svchost.exe

[Kiril]

Running XP Pro w/1GB of DDRAM on a P4. After running for
a while and starting/stopping several applications (some
photo graphics editing, Word, scanning, etc.), two or
three svchost.exe instances will be running and one of
them will be hogging a half a gig or more of my RAM and
causing me to get 'Not enough memory' errors and low
virtual memory messages. If I close apps and kill the hog
process everything gets back to normal for a while. Any
thoughts about what could be causing an instance of
svchost.exe to go wild like that? TIA
Kiril

[Leon]

"Kiril" > wrote in message
...
> Running XP Pro w/1GB of DDRAM on a P4. After running for
> a while and starting/stopping several applications (some
> photo graphics editing, Word, scanning, etc.), two or
> three svchost.exe instances will be running and one of
> them will be hogging a half a gig or more of my RAM and
> causing me to get 'Not enough memory' errors and low
> virtual memory messages. If I close apps and kill the hog
> process everything gets back to normal for a while. Any
> thoughts about what could be causing an instance of
> svchost.exe to go wild like that? TIA
> Kiril

Sounds like the Welchia worm.

Go to http://securityresponse.symantec.com/ and run the Free Online Virus
and Security Check.

The removal tools are on the same page.

Leon