An old Virus does not mean that it is ITW. And the names SVSHOST and SVHOST are often used by Malware, so it does not look so obviouse like Malware, because WinXP/2000(?) uses a file called SVCHOST. Also there are many Variants of one Malware.