Malware causes spike in svchost.exe program

By H4rbinger
Jul 10, 2013
Post New Reply
  1. My pc is running on windows 7 and is having an issue where the svchost.exe escalates it's memory usage and maxes out my cpu until it causes the computer to crash. I do not know what to do.
  2. H4rbinger

    H4rbinger Newcomer, in training Topic Starter

    Currently running malware bytes scan in order to generate a log.
  3. jobeard

    jobeard TS Ambassador Posts: 13,288   +281

    Here's a list of services (at least on my win/7) that are threads within svchosts:
    {the PID is the program itself and everything shown after it is a thread therein}

    So; first question would be in services.msc, which services are actually started and do you know why?

    Second, you need something like Process Explorer from sysinternals.com to find the threads
    Code:
    
    Image Name					 PID Services									
    ========================= ======== ============================================
    									
    svchost.exe					808 DcomLaunch, PlugPlay, Power				 
    svchost.exe					896 RpcEptMapper, RpcSs						 
    svchost.exe					976 AudioSrv, Dhcp, eventlog,				   
    								   HomeGroupProvider, lmhosts				  
    svchost.exe					428 AudioEndpointBuilder, hidserv, IPBusEnum,   
    								   Netman, PcaSvc, SysMain, TrkWks,			
    								   UmRdpService, UxSms, Wlansvc, wudfsvc	   
    svchost.exe					588 AeLookupSvc, Appinfo, AppMgmt, BITS,		
    								   Browser, CertPropSvc, EapHost, gpsvc,	   
    								   IKEEXT, iphlpsvc, LanmanServer, MMCSS,	  
    								   ProfSvc, RasAuto, RasMan, Schedule,		 
    								   seclogon, SENS, SessionEnv,				 
    								   ShellHWDetection, Themes, Winmgmt, wuauserv 
    								   
    svchost.exe				   1160 EventSystem, fdPHost, netprofm, nsi,		
    								   SstpSvc, THREADORDER, W32Time,			  
    								   WdiServiceHost							  
    svchost.exe				   1240 CryptSvc, Dnscache, LanmanWorkstation,	  
    								   NlaSvc, TapiSrv, TermService, Wecsvc		
    svchost.exe				   1376 BFE, DPS, MpsSvc, WwanSvc 
    				
    svchost.exe				   1752 FDResPub, SensrSvc, SSDPSRV, upnphost,	  
    								   wcncsvc									 
    svchost.exe				   2052 LPDSVC								 
    svchost.exe				   2348 stisvc									  
    svchost.exe				   2656 p2pimsvc, p2psvc, PNRPsvc				   
    svchost.exe				   3320 PolicyAgent								 
    svchost.exe				   3380 WinDefend 
    								 
    svchost.exe				   1168 SDRSVC
    																		 
    


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.