svchost.exe is using 100% cpu

My computer has been really messing up lately. I recently installed Windows XP Service Pack 2 but I had problems with my network with "limited or no connectivity ", i looked at forums and they reccomended uninstalling SP2, which i did but i immeadiately ran into troubles with my network and Svchost.exe. I reinstalled SP2 but the problems persisted and no i have no internet on that computer and i can barely access anything because svchost.exe is using 100% of my cpu. i have to go into safe mode to do pretty much everything. Someone please help me.

 

Hi
Can you use Windows System Restore to go back, when your PC was working?

 

No i cannot use system restore, and it all started messing up sunday night at around 8.

 

Sounds very much like a virus.

It would be nice to figure out what is pegging your CPU though. svchost.exe is getting the blame but is not causing the problem since it simply provides one or more other programs with a place to run.

First thing is to make sure you are seeing svchost.exe and not scvhost.exe which is a known virus.

Next thing is to open a cmd prompt and then

Code:

tasklist /svc > c:\tasklist.txt

which will show you, among other things, exactly what is running in each instance of svchost so you can start to pin down which app is doing the damage. You can open tasklist.txt after you create it. Notepad does fine. Copy the entire contents to a reply here.

tasklist.exe is only on XP-pro so if you have the home version you'll need to get a copy. It does mostly work on XP-home. You can download a copy (and read instuctions) from either of these sites.

http://www.computerhope.com/download/winxp.htm

http://www.mvps.org/sramesh2k/svchost.htm

 

I think I recall that Norton AV can cause this problem. Try Googling for that and you should get some insight. I'll take a shot at it too since I have some recall that might get me to it faster.

Post back if you don't have Norton and spare me.

Edit: I remember now, it was "Real time scanning" that Norton has as an option and turning it off cured things. It may not be relevant for you but I thought I'd mention it. I can't find the source but just pulled this from my foggy memory.

 

I do have norton, and i also scanned with it and found no viruses. Alson, Here is the Tasklist.txt copy


Image Name PID Services
========================= ====== =============================================
System Idle Process 0 N/A
System 4 N/A
smss.exe 416 N/A
csrss.exe 464 N/A
winlogon.exe 488 N/A
services.exe 532 Eventlog, PlugPlay
lsass.exe 544 ProtectedStorage, SamSs
svchost.exe 688 DcomLaunch, TermService
svchost.exe 764 RpcSs
svchost.exe 804 AudioSrv, CryptSvc, Dhcp, EventSystem,
FastUserSwitchingCompatibility, HidServ,
Iprip, lanmanserver, lanmanworkstation,
Netman, Nla, RasAuto, RasMan, Schedule,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, winmgmt
svchost.exe 860 Dnscache
LEXBCES.EXE 1076 LexBceS
spoolsv.exe 1136 Spooler
LEXPPS.EXE 1164 N/A
explorer.exe 1172 N/A
PackethSvc.exe 1324 PackethSvc
CDAC11BA.EXE 1340 C-DillaCdaC11BA
CCEVTMGR.EXE 1352 ccEvtMgr
NAVAPSVC.EXE 1412 navapsvc
NPROTECT.EXE 1436 NProtectService
pctspk.exe 1524 Pctspk
SMAgent.exe 1876 SoundMAX Agent Service (default)
NOPDB.EXE 1888 Speed Disk service
alg.exe 1708 ALG
cmd.exe 2156 N/A
NDETECT.EXE 2328 N/A
wmiprvse.exe 2412 N/A
tasklist.exe 2456 N/A

 

Hi

Have you tried a online virus scan? (Try RAV Online Scan for a free online AV scan.

 

I cannot access the internet or my network for the computer in question, the only way i can exchange information in between my two computers is if I burn a cd.

 

Hi

It's possible that a virus has disable NAV and it still looks like its working tried to get a different AV.

 

Do you have any recommendations on AV programs? I would like something free if possible.

 

Hi

I use this AV and very happy withit. AV

Good luck

 

I am scanning with the suggested AV program right now. I will post the results in the morning.

 

Scanned for viruses with kapersky, found 12, but getting rid of them didn't help a thing.

 

I don't know if this is important but i can not end any processes at all, no matter what the process is.

 

Thanks for the help guys, but i think i am just going to do a clean install, thanks again.

 

Hi

I suggest you purchase Kaspersky over Norton, since it found viruses NAV did not stop.

If you are going to reinstall, put in place a AV, Firewall, Ad-ware, skybot and I-spyped before going online.

Good luck

 

Blaster virus

Molest your RPC
Download patch for this virus

greetings