Abnormally High CPU Usage From Svchost - Exe (SOLVED) - Microsoft Community

Abnormally high CPU usage from svchost.exe [SOLVED] - Microsoft C...
http://answers.microsoft.com/en-us/windows/forum/windows_7-perform...
Sign in
Community
Home Forums Getting Started FAQ Additional Support Find answers Ask a question Announcements: 1
Windows
We'll search this forum for an answer
1 of 5
7/16/2013 5:19 PM
Applies To: Windows | Windows 7 | Performance and Maintenance
Question
LeahVazquez asked on April 12, 2012 Abnormally high CPU usage from svchost.exe [SOLVED]
Had this question Me Too
Related Threads
There are no related threads.
More Microsoft Resources

Fix Windows system performance problems Ways to improve your computer's performance Optimize Windows 7 for better performance Get Help Now For Windows 7 Windows 7 Home
Occasionally after windows automatically updates, my laptop will restart with abnormally high CPU usage. I checked my processes and found that "svchost.exe*32 - SYSTEM - winrscmde" appeared to be using most of the CPU. When attempting to "Go to Service(s)" no service was highlighted. As a last ditch effort in a long list of fixes I tried(including scanning my pc with multiple malware and virus detection programs, restarting the computer again and trying a manual fix I found in a forum somewhere else) I simply chose svchost.exe*32, then clicked "Open file location" and double clicked the svchost application, opening a new svchost.exe*32 and ending the old process and it seems to have solved my problem for the time being, but I can't help but wonder what caused this problem in the first place? [EDIT]: I fixed my problem another way, apparently somehow a rootkit was causing the problem? It started out as a problem with all regular google sites, ads and services not being able to be displayed on my browser. I searched the web for answers and found that someone else had the exact same problem and used a combination of Rkill and TDSKill executable programs to stop malware processes and remove rootkits. I never thought of this before because i had no idea what a rootkit was. After rebooting google worked fine and i found that the particular service host.exe file that had been causing me so much trouble was gone and not running, also my computer runs smoother than ever!
Reply
| | Reply with quote | | Report abuse
| | Email updates |
Answer
LeahVazquez replied on May 26, 2012 In reply to Tauheedul Ali post on April 12, 2012
Found this helpful Me Too
I fixed my problem another way, apparently somehow a rootkit was causing the problem? It started out as a problem with all regular google sites, ads and services not being able to be displayed on my browser. I searched the web for answers and found that someone else had the exact same problem and used a combination of Rkill and TDSKill executable programs to stop malware processes and remove rootkits.I never thought of this before because i had no idea what a rootkit was. After rebooting google worked fine and i found that the particular service host.exe file that had been causing me so much trouble was gone and not running, also my computer runs smoother than ever!
Reply
All Replies (7)

Tauheedul Ali Tauheedul Ali replied on April 12, 2012
Hello Leah, yes svchost.exe isn't always associated with viruses, it is a windows feature responsible for loading shared dll's for other applications to use. There are ways to find out which services are hogging the resources. Take a look at the guide below...
2 of 5
7/16/2013 5:19 PM
What is svchost.exe And Why Is It Running? You are no doubt reading this article because you are wondering why on earth there are nearly a dozen processes running with the name svchost.exe. You cant kill them, and you dont remember starting them so what are they? So What Is It? According to Microsoft: svchost.exe is a generic host process name for services that run from dynamic-link libraries. Could we have that in english please? Some time ago, Microsoft started moving all of the functionality from internal Windows services into .dll files instead of .exe files. From a programming perspective this makes more sense for reusability but the problem is that you cant launch a .dll file directly from Windows, it has to be loaded up from a running executable (.exe). Thus the svchost.exe process was born. Why Are There So Many svchost.exes Running? If youve ever taken a look at the Services section in control panel you might notice that there are a Lot of services required by Windows. If every single service ran under a single svchost.exe instance, a failure in one might bring down all of Windows so they are separated out. Those services are organized into logical groups, and then a single svchost.exe instance is created for each group. For instance, one svchost.exe instance runs the 3 services related to the firewall. Another svchost.exe instance might run all the services related to the user interface, and so on. So What Can I Do About It? You can trim down unneeded services by disabling or stopping the services that dont absolutely need to be running. Additionally, if you are noticing very heavy CPU usage on a single svchost.exe instance you can restart the services running under that instance. The biggest problem is identifying what services are being run on a particular svchost.exe instance well cover that below. If you are curious what were talking about, just open up Task Manager and check the Show processes from all users box: Checking From the Command Line (Vista or XP Pro) If you want to see what services are being hosted by a particular svchost.exe instance, you can use the tasklist command from the command prompt in order to see the list of services. tasklist /SVC The problem with using the command line method is that you dont necessarily know what these cryptic names refer to. Checking in Task Manager in Vista You can right-click on a particular svchost.exe process, and then choose the Go to Service option. This will flip over to the Services tab, where the services running under that svchost.exe process will be selected: The great thing about doing it this way is that you can see the real name under the Description column, so you can choose to disable the service if you dont want it running. Using Process Explorer in Vista or XP You can use the excellent Process Explorer utility from Microsoft/Sysinternals to see what services are running as a part of a svchost.exe process. Hovering your mouse over one of the processes will show you a popup list of all the services: Or you can double-click on a svchost.exe instance and select the Services tab, where you can choose to stop one of the services if you choose. Disabling Services Open up Services from the administrative tools section of Control Panel, or type services.msc into the start menu search or run box. Find the service in the list that youd like to disable, and either double-click on it or right-click and choose Properties. Change the Startup Type to Disabled, and then click the Stop button to immediately stop it. You could also use the command prompt to disable the service if you choose. In this command trkwks is the Service name from the above dialog, but if you go back to the tasklist command at the beginning of this article youll notice you can find it there as well. sc config trkwks start= disabled Source: http://www.howtogeek.com/howto/windows-vista/what-is-svchostexe-and-why-is-itrunning/
Software Developer
Reply
3 of 5
7/16/2013 5:19 PM
Gerry C J Cornell
Gerry C J Cornell replied on April 12, 2012 Community Star Leah Do you have an HP Printer? If yes what model?
Hope this information is helpful. Gerry Stourport, England Enquire Plan Execute
Reply
LeahVazquez replied on April 14, 2012 In reply to Gerry C J Cornell post on April 12, 2012
Leah Do you have an HP Printer? If yes what model? No :( I don't have a printer or scanner, etc.
Reply
Answer
LeahVazquez replied on May 26, 2012 In reply to Tauheedul Ali post on April 12, 2012
I fixed my problem another way, apparently somehow a rootkit was causing the problem? It started out as a problem with all regular google sites, ads and services not being able to be displayed on my browser. I searched the web for answers and found that someone else had the exact same problem and used a combination of Rkill and TDSKill executable programs to stop malware processes and remove rootkits.I never thought of this before because i had no idea what a rootkit was. After rebooting google worked fine and i found that the particular service host.exe file that had been causing me so much trouble was gone and not running, also my computer runs smoother than ever!
Reply
hanhnguyens1404 replied on October 28, 2012 In reply to LeahVazquez post on May 26, 2012
Hi Leah, I have the same problem, too and my teacher said it might be caused by viruses or malwares or rootkits... I have so much trouble with my laptop because it is too slow. Could you give me the more detail instruction to resolve this problem? Thanks a lot!
Reply
Ameixinhas replied on May 8, 2013
4 of 5
7/16/2013 5:19 PM
In reply to hanhnguyens1404 post on October 28, 2012 Hey. I had the same problem, downloaded a program called RKill (www.bleepingcomputer.com/download /rkill/) and after I ran that program I ran Spybot Search and Destroy (http://www.safer-networking.org /dl/). My computer hasnt had a 100%usage moment for 24 hours and that would happen every 5 or 10 minutes.
Reply
hanhnguyens1404 replied on May 15, 2013 In reply to Ameixinhas post on May 8, 2013 thank you, guy:)
Reply
English
Microsoft Community Code of Conduct
Microsoft Community Feedback
Trademarks Privacy & Cookies Terms of Use 2013 Microsoft
5 of 5
7/16/2013 5:19 PM

Abnormally High CPU Usage From Svchost - Exe (SOLVED) - Microsoft Community

Enviado por

Dados do documento

Descrição original:

Título original

Direitos autorais

Formatos disponíveis

Compartilhar este documento

Compartilhar ou incorporar documento

Opções de compartilhamento

Você considera este documento útil?

Este conteúdo é inapropriado?

Direitos autorais:

Formatos disponíveis

Abnormally High CPU Usage From Svchost - Exe (SOLVED) - Microsoft Community

Enviado por

Direitos autorais:

Formatos disponíveis

Abnormally high CPU usage from svchost.exe [SOLVED] - Microsoft C...

We'll search this forum for an answer