SVCHost Error

[Busyhandz]

For the last several months evertime I turn on my computer, I get a pop-up window telling me that 'an Application for Downloading has Stopped.'If I click on 'more', it tells me that the program name is SVCHost and the particular error is BEX. It then closes all instances of SVCHost. This, I verified, thru Task Manager- no SVCHost is running on my loggin, or other users. What to do? I can't find an information about this on the Web.

[Tripredacus]

This sounds like a worm is infecting your PC. A common trick by them is to run as a service through svchost.exe so that they do not readily appear in Task Manager. However, for some reason people who write worms/trojans seem to not do it right, and svchost will crash if their code makes an error.

[Busyhandz]

This sounds like a worm is infecting your PC. A common trick by them is to run as a service through svchost.exe so that they do not readily appear in Task Manager. However, for some reason people who write worms/trojans seem to not do it right, and svchost will crash if their code makes an error.

I use Trend Micro. Trend Micro has quarantined a file named, ‘SVCHost.exe that resides/resided at C:\Windows.

If I start Task Manager, there is no instance of any SVCHost.exe running in processes under my logon, which is an Administrator account. However if I click on ‘Other Users’ there are multiple files of SVCHost.exe running, none of which are a high memmory usage.

C:\Windows\ shows no file

C:\Windows\System 32 does show a SVCHost.exe.

Can I simply copy the file SVCHost.exe from C:\Windows\Windows 32\ over to C:\Windows, and then deleting the quarantined file, thus making everything happy again?

[Tripredacus]

No. SVCHOST is only supposed to be in System32. The one in C:\Windows is a virus of some sort. And yes, SVCHOST runs under the SYSTEM account, which is why it only shows up if you check the box.

Try the Anti-Malware toolkit to remove your infection. In the mean time I am moving this topic.