Hello again,

I'm trying to clean up my dads PC and most of the time when I use it I continously get a problem with the internet. The internet connection is blocked off (only in IE6 & Firefox).

When I go into 'Processes' I have two 'svchost.exe' files under the name 'NETWORK SERVICE' - one of the svchost's uses about 2x more mem usage than the other (range around 1,000/2,000k).

I found that if I delete the 'svchost.exe' that uses the least memory usage then the internet will work again. This problem occurs at random times, I find that it usually happens when the PC is not in use/inactive.

Please help, it is a very tedious problem!

Thanks!

Hi Pen Cap Chew

QUOTE

In normal conditions multiple instances of Svchost.exe run at the same time. Each Svchost.exe session can contain a grouping of services, so that separate services can be run depending on how and where Svchost.exe is started. The valid svchost.exe file is in the c:\windows\System32 folder. In other cases, svchost.exe is a virus, spyware, trojan or worm!

Chris

Network Service is also used by the CoolWebSearch parasite. Post a HijackThis log so we can check. You'll find instructions on how to use HijackThis and post a log in Angoid's pinned thread in the Malicious Code forum.