svchost.exe being used by Trojan - can't get rid!!

[tradmusic]

Hi,

We are having a nightmare with file svchost.exe.

When we boot up our PC, svchost.exe shows several occurences in the Task
Manager. However, one in particular (the only one marked as LOCAL SERVICE),
shows a constant rise in RAM use until it finally causes the machine to
crash (because it's using 7 gazillion megs of RAM!).

We have installed:
Norton Antivirus
McAfee Antivirus
PestPatrol
Adaware
Anti-Trojan Shield

Butm despite finding one or two other things, svchost.exe seems to still
have trouble. We deleted svchost.exe but this caused Windows to stop
recognising devices, Internet etc - so we replaced it with a known "good"
svchost.exe. To our surprise (or were we really *that* surprised), the same
problem still occured.

Can anyone help, or does anyone know what this is? It is doing our heads
in!!
Does the fact that it is marked as LOCAL SERVICE have any significance? All
other occurences of svchost.exe are marked differently, and they all seem
fine.

Any help would be greatly appreciated, thank you.
Tracey.

 

[Chuck]

Hi,

We are having a nightmare with file svchost.exe.

When we boot up our PC, svchost.exe shows several occurences in the Task
Manager. However, one in particular (the only one marked as LOCAL SERVICE),
shows a constant rise in RAM use until it finally causes the machine to
crash (because it's using 7 gazillion megs of RAM!).

We have installed:
Norton Antivirus
McAfee Antivirus
PestPatrol
Adaware
Anti-Trojan Shield

Butm despite finding one or two other things, svchost.exe seems to still
have trouble. We deleted svchost.exe but this caused Windows to stop
recognising devices, Internet etc - so we replaced it with a known "good"
svchost.exe. To our surprise (or were we really *that* surprised), the same
problem still occured.

Can anyone help, or does anyone know what this is? It is doing our heads
in!!
Does the fact that it is marked as LOCAL SERVICE have any significance? All
other occurences of svchost.exe are marked differently, and they all seem
fine.

Any help would be greatly appreciated, thank you.
Tracey.

Tracey,

Svchost normally runs several occurrences. It does not, however,
normally use 7 gazillions of RAM.

You need Spybot S&D and HijackThis, and help from SWI Forums. This
article contains all the instructions you need:
http://forums.spywareinfo.com/index.php?showtopic=5187

Cheers,

Chuck
I hate spam - PLEASE get rid of the spam before emailing me!
Paranoia comes from experience - and is not necessarily a bad thing.

 

[tradmusic]

Hi.

Still struggling with this - can anyone help? Starting to get us down!

Tracey
www.tradmusic.com

 

[Kevin]

You may be able to find some help at www.blackviper.com. This guy knows his
stuff and he has a way to shut down all the unnecessary stuff running on
your XP system. He was just on The Screensavers on Tuesday. Check it out,
maybe it will help your problem.