Re: svchost.exe using up the cpu

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Bruce Chambers (bchambers_at_nospamcableone.net)
Date: 02/21/04


Date: Fri, 20 Feb 2004 18:03:05 -0700

Greetings --

    It's perfectly normal to have several instances of Svchost.exe
running simultaneously.

A Description of Svchost.exe in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q314056

    However, if Svchost.exe is using a large portion of your CPU
cycles, it has most likely been "hijacked" by a worm or Trojan. Have
you tried using a decent antivirus application with the most
currently-available virus definition files? A strong candidate would
be W32.Welchia.Worm.

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

  Because many of the newer viruses and worms can disable antivirus
applications whose definitions weren't up-to-date, try using one or
more of the free on-line scanners to double-check your system.

Trend Micro - Free online virus Scan
http://housecall.trendmicro.com/

McAfee Security - FreeScan
http://www.mcafee.com/myapps/mfs/default.asp

Symantec Security Check
http://security.symantec.com/ssc/home.asp

Bruce Chambers

--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html
You can have peace.  Or you can have freedom.  Don't ever count on 
having both at once. -- RAH
"mac davis" <mac.davis@comcast.net> wrote in message 
news:cj5d305u2gg80spp74jn24n2mn8vcjm4vn@4ax.com...
>I upgraded from win2000 to xppro and since then (2 days ago) my hard
> drive has run almost constantly..
> I tracked it to svchosat.exe in the task manager/processes..
> it is always active, ranging from 40 to 100% of cpu usage...
> I've tried disabling both anti virus and firewall, not difference...
> I know that svchost is supposed to be working in the background, but
> this is unacceptable...
>
> I ran the compatibility program before install, so my McAfee 
> antivirus
> and firewall have been updated...
> neither McAfee or Norton found any virus on the network, and I 
> removed
> all the spyware with Spybot before and after installation..
>
> Any advice here would be greatly appreciated... it's driving me 
> crazy,
> between not having any cpu available and hearing the hard drive
> running off and on constantly..
>
>
>
>
> Mac 


Relevant Pages

  • Re: HOW TO REMOVE THE RPC VIRUS
    ... antivirus might have prevented you from being infected in the first ... or being infected from the next worm that comes along. ... > you should be provided free internet service for the ... >>infected with the msblast virus, ...
    (microsoft.public.inetserver.iis.security)
  • AVG antivirus not detecting Gaobot
    ... >copies of the virus (detected by Norton, McAfee, eTrust ... However the full McAfee antivirus does find ... >Gaobot exploits the same vulnerability as Sasser and is ...
    (microsoft.public.windowsxp.general)
  • Re: worm datum.a
    ... the virus database at www.trendmicro.com also shows nothing about ... > I didnt pick this up on my networks antivirus software, ... > the false alarm. ... >>> winnt\mxvsd.avb (worm datum.a) ...
    (microsoft.public.security)
  • Re: doom virus help me
    ... worm. ... But double check your antivirus software's website. ... >> my anti virus detected a file that contained the doom ... >If you visit your antivirus companies website, ...
    (microsoft.public.security.virus)
  • Re: Why cant ISPs stop spam/virus ?!
    ... A virus program cannot possibly identify and deal with a virus ... >> email and McAfee immediately spotted it as a generic virus. ... Here's what McAfee say about detection of Swen: ... This worm is detected as "virus or variant New ...
    (comp.os.linux.misc)