svchost - what are these services?

Question

SO I recently had what Microsoft say is the "rare" XP bug of the svchost going nuts and taking up 99% of my CPU.
I found a fix, which seems to be working, and finally manage to download something that tells me which svchost services were actually running (Tasklist).
The problem is I have no idea what most of these things are, and any attempt to Google them only gives me results of people saying they have trouble with it. Nothing that tells me what they are, or i they're good or bad.

I therefore ask you people. Below is the list of services my laptop is currently running. Can anyone tell me what the hell they are? Are there any I should really drop?

Thanks.

The full list from Tasklist is:

svchost.exe

DcomLaunch
TermService
RpcSs
AudioSrv
Browser
CryptSvc
Dhcp
ERSvc
EventSystem
FastUserSwitchingCompatibility
helpsvc
HidServ
LanmanServer
lanmanworkstation
Netman
Nla
RasMan
Schedule
seclogon
SENS
SharedAccess
ShellHWDetection
srservice
TapiSrv
Themes
TrkWks
W32Time
winmgmt
wscsvc
wuauserv
WZCSVC
WudfSvc
Dnscache
LmHosts
SSDPSRV
WebClient
BthServ
stisvc

Captain · Accepted Answer

Dude you have at least one trojan running in there its is used by russian criminals to steal BANKING information, its a keylogger that only activated when the user enters credit card details.

You need the trial version of Kasperky, because superantimalware and antimalware bytes both detect the trojan but CANT remove it, kaspersky can. nod32 can too eset security - but you wont be able to install it with that infection so use kaspersky instead - free 30 day trial.

Once cleaned up you need to go with the original disk and run sfc /scannow and do all the updates again. You then need to think about your anitvirus software and firewall. Avira would have blocked this trojan and comodo would block it trying to access the net. Avast wont install while its on there but will remove it had it been installed!

chrisjbsc · Answer

CLEANING might or might not get rid of the infection.
If it is serious, then your ONLY hope is a complete wipe the disk and re-install.

n0t4c|u3 · Answer

You are hacked.
download superantispyware portable on a different computer, disconnect the questionable computer from the internet and clean it with superantispyware.
http://portable.superantispyware.com/sassaferun.php

svchost - what are these services?

3 Answers