Try my Svchosts Fix tool. Download it here http://www.ms-mvp.org/
--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.
"Rob" <Rob@discussions.microsoft.com> wrote in message
news:CA1AE9A9-6D5C-4AA2-B8ED-FEEC76EF404B@microsoft.com...
> I'm running Windows XP Home, Version 5.1, Service Pack 3 with 2GB RAM.
> When the machine is connected to the internet (no applications open), a
> svchost.exe file consumes about 90% of CPU and the machine grinds to a
> halt.
>
> Using Process Explorer I can see that the file concerned is svchost.exe
> file
> and is used to support two files, the DCOM Server Process launcher
> C:\Windows\System32\rpcss.dll file and a Terminal Services file
> ...System32\termsrv.dll.
>
> I installed RegCure to clean the registry files in an unsuccessful attempt
> to fix. I run AVG Internet Security V 8.5.432. The AVG is uptodate seems
> to
> run ok. I have minimum software installed and have seldom had virus
> issues.
>
> MS Automatic Updates has been active, although I've turned this off
> thinking
> this might be a contributor. (makes no difference).
>
> The machine is now disconnected from the internet as this is the only way
> it
> is useable!. The mahcine ran fine up to end of October 2009 and just
> progressively got worse.
>
> Any thoughts most welcome PLEASE !
svchost.exe consumes CPU memory
Moderators: DllAdmin, DLLADMIN ONLY
Re: svchost.exe consumes CPU memory
Rob wrote:
> I'm running Windows XP Home, Version 5.1, Service Pack 3 with 2GB RAM.
> When the machine is connected to the internet (no applications open),
> a svchost.exe file consumes about 90% of CPU and the machine grinds
> to a halt.
>
> Using Process Explorer I can see that the file concerned is
> svchost.exe file and is used to support two files, the DCOM Server
> Process launcher C:\Windows\System32\rpcss.dll file and a Terminal
> Services file ...System32\termsrv.dll.
>
> I installed RegCure to clean the registry files in an unsuccessful
> attempt to fix.
This is a very bad idea!!!
Programs like RegCure cause more problems than they solve. If you search
the archives of this newsgroup, you will see many examples.
Was that the only time you ran RegCure? Or did you ever run it before
this svchost.exe problem began?
> I run AVG Internet Security V 8.5.432. The AVG is
> uptodate seems to run ok. I have minimum software installed and have
> seldom had virus issues.
I used to run AVG 8.5 Free and was very happy with it (the minimum
configuration, too). However, now that I've test-driven 9.0, I avoid it
like the plague because of its horrible resource hogging.
Actually, I never ran the "Internet Security" suite. Suites, as a rule,
are problematic and can cause conflicts with other programs. You might
want to consider configuring a Clean Boot to see if AVG is causing you
problems:
http://support.microsoft.com/kb/310353
http://support.microsoft.com/kb/331796
> MS Automatic Updates has been active, although I've turned this off
> thinking this might be a contributor. (makes no difference).
>
> The machine is now disconnected from the internet as this is the only
> way it is useable!. The mahcine ran fine up to end of October 2009
> and just progressively got worse.
>
> Any thoughts most welcome PLEASE !
I ran a Google search and learned that others with your particular
symptoms had malware. Example:
http://www.pchelpforum.com/fixed-hijack ... usage.html
> I'm running Windows XP Home, Version 5.1, Service Pack 3 with 2GB RAM.
> When the machine is connected to the internet (no applications open),
> a svchost.exe file consumes about 90% of CPU and the machine grinds
> to a halt.
>
> Using Process Explorer I can see that the file concerned is
> svchost.exe file and is used to support two files, the DCOM Server
> Process launcher C:\Windows\System32\rpcss.dll file and a Terminal
> Services file ...System32\termsrv.dll.
>
> I installed RegCure to clean the registry files in an unsuccessful
> attempt to fix.
This is a very bad idea!!!
Programs like RegCure cause more problems than they solve. If you search
the archives of this newsgroup, you will see many examples.
Was that the only time you ran RegCure? Or did you ever run it before
this svchost.exe problem began?
> I run AVG Internet Security V 8.5.432. The AVG is
> uptodate seems to run ok. I have minimum software installed and have
> seldom had virus issues.
I used to run AVG 8.5 Free and was very happy with it (the minimum
configuration, too). However, now that I've test-driven 9.0, I avoid it
like the plague because of its horrible resource hogging.
Actually, I never ran the "Internet Security" suite. Suites, as a rule,
are problematic and can cause conflicts with other programs. You might
want to consider configuring a Clean Boot to see if AVG is causing you
problems:
http://support.microsoft.com/kb/310353
http://support.microsoft.com/kb/331796
> MS Automatic Updates has been active, although I've turned this off
> thinking this might be a contributor. (makes no difference).
>
> The machine is now disconnected from the internet as this is the only
> way it is useable!. The mahcine ran fine up to end of October 2009
> and just progressively got worse.
>
> Any thoughts most welcome PLEASE !
I ran a Google search and learned that others with your particular
symptoms had malware. Example:
http://www.pchelpforum.com/fixed-hijack ... usage.html
-
"thee chicago wolf
- Posts: 6
- Joined: 27 Feb 2009, 00:00
Re: svchost.exe consumes CPU memory
>I'm running Windows XP Home, Version 5.1, Service Pack 3 with 2GB RAM.
>When the machine is connected to the internet (no applications open), a
>svchost.exe file consumes about 90% of CPU and the machine grinds to a halt.
>
>Using Process Explorer I can see that the file concerned is svchost.exe file
>and is used to support two files, the DCOM Server Process launcher
>C:\Windows\System32\rpcss.dll file and a Terminal Services file
>...System32\termsrv.dll.
>
>I installed RegCure to clean the registry files in an unsuccessful attempt
>to fix. I run AVG Internet Security V 8.5.432. The AVG is uptodate seems to
>run ok. I have minimum software installed and have seldom had virus issues.
>
>MS Automatic Updates has been active, although I've turned this off thinking
>this might be a contributor. (makes no difference).
>
>The machine is now disconnected from the internet as this is the only way it
>is useable!. The mahcine ran fine up to end of October 2009 and just
>progressively got worse.
>
>Any thoughts most welcome PLEASE !
This is indicative of another process or processes being launched by
svchost so my guess is you have gobs of stuff running in the
background. Go and grab Process Explorer (free) and fire it up. It
will show you what sub-processes are being launched under svchost.exe
and then you can see very clearly the offending CPU hog. Post back
with your findings.
You could try the following hotfix :
http://support.microsoft.com/kb/897571
Don't be fooled by the date, the hotfix will install svchost.exe
version 5.1.2600.5689 which is newer than what is in SP3.
>When the machine is connected to the internet (no applications open), a
>svchost.exe file consumes about 90% of CPU and the machine grinds to a halt.
>
>Using Process Explorer I can see that the file concerned is svchost.exe file
>and is used to support two files, the DCOM Server Process launcher
>C:\Windows\System32\rpcss.dll file and a Terminal Services file
>...System32\termsrv.dll.
>
>I installed RegCure to clean the registry files in an unsuccessful attempt
>to fix. I run AVG Internet Security V 8.5.432. The AVG is uptodate seems to
>run ok. I have minimum software installed and have seldom had virus issues.
>
>MS Automatic Updates has been active, although I've turned this off thinking
>this might be a contributor. (makes no difference).
>
>The machine is now disconnected from the internet as this is the only way it
>is useable!. The mahcine ran fine up to end of October 2009 and just
>progressively got worse.
>
>Any thoughts most welcome PLEASE !
This is indicative of another process or processes being launched by
svchost so my guess is you have gobs of stuff running in the
background. Go and grab Process Explorer (free) and fire it up. It
will show you what sub-processes are being launched under svchost.exe
and then you can see very clearly the offending CPU hog. Post back
with your findings.
You could try the following hotfix :
http://support.microsoft.com/kb/897571
Don't be fooled by the date, the hotfix will install svchost.exe
version 5.1.2600.5689 which is newer than what is in SP3.
-
pa bear [ms mvp]
- Posts: 117
- Joined: 01 Mar 2009, 00:00
Re: svchost.exe consumes CPU memory
> I installed RegCure...
If you ever think your Registry needs to be cleaned, repaired, boosted,
tuned-up, or optimized (it doesn't), read
http://aumha.net/viewtopic.php?t=28099 and draw your own conclusions.
> ...I run AVG Internet Security V 8.5.432. The AVG is uptodate seems to
> run ok. I have minimum software installed and have seldom had virus
> issues.
Seldom? Well, I think you've got another one now...
NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!
Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/defau ... =7552&st=1
Also available via...
Consumer Security Support home page
https://consumersecuritysupport.microsoft.com/
Otherwise...
1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwa ... fault.mspx
NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.
2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm
2b. Vista or Win7=> Run this scan instead:
http://onecare.live.com/site/en-us/center/whatsnew.htm
3. Now run a thorough check for hijackware, including posting requested logs
in an appropriate forum, not here.
Checking for/Help with Hijackware:
?
If you ever think your Registry needs to be cleaned, repaired, boosted,
tuned-up, or optimized (it doesn't), read
http://aumha.net/viewtopic.php?t=28099 and draw your own conclusions.
> ...I run AVG Internet Security V 8.5.432. The AVG is uptodate seems to
> run ok. I have minimum software installed and have seldom had virus
> issues.
Seldom? Well, I think you've got another one now...
NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!
Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/defau ... =7552&st=1
Also available via...
Consumer Security Support home page
https://consumersecuritysupport.microsoft.com/
Otherwise...
1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwa ... fault.mspx
NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.
2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm
2b. Vista or Win7=> Run this scan instead:
http://onecare.live.com/site/en-us/center/whatsnew.htm
3. Now run a thorough check for hijackware, including posting requested logs
in an appropriate forum, not here.
Checking for/Help with Hijackware:
?