svchost jumps to 100% CPU usage after login

[mosco]

If i logout of windows XP Pro and then login, i get a svchost.exe that jumps to 100% CPU usage and doesn't go down. It only happens if i logout and login, if i let windows log me out after a period of inactivity, and try and login i don't have this problem. If i try and end the proccess it tells me that i must restart. I am running all the latest patches, and i have scanned my computer with norton and ad-aware.

Any ideas?

 

[crisp82]

hmmm......well thats the network service...does it lower after a while or does it need restarting to take the load of the processor?

 

[NogginBoink]

Get the PID of that instance of svchost from task manager.

Use... uh... I think it's the "SC" command to find out which services are running in that process.

Troubleshoot from there.

 

[mosco]

can you explain the SC command more?

 

[NogginBoink]

Type sc at a command prompt to get the syntax. Or look it up. Geez.

But since you're this lazy, do a sc queryex and each service's PID will be displayed.

 

[mosco]

not lazy, just new to windows.

i was able to figure it out after i posted but the when i type in sc queryex, it displays on the screen for a second, and disappears so i can't read it. any ideas about that?

 

[mikecel79]

Originally posted by: mosco
not lazy, just new to windows.

i was able to figure it out after i posted but the when i type in sc queryex, it displays on the screen for a second, and disappears so i can't read it. any ideas about that?

Go to Start>Run and type cmd.exe. Then run SC from there.

 

[mosco]

SERVICE_NAME: RpcSs
DISPLAY_NAME: Remote Procedure Call (RPC)
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 940
FLAGS :

thats what its called. So now lets see what what google can tell me. Thanks for the cmd.exe tip.

[Edit]

I found some stuff for both Windows 2000 and Windows NT regarding RPC and high CPU usage but none about windows XP. The fixes for 2000 and NT are patches, i have the latest patches for XP.

 

[mikecel79]

Sounds to me like you have the Nacci virus on your machine.

 

[mosco]

Just scanned with Norton Anti-Virus 2003 with latest anti-virus definitions and came up with nothing. I am really stumped on this. I might just do a re-install when the next nforce drivers get released.

 

[mosco]

bump