Svchost slowing system

[Dunner]

Hi,

I was recently infected with a virus which was slowing
down my system. I managed to remove it using an anti-
virus program but the system is still running very
slowly. I have discovered that the cause of this is a
second copy of svchost running under the system user.

If I end this process using Ctrl-Alt-Del the system
returns to normal and works fine however it reloads
everytime I restart the computer. I was wondering if
anyone knows what virus causes this sort of issue and how
I can resolve it, someone said to me there might be an
entry in the startup folder in the registry that is
loading it but I'm not certain how to access it.

Any help would be greatly appreciated.

Thanks

Dunner

 

[cary]

use f8 while booting .into safe mode and uncheck or delete
the hopefully extra svchost. and update your system at
windows update (critical updates). was it the msblast worm????

 

[Frank]

You are still infected with a worm. try to clean it off
again, boot into safe mode before running the cleaner.

 

[Bruce Chambers]

Greetings --

It's perfectly normal to have several instances of Svchost.exe
running simultaneously.

A Description of Svchost.exe in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q314056

However, if Svchost.exe is using a large portion of your CPU
cycles, it has most likely been "hijacked" by a worm or Trojan. Have
you tried using a decent antivirus application with the most
currently-available virus definition files? A strong candidate would
be W32.Welchia.Worm.

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

Because many of the newer viruses and worms can disable antivirus
applications whose definitions weren't up-to-date, try using one or
more of the free on-line scanners to double-check your system.

Trend Micro - Free online virus Scan
http://housecall.trendmicro.com/

McAfee Security - FreeScan
http://www.mcafee.com/myapps/mfs/default.asp

Symantec Security Check
http://security.symantec.com/ssc/home.asp


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH