Virus? Help needed

[Baha]

So recently, I have been on my computer and its been running really slow. I looked in my task manager and discovered tons of svchost.exe running and stealing my memory . I attempted to do 2 virus scans and I found nothing using AVG and malwarebytes. This has been happening for about 2 weeks and before this about half of the processes in my task manager were running but it seemed to double...

pic : http://imageshack.us/photo/my-images/841/virusa.jpg/

[MentaL]

[George SS]

Svchost.exe is a important process of Microsoft Windows , usually dealing with network. There are however possibilities of having one infected too , running besides original ones.

How to recognize it ? :

If one of the svchost.exe 's run from C:\Windows there are 59% chances that this file is infected , this file is not part of Microsoft Windows , usually its hidden , and there are no extra info about the file ( such as creator , date , etc.) this svchost.exe is capable of registering itself into running services seamlesly.

If one of the svchost.exe's run from one of the SUB directories in C:\Windows , chances are 79% that it's an infected file , this is not part of Microsoft Windows , it's hidden , and there are no extra info about the file ( such as creator , date , etc.) this svchost.exe is capable of infecting other files , mess with your internet connection , and can take care of your applications too.

the list can go on with all the files in your pc.

Now , what I recommend you to do is get Process Explorer , its a tiny thingy made by Microsoft ages ago , it will tell you the exact location of the process , as well the company who made it and date. In case there is no date and company , and the file is in a suspect place , such as Documents And Settings , program files , c:\windows , etc. you can just stop it , and delete it manually. Oh , and it also shows hidden processes , such that can be hidden from Task manager..

Otherwise having 4588345 svchost.exe open is perfectly normal , and that because you have applications that need it , such as updates , downloads , chrome , IE , games online , etc.

[Rishwin]

^nice pasta

Did you scan in safe mode?

[Monolith]

First download and run TDSSKILLER from Kaspersky. It's completely free...autoupdates..and does an excellent job of killing rooted viruses that are in startup and drivers.

Download Here

If the problem persists...as stated run your virus scanner in safe mode and under the Administrator profile...not just a profile thats an administrator...the actual hidden Admin profile in Windows.

[Baha]

Not safe mode
TDSSKiller - Found nothing
AVG - Found nothing
Malware bytes - Found nothing

Ran rkill.exe

TDSSKiller - Found 3 threats, deleted
Malware bytes - Found nothing
AVG - Found nothing

Safe mode
Malware bytes - Found nothing
TDSSKiller - Found nothing

However they're all still svchost.exe in my task manager, going to test FPS rate in league of legends

[Monolith]

Are you running these things on an Admin enabled profile or THE real Admin profile?

[Baha]

The real admin account

[belwixsugu]

might be spyware or malware that can't be detected by some antivirus, try do download this ComboFix and run.remember do not close this program, it will automatically close. recommend to create System Restore point. read at the site about how to use it.