suspicious file in system32

[christopher.2312]

hi, i use zonealarm pro wich ask for permission every time a exe is run. a
few days ago it asked me about a file named svchost.exe and i alowed it then
my pc restarted suddenly, and after boot i got this error report "windows has
recovered from fatal error" and "your pc has restarted to prevent data loss".
today i denied this file and i got the same thing.
pls help

 

[sgopus]

boot to last known good configuration

 

[1PW]

hi, I use zonealarm pro which ask for permission every time a exe is run. a
few days ago it asked me about a file named svchost.exe and I allowed it then
my pc restarted suddenly, and after boot I got this error report "windows has
recovered from fatal error" and "your pc has restarted to prevent data loss".
today i denied this file and i got the same thing.
pls help

Hello Christopher:

A genuine copy of Microsoft's svchost.exe is an essential part of your
operating system. At any given time, six or more copies may be active
in a busy and well functioning system.

<http://support.microsoft.com/kb/314056>

Sometimes, svchost.exe facilitates some application's access to the
Internet and is therefor allowed.

The possibility that your hard disk drive may have become corrupted or
infected is possible. Run all your updated antimalware scans along with
chkdsk and system file checker (SFC).

<http://support.microsoft.com/kb/310747>

<http://support.microsoft.com/kb/315265>

Pete

 

[PA Bear [MS MVP]]

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting the requested logs
in an appropriate forum.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or other appropriate forums.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.