Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Svchost.exe Network Service 99%


  • Please log in to reply
14 replies to this topic

#1 Niki

Niki

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:06:55 PM

Posted 22 November 2006 - 05:59 PM

Hello,

When I boot my WinXP SP2 computer, I typically get as far as the desktop without any icons and the systray item, like anti-virus and firewall taking a long while to boot. Eventually (a few minutes) everything is showing normally, however, an internet connection is impossible and programs take an eternity to launch.

All these problems are apparently resolved when I open Task Manager and delete "Svchost.exe NETWORK SERVICE", which typically consumes 99% of CPU resources. I simply end the process and the computer is ables to connect to the internet and everything else starts working normally.

Could you please help me rectify this problem?

I have scanned with various online scanners, anti-virus programs, spybot, ad-aware, windows live onecare safety scanner, ccleaner and others. My firewall is Kerio and current anti-virus is Antivir.

Thanks,
Niki

BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped, new avatar (a camel) :0)


  • Members
  • 16,690 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:07:55 PM

Posted 23 November 2006 - 07:26 AM

Another post mentions a similar problem. I'd suggest killing that svchost.exe process - then visiting this link for a free, online scan of your system: http://safety.live.com Choose the "Full Service Scan".
- John
**If you need a more detailed explanation, please ask for it. I have the Knack. **

#3 Niki

Niki
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:06:55 PM

Posted 23 November 2006 - 08:26 AM

usasma/John,

Thanks for the reply but do you have any other ideas? As I say, I've already tried Onecare safety scan.

Do you have a link to the post you mention?

Thanks

#4 usasma

usasma

    Still visually handicapped, new avatar (a camel) :0)


  • Members
  • 16,690 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:07:55 PM

Posted 23 November 2006 - 08:32 AM

Sorry - I missed that (eye problems)! Since you've done all the scans, we can presume that this is caused by a problem with a program. So, we'll need to find out which program it is.

Use this free program to find out what processes are running underneath that instance of svchost.exe: http://www.microsoft.com/technet/sysintern...ssExplorer.mspx

When you hover your mouse over that process it'll give you a list of what's running under it. What's listed there?

Next, left click on that svchost.exe once - then scroll down in the lower pane to see what's running there. That'll give us even more info to identify this critter!
- John
**If you need a more detailed explanation, please ask for it. I have the Knack. **

#5 Niki

Niki
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:06:55 PM

Posted 25 November 2006 - 08:47 AM

OK, when I hover my mouse over the process, the pop-up says:

"C:\WINDOWS\SYSTEM32\svchost.exe
Services:
Dnscache"

Just to complete the info I gave before, when I try connecting to the internet, I get as far as the last stage, "Registering your computer on the network", which is where the process hangs.

I saved the two views of the lower pane as well:
1) dll

Process PID CPU Description Company Name User Name CPU Time
DPCs n/a Deferred Procedure Calls 0:00:05.281
Interrupts n/a Hardware Interrupts 0:00:06.921
avgnt.exe 1392 Antivirus System Tray Tool Avira GmbH HAL\Nikolai Shillinglaw 0:00:00.187
explorer.exe 1272 Windows Explorer Microsoft Corporation HAL\Nikolai Shillinglaw 0:00:21.593
kpf4gui.exe 2488 Sunbelt Kerio Firewall GUI Sunbelt Software HAL\Nikolai Shillinglaw 0:00:00.890
notepad.exe 2068 Notepad Microsoft Corporation HAL\Nikolai Shillinglaw 0:00:00.078
procexp.exe 1264 3.03 Sysinternals Process Explorer Sysinternals HAL\Nikolai Shillinglaw 0:00:02.875
Rainlendar.exe 1476 Rainlendar Rainy HAL\Nikolai Shillinglaw 0:00:00.437
alg.exe 1376 Application Layer Gateway Service Microsoft Corporation NT AUTHORITY\LOCAL SERVICE 0:00:00.031
svchost.exe 996 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\LOCAL SERVICE 0:00:00.125
svchost.exe 1536 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\LOCAL SERVICE 0:00:00.062
wdfmgr.exe 1956 Windows User Mode Driver Manager Microsoft Corporation NT AUTHORITY\LOCAL SERVICE 0:00:00.093
svchost.exe 876 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\NETWORK SERVICE 0:00:00.390
svchost.exe 1632 95.45 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\NETWORK SERVICE 0:15:48.406
avguard.exe 1560 Antivirus On-Access Service AVIRA GmbH NT AUTHORITY\SYSTEM 0:00:03.750
cisvc.exe 1596 Content Index service Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:00.093
csrss.exe 584 Client Server Runtime Process Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:04.734
kpf4gui.exe 2412 Sunbelt Kerio Firewall GUI Sunbelt Software NT AUTHORITY\SYSTEM 0:00:00.796
kpf4ss.exe 1676 Sunbelt Kerio Firewall Service Sunbelt Software NT AUTHORITY\SYSTEM 0:00:02.250
lsass.exe 664 LSA Shell (Export Version) Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:01.843
mdm.exe 1708 Machine Debug Manager Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:00.078
sched.exe 1548 Avira GmbH Scheduler Avira GmbH NT AUTHORITY\SYSTEM 0:00:00.171
services.exe 652 1.52 Services and Controller app Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:25.296
smss.exe 532 Windows NT Session Manager Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:00.062
spoolsv.exe 1244 Spooler SubSystem App Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:00.125
svchost.exe 816 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:00.359
svchost.exe 912 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:02.203
svchost.exe 1776 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:00.812
svchost.exe 1932 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:00.468
svchost.exe 216 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:00.078
System 4 NT AUTHORITY\SYSTEM 0:00:11.234
System Idle Process 0 NT AUTHORITY\SYSTEM 0:31:26.953
TCPSVCS.EXE 1868 TCP/IP Services Application Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:00.093
winlogon.exe 608 Windows NT Logon Application Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:01.875

Process: svchost.exe Pid: 1632

Type Name
Desktop \Default
Directory \KnownDlls
Directory \Windows
Directory \BaseNamedObjects
File C:\WINDOWS\SYSTEM32
File \Device\KsecDD
File C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03
File \Device\NamedPipe\net\NtControlPipe11
File \Device\Tcp
File \Device\Ip
File \Device\Ip
File C:\WINDOWS\SYSTEM32\DRIVERS\ETC
File \Device\Tcp
File C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS
File \Device\Tcp6
File \Device\Ip6
File \Device\Tcp6
File \Device\Ip6
File \Device\Ip6
Key HKLM
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
Key HKLM\SYSTEM\ControlSet003\Services\Tcpip\Linkage
Key HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters
Key HKLM\SYSTEM\ControlSet003\Services\NetBT\Parameters\Interfaces
Key HKLM\SYSTEM\ControlSet003\Services\NetBT\Parameters
Key HKLM\SYSTEM\ControlSet003\Services\WinSock2\Parameters\Protocol_Catalog9
Key HKLM\SYSTEM\ControlSet003\Services\WinSock2\Parameters\NameSpace_Catalog5
KeyedEvent \KernelObjects\CritSecOutOfMemoryEvent
Port \RPC Control\DNSResolver
Semaphore \BaseNamedObjects\shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}
Thread svchost.exe(1632): 1636
Thread svchost.exe(1632): 1652
Thread svchost.exe(1632): 1656
Thread svchost.exe(1632): 3188
Thread svchost.exe(1632): 3908
WindowStation \Windows\WindowStations\Service-0x0-3e4$
WindowStation \Windows\WindowStations\Service-0x0-3e4$


2) Handles

Process PID CPU Description Company Name User Name CPU Time
DPCs n/a 1.52 Deferred Procedure Calls 0:00:05.312
Interrupts n/a Hardware Interrupts 0:00:07.000
avgnt.exe 1392 Antivirus System Tray Tool Avira GmbH HAL\Nikolai Shillinglaw 0:00:00.187
explorer.exe 1272 Windows Explorer Microsoft Corporation HAL\Nikolai Shillinglaw 0:00:21.593
kpf4gui.exe 2488 Sunbelt Kerio Firewall GUI Sunbelt Software HAL\Nikolai Shillinglaw 0:00:00.890
notepad.exe 2068 Notepad Microsoft Corporation HAL\Nikolai Shillinglaw 0:00:00.078
procexp.exe 1264 1.52 Sysinternals Process Explorer Sysinternals HAL\Nikolai Shillinglaw 0:00:03.171
Rainlendar.exe 1476 Rainlendar Rainy HAL\Nikolai Shillinglaw 0:00:00.437
alg.exe 1376 Application Layer Gateway Service Microsoft Corporation NT AUTHORITY\LOCAL SERVICE 0:00:00.031
svchost.exe 996 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\LOCAL SERVICE 0:00:00.125
svchost.exe 1536 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\LOCAL SERVICE 0:00:00.062
wdfmgr.exe 1956 Windows User Mode Driver Manager Microsoft Corporation NT AUTHORITY\LOCAL SERVICE 0:00:00.093
svchost.exe 876 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\NETWORK SERVICE 0:00:00.406
svchost.exe 1632 95.45 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\NETWORK SERVICE 0:16:00.093
avguard.exe 1560 Antivirus On-Access Service AVIRA GmbH NT AUTHORITY\SYSTEM 0:00:03.750
cisvc.exe 1596 Content Index service Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:00.093
csrss.exe 584 Client Server Runtime Process Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:04.750
kpf4gui.exe 2412 Sunbelt Kerio Firewall GUI Sunbelt Software NT AUTHORITY\SYSTEM 0:00:00.796
kpf4ss.exe 1676 Sunbelt Kerio Firewall Service Sunbelt Software NT AUTHORITY\SYSTEM 0:00:02.250
lsass.exe 664 LSA Shell (Export Version) Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:01.859
mdm.exe 1708 Machine Debug Manager Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:00.078
sched.exe 1548 Avira GmbH Scheduler Avira GmbH NT AUTHORITY\SYSTEM 0:00:00.171
services.exe 652 1.52 Services and Controller app Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:25.531
smss.exe 532 Windows NT Session Manager Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:00.062
spoolsv.exe 1244 Spooler SubSystem App Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:00.125
svchost.exe 816 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:00.359
svchost.exe 912 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:02.203
svchost.exe 1776 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:00.812
svchost.exe 1932 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:00.468
svchost.exe 216 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:00.078
System 4 NT AUTHORITY\SYSTEM 0:00:11.234
System Idle Process 0 NT AUTHORITY\SYSTEM 0:31:26.953
TCPSVCS.EXE 1868 TCP/IP Services Application Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:00.093
winlogon.exe 608 Windows NT Logon Application Microsoft Corporation NT AUTHORITY\SYSTEM 0:00:01.875

Process: svchost.exe Pid: 1632

Type Name
Desktop \Default
Directory \KnownDlls
Directory \Windows
Directory \BaseNamedObjects
File C:\WINDOWS\SYSTEM32
File \Device\KsecDD
File C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03
File \Device\NamedPipe\net\NtControlPipe11
File \Device\Tcp
File \Device\Ip
File \Device\Ip
File C:\WINDOWS\SYSTEM32\DRIVERS\ETC
File \Device\Tcp
File C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS
File \Device\Tcp6
File \Device\Ip6
File \Device\Tcp6
File \Device\Ip6
File \Device\Ip6
Key HKLM
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
Key HKLM\SYSTEM\ControlSet003\Services\Tcpip\Linkage
Key HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters
Key HKLM\SYSTEM\ControlSet003\Services\NetBT\Parameters\Interfaces
Key HKLM\SYSTEM\ControlSet003\Services\NetBT\Parameters
Key HKLM\SYSTEM\ControlSet003\Services\WinSock2\Parameters\Protocol_Catalog9
Key HKLM\SYSTEM\ControlSet003\Services\WinSock2\Parameters\NameSpace_Catalog5
KeyedEvent \KernelObjects\CritSecOutOfMemoryEvent
Port \RPC Control\DNSResolver
Semaphore \BaseNamedObjects\shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}
Thread svchost.exe(1632): 1636
Thread svchost.exe(1632): 1652
Thread svchost.exe(1632): 1656
Thread svchost.exe(1632): 3188
Thread svchost.exe(1632): 3908
WindowStation \Windows\WindowStations\Service-0x0-3e4$
WindowStation \Windows\WindowStations\Service-0x0-3e4$

#6 usasma

usasma

    Still visually handicapped, new avatar (a camel) :0)


  • Members
  • 16,690 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:07:55 PM

Posted 25 November 2006 - 09:23 AM

Thanks for all the info!

I suspect that there's a problem with your network connection. How do you connect to the web? Do you have a modem? Do you have a router? If so, what make and model are they?

What kind of internet connection is impossible? Have you tried "ping"? If not, try disabling your Kerio firewall, then go to Start...Run...and type in "cmd.exe" (without the quotes) and then press Enter.

Type these commands into the command prompt window and press Enter after each one - let us know the results (they come in sets of 4, but only 1 is needed for our purposes).

"ping www.yahoo.com" (without the quotes) and press Enter
"ping 192.168.0.1"
"ping 192.168.1.1"
"ping 127.0.0.1"

Then, start your firewall back up and ping the ones that were successful.

Try disabling your current network connection and then creating a new one - see if that helps.

If none of this works, I'll suggest several other fixes (TCP/IP, WinSock, LSP, etc) - and if they don't fix it, then we'll have to look at a repair install of XP: http://www.michaelstevenstech.com/XPrepairinstall.htm
- John
**If you need a more detailed explanation, please ask for it. I have the Knack. **

#7 Niki

Niki
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:06:55 PM

Posted 26 November 2006 - 05:56 PM

John,

Sorry for the overdose of info.

I use a alcatel speedtouch usb dsl modem, its broadband via a dial-up connection.

Keep in mind that this troublesome svchost.exe slows down the whole Windows XP booting process, as well, even before trying to connect to the internet. If I kill it during the boot, the booting up process suddenly speeds up a lot. Otherwise, left long enough, the desktop and systray icons eventually appear. If I haven't killed the process, when I try to connect to the internet, at the last stage [Registering your computer...] the process freezes and this particular svchost.exe is running at 99% of cpu.

The ping results follow. The first and last addresses worked, the middle 2 didn't.

Without the firewall.

C:\Documents and Settings\Nikolai Shillinglaw>ping www.yahoo.com

Pinging www.yahoo-ht2.akadns.net [209.73.186.238] with 32 bytes of data:

Reply from 209.73.186.238: bytes=32 time=217ms TTL=54

Ping statistics for 209.73.186.238:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 125ms, Maximum = 217ms, Average = 159ms

C:\Documents and Settings\Nikolai Shillinglaw>ping 192.168.0.1

Pinging 192.168.0.1 with 32 bytes of data:

Destination host unreachable.

Ping statistics for 192.168.0.1:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

C:\Documents and Settings\Nikolai Shillinglaw>ping 192.168.1.1

Pinging 192.168.1.1 with 32 bytes of data:

Destination host unreachable.

Ping statistics for 192.168.1.1:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

C:\Documents and Settings\Nikolai Shillinglaw>ping 127.0.0.1

Pinging 127.0.0.1 with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=64

Ping statistics for 127.0.0.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms


With the firewall:

C:\Documents and Settings\Nikolai Shillinglaw>ping www.yahoo.com

Pinging www.yahoo-ht2.akadns.net [209.73.186.238] with 32 bytes of data:

Reply from 209.73.186.238: bytes=32 time=138ms TTL=53


Ping statistics for 209.73.186.238:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 138ms, Maximum = 249ms, Average = 166ms

C:\Documents and Settings\Nikolai Shillinglaw>ping 127.0.0.1

Pinging 127.0.0.1 with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=64

Ping statistics for 127.0.0.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms


I'll try a new connection and report shortly.

#8 usasma

usasma

    Still visually handicapped, new avatar (a camel) :0)


  • Members
  • 16,690 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:07:55 PM

Posted 26 November 2006 - 07:17 PM

Your gateway on your router (and your PC) may not be set correctly. Generally 192.168.0.1 or 192.168.1.1 are the default.

Try typing ipconfig /all at the command prompt and seeing what your gateway is - then try pinging it. Also, let us know what your DNS and DHCP settings are.

The Yahoo ping shows that you can reach the internet. The 127.0.0.1 is a local address for your computer (so you can reach your computer).

So, it's either a setting in your router or a setting in Windows. To rule out the router/modem - try tech support at your ISP. They'll run you through a bunch of simple stuff to ensure that it's not your modem/router - then we can get to work on Windows.

I suspect either a corrupt file/setting in Windows - or a problem with your DNS server. The new connection may fix it - but it may not. This resembles the old "searching for non-existent network devices" problem that Windows used to have.

Also, try using this free browser to see if you can connect with it. http://www.mozilla.com/ This will help to rule out Internet Explorer as the cause
- John
**If you need a more detailed explanation, please ask for it. I have the Knack. **

#9 Niki

Niki
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:06:55 PM

Posted 26 November 2006 - 09:57 PM

John,

Can we take a step back? I don't think you've understood my problem exactly. Do the following points make it any clearer?

1. I have a modem, not a router.
2. I sure can reach the internet, coz I am using the computer in question to write to you. All I have to do is kill the svchost process I have been referring to and I can surf the internet.
3. Svchost causes problems even before I connect to the internet, i.e. when windows is booting. Does that not suggest that it is not really related to the internet connection itself?
4. I would rather eliminate possible issues my end before contacting my ISP because I'm sure that will be an agonising route to go down.
5. I use both firefox and Internet Explorer all the time, however, the problem occurs when I turn my computer on, i.e. well before I boot my browser, so it is not related to that.

Thanks,
Niki

#10 usasma

usasma

    Still visually handicapped, new avatar (a camel) :0)


  • Members
  • 16,690 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:07:55 PM

Posted 27 November 2006 - 08:29 AM

The internet tests will evaluate (somewhat) the ability of your system to network. And, I suspect that you have a network problem (that's the problem that I'm working to isolate).

For example, you may have a program that's trying to communicate with the web. When you boot, and the network hasn't fully initialized, the program may try to access the web anyway - this could cause the "lag" that you're describing by the program actually interfering with the network initialization. Also, the offending process in the svchost.exe is your DNSCache service - this points to the network as the source of the problem.

So, we've gotta figger out if your network is working properly (as a first step) - from there we can move on. Since the offending program involves your DNS Cache, it's reasonable to test your network connectivity.

I'm also struggling with fixing this to avoid the necessity of using one of the "lame" fixes (a repair install or a format and reinstall). Network problems are solvable - but they do take some time to locate the exact problem.

Finally, because I've got visual problems, I don't go back and reread each post. So, I occasionally forget things.

You may want to try this (dunno if it'll work tho'). Open a command prompt and type "ipconfig /flushdns" (without the quotes) and press Enter.

Then type "ipconfig /registerdns" (without the quotes) and press Enter.

This will flush out and rebuild your DNS Resolver cache (in case there's something bad in there). You can see all of these commands by typing "ipconfig /?" (without the quotes) and pressing Enter.

Also, are you using a custom DNS setting in your network settings? If so, what servers are you using? What "internet aware" applications are you loading at startup?

Network problems are sorta like trying to figure out a magician's trick. Darned hard to see up front, but often obvious after the fact.

Edited by usasma, 27 November 2006 - 08:33 AM.

- John
**If you need a more detailed explanation, please ask for it. I have the Knack. **

#11 Niki

Niki
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:06:55 PM

Posted 27 November 2006 - 11:02 AM

Hi,

Thanks for taking the time to explain this stuff to me. As you can see, I am in over my head.

Based on something I read I can't remember where, I decided to try Administrative Tools>Services and disabled Dnscache. The problem appears to have been resolved, booting appears to proceed normally and connecting to the internet is also trouble free.

Presumably, this is a work around and not a real fix, however, does this give you anymore info as to what the problem might be and how I should proceed or do I still need to take all those steps you've mentioned?

Niki

#12 usasma

usasma

    Still visually handicapped, new avatar (a camel) :0)


  • Members
  • 16,690 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:07:55 PM

Posted 28 November 2006 - 08:05 AM

"Nothing succeeds like success" :thumbsup: You may experience some delays in resolving domain names for places that you frequently visit. These are what's stored in the dnscache.

I've been doing a bit of looking around and there's several possible problems with the dnscache (corruption, poisoning, faulty entries, attacks, etc). Your workaround will "cure" all of them - good work!

Some good links about dnscache:

http://support.microsoft.com/kb/318803
http://www.microsoft.com/technet/prodtechn...ntry/30643.mspx
- John
**If you need a more detailed explanation, please ask for it. I have the Knack. **

#13 Niki

Niki
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:06:55 PM

Posted 29 November 2006 - 09:13 AM

Thanks for all your help, John, I'll look into these.

Take care,
Niki

#14 digital_phantom

digital_phantom

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:06:55 PM

Posted 30 December 2006 - 01:43 AM

Niki, I don't know if you have resolved your problem yet, but I've had this happen to me as well, on my main computer and laptop. On my version of windows xp, by default it installs an item called "Internet Gateway Device Discovery and Control Client". I found by uninstalling this that my computer no longer gets hanged up by svchost.exe.

To uninstall this item (if it's installed on your machine) you go into Add or Remove Programs" and then (if your using window xp) on the left side you would click on "Add/Remove Windows Components", and then in the dialog box that came up, scroll down the list to "Networking Services" and then click on the "Details" button, and then uncheck the first item which should say "Internet Gateway Device Discovery and Control Client".

If this doesn't fix your problem (if it still remains), then it's probably a windows update service issue since that uses svchost.exe as well as most other windows built-in network/internet services.

#15 Shoshannah

Shoshannah

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Texas
  • Local time:05:55 PM

Posted 12 March 2010 - 02:51 AM

This is a very old thread; but, believe it or not, I just came across it while trying to solve my own problem with the svchost.exe(Network Services) process sucking up all my CPU. If you don't know what's sucking up your CPU, then do the following:

1.) open your Task Manager (right click your task bar and select it)

2.) go to the "Performance" tab

3.) click the "Resource Monitor" button at the bottom of the tab

4.) when "Resource Monitor" opens look at the process that has the highest # in the CPU column. That's your culprit. That's what sucking up all your time and producing so much frustration.


BTW... I use Vista so the process to open your Resource Monitor might be a bit different depending on your system.



I've been trying to figure out this problem for quite some time and it's been very frustrating. I've known it was the svchost.exe(Network Services) process but didn't know what to do about it. I was looking for some tech support online; but I came across a site that suggested it might be due to a large HOSTS file. This was exactly my problem!!!! I had been using the hp-HOSTS free HOSTS file download (see link below) which is a humongous file!!! It's up to almost 4MB now!! (BTW....Some of the things in there are totally unnecessary too! So I have to edit it. It's definitely thorough but can also be paranoid.) After finding the suggestion to consider my HOSTS file, I was intending to download their smaller file; so I went back to the hp-HOSTS site to get it. I first tried their "fix" though of disabling the DNS Client and still using the larger file. So far it's worked for me. So I'll probably stick with it. If not, I'll try the smaller file and if that doesn't work then I'll go back to using MVPs HOSTS file (see link below), which is also a free download. It's not quite as large and never gave me problems before. I just lost the MVP link when my previous computer died and went with the hp-HOSTS when it was the first decent one I found for this computer. Anyway.... so far so good; so if you're having the same problem, I would suggest looking at your HOSTS file. It's an easy thing to do and might take care of the problem in a snap. To definitely tell for sure, you can always set your HOSTS file back to the Microsoft default (which is tiny) and if your system works fine, then it's your HOSTS file.


Here's how to run the Microsoft default test:

1.) go to URL --> http://support.microsoft.com/kb/972034

2.) find the system you use and copy the code for it or just click the "You fix it for me" button (if you let them fix it you're done at this point; just try it out to see if your system is working better now). If you didn't click the "You fix it for me" button then

3.) follow the directions on the page to install that HOSTS file to your computer


Try your system by disconnecting and reconnecting to the internet. If it fixed the problem, I suggest getting a better HOSTS file.

***DON'T*** stick with the Microsoft default!!!!!!


The Microsoft file was just for a quick test!!! It leaves your system vulnerable to attack though. So get rid of it! Go to one of the sites below (MVPs or hp-HOSTS) or choose one of your own, but the MS default is no good for safe browsing! Download a HOSTS file that you want and follow the instructions that you find on the download's page or on one of the pages below to install it. If you have problems again, try disabling the DNS client. (Instructions for that are on the hp-HOSTS download page. I would suggest visiting the site's main page first for any extra info.)


hp-HOSTS
http://hosts-file.net/?s=Download


MVPs
http://www.mvps.org/winhelp2002/hosts.htm


I just love MVPs' humor: "There's no place like 127.0.0.1". (For those who are not truly into computers, 127.0.0.1 is "Home" for your computer. There's no place like home..... get it??? Well..... **I** thought it was funny!!!) :flowers:



I hope this helps solve your problem!!! I know I was truly relieved when it solved mine!!!

Have a great day!!! :thumbsup:

Edited by Shoshannah, 12 March 2010 - 02:53 AM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users