Ask Leo! by Leo A. Notenboom

Svchost and Svchost.exe - Crashs, CPU maximization, viruses, exploits and more.

Search First! Then browse: Categories | Full Archive | By Date | Newsletter

Home » Windows » Windows Components

Comments

Read the article that everyone's commenting on.
RSS feed Subscribe to the RSS Feed for comments on this article.


I seem to have the exact same symptoms as John (posted 4/10/05).

> My system is very sluggish
> The Start/Task bar is missing
> When I try to run some system programs (e.g. System Restore) a window opens, but then hangs.

Checking the running processes, shows the svchost.exe process that is supporting RPC is constantly using 99% of the CPU.

I've run all the anti-virus & spyware tools, and I am no longer connected to the internet. Still no improvement.

Hoping you might have some thoughts on how to fix my problem. Thanks.
Wade

Posted by: Wade at April 27, 2005 10:45 AM

Well, it certainly SOUNDS like the viruses discussed here. I *assume* you are runnign Windows XP. I would try the system file checker (rebooting into safe mode, if need be, to do so), updating your virus databases, and perhaps even running an additional virus checker.

Posted by: Leo at April 27, 2005 12:54 PM

ok. i resolve it!!!!, in my computer this problem start when i had a problems with my sound card and i remove it, then i cannot shut down my computer because every time hangs saying "saving your settings" that was terrible. well, i search all over the forums in internet and someone said that he took of his sound blaster card, and when he place it back everything were just fine. i do the same, i install my sound card again and when my computer starts it still with the cpu ussage problem but when i restar it, this problem was solve. Thanks God!!!

it wasn't a virus or trojan, its a problem with your computer hardware or software.

Posted by: eligio at May 5, 2005 1:51 PM

Posilutely my svchost.exe file was corrupted by the malware "SecureiMaster". While we're at it, block cookies from doubleclick.net and advertising.com ; I did not do so and had to delete IE6!! Went to: www.lawyersandsettlements.com , signed on to class-action suit against Doubleclick, Inc.

Posted by: brian at May 12, 2005 12:38 AM

Svchost.exe is not dangerous itself. I had the same problem, svchost.exe used 99-100% CPU. However I just found the solution. The reason for the cpu usage is a virus, whenever I opened iexplorer.exe, the virus tried to initilize the TFTP (trivial file transfer protocol), after which the CPU usage for svchost.exe went up to 100%. This you have to block with the firewall. Next, go to the run menu, type msconfig. In the startup tab, go through every file, and double check with http://www.bleepingcomputer.com/startups/ , to check if the file is dangerous. You will most likely find several trojans or parasites.
Remove these from the startup menu in msconfig.
Restart, and the computer runs fine :-)
PS! Would be a good idea to remove these files from your comp. aswell ;-)

Posted by: Morten at May 12, 2005 10:14 AM

I have had several different problems. svchost.exe.mdmp comes up at startup. I have sent report, then my modem thinks it is connected still and I restart. Sometimes doing this twice before the svc behaves. My dial up connection (netscape which is no help) gets connected then it takes from 5-15 min. to open IE also stalling the computer from doing anything else. My sound (Audio Excel) only plays some sounds like the windows opening and you can faintly hear the quicken sounds. I didn't try taking it out and reinstalling. I ran virus and adware checks. All clean. I have updated with microsoft, just today. I don't know if all these are related, they just seem to happen at the same time. I do have one question, you know where the window updates are in the add/remove programs? Should they all show the date they were added? Hey thanks for being here. There is alot to read here.

Posted by: Betcom at May 18, 2005 5:09 PM

Sounds like quite a bit of a mess. I'd make sure that your anti-virus and anti-spyware databases are up to date, and perhaps even use a second one of each (not all scanners catch all problems). I'd also try a system file check, http://ask-leo.com/what_is_the_system_file_checker_and_how_do_i_run_it.html and possibly review what's getting started automatically: http://ask-leo.com/whats_all_this_stuff_running_after_i_boot_windows.html

Good luck!

Posted by: Leo at May 18, 2005 10:12 PM

So after commenting last night I checked the config. Unchecked a few items, one of which was blank and bad according to bleepingcomputer. I am now down to four items. When starting today I did not receive the svchost.exe. blah blah blah, but I did get a confirmation of change and yes/no box from config sys. Is this going to come up at every startup? I have since reading your response ran SFC, which found nothing wrong. I did run two adware programs but only one virus all of which are up to date. Sound is the same, haven't tried anything there and it took 20 min to open netscape. Ugh! I do appreciate the help. Is French Roast your favorite? thank you

Posted by: Betcom at May 19, 2005 5:12 PM

svchost.exe is doing the same thing for me... Only the system get soooo sluggish, I cannot even run the Win2000 sp4!! Any suggestions ? (it ran last night for 5.5 hours, because once you startit, it needs to connect the the net to get its full install kit, that's when svcohst starts to hog the CPU).
~AS.

Posted by: Andrew at May 22, 2005 12:33 PM

Be careful with svchost.exe file. Its a system file but its widely used by parasites to deceive the user. there are various similar filenames which looks similar.
Detailed explanation and exploits read here:
http://www.2-spyware.com/file-svchost-exe.html

Posted by: spyware analyst at May 28, 2005 11:44 PM
Read the article that everyone's commenting on.
RSS feed Subscribe to the RSS Feed for comments on this article.
Post a Comment

Question? Ask Leo!