Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Resurging svchost.exe*32 TempFile taking needed CPU runtime

03 Dec 2013   #1
Razraal

Windows 7 Ultimate x64
 
 
Resurging svchost.exe*32 TempFile taking needed CPU runtime

Hello everyone!

I've been having this problem for approximately a month.
This particular file, named svchost.exe (size: 942KB), located in C:\Users\David\AppData\Local\Temp is giving me some bad times.

Everytime I log in my Windows account, this file starts executing itself, and is shown on Task Manager as the image proves it.

The most straightforward solution would be to delete this file permanently.
When I do that, it reappears after rebooting or logging out and then logging in.

I've tried deleting the whole content of the specified folder above, and yet it still shows up again, aswell as all the other "temporary" files.

I asked around, before posting this problem here, and one of the possible reasons could be a malfunctioning windows update.

The goal is to get rid of this nasty file permanently.
Can I count on your help?


Thank you for your time,
-Razraal




Attached Thumbnails
Resurging svchost.exe*32 TempFile taking needed CPU runtime-location_svchost.jpg  
Attached Images
Resurging svchost.exe*32 TempFile taking needed CPU runtime-process_svchost.jpg 
My System SpecsSystem Spec
.
03 Dec 2013   #2
Britton30
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

The svchost.exe process is vital for w7 to operate. If you succeed in deleting it the system will be bricked.
The svchost.exe is an internal kind of OS that w7 uses to run its own processes. I have from 11-17 or more instances of it running. This particular one may be caused by a program you installed a month ago.
My System SpecsSystem Spec
03 Dec 2013   #3
carwiz

Windows 7 Pro-x64
 
 

That's way too big and in the wrong folder to be a Windows svchost agent. It's also not the one running in Task Manager. The one in the Temp folder dated 4-12-2013 must have been added by an app you installed as Britton30 mentioned. Malwarebytes AM adds one but it's not even 1/3 the size of that one. Right click on it and select Properties. Click on the Digital Signatures tab and see if it's signed.
My System SpecsSystem Spec
.

03 Dec 2013   #4
Britton30
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

Carwiz jogged my memory, a Windows svchost.exe should only be in one or two places, C:\Windows\System32, Or if a 64 bit system, here too, C:\Windows\SysWOW64.

Size should be in the 20-30 KB range.

Resurging svchost.exe*32 TempFile taking needed CPU runtime-scvhost.png

Run a full scan with an updated MalwareBytes and Super AntiSpyware, links in my sig. You may well have a Trojan or worm which self replicates.


My System SpecsSystem Spec
04 Dec 2013   #5
Razraal

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by carwiz View Post
Right click on it and select Properties. Click on the Digital Signatures tab and see if it's signed.
There is no Digital Signature tab whatsoever. The copyright field is empty though.
On the image, the tabs are translated to:
Details, Previous Versions, General, Compatibility, Security.


Attached Images
Resurging svchost.exe*32 TempFile taking needed CPU runtime-svchost_copyright.jpg 
My System SpecsSystem Spec
04 Dec 2013   #6
Razraal

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by Britton30 View Post
Carwiz jogged my memory, a Windows svchost.exe should only be in one or two places, C:\Windows\System32, Or if a 64 bit system, here too, C:\Windows\SysWOW64.

Size should be in the 20-30 KB range.
Hence why I specified this particular file's location and size.

Quote:
Run a full scan with an updated MalwareBytes and Super AntiSpyware, links in my sig. You may well have a Trojan or worm which self replicates.
I ran a full scan with an updated MalwareBytes a few days ago. It detected this file and deleted it. However, this didn't prove to be a consistent solution, as the file reappeared in the same place after logging in again.

I just ran a full scan with SUPERAntiSpyware, it found several cookies and the svchost file.
It deleted the file after approximately 40 minutes of scan.
It then asked a reboot, which I agreed.
Upon logging in, the file was on the specified location again, only this time it was blocked by SUPERAntiSpyware, and was not executed.


Attached Files
File Type: log SUPERAntiSpyware Scan Log - 12-04-2013 - 12-39-05.log (34.4 KB, 1 views)
My System SpecsSystem Spec
04 Dec 2013   #7
carwiz

Windows 7 Pro-x64
 
 

Sounds like malware to me. It also sounds like it has installed a root kit that wasn't detected. I put in a help call to one of our AV/Malware gurus to look in on this thread.
My System SpecsSystem Spec
04 Dec 2013   #8
Britton30
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

This post by Cottonball may help.
Virus Help

Also this:
Download Adwcleaner by xPlode.

download

Save to the Desktop

Right-click on adwcleaner.exe and choose Run as administrator

Click the Search button

Upload the AdwCleaner[Sn].txt in your reply.

Note   Note
The log file is at C:\AdwCleaner[Sn].txt
My System SpecsSystem Spec
Reply

 Resurging svchost.exe*32 TempFile taking needed CPU runtime




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
SVCHOST Network Service taking up 30-40% of CPU
Hello, Seemingly out of no where (this computer is a couple years old) my internet on my PC would just stop working (started about two weeks ago). Malware searches and virus scans turn up nothing. Noticed that SVCHOST.exe was taking up about 30-40% of my CPU under network service username (if...
Performance & Maintenance
svchost.exe taking up too much CPU
It's an ASUS U50Vg Laptop Windows 7 Ultimate x64 Intel Core2Duo T6600 @ 2.2GHz 4GB RAM NVIDIA GeForce G105M Here are the screenshots...
Performance & Maintenance
svchost.exe streaming audio feeds and taking all available CPU
I saw this topic on the forum - svchost.exe (netsvcs) maxing CPU out by streaming in audio feeds and although this seems to be an exact mimic of my problem I didn't think it was proper decorum to piggy-back onto his question ...
Performance & Maintenance
svchost.exe taking up too much CPU?
I've been having an odd problem as of late and am not entirely sure on what to do about it. you see, I've been having some slow down issues with my p/c and the process that I've discovered to cause the slow down is svchost.exe. I know that svchost.exe is an important process for the computer, but...
Performance & Maintenance
Svchost taking too much memory
my svhost process is taking too much Memory... making my computer lag..it havent happened any time before... http://www.pikipimp.com/pp/pimped_photo/s/image/52/806/368/Capture.PNG?ts=1264555978397:shock::shock::shock: please suggest a solution..
Performance & Maintenance
svchost taking up as much bandwidth as uTorrent, why?
So, uh yeah why? its split 58% utorrent 41 svchost. Why does it have as many connections and usage? What is it doing?
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 09:12.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App