

Clicking on each child process will give you a description. A Guy
My System SpecsSystem Spec

 scvhost.eve - process or virus

Thread Tools

Similar help and support threads
Thread Forum
TAP provider v9 Virus/Malware (can't find source file/removal process)
So I don't know how or when this thing got on my computer- I have both nod32 9 and malware bytes premium on my computer and have scanned with both. They usually find anything that would be even the smallest threat to my system before it becomes a problem. But now, I am dealing with a virus/malware...
General Discussion
scvhost.exe virus
I have a virus in the System32 directory called svchost.exe Avast says it's trying to connect to an URL and blocking it but the message keeps popping up I am now trying to download Malwarebytes Anti-Malware to remove it but every time I try to download something it's failing because apparently...
General Discussion
Scvhost exe using too much ram
Titel says all. Schvost exe is using too much physical memory and i need help to fix this. It uses over 150K Kb of memory. Please help me
Performance & Maintenance
scvhost process
svchost.exe process has no services running in the task manager that I can tell but is using 110,336K memory isn't this odd?
Performance & Maintenance
scvhost virus
My brother is having problems with a scvhost virus. His anti virus keeps popping up telling him of the threat, but running the anti virus doesn't find anything. Same with Microsoft Essentials and Spyware software. MSE also pops up warning of the threat, but again doesn't remove it. The virus...
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 00:23.
Twitter Facebook Google+