You have told him to check if it's a virus but you haven't really given DETAILED instructions. If he deletes this file himself he can cause a huge amount of damage. also there are quite a few different types of malware related to SVChost
see here for a few of them:http://www.processlibrary.com/search/?q=svchost.exe
As you can see the first in the list shows that svchost.exe is legitimate and is used to control alot of things in windows such some of the visual affect which is why feenixb1o7 complains that when he ends the process he loses some of the visual affects. Also you can see that the list includes quite a few infections including bitfrose, trojan.downloaders and backdoor trojans. The removal instructions for these are different and you can't really give a blanket fix for all of them. There is also the possibility that if it is a trojan downloader then he may have multiple infections on his system which will need to be fixed.
And if you know about REG EDIT you can also remove the entries made by that virus..or just try "msconfig" at run and see if u find any suspected file running at start up...
even though you have said to use regedit if he knows what he is doing. By the sound of the origional post it sounds like he doesn't and even suggesting reg edit is very dangerous.
I have a good experience dealing with more than 10,000 of these types ...have fun
Any chance of seeing any links to these logs?