Question about Microsoft Windows XP Professional for PC

2 Answers

Windows cannot Find SCVHOST.exe.

I have lots of pictures file & i think thats the reason why my SCVHOST is not active anymore..virus is not a problem but only - the windows cannot find SCVHOST.exe. & it reboots when it started at least a minute...pls. HELP!!! Thanks.

Posted by on

2 Answers

  • Level 2:

    An expert who has achieved level 2 by getting 100 points


    An expert that got 5 achievements.


    An expert who has written 3 tips or uploaded 2 video tips.


    An expert whose answer got voted for 20 times.

  • Expert
  • 114 Answers
Re: windows cannot Find SCVHOST.exe.

Boot from your Windows XP disk and use recovery console, follow the onscreen stuff and put the admin password in that you setup when you installed windows, you should now be at a prompt EXAMPLE: C:\WINDOWS>

At the end of the prompt type: cd F:\I386
F is the letter of the drive where your XP disk is so you will need to change it to your drive letter. The prompt should now be F:\I386>

After the prompt type: Expand svchost.ex_ C:\windows\system32
C is the letter of you HD were windows XP is installed, needs to be changed accordingly. At the prompt type: exit
Your sytem will re-boot and you will now have a copy of svchost.exe in your system32 folder again.

If you have found this solution helpful please rate it as Solved, otherwise please ask again.

Thank you

Posted on Nov 01, 2007

Re: windows cannot Find SCVHOST.exe. - Microsoft Windows XP Professional for PC Operating Systems

Thank you

Posted on Jan 11, 2008

Add Your Answer

0 characters

Uploading: 0%


Complete. Click "Add" to insert your video. Add


3 Points

Related Questions:

1 Answer

Wat is winlogon that appear in my desktop

The process "winlogon.exe" runs in the background.

Winlogon is a part of the Windows Login subsystem, and is necessary for user authorization and Windows activation checks.

Note: The winlogon.exe file is located in the folder C:\Windows\System32. In other cases, winlogon.exe is a virus, spyware, trojan or worm! Check this with Security Task Manager."

Microsoft designed Windows so many small applications perform their tasks without a user knowing about it.

Normally, this will run smoothly and without flaw, but every once in a while, an issue can come up.

Winlogon.exe is an application that runs on start-up, and its primary function is to monitor the use of other applications.

Winlogon.exe typically only runs for about a minute or two when Windows first boots up, so if for some reason it is still running five or 10 minutes later, it could be infected.

Spyware and other malware would infect this application because it can manipulate other programs in Windows, causing problems.

If this is the case, the file might need to be removed.

if you want to remove this from

Open "My Computer" and select the "C:" drive.

Double click the "Windows" folder, then select "System 32." Navigate through the System 32 folder until you find "Winlogon.exe."

Click the "Winlogon.exe" file and hit "Delete." Select "Yes" when asked if you're sure you want to remove the program.

hope this helps

Sep 17, 2012 | Microsoft Windows XP Professional for PC


How to Reduce Spreading of Virus on the Hard Drive

<b><u>An insight in VIRUS INFECTION and VIRUS SPREADING</u></b><br /> <br /> In today's computing spreading of virus is fast and very common.<br /> Even with an up to dated antivirus software the spreading of the virus infection is fast.<br /> This is because, we are not aware of how the virus spreads in our system.<br /> Once we know how the virus infects and spreads in our system then we will definitely reduce the risk, time and money spent.<br /> <br /> <b><u>Here is a short insight about viruses:</u></b><br /> <br /> 1) Virus is a small program code enabling it to to mingle or merge with other program codes.<br /> <br /> 2) The Virus Program Code is written such that it deletes data, corrupts data, steals data send it to the maker of the code, etc.<br /> <br /> 3) The virus cannot run on its own. It has to be executed just like other exe program files. That is why the autorun.inf file is required.<br /> <br /> <b><u>Now for an insight how we get infected:</u></b><br /> <br /> 1) Thorugh the internet: Usually when we browse any web site files are downloaded from the web server to our temporary internet folder(in windows) Then our Browser software reads the files and executes them in the browser window for us to view the web site.( If you are a website Designer you would understand this for others get an insight how internet browsers work), So when we are in the internet Virus files attach themself to the downloading files and enter our system in the temporary folder, From here they are executed by our browser software or when any program accesses the temporary folder.<br /> <br /> 2) Another one is we download a lot of data from the internet, we should be careful on what we are downloading because if the data downloaded is infected with virus then we are downloading the virus to our system along with the data, Don't download the data unless you are sure you could trust the maker of the data, program,etc.<br /> <br /> 3) From other medias like Flash Drive, CD's, DVD,s,etc.:<br /> We copy a lot of data to our computer from our friends and relatives, so if the data is already infected with virus we copy the virus to our system also, when we run os use the data the virus is executed along with it.<br /> <br /> <b><u>Now for an insight how Virus Spreads:</u></b><br /> <b></b> <br /> Just like any other program code the virus code has to be executed.<br /> That is why the virus merges with other exe's which are executable and not with the data file.<br /> <br /> For eg: a file with .avi, .dat, .3gp, etc. all these files are data files they dont execute, but they are used by exe files like wmplayer.exe, winamp.exe, vlplayer.exe, etc. The .avi .dat .3gp files are data files, the wmplayer.exe, winamp.exe vlplayer.exe are program files. Thus mostly exe program file get infected with virus.<br /> <br /> Usually when our system gets infected and any antivirus program cleans our system you can notice that the windows media player or winamp player or vlc media player does'nt work because it is removed or deleted by the antivirus for virus infection but the songs or video you saved is unharmed in the harddisk.<br /> <br /> That is why the virus code hangs or merges or infects mostly exe program files, So that it is executed along with the program file.<br /> <br /> So when you run an infected windows media player to play a song the virus code is also run along with the windows media player. Thus the virus is run again and again.<br /> <br /> There are hundreds of program files in the os for doing various tasks.<br /> we are going to look into just one program which the virus uses to spread itself in our system.<br /> <br /> The Program is non other than explorer.exe in windows. This program is needed to view or browse the data files stored in the hard disk.<br /> When we double click the My Computer Icon on the desktop the explorer.exe is executed which show you a window on your screen with the hard disk drives and cd dvd drives in the windows Now you can imagine how frequently you use the explorer.exe. You use it to view any data on the computer, even our desktop uses explorer.exe. This program is executed right when windows logs us on.<br /> <br /> When this program file is infected, it keeps on executing the virus each time we use the program. by this method the virus spreads fast to every parts of the hard disk.<br /> <br /> Likely there is a method to avoid executing the virus along with the explorer.exe each time we use it.<br /> <br /> When we double click any icon or object on our windows screen we execute the default command in the right click menu. Usually it is the Run Command. for eg: when you double click word the word.exe runs, similarly when we double click the my computer icon the default right menu option is <b>Open</b> which run the explorer.exe program.<br /> <br /> Instead of using this method to view files and data in our system we could use an alternate method which is using the explorer menu option when we right click my computer or right click the windows start button or in fact the explorer option is there whenever you right click any object on the screen.<br /> <br /> By using this explorer option in the right click you get a window with two panes one to the left and one to the right. In the left pane you have the directory structure showing all the directories and folders in our hard disk and in the right pane the content of the directory or folder selected in the left pane.<br /> <br /> Thus in this process we dont execute any code or program command when viewing the data in our hard disk. because we do not execute the explorer.exe more than once.<br /> <br /> So, Imagine how we reduce the spreading of virus by using this method.<br /> <br /> Say you have a file saved in your hard disk in this location<br /> <br /> <b>C:\data\monday\20-11-2010\office\media\todaysjob.doc</b><br /> <br /> If you want to open the file with word we will double click my computer, then double click C Drive, then Double Click data folder,then double click monday folder, then double click 20-11-2010 folder, then double click till you come to the media folder then you double click the todaysjob.doc which will execute the word.exe program which reads the data in the todaysjob.doc file and displays the content as required. In this process see how many time you will execute the virus, You will run the virus Seven Times.<br /> <br /> In our Alternate method You will run the Explorer.exe only once, Then on you just navigate to the media folder then double click the todaysjob.doc file in the right panel. So you execute the virus only once. <br /> <br /> Hence you reduce the spreading of VIRUS to a great extend.<br /> <br /> Good Luck, If there are any mistake please bare with me, I am not a good writer. If you have any Question Keep Me Posted.

on Oct 21, 2010 | Microsoft Windows XP Professional

2 Answers

Pls advise if the following processes running in my Task Manager are viruses or genuine system processes - ccSvcHst.exe; lsass.exe; explorer.exe, winlogon.exe; svchost.exe; wuauclt.exe; jqs.exe;...

ccSvcHst.exe - works to display the GUI (Graphical User Interface) of Norton products, which usually include the Norton Security Suites.
lsass.exe - Disable and remove lsass.exe Immediately. This process is most likely a virus or trojan.

Other processes are required for essential applications to work properly.

You can visit this and search for the process your not familiar with.

Please rate this if you find this helpful.


Mar 21, 2011 | Operating Systems

1 Answer

Scvhost.exe driver not redy..please solution

Glad to help YOU!

The svchost.exe file is located in the folder C:\Windows\System32.
On STARTUP Svchost.exe checks the services portion of the registry and constructs a list of services that it needs to load. Usually multiple instances of Svchost.exe will be running simultaneously. If the process svchost.exe uses high CPU resources it is mostly due because Windows Operating System is downloading some updates.
WARNING: A 100% CPU usage could lead to the presumption of a hidden malware on your computer!!! Same for the message that you got: "scvhost.exe driver not ready"...


Mar 14, 2011 | Operating Systems

1 Answer

Window can not find gphone.exe

gphone.exe is nowadays one of the most dangerous virus spreading very fastly.Its a trojan and changes your IE homepage and sends tries to open gtalk and yahoo messenger.It even sends messages to gtalk contacts.Its icon is just like that of folder icon and people thinking of folder click on it get infected by the virus.
Gphone virus basically is a 260 kb .exe file which looks like a folder and it can take any name of any other folder if you have clicked on the virus folder which looks like a folder but it isnt.If you have a folder name “comptalks” in your D drive it will make a exe file in the folder named comptalks.exe and if you click on that exe file it too work as a virus.It makes .exe files in all the folders you have with the name of the folder.
To remove the gphone.exe virus you just need to follow simple steps:
Go to Task Manager ->Processes and then click on gphone.exe and click on end process.
After that manually go to folder where gphone.exe is present and simply delete it.
Or simply search for the exe file clicking which started sending messages through gtalk. If you clicked on 1.exe search for that file on task manager and then delete it.

Good luck.

Sep 02, 2009 | Microsoft Windows XP Professional With...

2 Answers

Problem with programs

This is a try it and see if it helps:

"Charge the Internet associate file type or protocol for downloading.
Open Internet Options
Default Programs
Set Associations
Change program

Click on an extension to view the program that currently opens it by default. To change the default program, click Change program."

May 26, 2009 | Microsoft Windows Vista Ultimate Edition

1 Answer

Unknown file

In software Svchost.exe is a generic host process name for services that run from dynamic-link libraries (DLLs) within the Microsoft Windows operating system.
At startup, Svchost.exe checks the services part of the registry to construct a list of services that it must load. Multiple instances of Svchost.exe can run at the same time. Each Svchost.exe session can contain a grouping of services. Therefore, separate services can run, depending on how and where Svchost.exe is started. This grouping of services permits better control and easier debugging, but it also causes some difficulty for end users wishing to see the memory usage or vendor legitimacy of individual services and processes. End users in Windows XP Professional (and derivatives, such as Windows Server 2003 and Windows XP Media Center Edition) can run the following command at the system prompt to get a breakdown:
tasklist /svc /fi "imagename eq svchost.exe" (NB: This command does not work in Windows XP Home.)
Due to being widespread among running processes, svchost.exe has long been a common disguise used by malware to hide its presence from the user. (One of the common trojan horses deceptively uses scvhost.exe). Users may then run tasklist with no arguments and match the reported PIDs with the previously shown Svchost instances. If memory usage appears abnormal, the user can look up the service names shown by their command on the internet to see if it is a known service or malware.
The Svchost.exe file is located in the %SystemRoot%\System32 folder. The main registry key involved at bootup is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost (values in this key will show the user at least a partial list of the actual processes behind instances of svchost).
The 30 April, 2007 release of WSUS 3.0 led to reports of svchost.exe issues, including 100% CPU usage, memory hogging, and excessive laptop fan/power usage.[1]

[edit] See also

Oct 29, 2008 | Microsoft Windows Server Standard 2003 for...

1 Answer

Free antivirus forFunny UST scandel.exe

Funny UST Virus Activities:
First of all this virus is not funny at all, either it may put yourself in state of embarrassment when it sends some senseless message to your friends in your yahoo messenger buddies.
It creates following files:
  • Killer.exe in c:\windows\
  • lsass.exe in c:\documents and settings\all users\start menu\programs\startup
  • xmss.exe in the root drive of all partitions and also in c:\windows
  • autorun.inf in all the partitions.
  • the main file Funny UST Scandal.avi.exe in all the partitions and
  • Funny UST Scandal.exe in c:\Windows.

Not only this, it also creates the following entries:
HKLM\Software\Microsoft\WindowNT\CurrentVersion\Winlogon\shell HKCU\Software\Microsoft\windows\Currentversion\Run\Runonce

You will find all these or some of these files if your system is infected by this virus.

Aug 06, 2008 | Operating Systems

1 Answer

Windows cannot find scvhost.exe

This is the Internet Virus , to overcome this , you may kindly be taken following steps .
Step 1: Write click on the start button task bar .
Step 2: Select Task manager by left click of you mouse.
Step 3. Under the process option , select line
svchost.exe system Administrator
Step 4. Select End process .
Step 5. Repeat Step 3 & 4 until the end of the bellow message.
svchost.exe System Administrator
Step 6. Close the Windows Task Manager by click X button .
Run the Original Quick Heal / AVG antivirus software in your system .
The steps are the solution for your problem.


nilamani ,

Dec 21, 2007 | Microsoft Windows XP Professional for PC

16 Answers

Funny UST scandal virus

Hello ppl,

Simply install PCTOOLS ANTI-VIRUS to Scan , Remove and then filter your internet for such threats... It's FREE... includes free updates too....

Easy.. XD

Nov 20, 2007 | Microsoft Windows XP Professional With...

Not finding what you are looking for?
Microsoft Windows XP Professional for PC Logo

Related Topics:

1,145 people viewed this question

Ask a Question

Usually answered in minutes!

Top Microsoft Operating Systems Experts

Brian Sullivan
Brian Sullivan

Level 3 Expert

27725 Answers

Scott Fryer

Level 2 Expert

80 Answers

Alex Krenvalk

Level 2 Expert

401 Answers

Are you a Microsoft Operating System Expert? Answer questions, earn points and help others

Answer questions

Manuals & User Guides