svchost.exe and 100% cpu usage

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

GrapesKennedy - 23 Oct 2006 04:49 GMT

Similar problem to what I have found in these topics, but the various
solutions offered and my limited understanding of services etc have prevented
me from fixing it. Specifically, running XP HOME SP 2, when a certain user
logs on, machine very slow, cpu usage 100% by svchost.exe, and it is utilzing
at least half of the installed RAM. Interestingly enough, it appears to be
user specific if that is possible. Checks clean for viruses and spyware.

If anyone has any suggestions or can point me to a useful KB article that
can clear this up, would appreciate it. Machine almost useless. Desire
start to complete and have machine available for use, vice using 100 percent
of CPU to run svchost.exe.

Thanks very much.

Ed

Reply to this Message

Gerry Cornell - 23 Oct 2006 16:43 GMT

Download Process Explorer.

For further information about Process Explorer see here:
http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

To ascertain which service is causing the problem select the svchost
producing the high CPU usage, right click,
select Properties, Services. Note there are the full names and
some explanation of what each service does.

You will find further information on Services here:
http://majorgeeks.com/page.php?id=12

To trace the particular Service involved you need to turn off each
service in turn and then restore it noting what effect it has on CPU
usage. However, you need to take care and watch what other Services are
dependent on that service. When you click on the Dependencies tab allow
it a little time to display the information.

Signature

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

> Similar problem to what I have found in these topics, but the various
> solutions offered and my limited understanding of services etc have
[quoted text clipped - 16 lines]
>
> Ed

Reply to this Message

Nick - 24 Oct 2006 21:43 GMT

Then consider downloading Microsoft RATTV3. (see paste at bottom)

http://www.microsoft.com/whdc/DevTools/tools/RATT.mspx

I just posted a similar issue above including a link to some RATTV3 output.
Hopefully an expert will contribute an intepretation. Good luck!

Nick

RATTV3 is a tool for auditing the execution times of interrupt service
routines (ISRs), deferred procedure calls (DPCs), and timer DPCs on systems
that are running Windows XP. RATTV3 is designed to help developers of
drivers and other kernel mode components audit the ISR and DPC execution
time of their components. This tool will help developers minimize ISR and
DPC execution time and meet upcoming requirements for Windows Vista.

> Download Process Explorer.
>
[quoted text clipped - 35 lines]
>>
>> Ed

Reply to this Message

GrapesKennedy - 25 Oct 2006 05:45 GMT

Gerry,

Thanks very much for the assistance. I have downloaded Process Explorer
v10.2 and do not see a "Dependencies" Tab after clicking down to services.
I must be missing it somewhere.

I am still trying to find the culprit, it seems the problem is on log on and
after a certain period the cpu frees up. Thanks again for the advice, and I
will post if I find out anything.

Regards,
Ed

> Download Process Explorer.
>
[quoted text clipped - 35 lines]
> >
> > Ed

Reply to this Message

Alec S. - 25 Oct 2006 17:59 GMT

> Thanks very much for the assistance. I have downloaded Process Explorer
> v10.2 and do not see a "Dependencies" Tab after clicking down to services.
[quoted text clipped - 3 lines]
> after a certain period the cpu frees up. Thanks again for the advice, and I
> will post if I find out anything.

You'll find the dependencies tab in the services MMC snap in: Run->services.msc. Double-click the service in question and select
the tab.

Signature

Alec S.
news/alec->synetech/cjb/net

Reply to this Message

Bikini Browser - 25 Oct 2006 19:05 GMT

I tryed that link for Process Explorer v10.2 and it does not work. Page
cannot be found. Any more ideas?

Dale

> Gerry,
>
[quoted text clipped - 54 lines]
>> >
>> > Ed

Reply to this Message

Alec S. - 25 Oct 2006 19:21 GMT

> I tryed that link for Process Explorer v10.2 and it does not work. Page
> cannot be found. Any more ideas?

http://www.sysinternals.com/Utilities/ProcessExplorer.html

Signature

Alec S.
news/alec->synetech/cjb/net

Reply to this Message

GrapesKennedy - 27 Oct 2006 05:47 GMT

Followed your plan and determinde that Windows Automatic update "wuauserv"
was the culprit. It started about 1 minute into the startup process after
log on and sucks up 100% of cpu processing for a good 3 minutes. Has no
dependencies so it can be disabled at will.

Do not know if it is designed to operate that way (has not done so in the
past) and I should just tell my wife to log on and go get a cup of coffee or
I should just disable it and only start it up when I look for updates.

In any case, I appreciate the help.

Best regards,
Ed

> Download Process Explorer.
>
[quoted text clipped - 35 lines]
> >
> > Ed

Reply to this Message

Gerry Cornell - 27 Oct 2006 07:26 GMT

Ed

This suggestion may be appropriate.

Start, Control Panel, Automatic Updates. Uncheck Automatic Updates
(Recommended) and check option to Notify me but don't automatically
download or install them. Note this means you get a reminder in the
Notification Area of the Task Bar.

Signature

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

> Followed your plan and determinde that Windows Automatic update "wuauserv"
> was the culprit. It started about 1 minute into the startup process after
[quoted text clipped - 10 lines]
> Best regards,
> Ed

Reply to this Message

anderc - 31 Jan 2007 14:52 GMT

I have found that the Automatic Updates service is a major factor to the
svchost.exe issue. Tests that I have run successfully indicate that if the
Automatic Updates service is turned off, the svchost.exe issue does not
occur. I have chosed to set this service to Manual. I turn it on only when
I want to update my system with current patches. This change has
significantly affected the performance of the systems I run.

> Similar problem to what I have found in these topics, but the various
> solutions offered and my limited understanding of services etc have prevented
[quoted text clipped - 11 lines]
>
> Ed

Reply to this Message