Svchost and Svchost.exe - Crashs, CPU maximization, viruses, exploits and more.

Read the article that everyone's commenting on.
Subscribe to the RSS Feed for comments on this article.

Leo,

I am not viewing this page on the affected computer. I am using a different computer that is working fine... this working computer is able to connect to the internet... and my nonworking one is connected to the same router, so I know the problem isn't with my actual internet connection.

Any ideas?

Daron

Brian: well what remains for me are general trouble shooting steps ... visited Windows Update lately? Make any changes to your system about the same time the problems started? Might be worth checking whatever is starting automatically (http://ask-leo.com/archives/000025.html ). Perhaps even a memory test would be in order (http://ask-leo.com/d-memtest ). If you have any other details or reproducible cases, that might help.

Good luck!

Dear All,

as I write this one my svchost.exe processes is running at 98%. Also I get an rpc shutdown when on the internet after about 5 - 10 mins. If not online everything works just fine. So it seems to be with being online. Norton has found no viruses with the latest scan ... although it did delete welchiaB a couple of weeks ago. But I was PARTICULARLY interested in what Carl said because I can date all my problems almost exactly to when I tries a windows update and windows told me I needed to download windows SP1 was downloaded with some other stuff. Since then it's been svchost and shutdowns galore? Is there a problem with SP1? I suspect there is.
Also I found a file called svchost.exe-3530F672.pf which was apparently only created yesterday eveinign when I was trying to virus scan etc. and sort out my problems - is this a bogus file???

Thanks in advance

Are you behind any kind of a firewall? SVCHOST can go to 98% (or whatever) if you are under attach from an outside source. A firewall can protect you.

AND: yes, there was a problem with SP1. There is now an SP1a that I recommend you install: http://ask-leo.com/d-xpsp1a

Hi first time on the site. Have had the same probs with svchoste.exe as most. increased CPU usage etc however I have gone into Tastk Manager. Processes. and on svchost.exe with mem usage some times 300000 or above have high lighted and and then End Process. the at the promp YES and this will bring svchost.exe back to arount 1580 and the pc then behaves. Unfortunatly this is not a permanent fix so my question is do I have a virus and if so what will sort it out?

***** A message for Daron ****

I too have a D-Link router/firewall, and on odd occasion find that i am unable to connect to the internet, or even the router/firewall itself.
Releasing / renewing the IP on the network card works fine (Proving connectivity to the DHCP software on the router) but i'm still unable to 'HTTP' to the router? Does this sound about right?

Well, firstly try powering off the router, then release the IP on your network card.
Then power router back on again, then renew IP on NIC (if it doesn't automatically) and see if you can HTTP to the router interface.
If you can, try the Internet... see if it works.
If you can't get to the internet, release the DHCP address on your router and renew that...
See if that solves your problems....

Daron,

Sorry i missed a post in here... the one that reads you're using another PC connected to the same router.. ;)

So, can you release/renew IP on your network card of non connecting machine?
If your NIC card is allocated a DHCP IP of *172.16.0.1* can you ping that address? from a CMD prompt?
Can you ping 127.0.0.1?
You might have a faulty network card.
have you tried removing the network from the machine and inserting it again?
Tried removing it from the Device Manager and re-installing the drivers?

Everytime I run a game or a operation that requires alot of power, my PC crash.
It says it was a device driver, or else it says it is being researched. I don't get any other info on the device driver so I have no idea whats wrong. The problem have been there before but not to this extend. I have formatted the harddrive but it didn't work, now it's just worse! I don't know where to get help, so I thought that maybe you could help me, please!

Hi Leo. I use Win XP Pro, at startup I have five svchost.exe services running and I cannot access the internet. One of them consumes a high level of processor usage. When my cursor is placed on the start button, I get a busy sign and I cannot click the start button to access the programs. I am thinking about Welchia or so... I can stop two svchost.exe via the services.msg command (the plug and play related I stopped) and than I can reboot and I can access the start button but not the internet. My virus definitions where one week old maximum before it happened. I use Norton 2004 Antivirus and NIS 2004 as well. One of the last things that happened was the installation of Xlink by my brother, some kind of chat program he says, so think that had something to do with it perhaps. Now, I cannot access the internet so I cannot use online scanners or patches. I tried adaware 6 but found nothing, Spybot same thing and Norton same thing. At first I had a service called netinfo running, but I was

PS I had the latest windows patches and everything, messenger service from windows disabled.

Thx in advance!!

About the only thing I can think of right now is to get the latest set of virus definitions for Norton on to the machine somehow, presumably using a floppy or CD-ROM. It certainly *sounds* like the various viruses discussed in this article.

To post a comment on "Svchost and Svchost.exe - Crashs, CPU maximization, viruses, exploits and more.", please return to that article's main page.