Jump to content

Search the Community

Showing results for tags 'svchost'.



More search options

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Windows Malware Removal Help & Support
    • Mac Malware Removal Help & Support
    • Mobile Malware Removal Help & Support
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes 3 Support Forum
    • Malwarebytes for Mac Support Forum
    • Malwarebytes for Android Support Forum
    • Malwarebytes for iOS Support
    • False Positives
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Endpoint Protection
    • Malwarebytes Incident Response (includes Breach Remediation)
    • Malwarebytes Endpoint Security
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
    • Report Scam Phone Numbers
  • General
    • General Chat
    • Forums Announcements & Feedback

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Location


Interests

Found 15 results

  1. I recently had gotten a lot of malware onto my PC. I cleared most of it using Malwarebytes, Hitman and other antivirus software. I however, still have some issues. svchost.exe now consumes more than 50% of my CPU usage and I get these notifications from Malwarebytes that I have attached to this post. I have heard that information from my PC could be getting leaked/stolen. Help would be much appreciated! Thank you.
  2. Hi sorry if this is the wrong spot to post. My question is svchost located in syswow64 a virus. Because everything I'm seeing is telling me it's a virus. Bitdefender and Malwarebytes didn't detect anything. So to be safe I did a factory reset on my hard drive and it is still there. Is this a legitimate file. I have a 64 bit operating system.
  3. Hey guys, I need help removing what I think is an SvcHost virus. I recently started having adware tabs pop up on my PC and then after searching for solutions found that whenever I opened a Malwarebytes (or similar website) page, my browser would immediately crash. This happens in Chrome, IE, and Tor. I found this thread which seems to be a very similar virus and after reading a few others, I downloaded MalwareBytes, Rkill, adwcleaner, FRST64, tdsskiller, and aswMBR. (I'm typing this on my other PC btw. Downloaded the files on it and emailed them in a .RAR to my desktop.) This lead to me finding a few things: -I restarted my PC and immediately opened the Task manager to find an unnamed task using 50+% of my CPU. If I look at its properties, it says it's Svchost and is located in SysWOW64 where it takes up 44kb. -I can kill this process, but it doesn't stop the virus from opening apps or closing browsers. -I do not have permission to delete the application from SysWOW64. I need "TrustedInstaller" permission, which I know can be a legit Windows thing. -The MB3-setup exe will not run. -If I run Rkill then attempt to run the MB3 exe, it logs the following: -I deleted the INetCache folder which appeared to be empty. Nothing changed. -adwcleaner and FRST64 won't run. -tdsskiller doesn't find anything -I ran aswMBR and my PC blue-screened with the following support info This is where I am currently and I would appreciate any help anyone can give me.
  4. Well, i think im dead now I was surfing the net and I dont know how but i get a virus, this is what happends: -First i cant search on any web browser certain words, like "malware" or "rogue" or "FarBar" it closes at and instant with any errors displayed -Randomly chrome opens showing publicity -And i cant open certain things in my computer like CMD (how can i write in this post if this forum have the word "malware" in the title? I dont know, something that i do, like turns off the virus and after some time or a restart it turns on again) 24 hours ago i tried a lot of things that i find in the internet and something work for a little time then it activates again Also i noticed that a process without name is consuming 60% of cpu, i search it on details and is svchost i tried some of your solutions that i saw in this short time and im sending you the files that you asked in that posts (English is no my main languague) zoek-results.log Addition.txt FRST.txt
  5. Hi , yesterday ... i found that my pc is slow .. and my download speed went at 50 kb/s .... i went on task manager.. and i saw a task ... with the svchost image ... but with no name ... i did some research ... and i checked if is from system32... i clicked open file location .. and that opened me windows/ temp ... i deleted it ... i stopped it from the services tab on task manager ... and then i did an restart .... but still found that my pc is slow ... i tried a scan with malwarebytes. .. he found me around 20 malwares .. i deleted them.. but still slow ... ( forget to metion ... before to start seing slowness .. i downloaded a program .... ) Edit : ... i did some system Restore Thing .. and i tried 2 times .. and everytime said ... that something from system registry .. cant be changed .... i went there by myslef ... but i didnt found nothing that would harm my pc Edit 2 : Forgot To metion .. that first .. i saw pop-ups ... .. and from that i was 100% sure that i have malwares... pop-ups ... on everything, when i opened opera , when i clicked , when i was openning a new tab ... i did an reinstall to opera first .. but ... nothing
  6. Hello all, I have been reading through the forum and following the advice of the forum moderators I have decided to create my own topic. Earlier today I upgraded the free version of Malwarebytes to the 14-day premium version. Since the download has been completed, I have been getting non-stop warnings for websites blocked that are being detected as malicious. The ports are constantly changing, but the common theme is that they all come from the same IP address (37.48.125.112), are all outbound, and originate from svchost.exe I have downloaded and ran the programs listed here https://www.bleepingcomputer.com/virus-removal/fix-malicious-web-site-blocked-alert-from-svchost.exe/ but the updates are still occurring. I have also ran Farbar Recovery Scan Tool, and I have attached my FRST and Addition txt files to this post here. If there is anything else I need to add please let me know. FRST.txt Addition.txt
  7. Hello i have svchost on system32 and i know this shouldnt be like that. My cpu going high all the time. (And my ping is always high, i dont know if it has to do with it) I wanted to ask how can u remove the svchost because it might be a little virus.. Thank you,
  8. A few days ago Malawarebytes Premium began blocking this outbound connection (see .png): Domain: drivethelife.com IP Address: 54.183.15.164 Port: 50817 Type: Outbound File: C:\Windows\System32\svchost.exe I checked processes running and found four files with this file name (see .png). Any suggestions on how to remove the correct file and get rid of this malware?
  9. Sometimes your program shows me the notification a connection is was blocked by it. The program spams the notification. If It starts, It would not stop for a period of some minutes. I have tried to look at your log files and detect the process what does this. Unfortunately, the program doesn't report process's Id, only the Process's file, which is, in my case, svchost.exe Please help me remove this spyware (I pretty sure it is a spyware). Thanks in Advance, Mizaro
  10. After having stupidly installed a bundle programs full of malware and adware, I think all that is left are these websites that keep getting blocked by malwarebytes.. The"website blocked" report identifies them as outbound connections, file: C:\\Windows\System32\svchost.exe Could you advise on getting rid of them? Thanks, a
  11. Malwarebytes keeps popping that a website is blocked: SVCHOST.EXE port 68 to 255.255.255.255. "websiteData" : { "ip" : "255.255.255.255", "isInbound" : false, "port" : 68, "processPath" : "C:\\Windows\\System32\\svchost.exe", "url" : "" }
  12. I think MBAM just got me a false positive result.After a threat scan it found that the registry \HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run|Windows Update with data on C:\Users\wcwra\AppData\Local\Microsoft Windows|svchost.exe is a backdoor.bot,I went to the folder and it was empty,just a svchost.exe.config. backdoor.txt
  13. I have been getting svchost.exe being blocked by MB for about a week or so, was on vacation so did not have time to deal with until now. Attached are the files from the scans as per the instructions. Please advise, my last go around in the forums nobody responded. MB Scan.txt Addition.txt FRST.txt New Blocked.txt Protection Event.txt Blocked 1.txt Blocked 2.txt
  14. I keep receiving a popup from MB that tells me that svchost.exe is being blocked trying to connect to a website. It lists the IP address as 255.255.255.255 Attached is one of many that have been blocked, all from the same IP and port. I have read a couple of forum posts, but each seem to be specific to their issue, so i started a new topic. I am currently running the MB rootkit scan to see if there are any results. I have also downloaded AdwCleaner to my desktop, but I have not run the setup yet. Please advise... Protection Event.txt
  15. Hi, I downloaded a mallicous file which installed several things on my computer in Russian language. There was a 'hijack' file, 'Chromium', 'Smart application controller' and some other malware which I luckily could remove (think so) with malwarebytes. Google Chrome in particular was kind of hacked and still has some issues while opening, like russian pop-ups coming on screen. I think Malwarebytes has already removed the greatest part, but I still find some random russian files or links on my computer which weren't detected by Malware nor Bullguard (my antivirus). Also all my Word/Excel/Powerpoint files are converted to ENC-files. Is this some one-time problem or will it reoccur in the future? The greatest issue opening Google Chrome is still the 'svchost.exe' which gets blocked by Malware. I think there is still some malware disguised in the 'svchost.exe' file. I read it would be then situated in the 'Temp' folder which isn't in my case, it's situated in the System32 folder. I hope you could help me solve this problem... Thank you in advance
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.