Yes, you can have more than one legit svchost running, but usually they are faily small. Watch specifically for any extremely large instances of the process. Those are clearly suspicious.
But Hijackthis and SuperAntiSpyware are two of your best friends, SuperAntiSpyware is well worth paying for after the 30 day trial is over and last I remember HiJackThis was free. Just be careful since it's a Windows system file/process you are messing with. Don't delete anything you're not certain of can be deleted.
__________________
----------------------------------------------------------------------------------
The truth is not affected by the beliefs, or doubts, of the majority.
|