Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


svchost.exe suspicious activity - lots of uploading...?virus??

  • Please log in to reply
1 reply to this topic

#1 str8arrow


  • Members
  • 1 posts
  • Local time:07:57 AM

Posted 02 August 2013 - 10:36 AM

Hi All,


I desperately need help! I'm running into problems with going over my monthly limit for internet access. I live alone and don't do much downloading or uploading but my system used over80G in 48 hrs...I downloaded maybe an eighth of that over a period of time. I looked into the problem. Turns out svchost.exe is uploading a LOT of content (it's downloading a lot too, and I can't figure that out either, but I know some svcs do download quite a bit).  I need to know if my computer is infected.


If I can find out what is downloading (which service) and stop it, I want to do that as well but my main issue is the ? infected-uploading issue...I DO NOT NEED a virus, don't know what to do. Please help!!


Thanks...I came across a similar post btw, but it provides four steps (some of which I have run already). I just don't know how to interpret the results of the GMER and other scans recommended so I stuck to using malwarebytes and left the rest for now until someone can help ...please!!!! I'd be grateful for someone with more experience and the ability to help.


Thanks so much,


Edited by hamluis, 02 August 2013 - 12:19 PM.
Moved from Win 7 to Am I Infected - Hamluis.

BC AdBot (Login to Remove)


#2 GodfatherKing


  • Members
  • 587 posts
  • Gender:Male
  • Local time:01:57 PM

Posted 02 August 2013 - 10:39 AM



:step1: MBAM (Malwarebytes Antimalware)


If you have a MBAM log, post it.


:step2: Running TDSSKiller to obtain log


Note: Don't cure or delete a threat, but choose skip for all instead.

  • Please download TDSSKiller from here and save it to your Desktop
  • Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters


  • In the Additional options: Check Detect TDLFS file system
  • Click Start Scan and allow the scan process to run


  • Choose for all threats to Skip for all of them.
  • Click Continue
  • Please post the TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)



:step3: ESET Online Scanner


Note: If your AV is blocking Eset online scanner, please temporarily disable your AV.


I'd like us to scan your machine with ESET OnlineScan This process may may take several hours, that is normal.

  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and » UNCHECK "Remove found threats" <== Important
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Copy and paste the information in your next reply. (If no malware was found you will not be presented with a log).
  • Click the Back button.
  • Click the Finish button.


If you have received help from me and I don't have respond to you for almost >= 3 days, send me a Private Message.  :hello:

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users