Svchost cant be written

Glad to help YOU!

The svchost.exe file is located in the folder C:\Windows\System32.
On STARTUP Svchost.exe checks the services portion of the registry and constructs a list of services that it needs to load. Usually multiple instances of Svchost.exe will be running simultaneously. If the process svchost.exe uses high CPU resources it is mostly due because Windows Operating System is downloading some updates.
WARNING: A 100% CPU usage could lead to the presumption of a hidden malware on your computer!!! Same for the message that you got: "scvhost.exe driver not ready"...
I'd suggest you to do a SPYWARE/MALWARE scan AS SOON AS POSSIBLE and AS DEEP AS POSSIBLE!!!


GOOD LUCK!

its normal. when you open task manager and you click the process tab you see alot of them under SYSTEM. those are manditory for your computer to run.

This sounds like a virus to me? you say you are receiving that message, please, is it Windows "Telling" you?, or some program "Telling" you? please clarify? svchost, is not something that should be deleting anything...Both TCIP & netbt are VERY important part of Windows, so I do NOT think, it should be allowed.

Hi,

First, I'll let you know what's going on, then I'm going to post from Microsoft, what svchost.exe does, and how to find out where the problem is. I can help you further if you need it.

Svchost.exe is a program in WIndows XP Pro that will start services in your computer during startup. It sounds like you have deleted a program and "service host" is still looking for it to open on startup. This can happen if the program was removed without using the correct removal procedures. It is still listed in the registry and your computer is still trying to access it. DO NOT edit your registry unless you know what you are doing. You could create a catastrophic failure of Windows. There are programs that will remove registry entries if those entries are no longer valod. You can fing a free program for this function at web sites like www.nonags.com

Following is information from the Microsoft web site:

The Svchost.exe file is located in the %SystemRoot%\System32 folder. At startup, Svchost.exe checks the services part of the registry to construct a list of services that it must load. Multiple instances of Svchost.exe can run at the same time. Each Svchost.exe session can contain a grouping of services. Therefore, separate services can run, depending on how and where Svchost.exe is started. This grouping of services allows for better control and easier debugging.

Svchost.exe groups are identified in the following registry key: HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\SvchostEach value under this key represents a separate Svchost group and appears as a separate instance when you are viewing active processes. Each value is a REG_MULTI_SZ value and contains the services that run under that Svchost group. Each Svchost group can contain one or more service names that are extracted from the following registry key, whose Parameters key contains a ServiceDLL value: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Service To view the list of services that are running in Svchost:

1. Click Start on the Windows taskbar, and then click Run.
2. In the Open box, type CMD, and then press ENTER.
3. Type Tasklist /SVC, and then press ENTER.

Tasklist displays a list of active processes. The /SVC switch shows the list of active services in each process. For more information about a process, type the following command, and then press ENTER: Tasklist /FI "PID eq processID" (with the quotation marks) The following example of Tasklist output shows two instances of Svchost.exe that are running. Image Name PID Services
========================================================================
System Process 0 N/A
System 8 N/A
Smss.exe 132 N/A
Csrss.exe 160 N/A
Winlogon.exe 180 N/A
Services.exe 208 AppMgmt,Browser,Dhcp,Dmserver,Dnscache,
Eventlog,LanmanServer,LanmanWorkstation,
LmHosts,Messenger,PlugPlay,ProtectedStorage,
Seclogon,TrkWks,W32Time,Wmi
Lsass.exe 220 Netlogon,PolicyAgent,SamSs
Svchost.exe 404 RpcSs
Spoolsv.exe 452 Spooler
Cisvc.exe 544 Cisvc
Svchost.exe 556 EventSystem,Netman,NtmsSvc,RasMan,
SENS,TapiSrv
Regsvc.exe 580 RemoteRegistry
Mstask.exe 596 Schedule
Snmp.exe 660 SNMP
Winmgmt.exe 728 WinMgmt
Explorer.exe 812 N/A
Cmd.exe 1300 N/A
Tasklist.exe 1144 N/A
The registry setting for the two groupings for this example are as follows: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost:
Netsvcs: Reg_Multi_SZ: EventSystem Ias Iprip Irmon Netman Nwsapagent Rasauto Rasman Remoteaccess SENS Sharedaccess Tapisrv Ntmssvc
RApcss :Reg_Multi_SZ: RpcSs

this is going to be a tough one to fix. since I don't know which svchost you have deleted from the system.
usually when that happen the only solution is to reinstall the OS. even try to fix it from the registry key, the key and the pointer will be there, but not the excution file, and there is not way which svchost control what services.

The Svchost.exe file is located in the %SystemRoot%\System32 folder. At startup, Svchost.exe checks the services part of the registry to construct a list of services that it must load. Multiple instances of Svchost.exe can run at the same time. Each Svchost.exe session can contain a grouping of services. Therefore, separate services can run, depending on how and where Svchost.exe is started. This grouping of services allows for better control and easier debugging.

Svchost.exe groups are identified in the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\SvchostEach value under this key represents a separate Svchost group and appears as a separate instance when you are viewing active processes. Each value is a REG_MULTI_SZ value and contains the services that run under that Svchost group. Each Svchost group can contain one or more service names that are extracted from the registry key.

To complete part one, follow these steps:

1. Insert the Windows XP startup disk into the floppy disk drive, or insert the Windows XP CD-ROM into the CD-ROM drive, and then restart the computer.
   Click to select any options that are required to start the computer from the CD-ROM drive if you are prompted to do so.
2. When the "Welcome to Setup" screen appears, press R to start the Recovery Console.
3. If you have a dual-boot or multiple-boot computer, select the installation that you want to access from the Recovery Console.
4. When you are prompted to do so, type the Administrator password. If the administrator password is blank, just press ENTER.
5. At the Recovery Console command prompt, type the following lines, pressing ENTER after you type each line: md tmp
   copy c:\windows\system32\config\system c:\windows\tmp\system.bak
   copy c:\windows\system32\config\software c:\windows\tmp\software.bak
   copy c:\windows\system32\config\sam c:\windows\tmp\sam.bak
   copy c:\windows\system32\config\security c:\windows\tmp\security.bak
   copy c:\windows\system32\config\default c:\windows\tmp\default.bak
   
   delete c:\windows\system32\config\system
   delete c:\windows\system32\config\software
   delete c:\windows\system32\config\sam
   delete c:\windows\system32\config\security
   delete c:\windows\system32\config\default
   
   copy c:\windows\repair\system c:\windows\system32\config\system
   copy c:\windows\repair\software c:\windows\system32\config\software
   copy c:\windows\repair\sam c:\windows\system32\config\sam
   copy c:\windows\repair\security c:\windows\system32\config\security
   copy c:\windows\repair\default c:\windows\system32\config\default
   
6. Type exit to quit Recovery Console. Your computer will restart.

In software Svchost.exe is a generic host process name for services that run from dynamic-link libraries (DLLs) within the Microsoft Windows operating system.
At startup, Svchost.exe checks the services part of the registry to construct a list of services that it must load. Multiple instances of Svchost.exe can run at the same time. Each Svchost.exe session can contain a grouping of services. Therefore, separate services can run, depending on how and where Svchost.exe is started. This grouping of services permits better control and easier debugging, but it also causes some difficulty for end users wishing to see the memory usage or vendor legitimacy of individual services and processes. End users in Windows XP Professional (and derivatives, such as Windows Server 2003 and Windows XP Media Center Edition) can run the following command at the system prompt to get a breakdown:
tasklist /svc /fi "imagename eq svchost.exe" (NB: This command does not work in Windows XP Home.)
Due to being widespread among running processes, svchost.exe has long been a common disguise used by malware to hide its presence from the user. (One of the common trojan horses deceptively uses scvhost.exe). Users may then run tasklist with no arguments and match the reported PIDs with the previously shown Svchost instances. If memory usage appears abnormal, the user can look up the service names shown by their command on the internet to see if it is a known service or malware.
The Svchost.exe file is located in the %SystemRoot%\System32 folder. The main registry key involved at bootup is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost (values in this key will show the user at least a partial list of the actual processes behind instances of svchost).
The 30 April, 2007 release of WSUS 3.0 led to reports of svchost.exe issues, including 100% CPU usage, memory hogging, and excessive laptop fan/power usage.[1]

[edit] See also

• List of Microsoft Windows components
• Windows NT Startup Process

"Svchost.exe" (Generic Host Process for Win32 Services) is an integral part of Windows OS. It cannot be stopped or restarted manually. It manages 32-bit DLLs and other services. At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. In normal conditions multiple instances of Svchost.exe run at the same time. Each Svchost.exe session can contain a grouping of services, so that separate services can be run depending on how and where Svchost.exe is started. This allows for better control and debugging. The svchost.exe file is located in the folder C:\Windows\System32. In other cases, svchost.exe is a virus, spyware, trojan or worm! To detect if it's a virus sometimes it will add letters to the Svchost to read thus SSVCHOST or SVCCHOST or something like that, thus making multiple services to run and slow down the computer, if that is the case the current antivirus you are using is not removing the virus, this can be done in the registry, its a complicated process if you do not know how to do it, so i would suggest you purchase a registry cleaner. NOTE: remember to backup the registry before you clean it

Boot the system in safe mode
1.) restart the system
2.) pump the F8 Key until a screen comes up with different options
3.) select safe mode,

Try right clicking there and see what happens,, I,m guessing here this is a result of damages done by a previoulsy removed virus (GUESSING) it is possible that the same one could have been shard by all 3,,

I'd advise you'd uninstall norton and use the new avg free
www.free.grisoft.com
Let me know what hgappens and we can tgake this a bit further

Why do u need that file?

U can put it directly on process by going go TASK MANAGER and NEW TASK/RUN then tybe SVHOST AND PRES ENTER-DONE????