Jump to content

svchost.exe eating up cpu (99%)

Recommended Posts

hi guys me posting agen lol i have a problem that i think is quite common with windows xp sp2  every so often for no apparent reason one of the svchost.exe processes running in task manager window is really hammering my cpu and makes it impossible to do anything else until its finished doing whatever it is its doing. now my mate says that svchost.exe is a service host and aloows many other vital windows processes to function such as sound etc. combined with my low internet speed is this a virus? is there any way i can  look into whats is using the host and see if the process is legit eg windows update or summat?

my specs are

amd sempron 2400+

512 ddr ram (400mhz)

3dfx nvidia geforce 6200 pci graphics card( a b*tch to get working)

d-link gigabit ethernet card

running windows xp sp2

(yes i know its rubbish but i am a poor student who wastes his money on partying lol)

Link to post
Share on other sites

Sounds like a virus/trojan/spyware...

If you boot into safe mode, does it still use the same resources?

Try running multiple online scans if you can.  It is possible whatever virus/trojan you have may not be detected by your AV, or it has disabled it somehow.

http://www.sysinfo.org/startuplist.php?filter=svchost.exe Check that link out, if may help you better determine the problem.

Link to post
Share on other sites

interestingly i have just plugged into a different socket on the router and i am now running faster. however i am in safe mode so any trojan/spyware/viruses wont be running. so my svchost doesn't glitch. hmm ill post again with speed in normal running mode

heres my safemode stats  Your connection is: 512 Kbps or 0.5 Mbps

You downloaded at: 63 kB/s

You are running: 9 times faster than 56K and can download 1 megabyte in 16.25 second(s)

Member Ident:Username:paulC1986 CompID:7535454292

Test Time:: 2007/05/08 - 6:05pm

Test Browser and OS info: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv: Gecko/20070309 Firefox/

Test ID: GUX9VW364 (if this is a screenshot go to testmy.net to see if this is fake)

Diagnosis ^info^: May need help : running at only 18.98 % of your hosts average (ntl.com)

This was tested from a 579 kB file and took 9.265 seconds to complete

Link to post
Share on other sites

ive got the bugger!!! right i installed process explorer to examine the process tree of  the svchost.exe in question(luckilly it was running at 99percent  cpu so i found the right one. the pid of the svchost in question is PID1396.

the sub processes running within it are all from system 32 and are all legit processes, i checked by disabling the process, my theme  went back to  a very retro looking windows and a few other things went wrong

coz id just killed processes that were needed. there is one process path cwindowspchealthhelpctrpchsvc.dll  im fairly certain this is the culprit and was wondering if anyone has any idea how i get rid of it do i delete  or what?

Link to post
Share on other sites

scratch that i think if got it  i was reading around and it appears that this is the reusult of a memory leak  the hostile thread is ntdll.dll!RtlAllocateHeap+0x18c

i also read that this is a normal sytem thread related to windows update , solution disable windows updates. i will keep my eyes open for a patch fix and let you guys know from here

Link to post
Share on other sites

svchost.exe stresses the cpu when looking for updates. It's a common thing and is very noticeable on single core cpu's. It also uses a hefty amount of RAM when doing so.

Normally, if you have updates set to "Check for updates but let me choose whether to download or install them", it performs the task when you first boot up your system.

If you have updates set to "Install updates automatically (recommended)", it checks on boot up as well as the schedule you have specified.

Note: Be sure that the process isn't scvhost.exe (notice it's scv not svc). I was infected with that virus before and just decided to format/fresh install. It was very annoying and hard to get rid of. :angry:

Link to post
Share on other sites
  • 2 weeks later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Create New...