Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
ok here we go, my comp running xp with ample power speed and mem to spare is running at 100% cpu use, it has been doing so despite restarts and closings of programs applications windows start task bar diddies and dodad's , the only culprit i can find is SVCHOST.exe a vital system conductor i have 4 running 2system 1 local service and 1 network service, if any of them close i have a 60 second window before restart auto occurs (via the windows is not running SVCHOST.exe BAD BAD VERRY VERRY BAD!!!! clause) so heres the deal how do i get around or fix this without a roll back or wipe this is the 4th by my count , count of this happining, help?

60 second shutdown warning implies the Blaster virus............
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

Yep Hooner is dead right. Blaster Virus I'm affraid.
http://securityresponse.symantec.com/avcenter/FixBlast.exe
That will remove, then you need to close the hole in windows. Either make sure you download the latest WinXP service Pack or this tool will close the specific hole.
http://www.microsoft.com/downloads/details.aspx?familyid=e70a0d8b-fe98-493f-ad76-bf673a38b4cf&displaylang=en

I don't think it's Blaster, just that it restarts when you close SVCHOST yourself, its a standard windows thing, but you do wanna do a virus check just the same

Have a bit of a look for welchia, it creates another svchost file that sucks resources...
Check your %windows%/system32/wins folder for an svchost.exe
You should only have the svchost file in the system32 folder.

Have a bit of a look for welchia, it creates another svchost file that sucks resources...
Check your %windows%/system32/wins folder for an svchost.exe
You should only have the svchost file in the system32 folder.

Whoa! I have 3 svchost files in my windows system folder. One named "svchost.exe" (13K created 8/18/01), one named "svchostc.exe (13K created 11/26/03) and one named "svchosts.exe" (18K created at the exact same time as the 2nd one).
Should I be telling "Houston, we have a problem??"

Sorry buddy, that sounds like W32/Spy.Tofger.H
This is a key logger trojan so after fixing it, you may want to change all passwords, esp bank ones.For infomation on fixing it go to:
http://msn.mcafee.com/virusInfo/default.asp?id=description&virus_k=100831or
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.tofger.html

I've follwed all these instructions. My svchost is only running once. It's at 99 causing my CPU usage to run at 100% I've done everything, and been working on it since 9am EST. I can't take much more. I can't connect to the net; others on the network can't contact me. Someone please help me, this is driving me nuts.

Hmmm.
What virus scanner do you use??
Make sure that the definitions are up to date.
Download hijack this from:
http://www.spywareinfo.com/~merijn/
And then post the results here.

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |