Ask Leo! by Leo A. Notenboom

Svchost and Svchost.exe - Crashs, CPU maximization, viruses, exploits and more.

Search First! Then browse: Categories | Full Archive | By Date | Newsletter

Home » Windows » Windows Components

Comments

Read the article that everyone's commenting on.
RSS feed Subscribe to the RSS Feed for comments on this article.

Interesting. The eventsystem may not have it's own dll. However if you're running XP, system file checker should restore missing items. http://ask-leo.com/archives/000074.html

What I first suspected is either spyware or a rogue startup entry. I'd use a spyware scanner to see if that cleans anything up (recommendations: http://ask-leo.com/d-recommend) and if not, I'd examine what's being started automatically
when you log in: http://ask-leo.com/archives/000025.html

Posted by: Leo at July 20, 2004 9:06 AM

I ran the Process Explorer for SCVHOST.exe and upon opening the details for the SVCHOST.exe taking up 100% usage, I find about 200+ programs. I know this is not normal. There about 100 HKLM or HKCR or some kind of variation. So I'm not sure which to get rid of. And does Process Explorer find them for me?

Posted by: Brian B at July 20, 2004 7:58 PM

I ran the Process Explorer for SCVHOST.exe and upon opening the details for the SVCHOST.exe taking up 100% usage, I find about 200+ programs. I know this is not normal. There about 100 HKLM or HKCR or some kind of variation. So I'm not sure which to get rid of. And does Process Explorer find them for me?

Posted by: Brian B at July 20, 2004 7:59 PM

I ran the Process Explorer for SCVHOST.exe and upon opening the details for the SVCHOST.exe taking up 100% usage, I find about 200+ programs. I know this is not normal. There about 100 HKLM or HKCR or some kind of variation. So I'm not sure which to get rid of. And does Process Explorer find them for me?

Posted by: Brian B at July 20, 2004 8:01 PM

If you're looking at the lower pane, those are NOT programs. Thw lower pane lists resources that this instance of SVCHOST has open. (HKLM and such indicate registry entries that are in use.) This is *normal*.

Posted by: Leo at July 20, 2004 8:07 PM

Dear Leo,
I have had a problem with this svchost.exe program for a while now. It is some kind of global dialer for a stupid porn site that was downloaded onto my cpu. I have no idea how it got on there, but I have uninstalled the program many many many times, but it keeps coming back. I am on the Windows 98 SE system. You said that it is probably a virus, I did a scan of the program and it is saying that no viruses were found. What can I do about this and how do I get it off permanantly? I would really appreciate any help you can give me.

Posted by: Kelly at July 20, 2004 8:26 PM

Actually this sounds like spyware. Get a copy of spybot or adaware (or both, they're free) and scan. They should clean it up. Links over on my recommendations page: http://ask-leo.com/d-recommend

Posted by: Leo at July 20, 2004 8:49 PM

Hey thax a lot 4 this damn info...this svchost has been screwin my brains 4 a long time...I guess My whole College Lab is affectected by somee virus which provokes svchost...Thax man

Posted by: Ricky at July 22, 2004 10:50 AM

Before I found this site, I found what seemed to be a reliable site that told me to delete svchosting.exe because it was like a virus. Now I see that was a mistake. Is there any way I can get it back?!

Posted by: Jamie at July 28, 2004 6:12 PM

Do you really mean "svchosting.exe" and not "svchost.exe"? The difference is important.

Posted by: Leo at July 28, 2004 8:00 PM
Read the article that everyone's commenting on.
RSS feed Subscribe to the RSS Feed for comments on this article.
Post a Comment

Question? Ask Leo!