how I check my installed svchost files if any is a virus or keylogger?

Question

HI, I have kaspersky but like all anti virus it may miss a file and I have 14 services of svchost listed on my task manager, how to check if any of them is a virus or keylogger ?

thanks

Answer 1

It's not unusual to have more than a dozen svchost running at once. If every service ran from the same instance of svchost and one crashed it would bring the rest with it. If you're curious, run the following from a command prompt:

tasklist /SVC

Answer 2

You don't know if they're viruses, but if Kaspersky says everything's fine, you're probably worried about nothing.

Use Process Explorer from SysInternals, and hover your mouse over each instance of svchost to see which services they are running, just to be on the safe side.

Answer 3

A good malware scanner (MBAM, or SAS) will scan memory space and running processes to find any nefarious program running inside of svchost.