36
Contributors
43
Replies
44
Views
15 Years
Discussion Span
Last Post by jbennet
0

Aaargh - damn svchost.exe

PPL say it's Microsoft's spyware at it's best ...
anyone with any *helpful* suggestions?

0

This is a major problem - i agree it must have something to do with Microsoft spyware because there is no mention of it on microsoft site or mcafee - is have not been able to get rid of this virus

0

wait, this is a virus? i show a couple instances of this running on my comp... is this file bad or is this file easily infected...? i'm curious now because i def have the file svchost.exe on my comp..

i don't have any viruses, none listed in the link caper supplied because i have all the latest updates, and i run antivirus software.. but is this svchost.exe program something i shouldn't have on my comp?

0

YEh I'm using xp pro and right now while I'm posting here,the cpu is using its 100%... :cheesy: it's fun you know.Especially if you run the movie @ The Italian Job@ with wmp 9.0 ,the music will be interesting to hear :mrgreen:
Well,it's normal to have multiple svchost.exe running.Someone said he ran a removal tool from symantec but didn't say the name of the tool.should I look for svchost.exe?There's nothing like that :confused: :eek: I don't think I have the virus but there should be a way to stop svchost from using 100%? :rolleyes:
ahhh...I just pressed ctrl+alt+dlt and stopped one svchost.exe except the one's on 'system' or 'network'..it works.Now the C.P.U is working only 5% and my language settting is solved!The language bar came out of nowhere and it was named as text and input services....great I can type \ easily..yahoo :)

0

I use and recommend Active Ports.The Readme states in part:

Description
~~~~~~~~~~~

Active Ports - easy to use tool that enables you to monitor all open TCP/IP
and UDP ports on the local computer. Active Ports maps ports to the owning
application so you can watch which process has opened which port. It also
displays a local and remote IP address for each connection and allows you
to terminate the owning process. Active Ports can help you to detect trojans
and other malicious programs.

0

Hi.I'm actually using xp pro but I have the same problem too.So here's how I got rid of this problem:
Click Start > Run. (The Run dialog box appears.)
Type:

SERVICES.MSC /S

in the open line, and then click OK. (The Services window opens.)


In the right pane, locate the Remote Procedure Call (RPC) service.

--------------------------------------------------------------------------------
CAUTION: A service named Remote Procedure Call (RPC) Locator exists. Do not confuse the two.
--------------------------------------------------------------------------------

Right-click the Remote Procedure Call (RPC) service, and then click Properties.
Click the Recovery tab.
Using the drop-down lists, change First failure, Second failure, and Subsequent failures to "Restart the Service."
Click Apply, and then click OK.


p:s:Do not select " Restart the service".Just select " Take no action ".Press ctrl+alt+delete and click on processes.Then find out the svchost.exe that is 19800 kb in size and does not run for either " network" or " local service" but runs for "system".That should clear up.Well,it has worked for me i don't know about others...

0

so if you have win 2k pro and msconfig is not part of it, how do you disable the startup items?

0

Anyone know how to stop svchost.exe from using 100% CPU?

I tried FixBlast.exe from Symantec. It found nothing. I'm in deep trouble.
I try to install the patch from Microsoft but when i do this the instalation program exit constantly. When I run "regedit" it seems to happen the same annoying problem.
What can I do?

0

I had a similar issue. I was running Windows 2000, and my svchost.exe was eating 70% or so of my CPU.

I downloaded tlist.exe from a site off of Google.com, and ran tlist.exe -s. As suspected, rpcss.exe reflected high activity.

I disabled all RPC services through Administration Tools and rebooted, but the CPU was still being consumed. When I ran tlist.exe again, instead it revealed cfgldr under svchost, which was somehow masked by RPC.

Running cfgldr through Google.com popped up a lot of information about the W32/Agobot-S worm.

I just literally pieced this together an hour or so ago, so I haven't any advice on how to remove it, but Sophos seems to have some sort of program that can remove it.

Hope that information helps some.

0

the other day when i typed netstat it stayed on the screen and i could read info ,to it pops up and closes just as quick.???

0

Thats because your running it from the run as prompt.Run it from the dos command AKA command prompt. Start/Programs/Accessories/Command Prompt.

Aaargh - damn svchost.exe

PPL say it's Microsoft's spyware at it's best ...
anyone with any *helpful* suggestions?

Dispelling myths...

Brought to you by Big B Affleck!!!!

0

Ha HA!! Just did for the Blaster Virus on a Win 2000 pro machine...the damned thing was hiding behind the SVCHost.exe process....Wanna know the solution?? Read on, constant techs...

From Start/Run, type SERVICES.msc /s to launch the services window. Find the Remote Procedure Call Service (RPC...NOT to be confused with the one just below it, the RPC Locator) and right click it...select Properties and select the 'Recovery' tab...

For All three top options (What action to take if the service fails) Select 'Restart the Service' and apply...this'll buy you enough time to run the excellect Symantec Blasterfix, available from:
http://securityresponse.symantec.com/avcenter/FixBlast.exe

This not only removed the worm for me, it also automattically d/ld the patch to keep the little sod out in future!! Good luck, I hope this works for you as well as it did for me...:)

F+I

0

if you're having problems with svchost.exe- Go start- Run - type services.msc - ok - right click config loader - properties- choose disable in General tab's start up. Restart your system.

Enjoy it!

Alberto

0

I was unable to run services.msc., as it my system would hang at start up. So the above solutions didn't help me. Anybody with a better Tech background correct me if I am wrong with my understanding of svchost: svchost.exe loads/calls apps at start up. It seems that in accidently adding new windows components, something was not properly installed. everytime svchost called/tried to load the mis-installed process/app, the system would hang (at start up). I had to end the process in task manager, then went to add/remove windows components and took out the two or three items that I could remember failing to install properly. (They were additional network tools) Ta Da. what an R-PITA.
Les

0

I had one of my users here complain about this issue. I ran the computer through MS update (while reading all your posts) and after the reboot all was well. I know it's simple but have you tried doing a simple MS Update of critical updates?

TMPAdmin

0

The SVCHOST.EXE process
In Windows 2000 and Windows XP computers, the Network Connections list typically includes the SVCHOST.EXE executable file. Windows 2000/XP uses this executable for services that are run from dynamic link library (.dll) files. These other services include operating system services, and can include services that are used by third party programs.

The Network Connections list may include more than one instance of SVCHOST.EXE. Each instance of SVCHOST.EXE hosts one or more services. NIS and NPF do not allow you to terminate this connection.

To determine which services SVCHOST.EXE is hosting, see the following Microsoft documents:
Article number Q250320, Description of Svchost.exe in Windows 2000
Article number Q314056, A Description of Svchost.exe in Windows XP

0

tRY THIS. IT WORKED FOR ME

it's funny how different things work for different people/computers. Here's how I solved it.

I tried the suggestions mentioned by others and got nowhere.

For xp pro

First-- open task manager control/alt/delete keep it open
(note which services are using memory and cpu.)
(some you don't even need like p2p networking - this come installed with kazaa but kazaa does't need it to work- you can uninstall at cotroll panel add/remove programs) and so on.

Second--open control panel/admin tools/services (not component services just plain services.

NOW arrange both windows so you can see them.

now go down the list of services and turn them off and back on while monitering the taskmanager until you see the culprit that is hogging your cpu usage.

note: my culprit happended to be "ssd discovery services" which was indicating it was "stopping" where the others read started.


HOPE THIS HELPS

0

sounds like some of you have the welchia worm!

Those of you that have the svchost.exe using 100% CPU.

Well thats what it was for me anyway!

0

I've got svchost taking 100% CPU (it's the RPC service) on my Windows XP Pro. I don't have any virus (did a full scan using F-Secure Anti Virus 2004) and it didn't find any virus.

I isolated the problem to Outlook 2003, I always have this problem when using Outlook 2003. I've got all Fixes from windows update installed... At the moment I'm trying to see if the problem can be resolved by using a new "Personal Folders" file. If this doesn't work eighter I'm going to try a repair on Office 2003...

0

I've got svchost taking 100% CPU (it's the RPC service) on my Windows XP Pro. I don't have any virus (did a full scan using F-Secure Anti Virus 2004) and it didn't find any virus.

You also might want to go to http://www.GRC.com and run Shoot the Messenger to explicitly turn off RPC. The MS patches don't really turn it off; the Blaster worm and Messenger spam are blocked, but other processes can still access RPC.

0

I've got svchost taking 100% CPU (it's the RPC service) on my Windows XP Pro. I don't have any virus (did a full scan using F-Secure Anti Virus 2004) and it didn't find any virus.

I isolated the problem to Outlook 2003, I always have this problem when using Outlook 2003. I've got all Fixes from windows update installed... At the moment I'm trying to see if the problem can be resolved by using a new "Personal Folders" file. If this doesn't work eighter I'm going to try a repair on Office 2003...

I've run into the same problem with Outlook 2003 using svchost.exe to the max! This only happens when I open and e-mail to read it. Let me know if you have any sugestions?

I think I have the solution. In Outlook you have the option to run Smart Person Name Tags. Outlook 2003 > Options > Other Tab uncheck smart person name tags. This doesn't work well with Windows Messenger. Works fine with MSN Messenger 6.1. I also rechecked the box that I would participate in Microsofts "Customer Experience Improvement Program" in the General Settings under Options. Problem solved for now.

0

Thanks for the tip about about Outlook. I'm going to give it a try right now :)


I already had tried by creating new Personal Folders etc, but that din't change anything...

0

I have the same problem. svchost.exe and system eat up 100% CPU time. It's a Win XP system. I tried virus scan and spybot, nothing helped. Then I just go to Microsoft web-site to download all the critical patches and fixes, and problem solved. :cheesy: I think microsoft have too many security holes. We just need to keep updating the lastest patch for Windows.

This question has already been answered. Start a new discussion instead.
Have something to contribute to this discussion? Please be thoughtful, detailed and courteous, and be sure to adhere to our posting rules.