HockeyMom wrote:
[Quoted Text] > I have not seen them myself because they happen at 1AM and 2AM, but > because of the timing I am assuming (dangerous) that they are related to > task > scheduler. I have schedules that run at those times. This is all they > gave me to go on: > > C:\Windows\System32\SVC Host.EXE > > I minimized a black field pop-up that appeared on the master with the > above label at a little past 1am, 11/24. It appeared to be running on a > timer, in as much as time notations in it were advancing. > > This was repeated on a smaller black field pop-up with the same label at > 2am. This pop-up had static values, with no evidence of advancing timers.
If you typed the name of the executable *exactly* as it really is, then your computer is infected. The real name of the file is svchost.exe.
If it wasn't a typo, go through these general malware removal steps systematically - http://www.elephantboycomputers.com/page2.html#Removing_Malware
If you haven't seen the popup boxes yourself, then who has? Who is the mysterious "they gave me to go on"?
More details about the system, the problem, what you see scheduled in Task Scheduler, etc. will get you more focused help.
Malke -- MS-MVP Elephant Boy Computers - Don't Panic! FAQ - http://www.elephantboycomputers.com/#FAQ
|