Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

svchost process consuming a lot of space in Ram

Created: 21 Apr 2009 | 7 comments
Peter_007's picture
+1 1 Vote
Login to vote

svchost a windows process which used to take about 1200k of ram space now takes 7000k space .
I have not installed any third party software.
Kindly suggest any remedy.

Comments

Auusie's picture
21
Apr
2009
0 Votes 0
Login to vote

use process explorer and see

use process explorer and see whats running under the svchost, it might be windows update which is casuing it but troublshoot

SAM_SHAIKH's picture
22
Apr
2009
0 Votes 0
Login to vote

Yes, Download Process

Yes,

Download Process Explorer from Microsoft website and then run it.

In the process, right click SVCHOST.exe process and go to properties. Look for the actual location of file.

It could be threat also.

Also check your registry entry HKLM>Software>Microsoft>Windows>CurrentVersion>Run

Look for any suspicious file.

If found submit it to https://submit.symantec.com/gold or https://submit.symantec.com/platinum

rgrds,
SAM

Ram Champion's picture
22
Apr
2009
0 Votes 0
Login to vote

Download

Processor explorer free sysinternals tools will help you to analyze the threads

Peter_007's picture
22
Apr
2009
0 Votes 0
Login to vote

 it runs even after i

 it runs even after i disconnect network cable

BNH's picture
23
Apr
2009
0 Votes 0
Login to vote

When a virus still runs after

When a virus still runs after disconnecting from the network, it has some rootkit on it.
Run procmon and check what DLL hooks onto it.

Any unknown or looks suspicious DLL, do submit it to Symantec submission.
Else check the svchost file . See if it was run from a non-normal location ie c:\windows\system or c:\windows .
If yes, do submit it also.

-- Got new virus ? Try update your defs here : ftp://ftp.symantec.com/AVDEFS/norton_antivirus/rap... --

Om_123's picture
05
May
2009
0 Votes 0
Login to vote

try formatting

try formatting the primary partition .Remember dont open the other partitions until you install symantecAV
then install Symantec Av and run run a virus check .I doubt other partitions may contain a virus.

Om_123's picture
05
May
2009
0 Votes 0
Login to vote

try formatting

try formatting the primary partition .Remember dont open the other partitions until you install symantecAV
then install Symantec Av and run run a virus check .I doubt other partitions may contain a virus.