Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

svchost.exe hogging memory & CPU


  • Please log in to reply
No replies to this topic

#1 qoman

qoman

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:10:49 PM

Posted 13 December 2011 - 11:49 AM

Hi! qoman here.

I ended up at bleepingcomputer while trying to troubleshoot my wifes Windows XP Pro computer (Dell). The first signs began a couple of weeks ago when the computer started getting very slow and unresponsive. After running AVG, Spybot, Adaware, SysInternals RootkitRevealer and cleaning up with CCleaner and HiJak-this (only minor items were found), I found that the culprit was a runaway svchost.exe process.

Using Sysinternals Process Explorer tool, I discovered that it was the latest (usually the largest PID of all running svchost processes) svchost process that start at a few Mb and grow to 500 Mb or more if I let it. Additionally, this process would consume nearly all of the CPU cycles, and started creating dozens of TCP/IP connections to numerous hosts on the Internet. By using Sysinternals TCPview, I was able to watch the number of connections grow that were started by this particular svchost process.

I was able to verify that it was this svchost process controlling these issues since Process Explore can pause and resume processes. If I delete the svchost process, another one would be created shortly thereafter. However, by pausing this svchost process early on, the cpu will be freed up and the network traffic stops, but memory is still allocated. Pausing svchost allows other applications to work better, but no new applications will run (They show up in task manager and Process Explorer, but no window shows in the GUI.) unless svchost is resumed.

I think someone else in the forum may have a similar problem. I'd like to hear any suggestions. I'm at the point where I am backing up data and getting ready to reinstall the OS, by my curiosity is getting the better of me and I'd like to find out what the real issue is.


regards,

qoman

Edited by Budapest, 16 December 2011 - 05:09 PM.
Moved from Introductions ~Budapest


BC AdBot (Login to Remove)

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users