Tech Problem Aggregator

svchost.exe CPU usage - NOT Microsoft Update - Maybe Routing and Remote Access

Q: svchost.exe CPU usage - NOT Microsoft Update - Maybe Routing and Remote Access

Hi

The process svchost.exe maxes out my cpu after my computer has been on for about 2 days. There is nothing special happening when it starts running. I have used Process Explorer to investigate and it is only when i stop the service "Routing and Remote Access" that the cpu usage comes back down to normal. However, this messes up my internet connection so it really is not an optimal solution. I would really appreciate if anyone could help me with this!

I am running XP Pro (I think SP2) on an IBM X40.

A: svchost.exe CPU usage - NOT Microsoft Update - Maybe Routing and Remote Access

Hello tiggerGutt

Try This

1. Click Start->Run, type "services.msc" (without quotation marks) in the open box and click OK.
2. Double click the service "Automatic Updates".
3. Click on the Log On tab, please ensure the option "Local system account" is selected and the option "Allow service to interact with desktop" is unchecked.

4. Check if this service has been enabled on the listed Hardware Profile. If not, please click the Enable button to enable it.
5. Click on the tab "General "; make sure the "Startup Type" is "Automatic". Then please click the button "Start" under "Service Status" to start the service.
6. Repeat the above steps with the other service: Background Intelligent Transfer Service (BITS)


================================ NEXT ================================


Re-register Windows Update components and Clear the corrupted Windows Update temp folder


1. Click on Start and then click Run,
2. In the open field type "REGSVR32 WUAPI.DLL" (without quotation marks) and press Enter.
3. When you receive the "DllRegisterServer in WUAPI.DLL succeeded" message, click OK.
4. Please repeat these steps for each of the following commands:

REGSVR32 WUAUENG.DLL
REGSVR32 WUAUENG1.DLL
REGSVR32 ATL.DLL
REGSVR32 WUCLTUI.DLL
REGSVR32 WUPS.DLL
REGSVR32 WUPS2.DLL
REGSVR32 WUWEB.DLL
REGSVR32 QMGR.DLL
REGSVR32 QMGRPRXY.dll


After the above steps are finished reboot.

Remove Corrupted Windows Update Files

* At the command prompt, type the following command and press Enter

net stop WuAuServ
* Still at the command prompt,

type cd %windir% and press Enter
* In the opened folder, type the following command and press Enter to rename the SoftwareDistribution Folder

ren SoftwareDistribution SD_OLD
* Restart the Windows Update Service by typing the following at the command prompt

net start WuAuServ

* type Exit and Press Enter to close the command prompt

2 more replies
Answer Match 85.26%

Hello,

I am running into something strange on every computer I come across... I install a clean WinXP Pro SP2, install device drivers, install Office 2003 Pro, visit Windows Update, opt to upgrade to Microsoft Update, and MS Update stops working, and the systems freeze often. I get 100% CPU usage, going to svchost.exe started by SYSTEM, and the system won't unlock until I force it closed. Unfreezes for a few minutes, but if I try MS Update again, it freezes again. Without trying MS Update, it locks up periodically with the svchost.exe at 100%. While trying to update, after waiting for the progress bar to chase itself for 35 minutes or so, it says that the page is experiencing difficulties or something like that and I get an Error Code of 0x8DDD0009 on the page. I do join this particular system to my domain at work, but this happens on all the Dells, HPs, Compaqs, and Gateways I've tried this on, on or off the domain. It happens in Denver, Fort Collins, and in Colorado Springs. I'm wondering if this is a regional thing with Colorado and the update server Microsoft is sticking me on. My techs on the east coast have not heard of this. My goal is just to have a system with XP, Office, and all the MS updates. It's not happening on any computer I've tried in the last month:. Here is a HJT log of this computer:

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 3:29:10 PM, on 5/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal... Read more

More replies
Answer Match 78.12%

I am running windows 2000 server with 2 Nics.
one is connected to a cable modem and the other to my lan. I am able to use the internet and share it on my lan perfictly.

Whenever i try to setup a VPN server using the wizard in routing and remote access i lose access to the internet on all computers on my lan(including the server). when i remove the VPN server internet access returns to normal.

What am i doing wrong?
 

A:Routing And Remote Access (VPN)

Greetings

OK, it may be possible that you are confusing the NICs in your VPN setup. The VPN needs to be setup on the Internet NIC, so that people can connect to their ISPs, and then connect to your server and works "as if" they had connected from your internal network.

Cheers

------------------
Reuel Miller
Windows NT Moderator (yes, that does make me biased )

[email protected]

Website: www.xperts.co.za/reuel/multiboot

Every morning is the dawn of a new error...
 

2 more replies
Answer Match 78.12%

I am having the attached error when trying to connect.

Thanks.
 

A:Routing and Remote Access

Any help please of how I can settle this as its becoming really frustrating??

Thanks
 

2 more replies
Answer Match 77.28%

Hi,

sorry, if this thread is already in this forum. Please, link me there, if it is.

Problem is, i can't start this service. I need to accept incoming connections, but can't create that kind of network via Network Connections folder because of this service..
Searched internet almost 2 weeks. And now i'm totally pis**d.

How can I solve this problem?

A:Routing and Remote Access service

Go into administrative tools>services> in there look to see if it's set at disable

3 more replies
Answer Match 77.28%

One day my internet slowed to a crawl. I'm not sure if my brother downloaded anything (he is pretty much computer illiterate) so I ran a virus test, spybot yada yada yada, removed some tracking cookies etc. It didn't help at all. I flushed the DNS and re-registered the DNS through ipconfig and I think that's where stuff got screwy. I read the event viewer and I found this multipe times, probably because I kept restarting the computer to try and fix the problem:





The Routing and Remote Access service terminated with service-specific error 340 (0x154).Click to expand...

Anyone have a fix for this? I try to start the process with services.msc, but I get this:





Windows could not start the Routing and Remote Access on Local Computer. For more information, review the System Event Log. If this is a non-Microsoft service, contact the service vendor, and refer to service-specific error code 340.Click to expand...

I turned my computer off, powered down and unpluged my router from the computer, and plugged the cable modem directly into the computer. It worked like a charm. The only problem is, my dad needs the wireless access the router delivers.

Any ideas would be appreciated. :knock:
 

A:The Routing and Remote Access error

Hi,

I found a similar problem just recently. The problem seemed to be created when MDAC 2.8 was installed. I installed MDAC 2.8 SP1 and this appeared to fix the problem. I can't say why it caused a problem but this was my experience. Good luck.
 

2 more replies
Answer Match 77.28%

Hey everybody, I've been having issues with the routing and remote access, it refuses to start. I refer to the Event Log and it shows Specific Error 340. I enabled NetBIOS ,it starts for a while but when I configure my box to Accept Incomng Connections it disconnects almost immediately. Plz help
 

More replies
Answer Match 76.44%

Today I started the new connection wizard in Windows XP PRO SP2 and chose the incoming connections option so I could accept incoming VPN connections but I ran into a problem. The wizard stopped responding for more than five minutes after I hit one of the next buttons so I ended the task using the task manager. I started the wizard over again with the same results. About a minute afterwards, my taskbar suddenly changed themes back into the old Windows 98 format (it went from blue to that grey color). I opened my themes tab in the display properties window only to find that all my themes were gone from the list. Upon further investigation using the event viewer, I found that all of these services "terminated unexpectedly" within a two second period of time:

windows time service, automatic updates, windows audio service, background intelligent transfer service, computer browser service, cryptographic services, DHCP client service, logical disk manager service, COM+ event system service, HID input service, server service, workstation service, routing and remote access service, task scheduler service, system event notification service, shell hardware detection service, themes service, windows management instrumentation service and wireless zero configuration service.

I found that I was able to restart each service again without a problem until I got to the one that has to do with VPN and is called the routing and remote access service. When I tried to start that se... Read more

More replies
Answer Match 76.44%

Hiya

This step-by-step guide describes how to configure remote access policies through the Routing and Remote Access snap-in when Routing and Remote Access is configured to use a Windows authentication provider and through the Internet Authentication Service (IAS) snap-in when Routing and Remote Access is configured to use a Remote Authentication Dial-In User Service (RADIUS) authentication provider. This guide offers only step-by-step procedures for configuring remote access policies, not strategies for implementing remote access connectivity. It is intended for administrators who have experience managing the remote access features of Microsoft® Windows Server™ 2003 operating systems.
System Requirements
Supported Operating Systems: Windows Server 2003

Microsoft Word or Word Viewer
http://www.microsoft.com/downloads/...0a-0c64-49e3-a6d8-dd6309111fca&DisplayLang=en

Regards

eddie
 

More replies
Answer Match 74.76%

I was wondering if anyone knew of any wesites or books thought would be a good reference for this. I looked on Microsoft's site, but was a little vague. Thank you.
 

A:{Advice Offered} - Routing and Remote Access Service(RRAS)

Check this site out...... How to Use Routing Information Protocol Over Routing and Remote Access Service Dial On Demand and Virtual Private Network Connections

{Message from Reuel: Just turning it into a nicer hyperlink [​IMG] }

[This message has been edited by Reuel Miller (edited 09-20-2000).]
 

1 more replies
Answer Match 74.76%

Hi there,

Here's a summary of the issue:

Goal:
Tweak Win 7 to forward OpenVPN traffic

Actions:
Start -> Right-click My Computer -> Manage
Services
Right-click Routing and Remote Access -> Properties -> Automatic
Right-click Routing and Remote Access -> Start

Source:
https://forums.openvpn.net/topic7806.html

Result:
No internet!

I'm running
OS: Windows 7 Ultimate
Router: Asus RT-N16
Firmware: DD-WRT v24-sp2

Any idea why this is happening and how I can resolve it?

Thank you very much for your time in advance!

A:Routing & Remote Access service kills my internet connection

  
Quote: Originally Posted by parachuter2b


Hi there,

Here's a summary of the issue:

Goal:
Tweak Win 7 to forward OpenVPN traffic

Actions:
Start -> Right-click My Computer -> Manage
Services
Right-click Routing and Remote Access -> Properties -> Automatic
Right-click Routing and Remote Access -> Start

Source:
https://forums.openvpn.net/topic7806.html

Result:
No internet!

I'm running
OS: Windows 7 Ultimate
Router: Asus RT-N16
Firmware: DD-WRT v24-sp2

Any idea why this is happening and how I can resolve it?

Thank you very much for your time in advance!


If the problem is there, in command prompt:

Code:
ipconfig

Code:
route -4 print
post output

3 more replies
Answer Match 74.76%

Hi guy's,

Just want to say up front thanks for your time and to please bare with me i am kind of new at this. Anyway have a small Company server which i had working but now i just can't seem to get it back up and running.

Ok so its a really ****** Server computer Running Windows 2000 Server - with Two Network Cards, One is connected to a Shaw Cable Modem, with a dedicated Static IP Adress from the ISP, and the other is connected to a switch.

My DHCP server is sending out Ip adress between (192.168.0.100 - 192.168.0.200 ). server Ip is 192.168.0.3.

Right now Routing and Remote Access is enabled, with the NAT feature, so the server is running as a DHCP/Nat router. it was all running peachy untill i did one stupid thing, I tried to get a VPN set up.

In the server properties under the general tab, i went from Enable this computer as a "router checked" and "Local Area Network Routing only checked" and changed it to "LAN and demand-dial routing" with Remote access server checked as well.

Well as soon as i did that restarted the server in R&RA, problem's happened.

Presently my DHCP server is working distributing IP's but even after setting everything back to how it was and restarting the machine physically, i can not for the life of me get internet to my client PC's. In fact, i am not even getting internet on the server itself.

I have checked with my ISP, and they say all is good, my IP adress, Gateway, Subnet, E... Read more

A:Solved: Windows 2000 Routing and Remote Access Problem? (NAT)

My advice. Ditch using your Windows server as a router and get a hardware router to put in between your cable modem and your server. Then if you want to have your server act as a VPN server, either enable VPN pass through on the hardware router or set up a set of port forward rules.
 

2 more replies
Answer Match 74.34%

Hi techguys,

I am running Windows XP SP1, AMD Athlon XP 2600+, with 1GB or RAM. I recently purchased an X-micro bluetooth adapter. What I want to do transfer some freeware applications to my Samsung D500 cellular phone.

I access my Network Connection, and choose to create an advanced connection to another computer directly, using COM5 (the port set aside for bluetooth). When I get to the Network Connection Wizard's Host or Guest Page, I select my computer as host, and I click Next. The computer thinks for a bit, and eventually, I get presented with an error saying "Incoming Connections depends on the Routing and Remote Access service which was unable to start.". I checked the Event Viewer and got this message:

"The Routing and Remote Access service terminated with service-specific error 340 (0x154)."

I have checked on the Internet for solutions, the majority say that I should check that NetBIOS is enabled in my TCP/IP network settings. This I have done, and it is indeed enabled. The problem still persists. I am unsure what other services Routing and Remote Access depends on.

A friend mentioned that it might indeed be a problem with SP1, and that I should reinstall it. This seems a rather drastic solution though.

Would anyone kindly help me with this problem? I would be most grateful.
Thanks,
Ducky303

PS: In Event Viewer, I also found another error but I am unsure how it is related to the above problem. The error is for perflib and says:

Th... Read more

A:Routing and Remote Access unable to start - service-specific error 340

...Anybody...?
 

1 more replies
Answer Match 74.34%

Hiya

This management pack module has been updated since the release of Microsoft® Operations Manager 2000 Service Pack 1 (SP1) and is now supported for use in international-language configurations.

System Requirements
Supported Operating Systems: Windows 2000

MOM Software: Microsoft Operations Manager 2000 with Service Pack 1
http://www.microsoft.com/downloads/...86-2eeb-44a5-8196-5d4eb24f6ea0&DisplayLang=en

Regards

eddie
 

More replies
Answer Match 68.46%

Hi all,
I'm currently very puzzle when I am trying to share my internet connection using ISC but it gives me error saying it cannot be enabled because Routing and Remote Access has been enabled on this computer.
I've disabled the services but still failed to share the connection.
any pointer will be much appreciated.
Error message at http://postimg.org/image/sv43fcozj/

More replies
Answer Match 68.04%

Whenever I try to start "Routing and Remote Access", I get an error telling me:
Windows cannot start the Routing and Remote Access service on Local Computer. For more information, review the System Event Log. If this is a non-M$ service, please contact the service vendor, and refer to service-specific error code 340.
OK, so I go to the Event Log, and it doesn't really help all that much, telling me pretty much what I was just told in that alert window:
The Routing and Remote Access service terminated with service-specific error 340 (0x154).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Blah blah blah. So, I figure that there is a service or something stopping "Routing and Remote Access" from starting. I look around for a little, and I am correct. It is dependent on NetBIOS Group-(Ascfrna and the NetBIOS Interface) and Remote Procedure Call RPC. RPC is enabled and started, but Ascfrna isn't. So I try to start it, but it fails, saying it can't the specified file in the specified path (file name/path: C:\WINDOWS\system32\drivers\nwlnkspx.sys). BUT when I go to that directory, the file is there. YES!? No. It is compressed to save space. Horray for XP, compress a necessary file. So I uncompress it, restart and see if that does anything. Nada. Help?
 

More replies
Answer Match 66.78%

I am running genuine Windows 7 Professional SP1 32 bit, with all Windows Updates current and Kaspersky Internet Security 2015, which has never indicated any malware issues. It's a standalone PC, not joined to a network or a domain. There is no file or printer sharing. NetBIOS is disabled, as are all services related to Remote Access, Remote Desktop, Offline Files, Bitlocker, and Encrypted File System. There is no wireless card on this system, it's strictly wired Ethernet. "Allow Remote Assistance to this computer" has been disabled. 
 
1) I often check Event Viewer, and noticed that all user account logons are recorded in Event Viewer\Applications and Services\Microsoft\Windows\Terminal Server\ Local Session Manager\Operational, rather than \Winlogon, which to me makes more sense.
I noticed something else odd in Event Viewer. In January, a driver was installed for a PS/2 Compatible Mouse, and i8042prt and service was installed. I did not do this. The PS/2 Mouse has a yellow triangle next to it in Device Manager, which means it's malfunctioning, or doesn't have all its drivers installed. Stranger still, it will appear and disappear in Device Manager every few days--Gone on 3/7, back on 3/8, gone on 3/9, back on 3/11. I don't know what to make of this.
 
2) In System Information\Software Environment\Loaded Modules, there are DLLs loaded for Remote Access Auto-Dial Helper (rasadhlp.dll) Remote Access Svcs API (rasapi32), rasmandll, and Net... Read more

A:Is svchost.exe showing evidence of remote access?

>> Is svchost.exe showing evidence of remote access? <<
 
Hello and Welcome,
A "very general reply" to your Headline and Question is NO.. Event Viewer can be deceptive, as this is what the "Fraudsters" use to tell you that there are ongoing problems.
 
We can treat this as a basic invasion if you like, which is most likely the best option
 
To check if you have any protection, please run this program,
Download Screen317 Security Check from Here or Here and save it to your Desktop.
Double-click SecurityCheck.exe
Follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt
Please Copy and Paste the contents of that document.
Note 1:: If any security program requests permission to access the Internet, allow it to
Note 2. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message, (or similar) restart computer and Security Check should run
 
 
Next -
Please download MiniToolBox  to desktop to run it.
 Checkmark the following boxes:
List content of Hosts
Flush DNS
Report IE Proxy Settings
Reset IE Proxy Settings
Report FF Proxy Settings
Reset FF Proxy Settings
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size
Note: When using "Reset FF Proxy Settings" option Firefox should be closed.
 Click Go and Copy / Paste the result. (result.txt)
 
Next -
Please download RKill by Grinler to your desktop
If you have an old version, ... Read more

4 more replies
Answer Match 65.1%

Howdy all! As the title suggests, I am having issues with windows update.

It started only two weeks ago, when I started up and my CPU monitor said something was running high. After trial and error, I found if I stopped the Windows Updater service, the system went back to normal.

Right now it's taking 13%-20% CPU and 2GB of memory when the updater is active.

I've tried all the suggested fixes from the other threads: reinstalled KB3102810, ran sfc scannow (log attached...but in RAR version, ZIP version was 110MB). I've tried running updates and restoring hidden updates. I can access Windows Update, and it displays one recommended and 2 optional updates to install, but when I try to install those updates, Windows Update just hangs at the downloading updates status (0% downloaded after 24 hours). I ran the SURT, it crashed my system after an hour...ran out of memory...

Suggestions?

More replies
Answer Match 65.1%

I've noticed that for the last couple of days my windows 2000 laptop cpu has been at 100%. The culprit is svchost.exe. Looks on everything I read that this is somethign the OS needs in order for itself to work. I've seen other threads that kind of touch on this subject but are not exactly the same fixes for any of them so I hope you guys can help. There were ms updates for me to intall and fail everytime I try to install them. I started looking at the services and stopped the service for automatic updates, then the cpu went back to normal. I however don't want to turn off automatic updates, let me know what I can do to get this thing to work. below is my HJT file.

Logfile of HijackThis v1.99.1
Scan saved at 12:52:04 PM, on 3/3/2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
c:\program files\dell printers\Additional Color Laser Software\Status Monitor\DLSDBNT.EXE
C:\WINNT\system32\svchost.exe
C:\WI... Read more

A:svchost.exe at 100% usage when MS update service enabled

Does this have anything to do with your situation?
http://support.microsoft.com/kb/328885
 

2 more replies
Answer Match 64.68%

Hi there,
 
I hope you can help with this.I am running Win 7 ultimate x64 on a Lenovo T61p. The system frequently crawled to a halt and had to be forcefully shut down and rebooted. When I investigated this further, I discovered thatnan svchost process was gobbling up 50-70% of the CPU cycles. Inside the svchost process, the culprit turned out to be  Wuaueng.dll, the Windows autoupdate code. So I disabled autoupdates and the problem went away.
 
I should also add that the update facility has not worked properly on this system for quite some time. To troubleshoot the problem, I made a copy of the WindowsUpdate.log file, and tried to run an update through the control panel (the update window just sits there forever). Then compared the new log file with the old one and the following is the log file entry for that try.
 
I hope you can help with this.
-----------------------------------------------------------------------------------------------------------------------
2016-01-13    18:03:26:928    1196    1028    AU    AU initiates service shutdown
2016-01-13    18:03:26:928    1196    c20    Agent      * WARNING: Failed to filter search results, error = 0x8024000B
2016-01-13    18:03:26:928    1196    1028    AU    ###########  ... Read more

A:Automatic update dll (wuaueng.dll) in svchost causes high cpu usage

Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post. 
Louis

7 more replies
Answer Match 64.68%

Hello all, I just noticed something and wanted to be sure or see if this is normal. When Windows Update checks for updates, svchost will jump up to ~500MB in usage, or after updates have been installed. It will stay there. If just checking for updates, but I don't install any, it will drop down to ~400MB, but no lower than that. Now, if I go into services and disable the Windows Update service, the memory usage drops from wherever it was at, down to ~22MB. What's with this, or is it just normal?

A:High Memory usage in svchost with Windows Update

Hello and welcome TGMP I am not real sure as to your concerns nor am I sure if the RAM usage is unusual - to me having that much on board if it doesn't cause any issues with what you are doing then I would just forget about it.
To be honest I have never checked this on any of my machines RAM usage using anything much at all.

Nice set up by the way

9 more replies
Answer Match 63.84%

Hi i am having problems as the title suggests with windows updates.

When i turn automatic updates off totally my cpu usage comes down to a normal level however as soon as i turn them back on the cpu reaches 100% once again.

When i done a check i received the following error code 0x80070005 please also see attached screen shot.

Any help would be much appreciated

Thank You

A:100% CPU Usage svchost.exe windows update eror 0x80070005 Please Read

Hi and welcome to SevenForums
You might try option 2
Windows Update - Reset

4 more replies
Answer Match 63.84%

Hi i am having problems as the title suggests with windows updates.

When i turn automatic updates off totally my cpu usage comes down to a normal level however as soon as i turn them back on the cpu reaches 100% once again.

When i done a check i received the following error code 0x80070005 please also see attached screen shot.

Any help would be much appreciated

Thank You

A:100% CPU Usage svchost.exe windows update eror 0x80070005 Please Read

Hi and welcome to SevenForums
You might try option 2
Windows Update - Reset

2 more replies
Answer Match 63.84%

this doesnt really seem to be an issue as such (at least not yet), but lve noticed on both my PC and laptop that they have recently on startup started to eat ram.. and the reason lm finding it so weird is that its recently started doing it and the amount my system eats.

basically lve noticed when booting that svchost eats my ram.. on my laptop it pretty much uses 95% of the ram, l tend to average at 50% usage of the 4GB on my PC which has 8GB (until l can afford larger matched sticks) ends up using close to using around the same percentage, and l notice that it tends to be around when windows update runs on start up (or is executed manually), lve noticed a few others experiencing the issue as well quite recently on random less technical forums, so l was kinda curious if this was a wide spread thing.

tho at this second lm not overly bothered with the annoyance mainly because if l leave the system a few mins after boot the usage goes back to the levels l usually see, that said lm pretty sure this is a recent thing however because of my recent reinstall its hard to pin down to specific updates as a cause.. if l had not noticed that the ram was being freed it would bother me more.

A:curious about recent weirdness with windows update/svchost ram usage

Had the same issue myself. I believe that in my case it was caused by the latest round of windows updates that amongst other things replaced tons of important system files to fix the Freak Vulnerability. I keep disabled IE by means of a registry hack and also keep system restore disabled. Both of these settings seem to have affected windows updates installation this time round.

I did manage to fix it though. High RAM usage by svchost after windows updates usually indicates a problem with internet explorer.

What I did was roll back my system to before the updates were installed and then fixed things.

If you can't roll back your system then it might be worth trying the following but if you use Internet Explorer as your main browser let us know before going ahead.

Contol Panel > Intenet Options > Advanced > Reset > OK

Reboot.

Run IE 64bit. Show the menu bar then Tools > Intenet Options > Advanced > Reset > OK

Close IE then run Run IE 32bit. Show the menu bar then Tools > Intenet Options > Advanced > Reset > OK

Reboot.

Check for Windows Updates.

1 more replies
Answer Match 61.74%

I cannot get access to my Microsoft Outlook personal e-mail account so that I can view my Inbox from any Web Browser. I can log on to my personal account but cannot read my e-mail or send messages. When I click on a message nothing happens. If I just place the cursor on a email, on the bar at the bottom of the page is this message "javascriptarent.openNewWindow "/exchange/forms/IPM/NOTE/frmRoot.asp"
This has been going on for a couple of months.
Thanks
 

More replies
Answer Match 60.48%

Just did a complete clean install of Windows XP Professional 2005 Tablet and Office Professional 2003 including ALL hotfixes via Microsoft Update. I have no other software on the PC (Centrio 1.6GHz and 1 GB RAM).

Whenever I turn run Microsoft Update, it goes to 100% CPU usage and I can't do anything. I have to do a hard reset using the power down button. It seems to be related to MS update. Any ideas as to how to fix?

Thanks,

Dave
 

More replies
Answer Match 60.48%

Hello,
 
My father saw a pop-up that said his computer had an error and was infected with malware.  The pop-up had a phone number to call.  He talked to someone who said he was a certified Microsoft technician and got my dad scared about the Zeus virus.  My dad gave him access to his computer and they did a remote session.
 
The person did not ask for a credit card number, he asked to be mailed a check but wasn't too worried about getting paid. 
 
I know that my dad should not have done what he did  But now I'm trying to clean the computer from what may be compromised.  I am currently running SpyHunter and it has already found 217 threats detected.  It looks like the scary one is HawkEye keylogger and there is also Conduit Search/Toolbar and FindYourMaps Toolbar.  I'm 70% done.  
 
I'd love to know what to do next and if someone could please walk me through all the things I need to make sure and take care of to keep my dad safe.  Thank you for your help and support!

More replies
Answer Match 60.48%

Hiya

This whitepaper describes how to configure RSA ACE/Server to provide a secure authentication solution for VPN and Windows XP 802.1X wireless clients running Microsoft Windows XP Service Pack 1 with the PEAP QFE installed. This is accomplished by using Internet Authentication Service (IAS) with any Extensible Authentication Protocol (EAP) standard–compatible virtual private network (VPN) server or Protected EAP (PEAP)-compatible wireless access point.
System Requirements
Supported Operating Systems: Windows Server 2003

Microsoft Word or Word Viewer.

http://www.microsoft.com/downloads/...e3-231b-46b5-ae1e-0e5d3c3cacad&DisplayLang=en

Regards

eddie
 

More replies
Answer Match 60.48%

I got a pop up that was loud and wouldn't let me close it saying, "your computer has been infected call Microsoft" and I did because I turned it off and it was still yelling st me when I turned it back on. I gave the tech remote access and he said I had a tiny something trojan virus. Well I didn't fall for paying, got off the phone, held power button down and turned computer off. Am able to use it fine now with no more warning but am I safe after giving the remote access? I was on the phone for about 30 mins while he was going around to different areas in my computer telling me what all of the "problems" were.

A:Gave remote access to a "Microsoft tech support" am I safe?

It wasn't Microsoft, it was a scam.   I suggest you have a look here and create a new post asking for assistance to ensure your computer has not been compromised .

1 more replies
Answer Match 60.06%

I would like to share a timetable with my mates (example excel file) which allows them to update and save the file too (all 5 users). Is this possible?

A:Remote Access And Update.

An easier way would be for all to use the Beta Google Spreadsheet, which would allow any of them to view and update the timetable stored on Google servers instead of opening up your own computer's hard drive.
Regards,
John

2 more replies
Answer Match 60.06%

So i can't find routing and remote services all i can find is routing and remote access. Is it the same thing?

I can't connect to the computer though a LAN connection and when i try to repair it i get the, can't clear ARP cache message and i don't know what to do!

i stop and disable the routing and remote access but it doesn't fix the problem, it seems to clear the ARP cache but still can't connect.

sorry that was long...
 

More replies
Answer Match 59.22%

Alright guys, I've got some major problems with a computer here. The computer seems to be infected with some sort of virus, with symptoms similar to conficker. I am not sure that this is what is causing our problems, but it's come down with a nasty worm that has the following symptoms:

1) All microsoft update websites are disabled. I try to log onto them and the website will not load. All other websites load just fine.
2) Major websites posting fixes to viruses and computer problems also redirect to a website with advertisements.
3) I get a svchost error that, upon clicking "ok", freezes the computer or makes it run very slowly.
4) Svchost.exe begins to consume a MASSIVE amount of memory, slowing down the entire computer.
5) I am experiencing random redirects to websites.
6) The computer, as a whole, is running sluggishly.

We attempted the following fixes:
1) Installing and updating avast, and running scans. Various trojans have been removed.
2) Installing and updating malware bytes. Various trojans and viruses have been removed.
3) Running windows repair. This did not fix any of the above problems. We are trying to avoid a complete format here.
4) Reinstalling virus scanners and malware bytes, running them again, and fiding more viruses.
5) Reinstalling internet explorer 8.

None of the above work. We do have access to a windows install CD, just for your knowledge, just in case. But as mentioned before, we'd like to remove the problems without... Read more

A:Computer getting svchost error, microsoft update website does not load, MAJOR PROBLEM

Trying to get this working for my boss, guys. We're a small dealership, and its holding up business bad. We've already tried IT guys over the phone.

10 more replies
Answer Match 57.96%

Hello!
 
It looks like I have an issue with my computer but I’m unable to determine the cause. I have looked at some topics on the forums but found noone with the same issue so I am posting a new topic.
 
My issues seems a bit similar to http://www.bleepingcomputer.com/forums/t/614137/infected-svchost-windows-update-misbehaving/?hl=%2Bwindows+%2Bupdate#entry4001712 but the topic was not resolved and various different services seem to be hogging my CPU, not just windows update.
 
Update
After running for 4 hours and presumably being stuck (showing no signs of working) the Windows Update DISM tool (https://support.microsoft.com/en-us/kb/947821 ) seems to have finally caught up and installed some updates. I will inform about further progress in future updates.
 
Update II
The Microsoft tool seems to have installed all updates on my computer successfully (after running for about 5 hours), but another service (FDResPub) is "abusing" my CPU now. I will post more info later.
 
Introduction
 
I run a Windows 7 on a quadcore computer (which is a relevant information, more about that later). I use Avast! Free antivirus and most of the time my brain to protect my computer to… somewhat varying degree.
 
I would like to mention that I am a software developer so I use a lot of quite powerful tools (cygwin, GIT, various command line extensions, automatic scheduled tasks to simulate cron tasks on our production server and so on) which... Read more

A:Windows 7: svchost.exe (netsvcs) at 25% cpu usage. Windows update impossible.

Windows 7 updates truly suck nowdays. 25% usage means you have a quad core processor. Dual cores use 50%.
 
Download and install  KB3153199 then do a manual update. Reboot the computer and immediately install the update. Do a manual update and wait about 15 minutes.
 
https://www.microsoft.com/en-us/download/details.aspx?id=52232
 
Edit: If the above does not get you updates install the following KB. This resolved my April update problem. The above KB3153199 resolved the May update issue. It seems this will be a monthly issue with Windows 7.
 
https://www.microsoft.com/en-us/download/details.aspx?id=51853

1 more replies
Answer Match 57.12%

I was infected with a virus yesterday and while I think I've gotten rid of it (for the most part), one lingering side-effect (whether purposeful or not) is that I can't update my computer. When I try to use Windows Updates I get error 80072efe, which says the connection was interrupted. What's interested is that if I try to go to update.microsoft.com (how you'd update before Vista), I get a "connection was reset" error (with Firefox - different errors with other browsers). So something is preventing me from accessing the update server at all. Any suggestions?

Edit: Also of interest - while all browsers seem to be working fine, when I tried pinging google "ping google.com" from the command line, I got a timeout. When I tried to be more explicit "ping http://www.google.com" it told me it could not find the host at google.com.

A:Windows cannot update or access update.microsoft.com

PLease see my post
http://www.sevenforums.com/crashes-d...ml#post1372591

you have a rootkit infection that needs to be addressed

1 more replies
Answer Match 56.28%

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:07-11-2015Ran by Benjamin (administrator) on BENJAMIN-HP (07-11-2015 12:55:26)Running from C:\Users\Benjamin\DownloadsLoaded Profiles: Benjamin (Available Profiles: Benjamin)Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)Internet Explorer Version 11 (Default browser: IE)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe(Microsoft Corporation) C:\Windows\System32\wlanext.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe(ATI Technologies Inc.) C:\Program Files (x86)\ATI ... Read more

A:RAM USAGE 95% svchost usage slowly increases to over 1million k

Greetings Benjamink73 and to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.If you would allow me to call you by your first name I would prefer to do that.===================================================Ground Rules:First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met. Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter pro... Read more

3 more replies
Answer Match 56.28%

So lately, I've noticed an immense amount of CPU usage when my PC is idle. This happened very suddenly and after some research I've found the two culpurets! PlugPlay and AudioEndPointBuilder. Since this is more of a Windows 7 problem than anything, I'm worried that if I try to stop either of those 2 proccesses something can really go wrong. I actualy tried the "stop process" option but both Process would keep running normally. I'm pretty sure that it's not a virus/malware problem. At this point I'm not sure as to what I can do more.
 

More replies
Answer Match 56.28%

Howdy,

I need to set up my Win7 desktop so I can access it (and my home cloud) from the road with my Win7 Laptop. Should be pretty simple...except, the Remote Access Functions DO NOT APPEAR on the [System Properties] pop-up on the [Remote] Tab

See pic attached..

Cannot fill in the form, if the form ain't there.

Heeeep, please.
 

A:Remote Access: SystemProp>Remote>NO Remote Functions Visible

What version of Windows 7 is installed on your computer?


 

9 more replies
Answer Match 55.44%

Dear all,
recently my computer HP Pavilion G-6 encountered a problem. At first a warning appeared that there is a problem with cooling fan. This was solved.  After there was a black screen after logon without any activity. It was not possible to start process
manager and check what is going on. The only possibility to repair it was to restore to the last Restore Point. But analysis that restore point I discovered this entry "Microsoft Remote Desktop Services (Printer) 06/21/2006 6.1.7601.17514", which
appears in every instance when a new restore point is created. After restoring the computer works for a while. It is possible to turn of the computer and turn on the windows again for several times. But usually the next day the problem appears again. And I
have to restore to the previous point.
I have tried to install a new copy of windows, but I did not delete all the partitions. There were 3 of them: System reserved, C: with Windows; D (Data). After installation this problem appeared again. How? Is it possible that this infection is the lan or
RAM?
I have searched the similar problem on the web, but nobody actually have solved it. 
I have turn of the Remote Desktop and did not helped.
Now I am trying to update, but somehow it is not possible. The system is trying to find updates, but nothing happens.
My computer"
Notebook HP Pavillion G-6 (http://support.hp.com/pl-pl/product/HP-Pavilion-g6-Notebook-PC-series/5046257/model/5091237/drivers... Read more

More replies
Answer Match 55.44%

Hello I have multiple svchost running in task manager one which causes high cpu and memory usage that start increasing when I connect to the internet. Also when I connect to the internet i get redirected to other sites. Sometimes when I reboot my computer I get a generic host process for win32 message. When I run my anti-virus program it says 0 threats detected but sometimes say PDF Malware: Pidief detected and quarantined but the problem still continue. I am new to the site and have little computer knowledge any help would be greatly appreciated. Thanks!

A:Svchost high cpu usage and memory usage

Hello breal,do these please,post the logs and update me.Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!Be sure to download TDSSKiller.exe (v2.4.0.0) from Kaspersky's website and not TDSSKiller.zip which appears to be an older version 2.3.2.2 of the tool.Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
Vista/Windows 7 users right-click and select Run As Administrator.If TDSSKiller does not run, try renaming it. To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.Click the Start Scan button.Do not use the computer during the scanIf the scan completes with nothing found, click Close to exit.If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.2.4.0.0_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C:).Copy and paste the contents of that file in your next reply.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to you... Read more

11 more replies
Answer Match 55.02%

I can not access update.microsoft.com. I get "page can not be displayed" message. I have run Malwarebytes' Anti-Malware as well as Spybot Search & Destroy and Ad-Ware. All found things wrong and I accepted their corrections. But the problem remains. Attached is a Hijackthis file. Any help is appreciated.

A:Unable to access update.microsoft.com

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The ap... Read more

5 more replies
Answer Match 55.02%

I am unable to access Microsoft update, I have followed all of the trouble shooting instructions and I have even tried disabling my firewall/AV.

I am attatching an image of the error screen I am getting.

All help is appreciated!

A:Unable to Access Microsoft Update

Bump.

8 more replies
Answer Match 55.02%

Background: had problems, took to a repair shop - determined bad hard drive. Shop copied what they could to another 'shop' drive; installed new hard drive; then installed my authorized copy of Windows XP professional edition, version 2002 sp1; then copied back the files from the 'shop' drive.

I took puter home and began checking operation of my programs and status of data. One of the first things I wanted to do was to update all my Microsoft programs: XP Professional; XP Office, IE 6 and Outlook express.

Although I was able to load these programs I was never able to connect to your 'update' website.I also tried via Firefox that I have and was also unable. I tried same from my laptop and was able to do so.

Always get cannot load the page. did a ping a got a 12.0.01 response.

HAVE NO IDEA WHAT TO DO NEXT

PLS ADVISE

A:No Access To Microsoft Update Page

I have a guess: Because you have a new drive, Microsoft may not recognize your windows as genuine even though they are, thus you aren't getting the updates. I'd suggest contacting Microsoft and telling them about repair work and the new hard drive that was installed. I hope you have receipts for all that, because they may ask for them.

It is possible, however, that something is not configured correctly. Have you checked your internet and firewall permissions?

Orange Blossom

3 more replies
Answer Match 54.18%

Hello,
I am having a very strange issue!! On some of my pc`s I can not access Windowsupdate.com or any Microsoft websites. I thought it was a virus or spyware issue so I did a clean install of windows xp pro.
Once installed I setup up all my settings installed drivers, got onto the internet and i can go to any websites without a problem. But even with a clean install i cannot access any Microsoft websites.
So then i thought maybe it was a problem with my firewall blocking theses websites. I called my internet provider (Time Warner) who manage my firewall, and they claim the firewall is not blocking any of these websites. Which makes sense because i have serveral pc on the same network that can access these websites. Then i called Microsoft and explained my issue and they have trying to help me for three days and still cannot resolve the issue!! If anyone has come across this issue please let me know what you did to resolve this isssue.

Thank you!!!
 

A:Cannot access Windows update or any Microsoft websites

Please click here to download and install version 2.0.2 of the HijackThis Installer.

Run it and select Do a system scan and save a logfile.

The log will be saved in Notepad. Copy and paste the log in your next post.

Do not fix anything
 

1 more replies
Answer Match 54.18%

Hello,
First off the computer in question is my parents, one of them got a virus associated with aol, whenever one tried to sign into an aol email account it would automatically redirect to a page asking for credit card information, google searches related to the virus were also redirected.

I was able to back up what they wanted to keep and then formatted the hard drive and did a fresh install of windows xp from the dell disc that came with the computer, I installed the drivers off of the dell resource cd that also came with the computer. The problem is the version of xp is sp1 and I need to update so their printer, etc work, when trying to use windows update or go to any microsoft.com related website I get a "server not found" error, I was able to access microsoft.com by entering the ip address and also by using aol software. I was also not able to access malwarebytes.org but was able to download, install, update and run a scan which found 16 items. Most other websites come up just fine.

I really need help on this one I assumed that formatting and doing a fresh install would take care of any problems but there seems the be something lingering on here.

Thanks
 

More replies
Answer Match 54.18%

Hi,

I have been hit by torjan/virus which doesnt allow me to access any antivirus site or microsoft site. I have searched internet and followed std instructions mentioned however none of them seem to have worked.

Pasted below is log file of Combofix. As mentioned in log file I tried replacing infected qmgr.dll. However it says its infected again
-------------------------------------------------------------------------
ComboFix 09-09-25.01 - Mansi1 09/26/2009 1:24.8.1 - FAT32x86
Running from: c:\documents and settings\Mansi1\Desktop\Combo-Fix.exe

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\winnt\system32\qmgr.dll . . . is infected!!

.
((((((((((((((((((((((((( Files Created from 2009-08-25 to 2009-09-25 )))))))))))))))))))))))))))))))
.

2009-09-25 19:38 . 2009-08-25 16:26 792064 ----a-w- c:\winnt\system32\comres.dll
2009-09-25 19:13 . 2009-09-25 19:13 -------- d-----w- C:\Combo-Fix
2009-09-25 19:09 . 2009-09-25 19:09 -------- d-----w- C:\!KillBox
2009-09-25 19:03 . 2009-05-12 11:10 4192298 --sh--r- C:\??????.exe
2009-09-25 16:29 . 2009-09-25 16:29 -------- d-----w- c:\documents and settings\Mansi1\Application Data\AdobeUM
2009-09-25 16:29 . 2009-09-25 16:29 -------- d-----w- c:\documents and settings\Mansi1\Local Settings\Application Data\Adobe
2009-09-25 16:27 . 2009-09-25 16:27 -------- d-----w- ... Read more

More replies
Answer Match 54.18%

I am unable to open any site that is for microsoft. I am also unable to open windows update. Windows update and any web site that is for microsoft gives the following results:

The page cannot be displayed
The page you are looking for is currently unavailable. The Web site might be experiencing technical difficulties, or you may need to adjust your browser settings.
To attempt fixing network connectivity problems, click Tools, and then click "Diagnose Connection Problems..."
Other options to try:

Click the Refresh button, or try again later.

If you typed the page address in the Address bar, make sure that it is spelled correctly.

To check your connection settings, click the Tools menu, and then click Internet Options. On the Connections tab, click Settings. The settings should match those provided by your local area network (LAN) administrator or Internet service provider (ISP).
See if your Internet connection settings are being detected. You can set Microsoft Windows to examine your network and automatically discover network connection settings (if your network administrator has enabled this setting).
Click the Tools menu, and then click Internet Options.
On the Connections tab, click LAN Settings.
Select Automatically detect settings, and then click OK.
Some sites require 128-bit connection security. Click the Help menu and then click About Internet Explorer to determine what strength security you have installed.
If you are trying to reach a sec... Read more

A:can't access any microsoft site or windows update

download and run this programits for connectivityhttp://www.snapfiles.com/get/winsockxpfix.htmlthen try the followingCopy and paste each of these into the run box and press enter after each one, you will get a success box for some of them, so wait ten seconds between each oneregsvr32 wuapi.dllregsvr32 wuaueng1.dllregsvr32 wuaueng.dllregsvr32 wucltui.dllregsvr32 wups2.dllregsvr32 wups.dllregsvr32 wuweb.dll Try Microsoft Update

27 more replies
Answer Match 54.18%

I just got this computers OS re-installed and it seems to already have a virus on it. I cant access microsoft.com, and I downloaded security essentials from a third party plugin, but it wont let me update it... help please. thanks!

Edit(2): erm... BTW I've seen this post before on this website, but It always said to not do what they said because it was for that user only...

Edit: sorry forgot the stuff here it is:

-----------------------
HIJACKTHIS LOG
-----------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:32:15 AM, on 3/6/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie... Read more

A:Can't Access Microsoft or update Security Essentials

Bump...
 

2 more replies
Answer Match 54.18%

Hello all first of all thank you for reading my thread and hope u expert out there can assist me with my problem.

Im having problem where i can't access to any Microsoft and Windows Update websites wat seems to be the problem? If u gonna assist me please give me a step by step guide cos im really a computer beginner. I've tried following the steps on some thread where theres ( Solved ) on the topic but i still can't access to any Microsoft and Windows Update websites any1 care to assist me here?? Thx in advance.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:47:50 PM, on 9/17/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Sun\SDK\jdk\bin\javaw.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BH... Read more

A:Can't access any microsoft/windows update websites.

6 more replies
Answer Match 54.18%

The redirects happen randomly in Firefox and IE. I have tried many times to access Microsoft to update patches and so on but I get a 'Cannot connect to server" blank screen everytime. Some of my computer functions have become slow while using software requiring a reboot and it will get hung up requiring a hard reboot. Very frustrating as all of my virus software does not help. AVG, Malwarebytes, Spybot.My Hijack this log is below I use XP 32 bit. Any help would be appreciated, thanks.Logfile of Trend Micro HijackThis v2.0.4Scan saved at 7:56:50 PM, on 5/18/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.17023)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\spoolsv.exec:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:&#... Read more

A:Browser redirects and cannot access Microsoft to update :(

Hi,My name is Extremeboy (or EB for short), and I will be helping you with your log.If you still require assistance we would like to see the current condition of your system so please post a new set of DDS Logs as well as a GMER log and a description of any remaining problems or symptoms you may still have please.If for any reason you did not post a DDS log or GMER log please refer to this page and in step #6 and Step #7 and Step #8 for further instructions on downloading and running DDS & GMER. If you have any problems when running the tools or unable to produce a report for any reason, just let me know in your next reply.For your next reply I would like to see:-The DDS logs---DDS.txt and Attach logs-GMER log-Description of any remaining problems you may still have.With Regards,Extremeboy

12 more replies
Answer Match 53.76%

Hi I'm new to the forum but have just spent 5 days trying to overcome a recent virus/spyware attack on my XPsp2 Thinkpad.

I run Symnatec virus with live updates, I have run numerous spyware and registry tools, finally thinking the only 2 that are safe are spybot and spyware-doctor. I have manually removed various dodgy files and folders with associated registry entries and am now at a loss. I have disabled Browser extensions, checked all the zone settings. I have used Mozilla and its the same problem. I have run XP repair from the XP CD.
I suspect the problem is somewhere deep in the IP setup - DNS or something though I cant find anything in the registry with regedit "finds".
The problem manifests in 2 things I try. Sometimes the Google results are hijacked and I cant access support or update MS websites, and various spyware / technical information websites.

I've looked through Hijackthis logs and nothing seems to be obvious. I've checked all running processes, again nothing obvious.
The infection came from a mistake click whilst not concentrating on an video activex installation at some dodgy site that popped up in a popup.

Anybody have any ideas beyond the usual spyware and log analysis? I'm loathed to reinstall XP as I don't have office disks etc to reinstall word/excel etc. However, its looking like this is the only option left

BTW, I cant run the PAnda Security scan as the Activex download page seems to be one of the pages I can't access in IE o... Read more

A:Google results hijacked, no access to update.microsoft.com

For information:

USing MS rootkit revealer I think I didiscovered a cloaked infection and through a manual deletion process, combined wiht running Fixwareout.exe, I think its solved the problems as I've just got into Windows update and have genuine Google results.
I'll confirm later and close this thread once the updates have completed and I've fixed up.

Recommend the Microsoft tech sites on Malicious Software.

1 more replies
Answer Match 53.76%

I was trying to download the latest driver for Realtek HD Audio and saw that the link to do so was a sticky so it must be a popular thing to do. I tried to download the driver in the catalog -- not sure why there are two that are described identically but are different sizes -- and it appeared it was gonna work until I clicked on view basket in order to download the selected driver. There I encounter an error each time I try.

I have used the Microsoft software update catalog before to manually apply updates. I'm pretty sure that I've never had any problem with any of the feature/functionality -- at least I don't remember ever having any. For some reason, while I can browse/search it and select updates to download resulting in the number shown in the catalog being updated,, whenever I click on view basket I get the error shown at the bottom of this post.

I'm running Win 10/IE 11 and have tried setting the site to "compatible" as well as enabling cookies and pop-ups explicitly for this site. Nothing has had any effect -- each time sameO sameO.

I've seen tons of posts with this same problem and most of the responses just seem to be shots in the dark -- some with the suggestions to do the above.

Is anybody familiar with this issue and what I need to do to resolve it?

In fact, I don't care if I download fr4om some other site but I can't find any other sources, even Realtek, for this newest driver. If you know a downloadable sorce for this same driver then... Read more

More replies
Answer Match 53.76%

Hi there,
I'm working on my A level coursework and trying to update a table by using a form which allows the "user" to input their information easier. I have tried using an update table query, however, I can't run that off of a form. Anyone got any ideas?
Thanks 

A:Microsoft access: Is it possible to update table fields from a form

Hi,
 
You need to create a Select query to do that.

2 more replies
Answer Match 53.76%

I had some issues after I downloaded the CA Security Suite 2007 and 2009 versions. I also had Webroot Antivirus with Spyware.

A 'friend' had installed Avast on it a few months ago but the subscription expired so I was looking for something else that I liked instead of Avast. Just was shopping around.

I have RoadRunner internet service and they offer the CA Security Suite for their customers. I had heard that this is a good company. Am I wrong?

But since I started all this, 2 days ago, I have not had a smooth operating computer. Certain sites are not showing the drop down links and some sites dont even let the links work anymore. Is this a internet issue or firewall issue? I have removed all but the Windows Firewall and I have it on default settings.

When I click on the Windows Update link, in the start up, I get the IE page but it is blank. I can go to Windows home or other pages but when I try the Update page it just remains blank.

A:Unable to access Microsoft Windows Update page

The IE Update page being blank I have heard of a lot. There are other ways to get updates, but that should really work.

There are different things that seem to get it working for different people, so I am not sure exactly which might help you.

Clearing temporary Internet files is an old suggestion from Microsoft.

Making sure you have a Language selected in IE is another - Tools, Options, Languages - pick a good one for you or change it, change it back, Apply, restart IE.

With IE closed, reregister certain DLLs from Start, Run, CMD. You will usually see some success message for each...

regsvr32 jscript <--this one is a popular "fix"

regsvr32 vbscript
regsvr32 /i mshtml
And maybe these:

regsvr32 wuapi.dll
regsvr32 wups.dll
regsvr32 wuaueng.dll
regsvr32 wucltui.dll
regsvr32 msxml3.dll

Before adjusting, close IE, adjust, restart IE, test.

If you can sort of do them one at a time (I know it is more trouble) and test to see which one does the trick, that would be good information.

2 more replies
Answer Match 52.92%

Hey guys. This is the first time i have EVER had to post on a forum in order to fix a virus or computer problem. I usually am always able to figure it out myself, or google my way out. However, when searching for the virus below, all forums always get closed for inactivity... PLEASE HELP! I think i may have seen a way of deleting it via using linux or something...

I think the below is a Zero Access Rootkit. Problems: SCVHost.exe takes up 99% Computer power until ended in task manager, Google Redirects, AntiVirus/Combofix/Rkill/Malware programs say i need Administrator access even in safe mode(I am an admin), Cannot go to a system restore point (it always says it fails, even when i try in safe mode)...

Windows XP Service Pack 3 Computer

\\.\globalroot\device\svchost.exe\svchost.exe

A:Zerro Access Roolkit VIRUS - \\.\globalroot\device\svchost.exe\svchost.exe

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resouce! To tell me this, please click on http://www.bleepingcomputer.com/logreply/411664 and follow the instructions there. If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following inf... Read more

2 more replies
Answer Match 52.5%

Dear all,
recently my computer HP Pavilion G-6 encountered a problem. At first a warning appeared that there is a problem with cooling fan. This was solved.  After there was a black screen after logon without any activity. It was not possible to start process
manager and check what is going on. The only possibility to repair it was to restore to the last Restore Point. But analysis that restore point I discovered this entry "Microsoft Remote Desktop Services (Printer) 06/21/2006 6.1.7601.17514", which
appears in every instance when a new restore point is created. After restoring the computer works for a while. It is possible to turn of the computer and turn on the windows again for several times. But usually the next day the problem appears again. And I
have to restore to the previous point.
I have tried to install a new copy of windows, but I did not delete all the partitions. There were 3 of them: System reserved, C: with Windows; D (Data). After installation this problem appeared again. How? Is it possible that this infection is the lan or
RAM?
I have searched the similar problem on the web, but nobody actually have solved it. 
I have turn of the Remote Desktop and did not helped.
Now I am trying to update, but somehow it is not possible. The system is trying to find updates, but nothing happens.
My computer"
Notebook HP Pavillion G-6 (http://support.hp.com/pl-pl/product/HP-Pavilion-g6-Notebook-PC-series/5046257/model/5091237/drivers... Read more

More replies
Answer Match 52.5%

I am unable to access Microsoft Update for about 3 weeks now. IE8 cannot connect when I try to download an update, but can connect with everything else. I also ocassionally have a Windows Internet Security window popup stating "Browser under threat of infection. Windows requires permission to install online protection tool" asking to allow or not allow. If allow is hit one of the following appears;Name: setup.exeType: Application 73.2 KB or 72.9KBFrom: typofeltg.com or hostlibe.comWhile initially filling this out my browser went blue with a message about IE8 for a split second then my computer rebooted. First time for that. I have started over with a second file download app. and from location. I have never ran or saved the file download, but can't say my wife hasn't. Any help will be greatly appreciated.DDS (Ver_10-03-17.01) - NTFSx86 Run by bvp at 14:49:41.35 on Mon 04/12/2010Internet Explorer: 8.0.6001.18882Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.2045.888 [GMT -5:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}SP: AVG Anti-Virus Free *enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Wi... Read more

A:Wormradar? Unable to access Microsoft or Windows Update w/IE8browser redirect

Hello and welcome to Bleeping Computer! We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Fo... Read more

41 more replies
Answer Match 52.5%

All worked fine - problems have only arisen since installing updates on 29th Feb.  No configuration has changed.

When I say not working - the VPN connects successfully, and I get allocated an IP address in the remote LAN (10.x.x.x).  However, I can access nothing in the remote LAN, either by browser, ping or tracert, always using IP address (so it's not a DNS
issue).  Events in the system log all report successful connection.

There is no internet access via the VPN, as I have "use default gateway on remote network" switched off (intentionally) for IPv4 on the VPN config (this has been the case for months).  Switching this back on does not help.  However,
I do manually set up routes to some IP addresses to run through the VPN - this was working fine but also no longer works (the routes set up correctly according to the "route" command, but the server is not accessible).  Internet access via the
local connection continues to work fine when connected to the VPN (now, as before).
It's very much as if everything is fine, but no routing is taking place for IP addresses on the other side of the VPN connection.

The remote end is a Vigor router - this also has not changed.

I'm running Windows 8.1 (standard) with a reasonably full set of updates, on a Lenovo Yoga 3 11" (UK variant) with up to date drivers from Lenovo (which were updated several weeks ago and have been working fine).  The VPN client is t... Read more

More replies
Answer Match 52.08%

You may want to check, but on my Vista I don't see any new add-on and I don't even have C:\Program Files\Microsoft\Search Enhancement Pack folder. http://arstechnica.com/microsoft/news/2010...lbar-update.ars As part of its regular Patch Tuesday, Microsoft released an update for its various toolbars, and this update came with more than just documented fixes. The update also installs an add-on for Internet Explorer and an extension for Mozilla Firefox, both without the user's permission. As you can see in the Windows Update screenshot above, Microsoft does not indicate that the update will install anything for either browser. It's also not really clear what the installed extension actually does.

A:Microsoft hides mystery Firefox extension in toolbar update As part of its regular Patch Tuesday, Microsoft released an update...

Thanks Broni for the information. As for Firefox can't I just delete the extension. Let us all see which company gits back to B/C with some sort of answer.

7 more replies
Answer Match 52.08%

The title says it all! Basically I have a comp running XP pro and I want to be able to work locally on one user account, with some kind of remote access server running on another XP user account so that the remote account and the local account can be used simultaniously. I know that this cannot be done with XP Pro remote desktop and could be by Windows Server 2003 remote desktop, but i need an alternate solution to make this happen.

Thanks!

-Jeff
 

A:Alternate Remote Desktop application for Simultanious Local/Remote Access

7 more replies
Answer Match 52.08%

I searched and just couldn't find anything about this so forgive me if it has been discussed before...

I'm running XP Home with GhostSurf 2005 , Zone Alarm Pro (& Norton Antivirus)...and I was wondering if these existing programs have the capabilities or I need new programs to do the following:

I have programs that want to access the internet...and I want to route them through my GhostSurf proxy or at least any proxy so that my IP is hidden...is this possible, and if so, how? I know that GhostSurf automatically hides IE's IP and I can easily configure it to handle Firefox...but I have no idea how to anonymize my program internet access! (I think the programs that I want to anonymize are all accessing either DNS or HTTP addresses...what that ultimately means and how it pertains to my problem...I don't really know...

Thanks for any help!
 

More replies
Answer Match 52.08%

November 20, 2002

<b>Important Notice</b>

If your computer is part of a managed network, please contact your organization's system administrator before making changes to your computer.
<b>Why is this update needed?</b>

An identified security vulnerability could allow an attacker to compromise Microsoft® Windows®-based systems and then take any of a variety of actions, such as changing Web pages or reformatting your hard disk. You can help eliminate this issue by installing this update from Microsoft.

<b>Who needs to apply this update?</b>

Anyone using Microsoft Windows 2000, Windows Me, Windows 98 SE, Windows 98, or Windows NT® 4.0 needs the update. Windows XP is not affected by this issue. At greatest risk are systems that operate Web sites using Microsoft Internet Information Services (IIS) and anyone who browses the Web using Microsoft Internet Explorer.

<b>Two types of computers are at particular risk. If either of the following describes your computer, you should install the patch immediately:</b>

Computers that are used to browse the Web or read e-mail. Most workstations and laptop computers fall into this category.

Computers that host Web sites using IIS.

<b>Which versions are eligible for the update?</b>

Updates are available for the following product versions. Earlier versions than those listed below are no longer supported and may or may not be affected by the vulnerability:

Windows ... Read more

More replies
Answer Match 52.08%

I asked a question in another thread wanting to know if there were any good free alternatives to programs PCAnywhere or GoToMyPC. Boy did I ever get more than I expected in TeamViewer that EAFiedler suggested.

Now I have a technical question about how TeamViewer works. It connects to remote systems across the internet not by an IP number that I enter but rather by an arbitrary nine-digit number assigned to the system when the program is set up. It connects so quickly that I know it cannot be scanning every IP address on the 'net looking for a TeamViewer connection at every one of them. So, I have deduced that there must be a server out there somewhere that stores TeamViewer information.

Does anyone know enough about this to confirm this and/or explain it to me somewhat?

Next question: What about security? Are there any security issues I should be concerned about, other than the obvious, of course?
 

A:Technical question about TeamViewer remote access/remote office

14 more replies
Answer Match 52.08%

I have a home network of 4 Win 7 computers which I leave running when I'm away from home to provide data to my website, among other things. In the past, I've been using Remote Desktop to access my home computers. It works very well, but it's always a challenge getting everything set up to work right before I go. I was wondering if others who have used Remote Desktop as well as other means of remote access would care to share their experience and express a preference, if any.

Thanks.

A:Care to recommend a remote access method beside Remote Desktop?

Everyone seems to like > TeamViewer - Free Remote Control, Remote Access & Online Meetings

9 more replies
Answer Match 51.66%

This morning, I heard a nationally syndicated computer expert state that some Chinese hackers were "getting into" Windows based computers through "Remote Access/Remote Desktop" even if the service is turned off. According to the guru, "They will turn it on for you."
Being very concrete, as well as, somewhat dull concerning computers, I find this hard to believe. Could someone, in layman's terms, tell me the circumstances needed that would allow a hacker to take control of someone's system when a necessary service is turned off ??

A:Infection Of Windows Through Remote Access/Remote Desktop

Easy to do and best NOT described here.

5 more replies
Answer Match 51.66%

I am running a wireless Network with D-Link 714P+ Router. My PC is wired to the Router, with 2 other computers running wireless. I am running XP Pro.

When accessing my PC (or at least attempting to) from a remote Computer using Remote Desktop, I think I have to add something after the IP Address when typing in the Computer Name/IP Address. I have RD working successfully within my Network. Can someone clarify what I need to do here to access my PC through the Internet then Network

(Even though I have got this far with setting up my network, please go easy on me with the computer lingo)
 

A:Solved: How do I access my PC in a network using Remote Desktop from remote PC

10 more replies
Answer Match 50.4%

Hello All

I have a windows server 2008 and I want to install Remote Access/VPN role on it. Unfortunately there is confilict between Remote Desktop and VPN Server role in Windows Server and when enable VPN Server role, Remote Desktop is disabled and vice versa unless you have 2 NICs and enable each on separate NIC.

Do you know a way to keep both enabled and functional on the same NIC.

Any help is appreciated.
 

More replies
Answer Match 50.4%

I have a new laptop with Windows XP SP2 on it, IE6 (though I use Firefox, not IE), and MS Office 2003 Student Edition. The latest update that popped up as "high priority" from Windows Update is this GDI+ Detection Tool (KB873374).

It sounds like you have to install it then run it and then visit MS Office website to check for updates...? Is this worth doing? Can it cause more problems than it will help? (I thought I've read about issues when updating MS Office with security patches...? And that you have to download yet something else to even check for Office security updates...?)

Or do Office security updates come through Windows Update, and I don't need to worry about this? (But if that's the case, then why even have this GDI+ thing available?)

I'm always worried about ending up with a bunch of conflicts with other programs like AVG, ZA, AutoGK, DVDShrink, etc. And I'm always hesitant to install something that has to run on my system.

I've got AVG and ZA, keep both up to date, and I have Automatic Updates turned on just to let me know when there's a critical update (so I don't have to visit the Windows Update site to get updates).

I was thinking I would only do the updates to Office that come through Automatic Updates and not worry about any others...

Also, what's the difference between Microsoft Update and Windows Update? Is it better to have Microsoft Update, or does that have its own set of problems associated with it? (A... Read more

A:Questions About Microsoft Gdi+ Detection Tool & Microsoft Update Vs. Windows Update

Well to start off the difference between windows update and microsoft update is as follows. Windows update is what originally comes with the computer and only updates the windows platform. If you choose to upgrade to the microsoft update it will check all of your microsoft programs for updates.
As far as going to the office website for updates... unless you want to install non-critical updates to your office suite then you shouldn't have to at all. Finally - that GDI+ detection tool is the little program microsoft uses to scan your computer for any of their products - that is if you use microsoft update and not the original windows update.
So if you like your computer to maintain critical updates by itself for the microsoft programs than yes use microsoft update and yes install the GDI+ decection tools.

Hope this helps you out!

11 more replies
Answer Match 49.56%

not sure since when and how ( must have been recently ), but my windows 10 got probably infected, whenever i start pc, my cpu usage jumps to 55% ?. After I open task manager, i can see this ( attachment ) :
the PID of "faulty" service is always different and if I stop the process, i am ok until next reboot. Windows defender detected nothing after full scan, I have never downloaded any exe files or opened some bad web page, only .mp4, .avi files and games from Steam.
Should I format and reinstall windows, just to be sure or is there some other tool to find out what happens / fix my problem ? I have no important data or work on my pc, so format is ok, I just dont want to spend several hours reinstalling everything

A:svchost CPU usage at 55%

Originally Posted by buxanto


not sure since when and how ( must have been recently ), but my windows 10 got probably infected, whenever i start pc, my cpu usage jumps to 55% ?. After I open task manager, i can see this ( attachment ) :
the PID of "faulty" service is always different and if I stop the process, i am ok until next reboot. Windows defender detected nothing after full scan, I have never downloaded any exe files or opened some bad web page, only .mp4, .avi files and games from Steam.
Should I format and reinstall windows, just to be sure or is there some other tool to find out what happens / fix my problem ? I have no important data or work on my pc, so format is ok, I just dont want to spend several hours reinstalling everything



Hi buxanto and welcome to Tenforums.

I wouldn't go reinstalling just yet, there are a few things you can do:

Let's check for infection
-download and run RKILL
This is a little program that will stop any malicious running processes temporarily until next boot. After running, it places a text file on your desktop - paste that info here.

- download, install and run Malwarebytes Antimalware Free
Update the definitions and go into settings and select the box to scan for Rootkits as well as everything else that is already checked. Do a custom scan and select your entire C: drive.

Let us know if it finds anything. Reboot if asked to. If you do reboot, run RKILL again.

Depending on your response, I'... Read more

0 more replies
Answer Match 49.56%

Hi, my svchost is using 100% unused cpu, making my computer run incredibly slow. When I end the process it starts back up within 30 seconds. I've used multiple virus programs, cleaned and fixed my registry, and have tried to update windows. when i click go to service nothing is highlighted, I even tried manually clicking go to process on all running services.
I've searching on how to fix this for 3 days straight, any help would be appreciated.

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, 64 bit
Processor: AMD Phenom(tm) II X4 810 Processor, AMD64 Family 16 Model 4 Stepping 2
Processor Count: 4
RAM: 7935 Mb
Graphics Card: ATI Radeon HD 4650, 1024 Mb
Hard Drives: C: Total - 939430 MB, Free - 262409 MB; J: Total - 1907695 MB, Free - 1399556 MB;
Motherboard: Gateway, RS780
Antivirus: Microsoft Security Essentials, Disabled
 

More replies
Answer Match 49.56%

I think I have a deadly virus or something. My svchost.exe ALWAYS uses 100% CPU Usage or something really high. I took some screenshots for to help and explain my situation.Screenshot1Screenshot2sorry if the screenshots dont work, geocities is a crappy hoster anyways.I am using Windows XP Professional SP1.I used Yahoo Anti-Spy, Ad-Adware, and Spybot Search and Destroy. I also have Mcafee and i have my Window's firewall turned on.It lags ,y whole system. Usually, my documents save instanteously. Now it takes like 30 seconds to save.Here's my HijackThis Log:Logfile of HijackThis v1.99.1
Scan saved at 9:59:17 PM, on 10/03/2005
Platform: Windows XP ?(WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\csrss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\System32\Ati2evxx.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
E:\WINDOWS\System32\alg.exe
E:\WINDOWS\system32\drivers\dcfssvc.exe
e:\progra~1\mcafee\MCAFEE~1\MssSr... Read more

A:svchost using 100% CPU Usage

I am having a similar problem . . . I recently discovered that when I tried to update the definitions for Ad Aware, my computer froze; now it has been taking a long time to open/close, and in Task Manager, svchost is hogging all of my processing.

I spoke with a Dell rep (for like 5 hours) and we could not seem to get it taken care of. I successfully ran MS Anti-spyware; Norton Anti-spyware/Anti-virus, and downloaded the Ad Aware definitions into a zip drive, and ran it in safe mode. MS did find a spyware, but zapped it.

The dell rep walked me thru the Hijackthis log, and took care of a couple of issues.

Anyone have any ideas??? What do i do next??

Thanks so much!!

K

1 more replies
Answer Match 49.56%

I'm having trouble with a workstation on my network that is running windows 2kpro. According to the task manager. It seems the svchost.exe is using 50 to 90% of the CPU. Things are slow. I've done some research and troubleshooting and it's not the Welchia worm or blaster worm. I've run ad-aware, cwshredder and other bug removers with no luck. In safe mode, the computer seems to work fine. Any suggestions?
 

A:svchost.exe CPU usage 100%

There is quite a discussion about that problem here. Another long discussion here. (A Google cache, the site doesn't seem to be available on the internet anymore.) Here's the Microsoft explanation of what it does. Another possibility from Microsoft here. It seems like a lot of people have this problem occur and there are many explanations and methods around it.
 

1 more replies
Answer Match 49.56%

Hello everyone,
Recently i have been having this problem "Since last night" when ever i open up my game "An application that i usaly open daily an have it on hours upon hours" I usaly have 40-50Fps.
 
Since last night i turn my computer on and it istantly goes right to 70-10% CpU usage.
Now i got told to go under my Windows task manager and end all the applications/processes that are hogging up all the data and i realized that there is like 9-12 Svchost.exe running in the processes"
sometimes i see my System idle processes jumping from 50+ cpu aswell.
Heres a screen shot to show you what kind of problem im having 

 
I really need help with this as its starting to fustrate me.
 
 
please!

A:Cpu usage 100% Svchost.exe "I Think"

Hi Tyler Let's get more information on your system first.MiniToolBoxDownload MiniToolBox and move the executable file to your Desktop;Execute MiniToolBox and check the following options:Flush DNS;Report IE Proxy Settings;Reset IE Proxy Settings;Report FF Proxy Settings;Reset FF Proxy Settings;List content of Hosts;List Installed Programs;List Last 10 Event Viewer Errors;List Devices - Only Problems;List Users, Partitions and Memory size;Once this is done, click on Go and wait for the scan to complete;Once the scan is complete, a log will open. Please copy/paste the content of the output log in your next reply;Also, the "System Idle Process" isn't a real process if I can say. This process "uses" the CPU that is currently not in use by the system. Which means that the higher it's "CPU usage" is, the less CPU is actually in use. If it have a CPU usage of 80, it means that you are currently using (100 - 80) 20% of your CPU So its CPU Usage doesn't matter a lot.

17 more replies
Answer Match 49.56%

Hello,

Recently I've noticed that my computer has started getting slow and when I took a look at my Windows Task Manager it said my svchost.exe is taking 99% CPU and doesn't drop. It starts back when I've restarted my computer. I've also scanned my computer with Up-To-Date virus scanner Norton AntiVirus. No Virus nor trojan. Please help me solve this problem its beginning to be annoying.

~.Kai
 

A:svchost.exe - CPU Usage 100% -

16 more replies
Answer Match 49.56%

Hi,

I know there been loads of post on svchost but i could not find one with my problem and also i didnt want to bump/hijack someone elses thread.

I have a screenshot of ProcessExplorer and showing CPU etc and a screenshot of what Services are running off that sertain svchost.exe.

Im hopeing with the to screenshots and the files names someone will help me out getting the CPU Usage down a bit to a normal speed.

thanks for any reply screenshots attached below.

A:svchost.exe 50+ CPU Usage Help

Welcome

This may work or it may not. I have no input on the problems or help that it may provide. This is for your information. Indicates its for XP

How to Fix svchost.exe using 100% CPU / Memory Leak | Technibble

4 more replies
Answer Match 49.56%

Hello. This is my first time posting here. I'm having a problem with high cpu usage. Upon checking it, there seems to be a bitcoin miner trojan that has taken up residence in my Windows\Temp folder. Deleting it simply causes it to reinstall itself on reboot. I'm using Windows 7 Ultimate 64 SP1. Will post more details if needed.
 
 

A:SVChost.exe 100% cpu usage

Download Malwrebytes from the link below.https://www.malwarebytes.org/
Select update.
Then Select Scan Now.
Once the scan is completed.
Remove anything found.
Then go to the History tab.
Then go to the application logs.
Then go to scan log.
Export.
Copy to clipboard.
Post it here in your next reply.
 
 
9-Lab Scan
 
Download 9-Lab Removal Tool. from one of the links below.CLICK HERE to determine whether you're running 32-bit or 64-bit for Windows.
 
9-lab Removal Tool x64
9-lab Removal Tool x86
http://9-lab.com/download/
Install the program onto your computer, then right click the icon run as administrator.
Go to the Update tab and update the program.
Now go to the scanner tab and select Full Scan.
Upon Scan Completion Click Show Results.
Now click the Clean button.
Once done cleaning you can go to the logs tab double click it and copy paste in your next reply.
 
 
Download Malwarebytes Anti-Rootkit to your desktop.
Double-click the icon to start the tool.
It will ask you where to extract make sure it is on the desktop.
Malwarebytes Anti-Rootkit needs to be run from an account with admin rights.
Click next to continue.
Then Click Update
Once the update is Finished select Next then Scan.
If no malware has been found, at the end of scan select Exit
If an infection was found, make sure to select all items and click Cleanup.
Reboot your machine.
Open the MBAR folder and paste the content of the following into your next reply:
mbar-log-{date} (xx-xx-... Read more

13 more replies
Answer Match 49.56%

I noticed the CPU at 100% after having installed the driver to my new HP Photosmart C7250 wireless printer. In fact, the day I installed it, the printer worked fine. After powering the computer off and booting up the next day, the CPU cranked at a constant 100% and the printer no longer appeared available in the Printers & Faxes folder. When I went to Add/Remove Programs, the HP C7250 printer program was gone, but the new HP Solution Center 9.0 program was still there!

I contacted HP and they had me re-install the printer off of the install disk using an "off-the-beaten-path" install, which fixed accessing the printer. Still the CPU problem existed.

I contacted Dell and they helped me to isolate the problem as a svchost.exe process. I can "End Process" the svchost.exe with no seemingly adverse consequence in Task Manager and the CPU will settle down. They told me to go to HP and get a patch for the C7250.

I contacted HP and the Tech Support staff said there was no patch, claiming the problem was not there's. He said it was a Dell or Microsoft OS problem.

I've done a restore point before installing the driver. I've been made to uninstall and re-install my McAfee Security Center. I've been told to turn off my Automatic Updates (I turned that back on later). I've uninstalled the HP C7250 software (CPU calms down) and re-installed it. When I re-install the C7250, the printer works fine--then I turn the computer off and reboot the next day: t... Read more

A:CPU Usage at 100% with svchost.exe using Most

Bump!

2 more replies
Answer Match 49.56%

svchost.exe 1344 96.47 Generic Host Process for Win32 Services Microsoft Corporation

Process: svchost.exe Pid: 1344

Name Description Company Name Version
6a158d.msi
AcGenral.DLL Windows Compatibility DLL Microsoft Corporation 5.1.2600.5512
ACTIVEDS.dll ADs Router Layer DLL Microsoft Corporation 5.1.2600.5512
adptif.dll IPX Interface via WinSock Microsoft Corporation 5.1.2600.0
adsldpc.dll ADs LDAP Provider C DLL Microsoft Corporation 5.1.2600.5512
ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 5.1.2600.5512
advpack.dll ADVPACK Microsoft Corporation 7.0.6000.16791
Apphelp.dll Application Compatibility Client Library Microsoft Corporation 5.1.2600.5512
ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.5.2284.1
audiosrv.dll Windows Audio Service Microsoft Corporation 5.1.2600.5512
AUTHZ.dll Authorization Framework Microsoft Corporation 5.1.2600.5512
browser.dll Computer Browser Service DLL Microsoft Corporation 5.1.2600.5512
Cabinet.dll Microsoft? Cabinet File API Microsoft Corporation 5.1.2600.5512
catsrv.dll Microsoft Corporation 2001.12.4414.700
catsrvut.dll Microsoft Corporation 2001.12.4414.700
certcli.dll Microsoft? Certificate Services Client Microsoft Corporation 5.1.2600.5512
CLBCATQ.DLL Microsoft Corporation 2001.12.4414.700
CLUSAPI.DLL Cluster API Library Microsoft Corporation 5.1.2600.5512
colbact.DLL Microsoft Corporation 2001.12.4414.700
comctl32.dll User Experience Controls Library Microsoft Corpo... Read more

More replies
Answer Match 49.56%

Hi, my svchost is using 100% unused cpu, making my computer run incredibly slow. When I end the process it starts back up within 30 seconds. I've used multiple virus programs, cleaned and fixed my registry, and have tried to update windows. when i click go to service nothing is highlighted, I even tried manually clicking go to process on all running services.
I've searching on how to fix this for 3 days straight, any help would be appreciated.
 taskmngr.png   42.43KB
  2 downloads
OS Version: Microsoft Windows 7 Home Premium, 64 bit
Processor: AMD Phenom™ II X4 810 Processor, AMD64 Family 16 Model 4 Stepping 2
Processor Count: 4
RAM: 7935 Mb
Graphics Card: ATI Radeon HD 4650, 1024 Mb
Hard Drives: C: Total - 939430 MB, Free - 262409 MB; J: Total - 1907695 MB, Free - 1399556 MB;
Motherboard: Gateway, RS780
Antivirus: Microsoft Security Essentials, Disabled

A:svchost.exe *32 using 100% cpu usage

DownloadProcess explorerExtract and launch itRight click on SVCHOST.EXE that has high cpu usage and click on services tabPost the list of services here

1 more replies
Answer Match 49.56%

I've attached a screenshot from ProcessExplorer.

Notice the high activity svchost.exe

I had just closed another application, and this lasted for a few minutes. It then went to zero.

How do I determine what is actually going on here? I have Dual Core 3ghz & 4GB RAM running 7RC with no anti-virus.

A:svchost.exe CPU usage

Hi Jay,

it's pretty much normal activity. Multiple services run under svchost, this can give you an idea as to which ones. Even Process Explorer will show you the services running.
Task Manager - Show Services Running under svchost.exe

9 more replies
Answer Match 49.56%

not sure since when and how ( must have been recently ), but my windows 10 got probably infected, whenever i start pc, my cpu usage jumps to 55% ?. After I open task manager, i can see this ( attachment ) :
the PID of "faulty" service is always different and if I stop the process, i am ok until next reboot. Windows defender detected nothing after full scan, I have never downloaded any exe files or opened some bad web page, only .mp4, .avi files and games from Steam.
Should I format and reinstall windows, just to be sure or is there some other tool to find out what happens / fix my problem ? I have no important data or work on my pc, so format is ok, I just dont want to spend several hours reinstalling everything

A:svchost CPU usage at 55%

Originally Posted by buxanto


not sure since when and how ( must have been recently ), but my windows 10 got probably infected, whenever i start pc, my cpu usage jumps to 55% ?. After I open task manager, i can see this ( attachment ) :
the PID of "faulty" service is always different and if I stop the process, i am ok until next reboot. Windows defender detected nothing after full scan, I have never downloaded any exe files or opened some bad web page, only .mp4, .avi files and games from Steam.
Should I format and reinstall windows, just to be sure or is there some other tool to find out what happens / fix my problem ? I have no important data or work on my pc, so format is ok, I just dont want to spend several hours reinstalling everything



Hi buxanto and welcome to Tenforums.

I wouldn't go reinstalling just yet, there are a few things you can do:

Let's check for infection
-download and run RKILL
This is a little program that will stop any malicious running processes temporarily until next boot. After running, it places a text file on your desktop - paste that info here.

- download, install and run Malwarebytes Antimalware Free
Update the definitions and go into settings and select the box to scan for Rootkits as well as everything else that is already checked. Do a custom scan and select your entire C: drive.

Let us know if it finds anything. Reboot if asked to. If you do reboot, run RKILL again.

Depending on your response, I'... Read more

more replies
Answer Match 49.56%

The problem is that one of my svchost.exe mem usage spikes to over 500mb of ram and it uses every drop of free CPU which constantly varies from 0-95% or anywhere in between. It does not happen immediately, on the contrary it only starts to happen after my computer has been on for about 10-20 min. When i end the process and restart the services, my computer will be fine for another 10-15 minutes before it will start eating up all available RAM and cpu. I am at my wits end to fix this. Using Process Explorer i individually stopped the services under that process then restarted them except for 3-4 that i was not allowed to stop but all during that time it continued to eat more and more of my ram. I am welcome to any suggestions on this. Whatever information is required such as a HJT log or a list of the services under the svchost from process explorer, i can give it.

Right before this started happening, I had a massive malware attack on my computer where i used a system restore and even then it took awhile to get rid of everything.

I just restarted my computer and in the time it took to write this it started eating all my ram. mem usage is at 400k.
 

A:svchost mem usage help

11 more replies
Answer Match 49.56%

I just formatted my laptop and put Win XP Pro on it. Since then the CPU usage has been at 100%. According to the task manager SVCHOST.EXE is about 98% of it. Any reason why it's doing this and what can I do to fix it? There's absolutely nothing on the computer but XP Pro.

Thanks!
 

A:SVCHOST.EXE at 98% cpu usage

Try using this http://vil.nai.com/vil/stinger/
 

1 more replies
Answer Match 49.56%

QUOTEAvira recently showed up saving it had caught a couple of viruses, then the next time I booted up, I found my laptop very slow. It turned out svchost was using 100% of the CPU.I can't seem to post a DDS log as it's the text file is just goobledegook!If I try running gmer I get the blue screen of death.So as a starter I've attached my HJT log.Many thanks in advance.DevanQUOTE

A:100% CPU Usage svchost.exe

Hello Speedracer_Dev, My name is Syler and I will be helping you to solve your malware issues. Sorry for the delayin replying, we are very busy at the moment.Please note because we are very busy, if I don't hear from you within 5 days the topic will be closed, If youhave since resolved your issues I would appreciate if you would let me no so I can close this topic.Please download Malwarebytes' Anti-Malware from HereNote: If you already have Malwarebytes' Anti-Malware, just update then run it.Double Click mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.Once the program has loaded, select "Perform Quick Scan", then click Scan (the scan may take some time to finish, so please be patient).When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy and Paste the entire report in your next reply .Note: If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process,if asked to res... Read more

9 more replies
Answer Match 49.56%

Hi i have done multiple virus scans and came out with nothing...so the final test is my Scan Logit usually happens when im surfing the net...IE will just crash and i will see task manager and watch as svchost eats my computer...i disabled add ons to see if it helped, didn't, now im all outa ideas.Oh and BTW, when i clicked on the spell checker..it did it again!!!! had to wait for it to stopLogfile of HijackThis v1.99.1Scan saved at 19:30:38, on 15/03/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5730.0011)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\Program Files\MSN Messenger\usnsvc.exeC:\Program Files\Saitek\Software\Profiler.exeC:\Program Files\Saitek\Software\SaiSmart.exeC:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXEC:\Program Files\Zone Labs\ZoneAlarm\zlclient.exeC:\WINDOWS\system32\ctfmon.exeC:\WINDOWS\system32\svchost... Read more

A:Svchost.exe 100% Cpu Usage!

Upped

15 more replies
Answer Match 49.56%

System: MS Windows XP Home Edition Version 2002 Service Pack 3
Problem: One of the svchost.exe entries continually runs at around 30-50% CPU; sometimes it is higher.
It doesn?t appear to be linked to Windows update (no update between being OK and not) and no other software was loaded just before it started. I have had a couple of corruptions on the hard drive recently so that?s a possible source of error.
This copy of svc.host.exe runs a lot of services. I killed all services that I could but the CPU usage didn?t change.
I have other evidence from Process Explorer and another issue. Occasionally my startup freezes; explorer.exe will have low memory usage so I kill it and restart it and the startup carries on successfully although Netmeter doesn?t get started (starting Netmeter doesn?t cause the problem to come back). Since the problem started, I?ve had to do this 4 times and on 3 occasions the svchost entry is fine and operates normally. Once it looked OK initially but then the problem came back after a while.
Looking at the Thread list for svchost shows that the CPU time is nearly all listed against 1 entry for wbemcomn.dll. This entry does not occur in the list when it?s operating properly.
The services that I can?t kill in svchost are:
srvsvc.dll
wkssvc.dll
netman.dll
rasmans.dll
srsvc.dll
tapisrv.dll
trkwks.dll
wbem\WMIsvc.dll
wiaservc.dll
wbemcomn.dll is in sub-directory wbem
BTW I did find a Microsoft kb article which was similar and it described... Read more

A:svchost.exe CPU usage

Hi Peter, and welcome to TSF.

Could you please post your system specs? You seem to be knowledgeable about computers, so you shouldn't have much trouble.

Thanks.
-HelloMello

1 more replies
Answer Match 49.56%

Hi,

I have a problem with my svchost taking up 95% of my CPU usage. I have explored earlier threads about this issue, but it seems I might need help to fix the problem fully. I have DLed HijackThis and done a scan and have the results. Hoping someone can help me past this point.

Thanks
 

A:CPU usage at 100% svchost using 95%

There are a number of things it could be, the first thing is the most obvious anti-virus/spyware so run a scan using AVG/Spybot. McAfee is known to knock up that process as well, if you have it installed try uninstalling it. (Back in 2006 Microsoft Updates also managed to break a few computers with the svchost running at 90%+).

Regards,
exoizcom
 

2 more replies
Answer Match 49.56%

Hello all. Broni tried to help with this one in another forum (here) but said i should open a new thread here.
 
The problem is that when i boot up, svchost.exe (and specifically a thread called wuaueng.dll) uses up 50% of the cpu. After a while another service joins in called wzcsldr2.exe and uses up the other 50% so if you do the math, my computer slows down to a crawl. What i noticed is that after a while (around half an hour) wzcsldr2 stops using 50% and goes back to normal while the svchost needs at least and hour or two to get back to normal. They go up again at times during the day though. I have tried using rootkit removal tools MBAM and online scanners, cleaned whatever they found but the problem persists. Also, there are errors on startup having window names of the programs running on startup (not all) telling me that 
"the procedure entry point_except_handler4_common could not be located in dynamic link library msvcrt.dll"
 
Please if someone is to help with this one, it would be helpful to live somewhere in europe, That is because of the time-difference i will have to wait till its morning to see the replies to my answers, not being able to do more than one step at a day. That is IF the step goes as planned...
 
Below is a DDS log as asked...
 
DDS (Ver_2012-11-20.01) - NTFS_x86 
Internet Explorer: 6.0.2900.5512  BrowserJavaVersion: 10.25.2
Run by Apollon at 9:14:32 on 2013-09-19
Microsoft Windows XP Professional  ... Read more

A:Svchost.exe and 100% cpu usage

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/508281 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Answer Match 49.56%

Hiya. I just removed a Trojan.Vundo from my computer. But I have had the existing problem of unnaturally high CPU usage. I suspect(after browsing and searching) that it is due to SVCHOST, which, upon looking in my processes tab, there are 7-15 at any time. Thanks for help in advance.
 

A:I have 100% CPU usage. Likely from SVCHOST. Please Help!

16 more replies
Answer Match 49.56%

Dont know if it's a virus. dont think so, but im getting a 100% cpu usage all the time, no idea whatsoever of how did this started. Thanks in advance.

DDS (Ver_09-03-16.01) - NTFSx86
Run by Jose at 12:58:54.90 on Mon 05/04/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_13
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.3581.2278 [GMT -5:00]
============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\WLTRYSVC.EXE
C:\Windows\System32\bcmwltry.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Fingerprint R... Read more

A:100% CPU Usage. svchost.exe

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_Sca... Read more

2 more replies
Answer Match 49.56%

Hi my cpu usage is spiking when i'm running nothing on my pc. I have very limited knowledge of computers and wondered if anyone on here can help me please.

when i look at the services shown they are various all with pid 872

Really sorry this is vague
 

A:svchost cpu usage

6 more replies
Answer Match 49.14%

hello,

Im using Windows Xp professional Sp2

Whenever i start my windows, svchost.exe starts connecting to all the possible ips on lan like from 192.168.1.2 to 192.168.1.200 The local port ranges from 1000-1099 and the remote port being 445.

After its done with the local ips, it starts connecting to other random ips.

I tried blocking connections to the port 445 using the local security polices but it didn't work

Is there any possible way i could prevent svchost from connecting to these ips without involving any firewall installed ? since my pc slows down due to the load

I'd be thankful for any advices
 

A:Windows xp, Svchost.exe connecting to different ips, remote port 445

coll911 said:



hello,

Im using Windows Xp professional Sp2

Whenever i start my windows, svchost.exe starts connecting to all the possible ips on lan like from 192.168.1.2 to 192.168.1.200 The local port ranges from 1000-1099 and the remote port being 445.

After its done with the local ips, it starts connecting to other random ips.

I tried blocking connections to the port 445 using the local security polices but it didn't work

Is there any possible way i could prevent svchost from connecting to these ips without involving any firewall installed ? since my pc slows down due to the load

I'd be thankful for any advicesClick to expand...


Ok, i scanned my pc with malware bytes and found out it was infected with a worm, it's deleted now but still svchost is connecting to the ips.

i also found out that in my windows firewall settings, under internet control message protocol (ICMP) theres a tick on "allow incoming echo request"(usually disabled) which is locked and i cant disable it, Its description is
as follows

Messages sent to this computer will be repeated back to the sender. This is used for trouble shooting for e.g to ping a machine. Requests of this type are automatically allowed if tcp port 445 is enabled

Any solutions ? i cant bear going with the re installing windows phase again
 

17 more replies