Watching svchost.exe grow before my eyes! huge

[knc]

Svchost is growing 100 k 200 k 500 k 1 million and so fourth. I used process explorer to examine it and it includes a hug amount of windows services, explorer, lan, and so on.

Has anyone seen this before?

I CAN end the process with no ill effects but it comes back within a 3 - 4 minutes and starts growing again.

Ran combofix found nothing, ran Malwarebytes not much found.. Any thoughts?

I am going to rebuild it tomorrow if I can't find a solution..

 

[NYJimbo]

I think its "fantastic" that you posted no useful information that might help us help you. Well, I guess that's ok because you are new around here.

 

[AndyM]

Has anyone seen this before?

Yes

Andy

 

[knc]

I think its "fantastic" that you posted no useful information that might help us help you. Well, I guess that's ok because you are new around here.

Windows xp? Random svchost process growing uncontrollable? Computer slow (due to process running huge)?

What more can I say this is how I found it...

 

[Martyn]

Have a look at this

http://www.bleepingcomputer.com/tutorials/list-services-running-under-svchostexe-process/

 

[brandonkick]

Windows xp? Random svchost process growing uncontrollable? Computer slow (due to process running huge)?

What more can I say this is how I found it...

What he means is that you've given very little useful information whether you realize that or not. You've said the equivalent of "Car won't work? Gonna be late for work? Not much else to say?"

There is actually a lot more to say....


What brand/model of computer is it?

Have you recently done any or had any work done to the computer?

How long has this problem been occuring? Any recent major changes in software or hardware?

And so on....

 

[nlinecomputers]

What damn version of Windows you are running would be a great help.

 

[MotzTech]

I ran into an XP machine that had a similar problem. The svchost was pegging the CPU at 100%. Did not notice the size of it. It ended up being a recent XP update that caused it. This happened once before a few years ago and again recently. The most recent one seems to break windows update as well.

I used a third party windows updater to update the workstation with all the latest patches and the problem disappeared.