svchost.exe hogging my CPU
in [Anti-Virus]
|
Prev: Free AV from AOL
Next: Run virus check from floppy
From: -Nisko- on 28 Aug 2006 20:56 Hi! I've been researching this issue and I found that it's not new. However, I haven't found the cause and it seems some things work for some people - and some don't. Is your fix a sure thing? What causes this problem? Thanks...... "thecreator" <thecreator(a)comcast.net> wrote in message news:RuednWHyuMp_Gm7ZnZ2dnUVZ_tidnZ2d(a)comcast.com... Hi Nisko, Plug and Play Set to Manual SSDP Discovery Service Set to Manual Universal Plug and Play Device Host Set to Automatic Go into Services and changes the above Services. Reboot. -- thecreator "-Nisko-" <rmo555(a)cox.net> wrote in message news:LZKIg.3499$Zm1.1472(a)dukeread02... > For the past week or so, one instance of svchost has been hogging 70% to > 90% > of my CPU. I have tried many ways to find the culprit to no avail. Once > in > a while, when I boot, it doesn't happen - but, most of the time, it does > happen. The result is that my PC becomes extremely sluggish - so slow > that > it's unusable. I use McAfee anti-virus and a variety of spyware finders - > and the Microsoft Windows Malicious Software Removal Tool. None of these > has found anything unusual going on. All my signatures are up to date. > Can > anyone help me rid my PC of this issue? Thanks....... > >
From: -Nisko- on 28 Aug 2006 20:59 I used Process Explorer - and svchost is only in the system32 folder. BTW, what does %windir% mean? In other words, how do I interpret something inside % marks? Thanks..... "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message news:AbMIg.5282$4O4.1548(a)trnddc02... > From: "-Nisko-" <rmo555(a)cox.net> > > | For the past week or so, one instance of svchost has been hogging 70% to > 90% > | of my CPU. I have tried many ways to find the culprit to no avail. > Once in > | a while, when I boot, it doesn't happen - but, most of the time, it does > | happen. The result is that my PC becomes extremely sluggish - so slow > that > | it's unusable. I use McAfee anti-virus and a variety of spyware > finders - > | and the Microsoft Windows Malicious Software Removal Tool. None of > these > | has found anything unusual going on. All my signatures are up to date. > Can > | anyone help me rid my PC of this issue? Thanks....... > | > > Use the SysInternals ProcessExplorer and determine if SVCHOST.EXE is > executed in a location > OTHER than %windir%\system32 > > http://www.sysinternals.com/Utilities/ProcessExplorer.html > > If you find SVCHOST.EXE running in a different location, then its malware. > > Look at "thecreator's" answers for possible resource hoggers. > > -- > Dave > http://www.claymania.com/removal-trojan-adware.html > http://www.ik-cs.com/got-a-virus.htm > >
From: -Nisko- on 28 Aug 2006 21:01 Also, by changing the settings as you suggest, what does that do? What should I look out for? "thecreator" <thecreator(a)comcast.net> wrote in message news:RuednWHyuMp_Gm7ZnZ2dnUVZ_tidnZ2d(a)comcast.com... Hi Nisko, Plug and Play Set to Manual SSDP Discovery Service Set to Manual Universal Plug and Play Device Host Set to Automatic Go into Services and changes the above Services. Reboot. -- thecreator "-Nisko-" <rmo555(a)cox.net> wrote in message news:LZKIg.3499$Zm1.1472(a)dukeread02... > For the past week or so, one instance of svchost has been hogging 70% to > 90% > of my CPU. I have tried many ways to find the culprit to no avail. Once > in > a while, when I boot, it doesn't happen - but, most of the time, it does > happen. The result is that my PC becomes extremely sluggish - so slow > that > it's unusable. I use McAfee anti-virus and a variety of spyware finders - > and the Microsoft Windows Malicious Software Removal Tool. None of these > has found anything unusual going on. All my signatures are up to date. > Can > anyone help me rid my PC of this issue? Thanks....... > >
From: David H. Lipman on 28 Aug 2006 21:21 From: "-Nisko-" <rmo555(a)cox.net> | I used Process Explorer - and svchost is only in the system32 folder. BTW, | what does %windir% mean? In other words, how do I interpret something | inside % marks? Thanks..... | Text inside the %% are names of environmental variables. For example; %windir% will point to c:\windows or c:\winnt (or other location) as the base Win32 folder depending upon thye OS and what was chosen %tmp% and %TEMP% Point to the TEMPorary folder Open a Command Prompt and type; set and then hist the enter key. You will see a list of commonly displayed environmental variables. They can be used within a Command Prompt, at; Start --> Run , within BAT and CMD files, within LNK files, etc. The important concept is that SVCHOST.EXE was the legitimate OS version and thus it in itself is not malware and if SVCHOST.EXE is bringing the CPU utilization up aroun 99% then one of the services it is serving up has a problem. Using ProcessExplorer you will see what each running version of SVCHOST.EXE is serving up. -- Dave http://www.claymania.com/removal-trojan-adware.html http://www.ik-cs.com/got-a-virus.htm
From: thecreator on 28 Aug 2006 21:41
Hi Nisko, I was told to have the Startup Icon load or be displayed at Boot to disabled both SSDP Discovery Service and Universal Plug and Play Device Host. When I did that, on reboot SVCHOST.EXE CPU Usage was very high. I could not do a thing. Once I changed them to Manual Starting at least, and started them manually, the CPU Usage dropped. Do this: Open Task Manager and double-click on CPU. Purpose to sort Processes by CPU Usage and bring the Processes that are using the CPU to the top. Next Open Services and scroll down until you locate and find the status of them. Whether they are disabled or Manual or Automatic. You can only open one at a time, but the next time it occurs with High CPU Usage, open Task Manager and open Services. Start the process(es) and see what effect it has on your computer and CPU Usage. Remember, you aren't deleting anything, just changing how the Services start. So it really can't hurt your computer. -- thecreator "-Nisko-" <rmo555(a)cox.net> wrote in message news:zhMIg.3511$Zm1.2376(a)dukeread02... > Hi! I've been researching this issue and I found that it's not new. > However, I haven't found the cause and it seems some things work for some > people - and some don't. Is your fix a sure thing? What causes this > problem? Thanks...... > > > "thecreator" <thecreator(a)comcast.net> wrote in message > news:RuednWHyuMp_Gm7ZnZ2dnUVZ_tidnZ2d(a)comcast.com... > Hi Nisko, > > Plug and Play Set to Manual > SSDP Discovery Service Set to Manual > Universal Plug and Play Device Host Set to Automatic > > Go into Services and changes the above Services. Reboot. > > > -- > thecreator > > > "-Nisko-" <rmo555(a)cox.net> wrote in message > news:LZKIg.3499$Zm1.1472(a)dukeread02... >> For the past week or so, one instance of svchost has been hogging 70% to >> 90% >> of my CPU. I have tried many ways to find the culprit to no avail. Once >> in >> a while, when I boot, it doesn't happen - but, most of the time, it does >> happen. The result is that my PC becomes extremely sluggish - so slow >> that >> it's unusable. I use McAfee anti-virus and a variety of spyware finders - >> and the Microsoft Windows Malicious Software Removal Tool. None of these >> has found anything unusual going on. All my signatures are up to date. >> Can >> anyone help me rid my PC of this issue? Thanks....... >> >> > > |