4 Objects from HijackScan that i'm unsure of

[MagicHunter]

Hello,

 

Just wondering, i saw a lot of people have some of these in their Hijack Scan. Are these safe to be removed?

 

 

All 4 of these are marked as "Nasty" on http://www.hijackthis.de/

 

O23 - Service: Windows Media Center Service Launcher (ehstart) - Unknown - %windir%\system32\svchost.exe

O23 - Service: Group Policy Client (gpsvc) - Unknown - %windir%\system32\svchost.exe

O23 - Service: Quality Windows Audio Video Experience (QWAVE) - Unknown - %windir%\system32\svchost.exe

O23 - Service: Secondary Logon (seclogon) - Unknown - %windir%\system32\svchost.exe

 

 

Cheers.

[333halfevil]

Upload the file" %windir%\system32\svchost.exe" to VirusTotal. But in my honest opinion I do not think it is a virus, merely an error in the analysis of the log.

[Azziz]

Hi

 

 

svchost.exe is svchost signifiant Service Host Process for windows xp, there are some correctives via windows update.

 

you can’t launch a .dll file directly from Windows, it has to be loaded up from a running executable (.exe). Thus the svchost.exe process was born

[ha14]

Hi

 

 

If you want to see what services are being hosted by a particular svchost.exe instance, you can use the tasklist command from the command prompt in order to see the list of services. windows xp an vista:

 

tasklist /SVC

 

Svchost.exe is known to cause high CPU usage problems? There is a very useful free Microsoft (originally Sysinternals) tool called Process Explorer, that gives you detailed information for each running process. All you need to do is download it and click the .exe file - no installation is required.

 

If infected then you need trojan remover or simply combofix.

[MagicHunter]

Hi guys,

 

Thanx for the replies ^^

 

I manage to use my friends laptop again today and uploaded to Virustotal

http://www.virustotal.com/analisis/d4f79d7bc639fe86ac68961e6273836b9d7af491773fd054395b33d317017beb-1256191556

 

Seems completely clean~

 

 

Cheers.

[333halfevil]

That is because it is :smile: