svchost.exe

One of my svchost processes uses a lot of cpu and memory and handles. When I started 'Windows Worms Door Cleaner' it warned me the memory footprint is too large for normal and its probably infected.

Its the svchost that windows update runs under, I also noticed when running windows update it stays on 100% for a good few minutes when detecting updates and also at the end of an update installation, it seems to fight with real time anti virus for resources as well.

This is on a pretty much new installation of windows and I wonder if this is suspicous or just a buggy ms process.

 

I put this in security as is security concern but ok.

Some more info I tried to debug this process in process explorer, as it had risen to 80meg of memory usage and tied up a lot of handles but this made it crash and then come back so it rejected the debugger.

 

Unlikely,I suppose,but there is a trojan called Dasher-svchost.exe

The svchost.exe file should be located in the C:\Windows\System32 folder.

In other cases, svchost.exe is a virus, spyware, trojan or worm!

Might be worth running a scan.

Mike

.

 

svchost.exe is a generic name for groups of processes. to find out what's happening you need to find the PID of the problem process within the group, then go from there.

you can use tasklist

https://www.wilderssecurity.com/showpost.php?p=310042&postcount=2

 

or in process explorer: right click on one of the svchost items, left click on properties and then the tab services.

 

Try to disable DNS Client service and some other "useless" Windows services.