svchost Maxing CPU
- Thread starter HotShotX
- Start date
http://en.wikipedia.org/wiki/Svchost#Performance_issues
Because svchost.exe is used as a common system process, some malware often uses a process name of "svchost.exe" to disguise itself. Determining the image path of a process, and its invoking command line, can help identify software masquerading in this way, and help locate the actual program file which is running under the assumed process name of "svchost.exe"
I don't think the above needs any sort of jargon-to-english translation, but just to be super clear, when you find your CPU being maxed out without clear reason, right click the high-CPU process(es) and check the properties to see if it's something you actually want to have on your computer. It's possible that it isn't malware, it might be some sort of indexing service or defrag utility or something like that... if, on the Properties window, the Location looks suspicious, google the .dll being used to see if it's considered malware. If it is malware and general scans aren't finding/removing it, google "[malware name] removal utility" and you'll likely find a script made for removing it.
Because svchost.exe is used as a common system process, some malware often uses a process name of "svchost.exe" to disguise itself. Determining the image path of a process, and its invoking command line, can help identify software masquerading in this way, and help locate the actual program file which is running under the assumed process name of "svchost.exe"
I don't think the above needs any sort of jargon-to-english translation, but just to be super clear, when you find your CPU being maxed out without clear reason, right click the high-CPU process(es) and check the properties to see if it's something you actually want to have on your computer. It's possible that it isn't malware, it might be some sort of indexing service or defrag utility or something like that... if, on the Properties window, the Location looks suspicious, google the .dll being used to see if it's considered malware. If it is malware and general scans aren't finding/removing it, google "[malware name] removal utility" and you'll likely find a script made for removing it.
franz ferdinand
CAGiversary!
svchost.exe runs any number of services. You need to see which one is really hogging your CPU. Process Explorer, from Micrsosoft/SysInternals, is a good tool for this sort of thing.
bread's done