SVCHOST problems... WinXP

[MAMEngineer]

OK, when I reboot my server or workstation (both XP) svchost.exe (network)
loads... it runs at max cpu, 15 mb in size... I can't go on the internet...
I can't get mail. I have to go and stop this service.... any ideas? Virus
scans are negative!

Tom B

 

[Touch Base]

Run a full AV scan with updated definitions on your system. There is a
virus that messes up your svchost, the blaster virus I think.




What You Should Know About the Blaster Worm and Its Variants
http://www.microsoft.com/security/incident/blast.asp

OK, when I reboot my server or workstation (both XP) svchost.exe

(network) loads... it runs at max cpu, 15 mb in size... I can't go on
the internet...I can't get mail. I have to go and stop this service....
any ideas? Virus scans are negative!

 

[Carlton Brown]

OK, when I reboot my server or workstation (both XP) svchost.exe (network)
loads... it runs at max cpu, 15 mb in size... I can't go on the internet...
I can't get mail. I have to go and stop this service.... any ideas? Virus
scans are negative!

I had the same problem. I found it by looking in the system event
log. I saw that the SSDP discovery service was continually stopping
and starting for some reason. I disabled this service (I don't have
any UPnP devices) and the problem went away. If you aren't lucky
enough to see the offending service littering the event log with
messages, you'll just have to try stopping and starting random
services and see what helps.

The main problem I have with this feature, after reading the
newsgroups, is that svchost.exe could peg out the CPU and you'd never
be able to tell exactly which service is causing the problem except by
trial and error and indirect observation. In any other OS it is a
trivial thing to identify what background job is monoplizing the CPU.
In WinXP you just see svchost.exe, and good luck killing that one (not
that it would solve the problem if you could kill it).