Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

svchost.exe consuming over 1.2 GB of memory


  • Please log in to reply
9 replies to this topic

#1 fighterx

fighterx

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:53 AM

Posted 22 May 2015 - 03:52 AM

I'm not sure what is going on. At least once every ~2hrs (and on every startup) my computer locks up for  ~15 mins while svchost.exe memory consumption quickly rises to 0.8~1.2 +GB... lingers there for a while then suddenly drops to 80~300mb where it will remain until the next lock-up phase. When this happens my computer is almost completely unsable and my screen will  go dark for a few seconds and when it returns my taskbar is all screwy (presumably because of high memory usuage). Any help would be greatly appriciated.


Edited by fighterx, 22 May 2015 - 03:52 AM.


BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,887 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:53 AM

Posted 22 May 2015 - 08:10 AM

Please download MiniToolBox  , save it to your desktop and run it.
 
Checkmark the following checkboxes:
  List last 10 Event Viewer log
  List Installed Programs
  List Users, Partitions and Memory size.
 
Click Go and paste the content into your next post.
 
Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post.
 
Louis



#3 fighterx

fighterx
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:53 AM

Posted 24 May 2015 - 08:36 AM

Thank you for your assistance.

 

MiniToolBox Log:

 

MiniToolBox by Farbar  Version: 11-05-2015 01
Ran by owner (administrator) on 24-05-2015 at 09:17:11
Running from "C:\Users\owner\Desktop"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Model: Aspire X1200 Manufacturer: Acer
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (05/23/2015 09:57:09 AM) (Source: .NET Runtime) (User: )
Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 4772.  Message ID: [0x2509].

Error: (05/23/2015 09:54:01 AM) (Source: .NET Runtime) (User: )
Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 1256.  Message ID: [0x2509].

Error: (05/23/2015 09:50:16 AM) (Source: .NET Runtime) (User: )
Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 3720.  Message ID: [0x2509].

Error: (05/23/2015 09:32:23 AM) (Source: .NET Runtime) (User: )
Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 4864.  Message ID: [0x2509].

Error: (05/23/2015 09:23:42 AM) (Source: .NET Runtime) (User: )
Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 912.  Message ID: [0x2509].

Error: (05/23/2015 06:28:55 AM) (Source: Application Error) (User: )
Description: Faulting application name: plugin-container.exe, version: 38.0.1.5611, time stamp: 0x55541a90
Faulting module name: mozalloc.dll, version: 38.0.1.5611, time stamp: 0x55540a1e
Exception code: 0x80000003
Fault offset: 0x00001aa1
Faulting process id: 0x1248
Faulting application start time: 0xplugin-container.exe0
Faulting application path: plugin-container.exe1
Faulting module path: plugin-container.exe2
Report Id: plugin-container.exe3

Error: (05/23/2015 02:01:41 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
The parameter is incorrect.
.
Error: (05/23/2015 02:01:40 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
The parameter is incorrect.
.
Error: (05/22/2015 10:46:50 PM) (Source: .NET Runtime) (User: )
Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 3176.  Message ID: [0x2509].

Error: (05/22/2015 10:26:45 PM) (Source: .NET Runtime) (User: )
Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 1636.  Message ID: [0x2509].


System errors:
=============
Error: (05/23/2015 09:33:12 AM) (Source: volsnap) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage failed to grow.

Error: (05/22/2015 06:33:08 AM) (Source: DCOM) (User: )
Description: {ED1D0FDF-4414-470A-A56D-CFB68623FC58}

Error: (05/22/2015 05:27:01 AM) (Source: volsnap) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage failed to grow.

Error: (05/22/2015 04:38:00 AM) (Source: Schannel) (User: NT AUTHORITY)
Description: The following fatal alert was received: 40.

Error: (05/22/2015 04:30:20 AM) (Source: Service Control Manager) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Management Instrumentation service, but this action failed with the following error:
%%1056

Error: (05/22/2015 04:30:19 AM) (Source: Service Control Manager) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Multimedia Class Scheduler service, but this action failed with the following error:
%%1056

Error: (05/22/2015 04:28:43 AM) (Source: Service Control Manager) (User: )
Description: The Windows Driver Foundation - User-mode Driver Framework service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

Error: (05/22/2015 04:28:43 AM) (Source: Service Control Manager) (User: )
Description: The Portable Device Enumerator Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

Error: (05/22/2015 04:28:43 AM) (Source: Service Control Manager) (User: )
Description: The Diagnostic System Host service terminated unexpectedly.  It has done this 1 time(s).

Error: (05/22/2015 04:28:43 AM) (Source: Service Control Manager) (User: )
Description: The Desktop Window Manager Session Manager service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.


Microsoft Office Sessions:
=========================
Error: (05/23/2015 09:57:09 AM) (Source: .NET Runtime)(User: )
Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 4772.  Message ID: [0x2509].

Error: (05/23/2015 09:54:01 AM) (Source: .NET Runtime)(User: )
Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 1256.  Message ID: [0x2509].

Error: (05/23/2015 09:50:16 AM) (Source: .NET Runtime)(User: )
Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 3720.  Message ID: [0x2509].

Error: (05/23/2015 09:32:23 AM) (Source: .NET Runtime)(User: )
Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 4864.  Message ID: [0x2509].

Error: (05/23/2015 09:23:42 AM) (Source: .NET Runtime)(User: )
Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 912.  Message ID: [0x2509].

Error: (05/23/2015 06:28:55 AM) (Source: Application Error)(User: )
Description: plugin-container.exe38.0.1.561155541a90mozalloc.dll38.0.1.561155540a1e8000000300001aa1124801d094fbda4b52c0C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll83574ad0-0136-11e5-a03a-001d72b569a8

Error: (05/23/2015 02:01:41 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
The parameter is incorrect.

Error: (05/23/2015 02:01:40 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
The parameter is incorrect.

Error: (05/22/2015 10:46:50 PM) (Source: .NET Runtime)(User: )
Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 3176.  Message ID: [0x2509].

Error: (05/22/2015 10:26:45 PM) (Source: .NET Runtime)(User: )
Description: .NET Runtime version 4.0.30319.34209 - There was a failure initializing profiling API attach infrastructure.  This process will not allow a profiler to attach.  HRESULT: 0x80004005.  Process ID (decimal): 1636.  Message ID: [0x2509].


CodeIntegrity Errors:
===================================
  Date: 2013-07-28 05:20:28.907
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\PlayOnline\SquareEnix\PlayOnlineViewer\polcfg\sysinfo.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-07-28 05:20:28.018
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\PlayOnline\SquareEnix\PlayOnlineViewer\polcfg\sysinfo.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-03-20 12:20:22.000
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\PlayOnline\SquareEnix\PlayOnlineViewer\polcfg\sysinfo.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-03-20 12:20:21.348
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\PlayOnline\SquareEnix\PlayOnlineViewer\polcfg\sysinfo.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2012-07-21 13:04:25.520
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2012-07-21 13:04:25.317
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2012-07-21 13:04:25.114
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2012-07-21 13:04:24.912
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2012-07-21 05:36:11.302
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2012-07-21 05:36:11.099
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


========================== Installed Programs ============================
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader X (10.1.3) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.3 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.5.6.606 - Adobe Systems, Inc.)
Any Video Converter 3.2.3 (HKLM-x32\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)
Apple Application Support (32-bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ATT Management Agent (HKLM-x32\...\ATT-AT&T Troubleshoot & Resolve) (Version: 8.3.1.18 - AT&T)
AVG 2015 (HKLM\...\{B38CFE4C-C9C4-460B-8353-F56DF2AC3877}) (Version: 15.0.5941 - AVG Technologies) Hidden
AVG 2015 (HKLM\...\{E65B2724-DC18-4B3D-BA57-F10DEEC4BDF4}) (Version: 15.0.4347 - AVG Technologies) Hidden
AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5941 - AVG Technologies)
Blender (HKLM\...\Blender) (Version: 2.63-release - Blender Foundation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 3.20 - Piriform)
ComicRack v0.9.142 (HKLM\...\ComicRack) (Version: v0.9.142 - cYo Soft)
Command & Conquer The First Decade (HKLM-x32\...\{66D6F3BD-CA23-41A4-9FA3-96B26B32528C}) (Version: 1.00.0000 - Electronic Arts)
FFsplit version 0.7 (HKLM-x32\...\{82458834-6226-4A34-AE96-6907354F9F36}_is1) (Version: 0.7 - FFsplit Team)
File Load (HKCU\...\File Load) (Version:  - )
File Shredder 2.0 (HKLM-x32\...\File Shredder_is1) (Version:  - WipeSoft)
FINAL FANTASY XI Test Client (HKLM-x32\...\{27DDD216-365D-4FB8-8E2A-038B971990C2}) (Version: 1.0.0 - SQUARE ENIX CO., LTD.) Hidden
FINAL FANTASY XI Test Client (HKLM-x32\...\InstallShield_{27DDD216-365D-4FB8-8E2A-038B971990C2}) (Version: 1.0.0 - SQUARE ENIX CO., LTD.)
FLV Converter 3.0 (HKLM-x32\...\{6EFA70F2-D6C3-4ECA-BEA9-C1A31277C63A}_is1) (Version:  - FLV Converter)
Free MP3 WMA OGG Converter 8.2.5 (HKLM-x32\...\Free MP3 WMA OGG Converter_is1) (Version:  - CyberPower Tech, Inc.)
GameMaker 8.1 (HKCU\...\GameMaker81) (Version:  - )
GameMaker: Player (HKLM-x32\...\GameMakerPlayer) (Version: 1.4.242.35310 - YoYo Games Ltd.)
GameMaker-Studio 1.4 (HKCU\...\GameMaker-Studio14) (Version:  - YoYo Games Ltd.)
GIMP 2.6.11 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)
Google Chrome (HKCU\...\Google Chrome) (Version: 43.0.2357.65 - Google Inc.)
iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
Java™ 7 Update 5 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217005FF}) (Version: 7.0.50 - Oracle)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
K-Lite Codec Pack 10.6.5 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.6.5 - )
KParser (HKLM-x32\...\{B754035B-2B0B-4E0A-94C6-5DD4C388DE7E}) (Version: 1.6 - Wayward Gamers)
LG United Mobile Driver (HKLM-x32\...\{2A3A4BD6-6CE0-4e2a-80D2-1D0FF6ACBFBA}) (Version: 3.13.2.0 - LG Electronics)
LSI PCI-SV92EX Soft Modem (HKLM\...\LSI Soft Modem) (Version: 2.2.100 - LSI Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft AppLocale (HKLM-x32\...\{394BE3D9-7F57-4638-A8D1-1D88671913B7}) (Version: 1.0.0 - MS)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Windows Application Compatibility Database (HKLM\...\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb) (Version:  - )
MiniTool Partition Wizard Home Edition 7.1 (HKLM-x32\...\{34A153FE-6926-4C14-B48A-B71E68C672A8}_is1) (Version:  - MiniTool Solution Ltd.)
Mozilla Firefox 38.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 38.0.1 (x86 en-US)) (Version: 38.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MPC-HC 1.7.6 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.6 - MPC-HC Team)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.4.2 - Notepad++ Team)
NVIDIA 3D Vision Controller Driver 301.42 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 301.42 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5896 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.4 - NVIDIA Corporation)
NVIDIA Graphics Driver 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.06 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.16.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.16.0 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.12.0213 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0213 - NVIDIA Corporation)
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r3878) (Version:  - )
Pcsx2 0.9.1 Watermoose (HKLM-x32\...\Pcsx2_is1) (Version:  - Pcsx2 Team)
Pcsx2 0.9.6 (HKLM-x32\...\{0E2B767B-EA6A-489B-BF83-8083FE1DB661}) (Version: 1.0.0 - Pcsx2 Team)
PlayOnline Viewer & Tetra Master (HKLM-x32\...\{47004155-7376-403E-89E9-4C9F44AAF0D0}) (Version: 1.18.00 - SQUARE ENIX CO., LTD.) Hidden
PlayOnline Viewer & Tetra Master (HKLM-x32\...\InstallShield_{47004155-7376-403E-89E9-4C9F44AAF0D0}) (Version: 1.18.00 - SQUARE ENIX CO., LTD.)
Project 64 version 2.0.0.14 (HKLM-x32\...\Project 64_is1) (Version: 2.0.0.14 - )
Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)
PVSonyDll (HKLM\...\{3D3E663D-4E7E-4577-A560-7ECDDD45548A}) (Version: 1.00.0001 - NVIDIA Corporation) Hidden
Real Alternative 1.9.0 Lite (HKLM-x32\...\RealAlt_is1) (Version: 1.9.0 - )
Recuva (HKLM\...\Recuva) (Version: 1.43 - Piriform)
Revo Uninstaller 1.94 (HKLM-x32\...\Revo Uninstaller) (Version: 1.94 - VS Revo Group)
Safari (HKLM-x32\...\{FA4C2D53-205F-4245-9717-F3761154824D}) (Version: 5.34.57.2 - Apple Inc.)
SES Driver (HKLM\...\{D8CC254C-C671-4664-9A38-FA368D1E2C97}) (Version: 1.0.0 - Western Digital)
Shadow Era Launcher 1.02 (HKLM-x32\...\{69EE23BB-4A14-4631-B2B3-B14748F56FF7}_is1) (Version: 1.02 - Wulven Game Studios)
Simple Port Forwarding (HKLM-x32\...\Simple Port Forwarding) (Version: 3.0.13 - PcWinTech.com)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Speccy (HKLM\...\Speccy) (Version: 1.24 - Piriform)
System Requirements Lab (HKLM-x32\...\SystemRequirementsLab) (Version:  - )
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Upgrade Kit (HKLM-x32\...\{1D0FDD6D-3C5E-4588-8ED0-02DC88014BF2}) (Version: 1.00.3002 - Acer Inc.)
version 1.3 (HKLM-x32\...\LithUnwrap 1.3_is1) (Version:  - )
Visual C++ 8.0 Runtime Setup Package (x64) (HKLM-x32\...\{2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}) (Version: 9.0.0.623 - AVG Technologies CZ, s.r.o.)
Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Vuze (HKLM-x32\...\8461-7759-5462-8226) (Version: 4.7 - Vuze Inc.)
WD Link (HKLM-x32\...\WD Link) (Version: 1.00.03 - Western Digital)
WD SmartWare (HKLM\...\{604CB4FC-3D32-405F-A109-165F170529B6}) (Version: 1.2.0.20 - Western Digital)
Windower (HKCU\...\Windower) (Version: 4.0.0.0 - Windower Team)
Windows Driver Package - Western Digital Technologies (WDC_SAM) WDC_SAM  (01/19/2011 1.0.0009.0) (HKLM\...\4CA7CFBB29889F25ACB3DF6E3A42BAE29EB43B20) (Version: 01/19/2011 1.0.0009.0 - Western Digital Technologies)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Wings 3D 1.4.1 (HKLM-x32\...\Wings 3D 1.4.1) (Version:  - )

========================= Memory info: ===================================
Percentage of memory in use: 48%
Total physical RAM: 2814.55 MB
Available physical RAM: 1460.99 MB
Total Pagefile: 4608.45 MB
Available Pagefile: 1549.12 MB
Total Virtual: 4095.88 MB
Available Virtual: 3975.91 MB

========================= Partitions: =====================================
1 Drive c: () (Fixed) (Total:465.66 GB) (Free:2.03 GB) NTFS
6 Drive h: (WD SmartWare) (CDROM) (Total:0.43 GB) (Free:0 GB) UDF
7 Drive j: () (Fixed) (Total:1862.36 GB) (Free:9.37 GB) NTFS

========================= Users: ========================================
User accounts for \\OWNER-PC

Administrator            Guest                    owner                    
UpdatusUser              

**** End of log ****
 

 

Speccy Link: http://speccy.piriform.com/results/Zucv02zPtuLJh7dqzPCKw5v


Edited by hamluis, 24 May 2015 - 12:44 PM.


#4 hamluis

hamluis

    Moderator


  • Moderator
  • 55,887 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:53 AM

Posted 24 May 2015 - 12:58 PM

Data On Net Runtime Errors

 

FWIW:  IMO, anyone downloading/installing "free video converters" from any website...increases the system chances of being invaded by unwelcome guests.  We don't check for malware in this forum, that would have to done in the Am I Infected forum.

 

 Drive c: () (Fixed) (Total:465.66 GB) (Free:2.03 GB) NTFS
 

System has insufficient free space on C: partition (free space should be in area of 15% of total Windows partition space).  This should be corrected ASAP.  Any data files on C: can be moved to another drive/partition...you (frankly) need a larger or another drive for storage, seems to me.  Bottom line is that Windows can be expected NOT to perform properly when there is insufficient free space on the Windows partition.

 

Louis



#5 fighterx

fighterx
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:53 AM

Posted 05 June 2015 - 10:16 AM

I now have ~100 GB of free space on drive C after deleting some files, which should be plenty, but the problem persists. Even now Svchost.exe is taking up 700mb~1.2 GB., except this time its staying at 700~1.2 GB without going back down to normal. Even when I restart it just climbs right back up to 1.2 gb and stays there.


Edited by fighterx, 05 June 2015 - 10:29 AM.


#6 hamluis

hamluis

    Moderator


  • Moderator
  • 55,887 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:53 AM

Posted 05 June 2015 - 01:37 PM

How to determine what services are running under a SVCHOST.EXE process - http://www.bleepingcomputer.com/tutorials/tutorial129.html

 

Louis

   

#7 Havachat

Havachat

  • Members
  • 1,087 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Sleepy Hollow - Geelong - Go Cats.
  • Local time:09:53 PM

Posted 07 June 2015 - 02:19 AM

Just a thought - Have a look here - at my post at bottom of page. 

http://www.bleepingcomputer.com/forums/t/575807/svchostexe-netsvcs-draining-all-my-memory/

 

Check when you last did your updates and see if it ties into .Net Framework updates ?



#8 Astronomical

Astronomical

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:07:53 PM

Posted 09 June 2015 - 01:47 PM

You might be interested to know that there is a similar issue relating to high memory usage of svchost.exe process caused by Windows Update Service (wuaserv) scanning for updates (eventhough not installing any) :

 

https://social.technet.microsoft.com/Forums/windows/en-US/4a782e40-bbd8-40b7-869d-68e3dfd1a5b4/windows-update-scan-high-memory-usage?forum=w7itproperf&prof=required

 

A Patch KB3050265 was released by Microsoft on 03Jun2015 to fix the matter.

 

Hope this info is helpful to all BC members with similar problems.

 

Cheers.



#9 PhilT

PhilT

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:11:53 AM

Posted 15 June 2015 - 03:14 PM

You might be interested to know that there is a similar issue relating to high memory usage of svchost.exe process caused by Windows Update Service (wuaserv) scanning for updates (eventhough not installing any) :

 

https://social.technet.microsoft.com/Forums/windows/en-US/4a782e40-bbd8-40b7-869d-68e3dfd1a5b4/windows-update-scan-high-memory-usage?forum=w7itproperf&prof=required

 

A Patch KB3050265 was released by Microsoft on 03Jun2015 to fix the matter.

 

Hope this info is helpful to all BC members with similar problems.

 

Cheers.

 

Thanks for that. I managed to make a laptop workable that had 1.4 GB of RAM eaten by one svchost.exe by turning off Windows Updates pending research of a real solution.

 

Update scans hadn't happened for 5 days. Will see if the MS Patch to an MS SNAFU helps.



#10 Astronomical

Astronomical

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:07:53 PM

Posted 17 June 2015 - 08:23 AM

Just to update the info as there are others who have also encountered the same problem:

 

1) http://www.sevenforums.com/general-discussion/364658-wuauserv-causing-svchost-memory-usage-explode.html

 

2) https://superuser.com/questions/821032/svchost-exe-high-memory-usage-wuauserv

 

3) I have applied the KB3050265 patch for my own Windows 7 Home Premium SP1 (64Bit) notebook with 4GB RAM.

    The svchosts (wuaserv) process which ran at 3.0GB (maximum) previously has now been reduced to about 900MB max.

 

Hope this info is helpful.

 

Best Regards


Edited by Astronomical, 17 June 2015 - 09:39 AM.





2 user(s) are reading this topic

0 members, 2 guests, 0 anonymous users