Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: REGSRVC32, RunDLL, svchost has been infected

29 May 2018   #1
reizhu

Kalimantan Timur
 
 
REGSRVC32, RunDLL, svchost has been infected

sorry for bad tittle cause idk really know into which categories my problem, the problem is my laptop processor lately running in high peak even though im just listening to music or browsing, after searching in process explorer i found it was REGSRVC32, RunDLL and svchost everytime i try to delete the service its keep changing its name and have no clue what background program running to run this service, i try Malwarebytes but its not detected any problem, im using laptop HP 14-r017tx, if u guys can't really see whats written in SS here it is
"C:\Windows\syswow64\svchost.exe -o xmr-us-east1.nanopool.org:14444 -u 49ptuU9Ktvr6rBkdmrsxdwiSR5WpViAkCXSzcAYWNmXcSZRv37GjwMBNzR7sZE3qBDTnwF9LZNKA8Er2JBiGcKjS6sPaYxY -p x -k --donate-level=1 --max-cpu-usage=100 --cpu-priority 3"
thanks in advance for any assistance




Attached Thumbnails
REGSRVC32, RunDLL, svchost has been infected-proces-explorer-properties.jpg  
My System SpecsSystem Spec
.
30 May 2018   #2
samuria

win 8 32 bit
 
 

Welcome to the forum. svhost is a tool that runs other software so its likely its not infected just being used. download Download RKill run it what it does is kill all things running that are not oficial windows once you reboot it ends. see what the log says its stopped.
check msconfig and task shedule stop anything thats funny or is in the rkill logs you should then be able to delete the files
My System SpecsSystem Spec
30 May 2018   #3
reizhu

Kalimantan Timur
 
 

thanks for advice, Rkill not detected anything but i did find the problem in task scheduler once again thanks man
My System SpecsSystem Spec
.

Reply

 REGSRVC32, RunDLL, svchost has been infected




Thread Tools




Similar help and support threads
Thread Forum
SvcHost.exe (the real one) infected with trojan, how to remove???
The SvcHost.exe file in the System32 folder has been infected with a trojan, How do I remove it?? I am very scared and don't want to lose everything on my computer. I'm not very familiar with virus removal at all so I don't know what (if anything??) can be done about this. My antivirus, AVG free...
System Security
RunDLL problem...!
Hi, I have this problem from yesterday. When I start my laptop, 3 dialog boxes appears with that message: http://i.imgur.com/WE0chFL.jpg Can u help me, how can I solve this problem...?
General Discussion
Its rundll error
Hi, a few minutes ago i turn of my system protection and delete few things.Now when i restart my audio error.Its '0x8000FFFF'And almost all system changing option were disabled including program.Worst my product id were not available!Some of the error..%windir%\\system32\\rundll32.exehelp fixing...
BSOD Help and Support
svchost.exe infected badly...
Hi all... Well i have ran full virus scans with the follow anti-virus/anti-malware program. ESET Smart Security Kaspkery Internet Security Avira Premium Security Suite Malwarebytes' Anti Malware Hitman PRO And did some cleaning with ccleaner,etc..
System Security
Fix RunDLL
I'm so sorry before if I wrong :o i just wanna say how to fix this problem http://i46.tinypic.com/fupg9i.jpg
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 03:40.
Twitter Facebook Google+