svchost.exe sucks!

[Jevil]

Last days I've noticed my computer at the office is working slow and RAM monitor shows too much load of ram being used by tons of aplications, even 1500 mb working, and the PC is only 512Mb!! So it is using virtual memory too.

One of the the svchost.exe is consuming 100 or 150 mb of ram.

Now I've got only iexplorer and Nod32 working (apart from many little apps) and it is using 427 mb.

My antivirus did not detect anything.
What can i do?

 

[jarenare]

I've found some info about this process -> http://download.cnet.com/8301-2007_4-9865052-12.html
its some kind of service-wrapper of windows. I usually have some of them, and for example, if i kill one of them, the soundcard stops working!

 

[drew_drummer]

Be wary. Some viruses DO mask themselves as that process.

 

[Notuern]

.. svchost is the program that loads all your dll's, the reason its consuming ram is because of other services loading up dll's.
Go to run(Win+R), type cmd, press enter, in the console type NET START.. there you have ALL your processes that have DLL's loaded in to svchost.

What you should do is cut down your services.. and its a large subject to get in to, but there are LOADS of guides on the net that will tell you what to do(And not to do.).

 

[Notuern]

Be wary. Some viruses DO mask themselves as that process.

Considering that he is running Nod32, i doubt it though..
But if you want to be safe, you always have these:

http://housecall.trendmicro.com/
http://www.f-secure.com/en_EMEA/security/tools/online-scanner/
http://security.symantec.com/sscv6/WelcomePage.asp
http://www.bitdefender.com/scanner/online/free.html
http://home.mcafee.com/Downloads/FreeScan.aspx

 

[kaomao]

nod32 is not that great as they claim anyway, on my work lan had a lot more of viruses on xp machines with that antivir compared to the ones with norton
I really don't know if nod32 can help preventing exe to be masked as that process, never had to deal with a machine running nod and caught by one of those viruses so I can't help.

 

[sprack]

Use process explorer to see what the subthreads are for svchost.exe and how much they're taking.

 

[P-E]

^This.

 

[Jevil]

I will try it tomorrow, thank you babes!

 

[Jevil]

Thank you guys! I finally ran Nod32, BitFender Online and Malwarebytes Online and the problem seems to be solved.