Svchost on my my Dell 4700C running XP SP2 with 2GB of memory runs at 25-50 of CPU processor constantly. The computer is up to date on all MS patches and security patches.

I have run the following softwares packages as suggested in this forum:
- HijackThis
-SuperAntiSpyware
-AVG Spyware
-CClean

I have attached the following reports:
-Hijackthis
-SuperAntiSpyware
-CClean
-MS tasklist of running processes

After running CClean five or more times, the only file remaining was the one below:

CLEANING COMPLETE - (1.560 secs)
------------------------------------------------------------------------------------------
3.28MB removed.
------------------------------------------------------------------------------------------
Details of files deleted
------------------------------------------------------------------------------------------
IE Temporary Internet Files (3 files) 3.28MB
C:\Documents and Settings\Cornelius Green\Local Settings\Temp\689211B7.TMP 183 bytes
------------------------------------------------------------------------------------------

I would appreciate any help in finding out how to resolve this issue with Svchost.

I may also have the Sasser virus as I see LSA Shell( External Version) in one of my reports.

Regards
cgreen6911

Attached Files

	hijackthis_Dell4700_2-6-08.txt (13.7 KB, 4 views)
	scvhost_processes2-6-08.txt (4.0 KB, 0 views)
	SUPERAntiSpyware Scan Log - 02-06-2008 - 16-12-32.log (26.8 KB, 1 views)

Bump...

hello cgreen, and welcome to the forums.... Sorry for the delay.

you have got a LOT of stuff running at start up....the first thing I would do is go through your msconfig file and clean out whatever you don't need at start up, and clean up the services tab as well.

After that, run combofix and let's see what is produces.

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

• Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
  Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.

--------------------------------------------------------------------

Double click on combofix.exe & follow the prompts.

• When finished, it will produce a report for you.
• Please post the "C:\ComboFix.txt" along with a new HijackThis log for further review.

**Note: Do not mouseclick combofix's window while it's running. That may cause it to stall**

thanks,

v

Valis,

Thanks for the quick reply.

I will do as you suggest and see what comes up. I did not know where to start.

cgreen6911

For suggestions of which services you need running-- go here:
Windows XP Home and Professional Service Pack 2 Service Configurations by Black Viper
Once you have done this follow Valis' directions