<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" 
      xmlns:thr="http://purl.org/syndication/thread/1.0">
  <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html" />
  <link rel="self" type="application/atom+xml" href="http://ask-leo.com/atom.xml" />
  <id>tag:ask-leo.com,2008://5/tag:ask-leo.com,2005://5.9488-</id>
  <updated>2008-09-10T19:42:22Z</updated>
  <title>Comments for Where is it alright for svchost.exe to be?</title>
  
  <generator uri="http://www.sixapart.com/movabletype/">Movable Type 3.2</generator>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:43576</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c43576" />
    <title>Comment from Steamer on 2008-08-13</title>
    <author>
      <name>Steamer</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>Had the same problem as Shack...using 100% of CPU, pop-up porn in non-explorer window and wouldn't let me delete C:\google.com\svchost.com.  Renamed file, restarted computer and deleted file and folder successfully.  This killed it off!</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2008</a>.</p>
    </content>
    <published>2008-08-13T15:07:53Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:43361</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c43361" />
    <title>Comment from Stack on 2008-08-06</title>
    <author>
      <name>Stack</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>was having the svchost.exe problem not only taking up 100% of my cpu usage but also popping up all kinds of porn in a non-explorer window not detectable as an application.  With the process explorer I found a copy of svchost.exe running from a suspicious directory  C:\google.com\svchost.exe lol.  Renamed the file.  Restarted the computer.  Problem solved.  Now to delete that little bastard...</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2008</a>.</p>
    </content>
    <published>2008-08-06T19:55:45Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:41633</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c41633" />
    <title>Comment from Steve C. on 2008-06-16</title>
    <author>
      <name>Steve C.</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>I found a SVCHOST.EXE-2d5fbd18.pf located in C:\windows\Prefetch.  Should I delete it?  I regularly run an up tp date Symantec anti virus scan as well "spyware terminator" and it hasn't noted this as a virus.  Thanks</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2008</a>.</p>
    </content>
    <published>2008-06-16T19:09:03Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:40340</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c40340" />
    <title>Comment from LoloXP on 2008-05-06</title>
    <author>
      <name>LoloXP</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>Hello Leo, I have the same Problem with Bitdefender and Trojan.Generic.138368 - like Carol !!<br />
LoloXP</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2008</a>.</p>
    </content>
    <published>2008-05-06T14:44:05Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:40136</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c40136" />
    <title>Comment from Carol on 2008-04-28</title>
    <author>
      <name>Carol</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>Hi Leo,</p>

<p>I have BitDefender which tells me I have that  my<br />
C:\WINDOWS\system32\=>:svchost.exe is infected with a Trojan.Generic.138368. Bit defender can't seem to get rid of it, same goes for Norton 360. I thought it was ok to have the svchost.exe. in this location...Any ideas?</p>

<p>Carol</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2008</a>.</p>
    </content>
    <published>2008-04-28T14:08:26Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:38776</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c38776" />
    <title>Comment from wilson bucaoto on 2008-03-14</title>
    <author>
      <name>wilson bucaoto</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>i was threatened w/ this "svchost" cause i saw it in a USB i plugged in the computer. i deleted the thing at my C drive but it keeps on recoming so i stopped all processes having svchost.exe and deleted all svchost files found in my pc. After I read this, im troubled. It looks like I really need the svchost.exe in the folder system32... What shall I do? Thanks for the help.</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2008</a>.</p>
    </content>
    <published>2008-03-14T15:21:10Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:37501</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c37501" />
    <title>Comment from Andrea Mahoney on 2008-01-25</title>
    <author>
      <name>Andrea Mahoney</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>Thanks Leo,  I was having a problem with svchost.exe taking up all of my CPU.  <br />
Turned out after using the Process Explorer you recommended that it was the HP printer and software I installed a while ago.  A network polling service was hogging all of the CPU through svchost.exe.  I turned off the automatic service and fixed the problem.</p>

<p>Andrea</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2008</a>.</p>
    </content>
    <published>2008-01-25T19:09:11Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:36093</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c36093" />
    <title>Comment from Chike on 2007-12-07</title>
    <author>
      <name>Chike</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>What if it's located C:\Documents and Settings\BACK UP MY DOCs\SvcHost.exe  is this normal?</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-12-07T15:51:35Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:35746</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c35746" />
    <title>Comment from skiddlepins on 2007-11-26</title>
    <author>
      <name>skiddlepins</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>"Windows cannot find 'E:\windows\svchost.exe'. Make sure you typed the<br />
name correctly, and then try again. To search for a file, click Start<br />
button, and then click Search.</p>

<p>i tried everythin...as you have said(maybe not)<br />
i even tried updating my windows xp and hotfix and those kinda stuff...but the problem reappears everytime i started my windows....i need help terribly...."</p>

<p>The same thing has happened to me. How do I fix this?</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-11-26T10:59:44Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:35168</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c35168" />
    <title>Comment from Leo A. Notenboom on 2007-11-03</title>
    <author>
      <name>Leo A. Notenboom</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>-----BEGIN PGP SIGNED MESSAGE-----<br />
Hash: SHA1</p>

<p>As the article indicates, that's highly suspicious of a virus, and you need to<br />
run an *up to date* anti-virus scan with a good scanner.</p>

<p>Leo</p>

<p><br />
-----BEGIN PGP SIGNATURE-----<br />
Version: GnuPG v1.4.7 (MingW32)</p>

<p>iD8DBQFHLKngCMEe9B/8oqERAvalAJ0f3Ul6p9PaN3jOKgC1Dvbe+UDogQCeIcCc<br />
Mct8FOdYq47SJpJp+RcCx/k=<br />
=HHTz<br />
-----END PGP SIGNATURE-----<br />
</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-11-03T18:03:27Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:35110</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c35110" />
    <title>Comment from steve on 2007-11-01</title>
    <author>
      <name>steve</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>I am having a problem i have not seen on the internet at all. scvhost.exe has rooted itself in windows/win32/oobe/scvhost.exe...not only has not one article on the internet show it in that directory but it makes the computer absolutley go beserk. the only way to keep my computer responding is to keep task manager open. if I close it 100's of svchost open and cause a reboot.   i cant seem to find a way to stop it.</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-11-01T11:39:41Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:34694</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c34694" />
    <title>Comment from Mel on 2007-10-16</title>
    <author>
      <name>Mel</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>I have read your article on the svchost.exe and checked my system. I found it in the System32 folder, the  ServicePackFiles folder and then also in this folder: C\Windows\Prefetch, is this a virus??</p>

<p>Thank you</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-10-16T22:19:58Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:33767</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c33767" />
    <title>Comment from burn on 2007-09-12</title>
    <author>
      <name>burn</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>Windows cannot find 'E:\windows\svchost.exe'. Make sure you typed the<br />
name correctly, and then try again. To search for a file, click Start<br />
button, and then click Search.</p>

<p>i tried everythin...as you have said(maybe not)<br />
i even tried updating my windows xp and hotfix and those kinda stuff...but the problem reappears everytime i started my windows....i need help terribly....<br />
</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-09-13T07:53:37Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:33386</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c33386" />
    <title>Comment from Richard Wagner on 2007-08-29</title>
    <author>
      <name>Richard Wagner</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>The true svchost.exe file in Windows/system32 has version number 5.1.2600.2180 and a length of 14,336 bytes.</p>

<p>The bad file in Windows/inf has a version number of 1.0.0.1 and a length of 15,872 bytes. This file has the same name, svchost.exe but cannot be altered or removed and it propagates it's spyware relentlessly.</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-08-29T20:22:22Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:33343</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c33343" />
    <title>Comment from Sunil on 2007-08-27</title>
    <author>
      <name>Sunil</name>
      <uri>http://unspecified</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://unspecified">
      <![CDATA[<p>Cool guys..</p>

<p>There is a problem that was identified by Microsoft. </p>

<p><br />
QUOTE<br />
The Svchost.exe process may spike the CPU usage to 100 percent during update detection or update installation. Also, the Svchost.exe process causes the computer to stop responding for various lengths of time.</p>

<p><br />
If that fits your issue, you may wish to try this hotfix from Microsoft. MS Help and Support(http://support.microsoft.com/?scid=kb%3Ben-us%3B932494&x=11&y=10)</p>

<p>I had the same problem and noticed that wuauclt was also running - Microsoft's autoupdate.</p>

<p>A little background on svchost</p>

<p>GL...</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-08-28T06:20:03Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:33234</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c33234" />
    <title>Comment from G. Georgie on 2007-08-23</title>
    <author>
      <name>G. Georgie</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>My PC was acting very slow, I went to the task manager and many svchost.exe, I researched and found out it is a virus or malware, so deleted all svchost.exe from the registry by mistake, and my lap top is xp proffessional sp2, I can not connect to the internet, because I noticed that there is nothing in the network communication ( no LAN or Wireless, also no volume control in the lower right corner, and when I try to open norton, it will not allow me to open it, when I open a word document and try to mimize it to the system tray, it disappears. what should I do to restore it back to it's previous state? </p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-08-23T19:06:31Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:33141</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c33141" />
    <title>Comment from blaze on 2007-08-20</title>
    <author>
      <name>blaze</name>
      <uri>http://unspecified</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://unspecified">
      <![CDATA[<p>i have a problem with my pc,after entering my password the pc monitor will show a black screen then after some few sec it will then display svchost property.My question is what is this and how do i solve the problem?</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-08-20T10:26:53Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:33045</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c33045" />
    <title>Comment from Pilot on 2007-08-16</title>
    <author>
      <name>Pilot</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>Ow..ehm..HOW do I change things in the registry..? (How do I even GET in the registry..?!)</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-08-16T21:25:22Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:33044</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c33044" />
    <title>Comment from Pilot on 2007-08-16</title>
    <author>
      <name>Pilot</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>I used PRT Perlovga Removal Tool which I found at this site:</p>

<p><a href="http://en.sergiwa.com/modules/mydownloads/singlefile.php?cid=2&lid=4">http://en.sergiwa.com/modules/mydownloads/singlefile.php?cid=2&lid=4</a></p>

<p>I'm not sure how reliable this site and it's program is. I used it to get rid of the temp1.exe and temp2.exe virusses. Appearantly it also does help against svchost.exe virus problem.</p>

<p>I now get this at start up:</p>

<p>------------------------<br />
E:\windows\svchost.exe<br />
------------------------<br />
Windows cannot find 'E:\windows\svchost.exe'. Make sure you typed the<br />
name correctly, and then try again. To search for a file, click Start<br />
button, and then click Search.<br />
------------------------</p>

<p><br />
and after clicking "okay" I get this:</p>

<p><br />
------------------------<br />
Desktop<br />
------------------------<br />
Could not load or run 'E:\WINDOWS\svchost.exe' specified in registry.<br />
Make sure the file exists on your computer or remove the reference to<br />
it in the registry.<br />
------------------------</p>

<p>Well, svchost is now only in E:\windows\system32</p>

<p>I'm guessing I should go into the registry and get out that HKEY to svchost in E:\windows\ </p>

<p>right? </p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-08-16T21:23:16Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:32915</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c32915" />
    <title>Comment from Alb on 2007-08-11</title>
    <author>
      <name>Alb</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>My question is basically the same as Nicholas's, Ken's and Kim's. I require info on how to get rid of the files that shouldn't be there and how to know which files should be running and which shouldn't (svchost.exe). So, can you please, help me.</p>

<p>Thanks.</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-08-11T16:06:18Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:32732</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c32732" />
    <title>Comment from Kim on 2007-08-04</title>
    <author>
      <name>Kim</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>I have a relatively new computer, with Vista operating system.  How is any of your advice about svchost.exe changed for Vista users?</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-08-04T20:51:59Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:32070</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c32070" />
    <title>Comment from Ken on 2007-07-10</title>
    <author>
      <name>Ken</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>Please, I have the same problem as " Nicolas at April 29, 2007 10:49 AM" but I'm unable to remove it. I really tried everything but I cannot find the source of the infectation. Please tell me how to get rid of C:\Windows\svchost.exe (what is definitly not  existing, but showing up after every restart)</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-07-10T14:18:36Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:30165</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c30165" />
    <title>Comment from Nicolas on 2007-04-29</title>
    <author>
      <name>Nicolas</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>Please note C:\Windows\svchost.exe is NOT a place where the file should be. I have had a trojan in that path, with two dozen different methods to start automatically when the computer is booted (like Startup item on start menu and lots of places on the registry). It was a backdoor and it was sending information back to the hacker. I managed to remove it within an hour of getting it (and unplugged network cable during the whole removal process so it didn't keep sending anything).</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-04-29T18:49:54Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:29789</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c29789" />
    <title>Comment from Alex on 2007-04-14</title>
    <author>
      <name>Alex</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>i have 5 SVCHOST.exe on my list, and one of them is  pumping my CPU usage every time i am connected to internet, i tried to disable it but it reappeared every 10-15 secs after i disable.i did  a search for it. Its on its original place which on win32 file. The user name for that "fake" SVCHOST.exe was SYSTEM.</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-04-14T19:15:17Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:29538</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c29538" />
    <title>Comment from Leo Notenboom on 2007-04-05</title>
    <author>
      <name>Leo Notenboom</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>-----BEGIN PGP SIGNED MESSAGE-----<br />
Hash: SHA1</p>

<p>You might want to look at this article:<br />
<a href="http://ask-leo.com/what_is_svchost_and_why_is_there_more_than_one_copy_running.html">http://ask-leo.com/what_is_svchost_and_why_is_there_more_than_one_copy_running.html</a></p>

<p>Leo<br />
-----BEGIN PGP SIGNATURE-----<br />
Version: GnuPG v1.4.6 (MingW32)</p>

<p>iD8DBQFGFbDWCMEe9B/8oqERAus4AJ9jOJcQ53ltV6C3HVXyxq/iN4eZGgCePKLw<br />
zzgE5KImzpqTIgH3LQ+cBRU=<br />
=4uLd<br />
-----END PGP SIGNATURE-----<br />
</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-04-06T03:31:04Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:29507</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c29507" />
    <title>Comment from charles on 2007-04-04</title>
    <author>
      <name>charles</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>why are there 7 svchost.exe's running at the same time but only 1 causes system failure? these 7 things <br />
are 25% of my commit charge. its even worse when gaming! Please help!</p>

<p>macon</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-04-05T06:03:46Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:25325</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c25325" />
    <title>Comment from Tristan on 2006-11-28</title>
    <author>
      <name>Tristan</name>
      <uri>http://unspecified</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://unspecified">
      <![CDATA[<p>So you've covered in what locations svchost can be, what about process users? In the Task Manager, some of the svchost.exe instances list SYSTEM as the User Name, or NETWORK SERVICE or LOCAL SERVICE, which I'm sure is fine, but what if it listed the name of a log-in on that computer (or another computer too, I guess, but that would obviously be very bad :P )<br />
This isn't happening right now, so I can't be %100 certain, but I seem to recall seeing such an occurance in the past. Could this be an easy way to spot a phoney svchost?</p>

<p>Thanks</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2006</a>.</p>
    </content>
    <published>2006-11-28T16:26:33Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:25064</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c25064" />
    <title>Comment from Rod on 2006-11-19</title>
    <author>
      <name>Rod</name>
      <uri>http://unspecified</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://unspecified">
      <![CDATA[<p>Plain and to the point about "svchost locations"<br />
This file should ONLY BE THE C:\Windows\System32 directory AND in the C:\I386. If you do have more than one in ANY OTHER location, delete it, how can I tell you ask? Well, do a search for "svchost", when the search results are posted, there should only be a copy in the direcories stated above. If there are more than one elsewhere look at the DATE of that svchost file, thats a true giveaway, IE. the svchost files in the correct locations will have the date of the Oringal operating system. If there are later dates of the file in other locations is earlyer then delete them. </p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2006</a>.</p>
    </content>
    <published>2006-11-19T15:17:54Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:22828</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c22828" />
    <title>Comment from Mike on 2006-09-06</title>
    <author>
      <name>Mike</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>Word 97 and Excel 97 were loading very very slow.  I found an additional svchost.exe file in C:\WINNT\SYSTEM32\WINS . After renaming this file everything worked fine. On changing the name back again Word and Excel loaded very very slow again. I scan the file with NAV but no virus was detected. What should I do with this file and do you know what it is and where it came from?</p>

<p>Thanks for your very useful website.</p>

<p>Mike</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2006</a>.</p>
    </content>
    <published>2006-09-06T15:27:02Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:22058</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c22058" />
    <title>Comment from terrence on 2006-08-15</title>
    <author>
      <name>terrence</name>
      <uri>http://unspecified</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://unspecified">
      <![CDATA[<p>hi leo,</p>

<p>i really need your help here i had been having this problem for 2 days now, as i'm connecting to the internet by using a moden provided by my broadband provider. my problem are:</p>

<p>1. suddenly an error message appear saying generic  host process for win32 had encounter a problem and need to be closed. this happen when i'm surfing the net, it cause me to be disconnected from the net and i have to restart my computer for me to be able to connect again.<br />
2. it happened on a time duration of 30min-2 hours time surfing the net.<br />
3. error signature:<br />
event type:BXE p1:svchost.exe</p>

<p>what i did try:<br />
1. used system restore( didn't work )<br />
2. scan my computer for viruses( using avast/symantec/spybot and even use fixblast )</p>

<p>i need a solution on solving this problem.</p>

<p>p/s i'm using window XP<br />
thanx for the help</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2006</a>.</p>
    </content>
    <published>2006-08-15T17:30:29Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:19789</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c19789" />
    <title>Comment from Army on 2006-06-03</title>
    <author>
      <name>Army</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>Hi Leo. McAfee Security Center detected a copy of svchost.exe in c:\windows\. It said it was infected by a trojan. It presented me with several options including deleting it or quarantining it. I deleted it immediately, thinking svchost.exe is not important. Then I decided to research the file and found this site. The file is not located in the folders you specified but it is located in c:\windows\. So now I'm not so sure if I did the right thing by deleting it. What do you think? </p>

<p>Thanks!</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2006</a>.</p>
    </content>
    <published>2006-06-03T15:12:37Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:19278</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c19278" />
    <title>Comment from Dave on 2006-05-16</title>
    <author>
      <name>Dave</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>Process Explorer is great.  I've been looking for an application like this for a long time.  I have 5 svchost.exe running and they are all from the legit directory.  I'm glad to finally confirm this.</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2006</a>.</p>
    </content>
    <published>2006-05-17T03:50:50Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:19149</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c19149" />
    <title>Comment from Bad on 2006-05-11</title>
    <author>
      <name>Bad</name>
      <uri>http://unspecified</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://unspecified">
      <![CDATA[<p>I had the same problem with the Trojan installing a fake “svchost.exe” in the directX folder. What I did first was:</p>

<p>Using the free online virus scanner kaspersky which can be downloaded from:</p>

<p><a href="http://www.kaspersky.com/virusscanner">http://www.kaspersky.com/virusscanner</a></p>

<p>After scanning found the “usbadpt32.dll” to be a Trojan which was located in the<br />
c:\windows\system32 directory.</p>

<p>This was a pain to delete because Xp would not allow me to delete the DLL.<br />
Steps that I had to take in order to delete this virus was the following:</p>

<p>1).	Using the "eXtended Task manager.exe" program which you can try out<br />
	for 21 days free. I searched for the module name "usbadpt32.dll".</p>

<p>2).	When found I told the program to unload the module.</p>

<p>3).	Using the program name "registry crawler" I did a search for:</p>

<p>	"usbadpt32.dll"</p>

<p>4).	When found I deleted all keys associated with this DLL.</p>

<p>5).	I deleted the file name "svchost.exe" which the virus used located<br />
	in the directory "c:\windows\system32\directX".</p>

<p>6). 	Restarted the system.</p>

<p>7).	Upon entering windows I deleted the "usbadpt32.dll" from the directory<br />
	C:\windows\system32.</p>

<p>DONE!<br />
</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2006</a>.</p>
    </content>
    <published>2006-05-12T02:33:39Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:18893</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c18893" />
    <title>Comment from Bjorn on 2006-05-03</title>
    <author>
      <name>Bjorn</name>
      <uri>http://unspecified</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://unspecified">
      <![CDATA[<p>I found a svchost.exe in my programs directory (C:/program/svchost/svchost.exe) which couldn't be removed since the system was using it somehow. I also saw that I had blocked it with my firewall. When I released the block for a short period of time it immediatley began connecting to a computer in Holland. I then blocked it again and searched for registry keys with that path name. It turns out the keys were about the eMando remote control software. After removing the keys I could delete the file. Shortly before this a buddy of mine had his pokeraccounts robbed for about $6000 and his hard drive erased, which was probably the result of this very file. Thanks to Leo for helping me identify the trojan.</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2006</a>.</p>
    </content>
    <published>2006-05-03T18:08:02Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:18541</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c18541" />
    <title>Comment from Manuel on 2006-04-23</title>
    <author>
      <name>Manuel</name>
      <uri>http://unspecified</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://unspecified">
      <![CDATA[<p>I solved the problem. Windows Xp Pro SP 1.</p>

<p>In my case is Windows Update. I just turn off Automatic Updates. No more svchost 100% CPU. Now the problem is: I have to do manually updates. </p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2006</a>.</p>
    </content>
    <published>2006-04-24T00:20:24Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:17760</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c17760" />
    <title>Comment from Mike on 2006-04-01</title>
    <author>
      <name>Mike</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>Hi Leo, I have Trend Micro installed and I keep getting a message that the virus TROJ_DLOADR.AD has been found in C;/windows/system32/directx/svchost.exe. The PC-cillin software always quarantines the file but I keep getting the message at various times when I try to connect to the internet. The good news is that the anti virus software seems to be working. The bad news is there is something on the computer that keeps installing a bad copy of svchost.exe in the directx directory. Any ideas on how to identify what is installing this bad copy of svchost? </p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2006</a>.</p>
    </content>
    <published>2006-04-01T14:49:08Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:16960</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c16960" />
    <title>Comment from Manuel on 2006-03-09</title>
    <author>
      <name>Manuel</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>Hi Leo. I found a copy of svchost in the directory C:/Windows/System32/wins/SVCHOST.EXE<br />
What i should do??<br />
This svchost file in property windows says:<br />
TCP/IP Trivial file transfer daemon...What is this?<br />
</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2006</a>.</p>
    </content>
    <published>2006-03-09T13:10:31Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:16605</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c16605" />
    <title>Comment from Leo on 2006-02-27</title>
    <author>
      <name>Leo</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>Not neccesarily. Prefetch is a valid place for it to be, but it's also ok to delete it from there. It'll probably come back. Prefetch is a performance optimization for loading windows.</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2006</a>.</p>
    </content>
    <published>2006-02-28T04:34:45Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:16604</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c16604" />
    <title>Comment from Evelyn on 2006-02-27</title>
    <author>
      <name>Evelyn</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>I just did a scan for svchost.exe<br />
I not only found it in /system32 and /servicepack/i386 but also in /prefetch</p>

<p>I'm assuming the one in /prefetch is a virus</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2006</a>.</p>
    </content>
    <published>2006-02-28T04:31:30Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:15850</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c15850" />
    <title>Comment from Christian G on 2006-02-08</title>
    <author>
      <name>Christian G</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>Great artice, unfortunately it didn't help me. All my five SVCHOST.EXE files where in the right directory. But I could just shut down the one process that used 50 % of the CPU. I then got the one minute to shutdown warning. But that was easily avoided by typing shutdown -a in the run window. My computer ran smoother then, but I still experience a bit lag in certain games like Battlefield 2. </p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2006</a>.</p>
    </content>
    <published>2006-02-08T19:11:33Z</published>
  </entry>
  <entry>
    <id>tag:ask-leo.com,2005://5.9488-comment:15108</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2005://5.9488" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html#c15108" />
    <title>Comment from Alex_lx on 2006-01-20</title>
    <author>
      <name>Alex_lx</name>
      <uri>http://unspecified</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://unspecified">
      <![CDATA[<p>Hi Leo</p>

<p>I've done what you suggested and it worked perfectly.  I haven't got the 100% cpu usage eny more.  Thanks a lot for your help</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/where_is_it_alright_for_svchostexe_to_be.html">Where is it alright for svchost.exe to be?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2006</a>.</p>
    </content>
    <published>2006-01-20T22:57:56Z</published>
  </entry>

</feed>
