Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

svchost.exe running 99%


  • Please log in to reply
10 replies to this topic

#1 anisb3l

anisb3l

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Corning CA
  • Local time:09:46 AM

Posted 04 December 2013 - 12:20 PM

Hi All,

 

i have over 30 computer in the networks running svchost.exe at 99%, so the computer ther going relly slow, i did some research about the issue but no luck to fix it, i did scan for viruses spyware, u name it i look it for it, also i tried the  patch for windows XP Pro "IE8-WindowsXP-KB2870699-x86-ENU" still same issue, when i did check what svchost.exe running ther all related to the network withe the deployment service we use "Altiris" the rest of computer ther running the same services with less the 2% CPU.

Thank u all for any help  :smash:


Edited by hamluis, 04 December 2013 - 02:39 PM.
Moved from XP to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


#2 Roodo

Roodo

  • Members
  • 760 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:46 AM

Posted 04 December 2013 - 01:03 PM

try doing a system restore to an earlier date on one of the systems, before this occurred



#3 anisb3l

anisb3l
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Corning CA
  • Local time:09:46 AM

Posted 04 December 2013 - 01:36 PM

Thank u Roodo for ur quick response, i did try that and still same prob svchost.exe running 99% 



#4 zacetnik

zacetnik

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:06:46 PM

Posted 04 December 2013 - 05:58 PM

I realize this is not a solution, but only a temporary work-around until a real solution is found, but when I turned Windows Update off and restarted my computer, svchost was no longer at 100% for me.


Edited by zacetnik, 04 December 2013 - 05:59 PM.


#5 anisb3l

anisb3l
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Corning CA
  • Local time:09:46 AM

Posted 04 December 2013 - 06:56 PM

For the windows updates is controlled by the server, we go thru them before we push them to the workstation, here is all the services running under svchost.exe  :  PID 1056 is the one running 99%

 
Microsoft Windows XP [Version 5.1.2600]
© Copyright 1985-2001 Microsoft Corp.
 
C:\Documents and Settings\xxxxxxx>tasklist /svc /fi "imagename eq svchost.exe"
 
Image Name                   PID Services
========================= ====== =============================================
svchost.exe                  868 DcomLaunch, TermService
svchost.exe                  960 RpcSs
 
svchost.exe                 1056 AudioSrv, BITS, Browser, CryptSvc, Dhcp,
                                 dmserver, ERSvc, EventSystem, helpsvc,
                                 HidServ, lanmanserver, lanmanworkstation,
                                 Netman, Nla, RasMan, Schedule, seclogon,
                                 SENS, SharedAccess, ShellHWDetection,
                                 srservice, TapiSrv, Themes, TrkWks, w32time,
                                 winmgmt, wuauserv, WZCSVC
 
svchost.exe                 1140 Dnscache
svchost.exe                 1268 LmHosts, RemoteRegistry
svchost.exe                 1528 WebClient
svchost.exe                  896 stisvc


#6 Union_Thug

Union_Thug

    Bleeps with the fishes...


  • Members
  • 2,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:is everything
  • Local time:01:46 PM

Posted 04 December 2013 - 07:32 PM

Hi All,

 

...i tried the  patch for windows XP Pro "IE8-WindowsXP-KB2870699-x86-ENU" still same issue...

KB2870699 is the Cumulative Security update for IE for September 2013, what you need to install is the latest Cumulative Security Update for Internet Explorer 8, (currently November 2013) http://www.microsoft.com/en-us/download/details.aspx?id=41074



#7 anisb3l

anisb3l
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Corning CA
  • Local time:09:46 AM

Posted 04 December 2013 - 08:37 PM

Thank you Union_Thug, i did check that and yes ther up to date, but anyway i did fix the issue by turning the Automatic updates off after all, like zac said, temporary fix, so i need to check the server and find out why it's not doing the updates correctly because this is not happening with all the computer.

let u guys know what's the prob asap :)

 

and this is what i did :

 

* CMD in administrator mode

*net stop "automatic updates"

and delete everything in Distribution folder.



#8 JohnC_21

JohnC_21

  • Members
  • 23,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:46 PM

Posted 05 December 2013 - 10:20 AM

There is a huge problem with Automatic Updates and svchost using 100% CPU on XP. Microsoft is trying to fix the issue. I have been running into this problem during update Tuesday for I don't know how long. I have IE8 and still get the issue.

 

The problem is caused by the Windows Update client evaluating an exceptionally long supersedence chain - something IE6 and IE7 have more than any other version of IE due to their time in market. Each 'link' in the chain doubles the CPU resources needed to evaluate it over the previous version. The chain is so long that the design stymies the WUA client.

 

We thought this problem was one of extremely long supersedence chains in IE6/IE7 which we fixed with Tuesday's release. We're hearing from you and others that this didn't fix the problem... We're working to expire these exceptionally old, dated, unnecessary updates in the chain. The expirations for these didn't happen as planned.

 

http://www.infoworld.com/t/microsoft-windows/microsoft-fix-windows-xp-update-svchost-redline-issue-soon-230940



#9 DougCuk

DougCuk

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London UK
  • Local time:06:46 PM

Posted 11 December 2013 - 07:04 AM

Microsoft released a new "Cumulative Security Update for Internet Explorer" on 10th December 2013.
But they have NOT yet fixed the XP update bug - So we are back to the same problem again!!

 

Same temporary fix as before:
Manually download and install the LATEST Cumulative Security Update for Internet Explorer - KB2898785

For Windows XP 32bit here are the direct download links:

 

IE6: WindowsXP-KB2898785-x86-ENU.exe
http://www.microsoft.com/en-us/download/details.aspx?id=41458

 

IE7: IE7-WindowsXP-KB2898785-x86-ENU.exe
http://www.microsoft.com/en-us/download/details.aspx?id=41442

 

IE8: IE8-WindowsXP-KB2898785-x86-ENU.exe
http://www.microsoft.com/en-us/download/details.aspx?id=41404

MS13-097: KB2898785
Cumulative Security Update for Internet Explorer: December 10, 2013
For full version listing see: http://technet.microsoft.com/en-us/security/bulletin/ms13-097

 

Microsoft said they intended to fix this problem by pruning the IE updates database so that only the key Cumulative updates were offered when a search was initiated - this didn't happen in time for the November updated as intended - and obviously has not happened in time for the December update either!


Edited by DougCuk, 11 December 2013 - 07:05 AM.


#10 ChelseaWoolf

ChelseaWoolf

  • Members
  • 58 posts
  • OFFLINE
  •  
  • Local time:09:46 AM

Posted 14 December 2013 - 05:20 AM

You can download and run Process Explorer to see what's calling svchost.



#11 destry411

destry411

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:05:46 PM

Posted 14 December 2013 - 03:39 PM

YES, IT WORKS!!!

 

Thanks to 

zacetnik - how rare it is to have someone present a straightforward no-bull fix to a horribly frustrating issue! 




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users