Over 1 million tech questions and answers.

svchost using high CPU & no sound

Q: svchost using high CPU & no sound

Recently my toshiba satellite laptop running windows xp with SP2 started freezing up right after startup. It would take maybe 20 seconds to process anything. For example, if I opened my browser, it would take that long to open. Then type in a URL and it would take 20-30 seconds to load.

I opened the task manager and sorted by CPU usage and one of the svchost was taking about 50% of the CPU. I end that process and everything speeds back up for about 15 minutes. Then it does it again.

Also, my sound disappeared. In the device manager everything appears to be find but if I open the sounds, speech, and audio devices in the control panel it says "no audio device".

Finally, several programs from Firefox to Outlook express are just freezing at random times and I have to shut everything down and reboot to get them to work properly again.

I have tried several suggestions on the net but haven't found a good solution. I wanted to check to see if spyware or viruses were the cause before I do anything else.

Here is my hijack this log. If I left out any pertinent info just let me know. Thanks in advance for any help that you can give me.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:20:25 PM, on 5/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\ACS.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
C:\WINDOWS\System32\DVDRAMSV.exe
C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
c:\TOSHIBA\Ivp\Swupdate\swupdtmr.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfsem.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\EzButton\CplBTQ00.EXE
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\Toshiba Controls\CpRmtKey.EXE
C:\PROGRA~1\B'SCLI~1\Win2K\BSCLIP.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\toshiba\ivp\ism\pinger.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe
C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmon.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAPPActiveProtection.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Safari\Safari.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.toshiba.com/search" target="_blank" class="wLink">http://www.toshiba.com/search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.epicdiecast.com/catalog/index.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank" class="wLink">http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank" class="wLink">http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://toshibadirect.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - (no file)
O2 - BHO: CA Toolbar Helper - {FBF2401B-7447-4727-BE5D-C19B2075CA84} - C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\WebsiteInspector\Toolbar\CallingIDIE.dll (file missing)
O3 - Toolbar: CA Toolbar - {10134636-E7AF-4AC5-A1DC-C7C44BB97D81} - C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\WebsiteInspector\Toolbar\CallingIDIE.dll (file missing)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [CplBTQ00] C:\Program Files\EzButton\CplBTQ00.EXE
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [CeEPOWER] C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [CpRmtKey] "C:\Program Files\Toshiba Controls\CpRmtKey.EXE"
O4 - HKLM\..\Run: [B'sCLiP] C:\PROGRA~1\B'SCLI~1\Win2K\BSCLIP.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [Lexmark X6100 Series] "C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe"
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [cctray] "C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe"
O4 - HKLM\..\Run: [cafwc] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\cafw.exe -cl
O4 - HKLM\..\Run: [capfasem] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe
O4 - HKLM\..\Run: [capfupgrade] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfupgrade.exe
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe"
O4 - HKLM\..\Run: [cafw] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\cafw.exe -cl
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: &Search - http://kl.bar.need2find.com/KL/menusearch.html?p=KL
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Google AdSense Preview Tool - http://pagead2.googlesyndication.com...n/preview.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.toshiba.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1155589781421
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1155592602812
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} (DownloadManager Control) - http://dlm.tools.akamai.com/dlmanage...ex-2.2.1.6.cab
O18 - Filter hijack: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - (no file)
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\System32\ACS.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CaCCProvSP - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\System32\DVDRAMSV.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PPCtlPriv - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe
O23 - Service: Swupdtmr - Unknown owner - c:\TOSHIBA\Ivp\Swupdate\swupdtmr.exe
O23 - Service: HIPS Event Manager (UmxAgent) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe
O23 - Service: HIPS Configuration Interpreter (UmxCfg) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe
O23 - Service: HIPS Firewall Helper (UmxFwHlp) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe
O23 - Service: HIPS Policy Manager (UmxPol) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe
O23 - Service: VET Message Service (VETMSGNT) - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe

--
End of file - 11192 bytes

Read other answers
RELEVANCY SCORE 200
Preferred Solution: svchost using high CPU & no sound

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

RELEVANCY SCORE 65.2

Sorry, but I originally put this post in the wrong spot.

Everytime I reboot my pc, there is an svchost process running with 96-98% cpu usage. It runs for minutes. If I delete it, I lose all sound. Even if I don't delete it, I periodically lose sound. Especially while watching google or youtube videos. Below are the DSS logs. Thanks in advance for any help you can give!!

Deckard's System Scanner v20070318.32
Run by Dad on 2007-03-22 at 10:31:39
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
87: 2007-03-22 14:31:47 UTC - RP107 - Deckard's System Scanner Restore Point
86: 2007-03-22 12:04:52 UTC - RP106 - Software Distribution Service 2.0
85: 2007-03-22 03:04:22 UTC - RP105 - Software Distribution Service 2.0
84: 2007-03-21 22:48:23 UTC - RP104 - System Checkpoint
83: 2007-03-20 21:43:42 UTC - RP103 - System Checkpoint


-- First Restore Point --
1: 2006-12-23 15:08:03 UTC - RP21 - System Checkpoint


Backed up registry hives.

Performed disk cleanup.


-- HijackThis (run as Dad.exe) -------------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 10:33:50 AM, on 3/22/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running pr... Read more

A:svchost way too high and no sound

Bump!!

Read other 1 answers
RELEVANCY SCORE 65.2

Everytime I reboot my pc, there is an svchost process running with 96-98% cpu usage. It runs for minutes. If I delete it, I lose all sound. Even if I don't delete it, I periodically lose sound. Especially while watching google or youtube videos.

Read other answers
RELEVANCY SCORE 63.6

Techs,
Not sure what to do next on a Dell Optiplex 390 W7 Pro desktop with two symptoms:
1. High CPU usage-25% for svchost.exe ( even in safe mode) - Plug and play is the offending service
2. high memory use for svchost.exe 112mb - (only in normal boot)- Is 112mb high? Not sure of the offending service. Attached services are Desktop Session Mgr, RDP Session Mgr, Distributed Link Tracking Client Superfetch, Prog Compatibility Asst , Network Connections, Offline files, or Windows Audio Endpoint Builder.  I suspect Superfetch because it seems to be only service in group with CPU usage.
I used Task Manger and Resource Monitor to gather the info above.
 
Other symptoms:
1. Device Manager takes forever to come up ( even in safe mode)
2. Normal reboot takes forever
 
Things tried to fix:
1. sfc /scannow - OK no corrupt files
2. Malwarebytes Scan -OK no infections
3. Malwarebytes RootKit scan -OK no infections
4. TDSKiller RootKit scan - OK no infections
5. Rkill - OK no infections
 
Any ideas to address the CPU usage I guess as that seems to be my worst problem.
Thanks in advance,
b.groves
 

A:svchost.exe - Plug&play high cpu !; svchost - Dcomlaunch high memory?

Shut down the computer, unplug the power cord and hold the power button for 30 seconds.
Unplug everything from the computer except the keyboard, mouse, and one monitor.
Plug the power cord back in and power it up. Does it have the same problem?

Read other 6 answers
RELEVANCY SCORE 54.8

So lately, I've noticed an immense amount of CPU usage when my PC is idle. This happened very suddenly and after some research I've found the two culpurets! PlugPlay and AudioEndPointBuilder. Since this is more of a Windows 7 problem than anything, I'm worried that if I try to stop either of those 2 proccesses something can really go wrong. I actualy tried the "stop process" option but both Process would keep running normally. I'm pretty sure that it's not a virus/malware problem. At this point I'm not sure as to what I can do more.
 

Read other answers
RELEVANCY SCORE 48.4

Can someone help me figure this out. I have a svchost.exe that's , currently at 1,202,534K.
My PIF usage is at 2.19.
I have scanned for virus's using the Malewarebytes and Combofix. Combofix found the rootkit.zeroaccess! and fixed it but it deleted one of the files for my internet . So I did a windows recover and it fixed everything but still having high PIF usage and svchost. The only thing I have running is Chrome browser.
Thank you for any help!
Natalie
I posted in windows xp and someone replied stating I should post here.
 

Read other answers
RELEVANCY SCORE 48.4

I have a svchost.exe that's , currently at 260,992K.
My PIF usage is at 1.41gb.
I have scanned for virus's using the Malewarebytes and Combofix. Combofix found the rootkit.zeroaccess! and fixed it but it deleted one of the files for my internet . So I did a windows recover and it fixed everything but still having high PIF usage and svchost.
I don't know what else to do.
Thank you for any help!

A:High svchost.exe

Hello having run ComboFix we need to see that and a DDS log.Please go here....Preparation Guide ,do steps 6 - 9.Create a DDS log and post it in the new topic explained in step 9 which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.Skip the GMER step and instead post the ComboFix log you have.Let me know if that went well.

Read other 4 answers
RELEVANCY SCORE 48.4

Can someone help me figure this out. I have a svchost.exe that's , currently at 1,202,534K.
My PIF usage is at 2.19.
I have scanned for virus's using the Malewarebytes and Combofix. Combofix found the rootkit.zeroaccess! and fixed it but it deleted one of the files for my internet . So I did a windows recover and it fixed everything but still having high PIF usage and svchost. The only thing I have running is Chrome browser.
Thank you for any help!
Natalie
 

A:High svchost.exe

Sounds to me like you are still infected with malware please start a new thread in the virus removal forum.
http://forums.techguy.org/virus-other-malware-removal/943214-everyone-must-read-before-posting.html
 

Read other 2 answers
RELEVANCY SCORE 48.4

Hello.

I've been searching for the solution for my problem and found many threads about svchost.exe taking too much CPU but none of them was useful to me.

For the past few days (maybe longer) one of the instances of svchost.exe is constantly taking around 50% CPU.
I tried to find out which service exactly is causing this but I was unable to do this. Here's what I tried:

1.) Using Task Manager
- I can see the PID of the problematic svchost.exe, but when I click on the Services tab I don't see any service with this PID.

2.) Using Process explorer
When I open properties of the problematic svchost.exe I don't have 'Services' tab like usual so I can't see what services it's hosting. This works for all other svchost instances, except for this one. However using this method I got some useful and interesting information:
- Command line: C:\Windows\system32\svchost.exe -k netsvcs
- It's running only one thread. Here's the screenshot: http://dbrckovi.webs.com/problem/Threads.JPG
Here's the interesting part: Under TCP/IP tab it says it's connected to 91.215.156.74:80 with status: CLOSE_WAIT
Since this is a http port I tried typing it in the browser and it openned a page with big bold text 'Welcome to nginx!'
I googled it and found out it's some kind of high-performance e-mail client but I'm sure I never installed anything like that. For e-mail I'm using only Outlook 2007 and Google mail checker.

3... Read more

A:svchost.exe high CPU

Read other 11 answers
RELEVANCY SCORE 48.4

Once installed Utorrent, I noticed that my computer was slow and crashing constantly. I found that the svchost.exe process is always around 70/100% processor usage.Already I uninstalled, formatted and the problem persists.
 

A:High Cpu 100% in svchost

Log :
 

Read other 1 answers
RELEVANCY SCORE 48.4

I got a problem with svchost.exe high cpu usage. I appears to utilizing all available cpu. If I start an app., the app grab cpu and when its done the svchost.exe process takes it back. My cpu remains pegged at 100% constantly.

Question is: What can I do to correct this?
 

A:svchost.exe high cpu

Read other 8 answers
RELEVANCY SCORE 48.4

Hi all, and this time it's my computer. SVChost is high. I kill it manually from time to time, and then it's good for awhile. I had bittorrent installed and I've since removed it. I have 2.66 GIGS free space, it's been just lately it's slow. Here's my HJT log, I can't believe it's my own home computer.

Logfile of HijackThis v1.99.1
Scan saved at 7:44:25 PM, on 5/23/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\System32\hphmon05.exe
C:\Program Files\Network Associates\Common Framework\UdaterUI.exe
C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
C:\Program... Read more

Read other answers
RELEVANCY SCORE 48.4

So from yesterday, i got problems with process called svchost.exe. On start of computer, it takes 80-99 cpu for no reason at all, and when ended it makes my taskbar like that one in safe mode.
 
And also svchost.exe like 1 hour after ending process svchost.exe, appears again with that same amount of cpu.
It's really annoying when I want to work but I cant because of that process and everytime I need to end it.
 
So I though its a malware and I though why not to ask for help on bleeping computer because it helped me once.
 
So I attach logs from Malwarebytes (these 3 are false positives, believe me)

 mbam log.txt   1.4KB
  4 downloads
 
I also attach logs from FRST
 

 Addition.txt   41.62KB
  3 downloads

 FRST.txt   43.81KB
  5 downloads

 Shortcut.txt   77.85KB
  0 downloads

A:svchost.exe High CPU

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Press the windows key + r on your keyboard at the same time. This will open the RUN BOX.Type Notepad and and click the OK key.Please copy the entire contents of the code box below to the a new file. start
CreateRestorePoint:
EmptyTemp:
CloseProcesses:

HKU\S-1-5-21-3528563093-1306594201-4246112523-1003\...\Run: [Windows Update] => C:\Documents and Settings\Dell\Dane aplikacji\WindowsUpdate.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll => No File
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll No File
FF Extension: No Name - C:\Program Files\AVAST Software\Avast\WebRep\FF [not found]
CHR StartupUrls: Default -> "hxxp://www.gazeta.pl/0,0.html?p=128","hxxps://www.google.pl/","","hxxp://www.google.pl/","hxxp://start.qone8.com/?type=hp&ts=1383058492&from=cor&uid=3219913727_3907_88B27801"
CHR Plugin: (Widevine Content Decryption Module) - C:\Documents and Settings\Dell\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\WidevineCDM\1.4.8.824\... Read more

Read other 2 answers
RELEVANCY SCORE 48.4

i need to know what all is in need of being posted, so that i can post it after school. svchost is eating my system resources.

A:svchost high cpu

Use this free program to see what's running inside of the svchost.exe process (hover the mouse of it and it'll tell you what's in it): http://technet.microsoft.com/en-us/s.../bb896653.aspx

Read other 1 answers
RELEVANCY SCORE 48.4

Hey guys,

I have asked this before, but on startup, I have several processes named svchost.exe that run on startup. One of these is a network service and every time, this particular one uses 50% +/- CPU. Apps will not open, nothing will function correctly until this is terminated.

Other than killing the .exe every single time, what can I do to keep it from being a HOG???

Thanks!
 

A:svchost.exe = High CPU

TASKLIST DOWNLOAD AND USAGE
How long has the problem existed, and have you tried doing a System Restore to correct it?

1 > Post a HijackThis Scanlog:

Download and install HijackThis using the "self extractor". Run it and select "do a system scan and save the log file". Then copy/paste the contents of the log to a reply

http://www.thespykiller.co.uk/files/hijackthis_sfx.exe

2 > Download the application Tasklist.exe and copy it to your c:\windows\system32 folder.

http://www.computerhope.com/download/winxp.htm

Then go to Start > Run, enter cmd

At the command prompt copy/paste this into the window and hit "enter":

cd %userprofile%\desktop
tasklist /svc /fi "imagename eq svchost.exe" >> taskservlist.txt

A text file should appear on your desktop. Copy/paste the contents of that here also.
 

Read other 3 answers
RELEVANCY SCORE 48

I have a quite new computer so i havent really looked on the taskmanager before. But today when i started the computer i thought it was running slowly so i checked it. Cpu Usage is constantly at around 40%.
there is 2 processes with svchost.exe, one taking around 25% and the other one taking around 12% of cpu usage.

I checked the services on one of the svchost:
Plug and Play
DCOM Server Process Launcher

And i saw in another thread that you could check the threads running under svchost with Process Explorer, the ones consuming cpu power on both the processes had Start Adress:
ntdll.dll!RtlUserThreadStart

My system is Windows Vista Ultimate SP1, AMD Phenom 9550 Quad-core 2.20GHz, 4GB RAM, 64 bit operating system.

A:svchost.exe high CPU usage

Unfortunately Vista runs a lot more background services and scheduled tasks than XP. Or put it this way, it keeps your cpu and hd busier than XP did. You can look at this site for ideas which services you may want to disable or set to manual to take off some of the system load.Vista Services Explainededit: btw it's a good idea to set a Restore Point to get back where you started if you shoulddisable something that should not be disabled. Proceed with care. On my system after a few of the obvious ones I started keeping a log. I'd try setting one service to Manual Stopped or Disabled, note it in the log, then run it for awhile. If things started seeming weird I had a note of exactly what I did so I could back it off. If you change multiple things at once it's easy to get lost.

Read other 2 answers
RELEVANCY SCORE 48

I started recently seeing that SVCHOST takes a lot of CPU% usage. I used program called "Process Explorer" to identify the source of problem and found out that thread "kernel32.dll!CreateThread+0x22" was causing the problems.But as you can see on picture, there are another same threads, which is interesting...Now even if i kill this thread, it will still be happening as computer starts. Is there a way to kill permanently this thread or to know more how it can be stopped?

A:SVCHOST Causes High CPU Usage :(

I would not suggest you kill it or permanently stop it - you want to figure out what the problem is and fix it!It is good that you have PE and can post screenshots though!Perform some scans for malicious software, then fix any remaining issues:Download, install, update and do a full scan with these free malware detection programs:Malwarebytes (MBAM): http://malwarebytes.org/SUPERAntiSpyware: (SAS): http://www.superantispyware.com/They can be uninstalled later if desired.To eliminate questions and guessing, please provide additional information about your system.Click Start, Run and in the box enter:msinfo32Click OK, and when the System Summary info appears, click Edit, Select All, Copy and then paste the information back here.There will be some personal information (like System Name and User Name), and whatever appears to be private information to you, just delete it from the pasted information.

Read other 1 answers
RELEVANCY SCORE 48

Hi guys,Please help me fix my problem..i'm using winVista and found from my firewall that svchost.exe using huge bandwidth since yesterday.it keeps connecting to random ip.. Here's some of that IP:80.67.66.57192.168.0.166202.159.22.*203.106.85.123203.106.85.114207.46.48.140Here's My HJT Log:Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:04:10 PM, on 12/21/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16711)
Boot mode: Normal

Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Avira\AntiVir Per... Read more

A:SVCHOST.EXE Using High Bandwidth

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below a staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_ScanFollow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable a... Read more

Read other 2 answers
RELEVANCY SCORE 48

8 of the SVChost is using 396mb in total this is way to much how can i cut this down
i thought this was for service coz i have a tweaked service i only set the
services i need to automatic or manual but this process id taking up so much

A:SVChost high memory help

Just leave things along. It is perfectly fine.

Read other 8 answers
RELEVANCY SCORE 48

Hi guys, the SVCHOST.exe on my system  use 25 % of my CPU and over 2GB of RAM...

.... in this topic you can see all of the things i did http://www.bleepingcomputer.com/forums/t/601386/svchostexe-problem/
 
after applied some windows updates manually  which i read with research in google that can help in my case  (Windows6.1-KB3102810-x64
Windows6.1-KB3050265-x64)  the svchost now use   ~700MB of RAM but  again 25 % CPU ...

 
I have to use this batch script to stop the process every time if i notice that appear in the task maneger:

net stop wuauserv
net stop bits
rd /s /q %windir%\softwaredistribution
net start bits
net start wuauserv
wuauclt.exe /detectnow

The Windows Update on my system always be off... But now even if i try to turn it on nothing happen i see this

Continuously loading and nothing more...  my system restore points disappeared so i can't use them...
Sometimes my system work very strange... the internet sites loading very slowly but i can't notice any strange TCP/IP connections or problem with my ISP or router...
sometimes the program which i start begin to freezing and i can't close them even if i use the task maneger...
 
I try many scans with Rescue CD-s  of - Eset, Avira, Kaspersky and nothing...
 
 
Hope you can help me...
 

 
This is the FRST Log
 
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:09-01-2015
Ran by Stormrage (administrator) on STORMRA... Read more

A:Svchost.exe high CPU and RAM usage

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/601881 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 2 answers
RELEVANCY SCORE 48

Whenever I start my computer,I'm getting high memory usage on svchost.exe
ImageShack? - Online Photo and Video Hosting
I'm not so sure which info I need to provide,to continue troubleshooting so here is some:
Nod32 antivirus,Q9650 @ 3.00GHz,8 Gig of ram,around 10Gig of free space at the system drive,using windows 7 x64 with SP1 installed and fully updated.
The memory at svchost.exe is like leaking and just gathering more and more,and it gets to 150,000+/-.
While I was writing this,it went from 97,***k to 104,388k.
ImageShack? - Online Photo and Video Hosting

A:svchost.exe high memory

80 to 100k is not that a-typical for the primary svchost.

I wouldn't really call this a problem. The reason you got 8 gigs of ram was so you wouldn't have to wait as long on operations correct?
Win 7 makes more use of higher ram amounts than vista and xp did.
Stopping this would only serve to slow the system down by making it pagefile the same services.

You may be able to reduce it slightly by killing some of the non-microsoft services using msconfig.

...as I said, this isn't really a problem though.

Read other 4 answers
RELEVANCY SCORE 48

I think my computer may be infected. It spike to 50~100% from svchost.exe using most of it.
It uses the service TapiSrv, NlaSvc, KtmRm, Dnscache and CryptSvc.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:29:00 PM, on 3/14/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\wuauclt.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Lenovo\NPDIRECT\tpfnf7sp.exe
C:\Program Files\Lenovo\HOTKEY\TpWAudAp.exe
C:\Program Files\CONEXANT\SmartAudio\SmAudio.exe
C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
C:\Program Files\Lenovo\LenovoCare\LPMGR.EXE
C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe
C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe
C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
C:\Program Files\Lenovo\PMDriver\PMHandler.exe
C:\Program Files\Pando Networks\Media Booster\PMB.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Users\Tony\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Tony\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Tony\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Tony\AppData\Local\Google\Chrome\Appl... Read more

A:svchost.exe PID: 1428 high CPU

bump
 

Read other 3 answers
RELEVANCY SCORE 48

I'm running Windows 7 64 bit, with an AMD Athlon ii X2 250 3.0Ghz Dual Core, and 4GB of Ram (500MB being used for onboard integrated graphics since my old GPU died) Is this because Aero is turned on? Or is this normal, and I'm being paranoid? Picture: http://picasaweb.google.com/lh/photo/-Sa2L...feat=directlink

A:svchost high ram usage

I wouldn't worry at all, unless your computer misbehaves.
CPU usage is at 3% and RAM usage at 31%.
Perfectly normal.

Read other 3 answers
RELEVANCY SCORE 48

When I wake my laptop and start the internet (right after waking), generally after 3-4 minutes this svchost kicks up which involves;

(task scheduler, themes, windows updates, windows profiler services, application information, background intelligent transfer service, extensible authentication protocol, IKE and AuthIp Ipsec keying modules, windows management instrumentation, system event notification services)

This will take up to 7-8 minutes and use around 80% of the CPU and most of the Physical memory. Is this a normal process and my underpowered laptop just not up to the task? It stops shortly and then all is well, no lags or high usage, but I thought I'd see if this process is indeed a "greedy" one naturally.

A:svchost using high cpu often like clockwork

I have not run into this on WIN 7, but on both my WIN XP machines I had the same problem.
I fixed both by going to" Microsoft Update" (which I had enabled a long time ago) and disabled it, allowing to it revert back to "Windows Update" only (without looking for all Microsoft application updates only Windows OS). I then disabled Win Auto Updates.

Svchost dropped from 100% to 0%. I now just manually check for updates. Don't know if this will work for you but just thought I'd toss it out there.

Also if you have any HP Multifunction Print drivers on your machine, they have been known to cause the same issue with svchost at least on XP.

Read other 4 answers
RELEVANCY SCORE 48

Hi eveyone!

I googled a lot about this matter, but still dont know the clue.

I also find here a thread:
http://forums.techguy.org/windows-7/1011182-svchost-exe-high-usage-slow.html
I have the exact same problem like this guy. But I did not find the solution there.

I have the HJM logfile, that showed nothing problem.

Process explorer and task manager shows, that is consumes 190 mb memory.

Since I am a new member, I cannot contact "monkeyDLuffyPK" the previous thred starter.

If anyone knows how can I stop it the process, or what is means, it would be a huge help.

Kind regards,
Frank.
 

A:SVCHOST.EXE is running high

Read other 16 answers
RELEVANCY SCORE 48

I don't know if this is a danger to my laptop but whenever I turn on my laptop,this would use about 100 % of my cpu thus freezing my laptop. I've scanned with antivirus,malware/spyware scanners and even online scanners but none is found so far. Please help me try to correct this and hopefully fix this. I'm getting frustrated waiting for svchost to calm now. i think it might be malware

A:svchost.exe HIGH CPU usage!

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 48

Hello fellow TSFers,

Recently, on my computer the svchost.exe process is taking up large amounts of the CPU (30-40%). I have read other sites saying to install a Windows automatic update (KB927891), but after downloading it I found that I already had this update. What else could be causing this issue? Thanks for reading, and please contribute all you know about this problem. Thanks.

P.S. I ran a virus scan and nothing was found.

A:svchost.exe high CPU usage

You can check for things that start in addition to Windows.

Click start, run, type msconfig and press enter.

Look under Startup - uncheck EVERTHING!

Look under Services, check the box to hide MS Services, and again, uncheck EVERYTHING left.

Reboot.

Is the svchost running high cpu still after that?

Read other 4 answers
RELEVANCY SCORE 48

I immediately noticed my computer was running wayyy to ridiculously slow and checked the alt+ctrl+del menu and sure enough i see:

Name User CPU Mem Usage
svchost.exe SYSTEM 99 100,000+k
When I shut it down, my computer has no sound.

So: Two questions Why is this, and how do I fix it?

Thanks for any/all help, I only have this one computer and I like music.

~Matthew
 

Read other answers
RELEVANCY SCORE 48

Hello,

Ive notice for a while now that I have a svchost.exe using a lot of memory (see attached).
Is this normal?
If not, how to fix it?

Appreciate your time.

A:Svchost High Memory Use

Take a look here to get started identifying that particular service causing your issue: How to determine what services are running under a SVCHOST.EXE process

Read other 48 answers
RELEVANCY SCORE 48

the service of windows 8 svchost.exe is using from time to time a lot of cpu and ram resources and im suspecting a virus.
i ll be waiting for your advice and help
thanks.....

A:svchost.exe high cpu and ram performance

Lets run these next and see what we get.Please download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:Flush DNSReport IE Proxy SettingsReset IE Proxy SettingsReport FF Proxy SettingsReset FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory size.Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.Note: When using "Reset FF Proxy Settings" option Firefox should be closed.Download TDSSKiller and save it to your desktop.Extract (unzip) its contents to your desktop.Open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.If an infected file is detected, the default action will be Cure, click on Continue.If a suspicious file is detected, the default action will be Skip, click on Continue.It may ask you to reboot the computer to complete the process. Click on Reboot Now.If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the contents of that file here....ADW CleanerPlease download AdwCleaner by Xplode and save to your Desktop.Double-click on AdwCleaner.exe to run the tool.Vista/Windows 7/8 users right... Read more

Read other 14 answers
RELEVANCY SCORE 48

Hi everyone!

My name is Frank and I was adviced to move my Thread from Opsys to here.

My problem is that one of the svchost.exe is running high, between 500k and 130k
It is the svchost.exe PID: 2600 AudioEndpointBuilder, Netman, PcaSvc,
SysMain, TrkWks, UxSms, Wlansvc

I've had a decent antivirus and malware removal but it is still running high, which is quite disturbing.

Here is the previous Thread, and the resoult of the TSG Sysinfo.

http://forums.techguy.org/windows-7/1133199-svchost-exe-running-high.html#post8965200

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz, Intel64 Family 6 Model 37 Stepping 5
Processor Count: 4
RAM: 3828 Mb
Graphics Card: Intel(R) HD Graphics, 1722 Mb
Hard Drives: C: Total - 431937 MB, Free - 112162 MB; D: Total - 29690 MB, Free - 20382 MB;
Motherboard: LENOVO, MoutCook
Antivirus: COMODO Antivirus, Updated and Enabled

Thank you for your help in advance.

Kind regards,
Frank
 

A:SVCHOST.EXE is running high

Read other 16 answers
RELEVANCY SCORE 48

So this problem just happened out of the blue today. I was just browsing with my desktop and it just so happens that I noticed the jittery/laggy movement of my cursor occasionally. So I checked the Task Manager and noticed that svchost is putting my CPU usage at 50%~75% constantly.

The high CPU usage happens a few minutes after the computer was turned on. It seems that there's no "trigger" for this problem. It just suddenly appears.

During the previous days, I didn't had this problem. Last I used the computer was last night and it was not showing any signs of this kind of problem. I'm also the only person that uses this computer.

I've done system restore twice rolling back to Monday (10/10) and again to Sunday (10/9). The problem still persists. I've even done scans with RogueKiller and MBAM but nothing was detected.

The concerned services are:
AeLookpSvc
Appinfo
BITS
Browser
IKEEXT
iphlpsvc
LanmanServer
MMCSS
ProfSvc
Schedule
SENS
ShellHWDetection
Themes
Winmgmt
wuauserv

Read other answers
RELEVANCY SCORE 48

I have had that message a couple of times whilst on the Forum. Haven't noticed it when I am doing anything else.
Here's the info I get when I click on more details;






Quote:
Filename: svchost.exe
Full Path: c:\windows\system32\svchost.exe

____________________________

____________________________
Developers
Microsoft Corporation

Version
6.1.7600.16385

Identified
21/11/2014 at 18:32:15

Last Used
14/07/2016 at 09:14:42

Startup Item
No
____________________________
Many Users
Millions of users in the Norton Community have used this file.

Mature
This file was released 6 years 11 months ago.

Trusted
Norton has given this file a trusted rating.
____________________________
Source File:
svchost.exe

____________________________

Performance

____________________________

Avg. Resource Usage: Low
Avg. CPU Usage: Low
Avg. Memory Usage: Low
____________________________

Performance Alert

Process ID
444

CPU
98% of at least one CPU.

Memory
Normal

Handles Count
Normal

Disk Read Activity
Normal

Disk Write Activity
Normal
____________________________

File Thumbprint - SHA:
93b2ed4004ed5f7f3039dd7ecbd22c7e4e24b6373b4d9ef8d6e45a179b13a5e8
File Thumbprint - MD5:
c78655bc80301d76ed4fef1c1ea40a7d


Here's a screenshot of Process Explorer which I think indentifies the problem. I'm just not sure what to do to rectify this.

Any help much appreciated.
P.S. I have Malwarebytes Pro installed and running, I have also done a complete scn... Read more

A:svchost.exe High CPU usage 98% of at least one CPU.

Get the PID of the problematic svchost.exe process (586 in your screenshot

Run Task Manger and right click on the matching svchost process and choose "Go to service"

Let us know which services are running under it.
If Windows Update shows up it's likely to be the culprit. You can confirm by stopping Windows Update Service via Start> Run> services.msc

Stop then set startup type to disabled and reboot to test.

Also worth a mention:

Grab copies if these and run them:

Svchost Process Analyzer

svchost viewer

The first one helps you check for anything out of the ordinary (malware running under svchost.exe) or unusual services configuration.

The second one just breaks down each svchost.exe process into it's component services.

Windows Update problem (if suspect can also be confirmed using RAMMap:

http://www.sevenforums.com/vip/39474...ml#post3239385

http://www.sevenforums.com/windows-u...ml#post3163350

Note: RAMMap must be run when the problem is actually happening.

Read other 9 answers
RELEVANCY SCORE 48

I have tried a couple of virus and spyware/trojan software progams and nothing finds anything but tracking cookies.

The symptoms:
1 - Machine is never below 50% utilization
2 - System very un-responsive (Open notepad takes several minutes)
3 - No Issue in safe mode (Even when network enabled)
4 - CA-Security says it found and cleaned 30 items (Tracking cookies)
5 - CA-Anti_Virus will real-time protection.
6 - svchost process shows 50%+ Utilization and shows it contains the following:
- AeLookupSvc C:\windows\system32\aelupsvc.dll
- Appindo C:\windows\system32\appinfo.dll
- BITS C:\windows\system32\qmgr.dll
- EapHost C:\windows\system32\eapsvc.dll
- gpsvc C:\windows\system32\gpsvc.dll
- IKEEXT C:\ikeext.dll
- iphlpsvc C:\windows\system32\???
- LanmanServer C:\windows\system32\srvsvc.dll
- MMCSS C:\windows\system32\mmscc.dll
- ProfSvc C:\windows\system32\profsvc.dll
- RasMan C:\windows\system32\rasman.dll
- Schedule C:\windows\system32\schedsvc.dll
- seclogon C:\windows\system32\seclogon.dll
- SENS C:\windows\system32\sens.dll
- ShellHWDetction C:\windows\system32\shsvcs.dll
- Themes C:\windows\system32\shsvcs.dll
- Winmgmt C:\windows\system32\WMIsvc.dll
- wuauserv C:\windows\system32\wuueng.dll
- TaskEng.exe
- TaskEng.exe
- TaskEng.exe
- TaskEng.exe
- GoogleUpdate.exe

Any help is appreciated.

DSS output attached.
Thanks
-jim

Read other answers
RELEVANCY SCORE 48

SYSTEM: Running Windows XP Home [SP3] with Intel Pentium 4 CPU. Use Firefox browser mostly. [Latest ?3.06 Version]Did my routine AVG scan [using Version 9.0.733] which identified on the Resident Shield detection feature as follows: Trojan Horse BackDoor.Generic12.AEIU & C:\WINDOWS\system32\drivers\asynmac.sys & Object is white-listed [critical/system file that should not be removed] in the caption line.Ran Malwarebytes & Superantispware programs, one of which apparently removed or fixed the above Trojan Horse, as it no longer shows up on a further scan done by AVG.However, since ths time [may be coincidence] have noticed svchost.exe "DCOM Server Process Launcher Service" [identified using the Process Explorer tool] is always hogging 50% plus of CPU resources at startup & afterwards, when no other programs are in use. Before, when idle, cpu usuage has always been low 0-10%......now sounds like the hard drive & fan is maxing out & often approaches & stays at 100% cpu usgae when only 1 browser open or minimal use of other programs.Have run scan, DDS log as follows, please let me know how to attach the other notepad log, if you require it, which says: [UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT], or if you need other details about my system......I am not an expert on computers, but willing to follow instructions.Thankyou in advance, Kevin [Australia]DDS LOG:DDS (Ver_09-12-... Read more

A:svchost.exe high cpu usage 50%

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 15 answers
RELEVANCY SCORE 48

Hello,
one of my svchost.exe is running high. Normal CPU usage, but memory often/always will be above 600,000K... below are my hijackthis and my startuplist. I would be grateful if someone could help. I would hope its not from a virus.
 

Read other answers
RELEVANCY SCORE 48

A few days ago I noticed my CPU usage high and wouldn't fall under 50%. I found out it was something to do with svchost.exe so I killed it off and restarted my computer. It actually worked and my CPU usage was down to normal, but when I connect to the internet with my wireless adapter (I am on a desktop and the network is at my house) the buggy svchost.exe would start up again. I ran several virus scans, but nothing related was found.

I am running XP SP3.

Also I attached an image of my processes list from ProcessesExplorer. See where that svchost.exe is?

I thought I had this issue taken care of but unfortunately I do not.

Here's the Hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:27:53 PM, on 12/22/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Internet Security 2010\TPSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRAM FILES\PANDA SECURITY\PANDA INTERNET SECURITY 2010\WebProxy.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\a-squared Free\a2ser... Read more

A:High CPU Usage (svchost.exe)

one way to tell which service it's running is to check with windows defender's process explorer. you check using the process id. i wrote a post here on how to do that http://www.techsupportforum.com/f10/...er-313161.html

Read other 1 answers
RELEVANCY SCORE 48

Hi,
I'm having high CPU usage from svchost.exe (netsvcs). 
What should I run to check it out?
Have Norton, ran Malwarebytes and TDSKiller.
Thanks!
cbeau37

A:svchost.exe (netsvcs) high CPU

Hi, with this type of issue better to get a deeper look. Please follow this Preparation Guide and post in a new topic.Let me know if all went well.

Read other 0 answers
RELEVANCY SCORE 48

Hello,

One of the svchost.exe process is using higher memory than usual.

It's using 64,140K which is to much as when I end the process, the physical memory usage drops to around 900mb. It's at 1.34GB at the moment.

I am running Windows Vista.

Yesterday I had a virus but I removed it. I think it may be playing a role in this. I used MalwareBytes to fully scan the computer and it removed one threat which I dont think was related.

Thanks.
 

A:svchost.exe high usage

Read other 16 answers
RELEVANCY SCORE 48

I have this problem of High CPU usage mainly by Svchost.exe it will eventually shut it down. I ran all kinds of antivirus , malware found very little the last program was the ADWcleaner that found 71 infections at first  that seamed to help. But it still has high CPU usage sometimes close to 100% . So far it has not caused a total failure PC crash . The biggest problem is that when you click on to something it takes a while to come up with what you clicked onto and when you check yes the CPU is high . It is rarely below 70%. Any help would be greatly appreciated . Thanks Genel41

A:High CPU usage by SVCHOST.EXE

Hello GeneWe should get a deeper look. Please follow this Preparation Guide and post in a new topic.Let me know if all went well.

Read other 0 answers
RELEVANCY SCORE 48

Does Microsoft have a fix this? I'm not very computer savvy.

Read other answers
RELEVANCY SCORE 48

Hi,
I'm having high CPU usage from svchost.exe (netsvcs).
My mouse starts moving real slow then comes back.
What should I run to check it out?
Have Norton, ran Malwarebytes and TDSKiller.
Below is my FRST.txt paste. Also Attached is my Addition.txt file.
Thanks in advance!
cbeau37

 
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-06-2016
Ran by Chris (administrator) on CHRIS-PC (07-06-2016 06:25:58)
Running from C:\Users\Chris\Downloads
Loaded Profiles: Chris (Available Profiles: Chris)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(AVerMedia) C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
() C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
(SEIKO EPSON C... Read more

A:svchost.exe (netsvcs) high cpu

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Press the windows key + r on your keyboard at the same time. This will open the RUN BOX.Type Notepad and and click the OK key.Please copy the entire contents of the code box below to the a new file. start
CreateRestorePoint:
EmptyTemp:
CloseProcesses:

ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File
URLSearchHook: HKU\S-1-5-21-3097217664-1659511971-2978430448-1001 - (No Name) - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - No File
SearchScopes: HKU\S-1-5-21-3097217664-1659511971-2978430448-1001 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxps://nortonsafe.search.ask.com/web?q={searchTerms}&o=APN11913&l=dis&prt=NS&chn=1000000&geo=US&ver=22&locale=en_US&gct=kwd&qsrc=2869
SearchScopes: HKU\S-1-5-21-3097217664-1659511971-2978430448-1001 -> {C04B7D22-5AEC-4561-8F49-27F6269208F6} URL = hxxp://toolbar.inbox.com/search/dispatcher.aspx?tp=bs&qkw={searchTerms}&tbid=80210&lng=en
BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86... Read more

Read other 0 answers
RELEVANCY SCORE 48

Hi, my windows 7 is using about 50% of its CPU and 40% (1.3 GB of RAM) on svchost. I read your prior posts helping people and made the recommended changes to make programs and services start manually, but the problem only seems to be worse now. The performance looked great when I first turned my computer back on, but after a few minutes it climbed rapidly to high levels of usage again.


Here's a list of what is still enabled on the Startup tab:
Synaptics Pointing Device Driver
IDT PC Audio
IAStorIcon
Adobe Acrobat
Easybits Recovery
QuickTime
HP On Screen Display
SSDMonit Application
HP Quick Launch
McAfee Security Scanner +

I unchecked these from the startup list:
Adobe Reader and Acrobat Manager
iCloud for Windows
Google Update
Intel(R) Common User Interface
HPCMDelayStart Application
iCloud for Windows (it is repeated)
Intel(R) Common User Interface
Magic Desktop for HP notification
Intel(R) Common User Interface
Java(TM) Platform SE Auto Updater

And here are the services running. Please let me know what you think is causing the spikes. Thanks.




 

A:High svchost memory & CPU

Uncheck these entries in the startup list:
Adobe Acrobat
Easybits Recovery
QuickTime
HP On Screen Display and HP Quick Launch(unless you really use them)
After you're done, click apply - OK/Close - Exit Without Restart.

Change "Startup Type" in these service entries to Manual:
Diagnostic Policy Service
Easybits Services for Windows
HP Client Services
HP Support Assistant Service
MBAMService
Program Compatibility Assistant Service
RoxioNow service
Seaport
Software Protection
After you're done with both the startup and services lists, restart the computer.

Get rid of McAfee Security Scanner Plus.

If your computer is running the 64-bit version of Windows 7 and it supports more than 4 GB of RAM, add another 4 GB to the 4 GB currently in it.

Your computer appears to have VMware Player or some other virtual-type program installed, so I'm guessing it's running another operating system in virtual mode.
That adds several entries to the services list which need to remain on Automatic for it to work.

---------------------------------------------------
 

Read other 1 answers
RELEVANCY SCORE 47.2

Hello,
 
I've been having a problem with ridiculous CPU usage. It's been happening for ages, and I'm finally fed up with it. The draw makes the fan go crazy, so I can hear my computer from two rooms away. Oy!
 
I've narrowed the problem down to svchost.exe (NetworkService) PID 1092 with CPUs regularly over 50. The usage within the process comes from one of 6 services that are also labeled 1092. LanmanWorkstation is a big offender. There's also MsMpSvc, NlaSvc, dnscache and Cryptsvc. Telephony and remote desktop, don't seem to do much.
 
I'm not sure if this is weird or not, but there aren't any svchost entries in the process or application tabs of my Task Manager. But the 1092 entries are running in the services tab.
 
Here's what I have done
 
I have suspended the Network Service svchost. The CPU dropped quickly to less than 5%, but I couldn't open some programs or surf the web.
 
I flushed the DNS using ipconfig /flushDNS. It helped for 5 minutes or so, but it's back.
 
There are times when the computer is quiet, but it revs up for no reason, for example in the middle of the night or while I'm watching TV and haven't opened any new programs or windows.
 
Also, I had been blaming this problem on Firefox, but it happens when Windows Live Mail and Firefox are closed.
 
I have a few other issues that have popped up recently, but I don't t think they aren't related.
 
Oh, it might not matter, but my internet is now running throug... Read more

A:High CPU svchost.exe PID 1092 Networking and DNS

Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post. 
Louis

Read other 13 answers
RELEVANCY SCORE 47.2

Hi,
This is the only forum that I trust and is my resource for tons of useful information.  Unfortunately, I'm really stuck on this issue.  I have a process on my Windows Vista machine svchost.exe that is running constantly over 50-60% CPU speed, and the RAM keeps creeping up over 1GB until it eventually crashes the machine.  When running ProcessExplorer (Sysinternals) I see that it spawns a lot of background connections to ad websites and even generates a lot of temp files in the following folder:
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5
 
However, I don't see a running internet explorer process, or any other browser, for that matter.  
I've tried  HiJackThis, rkill, tdsskiller, OTL, rootkitrevealer, but none of them found an error.  I tried MBRCheck and it says there's a MBR Code Faked and I tried aswmbr but it didn't fix it.  I'm thinking it's a rootkit issue.  Here's my DDS log, hopefully somebody can help.  Thanks in advance!!
--Jim
 
DDS (Ver_2012-11-20.01) - NTFS_x86 
Internet Explorer: 8.0.6001.19272  BrowserJavaVersion: 10.7.2
Run by Jim at 3:19:05 on 2013-09-15
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Lavasoft Ad-Watch Live! *Disabled/Updated* {61CDFD9D-3CAC-9270-C6FC-52325ACB795B}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe... Read more

A:svchost.exe running high on memory and CPU

SOLVED!  I ran TDSSKiller a couple more times (6+), in regular windows and in various safe mode options, and it seemed to have done the trick.  Let's hope it stays this way....

Read other 3 answers
RELEVANCY SCORE 47.2

Hi all
I was asked by Buddy215 to drop a posting over here for someone to have a check over to ensure that my problems are not malware related.
 
This is my original question over on the "Am I infected" forum

 
Hi all, sorry for jumping in almost straight away with a question.
I've been having some serious issues over the last couple of days, with my laptop performing very slowly and regularly crashing (No BSOD, just dies ...)
The computer is a Lenovo Thinkpad T400, Core 2 Duo P8600 2.4Ghz with 8gb of RAM, Running Windows 7 Ultimate.
I think I have narrowed the problem down to one of the many svchost.exe processes in task manager running around 50% CPU usage. Running Process Explorer suggests that this has two "process" under it, both called taskeng.exe, one with GoogleUpdate.exe under it and one with AdobeARM under it. I kill the process, but a few minutes later it starts right back up, again, around the 50% mark. This just seems rather odd to be and to my untrained mind, suggests malware or a virus.
I have run both Avast antivirus and Malwarebytes and neither of those have thrown up anything that relates to it, only a few potentially unwanted programs.
 
I do hope I haven't missed any important information out, but if I have, let me know and I will try my best to find and include it.
 
Cheers
Andrew

So far I have run
A scan with avast antivirus
Malwarebytes
Ccleaner
ADWcleaner
Junkware removal tool
Eset online scan
 
None of these seem to have tu... Read more

A:Possible infection, svchost.exe high CPU usage

Apologies, I appear to have managed to post this twice. I retried as the first time I posted and error came up.
Cheers
Andrew

Read other 2 answers