[windows2000] Re: SVCHOST.EXE @ 100% Every 5 seconds..

  • From: "Martin, Eddie" <EMartin@xxxxxxxxxxxxx>
  • To: windows2000@xxxxxxxxxxxxx
  • Date: Mon, 13 Dec 2004 13:57:23 -0500

:)

I disabled ALL services and then rebooted.. I don't have the spiking problem
anymore, but here comes the task of starting each one.. I won't see the
spiking after I start a service, unless I reboot first right?


-----Original Message-----
From: Tim Mangan [mailto:tmangan@xxxxxxxxxxxx] 
Sent: Monday, December 13, 2004 1:19 PM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: SVCHOST.EXE @ 100% Every 5 seconds..

I think you need to do it to ALL the services using Svchost.  Svchost is
used to run a variety of services.  Right click on a service name and select
properties.  From there you can see how the service is started.  You are
looking for the ones that are "C:\Windows\system32\svchost.exe -k
[something]".  

More likely than not, the issue is not a virus; knowing which service it is
will help you to diagnose the problem.  If it is a virus, this still helps
to isolate which exe is infected or installed.

tim

-----Original Message-----
From: windows2000-bounce@xxxxxxxxxxxxx
[mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Martin, Eddie
Sent: Monday, December 13, 2004 12:56 PM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: SVCHOST.EXE @ 100% Every 5 seconds..

I went through and disabled all services that I possibly could.  Again,
nothing jumped out at me as being weird.  I looked at all of the services
that were currently started and disabled the ones in which I didn't need.  I
rebooted, same problem exists.


-----Original Message-----
From: Tim Mangan [mailto:tmangan@xxxxxxxxxxxx] 
Sent: Monday, December 13, 2004 12:15 PM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: SVCHOST.EXE @ 100% Every 5 seconds..

Eddie,

Semaphore, in this case, is not an add company.  The list you showed is a
list of internal windows object types for which there may be information.
For example, a semaphore is an object which is used to synchronize actions
between two or more threads.

You might want to try the following instead.  You might have to reboot when
you are done.  Go to the Services Manager (under administrator tools) and
stop services.  If you stop one and the offending process goes away, then at
least you will learn which service it is.  If not, restart the service.

Tim

-----Original Message-----
From: windows2000-bounce@xxxxxxxxxxxxx
[mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Martin, Eddie
Sent: Monday, December 13, 2004 11:49 AM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: SVCHOST.EXE @ 100% Every 5 seconds..

I just noticed something though... Inside svchost there's something called
Semaphore...  I googled it, and it comes up as an advertising firm...

Now that I know that, I need to figure out how to remove it....



-----Original Message-----
From: Sorin Srbu [mailto:Sorin.Srbu@xxxxxxxxxxxxx] 
Sent: Monday, December 13, 2004 4:01 AM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: SVCHOST.EXE @ 100% Every 5 seconds..

Get Process Explorer from Sysinternals.com (it's free), install,
double-click the offiending svchost instance and check the threads running
in there. This should help in finding what's causing this problem. 

You know, it might be a valid thread that's doing this. Maybe you have some
performance meters running?

HTH.



--Original Message Text---
From: Martin, Eddie
Date: Fri, 10 Dec 2004 16:37:25 -0500

Hello All,  

I have tried a million and one things to try and get whatever is on my
computer off.  I ran Spybot Search and Destroy, Adawre SE Personal Edition,
CWShredder, HiJack This, and also downloaded about 5 different virus removal
tools from Symantec, ran them all and nothing was found as far as a virus
was concerned.  I am running Windows XP Pro behind a firewall with Symantec
Anti-Virus Corporate Edition.  My pc cpu usage spikes to 100% about every 5
seconds, with svchost.exe being the main culprit.  I have googled this and
it comes up with about 5 billion possibilities about what it could be and
how to fix it.  Does anyone else know what this could be?  BTW: I Also went
into hkey_local_machine, Software, Microsoft, Windows, Current Version, Run,
and removed anything that could possibly be starting up.  If I unplug my
network cable from the computer, it stops so it definately is a trojan of
some sort. 
Any help would be greatly appreciated. Ive never not been able to get
spyware, or a Trojan off of a pc, so this one is A #1 on the annoying, why
cant I figure this out list!  



BW,

Sorin

> Sorin Srbu, Systems Engineer          Web:
http://www.farmfak.uu.se/organisk/
> Dept of Medicinal Chemistry,          Phone: +46 (0)18-4714482 >> 3
signals >> GSM
> Div of Org Pharm Chem,                Mobile Phone: +46 (0)701-718023
> Box 574, Uppsala University,          Fax: +46 (0)18-4714474
> SE-751 23 Uppsala, Sweden             Visit: BMC, Husargatan 3, D5:512b
>
> Public PGP key available on request.
>
> ()  ASCII ribbon campaign - Against html E-mail /\
>
> Harmless tagline follows:
>
> BOFH excuse follows: Our POP server was kidnapped by a weasel.



********************************************************
This Weeks Sponsor SeamlessPlanet.com Domain Names Register your .com domain
name for as low as $7.85 One of the lowest prices on the web! Part of The
Kenzig Group.
http://www.seamlessplanet.com
**********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm
********************************************************
This Weeks Sponsor SeamlessPlanet.com Domain Names
Register your .com domain name for as low as $7.85
One of the lowest prices on the web! Part of The Kenzig Group.
http://www.seamlessplanet.com
********************************************************** 
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm



********************************************************
This Weeks Sponsor SeamlessPlanet.com Domain Names
Register your .com domain name for as low as $7.85
One of the lowest prices on the web! Part of The Kenzig Group.
http://www.seamlessplanet.com
**********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm
********************************************************
This Weeks Sponsor SeamlessPlanet.com Domain Names
Register your .com domain name for as low as $7.85
One of the lowest prices on the web! Part of The Kenzig Group.
http://www.seamlessplanet.com
********************************************************** 
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm



********************************************************
This Weeks Sponsor SeamlessPlanet.com Domain Names
Register your .com domain name for as low as $7.85
One of the lowest prices on the web! Part of The Kenzig Group.
http://www.seamlessplanet.com
**********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm
********************************************************
This Weeks Sponsor SeamlessPlanet.com Domain Names
Register your .com domain name for as low as $7.85
One of the lowest prices on the web! Part of The Kenzig Group.
http://www.seamlessplanet.com
********************************************************** 
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

Other related posts: