Tech Problem Aggregator

Constantly running CPU - svchost.exe netsvcs

Q: Constantly running CPU - svchost.exe netsvcs

i'm really struggling to get to the bottom of my suddenly slower Sony Vaio notebook computer running XP. i've run virus scans, spyware scans, etc. and nothing comes up. when i google looking for problems, i get links to nothing that helps (including 5 year old forum postings about a similar problem).

using the Process Explorer, i've determined that it's the netsvcs portion of svchost that is constantly fluctuating (and it's kernel.dll portions) between 5% and 35% no matter what i'm doing with the computer. turning off Windows Automatic Updates has made no difference. the only thing that works is using the process explorer to kill the netsvcs process - but that's killing the symptom, not fixing the problem.

why is netsvcs constantly running? HOW DO I GET IT TO STOP USING SO MUCH OF MY CPU SO THAT THE COMPUTER WILL JUST RUN NORMALLY???

i can post more info if you tell me what else you need. thanks for all your help!

A: Constantly running CPU - svchost.exe netsvcs

10 more replies
Answer Match 86.1%

Hello,
 
My computer is currently running at 50+% with nothing open, making even basic operation painstaking.  Vista Home Premium 32 bit, SP 2.  I have Malwarebytes installed, and have run cleanups using CCleaner.  This is a relatively recent problem, I have had virus issues in the past but not operation issues like this one.  I tried HP support (wanted a boot disk, ended up paying for a tech to download Revo Uninstaller & MSE).  Uninstalled many non-essential programs.  First had an issue with svchost.exe for Windows updates; disabled the updates and that cleared up, only to be replaced by this.  I don't know that it is a good idea to end the process tree, and I have no idea what services are nonessential or how to identify a leak.  The services under the offending svchost.exe are: 
 
Winmgmt (Windows Management Instrumentation)
Themes
ShellHWDetection (Shell Hardware Detection)
SENS (System Event Notification Service)
Schedule (Task Scheduler)
RaasMan (Remote Access Connection Manager)
ProfSvc (User Profile Service)
MMCSS (Multimedia Class Scheduler)
LanmanServer (Server)
IpHlpSvc (IP Helper)
gpsvc (Group Policy Client)
EapHost (Extensible Authentication Protocol)
Appinfo (Application Information)
AeLookupSvc (Application Experience)
 
Any suggestions on what to try next?  Any help would be greatly appreciated.. this is making life just a little more difficult than it should be.
 
Update 10/6: I did a... Read more

More replies
Answer Match 84.42%

Yesterday my HDD was busy running for 20 or more minutes. So I took a look at Resource Moniter, it show "svchost.exe(netsvcs)" is keep writing something and I wait for another 10 minutes but no luck.After reboot it not happen again. I guess this related to Windows Update (Patch Tuesday?), any suggestions?

A:svchost.exe(netsvcs) causes disk endless running...

Hi,Have you checked in Event Viewer? Is there any error message related in the event of service crashing? If the issue occurs again, please try to use Resource Monitor to suspend svchost.exe(netsvcs) and manually stop Windows Update Service, then resume svchost.exe(netsvcs) to see if it works. This would help us identify if it is related to Windows Update.Best Regards.Dale Qiao

7 more replies
Answer Match 67.62%

Hi there,

Background: I had some spyware on my PC (possibly SpyAxe and/or Spy Sheriff and/or others), so I decided to embark on the l-o-n-g journey to try and fix it. I think I removed it by running a program called smitRem. Also, Windows couldn't find a "kernels64.dll" file, so I used HijackThis (HJT) to delete the associated registry file. I also purchased the Spyware Doctor software. Anyway, I still have 3 strange things happening:

1. When Windows loads, my cursor goes into hourglass mode every two seconds or so (like it's constantly working on something). The Task Manager shows the svchost.exe task intermittently running, plus there are a couple other processes that seem normal.

2. I cannot change the image on my Desktop, nor can I access the Browse menu to get images. The only images that will display are those that came with the OS.

3. In the past I used to be able to simply click Outlook Express or Internet Explorer and my Dial-up Connection window would pop up, asking me whether or not I'd like to connect to the Internet. Now this doesn't work. I have to double-click the actual connection BEFORE opening any web-dependant programs.

Below is my HJT log. This is a brand new computer and is the first time I've had any issues with it. I'm very curious to understand whether or not these issues are leftovers from the spyware. If you have any suggestions to fix these issues, can you please explain why you've chosen them? Just ... Read more

A:Solved: HJT log after 'fixing' spyware: Desktop image prob & svchost.exe constantly running

12 more replies
Answer Match 67.2%

I have been having problems with svchost.exe (netsvcs) downloading for sometimes hours on end and completely hogging my limited bandwidth internet connection, pushing everything out of the way. This problem started around Jan 2nd of 2012 and since then I have reinstalled the system to "factory new, out of box experience at least ten times. I have had Microsoft's tech service remotely check and make adjustments to my system, yet nothing helps. This did not happen last year and I am virus / malware free. I am using Microsoft Security Essetials, and have also Malwarebytes Pro installed. I am able to stop the process by right clicking on it in Resource monitor, something I never had to do before to get online. I am not computer literate, beyond simple tasks and most of the abbreviations used in other forums are meaningless at best. (I am disabled and this is my lifeline.)

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: AMD C-50 Processor, AMD64 Family 20 Model 1 Stepping 0
Processor Count: 2
RAM: 2794 Mb
Graphics Card: AMD Radeon HD 6250 Graphics, 256 Mb
Hard Drives: C: Total - 223012 MB, Free - 179067 MB;
Motherboard: Acer, Aspire 5253
Antivirus: Microsoft Security Essentials, Updated and Enabled

Thanks for any help you may be able to provide.
 

A:svchost.exe (netsvcs)

Some suggestions on this forum

http://forums.techarena.in/windows-software/1362807.htm

BITS service could be the cause, it is downloading windows updates in the background, this will happen with a new install or once a month when new windows updates are released.

Open a command prompt and type;
tasklist /svc /fi "imagename eq svchost.exe"
From there you should be able to determine by the PID which service is the culprit.
 

1 more replies
Answer Match 67.2%

For almost a week upon start-up, my computer will be running at 100 cpu. The culprit is the infamous svchost.exe. I have been trying to resolve this problem for almost a week by searching tech support threads and microsoft threads but all the solutions that worked for other people have not worked for me.

I have run multiple malware scans and nothing comes up.

As you can see in the first attachment, svchost.exe (netsvcs) is taking up a majority of my cpu. It would be higher if i didn't also have chrome running. But the actual cpu of the services related to svchost.exe is much lower. So where is all this extra cpu coming from?

Any help would be much appreciated!

A:svchost.exe (netsvcs) 100 cpu

Hi -

svchost.exe is the Host Process for Windows Services, allowing multiple system services to run under one roof. It is completely normal to have 12+ svchost.exe running at one time.

The detail info in your screenshot does not match the total -- what is the rest of the detailed info?

SysInternals Process Explorer may be of help to you here -

http://technet.microsoft.com/en-us/s...rnals/bb896653

Right-click on procexp.exe, "Run as Administrator".

Regards. . .

jcgriff2

`

1 more replies
Answer Match 67.2%

Task Monitor shows svchost.exe(netsvcs) using 90%-100% of CPURestarts if killed.No new programs installed.Win7 64bit SP1SecurityCheckFarbar Service ScannerMiniToolBoxMalwarebytes Anti-MalwareMalwarebytes Anti-RootkitrkillTemp File CleanerAdwCleanerJunkware Removal ToolSophos Free Virus Removal ToolProcess ExplorerFarber Recovery Scan Tool (log files attached)The above tools were all run and logs reported at the following lonk:http://www.bleepingcomputer.com/forums/t/622966/computer-very-slow-100-cpu-usage/page-2For whatever reason, I booted into safe mode to type this and killed svchost.exe(netsvcs) -- and CPU usage is back to normal and svchost.exe(netsvcs)did not restart.

More replies
Answer Match 67.2%

hello people of the internet

i need some help with my pc a process called svchost.exe (netsvcs) is using a hole bunch of ram and stoping me from doing stuff on my computer i don`t know what is triggering it to do this. but its been doing this for at least a month now iv scanned with malwarebytes and scanned with bit defender and my system is clean but it will not stop happening, any help?

p.s i am now checking it when i boot up my computer and its hovering around 17,000 kbs to 30,000kbs but when it slows down my pc it goes right up to 172,000kbs+. also if i stop the process it makes windows 7 look like an old version of windows and then crashes my computer.

p.p.s this is my first post on this website so im not sure if i put it in the right category if i did put it in the wrong category sorry about that.
 

A:svchost.exe (netsvcs) using 80% of ram and most of my cpu

16 more replies
Answer Match 67.2%

My Toshiba laptop is extremely slow an I've found out that svchost.exe is using up 85-95% of available CPU (consitently running at 100%).  I've done full virus scan, in and out of safe mode, with Norton, Malwarebytes and Spybot with no threats found.  I installed Process Manager and all of the systems that are running on this instance of svchost seem to be typical functions like Windows Update and Themes.  Firefox can run ok, but Internet Explorer just freezes and everything is generally slow.  Any help would be appreciated.  Thanks!
 

A:svchost.exe (netsvcs) using a ton of CPU

Please download MiniToolBox  , save it to your desktop and run it.
 
Checkmark the following checkboxes:
  List last 10 Event Viewer log
  List Installed Programs
  List Users, Partitions and Memory size.
 
Click Go and paste the content into your next post.
 
Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link.
 
Louis

1 more replies
Answer Match 67.2%

For almost a week upon start-up, my computer will be running at 100 cpu. The culprit is the infamous svchost.exe. I have been trying to resolve this problem for almost a week by searching tech support threads and microsoft threads but all the solutions that worked for other people have not worked for me.

I have run multiple malware scans and nothing comes up.

As you can see in the first attachment, svchost.exe (netsvcs) is taking up a majority of my cpu. It would be higher if i didn't also have chrome running. But the actual cpu of the services related to svchost.exe is much lower. So where is all this extra cpu coming from?

Any help would be much appreciated!
 

A:svchost.exe (netsvcs) 100 cpu

16 more replies
Answer Match 66.36%

Just last night I borrowed a Samsung SyncMaster 914v 1280x1024 from a friend of my dad. Initially it seemed to work fine, but unfortunately today I've noticed some strange new behavior with my PC. C:\Windows\system32\svchost.exe -k netsvcs is constantly running at 48-50% CPU usage. I've tried restarting my PC & it wont stop, that I know of it's never done this before. Overall my computer is increasingly laggy, dragging my mouse across the screen causes incredible stutter. I ran a malwarebytes scan last night immediately after getting this monitor & it found nothing. Please can someone help me sort out what's going on or if it's simply the fact my PC can't handle this higher resolution?

More replies
Answer Match 66.36%

My PC seems to access DataStore.edb a lot, bringing my hard drive to a crawl for minutes at a time. It happens when I first boot up, and on and off as I use it throughout the day. What is triggering this to be accessed? Is there anything I can do to minimize this file being accessed so often? (no viruses - I already scanned for viruses).

I already put the datastore files on my Avast exclusion list, as I've read that antivirus scanning those files can tie up the system.

I also just installed optional Windows Update KB3050265 as I read it fixes a major issue with Windows Update tying up system resources.

Is it correct that this file is tied into the update service? if so, would it make sense to disable the Windows update service and only manually enable it just to update my PC when needed rather than leaving it on?

A:svchost.exe (netsvcs) using DataStore.edb

It doesn't make sense to disable windows updates - for security reasons. You can try Brink's fix here:

Windows Update - Reset - Option 3

If that doesn't work you can try another fix but please do not go ahead unless you have a system image backup and know how to restore the backup.

Very high memory (and sometimes CPU) usage by svchost.exe: up to 1 GB

Note: The Windows Update download links and force install instuctions relate to Windows Update Agent 7.6.600.320 and as you have installed Windows Update KB3050265 which adds improvements for those wishing to upgrade to Windows 10 - those instructions probably don't apply unless you can find a standalone installer for whatever version of Windows Update Agent that you have currently installed.






Quote:
Fixes included in this update
This update addresses an issue in which system performance can be decreased during scans. This issue has the greatest effect on computers that have a small amount of physical memory.
This update addresses an issue in which Windows Update scans can fail and generate a 0x8007000E error.
General improvements are made to support upgrades to a later version of Windows.


Also note: You may need to run the Hotfix in aggressive mode two or three times with a reboot each time for the settings to take effect.

Another option would be to remove KB3050265 using Powershell.

For me personally - Windows Update Agent is 7.6.600.320 and all Windows 10 Upgrade updates have been removed.

A... Read more

1 more replies
Answer Match 66.36%

Hi there, I've been having this issue for a couple of weeks now at least and was wondering if anyone here might be able to help me.

Recently svchost.exe (netsvcs) has been hogging all my memory, I believe it occurs when I cabled ethernet for my internet as it seems to have only come since then, though I may be wrong.

Malwarebytes and SuperAntiSpyware came up fine and I am just updating to the latest windows updates now. If anyone could help me troubleshoot this and get it back to normal I would be so grateful!

Many thanks,

Chillo
 

A:svchost.exe (netsvcs) Using up to 95% memory!

11 more replies
Answer Match 66.36%

System was badly infected. Removed most infections. Now, when the system sits, svchost.exe keeps increasing in memory size until the system freezes. Running ProcessViewer, it shows that it's tied to svchost.exe -k netsvcs
 attach.txt   11.58KB
  0 downloads
 dds.txt   11.29KB
  4 downloads
 GMER.log   3.16KB
  1 downloads

A:Possible Infection in svchost.exe with netsvcs

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

3 more replies
Answer Match 66.36%

Hello
i'm new here and i would like some help if possible. Yesterday i noticed my RAM was really high and I didnt have any programs running. I looked on TaskManager and nothing appeared to be running high. So i checked the resource monitor and that's when i noticed svchost.exe (netsvcs) was using up 2GBs
svchost.exe (netsvcs) has my memory being used up to 4gb and i have nothing running. Im guessing it's a virus? Could someone please help me remove it, thank you.

More replies
Answer Match 66.36%

Shortly after boot up the process scvhost.exe (netsvcs) PID 1056 starts hogging all of my CPU. I have tried running Resource Monitor to identify the service using up my CPU but it does not show the cpu usage for the individual services.

I have also tried numerous other fixes i found while searching online as well as using CCleaner to clean up my registry files. Windows is up to date as far as i know and i have still had no luck.

ANY help would be greatly appreciated

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: AMD Athlon(tm) II Dual-Core M300, AMD64 Family 16 Model 6 Stepping 2
Processor Count: 2
RAM: 3838 Mb
Graphics Card: AMD M880G with ATI Mobility Radeon HD 4200, 256 Mb
Hard Drives: C: Total - 464838 MB, Free - 196233 MB;
Motherboard: Gateway, SJV50TR
Antivirus: Microsoft Security Essentials, Updated and Enabled

Below is a screen shot of the Resource monitor after my system was idle for 1 min with no other programs running.

 

A:SVCHost.exe (netsvcs) hogging 90-100% of CPU

16 more replies
Answer Match 66.36%

Can anyone tell me if it is possible to permanently stop the above. The cpu usage is low until I open a browser then it goes to 25% If I right click and stop it it`s fine until reboot.
I`ve tried most of the suggested options back always reverts back.
I think it might be linked to Windows Updates but Ive turned that off and its still happening.
Using Windows 7 Home 64 bit version and recently performed a clean install.

A:svchost.exe (netsvcs) using high cpu

If you have done a clean install of W7, I recommend leaving the computer on with automatic updates on for at least 3 days to allow all the necessary updates to download and install.

6 more replies
Answer Match 66.36%

I reformatted my recently (2 weeks ago) and today, updated my PC through Windows Update (almost 200) and after, my pc is laggy.
I went to Resource Monitor and found the process "svchost.exe (netsvcs)" is taking about 512 mb RAM (My total physical RAM is 1GB.
What do I do? Thanks in advance
 
EDIT: I don't know what happened, but now it's back to it's normal state (500 MB RAM in use). And even if it was in 90% RAM, it was just like nothing happened, little performance difference (w/ Chrome open). I will post if it really is a problem to me.

A:"svchost.exe (netsvcs)" taking up RAM up to 95%

Chrome itself will sometimes use more than 1GB of RAM...IMO, you have insufficient resources (RAM) to effectively do very much with a Win 7 install.
 
Typical processes like browser and system security software...by themselves...will frequently use more system resources/RAM than you  state is your situation.
 
Louis

4 more replies
Answer Match 66.36%

im running build 7100 fresh install. help, i need to shut this thing down.

A:svchost.exe (netsvcs) is always downloading something

Open a command prompt and type;
tasklist /svc /fi "imagename eq svchost.exe"
From there you should be able to determine by the PID which service is the culprit.
Open up taskmgr and under the services tab, find the corresponding PID and shut her down.
Hope this helped

9 more replies
Answer Match 66.36%

Every now and then my SVCHOST.exe crashes and comes up with the error screen "send error report" or "do not send".
Which results in me losing all the functionality that comes with that service such as sound and my XP theme.
This happens approximately twice a day and I assume it has something to do with the trojan I have.
Nod32 keeps blocking intrusions. I have about a million of these in my NOD32 log file:
16/01/2009 11:35:30 PM
HTTP filter
file http://glx078.angelfire.com/p
probably a variant of Win32/Statik application
NT AUTHORITY\SYSTEM
Threat was detected upon access to web by the application: C:\WINDOWS\system32\svchost.exe.
-----------------------------------------------------------------------


DDS (Ver_09-01-07.01) - NTFSx86
Run by mik at 23:50:38.14 on Fri 16/01/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_11
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.1155 [GMT 11:00]

AV: ESET NOD32 Antivirus 3.0 *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
E:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\system... Read more

A:SVCHOST.exe (netsvcs) crashing

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Please visit this webpage for download links, and instructions for running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all antivirus and antimalware programs so they do not interfere with the running of ComboFix.

Please post the C:\ComboFix.txt in your next reply for further review.

------------------------------------------------------

2 more replies
Answer Match 66.36%

I have a number of PC's in my office that are exhibiting strange behaviour. The svchost.exe (netsvcs) process is consuming all of one of the machines quad cores. If I stop the Windows Update Service the process ends and the machine goes back to running normally. If I start the service back up the process runs wild again. It's occuring on Win7 machines, I wiped the C:\Windows\SoftwareDistribution folder, no luck. If I manually search for windows updates it starts up the svchost process and goes back to using all CPU.
 
How can I find out why the Update service causes this?

More replies
Answer Match 66.36%

Hi,
I'm having high CPU usage from svchost.exe (netsvcs). 
What should I run to check it out?
Have Norton, ran Malwarebytes and TDSKiller.
Thanks!
cbeau37

A:svchost.exe (netsvcs) high CPU

Hi, with this type of issue better to get a deeper look. Please follow this Preparation Guide and post in a new topic.Let me know if all went well.

0 more replies
Answer Match 66.36%

Hi,
I'm having high CPU usage from svchost.exe (netsvcs).
My mouse starts moving real slow then comes back.
What should I run to check it out?
Have Norton, ran Malwarebytes and TDSKiller.
Below is my FRST.txt paste. Also Attached is my Addition.txt file.
Thanks in advance!
cbeau37

 
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:06-06-2016
Ran by Chris (administrator) on CHRIS-PC (07-06-2016 06:25:58)
Running from C:\Users\Chris\Downloads
Loaded Profiles: Chris (Available Profiles: Chris)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(AVerMedia) C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
() C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
(SEIKO EPSON C... Read more

A:svchost.exe (netsvcs) high cpu

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Press the windows key + r on your keyboard at the same time. This will open the RUN BOX.Type Notepad and and click the OK key.Please copy the entire contents of the code box below to the a new file. start
CreateRestorePoint:
EmptyTemp:
CloseProcesses:

ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File
URLSearchHook: HKU\S-1-5-21-3097217664-1659511971-2978430448-1001 - (No Name) - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - No File
SearchScopes: HKU\S-1-5-21-3097217664-1659511971-2978430448-1001 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxps://nortonsafe.search.ask.com/web?q={searchTerms}&o=APN11913&l=dis&prt=NS&chn=1000000&geo=US&ver=22&locale=en_US&gct=kwd&qsrc=2869
SearchScopes: HKU\S-1-5-21-3097217664-1659511971-2978430448-1001 -> {C04B7D22-5AEC-4561-8F49-27F6269208F6} URL = hxxp://toolbar.inbox.com/search/dispatcher.aspx?tp=bs&qkw={searchTerms}&tbid=80210&lng=en
BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86... Read more

0 more replies
Answer Match 66.36%

I inherited my laptop from my ex..... I thought I'd gotten it mostly cleaned up and ran virus and malware.... however, CPU usage has continued to climb and climb until it now just sits at 100% and I can do almost nothing on it. I just keeps freezing.
 
I've got Windows 7, 64 bit OS.
 
Any suggestions?
 
Many, many thanks.

A:CPU usage 100% - seems to svchost.exe (netsvcs)

Adware Cleaner Scan.
 
Please download AdwCleaner by Xplode onto your desktop.
Close all open programs and internet browsers.
Double click on adwcleaner.exe to run the tool.
Click on Scan button.
When the scan has finished click on Clean button.
Your computer will be rebooted automatically. A text file will open after the restart.
Please post the contents of that logfile with your next reply.
You can find the logfile at C:\AdwCleaner[S1].txt as well.
 
JRT Scan.
Please download Junkware Removal Tool and save it on your desktop.
 
Shut down your anti-virus, anti-spyware, and firewall software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click it and select Run as administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log is saved to your desktop and will automatically open.
Please post the JRT log.
 
Adware Removal Tool Scan.
 
Download Adware removal tool to your desktop, right click the icon and select Run as Administrator.
 
 

 
Hit Ok.
 

 
Hit next make sure to leave all items checked, for removal.
 

 
 
The Program will close all open programs to complete the removal, so save any work and hit OK. Then hit OK after the removal process is complete, thenOK ... Read more

16 more replies
Answer Match 66.36%

For some strange reason this process is using about 12% of my cpu. It never stops unless I suspend it. But then I cannot browse. So I have to unsuspend it to browse.

Any ideas what could be happening? This is not normal as far as I know.
Avira and Malwarebytes show no problems.

More replies
Answer Match 66.36%

OS: Windows 7
Memory: 16 GB
 
I first noticed the problem because of frame rate stuttering in the game Rust. I went to the task manager and didn't see any process using more memory than the game or more than 1 GB. I clicked "show processes from all users" and the svchost.exe procress showed up using about 1.2 GB. I ended the process and instantly my performance was restored. It came back within a minute and the problem started again. I played around with when this starts happening. Mostly when I have both firefox and the game running at the same time, sometimes with only the game running, and something only with firefox running. It persists a while after I close out of everything then it goes down to 30 MB of memory usage.
 
Additional info: Rust is an early access game that sometimes has weird performance quirks, so this might just be a problem with the game. I haven't found anybody who plays with the same problem however, which is why I'm posting here. I have also run some virus scans and have not found anything.
 
Thanks for any help, even if it's just telling me it's a bug with the game. Merry Christmas.

A:svchost.exe -k netsvcs using over 1gb of memory

Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post. 
Louis

4 more replies
Answer Match 66.36%

Change in my PCs behaviour this week.
 
On startup, 'Trusted Installer' autoruns, and then a few seconds later svchost.exe takes 50% of cpu. Some help topics on the net say leave windows to update for a while. I have left windows on overnight a few times, and there is no change and not significant network activity to suggest that that the svchost is part of an update. Windows says it is fully updated. Yet still svchost is taking 50% cpu.
I think its a bitcoin mining trojan
 
AVG and malwarebytes don't detect it.
Can you help? thanks.
 
PC spec  :
 Windows 7.

A:svchost.exe (netsvcs) takes 50% cpu

Before an Expert jumps in to assist in Malware Removal within that Forum -
 
What System are you Running ?
And when was your Last Update Completed On ?
 
1/ Speccy Report can be Posted http://www.bleepingcomputer.com/download/speccy/
 
2/ Last Update Installed ? - check in Control Panel / Windows Update / View Update History. 

0 more replies
Answer Match 65.52%

It's been doing this for a while now, too..

I don't know if this has anything to do with it, but I disabled windows update a long time ago; if I try to update it now, my system can't handle it, and it reverts its changes.

Help would be appreciated. Where would I start?

A:svchost.exe -k netsvcs Slowing Down Computer

start off with SFC /SCANNOW Command - System File Checker

9 more replies
Answer Match 65.52%

Hii all,
 
I have a laptop with a bit of a old configuration. https://www.amazon.com/gp/product/B00S43ORUO/ref=oh_aui_search_detailpage?ie=UTF8&psc=1
 
 
Netsvcs is using up a lot of CPU. How do I figure out how to reduce its usage?
 
http://imgur.com/xNLcm0E

A:How to stop SVChost (netsvcs) from using 50% CPU all the time?

- It could be a Windows Update problem. Open Task Manager (Services tab), highlight "Wuauserv", right click, select "Go to Process". Then Task Manager opens the "Processes" tab and highlights one of the "Scvhost.exe" processes. If that one process uses taht 50% then you've got a "Windows Update" problem.

5 more replies
Answer Match 65.52%

Good day,

I hope this is the right forum for this...

My computer runs between 50-99% CPU usage at all times. I suspect this may be malware, but need your expertise to determine the root cause. The fan runs really loud and now seems to be affecting another computer in my house connected to the same network. In task manager Processes, svchost.exe (C:\Windows\system32\svchost.exe -k netsvcs) takes up 640,000K of memory.

Please let me know what steps I need to take next. Any and all help is greatly appreciated.

A:Potential Malware svchost.exe -k netsvcs

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.===I need more information before suggesting any remedial acction.Please download and run this DDS Scanning Tool. Nothing will be deleted. It will just give me some additional information about your system.Download DDS by sUBs from one of the following links if you no longer have it available. Save it to your desktop.DDS.scr <- not recommended if you use Chrome to download this .scr file. Use the other options.DDS.pifDDS.COMDouble click on the DDS icon, allow it to run. A small box will open, with an explanation about the tool. No input is needed, the scan is running. Notepad will open with the results. Follow the instructions that pop up for posting the results.Please note: You may have to disable any script protection running if the scan fails to run.Please just paste the contents of the DDS.txt log in your next post. DO NOT attach the log.===Please run this security check for my review.Download Security Check by screen317 from here.Save it to your Desktop.Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.A Notepad document should open automatically called checkup.txt; please post the contents of that document.===Search for AdWare, PUP (Potentially Unwanted Program) installed on your computer.Please download AdwCleanerRead more

17 more replies
Answer Match 65.52%

Win XP home, SP3
Was having an issue installing vmware server. I found out that the Application Management service was stopped. Attempts to restart give me a specified module not found error. Any ideas?
 

A:svchost.exe -k netsvcs and app management services

8 more replies
Answer Match 65.52%

Hello.OS info is in my signature.Tinypic resized and clipped these, so I can post better quality at some place like Imagevenue, if you like.For a few days, now, I've noticed a great reduction in performance while online.Looking at the task manager, I found this:So, I opened the view processes for all users, although I am the only user...I think!...and saw this:So, I opened the view services link that appeared when I right-clicked the offending process, and saw this (all blue shaded were netsvcs with PID 1212):How in the world do I find the source of this type of problem?Webroot AV and Malware detectors, Spybot S&D, and a Windows Defender scan have not found anything.I tried gmer rootkit detector, but it bluescreens me after a while, with a message from Vista stating the OS has shut down to protect it.I did, however, notice, before a full scan, that it showed a hidden process with some kind of file (I guess) called 5525.It went by so fast.Thanks for any help.Jerry.

More replies
Answer Match 65.52%

It's been doing this for a while now, too..
I don't know if this has anything to do with it, but I disabled windows update a long time ago; if I try to update it now, my system can't handle it, and it reverts its changes.
Help would be appreciated.
 

A:svchost.exe netsvcs Slowing Down Computer

I'm contemplating a factory reset if I can't find a way.
 

1 more replies
Answer Match 65.52%

Hi,

After solving a lot driver issues and lagging issues, I got a stable (at least in terms of speed) Windows 10. However, whenever I connect the PC to Internet, svchost.exe started using almost whole speed.

It not just slow down what I wanted to do but also wastes my limited data (yeah, no unlimited pack!). So, can someone help me to stop these processes to use Internet?

Please help me, thank you!

A:Lots of DATA being used by svchost.exe (netsvcs)

It is solved after disabling BITS service. Thank you everyone for not responding here.

19 more replies
Answer Match 65.52%

Performance is awful. Getting worse all the time. svchost.exe (netsvcs) is hogging all my physical memory. Anything I can do? Can I install more RAM? I realize this is not the greatest machine, but I should still be able to run the OS that was originally installed, shouldn't it? Thank you so much. If you have suggestions, please let me know.
Tech Support Guy System Info Utility version 1.0.0.
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: AMD E-350 Processor, AMD64 Family 20 Model 1 Stepping 0
Processor Count: 2
RAM: 1650 Mb
Graphics Card: AMD Radeon HD 6310 Graphics, 384 Mb
Hard Drives: C: Total - 293085 MB, Free - 208702 MB; D: Total - 12056 MB, Free - 1475 MB;
Motherboard: Hewlett-Packard, 2ABA
Antivirus: None
Upon startup:
Realtek HD Audio Manager
hpsysdrv Application
Microsoft Intellipoint
Catalyst Control Center
hpwuschd Application
Default Manager
Realplayer 32 bit
picturemover App
 

A:svchost.exe (netsvcs) is hogging all my memory

12 more replies
Answer Match 65.52%

Good day. I started a topic in the Virus/Malware forum and was instructed to start a new topic here to get better assistance. The link to that topic is here:Old TopicMy computer runs between 50-99% CPU usage at all times. The fan runs really loud and the computer will eventually shut off. It now seems to be affecting another computer in my house connected to the same network. In task manager Processes, svchost.exe (C:\Windows\system32\svchost.exe -k netsvcs) takes up 640,000K of memory. I have attached a screenbleep of the resource monitor.Please let me know what steps I need to take next. Any and all help is greatly appreciated.

A:svchost.ex​e -k netsvcs CPU Usage between 70-99%

Does this problem persist in Safe Mode?If not, do a clean boot to determine what is causing this.How to configure Windows XP to start in a "clean boot" state

56 more replies
Answer Match 65.52%

evening people, been trying to trace what has been tapping my hard drive and it seems to be something to do with the network opening the same files over and over again, wondering if there is a way to stop it drive thrashing

ran process monitor over the system and have saved a logfile for you to have a look at if you can as i'm new to using it... had to rename the file to TXT to get it to upload... please download and rename attachment to filename.PML

also note: system is windows XP SP3, is virus/spyware/rootkit free

thanks in advance
 

A:Svchost -k netsvcs drive thrashing

16 more replies
Answer Match 65.52%

sometimes my server which is at Rackspace get hung up and slows way down. I see that the memory is being hogged by svchost.exe (netsvcs) . I can reset the I I S and it will help most the time to free up. It seems to get hung up and by resetting the I I S
 

More replies
Answer Match 65.52%

Hi everyone, first time poster, hope you can help me out. I've looked everywhere for a solution to this but so far no joy...

A few weeks ago my computer started randomly slowing down and freezing. No hardware/software changes. I checked on Resource Monitor and found svchost.exe (netsvcs) gradually start to eat up memory after startup. I also noticed that the "Hardware Reserved" portion of my memory was suspiciously huge (2GB out of 4 total).

I thought I had a solution when I uninstalled a cheap Belkin USB wifi adapter that I had been using, and plugged in cabled internet instead. The Hardware Reserved dropped to a more reasonable 556 MB and the computer worked normally for a few days. But now I have restarted again and the problem is back. Done full scans with Kaspersky and Malware-Bytes = nothing. I also downloaded and ran CPU-Z and it came up with a error message on startup. I will attach that, along with screens from resource monitor.

Right now I'm running just fine as long as I'm not connected to the internet. We'll see if I can get online long enough to post this...

If anyone can help, please let me know!

A:svchost.exe (netsvcs) draining all my memory

That hardware reserved seems too much, just checked mine and it is at 4MB. Hopefully, someone more knowledgable will reply.

Hmm, some googling, it may be your integrated GPU's dedicated memory. Check in BIOS and change it to see if it changes the hardware reserved amount.

Also from another thread:







  
Quote: Originally Posted by snoozemode


Activate memory hole remapping in BIOS and you will get your "harware reserved" memory back.

9 more replies
Answer Match 65.52%

Hi everyone, first time poster, hope you can help me out. I've looked everywhere for a solution to this but so far no joy...A few weeks ago my computer started randomly slowing down and freezing. No hardware/software changes. I checked on Resource Monitor and found svchost.exe (netsvcs) gradually start to eat up memory after startup. I also noticed that the "Hardware Reserved" portion of my memory was suspiciously huge (2GB out of 4 total).I thought I had a solution when I uninstalled a cheap Belkin USB wifi adapter that I had been using, and plugged in cabled internet instead. The Hardware Reserved dropped to a more reasonable 556 MB and the computer worked normally for a few days. But now I have restarted again and the problem is back. Done full scans with Kaspersky and Malware-Bytes = nothing. I also downloaded and ran CPU-Z and it came up with a error message on startup. I will attach that, along with screens from resource monitor.Right now I'm running just fine as long as I'm not connected to the internet. We'll see if I can get online long enough to post this...If anyone can help, please let me know!

A:svchost.exe (netsvcs) draining all my memory

You can take a look here: How to determine what services are running under a SVCHOST.EXE processThat will help you determine exactly which process you need to fix, and or troubleshoot further.

2 more replies
Answer Match 65.52%

Recently, I've noticed a lot of slowdown on my computer and that most of the memory was being taken up (85-95%). Its gotten better now but there are still huge spikes in memory usage and it seems to be coming from svchost.exe (netsvcs). Any help would be great, thanks.

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Professional, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM)2 Duo CPU T6670 @ 2.20GHz, Intel64 Family 6 Model 23 Stepping 10
Processor Count: 2
RAM: 1912 Mb
Graphics Card: Mobile Intel(R) 4 Series Express Chipset Family, 828 Mb
Hard Drives: C: Total - 227272 MB, Free - 195695 MB; Q: Total - 9999 MB, Free - 2130 MB;
Motherboard: LENOVO, 2847CZU
Antivirus: Microsoft Security Essentials, Updated and Enabled
 

A:svchost.exe (netsvcs) eating most of my memory

6 more replies
Answer Match 65.1%

DDS (Ver_2012-11-20.01) - NTFS_x86 NETWORKInternet Explorer: 9.0.8112.16448 BrowserJavaVersion: 1.6.0_31Run by Randy at 15:55:07 on 2013-01-26Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.2942.2106 [GMT -5:00].AV: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}SP: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}FW: COMODO Firewall *Enabled* {9F6B8402-CD67-6410-5B6A-D652628C89DE}.============== Running Processes ================.C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\Explorer.EXEC:\Windows\system32\ctfmon.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\Mozilla Firefox\plugin-container.exeC:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exeC:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exeC:\Windows\system32\ctfmon.exeC:\Windows\system32\conhost.exeC:\Windows\system32\wbem\wmiprvse.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k RPCSSC:\Windows\system32\svchost.exe -k NetworkServiceC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:&#... Read more

A:Potential Malware svchost.exe -k netsvcs - Desktop

Hello captn ron, Welcome to Bleeping Computer.
My name is fireman4it and I will be helping you with your Malware problem.

Please take note of some guidelines for this fix:
Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools.
If you do not understand any step(s) provided, please do not hesitate to ask before continuing.
Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean".
In the upper right hand corner of the topic you will see a button called Watch Topic.I suggest you click it and select Immediate E-Mail notification and click on Proceed. This way you will be advised when we respond to your topic and facilitate the cleaning of your machine.

Finally, please reply using the ADD REPLY button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply, unless they do not fit into the post.
I will be analyzing your log. I will get back to you with instructions.1.Close all open programs and internet browsers.Double click on adwcleaner.exe to run the tool.Click on Delete.Confirm each time with Ok.You will be prompted to restart your computer. A text file will open after the restart.Please post the contents of that logfile with your next reply.You can find the logfil... Read more

22 more replies
Answer Match 65.1%

I went through quite a lot of working out/tweaking before realising that my sole problem of my microstuttering in games is quite simply svchost.exe (netsvcs) in Windows 7. The thing is that that process likes to be idle at about 2-4% of CPU usage, and then about every 4-8 seconds, it would spike up to 25% of CPU usage. I managed to fix my microstuttering issues by closing down that process after windows startup. The current problem is the following - svchost.exe (netsvcs) is a hub for quite a few services which are part of windows, some of which control the way windows looks (what I am saying is that after shutting down that process, some areas of Windows start to look like it's Windows 98, until the process auto-restarts itself in a few seconds/minutes, but without the spiking... well at least not for another hour or so...).
The questions that I have are:

1. Is it normal for svchost.exe (netsvcs) to be running this way (spiking up to 25% etc etc)
2. Which services that are associated with the 'netsvcs' part of svchost could be possibly giving me these problems (I have noticed that the problem seems to start arising when I start using anything internet related)?

I am running Windows 7 Ultimate 64-bit on a PC with a Core 2 Quad Q9650 at 3.0Ghz.

Thank you in advance for all the support!

A:[SOLVED] svchost.exe (netsvcs) giving me microstuttering

Hi AVZ, it's no completely unusual for svchost to cause spiking, although it's not really desirable..especially when it causes problems elsewhere.

try opening a command prompt then running the following command:
tasklist /svc /fi "imagename eq svchost.exe"

That will tell you what services are being controlled by the service host. You can find out the process id of the one causing the problem from the task manager and that will help you narrow things down.

2 more replies
Answer Match 65.1%

Hello, I've been having an issue for a while now where svchost.exe(netsvcs) spikes up to 1 or 2 gigs in physical memory use. This usually happens on start up.

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: AMD A6-3600 APU with Radeon(tm) HD Graphics, AMD64 Family 18 Model 1 Stepping 0
Processor Count: 4
RAM: 5616 Mb
Graphics Card: AMD Radeon HD 6530D, 512 Mb
Hard Drives: C: Total - 941841 MB, Free - 382442 MB; D: Total - 11924 MB, Free - 1459 MB;
Motherboard: PEGATRON CORPORATION, 2ACD
Antivirus: Norton Security Suite, Updated and Enabled

Any help on this is much appreciated.
 

A:svchost.exe(netsvcs) high memory usage.

There appears to be 6 GB of RAM in that computer.

The purpose of RAM is to be used and not to remain idle, so there's no reason to be concerned about 1 - 2 GB of it being used during startup.

Since we don't know what's installed in that computer and what's loading during startup, we don't know what processes are using a lot of RAM.

Once that computer settles down from the startup, does it run okay?

----------------------------------------------------
 

1 more replies
Answer Match 65.1%

Soon after boot and login, my laptop becomes slow. Some exploration with Resource Monitor showed that an instance of svchost.exe (netsvcs) was consuming, well, nearly everything, but especially CPU.
 
When I execute "End Process Tree", resource consumption stays low for a minute or two, then that task starts up again. After killing the tree 3-4 times, it stays dead, or at least dormant, for a long time (hours to days) before the sequence begins again after some trigger that I have not determined. Or any time I restart.
 
I assume it's malware of some kind. Rather than say what I've done to combat it by looking through similar topics here, I'll just leave my report as it is and hope someone can help me find and expunge this problem.
 
System:
An old Dell XPS M1530
Windows 7 64bit

A:High CPU usage, svchost.exe (netsvcs) seems to be the problem

Welcome to BC....
 
Whether you have used the programs below or not....please scan with them and post the results.
 
Use CCleaner to remove Temporary files, program caches, cookies, logs, etc. Use the Default settings. No need to use the
Registry Cleaning Tool...risky. Pay close attention while installing and UNcheck offers of toolbars....especially Google.
After install, open CCleaner and run by clicking on the Run Cleaner button in the bottom right corner.
CCleaner - PC Optimization and Cleaning - Free Download
 
Download Malwarebytes' Anti-Malware from Here
Double-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).
Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.
Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.
Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.
Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.
If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).
When MBAM is finished scanning it will display a screen that displays any malware that it has detected.
Click the Remove Selected button.
MBAM will now delete all of the files and registry ke... Read more

12 more replies
Answer Match 65.1%

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:54:55 &#956;&#956;, on 15/8/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\CTFMON.EXE
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Uniblue\RegistryBooster\RegistryBooster.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = &#931;&#965;&#957;&#948;&#941;&#963;&#949;&#953;&#962;
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove ... Read more

A:C:\WINDOWS\system32\svchost.exe -k netsvcs problems

6 more replies
Answer Match 65.1%

I just noticed today that in Windows Task Manager, I see 'svchost.exe' consuming lots of memory (Task Manager reports 265,376K). I look at Task Manager a lot in order to manage memory in general (there's only 1GB on this box), and I've never seen a 'svchost.exe' consuming this much before. It grows until available memory [under 'Physical Memory (K)' in the Performance tab] gets down to under 10000, and the machine slows to a crawl while it furiously swaps.

I fired up "Process Explorer" (Sysinternals), and I can see the offending 'svchost.exe' hanging underneath 'services.exe' (along with plenty of other services). Sometimes, the offender has 'AcroRd32.exe' or 'wuauclt.exe' hanging off of it (but the child processes don't consume anywhere near as much memory as 'svchost.exe').

When I mouse over the 'svchost.exe', it shows...

Command Line:
C:\WINDOWS\System32\svchost.exe -k netsvcs
Path:
C:\WINDOWS\SYSTEM32\svchost.exe (netsvcs)
Services:
COM+ Event System [EventSystem]
Help and Support [helpsvc]
Network Location Awareness (NLA) [Nla]
Remote Access Connection Manager [RasMan]
System Event Notification [SENS]
Task Scheduler [Schedule]
Telephony [TapiSrv]
Windows Management Instrumentation [winmgmt]
Windows Time [w32time]

The system is Microsoft Windows XP, Home Edition, Version 2002, Service Pack 3. It's got a Pentium® 4 CP... Read more

A:"svchost.exe -k netsvcs" consuming lots of memory

Welcome aboard Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply.====================================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next t... Read more

8 more replies
Answer Match 65.1%

My computer will randomly come to a grinding halt. Memory is peaked out around 95% most of it is going to svchost. exe (netsvcs). After 10-15 minutes it goes back to normal. What can I do
Thanks

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Professional, Service Pack 1, 64 bit
Processor: AMD Athlon(tm) II X2 220 Processor, AMD64 Family 16 Model 6 Stepping 3
Processor Count: 2
RAM: 3838 Mb
Graphics Card: NVIDIA GeForce 6150SE nForce 430, 256 Mb
Hard Drives: C: Total - 464867 MB, Free - 322064 MB; D: Total - 11969 MB, Free - 1722 MB;
Motherboard: PEGATRON CORPORATION, NARRA5
Antivirus: AVG Anti-Virus Free Edition 2012, Disabled
 

A:svchost.exe (netsvcs) High Memory Usage

11 more replies
Answer Match 65.1%

Hello all.

Recently I have a problem with Windows XP, the problem seems to be with svchost.exe which uses high PF and CPU usage almost real time. (100% CPU, 1000 PF and sometimes goes at 4000).

However if I end this process, the "Windows Audio" service will stop, the theme will become Windows XP Classic and I must use net start command or go to services.msc to re-start windows audio.
(This process uses a lot of services, but currently I didn't check that it will stop them too or not.)


Any solution?
OS: Windows XP® Professional Service Pack 3
Processor: Intel Pentium IV ~2.4GHz
RAM: 768MB DDR
Regards,
The VaLo.
 

A:Solved: svchost.exe (netsvcs) High PF & CPU usage

16 more replies
Answer Match 65.1%

Hi all,

I wonder if anyone can help me. For the last month or so, my laptop has been grinding to halt every few hours for no particular reason. When i checked the recourse manager i noticed that my RAM was almost at full capacity and that the process svchost.exe (netsvcs) was using over 1.5GB of memory. After waiting 5 minutes or so, the process drops to its normal level of around 70,000KB.

My ASUS Zenbook laptop is running 4GB of RAM however unfortunately it is the model where the RAM cannot be upgraded.

The peak will happen randomly and seems to be unrelated to any programs i'm running. I have Googled this time and time again but can't find anything that has helped so far. Any help would be much appreciated.

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Professional, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i7-2677M CPU @ 1.80GHz, Intel64 Family 6 Model 42 Stepping 7
Processor Count: 4
RAM: 3998 Mb
Graphics Card: Intel(R) HD Graphics Family, 1807 Mb
Hard Drives: C: Total - 97678 MB, Free - 5530 MB; D: Total - 138325 MB, Free - 72863 MB;
Motherboard: ASUSTeK Computer Inc., UX31E
Antivirus: Sophos AntiVirus, Updated: No, On-Demand Scanner: Enabled

Many thanks in advance
 

A:svchost.exe (netsvcs) High Memory Usage

14 more replies
Answer Match 65.1%

Hello, Im new to this forum and dont know alot about these viruses. I got a orphan virus from a website who used svchost.exe(netsvcs) to run, but maleware bytes found it and removed it. Svchost is still using slot of memory usage and sending bytes direcly to my router. Is this normall or am i still infected?

A:Svchost.exe(netsvcs) high memory usage

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Download Malwarebytes' Anti-Malware from HereDouble-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).The scan may take some time to finish,so please be patient.If potential threats are detected, ensure that Quarantine is selected as the Action for all the listed items, and click the Apply Actions button.While still on the Scan tab, click the link for View detailed log, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.The log is automatically saved by MBAM and can also be viewed by clicking the History tab and then selecting Application Log... Read more

11 more replies
Answer Match 65.1%

Hello,
 
I recently have a problem that the computer gets really slow after I wake it up from hybernation. I checked the Resource Monitor, and it seems that the problem is with the process

svchost.exe (netsvcs)
a few minutes after I wake the computer from hybernation it's memory usage starts rising until it consumes all available memory - up to 96% and more, as you can see in the screenshot. If I restart the computer the problem is gone until the next hybernation.

 svchost.png   147.01KB
  0 downloads
I scan the computer regularly with MalewareBytes, and I also ran ESET's online scanner, but the problem persists, so I don't believe it's a virus issue.
 
Would very much appreciate help on this.
I'm running Windows 7 64-bit on Dell Inspiron N4030, 3GB RAM, Intel Core i3 2.27GHz.
 
Thanks

A:Svchost.exe (netsvcs) taking tremendous memory

Update:
I tried now to stop services that I've seen elswhere that are supposed to be harmless to stop, and after I stopped the process wuauserv the memory usage came back to normal. The only other service I ended was BITS, which did not affect the problem.
But - and I dont know if there's a connection - a few minutes later the computer crashed. This is what it said after reboot:
 
Problem signature:
  Problem Event Name:    BlueScreen
  OS Version:    6.1.7601.2.1.0.768.3
  Locale ID:    1037
Additional information about the problem:
  BCCode:    50
  BCP1:    FFFFF80001F9249A
  BCP2:    0000000000000008
  BCP3:    FFFFF80001F9249A
  BCP4:    0000000000000000
  OS Version:    6_1_7601
  Service Pack:    1_0
  Product:    768_1
Files that help describe the problem:
  C:\WINDOWS\Minidump\050915-26598-01.dmp
  C:\Users\Ur\AppData\Local\Temp\WER-83710-0.sysdata.xml
Read our privacy statement online:
  http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409
If the online privacy statement is not available, please read our privacy statement offline:
  C:\windows\system32\en-US\erofflps.txt
 

6 more replies
Answer Match 65.1%

Recently I have upgraded my laptop from windows 8 to windows 8.1. After upgrading i found that the process svchost.exe (netsvcs) consume about 60% of CPU usage. This makes my laptop overheated within 30 minutes. When I suspend this process, the cpu usage drops to just 5%. I have tried many solution available online to solve this issue, but unfortunately none of them worked. Plzzz help me to solve this problem...!!!
 

More replies
Answer Match 65.1%

Hi, just a question is svchost.exe where the upgrade to Windows 10 gets downloaded through or at least part of the upgrade process? It has made loading websites almost impossible the last few days.

Unfortunately where I live in country Victoria, Australia and my only Internet access is still dial up until the new satellite goes up in 2016, even wireless is not available because of large trees on the neighbouring properties blocking a clear line to the wireless tower only approx. 10kms away.

A:Lost Control Of Internet To svchost.exe (netsvcs)

It may be downloading the Windows 10 upgrade installation files in the background saturating your connection. Check C partition for $Windows.~ folder (unhide hidden files in folder options).

3 more replies
Answer Match 65.1%

Platform: Windows 7 Home Premium 64 bit, ASUS K52F laptop
 
I have observed extensive downloads (from the NetMeter gadget on my desktop) averaging 600kbps for up to 10 minutes from Akamai. This has happened several times. I would appreciate if someone would explain what is happening. Here is the process I followed to track this download:
(1) Log in as Administrator.
(2) Used Windows ResourceMonitor to see the process PID that was downloading from the Internet. ResourceMonitor displayed "svchost (netsvcs)" as the process involved in the download.
(3) Used ProcessMonitor to display the process tree for the svchost process in question. See the attached "Appinfo Svchost process tree.jpg" for details.
(3) Used CPorts.exe to trace the process PID to a specific URL from which the process is downloading, then traced the IP in Who.Is to see that the site is Akamai. See the attached "Download process & remote address.jpg" for details.
(4) In ProcessMonitor if I kill the specific process, the download immediately stops. This is confirmation that I am looking at the culprit PID.
 
Note that I have scanned my laptop with the following & nothing was found:  AdwCleaner, Avira, Malwarebytes, Stinger, SuperAntiSpyware, Windows Defender, TDSSKiller, Gmer, Junk Removal Tool, Rkill, RogueKiller.  I also used SFC to check integrity of Windows libraries - all ok.
 
I understand that Akamai is a CDN. However the download does seem to be extensive (although I do not ... Read more

A:svchost (netsvcs) extensive download from Akamai - why?

If you look at your second attached thumbnail picture showing ports etc. It states 'activesync' So, it's syncing with your computer system with their servers of the files you share/backup or whatever it is. Also, their services may also be used to update their software with security patches etc. If you wanted to see what's going on in more depth you would need to use a program called Wireshark so you can analyze/capture the network traffic. IMO I wouldn't be to worried about it. It's doing what it needs to do to function correctly.

3 more replies
Answer Match 65.1%

Hello from a newbie to Bleeping Computer.  I have found your site to be about the most helpful when doing various searches as I try to learn how to fix my own PC issues.  Now I've got one that doesn't seem to have an easy answer, at least not for my level of knowledge.
 
Dell Latitude e6400 64-bit
Windows 7 Ultimate SP1
4GB RAM
 
My CPU usage is often at 100%.  Checking my running processes, I noticed a new one at top of the list (when sorted by CPU time AND by Memory) svchost.  I realize svchost is a shell application for dlls and such...this one is a wrapper for netsvcs.  It shows from 1.3 to 1.5 GIGs of RAM in use.
 
I downloaded MiniToolBox and would be happy to post, what categories should I choose?
 
 

A:Windows 7 High CPU Usage and Svchost (netsvcs) Using 1.5G RAM

1.  Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 
2.  Please download and install Speccy to provide us with information about your computer.  Clicking on this link will automatically initiate the download.  

 
When Speccy opens you will see a screen similar to the one below.
 

 
Click on File which is outlined in red in the screen above, and then click on Publish Snapshot.
 
The following screen will appear, click on Yes.
 

 
The following screen will appear, click on Copy to Clipboard.
 

 
In your next post right click inside the Reply to Topic box, then click on Paste.  This will load a link to the Speccy log.
 
Louis

5 more replies
Answer Match 65.1%

Platform: Windows 7 Home Premium 64 bit, ASUS K52F laptop

Note: I have posted this on 2 other forums & did not receive a solution so I am posting it here. Hope that is okay.

I have observed extensive downloads (using the NetMeter gadget) averaging 400-600kbps for up to 10 minutes from Akamai. This happens every time I reboot and log into my laptop. I would appreciate if someone would explain what is happening.

I would like to determine exactly which software on my laptop is initiating this download from Akamai.

Note that I do not have any data in the cloud so this should not be a sync event.

Here is the process I followed to track this download:
(1) Used Windows ResourceMonitor to see the process PID that was downloading from the Internet. ResourceMonitor displayed "svchost (netsvcs)" as the process involved in the download.
(2) Used ProcessMonitor to display the process tree for the svchost process in question. See the attached "Appinfo Svchost process tree.jpg" for details.
(3) Used CPorts.exe to trace the process PID to a specific URL from which the process is downloading, then traced the IP in Who.Is to see that the site is Akamai. See the attached "Download process & remote address.jpg" for details.
(4) In ProcessMonitor if I kill the specific process, the download immediately stops. This is confirmation that I am looking at the culprit PID.

Note that I have scanned my laptop with the following & nothing wa... Read more

A:svchost (netsvcs) download from Akamai - What is initiating?

I think the next step would be to try software like Microsoft Network Monitor or it's newer replacement Microsoft Message Analyzer. Or Wireshark. But I've tried that myself and I'd say it's impossible to fully understand what and why the OS itself is connecting and downloading, especially when it's from Akamai and similar.
Meet the successor to Microsoft Network Monitor! - MessageAnalyzer - Site Home - TechNet Blogs
But I hope a network expert can stop by and help out more.

1 more replies
Answer Match 65.1%

Dell laptop WinXp build shows svchost.exe -k netsvcs for hidserv.dll is missing (via Ultimate Troubleshooter) and hidserv.dll will not load. C:\Windows\sys32 shows copy of svchost.exe and hidserv.dll are present. Sound is ok but internet connection is only available via cable and not via Wifi (but home wifi and neighbours networks are available via my other laptop. How to repair replace the missing svchost.exe -k netsvcs and/or damaged hidserv.dll. Note problem seems similar to http://www.techspot.com/community/t...rojan-horse-downloader-generic12-bpnf.180351/. Much thanks if anyoune can help.
 

A:Missing winxp svchost -k netsvcs for hidserv.dll

Try this
regsvr32.exe hidserv.dll
 

1 more replies
Answer Match 65.1%

Hello,

I have a problem. In the task manager -> system resources, I see that a process called svchost.exe(netsvcs) (if I'm correct) is using about 50% of cpu. The cpu is AMD dual core 2.81GHz.
This doesn't always happen. Right now, it uses 48 %. Should I be concerned? Is it a legitimate process or malware. Malwarebytes did not find anything at a quick scan.

Please help me with this metter.

EDIT: now, the all cpu load is 6%. Bitdefender online scanner found no infection...

A:svchost.exe(netsvcs) problem cpu load high

Hi kenobi,

'Svchost.exe' is a generic process that calls 'Services' in Windows and one instance of that process may call 5 or more 'Services'. If critical 'Services' are being used, close to 50% of CPU usage may not be abnormal.

You may want to check the 'Services' that are related to this process at any given instance. To check the 'Services', running this 'Process', you may right click 'svchost.exe' and click 'Services'; related 'Services' will get highlighted. You may want to 'disable' the 'Services' that are not critical.

Hope this helps.

7 more replies
Answer Match 65.1%

hello everyone,
i hope this is the right place to post this.

it started about 2 weeks ago, i noticed that this process, Svchost.exe (netsvcs), is always downloading something, i tried alot of ideas that i read about online and non of them worked, i was using certain anti-virus when it happened.

yesterday i did a complete format for the C drive, and setup a fresh version of windows 7, got Kaspersky, updated it, did a complete scan twice, and this process it still downloading !

please any ideas are welcome.
thanks in advance

GSI log:

GetSystemInfo Parser 2.96

A:Svchost.exe (netsvcs) and download related issue

  
Quote: Originally Posted by drZeyad


hello everyone,
i hope this is the right place to post this.

it started about 2 weeks ago, i noticed that this process, Svchost.exe (netsvcs), is always downloading something, i tried alot of ideas that i read about online and non of them worked, i was using certain anti-virus when it happened.

yesterday i did a complete format for the C drive, and setup a fresh version of windows 7, got Kaspersky, updated it, did a complete scan twice, and this process it still downloading !

please any ideas are welcome.
thanks in advance

GSI log:

GetSystemInfo Parser 2.96


Svchost.exe is a com handler. It provides connectivity for other apps like your AVP, and many others. Its downloading at a minuscule rate (38kps.) and has little or no affect on the computer. svchost can consume huge amounts of cpu cycles and that is where is can be a problem.

Why are you concerned about the downloading? it could even be downloading AV sigs.

7 more replies
Answer Match 65.1%

Recently I have upgraded my laptop from windows 8 to windows 8.1. After upgrading i found that the process svchost.exe (netsvcs) consume about 60% of CPU usage. This makes my laptop overheated within 30 minutes. When I suspend this process, the cpu usage drops to just 5%. I have tried many solution available online to solve this issue, but unfortunately none of them worked. Plzzz help me to solve this problem...!!!

A:high cpu usage by process svchost.exe (netsvcs)

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware to your desktop.NOTE. If you already have MBAM 2.0 installed scroll dow... Read more

1 more replies
Answer Match 64.26%

Hey everyone. I've noticed over the last 5-6 months that no-matter how much i cut down the startup programs, services, etc. When the computer starts it still lags like hell for the first 5-10 minutes of use.

Essentially i've disabled all un-necessary startup programs. I've set all the non-essential services to "disabled"/"manual". I've delved deeper with SysInternals "Autoruns" and disabled anything that again was non-essential to what i use the computer for (the usual thing, internet use, playing music/video[i thought i should mention this because codecs get loaded on startup], some programming)...

Now, i've taken a look at the processes running when i start up. And one sticks out, it uses between 30% and 90% CPU for the first 5-10 minutes of the startup and then drops to 10%-40% for the next 20 minutes. Then it idles.

This wouldn't normally aggrivate me but it means that if i try and start firefox the process will start but the window won't show for around 2 minutes. If i try and play a video/dvd within the first half an hour of startup the sound will crackle and stall. Which is of course aggrivating. So i'm attempting to work out whether or not there's anything about the services that doesn't need to be running initially?

So, technical stuff:
- The PC is a toshiba laptop, running 64bit windows 7 home premium
- The processor is an AMD Athalon X2 dual core (2.10Ghz)
- There's 4GB ram installed

I've attached a screen print descr... Read more

A:Windows process svchost.exe(netsvcs) overrunning on startup.

Nice to see you; sorry it is under these circumstances.

If software related, Driver Verifier should help.

Driver Verifier - http://www.techsupportforum.com/f217...ed-473665.html

Provide full system info - http://www.techsupportforum.com/f217...ns-452654.html

Kind Regards. . .

John

`

1 more replies
Answer Match 64.26%

So svchost.exe (netsvcs) connects to weird hostnames and I found out by chance, when I opened Resource monitor. What does this mean? My antivirus/firewall application seems to think there's nothing wrong. How can I be sure that there's nothing suspicious going on?

Thank you

A:svchost.exe (netsvcs) connects to weird hostnames - screenshot

Have you searched any of the "suspicious" entries? Could be just things from your isp provider but I don't know.

4 more replies
Answer Match 64.26%

This just started in the past few days.

Resource Monitor says that the svchost.exe (netsvcs) process has 39 threads and as mentioned it is using 25% of the CPU. Not when I first boot up, but after about 30 minutes of Chrome (which is the only application I have running).

I do know how to chase this issue down any further.

More replies
Answer Match 64.26%

OK...this is my first post here - hope I give all the info you need - if not let me know what you need to help and THANKS!!!!

Windows Server 2003 Standard w/ MS SQL Server 2000 std and ColdFusion MX server. HW is Dual Xeon 2.3GHz w/4GB Ram.

I have several services that will not start when starting the system up. They all have the "Path to executable" of "C:\WINDOWS\system32\svchost.exe -k netsvcs". The services are:
Automatic Updates
Computer Browser
Distributed Link Tracking Client
Help and Support
Secondary Logon
System Event Notification
Windows Management Instrumentation

I had a few Trojans that I cleaned recently from this system (Backdoor.Hupigon.hk & Baackdoor.Ncx.a) and I think everything is clean now, these services just will not start.

Here's the Deckard Main.txt Log:
Deckard's System Scanner v20070905.67
Run by Administrator on 2007-09-13 12:18:14
Computer is in Normal Mode.
--------------------------------------------------------------------------------

Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as Administrator.exe) ---------------------------------------

Unable to find log (file not found); running clone.
-- HijackThis Clone ------------------------------------------------------------

Emulating logfile of HijackThis v1.99.1
Scan saved at 2007-09-13 12:18:56
Platform: Windows 2003 Service Pack 1 (5.02.3790)
MSIE: Internet Explorer (7.00.6000.16414)

Running processes: ... Read more

A:Several services not starting (svchost.exe -k netsvcs) - was infected, now clean?

Please copy this page to *Notepad* and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.

It's IMPORTANT to carry out the instructions in the sequence listed below.


1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.


Open *notepad* and copy/paste the text in the quotebox below into it:



Quote:





File::

C:\WINDOWS\zts2.exe
C:\WINDOWS\system32\vcmgcd32.dll
C:\WINDOWS\system32\iifgfgf.dll
C:\WINDOWS\rundll16.exe
C:\WINDOWS\rundl132.dll
C:\WINDOWS\logo1_.exe





Save this as *CFScript.txt*, in the same location as ComboFix.exe




Refering to the picture above, drag CFScript into ComboFix.exe

Restart your computer.

When finished, it shall produce a log for you at *C:\ComboFix.txt*

Post back the combofix.txt along with a fresh HijackThis log and the DSS log please


*Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall*

5 more replies
Answer Match 64.26%

I have encounter a problem with this svcshost streaming constant feeds of audio in. I have tried a registery fixer as suggested on search I did and it did fix it. I researched the problem on this forum and tried several things others suggested back in 2009 to others. Such as making sure that my system was not setups as host router, disabling BITS and Windows Update, and suspending that svchost. which than nothing will open. I am lost on where to go next. Someone please Help.

A:svchost.exe (netsvcs) maxing CPU out by streaming in audio feeds

Run Farbar Recovery Scan Tool
64-Bit Version OS Farbar Recovery Scan Tool x64 <===== Download Link

Drag the FRST64.exe from the Downloads folder to your Desktop

Right click on FRST64.exe and choose

When the tool opens click Yes on the disclaimer window .

Press Scan button.

FRST will let you know when the scan is complete and has written the FRST.txt to file



   Note
The first time Farbar Recovery Scan Tool is run, it makes also another log Addition.txt
Please upload both logs in your reply.(FRST.txt and Addition.txt)

FRST.txt and Addition.txt will be on the Desktop

Upload a File
Click on the Go Advanced button under the Message box . Scroll down to Additional Options then click on Manage Attachments in the Attach Files sections . Click the Browse button locate the file then click on the Open button . In the Upload File from your Computer section click on the Upload button . Wait until it finishes uploading then close the window . Then click Submit Reply .

9 more replies
Answer Match 64.26%

OK...this is my first post here - hope I give all the info you need - if not let me know what you need to help and THANKS!!!!

Windows Server 2003 Standard w/ MS SQL Server 2000 std and ColdFusion MX server. HW is Dual Xeon 2.3GHz w/4GB Ram.

I have several services that will not start when starting the system up. They all have the "Path to executable" of "C:\WINDOWS\system32\svchost.exe -k netsvcs". The services are:
Automatic Updates
Computer Browser
Distributed Link Tracking Client
Help and Support
Secondary Logon
System Event Notification
Windows Management Instrumentation

I had a few Trojans that I cleaned recently from this system (Backdoor.Hupigon.hk & Baackdoor.Ncx.a) and I think everything is clean now, these services just will not start.

Here's he HiJackThis Log:

Logfile of HijackThis v1.99.1
Scan saved at 3:25:23 PM, on 9/11/2007
Platform: Windows 2003 SP1 (WinNT 5.02.3790)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\CFusionMX\runtime\bin\jrunsvc.exe
C:\CFusionMX\db\slserver52\bin\swagent.exe
C:\CFusionMX\runtime\bin\jrun.exe
C:\CFusionMX\db\slserver52\bin\swstrtr.exe
C:\CFusionMX\db\slserver52\bin\swsoc.exe
C:\WINDOWS\System32\dns.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\FileZilla Server\FileZilla Server.exe
... Read more

More replies
Answer Match 64.26%

Svchost netsvcs is maxing out my memory for up to 1 hour every day, sometimes more than once a day, this has been going on for half a year i have tried to solve this on my own by reading other resolved threads such as disabling superfetch, but none of them have helped.

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: AMD C-50 Processor, AMD64 Family 20 Model 1 Stepping 0
Processor Count: 2
RAM: 1642 Mb
Graphics Card: AMD Radeon HD 6250 Graphics, 384 Mb
Hard Drives: C: Total - 219243 MB, Free - 117567 MB; D: Total - 14966 MB, Free - 1662 MB; E: Total - 4055 MB, Free - 1108 MB;
Motherboard: Hewlett-Packard, 3577
Antivirus: Microsoft Security Essentials, Updated and Enabled
 

A:Solved: svchost netsvcs extreme memory usage

12 more replies
Answer Match 64.26%

Hey!
 
For a while when starting Google Chrome i kept getting directed to advertisements and i got pop-ups automatically. Recently it stopped showing me the advertisement and pop-ups but now opens this link: file:///C:/Program%20Files%20(x86)/Google/Chrome/Application/54.0.2840.71/ , showing me the file location of my chrome application. Also my CPU usage is really high with round about 50% of all the usage coming from ​svchost.exe (netsvcs) which seems really weird to me. Thanks for all the help  
This is the FRST log i got when i scanned my PC:Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-11-2016
Ran by Leo (administrator) on LEO-PC (13-11-2016 16:11:47)
Running from C:\Users\Leo\Desktop\Magic image packs
Loaded Profiles: Leo (Available Profiles: Leo)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Spotify Ltd) C:\Users\Leo\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporatio... Read more

More replies
Answer Match 63.42%

About a month ago I acquired a virus that used svchost.exe (netsvcs). It began by reading/writing to my hard drive at approximately 50 M/s. I was able to manually stop this activity by disabling the BITS service but it would begin again each time I rebooted the PC. After about 2 weeks that activity stopped but now my internet connection runs at around 200 K/s which is about 10% of normal. I originally sought help at the norton forums and they referred me to whatthetech.com. Under their direction I used Malware Bytes, ComboFix, and AdWcleaner to remove files from my PC. This appeared to remove the virus but 2 days later the slow internet connection returned. I reran the programs again and was fine for about 24 hours. When it returned I contacted my internet provider to make sure there wasn't a problem with my connection. They had me do a speed test at two seperate websites. The results showed my connection speed at 25 Meg/s. I confirmed this with the tech because I am only signed up for 12 Meg/s. He said it is likely the virus is masking itself with a false reading and that there's no possibility my connection would be that high. In anticipation of a Hard Drive reformat I created a backup using a flashdrive. The files I attempted to save were jpg family photos, and some files created using Publisher and Excel. Unfortunately, the virus transferred itself to the flash drive and now I have a second PC showing the same symptoms. After returning to the Norton Forums, one of the mod... Read more

A:svchost.exe (netsvcs) read/write 50m/s and heavy internet traffic

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/490759 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

16 more replies
Answer Match 57.54%

Hello!
 
It looks like I have an issue with my computer but I’m unable to determine the cause. I have looked at some topics on the forums but found noone with the same issue so I am posting a new topic.
 
My issues seems a bit similar to http://www.bleepingcomputer.com/forums/t/614137/infected-svchost-windows-update-misbehaving/?hl=%2Bwindows+%2Bupdate#entry4001712 but the topic was not resolved and various different services seem to be hogging my CPU, not just windows update.
 
Update
After running for 4 hours and presumably being stuck (showing no signs of working) the Windows Update DISM tool (https://support.microsoft.com/en-us/kb/947821 ) seems to have finally caught up and installed some updates. I will inform about further progress in future updates.
 
Update II
The Microsoft tool seems to have installed all updates on my computer successfully (after running for about 5 hours), but another service (FDResPub) is "abusing" my CPU now. I will post more info later.
 
Introduction
 
I run a Windows 7 on a quadcore computer (which is a relevant information, more about that later). I use Avast! Free antivirus and most of the time my brain to protect my computer to… somewhat varying degree.
 
I would like to mention that I am a software developer so I use a lot of quite powerful tools (cygwin, GIT, various command line extensions, automatic scheduled tasks to simulate cron tasks on our production server and so on) which... Read more

A:Windows 7: svchost.exe (netsvcs) at 25% cpu usage. Windows update impossible.

Windows 7 updates truly suck nowdays. 25% usage means you have a quad core processor. Dual cores use 50%.
 
Download and install  KB3153199 then do a manual update. Reboot the computer and immediately install the update. Do a manual update and wait about 15 minutes.
 
https://www.microsoft.com/en-us/download/details.aspx?id=52232
 
Edit: If the above does not get you updates install the following KB. This resolved my April update problem. The above KB3153199 resolved the May update issue. It seems this will be a monthly issue with Windows 7.
 
https://www.microsoft.com/en-us/download/details.aspx?id=51853

1 more replies
Answer Match 53.34%

My HP Pavilian dv8000 laptop running XP home with media center is constantly using 50% of the cpu for svchost.exe as soon as you log boot up and it never stops.* How can I find out what process is running and shut it down? Here is my system info:
OS Name Microsoft Windows XP Professional
Version 5.1.2600 Service Pack 2 Build 2600
OS Manufacturer Microsoft Corporation
System Name MPLAPTOP
System Manufacturer Hewlett-Packard
System Model HP Pavilion dv8000 (EE944AV)
System Type X86-based PC
Processor x86 Family 6 Model 14 Stepping 8 GenuineIntel ~1994 Mhz
Processor x86 Family 6 Model 14 Stepping 8 GenuineIntel ~1994 Mhz
BIOS Version/Date Hewlett-Packard F.24, 9/7/2007
SMBIOS Version 2.4
Windows Directory C:\WINDOWS
System Directory C:\WINDOWS\system32
Boot Device \Device\HarddiskVolume1
Locale United States
Hardware Abstraction Layer Version = "5.1.2600.2765 (xpsp.050928-1517)"
(user name deleted)
Time Zone Pacific Standard Time
Total Physical Memory 2,048.00 MB
Available Physical Memory 1.22 GB
Total Virtual Memory 2.00 GB
Available Virtual Memory 1.96 GB
Page File Space 3.85 GB
Page File C:\pagefile.sys
I'm pasting in the info from HijackThis as I have seen that on some other posts.* Forgive me if this is not the correct thing to do.* If you need more information let me know.thanksLogfile of Trend Micro HijackThis v2.0.2Scan saved at 11:29:58 AM, on 1/2/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16574)Boot mode: Nor... Read more

A:svchost.exe constantly using 50% cpu

7 more replies
Answer Match 53.34%

the past week i have been experiancing frustratingly slow speed on my computer and am really begining to get hacked off with it... so

please help me

i have done numerous virus scans including malwarebytes and hitman pro but the problem continues

i have a hijack this log

i have visited other forums and people who seemed to have the same problem as me were told to disable automatic updates which i did but the problem still persists

still getting 100% usage on my cpu from the service: svchost

i dont really know how these forums work but i'll give it a shot

heres my hijack this log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 01:21:57, on 31/10/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17091)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\ehome\ehtray.e... Read more

A:svchost 100% cpu constantly

Hello spazzdaz ,Sorry for the delay. If you still need help, please post a new DDS/HijackThis log and I'll be happy to look at it. Thanks,tea

2 more replies
Answer Match 52.5%

I don't know what may have started this, but kaspersky kept telling me that svchost.exe was performing a suspicious action trying to inject something into winlogon.exe. It asked me to allow/deny, I denied, and it kept repeating. Eventually I ran a scan and detected that "smarthook.dll" contained a trojan. I used kaspersky to remove it, and downloaded a clean copy of the .dll and put it in my system32 folder.

Now I am receiving the classic:

svchost.exe:
"The instruction at "0x7588bba5" referenced memory at "0xfede1500". The memory could not be "read".

Click on OK to terminate the program
Click on CANCEL to debug the program"

Only this pops up every 5 seconds about 6 times and then stops, and randomly will continue this pattern.

I have attached 2 logs, one is current <taken today> the other I just happen to log a few days ago for the hell of it (before I noticed any errors). I don't know if.. comparing will help I just want to provide all info I have.

~Thanks!

[edit]
**Additional: Just ran AVG Anti-Rootkit Beta and it detected system32/userinit.exe as a "Hidden Application"

extra info: sometimes when the svchost error pops up, my taskbar at the bottom changes to the old grey style and not the windows xp style.

Also: included a screenshot (edited for size).

System Info:
AMD Athlon 64 processor 3500+, 1 GB RAM
Microsoft Windows XP Professional SP2
ASUS A8N-SLI Deluxe MOBO

A:svchost constantly popping up

nobody responding, so I'm trying to help myself. A couple things I've noticed
1) in my list of services, there is a service named "Asctcgwto" set to disabled. This brings up nothing in google.
2) After turning on my computer, I type "at" in the console and it responds with "The service has not been started." I use the at command fairly often.
3) I type "net localgroup" and it tells me that the workstation service has not been started. So I start it.... I Don't know why it isn't already started, (it's set as "Automatic" but was stopped).

The problem is getting worse because from the moment I click login, it brings up multiple svchost.exe errors and takes an exceptionally longer amount of time to fully log in.

1 more replies
Answer Match 52.5%

At times I show svchost constantly busy at 2%; long after it should have finished opening processes at startup or opening anything I've requested, and it might run this way for hours.

Windows Explorer also shows a constant usage of about 2%, but it disappears part of the time; svchost doesn't. This is not the normal (historical) scenario; it's the first time I've ever noticed any constant processing. Does this sound like a hardware problem or, if not, is it possibly a worm? All of a sudden I'm using considerably more RAM for these two, also - even when I don't open any
programs.

I've found the following instances of Explorer.exe and svchost.exe on my system:

[Explorer]
C:\WINDOWS\
C:\WINDOWS\$NtUninstallKB820291$
C:\WINDOWS\Driver Cache\i386
C:\WINDOWS\system32\dllcache

[svchost]
C:\WINDOWS\system32
C:\WINDOWS\system32\dllcache

Is this normal? Are some of these files evil clones ? My system is in excellent shape and is finally very fast - after a lot of work - and I'd like to keep it that way.

Thanks,
John

Windows XP Home SP1
Internet Explorer 6.0 SP1
eMachines T2042
2GHz Intel Celeron Processor
512MB RAM
40GB Hard Drive (Using about 25%)
Intel 3D AGP Graphics
10/100Mbps Ethernet (2200 Kb/s)
CD-RW 40x Write
DVD 16x Play
Kerio Personal Firewall
AVG Antivirus
Many Spyware Scanners
Diskeeper
Registry Cleaner
Backup Software
System Restore Activated
 

A:...svchost constantly busy at 2%...

16 more replies
Answer Match 52.5%

Hey guys, I am running Vista on an AMD Phenom X4 9150e with 4gb ram. My hard drive is constantly running and chugging away pretty good too, reading rather than writing i believe. My cpu and memory usage are quite high and my system is running relatively slow for doing simple things like opening a browser. I have attached a screenshot of the system resource monitor with basically nothing running but hijack this and a browser. Any help would be greatly appreciated. I have run scans with malware bytes and adaware, as well as AVG which all come up clean. Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:14:54 AM, on 10/11/2009Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18813)Boot mode: NormalRunning processes:C:\Program Files (x86)\AVG\AVG8\avgtray.exeC:\Program Files (x86)\DAEMON Tools Pro\DTProShellHlp.exeC:\Program Files (x86)\Internet Explorer\iexplore.exeC:\Program Files (x86)\Internet Explorer\iexplore.exeC:\Windows\SysWow64\Macromed\Flash\FlashUtil10b.exeC:\Program Files (x86)\Internet Explorer\iexplore.exeC:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...ion&pf=cndtR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = ht... Read more

A:Slow running system and Hard drive constantly running

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Please download OTL from following mirror:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedIn the upper right hand corner ... Read more

4 more replies
Answer Match 52.08%

I have Malwarebytes Pro running in the backround. As well as Microsoft Security Essentials.
 
I believe I have an infection for 2 reasons.
 
1 - Malwarebytes balloon popup tells me svchost.exe is trying to access a malicious IP and it was blocked.
 
The IP address is: 95.211.194.79
 
 
2. At the following location:
 
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5
 
that Content.IE5 folder is constantly filling up with junk files of between 1kb-14kb a piece. Millions of files. Over the last few days it has accrued up to 13 GB of data on my SSD. I keep manually deleting the folder, but every few days it fills back up again, so I know there is an underlying problem.
 
PLEASE HELP! This is my main Desktop in the household and I'm sick of getting Xfinity Constant Guard notifications on every device in my network when I cannot disable that notification!
 

A:Malwarebytes constantly blocks svchost.exe

I have the exact same issue here. Norton 360, malware bytes and Microsoft Malicious Software Removal Tool from May 2013 all report the system is clean after running full scans. 

5 more replies
Answer Match 52.08%

I get an error almost immediately after i start my computer saying "Host Process for Windows Services has stopped working".
and heres the details:

Problem Event Name: APPCRASH
Application Name: svchost.exe
Application Version: 6.0.6001.18000
Application Timestamp: 47918b89
Fault Module Name: StackHash_336b
Fault Module Version: 0.0.0.0
Fault Module Timestamp: 00000000
Exception Code: c0000005
Exception Offset: 0001624b
OS Version: 6.0.6001.2.1.0.768.2
Locale ID: 1033
Additional Information 1: 336b
Additional Information 2: 27eb358fe674a6f15dafe56d42bb9bf3
Additional Information 3: 2e58
Additional Information 4: 2f06c18113e6d7c00e6b91fa1fde84b6

When this happens all the styles on the tool bars and windows go away and it looks kind of classic windows. Plus i run my internet using a 3g card and that can't connect to the internet when this crashes. Also my windows updates wont install. I tried the BITS repair tool from microsoft and it just says theres no repairs required at this time. Im actually plugged into a local network at my brothers and can get internet that way. i just cant find any answers. I've run adaware, ccleaner, malware bytes. all found some things at first, took care of them. but still have the same problem. I just downloaded hijackthis, so if anyone thinks they can help, I'll post the file. Thanks!

A:svchost.exe constantly crashing in vista 32 bit

http://www.stackhash.com/blog/post/What-is-StackHash.aspx contains information on the designated problem module.Scroll down to "If our application erroneously jumps to an area of memory that does not contain any instructions and attempts to start executing code at that address, then the Instruction Pointer will now be pointing outside any identifiable module."Aside from the idea in my head that C0000005 STOP errors may be related to malware, there's not much else that I can tell you. I will move this to Am I Infected where someone can take a closer look.Louis

1 more replies
Answer Match 51.66%

The problem is svchost.exe (localservice). I have posted an image which contains all services under that process.

Please help me SevenForums, you're my only hope.

A:Svchost.exe constantly taking up about 50% CPU and lots of memory.

Is this happening every boot? Open a resource monitor and switch to CPU tab, sort by CPU. See if you can get additional info, take a screenshot if you can and post here.

9 more replies
Answer Match 51.66%

New timer if and if I screw up something let me know. about 6 weeks ago, system always running slow, looking at task manager kept seeing SVChost running under my user name consuming memory and Cpu, and would have no services associated with it.  Im not a computer guy, so I would just end the process but within minutes back up and running,   I ran the  sfc /scannow, nothing   The only way to hold if off was not to acknowledge the pop up that said Host process for windows stopped working.   I ran the hell out of my mal ware bytes numerous times nothing, microsoft security essentials, just a Trojan, but nothing else. lot of stuff on line about SVChost going nuts, a lot to go through, hardly any of it useful.  Ran TSDDkiller nothing, ran Rkill and it all looked fine with the exception of
Performing miscellaneous checks:
 * ALERT: ZEROACCESS rootkit symptoms found!
Ran TSDD and all the malware programs again and nothing.  I then stumbling across combofix and ran that, and have included the log below, don't really know how to read it but BOOM after the reboot, no more SVChost coming on and growing and damn the machine is fast.  I would appreciate any insight.and any advice ...thanks
 
 

A:SVChost constantly reappearing eating memory

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/555647 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

3 more replies
Answer Match 51.66%

I'm trying to fix my mother's PC and the first thing I noticed was that the fan was always on implying high CPU use. Windows task manager is always reporting at least 70% CPU usage even if none of the processes are reporting that high of a usage. Going into resource manager shows some svchost process with a description of winrscmde as taking the brunt of that cpu use. In addition, windows action center reports a recent removal of blacolaref. I have since installed the appropriate java update.
Thank you for your help!
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16457 BrowserJavaVersion: 10.7.2
Run by j at 12:16:53 on 2012-12-28
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.2811.878 [GMT -6:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}
SP: Microsoft Security Essentials *Enabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRe... Read more

A:svchost.exe constantly uses 50% CPU; resource monitor says winrscmde

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your malware problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top o... Read more

10 more replies
Answer Match 50.82%

Hey guys.I have a fair few scanners and such on my pc as you should see in the hjt log, but even though when I look at that speedupmypc3 program from uniblue, everything is "high" BUT... my computer doesn't get below 50% cpu usage. I can't find the problem. I have ran uniblue spyeraser and registry booster, spybot, reg mech, reg cure, c cleaner stuff like that, and it all comes up clean... besides a few bad registry keys and such, unknown files, missing files and what not.Any help would be HIGHLY appreciated.ThanxDeckard's System Scanner v20071014.68Run by w0lfm4n on 2008-06-06 21:18:58Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------------Successfully created a Deckard's System Scanner Restore Point.-- Last 5 Restore Point(s) --75: 2008-06-06 11:19:17 UTC - RP139 - Deckard's System Scanner Restore Point74: 2008-06-06 10:44:48 UTC - RP138 - SpyEraser 06_06_2008_20_44_3873: 2008-06-06 08:45:27 UTC - RP137 - Uniblue RegistryBooster72: 2008-06-05 08:14:35 UTC - RP136 - Unsigned driver install71: 2008-06-05 08:11:35 UTC - RP135 - Installed Speed S8800i-- First Restore Point -- 1: 2008-04-15 05:47:09 UTC - RP65 - System CheckpointBacked up registry hives.Performed disk cleanup.Total Physical Memory: 504 MiB (512 MiB recommended).-- HijackThis (run as w0lfm4n.exe) ---------------------------------------------Logfile of Trend Micro HijackThis ... Read more

A:Svchost.exe Not Sure What It Is. Comp Hits 100% Usage Constantly. Don't Know How To Solve It

Welcome to the BleepingComputer Forums. Since it has been a few days, please post a new HijackThis log. Thank you for your patience.If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped.

37 more replies
Answer Match 50.82%

Hi,
 
Not certain if I have a virus.  The fan on my computer is constantly running at a high level and I noticed several svchost sessions, at least 10 or more.  CPU usage is running at least 25%, constantly and will go higher but no lower than 25%.  I've shut down the computer and rebooted to no avail.  Fan goes up and svchost bumps up to over 10.  Not certain if multiple svchost sessions is a sign.
 
Can you help?
 
Thanks,
Ken

A:Infected? Multiple svchost and fan constantly runs high

Multiple Svchost's is normal. What processes exactly are using the cpu?

0 more replies
Answer Match 50.82%

I've had this problem for around 3 weeks after I noticed my slow USB Mobile Broadband manager was constantly uploading about 20Kbps data. 
 
TCPEye shows that svchost.exe is continuously accessing the internet and eating up my bandwidth. Here is an image of TCPEye in action when it's recording the activity: 
 

 
I've tried running Malware Bytes and Ad-Aware. Have also tried searching this forum and many others. No solutions found.
 
 netstat -a -b in cmd.exe shows stuff like this: 
 

TCP sb:4498 86.54.236.118:microsoft-ds SYN_SENT 1260
C:\WINDOWS\system32\mswsock.dll
c:\windows\system32\WS2_32.dll
-- unknown component(s) --
[svchost.exe]
TCP sb:4499 152.95.22.72:microsoft-ds SYN_SENT 1260
C:\WINDOWS\system32\mswsock.dll
c:\windows\system32\WS2_32.dll
-- unknown component(s) --
[svchost.exe]
TCP sb:4500 pa175-36-114-66.pa.vic.optusnet.com.au:microsoft
-ds SYN_SENT 1260
C:\WINDOWS\system32\mswsock.dll
c:\windows\system32\WS2_32.dll
-- unknown component(s) --
[svchost.exe]etc..etc.. (it just keeps repeating very similar info)
 
Ad-Aware found a number of trojans so after removing them there seems to be one persistent .dll which is found but never fully removed/quarantined.
 
sgavykb.dll 
 
 
I have attached the most recent Ad-Aware scan log to this post. 
 
After the Ad-Aware scan completes I reboot the machine on request, then an XP Boot cleaner screen loads first and tries to remove this file bef... Read more

A:svchost.exe constantly using my internet -- sgavykb.dll trojan to blame?

Please download TDSSKiller from here and save it to your DesktopDoubleclick on TDSSKiller.exe to run the application, then click on Change parameters
Check Loaded Modules and Detect TDLFS file system. Do not check Verify file digital signatures (even though it is checked in the example)If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now
Click Start Scan and allow the scan process to runIf threats are detected select Skip for all of them unless I instruct you otherwiseClick Continue
Click Reboot computerPlease post the contents of TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)in your replyDue to forum upgrade you may face issues posting the TDSSkiller log.Just last few lines of log is sufficient===================================================RKILLPlease download Rkill by Grinler from one of the 4 links below (if one of them does not work try another.) and save it to your desktop:Link 1Link 2Link 3Link 4In order for Rkill to run properly you must disable your anti-malware software. Please refer to this page if you are not sure how.Double-click on Rkill. (If you are using Windows Vista, please right-click on it and select Run As Administrator)Note: You may have to run Rkill a few times before it is successful. You may also have to download Rkill from a different link which will save it as a different file name.A black screen will appear and then disappear. Please do not worry, th... Read more

28 more replies
Answer Match 50.82%

So yesterday when I was using my computer (running Windows 7) my physical memory suddenly got very high all the time, even when no programs are running. I have 4 GB of RAM and even when it's on desktop without any programs in the background it stays on about 1,5 GB usage. It's VERY slow when I run Photoshop CS6, goes up to about 3,8 GB usage. As as I said this problem occured yesterday. Never happened before. I tried searching for a few similar solutions here on Bleeping Computer using programs such as ComboFix, Rkill then scanning afterwards etc. but none of them works. Any kind of help would be greatly appreciated really! :> Thanks in advance!!

A:Physical memory constantly very high - Possible svchost.exe virus?

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your desktop.NOTE. If you already have MBAM 2.0 installed scr... Read more

2 more replies
Answer Match 50.4%

Hi,
 
Recently this week our three affected computers experienced the freeze and hang whenever we start using any web browser or navigate to other program windows, especially when the ethernet cable is plugged in to connect to internet. The strange issue is when I disconnect the ethernet cable the PC works smooth and normal.
 
Obviously, I thought this has some connection with the recent task on last Friday - last week I burned CDs of data in main multimedia PC (not those three affected computers) then test out the CD auto-run data (I burnt the local website files, autorun.inf and start.bat into CD) in those three PC that I mentioned above.
 
When I scanned main multimedia PC with Eset anti virus and quarantine some files affected with trojan/virus (win32 / autorun. M worm) including the autorun.inf and magic iso maker (the software I used last week to create ISO from the CDs that I tested out).
 
Then this week starting from Tuesday, I realised the strange issue in the PC when we boot the system and began to use the web browser or appliction, the PC hangs for some unknown reason and found out that the PC seems downloading data through LAN VERY CONSTANTLY in incrementally large size (from 1000 to 2,000,000 packets) so I thought this may be the isse causing the computers to hang, even we couldn't open the Outlook 2003 as it stops in the middle of loading data aset (showing status: data binding or loading 2 data sets..)
 
I have tried to scan in-depth d... Read more

More replies
Answer Match 50.4%

svchost.exe constantly increases physical memory usage as it can reache 100 000K!
Can you see anything wrong? Thanks for your help in advance!

Logfile of HijackThis v1.99.1
Scan saved at 18:16:16, on 08/06/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINNT\system32\cisvc.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\snmp.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINNT\Explorer.EXE
C:\WINNT\Mixer.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINNT\Datecs\Flex2K.exe
C:\WINNT\system32\mdm.exe
C:\WINNT\system32\cidaemon.exe
C:\WINNT\system32\cidaemon.exe
C:\Program Files... Read more

More replies
Answer Match 49.98%

Hi,
 
Yesterday I started getting popups from Kaspersky, stating that it is blocking malicious urls, even there is no webpage open and running. When I checked the detailed reports, I have seen that it is blocking a trojan named "HEUR:Trojan.ScriptIframer". I ran adwcleaner and rkill. Then I restarted the computer which made me realize the popups starts when the computer is booted even before any browser is open. I googled some stuff and installed malwarebytes and ran a scan with it. It found some malicious files and cleaned them but it didn't solve the issue. Malwarebytes also started to show some popups with different ports and ips but the same process which is "svchost.exe". The popups come up on the startup, when a browser is launched, when a new tab is opened even if it is an empty tab or sometimes when the computer is idle.
 
It is really frustrating as I ran many scans with different tools and none of them seemed to fix the issue. I tried to explain the problem as detailed as possible, the screenshots of the popups are attached. Any help will be appreciated.
 
The log of adwcleaner is pasted below and farbar logs are attached to give it a head start. I couldn't paste the farbar logs because it didn't let me post a message that long so I attached it. Looking to hear from you soon.
 
Thanks.
 
# AdwCleaner v4.104 - Report created 10/12/2015 at 00:27:35
# Updated 05/12/2014 by Xplode
# Database : 2015-12-07.3 [Live]
# Operating System : Windows 7 H... Read more

A:HEUR:Trojan.ScriptIframer constantly blocking malicious urls with svchost.exe

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Remove these programs in bold via the Control Panel > Programs and Features applet.Internet Explorer için Yandex.Bar 6.7 (HKLM-x32\...\{1D1E60B4-BE61-4219-BDF1-5A7622412130}) (Version: 6.7.0.1913 - Yandex)Popcorn Time (HKU\S-1-5-21-2870111626-1301175785-2031466506-1002\...\Popcorn Time) (Version: - Popcorn Official)===ATTENTION: System Restore is disabledHow to: Turn System Restore ON - Windows < Importanthttp://windows.microsoft.com/en-ca/windows/turn-system-restore-on-off#1TC=windows-7<<<>>>Press the windows key + r on your keyboard at the same time. This will open the RUN BOX.Type Notepad and and click the OK key.Please copy the entire contents of the code box below to the a new file. 
start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

HKU\S-1-5-21-2870111626-1301175785-2031466506-1000\...\Run: [ROC_JAN2013_TB] => "C:\Program Files (x86)\AVG Secure Search\ROC_JAN2013_TB.exe" /PROMPT /CMPID=JAN2013_TB
HKU\S-1-5-21-2870111626-1301175785-2031466506-1000\...\Run: [AVG-Secure-Search-Update_JUNE2013_TB] => "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe" /PROMPT /CMPID=JUNE2013_TB
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
Tool... Read more

16 more replies
Answer Match 49.98%

Ive looked all over for the cure, but nothing works.
When this first started, comp usage was 100% , SVCHOST.exe pops up in the task manager, so I d/l process explorer and looked what was going on.
Ill show you what I have ran across


I havent installed anything, it was just a sudden problem.
It seems to be explorer.exe related.

Hijack log:
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system\csrss.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Elston\My Documents\HiJackThis_v2.exe
C:\WINDOWS\winservicehost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?Li... Read more

A:svchost.exe - explorer.exe computer usage spiking, hourglass constantly flashing.

15 more replies
Answer Match 47.46%

My CPU usage is always running at 50-55%, which it wasn't doing a week ago. When I check the "Processes" tab under Task Manager, there isn't any application/browser/programs that are taking up that cpu usage. I also ran a virus check with TrendMicro and it came up with nothing. I'd like to be able to know what is running in the background and stop it. It's making work related programs and browsing more slow.

Here is my Hijackthis log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 5:23:17 PM, on 10/31/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\WINDOWS\RtHDVCpl.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\TeamViewer\Version5\TeamViewer.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\System32\igfxpers.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\hp\kbd\kbd.exe
C:\Program Files\Adobe\Photoshop CS\Photo... Read more

A:CPU Constantly Running at 50-55%

10 more replies
Answer Match 47.46%

I have a Compaq Presario PC, windows XP W/SP2 installed. Model # SR1503WM. The CPU constantly runs whether computer is being used or not. I have checked the task manager and it shows CPU as 0% and compaq connections agent as the only application running. I have 1.24GB of RAM installed. I have Norton installed and AVG and have checked for spyware and computer seems to be clean of any. The unit seems to be cool as it is not hot when felt or air from it, and also is free of dust clogging vents and inside of unit. What could be the problem. It is 2 years old this month. The noise runs me crazy after a while, thanks!
 

A:CPU constantly running

Hello Lutzlady. There maybe something at the end of this link that will help you out.
http://www.kellys-korner-xp.com/xp_tweaks.htm
 

1 more replies