start up problem SVHOST.exe

[Kenny S]

after startup one of the SVHOST.exe's takes up all the cpu and makes the
computer freeze.
Sometimes I must reset the computer....

Is there a way to see inside that svhost.exe what is causing this?

its probably a service, but which one?

 

[Gerard Sanchez]

You got yourself a virus.

Run 2 complete virus scan.

 

[Malke]

after startup one of the SVHOST.exe's takes up all the cpu and makes
the computer freeze.
Sometimes I must reset the computer....

Is there a way to see inside that svhost.exe what is causing this?

its probably a service, but which one?

Svchost is used by many Windows processes. Please note the correct
spelling. If you do have "svhost" running, then you have a virus. Scan
with a current antivirus (version no earlier than 2003) using updated
definitions. It is crucial to do all scans in Safe Mode with updated
tools. If you do not have an antivirus installed (insert irritated
lecture here), then start cleaning your machine by using TrendMicro's
Sysclean, as follows:

TrendMicro's Sysclean is an extensive antivirus tool which has the
advantage of not needing to be installed. It requires two parts - the
scanning engine and the virus pattern files.

1. Create a new folder on your Desktop or the C: drive named something
useful like "Sysclean".
2. Go here and download the two parts of the program to that folder:

http://www.trendmicro.com/download/dcs.asp - Sysclean
http://www.trendmicro.com/download/pattern.asp - virus pattern files

The pattern files will be zipped - extract them with your unzipper (like
WinZip) or if you have XP, you can just open the folder. You need to
put the extracted files in the Sysclean folder you made.

3. Restart your computer in Safe Mode. Get into Safe Mode by repeatedly
tapping the F8 key as the computer is starting up to get to the proper
menu.
4. Go to the Sysclean folder you made and double-click on sysclean.com.
Start the scan. After the scan is finished, look at the log. You may
need to make a note of where any viruses were found if they were not
able to be removed so you can manually delete them.

Once you have done the preliminary cleanup, install a full-featured
antivirus, update its definitions, and scan again in Safe Mode.

Malke

 

[Kenny S]

sorry its not spelled in caps

its svhost.exe and I have done a virus scan many times using updated avast
hom edition
and various online scanners.
I dont have a virus.

 

[Malke]

sorry its not spelled in caps

its svhost.exe and I have done a virus scan many times using updated
avast hom edition
and various online scanners.
I dont have a virus.

If you have "svhost.exe" and not "svchost.exe", then I'm sorry but you
*do* have a virus. If you will Google for "svhost.exe" then you will
get approximately 6,900 links stating that this file is caused by any
one of a number of worms. I can't say why you are getting a clean bill
of health from your av and online scanners since I can't see your
computer from here, but you should perform the scan in Safe Mode with
Sysclean as previously suggested. You should also disable System
Restore and be sure you are running a firewall.

Malke

 

[Kenny S]

I have only svchost.exe

its not a virus.... can I look inside the svhost and see what services are
running?

 

[Kenny S]

perhaps this program

http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

 

[Rock]

I have only svchost.exe

its not a virus.... can I look inside the svhost and see what services are
running?

You have spelled it in this last response to Malke two different ways:
svchost.exe is the valid windows file --- svhost.exe is not.

Download process explorer from sysinternals:
http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

This will show what is loaded in each instance of svchost.exe

 

[Guest]

Malke, your recommendation to use the Micro Trend sysclean did the trick and
got rid of svhost (worm_agobot.cv). No more MS error report message at
startup. Thank you!

 

[Malke]

Malke, your recommendation to use the Micro Trend sysclean did the
trick and
got rid of svhost (worm_agobot.cv). No more MS error report message
at
startup. Thank you!

That's great! Now make sure you have a full-featured antivirus installed
and updated. Do a full scan in Safe Mode just to be sure.

Thanks for letting me know the happy outcome.

Malke

 

[Guest]

Malke,
I have tried using this Mirco Trend sysclean in safe mode, but my pc wont
run the program i.e. it loads and the Trends screen quickly flashes, then it
disappears! any suggestions?