too many svchost useing too much RAM

ok first is first I am using a HP Pavilion dv6000 laptop, windows vista home
premium, 1GB of RAM and 3.1 GB redyboost, but for some reson 80% of memory is
used up and what is using it up is 12 svchost.exe 5 in system 3 in network
services and 4 in local services.
I already know that svchost.exe is a backdoor program.
now what I am wondering is there any way to fix this so that I can start
programing?

zi_thedragon wrote:
> ok first is first I am using a HP Pavilion dv6000 laptop, windows vista home
> premium, 1GB of RAM and 3.1 GB redyboost, but for some reson 80% of memory is
> used up and what is using it up is 12 svchost.exe 5 in system 3 in network
> services and 4 in local services.
> I already know that svchost.exe is a backdoor program.
> now what I am wondering is there any way to fix this so that I can start
> programing?

You need to control what you have running in the background. Svchost.exe
is not a "backdoor program" although it can be used by malware; it is a
legitimate part of Windows and it is normal to have several instances
running. Twelve is rather a lot, and I'd start by checking the computer
for viruses and malware:

http://www.elephantboycomputers.com/...moving_Malware

If the computer is clean, examine your startup and remove unnecessary
programs from it. You can see what is starting with Windows by using the
System Configuration Utility and/or the free AutoRuns program:

Start Orb>Start Search box>msconfig [enter]

If you are prompted for an administrator password or for a confirmation,
type the password, or click Continue. Then see what is on the Startup
tab. You don't need to restart immediately, but the next time you do
you'll get a dialog saying you've used the Utility. Usually in Vista
this will be blocked by Windows Defender and you'll need to allow it so
you can then tick the box that says in effect, "don't bother me about
this again".

Important - Do not use the System Configuration Utility to stop
processes. Instead, use Start>Run>services.msc [enter] and do not stop
any services unless you really, really know what you're doing.

http://www.microsoft.com/technet/sys...s/default.mspx - for AutoRuns

It is always preferable to manage programs startup from within the
programs themselves and only use msconfig/AutoRuns if it is impossible
to do that.

Also, 1 GB of RAM is not enough to have a good experience with Vista and
the Ready Boost will not help appreciably. Increase your physical RAM to
2GB.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

"zi_thedragon" <> wrote in message
news:32D85345-2496-4562-A8DF-...
> ok first is first I am using a HP Pavilion dv6000 laptop, windows vista
> home
> premium, 1GB of RAM and 3.1 GB redyboost, but for some reson 80% of memory
> is
> used up and what is using it up is 12 svchost.exe 5 in system 3 in
> network
> services and 4 in local services.
> I already know that svchost.exe is a backdoor program.
> now what I am wondering is there any way to fix this so that I can start
> programing?


My Pavilion m8047c desktop has 2GB Ram and also 4GB readyboost. Memory
usage is usually 45% to 55%, sometimes higher or lower, 55% as I type this,
so I would think that 80% on 1GB Ram would be normal. Readyboost does not
increase memory, it just makes your computer more responsive because
readyboost cache is faster than disk cache.
Ron

On Mon, 7 Jan 2008 21:12:01 -0800, zi_thedragon
<> wrote:

> ok first is first I am using a HP Pavilion dv6000 laptop, windows vista home
> premium, 1GB of RAM and 3.1 GB redyboost, but for some reson 80% of memory is
> used up and what is using it up is 12 svchost.exe 5 in system 3 in network
> services and 4 in local services.
> I already know that svchost.exe is a backdoor program.
> now what I am wondering is there any way to fix this so that I can start
> programing?



Read Malke's good answer, but also note that having 80% of memory
"used up" is not any sort of problem at all. Wanting to minimize the
amount of memory Windows uses is a counterproductive desire. Windows
is designed to use all, or nearly all, of your memory, all the time,
and that's good not bad. Free memory is wasted memory. You paid for it
all and shouldn't want to see any of it wasted.

Windows works hard to find a use for all the memory you have all the
time. For example if your apps don't need some of it, it will use that
part for caching, then give it back when your apps later need it. In
this way Windows keeps all or most of your memory working for you all
the time.

--
Ken Blake, Microsoft MVP Windows - Shell/User
Please Reply to the Newsgroup

"zi_thedragon" <> wrote in message
news:32D85345-2496-4562-A8DF-...
> ok first is first I am using a HP Pavilion dv6000 laptop, windows vista
> home
> premium, 1GB of RAM and 3.1 GB redyboost, but for some reson 80% of memory
> is
> used up and what is using it up is 12 svchost.exe 5 in system 3 in
> network
> services and 4 in local services.
> I already know that svchost.exe is a backdoor program.
> now what I am wondering is there any way to fix this so that I can start
> programing?

Svchost.exe is not a backdoor program. Svchost.exe does nothing on its own.
It's the messenger for O/S's programs and other programs. Svchost as its
name implies host other programs and does the biding for other programs,
acts on their behalf, and provides the means, including malware.

You can use Process Explorer (free) to view all processes any given process
like Svchost.exe is hosting. PE --- View/Show Lower Pane, Show All Dll(s) --
that will show everything in the lower pane that a process in the upper pane
is hosting. You can right-click a process in the upper pane and go to
Properties to get more information about a running process. You can do the
same thing in the lower pane.

<http://www.windowsecurity.com/articles/Hidden_Backdoors_Trojan_Horses_and_Rootkit_Tools_i n_a_Windows_Environment.html>

Active Ports doesn't run on Vista. You can use CurrPorts, if you need to be
in that area.

If Svchost.exe is not running out of the C:\windows\system32 folder, then
it's a Trojan, a backdoor, and an impersonator.

If you're going to be programming, then you should know who is what and who
is doing what in regards to the O/S.