Re: svchost.exe problem by Anonymous Ghost on February 03rd, 2004 10:00:13 AM
It is possible that svchost.exe that you see if the real 'good' one instead of the fake one (virus).
To be sure, reboot the system in safe mode and run you anti-virus software. That should do it for you. |
Re: svchost.exe problem by Anonymous Ghost on February 05th, 2004 05:36:04 PM
I had the same problem. What I saw with Process Explorer (free) was that explorer.exe was responsible for 100% cpu usage. So I searched and saw that in My Networkconnections there were 8 ftp directories which I didn't put there myself. I deleted them and after that I directly cleaned the registry with JV16 Powertools and after Spybot (updated!) was ready the cpu usage was back to normal. All programs mentioned above are free (I think) so give it a try!
Success! |
Re: svchost.exe problem by xxx8182 on February 08th, 2004 05:03:48 AM
well i had the same problems when trouble started to accrue when i got program error explorer.exe. i couldnt open nothing, control panel, my
documents and my computer.i trouble shoot all day to save my files and no i was stupid didnt have my computer protected which i was reading that i might have cought that worm.anyway found way save my infor. did a clean install and still having problems like syclost.exe tried to install some programs and end of download got error installshield engine(ikernel.exe) other exe programs that are needed.i think if i find way format my master boot record think i can get rid of this problem. hope any body give me any suggestion |
Re: svchost.exe problem by dostald on February 09th, 2004 11:29:24 AM
I had a virus masquerading as svchost. Got rid of the symptoms (100% CPU usage all the time) by renaming and trashing a few files named svchost. Now I find that I can't play DVDs, etc and figure that it's due to tossing some of the good svchosts along with the bad. So where does a guy go to restore svchost? Does Microsoft have genuine svchosts available somethwere? I'd just like to reinstall them, not redo the whole OS. |
Re: svchost.exe problem by Anonymous Ghost on February 10th, 2004 06:46:09 PM
*Sigh* Well, here we go.
SVCHOST (Processor instruction agent) controls ALL processes, sort of like a virtual processor. Now, you may have a virus called SVHOST, and notice that SVHOST and SVCHOST are not the same, SVCHOST being the good app.
SVCHOST is included in the windows installation CD, and there's a perfectly CLEAN COPY at my website.
http://www.constantreality.net/stp
The Svchost.exe file is located in the %SystemRoot%\System32 folder. At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. Multiple instances of Svchost.exe can run at the same time. Each Svchost.exe session can contain a grouping of services, so that separate services can run, depending on how and where Svchost.exe is started. This allows for better control and easier debugging.
Svchost.exe groups are identified in the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Svchost
Each value under this key represents a separate Svchost group and is displayed as a separate instance when you are viewing active processes. Each value is a REG_MULTI_SZ value and contains the services that run under that Svchost group. Each Svchost group can contain one or more service names that are extracted from the following registry key, whose Parameters key contains a ServiceDLL value:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Service
To view the list of services that are running in Svchost:
Click Start on the Windows taskbar, and then click Run.
In the Open box, type CMD, and then press ENTER.
Type Tasklist /SVC, and then press ENTER.
Tasklist displays a list of active processes. The /SVC switch shows the list of active services in each process. For further information about a process, type the following command, and then press ENTER:
Tasklist /FI "PID eq processID" (with the quotation marks)
The following example of Tasklist output shows two instances of Svchost.exe that are running. Image Name PID Services
========================================================================
System Process 0 N/A
System 8 N/A
Smss.exe 132 N/A
Csrss.exe 160 N/A
Winlogon.exe 180 N/A
Services.exe 208 AppMgmt,Browser,Dhcp,Dmserver,Dnscache,
Eventlog,LanmanServer,LanmanWorkstation,
LmHosts,Messenger,PlugPlay,ProtectedStorage,
Seclogon,TrkWks,W32Time,Wmi
Lsass.exe 220 Netlogon,PolicyAgent,SamSs
Svchost.exe 404 RpcSs
Spoolsv.exe 452 Spooler
Cisvc.exe 544 Cisvc
Svchost.exe 556 EventSystem,Netman,NtmsSvc,RasMan,
SENS,TapiSrv
Regsvc.exe 580 RemoteRegistry
Mstask.exe 596 Schedule
Snmp.exe 660 SNMP
Winmgmt.exe 728 WinMgmt
Explorer.exe 812 N/A
Cmd.exe 1300 N/A
Tasklist.exe 1144 N/A
The registry setting for the two groupings for this example are as follows:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost:
Netsvcs: Reg_Multi_SZ: EventSystem Ias Iprip Irmon Netman Nwsapagent Rasauto Rasman Remoteaccess SENS Sharedaccess Tapisrv Ntmssvc
RApcss :Reg_Multi_SZ: RpcSs |
Re: svchost.exe problem by Anonymous Ghost on February 10th, 2004 06:48:59 PM
PS: i'd really appreciate some feedback on my helping, so contact me at these addresses.
AIM: Ono Its Seth
Yahoo: ono_its_seth
MSN: sethtierney@hotmail.com
EMAIL: ono_its_seth@yahoo.com
WEB: http://www.constantreality.net/stp |
Re: svchost.exe problem by Anonymous Ghost on February 10th, 2004 06:51:05 PM
PSS: Why would you open an email/attachment saying you have a virus?
Take some smart pills
http://www.constantreality.net/stp |
Re: svchost.exe problem by toxic on February 14th, 2004 02:59:52 AM
Hi there!
I've been infected with this svchost virus aswell and i can't get rid of it in ANYWAYS...I formatted my pc and nothing happened i even did all the things u guys mention in here but i couldn't delet it.
Is there any other way how i can delet this thing?
I was told to format everything again from the dos but i don't know how to go to the dos.
I need Help....BADLY hehehe |
Re: svchost.exe problem by Anonymous Ghost on February 16th, 2004 12:21:59 AM
Hey, having the same problem too... (did the same things as toxic and got the same lack of results). Does anyone have any idea how to get rid of this???!!! |
Re: svchost.exe problem by toxic on February 18th, 2004 07:08:00 AM
Ok I have the solution for the svchost virus thing. All you have to do is First upgrade ur service pack to service pack 4 from the windows update and after that install a patch from http://www.microsoft.com/downloads/search.aspx?displaylang=en when u are in that site choose number 5 and download the file: Windows-KB833330-ENU.exe |
Re: svchost.exe problem by Anonymous Ghost on March 20th, 2004 08:29:58 AM
I got the same problem and I would like to use some of these options above but I have one problem. is there anyway to get to control panel to do these things without the task bar working. the 99% cpu is causing the task bar to freeze onload. Im supposing I got this virus from running a game server online. thanks for any help |
Re: svchost.exe problem by Anonymous Ghost on March 21st, 2004 08:33:09 PM
application error svchost.exe |
Re: svchost.exe problem by Anonymous Ghost on March 23rd, 2004 06:03:12 PM
I read evezthing here and I migth have a similar problem but I m not shure it's a virus. svchost takes more and more memory and the task under that *thanks to ghost explanations* is RemoteRegistry. Any Idea is welcomed |
Re: svchost.exe problem by Anonymous Ghost on March 24th, 2004 04:59:13 PM
Pls. check if any of the following services is running:
cvcd.exe
esoh123.exe
ivr.exe
If that is the case, you probably got the worm agobot.3.64000 which can be removed with most antivirus programs. |
Re: svchost.exe problem by Anonymous Ghost on March 26th, 2004 12:20:45 AM
won't get off my comp .. comp always shuting down |
Re: svchost.exe problem by scorpio on March 27th, 2004 01:19:46 AM
won't get off my comp .. comp always shuting down
explain in more detail, abt the exact problem. it will be better to post it as a new problem. |
Re: svchost.exe problem by Anonymous Ghost on April 19th, 2004 02:09:23 PM
I'm posting because I had this broblem like a few hours ago :) and found this thread... it seems a lot of people are having this kind of trouble as few of my friends in our LAN.
I never had this thing before but for some reason (winXP giving me blues all over the place :) I had to reinstall windows... good. I formated the harddrive (10,2 GB Quantum) from DOS, I've reinstalled WinXP and it worked... until I've started some programs that use the network (like DC++ on our local server and Network Assistant, a chat program); after changing the kit CDs a few times, I've noticed that my computer was slowing down and I started the task manager... one of the four svchost.exe was at 70% and the System (NOT System Idle process) was at 30%, giving my processor a full-time job...
I immediately thought at my friends who had the same problems (yes, formatted their harddrives a few times and still that darn svchost...) and decided to search the Net. After reading a few threads and seeing that nobody had an idea of what to do, I took action :)
At the moment I've yet to find a GOOD firewall (all firewalls have HUGE demands on memory, not like that SWEET ipfw from linux...) so I remembered hearing about an integrated firewall in winXP SP2... searched the LAN and found a few patches, SP1 and SP2.
I did this a few hours ago and (hopefully) it worked... ok here it goes:
1. If your computer is in a LAN (bet it is...) unplug the LAN cable
2. Reboot
3. install the MSBLASTER patch and SP1 + SP2 (if you don't have SP2 as it is still BETA, I suggest you stop reading and get yourself a GOOD firewall, install it and...)
... Reboot
Until you've configured the firewall to BLOCK all your connections it's still not safe to plug your network cable so configure the firewall to leave open ONLY what you know it's safe (like iexplore.exe and others)
Plug the cable and hopefully it will work...
For the ones of you who don't have LAN access (even Internet access) I'm sorry but I don't know a workaround that one. (since the only time I had this experience was when I'd been connected in the network). |
Re: svchost.exe problem by Anonymous Ghost on April 22nd, 2004 09:00:46 AM
I have this problem at the moment, I have just installed win xp on a clean system and I get the svchost problem. I know thta it the instance of svchost that runs rpcss, does anyone actually know how to fix this particular problem without uninstalling or fluking it? I don't have any programs on my computer except xp so it is a genuine issue... why hasn't microsoft got anything on their site worth a damn? |
Re: svchost.exe problem by Anonymous Ghost on May 09th, 2004 03:58:50 AM
Hi this is first time on Forum i have had this cpu 100% usage thing before and guess what ive got it now!!!!!!! every time i format and reinstall windows from the moment you install it xp standard firewall is not enbled i have gotten rid of this thing before by deleting a reg key which was a jumble of letters and numbers and that was that but this time its different i get the same message
WARNING your comp will shut down in blah blah blah seconds save any work it will shut down due to RPC remote procedure call ...
i have tryed running in safe VGA and running a long list of scanners norton spybot adaware house call but nothing can pick it up OMFG this is giving me the poopies!!! all well 2morrows another day |
Re: svchost.exe problem by Anonymous Ghost on May 17th, 2004 01:50:27 AM
all of you like have get a blaster variante search for remove tool cause antivirus got reall big problem to find it... personaly that fixed my problem. sorry if i dont give link its cause he exist too many blaster variante virus |
Re: svchost.exe problem by Anonymous Ghost on June 16th, 2004 02:58:35 AM
My CPU has been pretty slammed lately too, and ive gone through a bunch of processes to try and rid myself of over CPU use - successfully apparently - though it seems to run slower now than before despite what the Task manager says (avg 40% now).
I now have svchost.exe running 4 times over in the task manager as well as a program called services.exe.
Is services.exe a virus?
In searching it out in the registry I also found the following HKEY_LOCAL_MACHINE entries:
HKLM\Software\Microsoft\Windows\Current Version\Run\SVCHOST.EXE
and
HKLM\Software\Microsoft\Windows\Current Version\Run Services\SVCHOST.EXE
Are these good SVChosts??? Should I get rid of them???? |
Re: svchost.exe problem by Anonymous Ghost on June 24th, 2004 01:27:56 PM
Alright, I think I read everything in this topic but it's a lot for someone with a rpoblem and a short attention span to read so:
This is what I know (or am pretty sure of):
Most people here have the SVChost.exe overloading their CPU.
The problem is not SVChost itself, at least in my case, but a virus that masks itself as SVChost.exe.
Deleting SVChost will NOT help because it is merely a mask for this virus.
That said, I have 3 SVChosts labeled system, one labeled local service and one labeled network service. I downloaded a process viewer and looking at the modules can't tell the difference between them. They all call up the same sort of dlls copyrighted by microsoft. One of them, however, shouldn't be there and I don't know which one. How do I figure this out?
After that problem is solved, just have to find out what's calling it up, which shouldn't be too tough with all the security crud I have on this computer. |
Re: svchost.exe problem by Anonymous Ghost on June 29th, 2004 01:59:03 PM
hi everyone,
I searched google for svchost + virus and reached this site. Nice site and great advisors working here. I have a completely seperate problem with svchost. Hope you guys can help me out.
The program does not cause any problem when I am offline. But when I connect to the internet (through dial up connection) after some arbitrary time a message comes saying svchost.exe has performed an illegal operation and will be closed (attempt to access illegal memory location).
After this message,
(1) Page redirection is disabled, that is I can't go to sites like hotmail.
(2) Cut, Copy, Paste cant be done.
(3) Pages cant be saved
(4) Some buttons in pages dont work.
and more..........
For your information, I have a completely updated version of NAV and have formatted my root drive numerous occasions to get rid of this problem.
anyone plzzzzzzzzzzzzzzzz helpppppppp. |
Re: svchost.exe problem by Anonymous Ghost on September 28th, 2004 10:53:50 PM
The problem is as soon as I start the computer and connect to LAN a window pops up to show svchost.exe creating error and will be closed by windows. please give a solution to this problem. |
Re: svchost.exe problem by Anonymous Ghost on September 29th, 2004 04:54:56 PM
i have the same problem.. i would add
1 . can't see the winnt folder content.
2. can't use 'find' in web pages.
3. can't see the dialup connection status.
Sorry , no solution yet.
I will install Win SP4 (i currently have SP3). |
Re: svchost.exe problem by Anonymous Ghost on September 29th, 2004 04:57:08 PM
I found a free scanner here:
http://housecall.trendmicro.com/housecall/
It detected in my files WORM.PLEXUS.B. |
Re: svchost.exe problem by ff8raider on October 07th, 2004 08:48:57 PM
I think I might have found something that may help all of you. I have the sme svchost problem....In my system32 dir I have a lot of files named just tftp*
* is always a random 3 or 4 digit number Bitdefender detects some of them as backdoor.sdbot.gen but it says it can't delete them. I have been reading some posts online and a lot of people that have this tftp* in their system32 folder Also have the svchost problem. If any of you have these files in your system32 dir maybe all these little files are the source of the Svchost problem. |
explorer.exe by Anonymous Ghost on October 15th, 2004 10:03:46 AM
The same pc that used to have svchost problem is now bending to its knees with 99% of cpu load for a service as EXPLORER.exe ,unfortunately it is the file server too.Any suggestion ? |
Re: I have the solution to the svchost.exe cpu usage problem by Anonymous Ghost on October 19th, 2004 09:16:34 AM
Fire into safe mode, go to control panel and access your Network connections. Anyhting there that has IPX or SPX in the title should be uninstalled. Then it will work fine. |
Re: svchost.exe problem by Anonymous Ghost on October 23rd, 2004 12:55:15 AM
i have the same prob, i find that there is this one svchost that will activate the shutdown virus thingamajig. It is the one that runs at around 8000 kb of memory for SYSTEM. I dont know if this helps, but oh well. I think that safe mode is the way to go, but im stuck beyond that. **** YOU MICROSOFT! |
Re: svchost.exe problem by Anonymous Ghost on October 24th, 2004 08:19:30 PM
i've got the same kind of bug.
This week-end i've uninstall winxp sp2.
Since then, as soon as I access to a network should it be wire or wireless, I get a svchost error and a generic host process for win32 error.
I've tried to reinstall sp2 saying to myself that uninstall it had also uninstall some of my network driver, but it seems not. It's still doing this f**** error.
I haven't format my comp yet, since I dont want to, and that i'm sure I will find a way to debug it but, without an access to the net, it is hard to do something.
If someone have already find how to get rid of this bug, jsut say it, and i don't think mine is a virus, since it didn't connect my comp since the uninstall of sp2, and it made it just after it |
Re: svchost.exe problem by Anonymous Ghost on November 04th, 2004 03:59:00 PM
svchost is legit - svhost (no "C") is a worm- delete it from registry and system32. |
Re: svchost.exe problem -Sucking-Valuable-CPU-host by Anonymous Ghost on November 15th, 2004 04:03:45 PM
It's a very simple fix as far as I am concerned..
Just do an End process on that lil bastard if you see your CPU usage rise over 75% for more than 30seconds.. Do you know how many hundreds of millions computations your doing in just 60 seconds with your CPU wide open ??
I know its getting to be winter but damm what an expensive way to keep your feet warm !
After I kill it it doesn't come back until I reboot/ restart.. But my hard drives run like a SOB even if I have my DSL shut down..who knows.. this is all just for fun anyway right ?
So I guess till we all figure this out.. and I pray none of you are doing any database work.. Deal with the skips in the P2P music, movies.. spots on your JPGs... it doesent mess fith SPAM mail as far as I can tell..
SVChost .. Sucking-Valuable-CPU-host |
Re: svchost.exe problem by Anonymous Ghost on November 21st, 2004 11:55:46 PM
I had the same ******** problem. then I uninstalled Kerio firewall 'cause I think I either allow it a connection to something I should not(generic host process as a server? )and installed ZA,done a few windows updates and it disappeared for now.
this after I installed my drive images,'cause I had 2 ****** viruses I was having trouble getting rid of: coflop and chainsaw.exe.
all this is very distressing...it's been weeks I been fighting with viruses and that ****** svchost problem.
a curiosity: how many of you are on Blueyonder or use Kerio? |
Re: svchost.exe problem by Anonymous Ghost on November 28th, 2004 02:48:03 AM
I have just now got this problem (CPU 100%) ... and all I have done is got all the updates for Nortons Systemworks 2003 after installing it ... Could this program be causing the problem? as it seems a hellofa coincidence. |
Re: svchost.exe problem by Anonymous Ghost on December 13th, 2004 05:01:33 PM
Seems a netsearch led me here, Im having a different problem with scvhost.exe Each time a reboot this error message occurs "could not red memory", tried to reinstall XP home but same message came up in installation program, computer is fully protected so I don't think its the virus version, Anyone help please? |
Re: svchost.exe problem by Anonymous Ghost on January 30th, 2005 01:21:12 AM
I have tryed all your solutions...hell...nothing works. NAV sucks, firewalls don't do much either. Ii had two firewalls installed + NAV + Bit Defender... so there were 4 firewalls and two antiviruses and still programs were able to install themselfes from the internet. .exe files were poping up in my c:\ with weird names. I scanned them and the antivirus found nothing.
The only solution i could find was:
1) Format the whole HDD
2) Reset pc and set it to boot from CD.
3) Insert Linux CD 1.
4) Follow the instalation steps.
Result: No more viruses.
Linux is awsome and it's open source so you can make it how you want to. Idon't know of any Linux viruses and i don't think there are going to be any.
People make viruses and to attack Windows systems because they are not open source, they ask money for information.
So.. drop Windows, get Linux (100% free, free support, free everything!) |
Re: svchost.exe problem by Anonymous Ghost on April 19th, 2005 04:44:34 AM
i have also hvc host problem. i canot copy and paste no start menu bar it say my rpcc failed to lod, does anybody ther to fix it |
Re: svchost.exe problem by Anonymous Ghost on April 19th, 2005 09:36:09 AM
Re: svchost.exe problem by Anonymous Ghost on April 19th, 2005 05:44:34 AM
i have also hvc host problem. i canot copy and paste no start menu bar it say my rpcc failed to lod, does anybody ther to fix it
Better post a new problem with your system configuration :) |
Re: svchost.exe problem by Anonymous Ghost on October 03rd, 2005 04:21:53 AM
i have the same ***** problem with svchost. exe . the cpu was on 100 % and i must update windows ( sp1 :) ) ....... since then my problem was gone .... i have before then 2 firewalls and 2 antiviruses and i think that svchost is not a virus ... i have 2 times formated my hard . nothing works ...!!!! update your system ,folks !!!! |
