Svchost.exe has CPU at 100% ???

[Sm[]key]

When connected to the internet via a cable modem my pc has a cpu overload! (100%). And I have never had these problems before while connected?

In the task manager it shows that the service svchost.exe (1 of 5) is using most of the cpu's %, and has an increased memory usage from 17MB to 24MB (ish). My pc has slowed down considerable as you could imagine with 100% cpu loading.

Also I notice on the cable modem utilisation that there is a small amount of activity around 0.02% with spike now and again, although I have no internet explorer etc running and should have a system idle process??

If I reboot with the cable modem disconected I have no problems what so ever and everything runs smoothly.......apart from my none existent cable internet connection !! Hmmmm......strange I hear you say?

I presumed it was some kind of trojan/virus, so updated my norton virus software today and ran a full system scan......no viruses found!

I then ran the latest version of ad-aware to remove any spyware......it found a number of processes and removed them, but this did not solve my problem!!!

I ran tasklist /svc from a command prompt, and checked the services involved with svchost.exe processes running.......but found they were all supposed to be there and running??

I have check all over the internet for info on this matter but found no solution to the problem.

Has anyone got any ideas??

Thanks

[Tink]

Here is some interesting reading.

http://www.igknighttec.com/Windows/W...vchost_exe.php

Hope this helps you discover your problem, that's half the fun after all isn't it?

[Sm[]key]

Thanks tink for your help, although I already knew about what you posted, although it doesnt make me any wiser.

Below is a more comprehensive link I found about svchost.exe services, for anyone thats interested?

http://www.blkviper.com/WinXP/servicecfg.htm

and....

http://support.microsoft.com/default...b;EN-US;314056

Help!

[Tink]

Well, you need to do the following on the particular svc that is tying up your resources to see which program is involved:

To view the list of services that are running in Svchost:
Click Start on the Windows taskbar, and then click Run.
In the Open box, type CMD, and then press ENTER.
Type Tasklist /SVC, and then press ENTER.
Tasklist displays a list of active processes. The /SVC switch shows the list of active services in each process. For further information about a process, type the following command, and then press ENTER:
Tasklist /FI "PID eq processID" (with the quotation marks)

Then you should at least know what the culprit is.

[Sm[]key]

C:\Documents and Settings\user>tasklist /FI "PID eq 1172"

Image Name PID Session Name Session# Mem Usage
====================================
svchost.exe 1172 Console 0 23,164 K


Ok done that......what does this tell me?

[Tink]

Well, when I do it........it tells me exactly what each svchost is hosting. If you will look on the right, it should list the programs.

All your doing is opening a dos window that enables you to look at the information. For instance, I have four of them running, one is strictly for dnscache, one is for Rpc, etc.

Please try again, you should find what your problem is.

[Sm[]key]

Yes I already know this, as I explained in the opening post the processes there are all correct and should be there.

Heres a list of the svchost.exe in question:

svchost.exe 1172

AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
lanmanserver,lanmanworkstation, Messenger,
Netman, Nla, RasAuto, RasMan, Schedule,
seclogon, SENS, SharedAccess,
ShellHWDetection, srservice, TapiSrv,
TermService, Themes, TrkWks, uploadmgr,
W32Time, winmgmt, WmdmPmSp, wuauserv, WZCSVC

[Tink]

Can you tell me what the programs are that are listed for this particular host session?

[Sm[]key]

yes they are all at.....

http://www.blkviper.com/WinXP/servicecfg.htm

[Tink]

Good Grief Charlie Brown! You don't eat ANY condiments except mayonnaise?? One could spend a whole day in that website and never finish all the stuff in there. Is that a picture of you?

[Sm[]key]

hehe....ok click on the displayname that matches the service name.......and hey presto! it takes you directly to the information on the service name for the said svchost.exe services.

Not so hard hey?

Hope thats ok?

And no thats not me...you cheeky sod!

[BondIV]

I was running into the same thing, and I found a solution, at least for me. It seems a service called SSDPSRV was trying to start, over and over, and never successfully started. Anyway, just attempting to start was eating up all of the resources.

You can look on BlackViper's site fore more info on it, but basically SSDPSRV is for UPnP services like network scanners, printers, etc. (Not the same as PnP like scanners connected directly to your computer). I went into services.msc and disabled the service. CPU resources went back to normal :-).

I'm not sure why it wouldn't start, there was no error associated. I found it by looking on my other XP PC and saw it was running, but not on the other. Trial and error wins again!

[kenson]

BOND you are a genius! Thank you!

Its 5 am and I thought I would never get the solution for that problem, thanks all 3 of you

[irtech]

Man,
You've all been a big help. Trouble is I seem to be uncovering more troubles than I knew or thought I had. I did that "Messenger Test" and sure enough I got a "hi". One prob I'm having is getting the "service name". When I go to "run" "cmd" and type in "Task" and anything else it comes back unrecognizable.
My prob is about like whats been discussed. About every minute or 2 the hourglass comes on and the pc is froze for about 5 seconds. Seems to be a svchost file, and a csrss.exe and a lsass.
I'm running a windows xp home. No office.
I think I may be a little too green to fix this myself.
ps....Where can I rant about burgers MY WAY?!?!?!?!

[Stevo14]

I've had almost exactly the same problem. I've identified that whenever I attempt to start Windows Messenger. Is there anything I can do to solve this problem as I still want to use messenger in future?

Many Thanks