How to remove the winsvchost virus
Most antivirus programs identify winsvchost.exe as malware, e.g. Kaspersky identifies it as Trojan.Win32.Genome.amomz or not-a-virus:RiskTool.Win32.BitCoinMiner.ccl, and TrendMicro identifies it as TROJ_SPNR.0CC513 or TROJ_SPNR.07LC12.
The free file information forum can help you find out how to remove it. If you know more about this file, please leave a comment or a hint for other users.
Winsvchost.exe file information
Description: winsvchost.exe is located in a subfolder of "C:\Documents and Settings".
Known file sizes on Windows 7/XP are 386,560 bytes (37% of all occurrences), 129,024 bytes, 431,104 bytes or 592,384 bytes.
It is a file without information about the developer of this file. The program has no visible window. The winsvchost.exe file is not a Windows core file. Winsvchost.exe is able to record inputs and monitor applications. Therefore the technical security rating is 63% dangerous, however also read the users reviews.
Recommended: Identify winsvchost.exe related errors
If winsvchost.exe is located in a subfolder of the "My Files" folder, the security rating is 45% dangerous. The file size is 67,072 bytes (50% of all occurrences), 267,776 bytes or 291,840 bytes. The program is not visible. The winsvchost.exe file is not a Windows core file.
If winsvchost.exe is located in the folder C:\Windows, the security rating is 88% dangerous. The file size is 7,680 bytes (50% of all occurrences) or 58,880 bytes. The application has no file description. The file is located in the Windows folder, but it is not a Windows core file. The program has no visible window. The application is loaded during the Windows boot process (see Registry key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run). It is not a Windows system file. Winsvchost.exe is able to monitor applications.
If winsvchost.exe is located in a subfolder of "C:\Program Files", the security rating is 22% dangerous. The file size is 66,048 bytes.
Important: You should check the winsvchost.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.
Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.
Malwarebytes Anti-Malware detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.
SpeedUpMyPC scans, cleans, repairs and optimizes your computer.
tlpd.exe sushimonapi.exe winsys32.exe winsvchost.exe cma.exe cmpsie.dll repairs302972994.dll apagent.exe ntsysv.exe sshdrv66.sys darkspykernel.sys [all]