SVCHOST.EXE memory leak

[Bob Smeed]

on boot up svchost.exe (local service) continues to grab
memory. I cannot use start button/task bar until I end
the process. At that point another svchost.exe (local
service) process starts and does not grab additional
memory. However, I am unable to access interne either
thru my DSL connection or dial up. I can establish a
connection but browser will not display page. Just prior
to experiencing this problem I had installed a firewire
card and some video editing software (Pinnacle DV). But,
I have since uninstalled the software and the card. I
still have the memory leak problem. Not sure what to try
to fix this problem short of reformatting.

Thanks,

Bob Smeed

 

[Alec Soroudi]

Well, there are plenty of services that use svchost.exe What you could
do is to bring up the Services database and take a look around. Open the
Control Panel->Administrative Tools->Services. Sort the services by
clicking on the Startup Type column. Now look at the ones that are
"Automatic". See if there's anything suspicious in there starting with any
services that do NOT have anything in the Description column. Check the
"Properties" for it and see if the "Path to Executable" points to
svchost.exe. Try setting the service to Manual and rebooting. Normally,
there should be about 4 svchost.exe processes running and they usually grab
more memory for the first few seconds they start.


--
Alec S.
alec @ synetech . cjb . net


e

 

[kim]

on boot up svchost.exe (local service) continues to grab
memory. I cannot use start button/task bar until I end
the process. At that point another svchost.exe (local
service) process starts and does not grab additional
memory. However, I am unable to access interne either
thru my DSL connection or dial up. I can establish a
connection but browser will not display page. Just prior
to experiencing this problem I had installed a firewire
card and some video editing software (Pinnacle DV). But,
I have since uninstalled the software and the card. I
still have the memory leak problem. Not sure what to try
to fix this problem short of reformatting.

There are many viruses that hide as fake svchost.exe files. See
http://www.answersthatwork.com/Tasklist_pages/tasklist_s.htm
Run an up to date virus scan.

Kimmy

 

[Alec Soroudi]

True especially the Nachi.worm. I hate that thing SOOOOOOOOO MUCH!!!

:-[

The nachi.worm can infect your system as soon as you're connected while
you're INSTALLING Windows. The effect is that it seems like Windows comes
preinstalled with it. Check C:\Windows\System32 for a folder called WINS.
If there is such a folder and it contains these 2 files: SVCHOST.EXE and
DLLHOST.EXE then you are infected. Delete the WINS directory (it's a virus
directory) and reboot.


--
Alec S.
alec @ synetech . cjb . net


e