K
kmcdowell
I have a svchost.exe process running at near 100% CPU util
all the time. I have two other svchost.exe instances that
both are at 0% CPU util. I have scanned for virii with the
latest eTrust signature, nothing found. I can not end the
process, access is denied.
When searching my computer, I have two svchost.exe files:
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\dllcache\svchost.exe
Which folder is this file supposed to be in? Is it normal
to have two files in these folders like this?
There are a few differences between the files. The most
significant difference is Security permissions. The file
in the \system32\ folder has "Everyone" and "Power Users"
and "Users" groups selected as well, all with "Read"
and "Read and Execute" permissions. Both files
have "Administrators" and "System" groups.
Am I barking up the wrong tree here? Anyone know anything
more about this?
kmcdowell
all the time. I have two other svchost.exe instances that
both are at 0% CPU util. I have scanned for virii with the
latest eTrust signature, nothing found. I can not end the
process, access is denied.
There are dozens of infectors that either
infect the MS SVCHOST file or use their
own file with that name.
When searching my computer, I have two svchost.exe files:
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\dllcache\svchost.exe
Which folder is this file supposed to be in? Is it normal
to have two files in these folders like this?
There are a few differences between the files. The most
significant difference is Security permissions. The file
in the \system32\ folder has "Everyone" and "Power Users"
and "Users" groups selected as well, all with "Read"
and "Read and Execute" permissions. Both files
have "Administrators" and "System" groups.
Am I barking up the wrong tree here? Anyone know anything
more about this?
kmcdowell