svchost.exe causing cpu to run 100%

I'm usually good at resolving virus and spyware issues, but this one has got the best of me!!!!

I just recently built me a new system....so i've spent the better part of the last two weeks, slowly getting it the way I wanted!! So far i've only got minimal applications on there right now...you know...mail program, cd burning program, nothing exotic as far as games or anything out of the ordinary, just your basic staples!!

Well...last night I decided to go ahead and turn on the automatic updates on my Windows XP HOME (SP2), and I noticed that it slowed down quite a bit!!!!!!!!!! Didn't think much of it until I went to install my Microsoft Money '99 software, and when I proceeded to open that after it was installed, and it wouldn't operate without causing an illegal problem and shutting it down!! So I decided to uninstall that ofcourse, and reinstall it again, and it still didn't work so I took it off and left it off!! Somewhere in the mist of that, I noticed that the comp is now earthworm slow!!!!!!!!!!! I also noticed that my automatic updates download has been stuck on 87% all day now!!

So anyway....getting to the point of this....I ran my Norton av and all my spyware scanners, which were updated ofcourse, and those didn't find anything!! Scanned with HJT and there doesn't appear to be anything to throw up any flags, except the fact that there are 10 or 12 entries at the bottom of the scan that start with 023 - Service: and it is something either related to Symantic or norton of some sort!! Looking in the HJT tutorial, i can't find any pointers related to the 023's. Is that normal???

Hope somebody has an idea!!

Thanks
Roger

 

svchost.exe is a normal part of windows xp - basically it is common windows processes. Svchost.exe is not a virus! If your cpu is running at 100%, then you have some other problems.

 

rogvalcox,

http://www.majorgeeks.com/images/grenade.gif Download HijackThis 1.99.1

http://www.majorgeeks.com/images/grenade.gif Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

http://www.majorgeeks.com/images/grenade.gif Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

http://www.majorgeeks.com/images/grenade.gifBefore running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

http://www.majorgeeks.com/images/grenade.gifRun HijackThis and save your log file.

http://www.majorgeeks.com/images/grenade.gif Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

http://www.majorgeeks.com/images/grenade.gifNeed help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

 

Well...I restarted the computer for the hundreth time....which before never made any difference, but this time it did!! The Automatic update finished and installed, and it has now been about one and a half hours and nothing in the processes seem to taking over!! The cpu might occasionally spike to 10 or 12 percent but that is only if I open an application etc., like it's supposed to do!!

However...I forgot to mention this before....My mouse is still shaky and it will temporarily freeze or the pointer will shutter when I try to move it...then after a few seconds, it will start acting normal for a bit then go back to being spastic!!

So, anyway...I figured it would be a good idea to still go ahead and check out the HJT log and see if there is something in there i'm not aware of!!

I attatched the log file, but I didn't do the scan in safe mode, so if you want it in safe mode, then let me know!! I noticed sometimes you tell people to do it in safe mode and sometimes you don't mention it!!

Let me know if you come up with anything!!

Thanks
Roger

 

Your HJT log is clean!

For the mouse problem, I would post this in the Software or Hardware Forum for best results.

Are you having any other problems?

 

Thank you...I appreciate the reinforcement!!!!

There doesn't appear to be any other problems!! It's been overnight now and the processes and cpu usage appear to still be normal...which is good ofcourse!!!!

I kind of thought the log was clean, but I just wasn't sure about all those 023's at the end of the log!! The tutorial stops after the 22's. I figured they were legitimate being that they are all related to norton, but I was curious if there was any of that stuff that could be trimmed down?? You know how software is now!! It does everything, including a bunch of extra junk automatically for you, and the next thing you know you have a bunch of necessary junk in the background!!!

Thanks for any more input you can give!!!!

Roger

 

Glad everything is running good!

Those services are required.