RE: svchost

Tech-Archive recommends: Fix windows errors by optimizing your registry



Hi Mark,
Per the KB article, Svchost.exe is a generic host process name for services
that run from dynamic-link libraries (DLLs).
Also, it consist of many services and you can have up to 6 svchost.exe
running in the background.

If you do your safe Hex and clean up then don't worry. Sometimes windows
updates can make this process surge in CPU usage but not all the time just
when the Platform updating from windows server!

To make sure all clean run a thorough/Complete (not a quick one) scan for
malware and viruses.

Malwarebytes© Corporation - Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

HTH,
nass
---
http://www.nasstec.co.uk

"Hairy" wrote:

Thanks for the reply nass,
Not really any problem, just worried that something is going on that I don't
understand, and eating up my very limited dialup bandwitdh. I have heard
about svchost being used by malware. I use NetLimiter, and I see that svchost
is running a lot. Just wondering if there is any way to see what svchost is
doing, and or limit its opeerations.


"nass" wrote:



"Hairy" wrote:

Which board woud be the best to get info about svchost?

Hi Hairy Mark,

Why you are asking about and what your problem?

Do you get this application error message?
svchost.exe - Application Error

The instruction at "0x6f8916e2" referenced memory at "0x019d005c". The
memory could not be "written".
Click on OK to terminate the program
Click on Cancel to debug the program.

This can be due to one of many reasons:
1- Bad RAM stick
2- RootKit/Viral malware installed.
3- Memory (due to a bad apps/progs written)

A description of Svchost.exe in Windows XP Professional Edition
http://support.microsoft.com/kb/314056

HTH,
nass
--
http://www.nasstec.co.uk

.

Relevant Pages

  • Re: Zone Alarm popup
    ... `Zone alarm pop up security alert` Server Program saying ... Generic Host Process for Win32 Servers is trying to act as a server ... I can't answer for the OP, but my AZ popup states it's "svchost.exe", not the malware version "sychost.exe", so I suppose that is what the OP meant to state too. ... It's entirely possible that I am not understanding what you posted, but if it was a solution to the OP's ZA popup problem (to be clear; ZA not remembering that I selected it to rember to allow the Generic Host Process for the svchost.exe file to access the internet) and not involving removal of the ZA program or some malware file that I don't have, then it's still not the solution I'm looking for. ...
    (microsoft.public.windowsxp.general)
  • RE: Remote...trying to access Microsoft Generic Host Process for Win32
    ... > Norton Anti Virus 2004. ... Service Host –Generic Host Process for Win32 Services. ... SVCHOST is a generic process which acts as a host ... Windows XP Professional and Windows 2003 you can find out what DLL-based ...
    (microsoft.public.security)
  • Re: none of you smart fellers heard about GHP?
    ... GENERIC HOST PROCESS FOR WIN32. ... All MS-MVP Sites. ... For quite a few people it's by installing Messenger Plus, whose ads for malware don't identify the malware as such and try to convince you that you owe it to the author. ... Don't ever do a "default" install of anything. ...
    (microsoft.public.security)
  • Re: svchost.exe errors
    ... >will longer launch. ... >Generic Host Process for Win32 Services encountered a problem and needed to ... SVCHost is as its full name applies just an interface program used to ...
    (microsoft.public.windowsxp.general)
  • Re: Generic Host
    ... There are typically 3 or 4 Generic Host Processes running at any one time, and taken together, they host dozens of processes, any one of which could be causing your problem. ... The first thing to suspect is one of the many types of malicious software, known collectively as malware. ... Everything was ok until today I was just browsing the web and got the error that the Generic Host process for Win 32 had encountered a problem and needed to close. ... "Leonard Grey" wrote: ...
    (microsoft.public.windowsxp.perform_maintain)