Virus Alert – SVHOST.EXE

Svchost.exe is a valid and necessary Windows file. Svhost.exe (without the c) is a malicious file associated with a number of viruses. It can bypass your ZoneAlarm firewall and is known to both send and receive information via the Internet. This is most likely done via IRC (Internet Relay Chat) connection.

We'd recommend removing this file using WinPatrol. First kill it in "Active Tasks" then remove it in "Startup Programs". if you see references to FireDaemon, kill that as well. We'd also recommend running a complete system scan with an up-to-date antivirus program.

Below is a listing of viruses this file is known to install with. In each case, the link will get you additional info and removal instructions:

Backdoor.Socksbot - http://securityresponse.symantec.com/avcenter/venc/data/backdoor.socksbot.html

BAT.Boohoo.Worm - http://securityresponse.symantec.com/avcenter/venc/data/bat.boohoo.worm.html

W32.Mydoom.I@mm - http://securityresponse.symantec.com/avcenter/venc/data/w32.mydoom.i@mm.html

W32.Randex.R - http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.r.html

Backdoor.IRC.Flood.G - http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.flood.g.html

W32.Xabot.Worm - http://securityresponse.symantec.com/avcenter/venc/data/w32.xabot.worm.html.

Virus

Remove