svchost.exe hogging my CPU
in [Anti-Virus]
|
Prev: Free AV from AOL
Next: Run virus check from floppy
From: thecreator on 28 Aug 2006 21:47 If you are using Windows XP in default mode, where XP hides the Startup Icons, this will restore the missing icons. -- thecreator "-Nisko-" <rmo555(a)cox.net> wrote in message news:XlMIg.3513$Zm1.1560(a)dukeread02... > Also, by changing the settings as you suggest, what does that do? What > should I look out for? > > > "thecreator" <thecreator(a)comcast.net> wrote in message > news:RuednWHyuMp_Gm7ZnZ2dnUVZ_tidnZ2d(a)comcast.com... > Hi Nisko, > > Plug and Play Set to Manual > SSDP Discovery Service Set to Manual > Universal Plug and Play Device Host Set to Automatic > > Go into Services and changes the above Services. Reboot. > > > -- > thecreator > > > "-Nisko-" <rmo555(a)cox.net> wrote in message > news:LZKIg.3499$Zm1.1472(a)dukeread02... >> For the past week or so, one instance of svchost has been hogging 70% to >> 90% >> of my CPU. I have tried many ways to find the culprit to no avail. Once >> in >> a while, when I boot, it doesn't happen - but, most of the time, it does >> happen. The result is that my PC becomes extremely sluggish - so slow >> that >> it's unusable. I use McAfee anti-virus and a variety of spyware finders - >> and the Microsoft Windows Malicious Software Removal Tool. None of these >> has found anything unusual going on. All my signatures are up to date. >> Can >> anyone help me rid my PC of this issue? Thanks....... >> >> > >
From: -Nisko- on 28 Aug 2006 21:48 Thank you...... "thecreator" <thecreator(a)comcast.net> wrote in message news:ZM6dnQwYkpz8Bm7ZnZ2dnUVZ_smdnZ2d(a)comcast.com... Hi Nisko, I was told to have the Startup Icon load or be displayed at Boot to disabled both SSDP Discovery Service and Universal Plug and Play Device Host. When I did that, on reboot SVCHOST.EXE CPU Usage was very high. I could not do a thing. Once I changed them to Manual Starting at least, and started them manually, the CPU Usage dropped. Do this: Open Task Manager and double-click on CPU. Purpose to sort Processes by CPU Usage and bring the Processes that are using the CPU to the top. Next Open Services and scroll down until you locate and find the status of them. Whether they are disabled or Manual or Automatic. You can only open one at a time, but the next time it occurs with High CPU Usage, open Task Manager and open Services. Start the process(es) and see what effect it has on your computer and CPU Usage. Remember, you aren't deleting anything, just changing how the Services start. So it really can't hurt your computer. -- thecreator "-Nisko-" <rmo555(a)cox.net> wrote in message news:zhMIg.3511$Zm1.2376(a)dukeread02... > Hi! I've been researching this issue and I found that it's not new. > However, I haven't found the cause and it seems some things work for some > people - and some don't. Is your fix a sure thing? What causes this > problem? Thanks...... > > > "thecreator" <thecreator(a)comcast.net> wrote in message > news:RuednWHyuMp_Gm7ZnZ2dnUVZ_tidnZ2d(a)comcast.com... > Hi Nisko, > > Plug and Play Set to Manual > SSDP Discovery Service Set to Manual > Universal Plug and Play Device Host Set to Automatic > > Go into Services and changes the above Services. Reboot. > > > -- > thecreator > > > "-Nisko-" <rmo555(a)cox.net> wrote in message > news:LZKIg.3499$Zm1.1472(a)dukeread02... >> For the past week or so, one instance of svchost has been hogging 70% to >> 90% >> of my CPU. I have tried many ways to find the culprit to no avail. Once >> in >> a while, when I boot, it doesn't happen - but, most of the time, it does >> happen. The result is that my PC becomes extremely sluggish - so slow >> that >> it's unusable. I use McAfee anti-virus and a variety of spyware >> finders - >> and the Microsoft Windows Malicious Software Removal Tool. None of these >> has found anything unusual going on. All my signatures are up to date. >> Can >> anyone help me rid my PC of this issue? Thanks....... >> >> > >
From: -Nisko- on 28 Aug 2006 21:51 Thanks...it's a little clearer now - but to understand it better, I'll have to experiment like you suggested with the Command Prompt. "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message news:MEMIg.1458$N84.973(a)trnddc08... > From: "-Nisko-" <rmo555(a)cox.net> > > | I used Process Explorer - and svchost is only in the system32 folder. > BTW, > | what does %windir% mean? In other words, how do I interpret something > | inside % marks? Thanks..... > | > > > Text inside the %% are names of environmental variables. > > For example; > %windir% > will point to c:\windows or c:\winnt (or other location) as the base > Win32 folder > depending upon thye OS and what was chosen > > %tmp% and %TEMP% > Point to the TEMPorary folder > > Open a Command Prompt and type; set and then hist the enter key. > You will see a list of commonly displayed environmental variables. > > They can be used within a Command Prompt, at; Start --> Run , within BAT > and CMD files, > within LNK files, etc. > > The important concept is that SVCHOST.EXE was the legitimate OS version > and thus it in > itself is not malware and if SVCHOST.EXE is bringing the CPU utilization > up aroun 99% then > one of the services it is serving up has a problem. > > Using ProcessExplorer you will see what each running version of > SVCHOST.EXE is serving up. > > -- > Dave > http://www.claymania.com/removal-trojan-adware.html > http://www.ik-cs.com/got-a-virus.htm > >
From: Duane Arnold "Do forget about on 28 Aug 2006 22:27 Vanguard wrote: > "Duane Arnold" <"Do forget about it"@PleaeDo.BET> wrote in message > news:wILIg.14914$xp2.9285(a)newsread1.news.pas.earthlink.net... > >> -Nisko- wrote: >> >>> For the past week or so, one instance of svchost has been hogging 70% >>> to 90% of my CPU. I have tried many ways to find the culprit to no >>> avail. Once in a while, when I boot, it doesn't happen - but, most >>> of the time, it does happen. The result is that my PC becomes >>> extremely sluggish - so slow that it's unusable. I use McAfee >>> anti-virus and a variety of spyware finders - and the Microsoft >>> Windows Malicious Software Removal Tool. None of these has found >>> anything unusual going on. All my signatures are up to date. Can >>> anyone help me rid my PC of this issue? Thanks....... >> >> >> You can use Process Explorer and look at the SVchost.exe and see >> what's running with it, a hidden process. Svchost.exe is the host >> process, whether that by malware or a legit process. You can use PE >> to see what processes SVChost.exe is hosting. >> >> http://www.vernalex.com/guides/malware/tools.shtml >> >> If svchost.exe is not running out of the Winnt/system32 directory, >> then it's a Trojan. >> >> Go to the area about Process Explorer and learn how to use it to look >> at running processes. It may not even be malware that's causing the >> problem too and you can see all processes running with a host process >> such as an (exe). >> >> Duane :) > > > > For Process Explorer and other system tools, tis probably best to go to > http://www.sysinternals.com to get them directly from SysInternals > instead of some 3rd party site. For the most part I would agree, but for a novice with such software, one doesn't know how to use it and sysinternals doesn't explain it at all. This site shows very well how to use the solution, which I have gotten tired of showing the how to use it. So, I'll continue to use this site. Besides, MS brought out sysinternals so I don't know how long systintranls is going to be around. Duane :)
From: Vanguard on 28 Aug 2006 22:45
"Duane Arnold" <"Do forget about it"@PleaeDo.BET> wrote in message news:wCNIg.2662$xQ1.1119(a)newsread3.news.pas.earthlink.net... > Vanguard wrote: >> "Duane Arnold" <"Do forget about it"@PleaeDo.BET> wrote in message >> news:wILIg.14914$xp2.9285(a)newsread1.news.pas.earthlink.net... >> >> For Process Explorer and other system tools, tis probably best to >> go to http://www.sysinternals.com to get them directly from >> SysInternals instead of some 3rd party site. > <snip> > Besides, MS brought out sysinternals so I don't know how long > systintranls is going to be around. Oh oh. Better download all the SysInternal tools before Microsoft vaporizes them. Microsoft bought WinInternals who sponsors SysInternals so, yeah, the SysInternals stuff could just disappear since Microsoft only needs to comply with existing contracts with paying *customers* of WinInternals. |