svchost.exe in windows 2000 pro sp4

[blinkmus]

my dad recently purchased a computer SPECS: Biostar m7vig pro, 512 MB memory, 40 gig hd w/2 partions, modem, 1.1 gig amd processor.

it seems like every few minutes or so on of the svchost.exe processes use almost 100% of his cpu. mouse gets real jerky, windows wont close, makes so that the computer is almost unusable for a couple minutes thereafter.

any ideas what may be causeing this?

[jsu718]

There is a high likelihood that it's a virus doing it. There are several that target svchost.exe, although many that take 100% are renamed very similar.
The file itself though is just what windows uses to run services.

[blinkmus]

for some reason the computer did not come with virus protection, hes gonna install it and see what happens, thanks

[Ranma_Sao]

Get a firewall.

[omega-x]

svchost =service host process.

go to computer management to view services

[blinkmus]

yea tried that but couldnt figure it out, also could not install any standard anti virus so i downloaded avg, got it installed and it would start to run and then just stop, wonder why that happens?

[oakfan52]

try running AV scan in safe mode. disable all startup items. and unustal processes running?

[S1nF1xx]

Most likely a virus, could be spyware.
1. Get an antivirus program, update it and run a full scan.
2. Download Ad-aware from www.lavasoftusa.com Update it and run a full scan.
3. Repeat steps 1 & 2 until they come up clean.
4. Get a firewall. Either software like zonealarm (www.zonelabs.com), or hardware, like a router. Just buy a standard Linksys or D-link router and plug it in between your computer and your modem, it's very simple to install.
5. If you use IE, get a popup blocker. There are hundreds if not thousands available, just do a search.

[krakadic]

command line: tasklist /svc

(assuming xp pro)

[blinkmus]

well i went over to dads today and he thought every thing was working good.
it appeared to be working pretty good to me, so i installed zonealarm. then it started to suck up the cpu again.
i think he is just gonna format and reinstall, we have tried everything that yall have suggested, even booting into safe mode and running virusscans, they all come up negative. once again thanks for your help.

[feigned]

command line: tasklist /svc

(assuming xp pro)

Nice, never knew about that. :)

One better: http://www.diamondcs.com.au/index.php?page=console-cmdline

Shows all processes and where they are being ran from. Helped me get rid of two viruses last week. :)

[DevilDoc]

Nice, never knew about that. :)

One better: http://www.diamondcs.com.au/index.php?page=console-cmdline

Shows all processes and where they are being ran from. Helped me get rid of two viruses last week. :)

Thanks Feigned, cmdline is nice, it'll save me some work.

back on topic, the behavior of the machine seems like the welchia virus. I had a number of machines contract that one. I'd try FixWelch from Norton, Patch the hell out of it, and install AVG (http://www.grisoft.com/us/us_dwnl_free.php) for good free antivirus. Kerio (http://www.kerio.com/us/kpf_download.html) and Sygate (http://smb.sygate.com/products/spf_standard.htm) offer good free firewalls.