when i wanna to start up my pc
it will take abt 5 min oni can finish loading
when i use task manager to check wats happening
i notice that there is 1 application svhost.exe consume 100% memory
i use antivirus to scan,
not infected
any expert can help?

Hi, it is svhost.exe or svchost.exe?
If it is svhost.exe, you're infected with malware/spyware.
Please ask for help in technical support then.
If not, it should be normal.

definitely some sort of 'intruder'
even if ur ram is 256 only, svchost.exe won't use much mem or cpu...less than 10% usually
happened 2 my mom's laptop b4, was using 256mb ddr, then scanned...15** threats were found

Having a malware service doesn't mean that it is RAT.
Anyhow although SVCHOST.EXE is a legitimate process somehow sometime it will shoot up to 100%.
I've noticed that on several pcs[my friends and mine]

is svhost.exe
i try to use AV to scan
no use

since it's svhost.exe im tai chi-ing you over to tech support.

sry, post wrong section

something strange for this svhost.exe is,
it only consume the memory when the time i start my window
it will go smoothly after 5 minute like that

btw, any pro can help?

try use hijackthis program to check for spyware.

http://www.spywareinfo.com/~merijn/files/hijackthis.zip


edited:

and post your log to this website, hope it help

HiJackThis! Log auto analyzer V2
http://hjt.networktechs.com/


This post has been edited by aaronlbs: Aug 11 2006, 06:49 PM

For those of you who go to automated HijackThis websites like the above one, please be advised that these sites are NOT recommended by LYF or any of the admins/mods here.

This is because:

1. The analysis of these sites are highly unreliable. They are prone to false positives and false negatives.
2. Relying on these websites to give you an informed guidance on what to fix and what not to fix could really screw up your system.
3. The advisable course of action is to always have a trained HijackThis tech to look at your log and advise you accordingly.

Hope that covers it. Have a good one!!

Post a hijackthis log here.

suspect infected by Mydoom worms
http://www.processlibrary.com/directory/fi...host/index.html