Windows 2000 pro - svchost.exe using 100% cpu

Anyone know how to stop svchost.exe from using 100% CPU?

[cscgal]

Aaargh - damn svchost.exe

PPL say it's Microsoft's spyware at it's best ...
anyone with any *helpful* suggestions?

[massiveinc]

This is a major problem - i agree it must have something to do with Microsoft spyware because there is no mention of it on microsoft site or mcafee - is have not been able to get rid of this virus

[caperjack]

Have you checked your computer for this virus ,I had problems and error messages pertaining to svchost and when checked i had this virus, down load the removal tool,3/4 way down this page and run it, it will check for the virus and if found remove and then take you to microshaft for the critical update .
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

[smsawyer]

wait, this is a virus? i show a couple instances of this running on my comp... is this file bad or is this file easily infected...? i'm curious now because i def have the file svchost.exe on my comp..

i don't have any viruses, none listed in the link caper supplied because i have all the latest updates, and i run antivirus software.. but is this svchost.exe program something i shouldn't have on my comp?

[caperjack]

http://support.microsoft.com/?kbid=314056
As stated in the discription its a generic name !! explains why you/we have multiple sychost.exe's on the list .

[camelNotation]

YEh I'm using xp pro and right now while I'm posting here,the cpu is using its 100%... :cheesy: it's fun you know.Especially if you run the movie @ The Italian Job@ with wmp 9.0 ,the music will be interesting to hear :mrgreen:
Well,it's normal to have multiple svchost.exe running.Someone said he ran a removal tool from symantec but didn't say the name of the tool.should I look for svchost.exe?There's nothing like that :confused: :eek: I don't think I have the virus but there should be a way to stop svchost from using 100%? :rolleyes:
ahhh...I just pressed ctrl+alt+dlt and stopped one svchost.exe except the one's on 'system' or 'network'..it works.Now the C.P.U is working only 5% and my language settting is solved!The language bar came out of nowhere and it was named as text and input services....great I can type \ easily..yahoo :)

[Vester]

I use and recommend Active Ports .The Readme states in part:Description
~~~~~~~~~~~

Active Ports - easy to use tool that enables you to monitor all open TCP/IP
and UDP ports on the local computer. Active Ports maps ports to the owning
application so you can watch which process has opened which port. It also
displays a local and remote IP address for each connection and allows you
to terminate the owning process. Active Ports can help you to detect trojans
and other malicious programs.

[cscgal]

Thanks for the 411, vester. Never heard of that program but it looks worth a look.

[camelNotation]

Hi.I'm actually using xp pro but I have the same problem too.So here's how I got rid of this problem:
Click Start > Run. (The Run dialog box appears.)
Type:

SERVICES.MSC /S

in the open line, and then click OK. (The Services window opens.)

In the right pane, locate the Remote Procedure Call (RPC) service.

--------------------------------------------------------------------------------
CAUTION: A service named Remote Procedure Call (RPC) Locator exists. Do not confuse the two.
--------------------------------------------------------------------------------

Right-click the Remote Procedure Call (RPC) service, and then click Properties.
Click the Recovery tab.
Using the drop-down lists, change First failure, Second failure, and Subsequent failures to "Restart the Service."
Click Apply, and then click OK.

p:s:Do not select " Restart the service".Just select " Take no action ".Press ctrl+alt+delete and click on processes.Then find out the svchost.exe that is 19800 kb in size and does not run for either " network" or " local service" but runs for "system".That should clear up.Well,it has worked for me i don't know about others...

[tshooter]

so if you have win 2k pro and msconfig is not part of it, how do you disable the startup items?

[caperjack]

You can use msconfig for win 98 in win2000 ,I have installed it and used it in ME and 2000,download it here '
http://www.techadvice.com/win2000/m/msconfig_w2k.htm

[cata]

Anyone know how to stop svchost.exe from using 100% CPU?

I tried FixBlast.exe from Symantec. It found nothing. I'm in deep trouble.
I try to install the patch from Microsoft but when i do this the instalation program exit constantly. When I run "regedit" it seems to happen the same annoying problem.
What can I do?

[calience]

I had a similar issue. I was running Windows 2000, and my svchost.exe was eating 70% or so of my CPU.

I downloaded tlist.exe from a site off of Google.com, and ran tlist.exe -s. As suspected, rpcss.exe reflected high activity.

I disabled all RPC services through Administration Tools and rebooted, but the CPU was still being consumed. When I ran tlist.exe again, instead it revealed cfgldr under svchost, which was somehow masked by RPC.

Running cfgldr through Google.com popped up a lot of information about the W32/Agobot-S worm.

I just literally pieced this together an hour or so ago, so I haven't any advice on how to remove it, but Sophos seems to have some sort of program that can remove it.

Hope that information helps some.

[caperjack]

the other day when i typed netstat it stayed on the screen and i could read info ,to it pops up and closes just as quick.???

[)BIG"B"Affleck]

Thats because your running it from the run as prompt.Run it from the dos command AKA command prompt. Start/Programs/Accessories/Command Prompt.

Aaargh - damn svchost.exe

PPL say it's Microsoft's spyware at it's best ...
anyone with any *helpful* suggestions? Dispelling myths...
http://support.microsoft.com/defaul...kb;en-us;314056
Brought to you by Big B Affleck!!!!

[caperjack]

Right ,Memory problem ,mine !!

[caperjack]

Yupp!!!

[Fire an Ice]

Ha HA!! Just did for the Blaster Virus on a Win 2000 pro machine...the damned thing was hiding behind the SVCHost.exe process....Wanna know the solution?? Read on, constant techs...

From Start/Run, type SERVICES.msc /s to launch the services window. Find the Remote Procedure Call Service (RPC...NOT to be confused with the one just below it, the RPC Locator) and right click it...select Properties and select the 'Recovery' tab...

For All three top options (What action to take if the service fails) Select 'Restart the Service' and apply...this'll buy you enough time to run the excellect Symantec Blasterfix, available from:
http://securityresponse.symantec.com/avcenter/FixBlast.exe

This not only removed the worm for me, it also automattically d/ld the patch to keep the little sod out in future!! Good luck, I hope this works for you as well as it did for me...:)

F+I

[Alberto]

if you're having problems with svchost.exe- Go start- Run - type services.msc - ok - right click config loader - properties- choose disable in General tab's start up. Restart your system.

Enjoy it!

Alberto