sychost and svchost ??
 

I'm getting conflicting info off Google the legitimate application, if it is legit. What's a safe test?

svchost is the legit process, there are multiple instances of svchost on windows machines since they run network services. Never seen sychost before.

This appears to be a virus: http://www.liutilities.com/products/wintaskspro/processlibrary/sychost/

http://www.auditmypc.com/process/sychost.asp

http://www.processlibrary.com/directory/files/sychost/

Looks a bit nasty:(

LEOX.B VIRUS

I saw the exact same 3 pages. Two or maybe all of them offered a "free scan" but it's a program. I didn't want to download anything until I checked. I don't think I have anything bad at this point, but the legit svchost.exe was using a ton of my processor when I booted this afternoon.
I get wary when my cooling fan is in 5th gear. :)

no, svchost.exe is part of windows. I promise.

You'll normally see the svchost process several times if you do a ctrl-alt-del.

svchost.exe is expected.

I wouldn't ignore it. You anti virus should be picking up on this. Have you run a full system scan recently? Maybe let it chug overnight and see what it comes up with.

Discovered: March 20, 2004
Updated: March 22, 2004 03:15:18 PM PST
Type: Worm
Infection Length: 59,665 bytes
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP


W32.HLLW.Leox.B is a variant of W32.HLLW.Leox. It is a worm that sends a URL using QQ, a Chinese instant messaging program. The URL points to a site that hosts the worm.

The worm also emails password and equipment information from the game, Legend of Mir, to an email address at tom.com.


ProtectionVirus Definitions (LiveUpdate™ Weekly) March 22, 2004
Virus Definitions (Intelligent Updater) March 22, 2004
Threat Assessment Level: Low
Number of Infections: 0 - 49
Number of Sites: 0 - 2
Geographical Distribution: Low
Threat Containment: Easy
Removal: Moderate
Damage Level: Low
Releases Confidential Info: Steals various passwords and system information.
Distribution Level: Medium
Target of Infection: Spreads via the QQ instant messaging program.
1 year ago

Run a virus scan. I use AVGFree with great success. Seems like it's perfectly likely that someone nasty is hiding under the name "svchost.exe" to make you think it's legit.