Win XP: An unknow virus is being infected my SVCHOST.EXE

Viruses and worms
1

Hi,

An unknow virus is being infected my SVCHOST.EXE! The last version of Avast (and last version of it’s virus database) din’t detect anything and I executed fixblast.exe without any success… The result is an UC at 100% at random time.

My question is: How to detect it?

Thank you for your help!

2

Submit the file to

http://www.virustotal.com/en/indexf.html

and

http://virusscan.jotti.org/

and see if it gets detected.

3

What Operating System are you using ?
How do you know your svchost.exe is infected and what detected it ?
Or is this suspicion at the 100% CPU rate ?

The svchost.exe is as its name suggests a host for other services so it may not be that which infected but rather something else using it, the trick is finding what that is. Process Explorer from sysinternals.com allows for examination of running processes and by checking that coinsurance of svchost.exe you may be able to find what is using it. However, this isn’t easy.

You might want to try an on-line scan if you find that svchost is clean in the links given by DukeNukem. On-line Virus Scanners and other useful Links Security-Ops.eu.tt

If you haven’t already got this software (freeware), download, install, update and run it, preferably in safe mode, Ewido anti-spyware If using winXP. or a-Squared free if using win98/ME.