Scvhost...... Is it vital...?

[Gishank]

Well... My anti-virus removed two scvhost.exe files for being Trojan BackDoors.... Yet, now when i boot i get about the same error 7 times saying scvhost couldn't be found, blah blah blah....

I'm not an expert, but is it a vital process to make my pc run efficently....



(Oddly, without those 2 files, my pc is using 50% less CPU... =O)

[Alex]

Scvhost.exe is a virus.
It looks a lot like 'svchost.exe', which is required, but scvhost is definitely a virus.
It's an Agobot-S virus.

If I were you, I'd look for a startup registry manager. Perhaps scvhost is in your registry set as a programme to start up when your computer starts.
If so, you just remove it.

[Gishank]

Riight, so its not a trojan horse?.... Just proves how great my anti-virus is =/ Thank you for the help Alex.

[Alex]

It is a trojan horse 'Agobot-S virus' is just the name for it. Full name: 'Agobot/Sdbot-virus'
I did some more reading, other's get errors to when deleting the files, they solved it by deleting the file out of the registry

[[FTF]Freedom]

Kaspersky FTW!!

Incidentally, not all the svchost.exe's are vital. If you're running XP Pro, open services.msc, and disable/stop any services you don't require, and you will notice in your task manager (processes tab) that a few of the svchost.exe's have disappeared.

You can do it the easy (or hard, depending how ya look at it) way and just end a few of the svchost processes in task manager, but if ya end the wrong one you'll turn off the Remote Procedure Call service (the vital one, lol), and your system will shutdown and restart....

...and there's sweet fuck all ya can do about it lol.

Give msconfig a whirl, while ur at it. Check the services tab, and check the startup tab. Many viruses (and some spyware or other malicious software) will attempt to imitate genuine windows process names. For example, I once had wuacult.exe running for a few months without realising it was a virus (too impatient to do a full scan, and can't leave AV running coz of slow pc). The real name is waucult.exe... di you notice the difference at first glance? I didn't. Clever bastards.

Anyhoo... where was I... oh yeah.... turn off all the shit ya don't need. If ya got a half-decent pc it probs won't make much difference, but it's all good for performance I spose.

[Professor Layton]

You can put your clock back

[[FTF]Freedom]

Sorry, I don't follow....?? Huh?

[Kaiden]

SVCHost.exe is a system proccess isn't it? It sometimes asks for computer access through my firewall, I grant it access, as when I started blocking it bad things started happening, such as blocking MSN, DX, I.E, and couldn't unblock without re-install.