:) I disabled ALL services and then rebooted.. I don't have the spiking problem anymore, but here comes the task of starting each one.. I won't see the spiking after I start a service, unless I reboot first right? -----Original Message----- From: Tim Mangan [mailto:tmangan@xxxxxxxxxxxx] Sent: Monday, December 13, 2004 1:19 PM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: SVCHOST.EXE @ 100% Every 5 seconds.. I think you need to do it to ALL the services using Svchost. Svchost is used to run a variety of services. Right click on a service name and select properties. From there you can see how the service is started. You are looking for the ones that are "C:\Windows\system32\svchost.exe -k [something]". More likely than not, the issue is not a virus; knowing which service it is will help you to diagnose the problem. If it is a virus, this still helps to isolate which exe is infected or installed. tim -----Original Message----- From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Martin, Eddie Sent: Monday, December 13, 2004 12:56 PM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: SVCHOST.EXE @ 100% Every 5 seconds.. I went through and disabled all services that I possibly could. Again, nothing jumped out at me as being weird. I looked at all of the services that were currently started and disabled the ones in which I didn't need. I rebooted, same problem exists. -----Original Message----- From: Tim Mangan [mailto:tmangan@xxxxxxxxxxxx] Sent: Monday, December 13, 2004 12:15 PM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: SVCHOST.EXE @ 100% Every 5 seconds.. Eddie, Semaphore, in this case, is not an add company. The list you showed is a list of internal windows object types for which there may be information. For example, a semaphore is an object which is used to synchronize actions between two or more threads. You might want to try the following instead. You might have to reboot when you are done. Go to the Services Manager (under administrator tools) and stop services. If you stop one and the offending process goes away, then at least you will learn which service it is. If not, restart the service. Tim -----Original Message----- From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Martin, Eddie Sent: Monday, December 13, 2004 11:49 AM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: SVCHOST.EXE @ 100% Every 5 seconds.. I just noticed something though... Inside svchost there's something called Semaphore... I googled it, and it comes up as an advertising firm... Now that I know that, I need to figure out how to remove it.... -----Original Message----- From: Sorin Srbu [mailto:Sorin.Srbu@xxxxxxxxxxxxx] Sent: Monday, December 13, 2004 4:01 AM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: SVCHOST.EXE @ 100% Every 5 seconds.. Get Process Explorer from Sysinternals.com (it's free), install, double-click the offiending svchost instance and check the threads running in there. This should help in finding what's causing this problem. You know, it might be a valid thread that's doing this. Maybe you have some performance meters running? HTH. --Original Message Text--- From: Martin, Eddie Date: Fri, 10 Dec 2004 16:37:25 -0500 Hello All, I have tried a million and one things to try and get whatever is on my computer off. I ran Spybot Search and Destroy, Adawre SE Personal Edition, CWShredder, HiJack This, and also downloaded about 5 different virus removal tools from Symantec, ran them all and nothing was found as far as a virus was concerned. I am running Windows XP Pro behind a firewall with Symantec Anti-Virus Corporate Edition. My pc cpu usage spikes to 100% about every 5 seconds, with svchost.exe being the main culprit. I have googled this and it comes up with about 5 billion possibilities about what it could be and how to fix it. Does anyone else know what this could be? BTW: I Also went into hkey_local_machine, Software, Microsoft, Windows, Current Version, Run, and removed anything that could possibly be starting up. If I unplug my network cable from the computer, it stops so it definately is a trojan of some sort. Any help would be greatly appreciated. Ive never not been able to get spyware, or a Trojan off of a pc, so this one is A #1 on the annoying, why cant I figure this out list! BW, Sorin > Sorin Srbu, Systems Engineer Web: http://www.farmfak.uu.se/organisk/ > Dept of Medicinal Chemistry, Phone: +46 (0)18-4714482 >> 3 signals >> GSM > Div of Org Pharm Chem, Mobile Phone: +46 (0)701-718023 > Box 574, Uppsala University, Fax: +46 (0)18-4714474 > SE-751 23 Uppsala, Sweden Visit: BMC, Husargatan 3, D5:512b > > Public PGP key available on request. > > () ASCII ribbon campaign - Against html E-mail /\ > > Harmless tagline follows: > > BOFH excuse follows: Our POP server was kidnapped by a weasel. ******************************************************** This Weeks Sponsor SeamlessPlanet.com Domain Names Register your .com domain name for as low as $7.85 One of the lowest prices on the web! Part of The Kenzig Group. http://www.seamlessplanet.com ********************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm ******************************************************** This Weeks Sponsor SeamlessPlanet.com Domain Names Register your .com domain name for as low as $7.85 One of the lowest prices on the web! Part of The Kenzig Group. http://www.seamlessplanet.com ********************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm ******************************************************** This Weeks Sponsor SeamlessPlanet.com Domain Names Register your .com domain name for as low as $7.85 One of the lowest prices on the web! Part of The Kenzig Group. http://www.seamlessplanet.com ********************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm ******************************************************** This Weeks Sponsor SeamlessPlanet.com Domain Names Register your .com domain name for as low as $7.85 One of the lowest prices on the web! Part of The Kenzig Group. http://www.seamlessplanet.com ********************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm ******************************************************** This Weeks Sponsor SeamlessPlanet.com Domain Names Register your .com domain name for as low as $7.85 One of the lowest prices on the web! Part of The Kenzig Group. http://www.seamlessplanet.com ********************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm ******************************************************** This Weeks Sponsor SeamlessPlanet.com Domain Names Register your .com domain name for as low as $7.85 One of the lowest prices on the web! Part of The Kenzig Group. http://www.seamlessplanet.com ********************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm