Hi,

I?ve been having problems with svchost.exe, which slows down the computer. The processor is running all the time around 90%. HiJackThis -application reports, that this particular svchost.exe is not running from win32, from folder which is supposed to be c:\windows\mapping\. However, windows doesn?t show there?s a folder called mapping existing.

My virusscanner (F-secure) doesn?t report anything wrong with svchost.exe. I noticed that there?s several posts about this subject, but I didn?t find a situation like mine.

Any advices?

Attached Files

hijackthis.log (6.9 KB, 2 views)

Hi there Sacrebleu , welcome to PCHF.

There are two versions of svchost on youre pc , one legit and one virus. We'll have that clean in no time.

Boot youre pc in safemode (hit f8 when booting up).

Then click Start>Run and type in: services.msc
Click OK
In the Services window find: Windows Connection Mapping Service
Select/highlight and right click the entry, and choose: Properties
On the General tab, under Service Status click the Stop button
Beside: Startup Type, in the drop menu, select: Disabled
Click Apply, then OK
Open HJT and click config > misc tools > ?delete an NT service?
Copy and past: cmapsvc
Click OK.


After that fix these entrys with hjt:
(if still present)

Then delete the folder in bold , reboot and post a new hjt log please.


I would also recommend to update to sp2 , but wait with that untill youre pc is malware free or that could cause problems.