SVHOST.exe on winxp

MR DAZ

Help!!!

How many svhost.exe should be running in processes on windows xp.??

My system started acting weird last night...going from 0% cpu usage up to a 100%....
The system was going up and down all night...

I have norton firewall installed and norton anti virus 2003 uptodate, also windows patches are all up todate.....

When i checked the processes one of the svhost.exe was using nearly 100% cpu usage....get this .....when i ended this processes i got the warning message from the worm blaster virus

" Your system will reboot in 50, 49,48,47, etc"

Any help would be greatly appreciated

Cake Fiend

Er, the reason you're getting that shutdown message is because you ended the svchost session responsible for the RPC service, not because of the virus.
If you have the msblaster virus, it's quite easy to see - it shows up in the task manager.

If you're worried about what's running in your svchost.exe sessions, take a look at the registry key
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost
for the listings.

sirlinux

When you remove blaster turn on XP firewall

MR DAZ

thanks lads for the advice!!!


I do have the firewall turned on in windows....and ideas why the system is acting like this all of a sudden????

Winters

Im getting the same thing right now.

Eneded a couple of the SVCHOST.EXEs (one that i dont remember having beofre) and the XP Blue theme gets removed and im back to the "Classic Windows" theme. Also it keeps coming back.

Odd one this.

Capt'n Midnight

Dang - Autoruns from www.sysinternals.com don't pick up it.

(Apart from services, it does however pick up most other junk that autostarts.)