My comp seems to be infected with some malware. The location is in windows\system32\svchost.exe and the pain in the arse is “x2x3.biz/crypt_uk.exe
My pc fan seemed to be making more noise than usual and I assumed vent was clogged. Its not.
In task manager various windows\system32\svchost.exe, seem to open randomly, and seem to randomly suck up cpu, 60% to 80% ish. Occasionally for a few moments 100% (hence the fan sounding louder).
I use avast anti virus and although it detects and prevents the url from connecting, it can’t get rid of it.
Neither can malebytes anti malware, superantispyware, spyboot search and destroy and razorrootkit. For good measure cc cleaner and eusing registry cleaner.
A google search finds nothing for “x2x3.biz/crypt_uk.exe”.
A google search for infected windows\system32\scvchost.exe does not come up with anything useful either.
Operating system windows xp, all updates current.
As anyone had this infection and if so how did you get rid of it, or does anyone have any idea where I go from here?
Its not causing any problems ie slowing machine down etc, just makes the fan louder for several secs every 10 minutes or so, while it attempts to connect.
I suspect the best option is to reformat and load windows again but I would sooner avoid doing that.
Any help/suggestions would be appreciated
pc help
- JollyGreen
- Posts: 2047
- Joined: Sat Mar 21, 2009 10:06 am
Are you getting the actual names mixed up?
svchost.exe = Normal windows procedure and is required
scvhost.exe = virus
If you have scvhost.exe then read this scvhost.exe removal
Try this site as I use this and it's very good. Check if they have a free removal tool Spysweeper
svchost.exe = Normal windows procedure and is required
scvhost.exe = virus

If you have scvhost.exe then read this scvhost.exe removal
Try this site as I use this and it's very good. Check if they have a free removal tool Spysweeper
Last edited by JollyGreen on Tue Jun 22, 2010 1:45 pm, edited 1 time in total.
thanks jollygreen.
spysweeper detected it and removed it, although i had to take out a years subscription. a small price to pay
as the machine is now nice and quite and not using excessive amounts of cpu.
by the way svchost was correct. it was not scvhost.
thanks for advice appreciated.
spysweeper detected it and removed it, although i had to take out a years subscription. a small price to pay
as the machine is now nice and quite and not using excessive amounts of cpu.
by the way svchost was correct. it was not scvhost.
thanks for advice appreciated.