SVCHOST.exe ERROR

- Collapse -

Svchost.exe

by MarkFlax Former Forum moderator Jul 25, 2007 8:09PM PDT

There should be a number of instances of svchost.exe running at the same time, so ending the process of one is difficult to diagnose. Each instance of svchost is used by other services/processes.

To see if you have any other instances of svchost.exe running check in the Task Manager, (right click the Taskbar then select Task Manager, then click the Processes tab). If you don't, then possibly you have deleted it, although I wouldn't have expected the computer to work properly without it. If you have you have two options;

a) Run sfc /scannow from Start > Run. This starts the System File Checker and sometimes can replace missing or corrupted files. Have your XP CD handy, it might ask for it. Or

b) Carry out a repair installation of XP. You will need the XP CD to boot from it to run the Repair option. Full details here.

If svchost.exe is still there, then there is another possibility. This could be a virus if it is not the svchost.exe that resides in your C:\Windows\System32 folder. The one in the C:\Windows\System32 folder is the genuine one. If you have any in any other C:\Windows folders they are likely to be virus related.

But be careful, there may be other genuine svchosts.exe files in the following folders
C:\I386
C:\Windows\$NTServicePackUninstall$
C:\Windows\Prefetch
C:\Windows\ServicePackFiles\I386

All of those are OK.

If you find a virus, update your anti-virus application definitions and scan with that to remove it.

If none of that works, then you need to hunt down whatever is trying to use svchost.exe. You state this error message displays whenever you log in. What does "log in" mean? Do you mean every time you start the computer? If so, check your System Configuration Utility, (Start > Run, type in msconfig then click OK). Check the Startup tab and start disabling entries one at a time and re-booting. Find the one where the message disappears, but it could be a long process of elimination.

I hope that helps.

Mark

- Collapse -

THANKS A LOT

by sivag_1984 Jul 26, 2007 8:08PM PDT

Hi that was a real good tip.Thanks a lot for taking time & giving a detailed solution for that.But i wrongly misspell to you the file name.
The file name is "SCVHOST.EXE" & not "SVCHOST.EXE".I ran scanning thru antivirus pgm.IT detected several virus in the file b133.exe.It couldn't clean or move the file.so I tried to remove manually & was not able to do.Same way i have two more files containing virus.But not able to remove it.But the last two are separate application files downloaded from internet.

Am confused wat to do now?

- Collapse -

That makes such a lot of difference!

by MarkFlax Former Forum moderator Jul 26, 2007 9:21PM PDT

Mis-spelling something like that makes so much difference. If you have scvhost.exe then it is likely you have the Backdoor.Sdbot.N virus, or one of the Gaobot viruses, or one of the many other viruses which drop SCVHOST.EXE (not to be confused with SVCHOST previously mentioned).

Any good anti-virus programs should remove these. You mentioned AntiVirus pgm.IT but I don't know what you mean by that. You also mention "the last two are separate application files downloaded from the internet", but again, don't know what you mean.

The Gaobot virus is often transmitted through file sharing. Are you using a fie sharing P2P, (Peer to Peer), application like Limewire, Kazaa, or any bit.torrent? Are these "last two applications" software you have download through P2P?

If so I have two things to say. Firstly, file sharing is dangerous. You have just found this out. People who share files also share viruses, trojans, and worms. Secondly, downloading copyrighted software, music, videos, etc through P2P is illegal and is considered Piracy in most countries. You need to decide how you are going to continue, because you will receive little help in these forums for illegal activities.

Your best option is to disable System Restore, because viruses and other malware hide in backup files in System Restore, then download a good anti-virus application like AVG which is free, update its virus definitions, then reboot into Safe Mode and scan with the anti-virus in Safe Mode.

There are more details on both of these viruses here;

Backdoor.Sdbot.N.
W32.Gaobot.AFJ.

More information on Scvhost.exe here. Scroll down to see Scvhost.exe.

If that doesn't work I suggest you call in to our Virus and Security Alerts forum and post your problem there. Please, no more spelling mistakes.

Mark

- Collapse -

Your right

by sivag_1984 Jul 26, 2007 9:57PM PDT

Thank You Mark.As you said am using torrent application.Moreover the anti virus program i use is Bit Defender V10.The two files are from third party application's .They belong to video converters(i.e converting mpeg to avi,etc..)

But Bit defender is protecting me when the file is accessed.I found this i tried to delete it manually.

- Collapse -

RE "Bit defender is protecting me"

by r. proffitt Former Forum moderator Jul 26, 2007 10:55PM PDT

A problem with this is that bit torrent users that download "programs" or "cracks" may get something very new. There's little I've found that will get this point across via a forum. It appears to be a lesson that must be learned first hand. That is the owner/user has to get burned. How badly is up to them. How is that? One word -> BACKUP.

Bob

PS. A recent crash found the owners backup wiped out. Why? They though some USB hard disk was backup. These hard disks with "backup" buttons are not true backups. If your machine can write to it then it's not a backup until you unplug or write protect it.

CNET Forums

Other Forums

Forum Info