I got this problem the other day.

Before yesterday, as I booted up the PC, a screen came up mentioning that an ACPI device isn't properly working. I have no clue what an ACPI device is. It also said I may have to flash the BIOS.

Like 2 days after that message popped up, my sister booted up the PC, and she told me the PC was running SUPER slow, and the usage was at 100% percent. I opened ip Task Manager, and there were multiple instances of svchost.exe open. I have been having problems with this problem ever since I upgraded to Win2k. It usually needs to be closed due to a problem it has. I usually close it when the message pops up.

Well, the problem is still here. I have like 3 instances of svchost.exe running, with some of the instances taking over 6K in memory. Also, one instance of svchost.exe that I have never seen run before is running. It is called svchosts32.exe. Ever since this problem has started, the svchost.exe file hasn't gotten an error. I have no clue how to remedy the problem.

http://vil.nai.com/vil/stinger


It is a new version of a old Worm. Click the link above and download McAfee Avert Stinger. Its a worm removal tool. Be sure your not connected to the internet when you do run it. Go to Microsoft and download critcal updates.

It detected the W32.Pate.b virus in files in the C drive. Some files where repaired, the others just say detected. How do I delete the detected ones?

Well, if they are system files try to clean them or replace them with new ones. If they are not system files then just go to the folder were they are located and delte them manually, of course log on with admin privs.

The area where they are located are C:/Restore.

Since I upgraded from ME, and ME had System Restore, that could mean those files are Restore Points from ME that are infected. I guess I can delete them since 2K doesn't have System Restore right?

I dont see why not. I wouldnt go back to ME no matter what. Usaully an upgrade from the previous OS has its issues.

For some reason, I tried to delete one of those restore infected files, and it says Copy or Extract. Should I just end up deleting all of them, or just the infected ones?

Hmmm...I just realized that the Stinger program could have deleted all of these files if I enabled it before the scan. Or is a manual delete better than the Stinger doing the delete?

It doesnt matter, If it wont delete manually try rerunning the stinger and have it delete them.

Ok, cool.

Now, remember the svchosts32.exe I mentioned? I did a search this morning, and that is a worm as well....but it didn't recognize it here. What can I do to get rid of that menace?:eek:

Try this
http://www.networkassociates.com/us/downloads/updates/dat.asp

Isn't that DAT file only if you have VirusScan installed? I don't have any of their software in the PC, unless you mean that DAT file is for the Stinger.

This is what was listed for that scvhost32.exe This is just a link for the removal tool, there is a download for it.

I downloaded the Windows version of it...but it didn't do anything. I think it updates McAfee VirusScan virus definitions to take out svchosts32.exe.

I don't get why there are like 2-4 processes of svchost.exe, and then svchosts32.exe. I checked the registry, and it said Configuration Loader for svchosts32.exe. Also, I saq mobsync.exe/logon, which is a synchronization loader.

press alt ctrl del monkey dude

Sorry bout that,

http://antivirus.about.com/cs/allabout/a/mimailj.htm

Read this, at the bottom of the page there is intructions on how to remove it. Hope this helps

Well, I deleted the entry for svchost32. The other file it mentions, which is ee98af.tmp isn't in the PC. I ran a search and it didn't find that file or the directory it mentions.

Know clear all your temp internet file, make sure your virus defintions are up to date, and you have downlaoded any patches from microsoft. reboot and see if that changes anything. If that file is missing it might be good thing, unless there is something else causing that svchost32.exe to go wacky.

I rebooted the PC, and the svchost32.exe file was there. Also, another svchost32.exe file appeared. I went back to the registry, and it re-appeared. I deleted it, and the other svchost32.exe file was gone from the processes.

Plus, for some reason, I can't download anything because some file in D:/ Administrators can't hold anymore. It told me to save it in another location, when I am saving it in the C drive!

Also, more space has appeared on both drives. I had about 4MB on D, and now, 100MB is showing. Another 100MB of space suddenly appeared on my C drive.

I would download some antivirus programs, but they are HUGE in size, and I have 56K. I tried to do Housecall from Trend Micro, but it isn't compatible with Mozilla, and it won't load with IE. Damn, I feel like DESTROYING the PC....

Well, the problem is still there. If I were to reformat, and restore factory settings, would it restore Win2k? Or would it restore to Windows ME? That is the only thing that would fix this problem. It won't go away...

What OS did your system come with? All systems I know of (at least bought from a manufactorer like hp, sony, ibm and dell) have a system restore disk with the operating system on there. I good why to find out which OS it came with is by looking on the pc for the cd key code or in manuals and cd's it came with, it will have the OS with the key code.

The OS that it came with was Windows ME. The PC I have is made by Compaq. It didn't have the original ME disc with it. I think in the back of the PC, it had some sticker with the CD key on it.

Now, I have to go find the restore discs. I have the diskette needed to do a reformat, but not the actual CD's...

You can format with the cd's, but if you dont have them, does ya no good. But it will restore the system with ME, do you have win2k on now?

svchost should be there and there is a bug in win 2k that causes it to take up 100% cpu usage i cant remember what it was but if you search the knowldgebase on www.microsoft.com you should find the patch for it. I know youve had the virus but it could be just a coincedence in this case I think.

Originally posted by Mr Snatcher
You can format with the cd's, but if you dont have them, does ya no good. But it will restore the system with ME, do you have win2k on now?

Yes, it has Win2k on it now.


About that glitch with svchost.....well, which svchost is real, since there are about 4 of them running, and also some process called cmd32.exe.

Is your win2k cd bootable? If it is you can boot from it, format and load. Otherwise you should be able to even if it isnt if your installing over ME.