svchost.exe memory leak

  • Thread starter Thread starter Ray Lewis
  • Start date Start date
R

Ray Lewis

I just installed the new patches on my XP laptop. Afterwards, I tried to go
to windowsupdate.microsoft.com and IE froze (IE works fine on other sites).
I checked the Task Manager and svchost.exe appears to be leaking memory. I
cancelled the svchost.exe process, and windowsupdates.microsoft.com began to
load....and then IE hang again. I cancelled the svchost.exe process again,
and windowsupdates produced an error stating that an error occurred on the
page. I removed the new updates from my pc:

KB891711
KB871250
KB890175

But I couldn't remove KB890830 because microsoft says that nothing is
installed when this update is applied. I've restarted, and I'm still having
the same issues and svchost.exe is still clocking away.

PS I've noticed that if I disconnect from the net, svchost does not leak.

Can anyone help me?!?
 
SVCHOST.EXE is the name and target of numerous infectors. Let's rule out that possibility.

1) Download the following four items...

McAfee Stinger
http://vil.nai.com/vil/stinger/

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt343.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM .

2) Update Adaware with the latest definitions.
3) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode [F8 key during boot]
and shutdown as many applications as possible.
5) Using Trend Sysclean, Stinger and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using the three
utilities; Trend Sysclean, Stinger and Adaware
7) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) Create a new Restore point


* * * Please report your results ! * * *

--
Dave
http://www.claymania.com/removal-trojan-adware.html




| I just installed the new patches on my XP laptop. Afterwards, I tried to go
| to windowsupdate.microsoft.com and IE froze (IE works fine on other sites).
| I checked the Task Manager and svchost.exe appears to be leaking memory. I
| cancelled the svchost.exe process, and windowsupdates.microsoft.com began to
| load....and then IE hang again. I cancelled the svchost.exe process again,
| and windowsupdates produced an error stating that an error occurred on the
| page. I removed the new updates from my pc:
|
| KB891711
| KB871250
| KB890175
|
| But I couldn't remove KB890830 because microsoft says that nothing is
| installed when this update is applied. I've restarted, and I'm still having
| the same issues and svchost.exe is still clocking away.
|
| PS I've noticed that if I disconnect from the net, svchost does not leak.
|
| Can anyone help me?!?
|
| --
| Wack
| ----
| This message will self destruct.
|
|
 
For a sanity/security check -- please perform the scan(s) "just to make sure".

--
Dave




| thanks for the advice, but during a Veritas Backup, the svchost.exe stopped
| clocking. After the backup, i rebooted and now all is well......i won't be
| installing those patches yet, though. I'll give it a week on my test box
| and then go for it.
|
| --
| Wack
| ----
| This message will self destruct.
| | > SVCHOST.EXE is the name and target of numerous infectors. Let's rule out
| that possibility.
| >
| > 1) Download the following four items...
| >
| > McAfee Stinger
| > http://vil.nai.com/vil/stinger/
| >
| > Trend Sysclean Package
| > http://www.trendmicro.com/download/dcs.asp
| >
| > Latest Trend Pattern File.
| > http://www.trendmicro.com/download/pattern.asp
| >
| > Adaware SE (free personal version v1.05)
| > http://www.lavasoftusa.com/
| >
| > Create a directory.
| > On drive "C:\"
| > (e.g., "c:\New Folder")
| > or the desktop
| > (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
| >
| > Download SYSCLEAN.COM and place it in that directory.
| > Download the Trend Pattern File by obtaining the ZIP file.
| > For example; lpt343.zip
| >
| > Extract the contents of the ZIP file and place the contents in the same
| directory as
| > SYSCLEAN.COM .
| >
| > 2) Update Adaware with the latest definitions.
| > 3) Disable System Restore
| > http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
| > 4) Reboot your PC into Safe Mode [F8 key during boot]
| > and shutdown as many applications as possible.
| > 5) Using Trend Sysclean, Stinger and Adaware, perform a Full Scan of
| your
| > platform and clean/delete any infectors/parasites found.
| > (a few cycles may be needed)
| > 6) Restart your PC and perform a "final" Full Scan of your platform
| using the three
| > utilities; Trend Sysclean, Stinger and Adaware
| > 7) Re-enable System Restore and re-apply any System Restore
| preferences,
| > (e.g. HD space to use suggested 400 ~ 600MB),
| > 8) Reboot your PC.
| > 9) Create a new Restore point
| >
| >
| > * * * Please report your results ! * * *
| >
| > --
| > Dave
| > http://www.claymania.com/removal-trojan-adware.html
| >
| >
| >
| >
| > | > | I just installed the new patches on my XP laptop. Afterwards, I tried
| to go
| > | to windowsupdate.microsoft.com and IE froze (IE works fine on other
| sites).
| > | I checked the Task Manager and svchost.exe appears to be leaking memory.
| I
| > | cancelled the svchost.exe process, and windowsupdates.microsoft.com
| began to
| > | load....and then IE hang again. I cancelled the svchost.exe process
| again,
| > | and windowsupdates produced an error stating that an error occurred on
| the
| > | page. I removed the new updates from my pc:
| > |
| > | KB891711
| > | KB871250
| > | KB890175
| > |
| > | But I couldn't remove KB890830 because microsoft says that nothing is
| > | installed when this update is applied. I've restarted, and I'm still
| having
| > | the same issues and svchost.exe is still clocking away.
| > |
| > | PS I've noticed that if I disconnect from the net, svchost does not
| leak.
| > |
| > | Can anyone help me?!?
| > |
| > | --
| > | Wack
| > | ----
| > | This message will self destruct.
| > |
| > |
| >
| >
|
|
 
thanks for the advice, but during a Veritas Backup, the svchost.exe stopped
clocking. After the backup, i rebooted and now all is well......i won't be
installing those patches yet, though. I'll give it a week on my test box
and then go for it.

--
Wack
----
This message will self destruct.
David H. Lipman said:
SVCHOST.EXE is the name and target of numerous infectors. Let's rule out that possibility.

1) Download the following four items...

McAfee Stinger
http://vil.nai.com/vil/stinger/

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt343.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM .

2) Update Adaware with the latest definitions.
3) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode [F8 key during boot]
and shutdown as many applications as possible.
5) Using Trend Sysclean, Stinger and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using the three
utilities; Trend Sysclean, Stinger and Adaware
7) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) Create a new Restore point


* * * Please report your results ! * * *

--
Dave
http://www.claymania.com/removal-trojan-adware.html




| I just installed the new patches on my XP laptop. Afterwards, I tried to go
| to windowsupdate.microsoft.com and IE froze (IE works fine on other sites).
| I checked the Task Manager and svchost.exe appears to be leaking memory. I
| cancelled the svchost.exe process, and windowsupdates.microsoft.com began to
| load....and then IE hang again. I cancelled the svchost.exe process again,
| and windowsupdates produced an error stating that an error occurred on the
| page. I removed the new updates from my pc:
|
| KB891711
| KB871250
| KB890175
|
| But I couldn't remove KB890830 because microsoft says that nothing is
| installed when this update is applied. I've restarted, and I'm still having
| the same issues and svchost.exe is still clocking away.
|
| PS I've noticed that if I disconnect from the net, svchost does not leak.
|
| Can anyone help me?!?
|
| --
| Wack
| ----
| This message will self destruct.
|
|
Click to expand...
 
Back
Top