Hi there.
This is a serious question for programmers and other interested parties.

Recently I experienced a general slowing down of my machine. I use Norton 360 V3 But I realized that this program was not finding the malware in the registry.

After some investigation, I realized that I needed some extra help.
I downloaded Malwarebytes ; CCleaner and I already had a StormSoft Registry Cleaner. Well, the Stomsoft registry cleaner world not run,and I guess this was because whatever malware was still in the machine was fighting this program to load (and still won’t run).

I installed and ram Malwarebytes three or four times and ws pleased with this program’s abilities. Well done Malwarebytes. Then I ran CCleaner a few times, and this also seemed to work quite well, too.

Now my question is this… I know that svchost.exe is supposed to be in C:\Windows\system32\svchost.exe (01/19/2008) attribute ‘a’
But I have also discovered it in …..
C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3865ad364e35_6.0.6001.18000_none_b5bb59a1054dbde5\svchost.exe ***(DATED 05/29/2008) Attribute ‘a’ ***

C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3865ad364e35_6.0.6000.18000_none_b5bb59a1054dbde5\svchost.exe ***(DATED 11/02/2006) Attribute ‘a’ ***

Apart from the dates, the only other difference is 6000. rather than 6001 as with the later one above this.

Should this be here? Should I delete these two files and what do they do?

Any help in understanding this issue would be most appreciated.
Victor
I am weary of downloading SpiceWorks . Mainly because so many free (let’s fix your PC programs) downloads actually put malware unto your computer. Your thoughts would be helpful.

Tagged with:

Filed under: Registry Cleaners