Something in SVCHost is driving me up to 100% CPU usage ever 15 seconds.

sloandez

Junior Member
Jul 13, 2005
2
0
0
You can download the free process explorer from www.sysinternals.com.
That will let you see which specific item is creating the cpu usage.
Once you know that you can activate services.msc and stop the
process to prove it. Caution: stopping a process can cause some interesting
results if it is a critical process. The best list of processes/services and
how they can be set is found in Black Viper Windows 2000 services and
configuration pdf. You can get it at http://www.dead-eye.net/WinXP%20Services.htm

Give that a try.
 

bsobel

Moderator Emeritus<br>Elite Member
Dec 9, 2001
13,346
0
0
Originally posted by: sloandez
You can download the free process explorer from www.sysinternals.com.
That will let you see which specific item is creating the cpu usage.
Once you know that you can activate services.msc and stop the
process to prove it. Caution: stopping a process can cause some interesting
results if it is a critical process. The best list of processes/services and
how they can be set is found in Black Viper Windows 2000 services and
configuration pdf. You can get it at http://www.dead-eye.net/WinXP%20Services.htm

Give that a try.

"The best list eh" Not really, following advice from black viper results in the person showing up here asking how to fix their system. Search here about him, but seriously don't follow any advice he gives.
 

imported_Tick

Diamond Member
Feb 17, 2005
4,682
1
0
Originally posted by: bsobel
Originally posted by: sloandez
You can download the free process explorer from www.sysinternals.com.
That will let you see which specific item is creating the cpu usage.
Once you know that you can activate services.msc and stop the
process to prove it. Caution: stopping a process can cause some interesting
results if it is a critical process. The best list of processes/services and
how they can be set is found in Black Viper Windows 2000 services and
configuration pdf. You can get it at http://www.dead-eye.net/WinXP%20Services.htm

Give that a try.

"The best list eh" Not really, following advice from black viper results in the person showing up here asking how to fix their system. Search here about him, but seriously don't follow any advice he gives.

So what do you suggest?
 

imported_Tick

Diamond Member
Feb 17, 2005
4,682
1
0
Aha! It's actually a phantom svchost.exe, pretending to be the real one, and that is the one causing the problems.
 

imported_Tick

Diamond Member
Feb 17, 2005
4,682
1
0
Originally posted by: Tick
Aha! It's actually a phantom svchost.exe, pretending to be the real one, and that is the one causing the problems.

Edit: No it's not, because killing it disabled sound....

Edit: Crap, wrong button.
 

scottws

Senior member
Oct 29, 2002
468
0
0
Originally posted by: bsobel
"The best list eh" Not really, following advice from black viper results in the person showing up here asking how to fix their system. Search here about him, but seriously don't follow any advice he gives.

No kidding. I did some of his recommended stuff, and then a year or so later was finding I couldn't do things like Remote Assistance and other things and I couldn't remember how to turn it all back on.
 

Nothinman

Elite Member
Sep 14, 2001
30,672
0
0
Edit: No it's not, because killing it disabled sound....

There's a command (tasksvc?) that will show you what service threads are in each svchost process, it won't tell you which one is causing the problem but it'll give you somewhere to look.
 

imported_Tick

Diamond Member
Feb 17, 2005
4,682
1
0
Originally posted by: Nothinman
Edit: No it's not, because killing it disabled sound....

There's a command (tasksvc?) that will show you what service threads are in each svchost process, it won't tell you which one is causing the problem but it'll give you somewhere to look.

Yeah, I used process explorer, and I can see what processes are in their, but they all seem to be legit, and I shut em down one by one, but aparently the one that is causing the problems can't be shut down, as it is being used actively by other programs. I am begining to think that it's malware hiding in a legitmate copy of svchost, but all my efforts to find it have failed.
 

imported_Tick

Diamond Member
Feb 17, 2005
4,682
1
0
Originally posted by: Nothinman
Yeah, tried that, but they are all legitimate process I need.

That's irrelevant, one of them has to be the culprit.

So what do I do about that? Abviously they're not designed to use up this much cpu time, but turning them off turns off my sound or other bad things. So how do I fix it?
 

Thor86

Diamond Member
May 3, 2001
7,886
7
81
Go into Run and type MSCONFIG.

And go the the startup tab. Disable anything that you don't need.
 

imported_Tick

Diamond Member
Feb 17, 2005
4,682
1
0
Originally posted by: l Thomas l
Start > Run > services.msc

Use these two sites:
http://www.beemerworld.com/tips/servicesxp.htm (easier to use because it has all of them in a table)
http://www.theeldergeek.com/services_guide.htm (more detailed, use this one second, if there are any you are unsure about)

They have worked well for me and I have no problems right now.

Tried that, no dice. I disabled everything I could, and I still have the same problem. If it helps, the specific thread that is causing the problem is ntdll.dll!, but I'm no sure which service it belongs to.
 

imported_Tick

Diamond Member
Feb 17, 2005
4,682
1
0
Originally posted by: JackMDS
Originally posted by: Tick
This strikes me as something I don't want, so how do I find it and kill it?
Yeah this is one of the Deja Vu topics that comes up every two months.

http://www.ezlan.net/svchost.html

:sun:

Wow, that is so not helpfull. I've already tried removing any junk. Further, I have already tried process explorer software, and I can not trace the cause. Further, that link does not reference svchost processes eating up 100% cpu usage. If you also note, the ntdll.dll thread is causing the problem, which doesn't seem to make any sense.