Hi Everyone,
My Win 7 Home laptop was working fine a couple days ago. Didn't do anything different, didn't download or install anything.
Last night I noticed the fan was running constantly and saw one of the svchosts (the one for windows updates, forgot the name) was consistently at 70% usage. I have updates to notify me of new updates, but let me install.
I manually clicked windows update and saw 36 updates available (no windows update shield in notification area btw). I try to install the updates but it just sits at 0% for a while then I canceled.
I try various ways to fix Windows Update, from MSfixit, various hot fixes, reset and re-register, and running a script that clears all Windows Updates.
I manually try to do Windows Updates again, shows no updates (as history was wiped) And search for updates. The blue bar runs and runs, and just keeps searching.
I ran Cccleaner, Antspyware scans, anti virus scans, spybot, and a few other stuff and still nothing. Any ideas?
I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.
I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.
You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)
Well it happened to me as well... try to run task manager...show all processes.. delete svchost ... after u delete it tends to get that message that u dont want it to consume whole processor.. you may have to restart ... n the problem seems to b with updates to sp1
Read other 1 answersI've got a system that was acting weird on, running slow, etc. I did an repair install of Windows 7 SP1 over the existing OS and can't get all of the Windows updates to roll.
I attempted to do SFC /SCANNOW and it reports no integrity violations.
KB947821 was run overnight and this evening, I found the computer still running it with the "Searching for updates" prompt.
CBS folder is attached.
SFCFix shows:
---------------------------------------------
SFCFix version 3.0.0.0 by niemiro.
Start time: 2017-01-07 21:29:07.744
Microsoft Windows 7 Service Pack 1 - amd64
Not using a script file.
AutoAnalysis::
SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.
CBS & SFC total detected corruption count: 0
CBS & SFC total unimportant corruption count: 0
CBS & SFC total fixed corruption count: 0
SURT total detected corruption count: 111
SURT total unimportant corruption count: 0
SURT total fixed corruption count: 0
AutoAnalysis:: directive completed successfully.
Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2017-01-07 21:29:17.739
-------------------------------------------
I've looked around the forums online and tried various things, but can't seem to get the updates to pull down correctly.
Thanks in advance for any assistance that can be provided.
I have desktop computers in 2 remote sites, that were all from the same image. The image was made at the regional headquarters. Both sites have a wsus mirror server on site that they are reporting to, but they are usually (not always) pulling
their updates via branchcache from a non wsus server at the regional headquarters (and eating up a lot of bandwidth). Computers not made from this image do not have this issue.
I've already tried doing a 'netsh branchcache reset' on all the desktops with this image, but it has not had any effect.
-any other commands I can run on the desktops or the non-wsus server that would fix this?
Hi gang!
I had to restore an image from Aug 3 due to other factors.
When I try to get my windows updates for Aug & Sept I gat this error instantly.
Svc Host has to close
Here are the two files related to the error:
C:\DOCUME~1\Owner LOCALS~1\Temp\WER5d67.dir00\Svchost.exe
C:\DOCUME~1\Owner LOCALS~1\Temp\WER5d67.dir00\appcompat.txt
Now I'm panicing because I'm not patched.
Does anyone know how I could fix this? I would be so greatful!
Thanks,
Rilla927
I`m a little suspicious, because as far as I`m aware svchost.exe shouldn`t run from that location.
Go and read this thread HERE and post a HJT log as an attachment.
Regards Howard
Hello,
I have a freshly installed (NOT YET ACTIVATED, i want to try it before buying) Windows 7 Ultimate SP1 x64.
The first thing i noticed was, that there is a process "svchost" which takes 25% CPU load (That's 100% for the first core) and 1,4GB RAM. What can cause this?
The other problem i encountered was, that i can't install Windows Update, .Net Framework 4.0 or "WinFuture Update Packs". Generally, have the feeling that it's anything deeper in Windows.
Can anyone help me on that problem?
Welcome to our forum styler2go.
Where did you get your copy of Windows 7 Ultimate?
Do you have the proper COA key to activate Windows 7?
Whenever i have windows automatic updates turned on, svchost uses 50% CPU and loads of memory, to solve this, the only thing i have been able to figure out is to turn off auto updates, but im sure this is very unwise, especially since checking for updates manually doesnt seem to work. is there any way around this???
thanks
As the title says, I have problems with Windows Update. I tried some fixes like: Reset_Reregister_Windows_Update_Components, Reset_Windows_Update_History, MicrosoftFixit50362 (which is a Microsoft Installer Fixer that couldn't install PowerShell), MicrosoftFixit50202. But what I really need is installing .NET Framework 4. I tried forcing it to install, installing it step by step, but it couldn't go further than .NET Framework 3.5. I need that Framework, the other updates don't really matter. And the interesting thing is that my antivirus doesn't say that Windows is not up-to-date, which is not normal, in ESET Smart Security, if Windows is not up-to-date.
If specs matter:
6 GB RAM
AMD Athlon ll X4 750K
AMD Radeon R7 240 4GB GDDR3
Vista SP2
cbs.txt:
http://www.mediafire.com/view/jsoeje0nxt30g5u/cbs.txt
I don't know how to obtain CheckSUR.log.
Hi antoniu200:
Many other Vista users have reported that Windows Update seems to get stuck at "Checking for updates..." for long periods of time, and this problem dates back to the August 2015 Patch Tuesday updates - see my screenshots in ScousaJAY's thread windows update just seems to hang while checking in the VistaForums. This month's December 2015 Patch Tuesday updates required a full hour on my machine before it finished the "Checking for updates..." phase and finally presented a list of available updates, so you might want to try running a manual Windows Update and leaving your computer alone for an hour or so to see if it eventually runs to completion.
You might also want to read Nikilet's recent thread Updates were not configured correctly in that same forum. Some Vista users, including myself, received an error message this month stating "Updates were not configured correctly. Reverting changes. Please do not turn off your computer" when they tried to install the December 2015 Patch Tuesday updates. Six updates for the Vista OS and one cumulative update for IE9 were marked as "Failed" on my machine after Windows forced an automatic rollback and re-boot of my machine. I re-ran Windows Update today and all Important updates that failed yesterday eventually installed successfully ("Checking for updates..." still took about one hour and I declined one Recommended update KB3112148 for Vista and one Optional update KB3106614 for Silver... Read more
I'm trying to add the latest updates on my Windows 8 (64-bit) laptop (Asus Q400A-BHI7N03) and the checking for updates... never completes. I've even tried leaving it over night with no success.
Any help would be greatly appreciated!
try running the Windows Update Troubleshooter:
http://go.microsoft.com/?linkid=9830262"A programmer is just a tool which converts caffeine into code"
I would like to delete the failed updates list in Windows 7 Update. I have done this in the past but forget exactly the process.
I think you go to Windows Folder-Software Distribution. After deleting everyhting in the folder., i think you are to restart the computer. Once finished the list of updates in Windows Update will be cleared.
Please correct if I am wrong. Thanks in advance for your assistance.
This is the way I suggest :
Go to start > type in cmd > right click at cmd.exe > Run as Administrator.
Type in "net stop WuAuServ" without quotes > hit enter.
Type in "start %windir%\SoftwareDistribution\DataStore" without quotes > hit enter. A folder will come up. Don't close that black window.
Rename file "DataStore" to "DataStoreold" without quotes.
Go to that black screen, Type in "net Start WuAuServ" without quotes > hit Enter. After it finished you can close it.
Now your Windows Update logs will now cleared.
Thank you.
So, I don't really know any details of what malware I may have on my computer other than its symptoms and the likelihood that it came through utorrent (which has since been taken off the computer). Basically, the problem began manifesting itself with the BSOD in Windows Vista Home Premium 32-bit. I think I have taken care of that problem. The remaining symptoms of the malware are that windows and windows defender cannot update itself. Also, I cannot download any type of anti-virus update software or even the programs themselves. The updates just say they were unsuccessful. When I attempt to do a manual install/update of anti-virus or windows updates I get a "cannot connect to webpage". Sometimes, I will be redirected from an anti-virus download site to a random unaffiliated site. When I attempt to run a free online virus scan, the update will not work and therefore there is no ability to scan.
Thanks for whatever help you can offer. Eric
Here is my DDS.txt
DDS (Version 1.1.0) - NTFSx86
Run by LeBlanc at 22:14:03.31 on Thu 01/01/2009
Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.6.0_11
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.3070.1904 [GMT -5:00]
============== Running Processes ===============
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\Syste... Read more
I'm having problems with windows update svchost.
Update will not check for updates, or downloads show 0 downloaded. Previously a whole batch were downloaded but shown as cancelled in history. One of the updates is windows 7 sp1, but it is already installed.
After stopping update, svchost keeps running and uses 50% or more of cpu, slows everything down and fan keeps running. The only way I’ve found to stop this svchost is to restart.
I have reinstalled windows and the ultimate factory reset with no luck. I have run mbytes, avast and rkill but no problems found. Also chkdsk and sfc scanow.
I have tried to find how to remedy the problem on the net, but I can’t understand it, old age I’m afraid. Can anyone help PLEASE, in plain easy to follow language
Would be very grateful
Thanks, Ron
Hi Ron,there's a chance that this is not malware, but a problem with windows updates.Could you try to install this update manually and see if that helps:https://support.microsoft.com/en-us/kb/3050265regardsmyrti
Read other 8 answersrunning win xp pro, sp3
svchost pegged at 100% for a few weeks.
I can kill the process tree and have good performance for a few hours.
microsoft update failed to install several patches.
belarc reports 6 critical patches needed.
running microsoft update takes svchost to 100%; update hangs "searching your computer for needed updates."
disabled microsoft update and reverted to windows update - same problems.
also:
malware bytes scan is clean
Avast full scan is clean
So I ran lots of spyware ... everything is clean.
In desperation I even did a Ghost image restore back 60 days.
Anytime I turn on any version of automatic updates (automatically download and install, notify only, etc) the cpu is at 100% and it shows as svchost.exe
This just started to happen with Sept updates. I have scoured the net and others are having the same issue ... but no matter what I try it does not get fixed.
BTW the Windows Update icon (the yellow shield) does not show up in the try.
I did try turning off updates and installing them via Internet Explorer but the check never comes back.
Help PLEASE.
Try the Microsoft FixIt: Fix the problem with Microsoft Windows Update that is not working
Read other 1 answershello everybody!
the title says it all: svchost is constantly using up a lot of cpu. i'm not very knowledgable when it comes to things like this, so if any of you were willing to help me, i'd appreciate it a whole lot!
i've had a problem with svchost before on another pc. and i thought i'd remebered correctly that it had something to do with the upgrade toward win10. so i unchecked the win10 box in windows update but that didn't help -.-
i've been recommended running a hijackthis-scan and uploading the info here, if i want professional help, so that's what i did. i attached the log-file to my post.
please help and thanks in advance for any replies!
edit: alright, so i did some further research on my own and i found this microsoft page, where they describe how to find out which service of svchost causes it to draw so much cpu.
http://answers.microsoft.com/en-us/windows/forum/windows_xp-performance/track-down-svc-host-high-cpu-usage/22f6b71c-4952-461c-8cbb-9b5a105964b7?auth=1
as it turns out, it was the windows update that caused the problem. looking into it, i found that the box i had unchecked (the win10 upgrade box) had a check in them again. now i'm wondering what is going on?
2nd edit: i uninstalled the update (kb3035583) that would download the win10 upgrade. now, i don't get asked about it anymore. still, svchost is constantly at 50% cpu usage. still, when i disable the windows update service, svchost cpu usage goes... Read more
On my windows 7 x86 laptop the Svchost.exe, that Windows Update runs in, starts to consume all of my laptops RAM until it can't function any longer. I've ended the process and individually checked each service, by starting and stopping, until I found that
the problem doesn't happen until I start the Windows Update service. The problem doesn't happen immediately either, after about a minute another process called: WMIprvse.exe starts and then the svchost.exe instantly jumps from using 13000-18000 KBs to 600000-800000+
KBs. My questions is: Do you guys know of a hotfix or solution to this problem?
windows update, occupies 100% of my CPU. Making my computer unstable in the extreme. I thought it was virus ... etc. But it is not, considering that my log was analyzed by TwinHeadedEagle (User forum). The process in question is in svchost.exe.
Hello friend follow these instructions.
Home
Search programs make services.
Search Windows Update, right click stop.
If you want to disable completely, right click Properties startup type to disabled.
Test to see if your problem is resolved.
I haven't been able to install any updates since jan 11 of this year. I have been on the road for a few weeks and I tried to figure out the problem once I got back.
When a update is being installed it will stall we will say at 95%. I have looked in the log files and this is what I find.
From the Application Log;
Code:
Faulting application name: TrustedInstaller.exe, version: 6.1.7601.17514, time stamp: 0x4ce7989b
Faulting module name: wcp.dll, version: 6.1.7601.17592, time stamp: 0x4da00342
Exception code: 0x80000003
Fault offset: 0x00000000001d448a
Faulting process id: 0x3ec
Faulting application start time: 0x01ccf8bae7fccb80
Faulting application path: C:\Windows\servicing\TrustedInstaller.exe
Faulting module path: C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.17592_none_672ce6c3de2cb17f\wcp.dll
Report Id: 3a7ff4f9-64ae-11e1-a405-002421577fd5
From the setup log;
Code:
Windows update "Update for Windows (KB2660075)" could not be installed because of error 2149842974 "" (Command line: ""C:\Windows\system32\wusa.exe"
"C:\Users\Les\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KXQDWOEH\Windows6.1-KB2660075-x64.msu" ")
When I try to run sfc /now or verify only I get this error;
Code:
C:\Windows\system32>sfc /verifyonly
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 10% complete.
Win... Read more
Try running the System Updates Readiness Tool.
This is the link for the 64-bit version: Download: System Update Readiness Tool for Windows 7 for x64-based Systems (KB947821) [February 2012] - Microsoft Download Center - Download Details
This Microsoft article may help too: http://support.microsoft.com/ph/6527#tab0
After installing Windows 7 Home Premium Upgrade on a new seagate 320 g hdd on a Toshiba L300 Laptop with 32 bit that had Vista with latest SP on a 120gb hdd.then installing the sp1, the windows updater will not download and install updates. As it was I had to manually download the sp1 to a flash drive from my desktop and put it on the laptop. No problems there, but was hoping it would solve the Update problem, but didn't. I get the "Fail" error codes. 1. 80070570 and 2. 8007001F. I have 52+ KB updates and not one of them will download and install. Called MS help and for two days they had me try different things. They even took control of the computer and couldn't figure it out. I checked memory and did a chkdsk on the new HDD. In desperation for trouble shooting I put the Vista HHD back in and ran updates with no problems at all then I reinstalled the 320 G HHD. I didn't have a BSOD at all. But I downloaded and installed Microsoft Security Essentials and when I did that I would get the BSOD for what ever reason. I had a hard time getting it uninstalled because as soon as you would start windows, within a few seconds I would get the BSOD. When I finally got the Security Essentials uninstalled the BSOD Went away. Have no Idea what one had to do with the other. I just want to get the updater to work. Any Help
Thanks
AGB,
Quote:
After installing Windows 7 Home Premium Upgrade on a new seagate 320 g hdd on a Toshiba L300 Laptop with 32 bit
What???
That makes zero sense.
one thing at a time.
Which computer do you want to install Win 7 on?
Do you have license?
One license = 1 machine.
1 machine = 1 license.
I'm currently on holiday and am connected through an expensive 3G modem plan. Whenever I try to connect, Windows update starts to download files. Every now and then I need to update MSE virus defs but Windows update downloads files GRR! What do I do about this pest? I just disabled the windows update service which obviously prevented me from downloading MSE defs
Have you tried setting Windows Update to not Download updates?
You could also set it to not check for updates while you are on holiday.
For MSE definitions, open MSE and update from there.
My Windows 7 update is just broken somehow. Whenever I try to manually update, I always end up with a svchost with 50% cpu usage (i.e., one core maxed out) and nothing ever finishes. It just sits there saying "Checking for updates". I've tried a number of solutions on the web - manual intallation of a couple of hotfixes Windows6.1-KB3112343-x64 and Windows6.1-KB3102810-x64, removing the Windows\SoftwareDistribution folder, and being oh so patient. Nothing has worked. It just hangs there and spins.
When I look at my update history, I see that the last update listed is KB2825645 from August 11. Nothing has come in since then.
So, I have just disabled updates totally and downloaded the cumulative ISO files from https://support.microsoft.com/en-us/kb/913086 for the missing dates.
I want to install the ones for Windows 7 64bit. Can I just install them directly, in order? I know I am going to get reboot prompts after some of them, so do I have to do it right then or can I update, say, an entire month's worth and then reboot?
A friend's PC runs properly until it is connected to the Internet, and svchost.exe uses 98% of the CPU. The problem does not happen when Windows Update is switched off - but happens again when connected to the WWW and Windows Update is connected. Programs will load from Desktop icons but Taskbar freezes.
I have run antivurus, anti adware/malware, Windows Defender, nothing found.
There is a lot about this on the Net but not simple enough for this wrinkly. Your help will be most welcome. I attach a HJT logfile.
Many thanks
wrinklysteve
OK, no replies. I thought it was probably a security issue - perhaps not. I'll try somewhere else.
Windows 7 Ultimate 64
Compaq Presario CQ62
Laptop was running very slow so I saw in Task Manager that svchost was taking up all my CPU. Found the culprit to be the Windows Update Service. I can turn it off then search for updates and watch it bog down again. I ended up disabling the service and all is well. However I would like to get this figured out so I can stay updated. Any suggestions?
Thanks
My recently bought machine has 2 GB RAM. It's HP Pavilion.
This is a freshly installed Windows using original retail disc Windows 7 Ultimate x64. With Windows update running now, it is using 1.8 GB RAM causing everything to crawl. svchost.exe alone is taking 1 GB RAM.
My question is simple, is it normal? I'm sure I installed it as normal as I have always been.
I've been using Windows 7 for years and this is the first time I've seen this kind of behavior.
Yes it's normal.
I only have two pages open on this forum and I'm using Firefox and their is a total of 1.9 gb of ram being used. I have very little running in the background.
Been having a lot of trouble with a PC. Almost a month ago, this PC was severely infected with a virus that called itself Antivirus8. I thought I had gotten rid of all the infections. There were times when I couldnt go to the Windows Update website, as the infection seemed to block me from getting there. I had that problem fixed, and now I am back to being unable to access the Windows Update website.
I am wondering if it is related to another issue I have with the PC. I have seen the following error several times: "generic host process for win32 services has encountered a problem and needs to close". Also, svchost.exe will take up nearly 100% of the CPU for long periods of time.
I received an error report (details shown in photo attached). I googled svchost.exe and the other file mentioned in the error report (ntdll.dll) in the same search. I found a bunch of forums/sites with other's troubles and solutions with the same problem I am having. Apparently, windows addressed this in one of their updates. Also, many state that the issue is related to svchost.exe trying to access updates and it is unable to. There are several suggestions by people, and I am hesitant to choose which to do, especially since most are around 3 years old. One solution suggests to run ComboFix. I wanted to run it, but ComboFix indicates that AntiVir, AOL Antivirus, and AVG need to be disabled. Antivir and AVG have been uninstalled, and I have no idea where AOL Antivirus is. I don&#... Read more
Hello, mpizzo10.My name is aommaster and I will be helping you with your log.I apologize for the delay in response we get overwhelmed at times but we are trying our best to keep up.If you have since resolved the original problem you were having, I would appreciate you letting us know. If not please perform the following below so I can have a look at the current condition of your machine.ThanksShould you still require assistance, please take note of the points below:Please track this topic by either adding it to your favourites or clicking the Options button at the top of this thread and then Track this topic.Please disable word-wrap before posting logs. This can be done by clicking Format and un-ticking the word-wrap feature in notepad. The logs that you post should be copied and pasted directly into the reply. Only attach them if requested or if they do not fit into the post.If you do not reply within 5 days, I will have to close your topic. Should you not be able to meet this, please notify me so that I will leave the topic open.Please do not install, update, or run any programs for the duration of the fix.If you do not understand the instructions I provide, please don't hesitate to ask. That's what I'm here for Please continue to reply to this topic until I give you the all clean. Just because there are no symptoms of infection doesn't mean that the computer is clean.If you are running Vista or Windows 7, please run all the fixes as an administrator. This ... Read more
Read other 3 answersHello!
Recently I have noticed that I cannot install new Windows updates, it won't even start downloading them.
Also browsing on local network and browsing internet seems sometimes slowed down.
Few days ago I noticed that the computer is a bit sluggy, and I have found that svchost.exe is spending 50% od CPU power all the time (in Task Manager I have enabled "Show processes from all users") .
I am running Windows Vista Ultimate, 32bit, SP2, hardware is:Intel Core2DUo E8400 @3.0Ghz with 4GB RAM and ATI Radeon HD 3800 series graphic card, it has 500GB HDD. It is connected to LAN.
I am using ESET Endpoint Antivirus on computer. I have also installed MBAM.
MBAM have found Hijack.Trojan.Siredef.C and have removed it.
Anyway after restart I still cannot finish Windows Update and svchost.exe is still running at 50% of CPU usage.
I tried to check the system again with MBAM again and it haven' t detected anything suspicious.
ESET Endpoint hasn't found anything.
Thank you for help in advance !
Hi, I have a problem where svhost.exe uses up all my memory within 5 minutes of starting my computer (a sony Vaio laptop running windows vista), and I have to force a shut down. I think this is associated with windows update, as my Microsoft Security Essentials does not allow me to update, and I also ran process explorer and found that the svchost.exe that uses the memory is running a number of processes including Windows Update, and the program that comes under that tree of svchost.exe is VAIO Update. I ran services.msc and set Windows Update to disabled. Now my computer runs fine, but I can no longer update windows. If anyone can give any information as to why this might be the case and how I could fix it, that would be great. Thanks.
Hi,
It's known problem with Windows Updates using much CPU. A lot of people complaining on it here: svchost.exe
Why don't you manual start windows updater?
Monday night I was cleaning with PRIVAZER when the "Quick" scan which is supposed to take 2 minutes was taking 5, so I hit STOP. Then it said WAIT UNTIL STOPPED. Well after 4 minutes I figured the heck with this and Ended the process. It had been cleaning REGISTRY at the time of shutdown. The next day I was at a website that is clean, and went to page 3 of contents then the svchost.exe SYSTEM, one of them, went up to 54% of CPU & memory was over 800,000.
I use dial-up, I connect at 43,000 BYTES per second. My download speed is usually about 4.5kb a second but has been slower since this event. Well I can, for browsing purposes end the svchost.exe SYSTEM huge uptick by cleaning with BleachBit and then it stays low. But if I attempt to update the MSE it happens again and then I can eventually update the MSE but with the svchost.exe SYSTEM using a LOT of CPU & Memory. Which makes me worry about the overheating issue. Then when trying to get Windows Updates either it says it can't connect restart or the TRUSTEDINSTALLER & the svchost.exe SYSTEM go VERY large thus preventing the updating. I was able to download from MS one of the updates but their search engine for other updates is quite poor, I did 3 RESTORE POINTS went back to Sunday and the issue was still there.
I did an MBAM scan the same day this happened and it said it was CLEAN. Now financially I don't think I can afford a new computer and since NOT very tech savvy like the Vista and DO NO... Read more
I am looking for a script to disable the annoying Windows Update notification.
For a single PC I can go ahead and turn the message off in the Action Center.
Any help with registry edit?
I've just used Windows Update (Win 7, 32-bit), and after a few reboots I see 2 extra svchost.exe processes in Process Hacker.
Any idea what they might be?
The Update has installed Microsoft .NET Framework 4.5.2 (used to have 4.5.1), and also various security updates.
Could it be that those 2 svchost.exe processes are completing some tasks of Windows Update?
If yes, is there a way to force them to finish those tasks? (Similar to ngen.exe executequeueditems for mscorsvw.exe).
Unfortunately, checking the associated Services - I still don't know which are the new ones.
I'd appreciate your help.
I believe I am infected with malware after launching an exe. I am unable to access Windows Update (http://windowsupdate.microsoft.com/) in both Firefox and IE I get cannot display or connection was reset messages when trying to launch the website. Webpages I do not choose to access are also being launched most are identified as malicious by firefox. I have also been experiencing an svchost.exe crash which stops my sound from functioning and requires a restart to correct.
I have tried a number of various programs to try and detect my infection but have had no luck yet. So far I have run Avast, AVG, SUPERAntiSpyware, Malwarebytes' Anti-Malware, Spybot - Search & Destroy.
I am hoping you will be able to help me and very appreciative.
I tried running gmer.exe four times but received a blue screen of death each time that was only displayed for an instant before the computer restarted.
When I submitted this post from my infected computer I received a connection reset message just like I do when trying to access Windows Update. I do not have trouble submitting post on other forums just here at bleepingcomputer it appears. As a result I am submitting this post from another computer but using the information created on the infected machine.
DDS (Ver_10-12-12.02) - NTFSx86
Run by Administrator at 16:19:43.00 on Mon 12/13/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_18
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2814.2088 [GMT -7:00]
... Read more
Please disregard my problem. I have reformatted my computer and this has of course taken care of the problem. Thanks.
Read other 2 answersI am running Windows Vista Home Premium (32bit) with SP2 and 4gigs of ram. I have several errors that I believe are linked to one main cause. My svchost keeps crashing (using Soluto which notifies me), I can't use Windows Update, it tells me I need to update Windows Update and it fails to do so Code 80070426.
My copy of Vista is valid and used to be activated, but now when I go to Control Panel->System it says it is not activated. I get error code 0x80070426 with that. I followed some forums about the tokens.dat file, but I couldn't find it under the folder structure they said it should be in, yet I did find it under a different folder. Not sure if I need to rename or move or restructure my folders. While it is not registered I don't seem to have lost any functionality other than I can no longer update Vista.
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.11.2
Run by Owner at 11:58:41 on 2013-01-14
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.3454.1014 [GMT -6:00]
.
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\nvvsvc.ex... Read more
Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/481726 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more
Read other answersHowdy all! As the title suggests, I am having issues with windows update.
It started only two weeks ago, when I started up and my CPU monitor said something was running high. After trial and error, I found if I stopped the Windows Updater service, the system went back to normal.
Right now it's taking 13%-20% CPU and 2GB of memory when the updater is active.
I've tried all the suggested fixes from the other threads: reinstalled KB3102810, ran sfc scannow (log attached...but in RAR version, ZIP version was 110MB). I've tried running updates and restoring hidden updates. I can access Windows Update, and it displays one recommended and 2 optional updates to install, but when I try to install those updates, Windows Update just hangs at the downloading updates status (0% downloaded after 24 hours). I ran the SURT, it crashed my system after an hour...ran out of memory...
Suggestions?
Hi,
Over the past week I've noticed my windows 7, 64 bit PC has become really sluggish. Looking in the task manager, one instance of SVCHOST is using most of the my memory, up to 6 times more than any other process. When I look at the processes that this instance is using, and systematically disabling them, it seems to resolve itself if I stop the windows update service. I have also noticed that a process called TrustedInstaller is using a high percentage of memory at times.
Is there any way to resolve this? It was running fine until this week as far as I know.
Thanks in advance.
I tried this under the Security label, thinking Trojan or Malware, but have had no response, so I'm trying here.
A friend's XP Home PC runs properly until it is connected to the Internet, and svchost.exe uses 98% of the CPU. The problem does not happen when Windows Update is switched off - but happens again when connected to the WWW and Windows Update is connected. Programs will load from Desktop icons but Taskbar freezes.
I have run antivirus, anti adware/malware, Windows Defender, nothing found.
There is a lot about this on the Net but not simple enough for this wrinkly. Your help will be most welcome. I attach an HJT logfile.
Many thanks
wrinklysteve
PS I've just spent several untroubled minutes on the Internet using Mozilla Firefox, so is the problem with Internet Explorer, ActiveX or where? TIA for any help.
Hi my name is Ken Carrier and I am new to the forums. I am currently having a problem with SVCHOST.EXE & NTDLL.DLL crashing when the computer starts. It seems that when any programs tries to update the svchost.exe crashes and the system becomes unusable. If there is anyone out there who can help me I would really appreciate it.
Hi .System manufacturer and model? What SP is installed?<<I am currently having a problem with SVCHOST.EXE & NTDLL.DLL crashing...>>What are the exact, full error messages, please?<<It seems that when any programs tries to update the svchost.exe crashes and the system becomes unusable.>>Seems unlikely that "any" program would trigger svchost.exe symptoms...since svchost.exe is used by various programs/functions. Have you tried using Process Explorer to get more specific details on which svchost process might be the problem?How to determine what services are running under a SVCHOST.EXE process - http://www.bleepingcomputer.com/tutorials/list-services-running-under-svchost.exe-process/ Louis
Read other 5 answersHello,
Unable to determine if this is an infection or not. 2 separate symptoms, but started at about the same time. 1st, the SVCHOST service is taking an inordinate amount of CPU time - 25%, pretty steady, and the computer is running hot. I've used ProcessExplorer to try to see what's running in that instance of Svchost, but it seems to vary. Inconclusive. I can shut down that instance of Svchost from TaskManager, but it starts right back up in a minute or 2.
2nd - Windows update won't run. Initially it was hanging on 0%. I tried some "remedies" I found online, including deleting the downloads folder, but that seems to have made it worse.
These are the 2 main things, plus lots of other minor disturbances in the force. (Icons missing, MBAM mysteriously uninstalled, etc).
Ran malware scans with ZoneAlarm, and Malwarebytes - nuthin.
Any help appreciated!
Windows 7 Home Premium 64 bit SP1
ZoneAlarm Security Suite 14.1
- Open Task Manager (Services) and stop (NOT disable) the "Wuauserv" Service (for Windows Update). If the high CPU drops then that's the cause.
Read other 0 answersHi, I have a problem where svhost.exe uses up all my memory within 5 minutes of starting my computer (a sony Vaio laptop running windows vista), and I have to force a shut down. I think this is associated with windows update, as my Microsoft Security Essentials does not allow me to update, and I also ran process explorer and found that the svchost.exe that uses the memory is running a number of processes including Windows Update, and the program that comes under that tree of svchost.exe is VAIO Update.
I ran services.msc and set Windows Update to disabled. Now my computer runs fine, but I can no longer update windows. If anyone can give any information as to why this might be the case and how I could fix it, that would be great. Thanks.
Hi all ,
windows update is running for ever without finishing.
I am not lazy (or so i think) so i search,found and tried the below steps:
1.Windows Update - Reset
2.https://support.microsoft.com/en-us/kb/971058
The problem still persists.
Also svchosts.exe is consuming 50% of the cpu.
I checked the related services of this svchost.exe and when i stop wuauserv windows update the cpu returns to 0% utilization .I believe although i am a newbie that this shows a problem with windows update.
Now doing what this thread says and then i will post the results.
Do not know what else to do.
Any ideas are most wellcome.
Thank you for your time reading this.
Regards,
the_observer.
Good midday,
I have an Windows Server 2003 Enterprise Edition, on this server is a exchange 2003 installed.
Since a week i get the issue that the server is really slow and i found out that svchost.exe on this server was taking all my CPU.
With Process Explorer i saw that wuaueng.dll toke all my CPU.
I've ended it multiple times but it keeps returning, within minutes its taking 100% CPU again.
When i '' disable '' the Automatic Updates service it keeps coming back and it will enable the service back to to '' automatic '' too.
I've apply'd a hotfix but this did not work, see below here what update i installed:
- Hotfix: http://www.microsoft.com/en-us/download/details.aspx?id=6153
- Information: http://support.microsoft.com/kb/927891
- Information: http://support.microsoft.com/kb/916089/en
Im using the latest Windows Update Agent: 7.6.7600.256.
The issue appears everyday at the same time, 14:25 GMT +1.
Can someone help me with this issue?
Thank you!
Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/516202 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more
Hello!
It looks like I have an issue with my computer but I’m unable to determine the cause. I have looked at some topics on the forums but found noone with the same issue so I am posting a new topic.
My issues seems a bit similar to http://www.bleepingcomputer.com/forums/t/614137/infected-svchost-windows-update-misbehaving/?hl=%2Bwindows+%2Bupdate#entry4001712 but the topic was not resolved and various different services seem to be hogging my CPU, not just windows update.
Update
After running for 4 hours and presumably being stuck (showing no signs of working) the Windows Update DISM tool (https://support.microsoft.com/en-us/kb/947821 ) seems to have finally caught up and installed some updates. I will inform about further progress in future updates.
Update II
The Microsoft tool seems to have installed all updates on my computer successfully (after running for about 5 hours), but another service (FDResPub) is "abusing" my CPU now. I will post more info later.
Introduction
I run a Windows 7 on a quadcore computer (which is a relevant information, more about that later). I use Avast! Free antivirus and most of the time my brain to protect my computer to… somewhat varying degree.
I would like to mention that I am a software developer so I use a lot of quite powerful tools (cygwin, GIT, various command line extensions, automatic scheduled tasks to simulate cron tasks on our production server and so on) which... Read more
Windows 7 updates truly suck nowdays. 25% usage means you have a quad core processor. Dual cores use 50%.
Download and install KB3153199 then do a manual update. Reboot the computer and immediately install the update. Do a manual update and wait about 15 minutes.
https://www.microsoft.com/en-us/download/details.aspx?id=52232
Edit: If the above does not get you updates install the following KB. This resolved my April update problem. The above KB3153199 resolved the May update issue. It seems this will be a monthly issue with Windows 7.
https://www.microsoft.com/en-us/download/details.aspx?id=51853
Hi,
Win 8.1
This is partly a different issue than posted (and not acknowledged) in Malware forum:
I usually disable dnsclient service because of strange connections when it's running. However I *have* to enable it when I use Windows update -- will not work without it. Also BITS, winhhtp proxy and WU are disabled until I choose to update. This is the
reason why.
1)Windows update download stalls at 62%.
2)Many connections to weird ips - anything from drupal.com to maildesignmedia.com (20+ connections with data)
3)Svchost Dcomlaunch (which also has Plug&Play) shows
--Tiworker -- embedded
--explorer.exe -- immersive and --embedded C;|windows\explorer.exe /factory.... (re-enables after process kill)
--dllhosts -- one is Connection Manager Lua Host Object -- netshell.dll
--2 instances of WmiPrvSe.exe running from root/wmi and cimv2 providers.
Any help is appreciated.
Closed since you have started a new topic here in the Malware Removal Logs forum.
Read other 1 answersWhenever I click on a link from a Google results search I get redirected to one of several cut-rate ad pages or "search" pages such as: happili.com, gimmeanswers.org, cempr.com. Sometimes I am redirected to a porn site (this almost always brings up an alert from my AVG anti-virus).
Typically, within an hour after I start windows (Vista SP2), svchost.exe (only one instance of it), crashes, the fault module is always ntdll.dll. The results from this vary in intensity, sometimes just the scroll bars and buttins and dialog boxes of various applications look odd, other times the taskbar disappears, or the Start menu frezzes. Sometimes the run command is diabled, other times almost no part of the GUI works at all (one time I tried to ctrl-alt-delete and I got a black screen with a small windows saying: Security Procedure failed to start).
I can no longer connect to Windows Update, every time I try I get error 800072efe. Often, I find the Windows Update service has been turned off, and in my Folder Options control panel, the "View Hidden Files and Folders" is deselected. hmph. little sucker knows I'm looking for it.
In short, this virus is progressively trashing my system. Prior to posting here, I ran online scans at BitDefender and ESET with no results. MalwareBytes finds nothing, nor does my daily scan with AVG. As requested, at the end of this message is the DSS.txt log, and I have attached the Attach.txt file and the GMER ark.txt file.
The first time ... Read more
while i can certainly understand that the staff here is volunteers, and that there is only so much you can do. the fact of the matter in my case, is that you left me hanging too long. the problem got so bad my computer would no longer boot, forcing me to do a clean install.
i lost most of the programs and document files i had, as a result.
chalk up a victory for the malware writers.
good day.
Hello all, I just noticed something and wanted to be sure or see if this is normal. When Windows Update checks for updates, svchost will jump up to ~500MB in usage, or after updates have been installed. It will stay there. If just checking for updates, but I don't install any, it will drop down to ~400MB, but no lower than that. Now, if I go into services and disable the Windows Update service, the memory usage drops from wherever it was at, down to ~22MB. What's with this, or is it just normal?
Hello and welcome TGMP I am not real sure as to your concerns nor am I sure if the RAM usage is unusual - to me having that much on board if it doesn't cause any issues with what you are doing then I would just forget about it.
To be honest I have never checked this on any of my machines RAM usage using anything much at all.
Nice set up by the way
Hi guys! my first real virus problem after 10 years - hope you can help!
First noticed a problem when Automatic Update got deactivated and I couldn't turn it on. Computer slowed down, couldn't download files using Firefox, which also crashed a few times unexpectedly. I looked into the services and found the file /system32\svchost.exe -k, which even to my amateur eyes looks suspicious. Searching your forums, I guessed combofix might fix the problem. So I tried that, and it seemed solved - for a day or so! Now I can't turn auto update on again. What should I do?
DDS (Ver_09-02-01.01) - FAT32x86
Run by Thomas at 18:44:42.71 on 25/02/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_11
Microsoft Windows XP Home Edition 5.1.2600.3.1252.49.1031.18.502.200 [GMT 1:00]
AV: Norton 360 *On-access scanning enabled* (Updated)
FW: Norton 360 *enabled*
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
SVCHOST.EXE
C:\WINDOWS\System32\svchost.exe -k netsvcs
SVCHOST.EXE
SVCHOST.EXE
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\Empowering Technology\admServ.exe
SVCHOST.EXE
C:\Programme\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Programme\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\... Read more
Hello Karl Fraser,Please delete ComboFix and its accompanying folder C:\Qoobox. Empty your Recycle bin and reboot your computer. Let's get a fresh copy now. This tool is not a toy. If used the wrong way you could trash your computer. Please use only under direction of a Helper. If you decide to do so anyway, please do not blame me or ComboFix.1. Download this file - combofix.exe http://download.bleepingcomputer.com/sUBs/ComboFix.exe http://www.forospyware.com/sUBs/ComboFix.exe http://subs.geekstogo.com/ComboFix.exe2. Double click combofix.exe & follow the prompts.3. When finished, it will produce a log for you. Post that log in your next reply please, along with a new HijackThis log.Note:Do not mouseclick combofix's window while it's running. That may cause it to stall.Please do this:1. Download HijackThis? here:http://www.trendsecure.com/portal/en-US/th.../hijackthis.php2. Click 'Do a System Scan and Save log'.The HJT log will open in notepad.Thanks,tea
Read other 8 answersthis doesnt really seem to be an issue as such (at least not yet), but lve noticed on both my PC and laptop that they have recently on startup started to eat ram.. and the reason lm finding it so weird is that its recently started doing it and the amount my system eats.
basically lve noticed when booting that svchost eats my ram.. on my laptop it pretty much uses 95% of the ram, l tend to average at 50% usage of the 4GB on my PC which has 8GB (until l can afford larger matched sticks) ends up using close to using around the same percentage, and l notice that it tends to be around when windows update runs on start up (or is executed manually), lve noticed a few others experiencing the issue as well quite recently on random less technical forums, so l was kinda curious if this was a wide spread thing.
tho at this second lm not overly bothered with the annoyance mainly because if l leave the system a few mins after boot the usage goes back to the levels l usually see, that said lm pretty sure this is a recent thing however because of my recent reinstall its hard to pin down to specific updates as a cause.. if l had not noticed that the ram was being freed it would bother me more.
Had the same issue myself. I believe that in my case it was caused by the latest round of windows updates that amongst other things replaced tons of important system files to fix the Freak Vulnerability. I keep disabled IE by means of a registry hack and also keep system restore disabled. Both of these settings seem to have affected windows updates installation this time round.
I did manage to fix it though. High RAM usage by svchost after windows updates usually indicates a problem with internet explorer.
What I did was roll back my system to before the updates were installed and then fixed things.
If you can't roll back your system then it might be worth trying the following but if you use Internet Explorer as your main browser let us know before going ahead.
Contol Panel > Intenet Options > Advanced > Reset > OK
Reboot.
Run IE 64bit. Show the menu bar then Tools > Intenet Options > Advanced > Reset > OK
Close IE then run Run IE 32bit. Show the menu bar then Tools > Intenet Options > Advanced > Reset > OK
Reboot.
Check for Windows Updates.
Hello,
I'm having a hard time fixing Windows update after doing two clean installs. Having tried a lot of things after the first clean install, I did another one, this time installing sp1 offline, followed by the June 2015 windows agent update, also done offline. This didn't work either. At that point I had not reinstalled my antivirus or firewalls. I've been getting a variety of errors, by far the most frequent is 800b0100, but sometimes 80244004, 80072efe, 80096004, 80072f8f, 80244019.
- I have done full virus scans with an updated Trend Micro Titanium and no issues were found.
- I've run the Windows Update diagnostic tool several times. Sometimes it says all is fixed, and sometimes it says the 800b0100 error was not fixed.
- I've run SURT, the update FixIT, SFC scan reports no issues and CheckSUR logs shows no errors.
- I've done the stop/restart sequence for the update agent, bits, and cryptographic services.
Up to very recently I would just get the update errors (one of the above). At this point (and I have no idea what made it change), I'm having the issue where it does not report the error but stays forever checking for the updates, with svchost taking 50% of my CPU, 350M of RAM, via the management instrumentation and windows update agent, even though there is no network traffic at all while this is happening.
I've pretty much tried everything I can, and was hoping to get some help from the veterans here.
When I looked at the detailed report fro... Read more
