svchost.exe eating ALL CPU

[Luvsql]

I was having this problem for days, so I decided to restore my laptop back to factory install, updated all xp sps, installed my virus prottection etc. That was 3 hours ago and again, the svchost.exe is eating up ALL CPU and I keep crashing.

What the heck is going on here?

 

[Luvsql]

I've tried downloading a few MS hotfixes, I have run the process monitor tool and all things running under svchost.exe are all Microsoft! I do not have any viruses and this is literally a brand new installation of xp Pro.

 

[chipk]

There are a couple worms that create fake svchost.exe processes that do weird things (welchia and blaster maybe - if I remember correctly). Try doing a full scan, maybe use an online tool since your resident AV isn't catching anything:

http://housecall.trendmicro.com/

 

[cpjust]

If svchost.exe is in C:\Windows it's a virus. The real svchost.exe should be in C:\Windows\System32.

 

[furtech]

I'm having a similar problem...I believe it's related to Windows Updates. If I stop the Automatic Windows Updates service it doesn't use the CPU.

Read

http://forum.sysinternals.com/forum_posts.asp?TID=8937

for more info.

Thanks,

---------------------------------------
Matthew Collins

http://www.furtech.net

---------------------------------------

 

[SuperAmit]

The problem is with Microsoft Updates.

Go to Windows Update, once there on the left hand side you will see "Change Settings", click on that and scroll down towards the bottom and you will see "To stop using Microsoft Update", click the check box and click "Apply Changes Now" and click "Yes" to continue. You should see a message that says "You have successfully disabled the Microsoft Update software on your computer." Close that web page, reboot and go back to Windows Update, it will ask you to reinstall the Windows Update, reinstall and your SVCHOST should be back to normal.

 

[Luvsql]

I had JUST reformatted my laptop back to the factory DVD. How could a virus cause this?

I disabled the auto-downloads from Microsoft and it's not an issue anymore.

 

[SuperAmit]

In some cases it is a virus but in a lot of cases it is not, it is a bug with Windows Updates.

http://support.microsoft.com/kb/916089/