一、手工清除SVCHOST.EXE病毒

查看：svchost.exe进程是什么

在开始菜单的运行中输入【shū rù】cmd，出现命令【lìng】行提👤示【shì】，输入【shū rù】命⏱令【lìng】“tasklist /svc >c:\1.txt”（例如：C:\Documents and Settings\Administrator>tasklist /svc >c:\1.txt），就会在【jiù huì zài】🍷C盘根目录生成1.txt文件，打开1.txt可以看【kě yǐ kàn】到如下【dào rú xià】内容：
查找🌖svchost.exe的PID值和服🎶务名称【wù míng chēng】➖。
******************************************************************************
图像名                       PID 服务                                        
========================= ====== =============================================
System Idle Process            0 暂缺【zàn quē】🤞                                        
System                         4 暂缺【zàn quē】🤞                                        
smss.exe                    1168 暂缺【zàn quē】🤞                                        
csrss.exe                   1228 暂缺【zàn quē】🤞                                        
winlogon.exe                1260 暂缺【zàn quē】🤞                                        
services.exe                1308 Eventlog, PlugPlay                          
lsass.exe                   1320 PolicyAgent, ProtectedStorage, SamSs        
ibmpmsvc.exe                1484 IBMPMSVC                                    
ati2evxx.exe                1520 Ati HotKey Poller                           
svchost.exe                 1544 DcomLaunch, TermService                     
svchost.exe                 1684 RpcSs                                       
svchost.exe                  380 AudioSrv, BITS, Browser, CryptSvc, Dhcp,    
                                 EventSystem, FastUserSwitchingCompatibility,
                                 helpsvc, lanmanserver, lanmanworkstation,   
                                 Netman, Nla, RasMan, Schedule, seclogon,    
                                 SENS, SharedAccess, ShellHWDetection,       
                                 TapiSrv, Themes, TrkWks, W32Time, winmgmt,  
                                 wscsvc, wuauserv, WZCSVC                    
btwdins.exe                  420 btwdins                                     
ati2evxx.exe                 456 暂缺【zàn quē】🤞                                        
EvtEng.exe                   624 EvtEng                                      
S24EvMon.exe                 812 S24EventMonitor                             
svchost.exe           &nbsp