svchost error

[Guest]

Here are the task's running, ill put asteriks to which one i believe is
causing the error.


C:\Documents and Settings\raymond\Desktop>tasklist /svc

Image Name PID Services
========================= ====== =============================================
System Idle Process 0 N/A
System 4 N/A
smss.exe 428 N/A
csrss.exe 476 N/A
winlogon.exe 500 N/A
services.exe 548 PlugPlay
lsass.exe 560 PolicyAgent, ProtectedStorage, SamSs
svchost.exe 712 DcomLaunch, TermService
svchost.exe 784 RpcSs
svchost.exe 916 Dnscache
svchost.exe 976 LmHosts, SSDPSRV, WebClient
spoolsv.exe 1028 Spooler
explorer.exe 1420 N/A
alg.exe 1916 ALG
wuauclt.exe 308 N/A
IEXPLORE.EXE 812 N/A
cmd.exe 1720 N/A
******svchost.exe 1308 CryptSvc, EventSystem, SENS, winmgmt,
wuauserv
wmiprvse.exe 1336 N/A
taskmgr.exe 984 N/A
IEXPLORE.EXE 1548 N/A
tasklist.exe 1660 N/A

 

[Wesley Vogel]

******svchost.exe 1308 CryptSvc, EventSystem, SENS, winmgmt,
wuauserv

CryptSvc = Cryptographic Services
Provides three management services: Catalog Database Service, which confirms
the signatures of Windows files; Protected Root Service, which adds and
removes Trusted Root Certification Authority certificates from this
computer; and Key Service, which helps enroll this computer for
certificates. If this service is stopped, these management services will not
function properly. If this service is disabled, any services that explicitly
depend on it will fail to start.

EventSystem = COM+ Event System
Supports System Event Notification Service (SENS), which provides automatic
distribution of events to subscribing Component Object Model (COM)
components. If the service is stopped, SENS will close and will not be able
to provide logon and logoff notifications. If this service is disabled, any
services that explicitly depend on it will fail to start.

SENS = System Event Notification
Tracks system events such as Windows logon, network, and power events.
Notifies COM+ Event System subscribers of these events.

winmgmt = Windows Management Instrumentation
Provides a common interface and object model to access management
information about operating system, devices, applications and services. If
this service is stopped, most Windows-based software will not function
properly. If this service is disabled, any services that explicitly depend
on it will fail to start.

wuauserv = Automatic Updates
Enables the download and installation of Windows updates. If this service is
disabled, this computer will not be able to use the Automatic Updates
feature or the Windows Update Web site.


--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

These are Windows services that run under this particular svdhost.exe
process. The way to isolate which one is to stop each service until you
locate the one that's eating memory.

But, since it's Windows services that are involved, this raises the
possibility of a malware infection. So, I'd suggest visiting
http://housecall.trendmicro.com/ and perform a free, online scan of your
system.

- John

 

[Guest]

The thing is, I just Formatted and installed home OEM.
as soon as it boot ed for the first time, went to 100% within minutes.
after i turn off the high process svc host, i go back to 2%,
but if i try to update it kicks back up to 100%.

i just dont want to have end this svc everytime i boot,
i dont have to update. i have tried upgrading to xp pro
and this STILL got the same error. if you look at the link
in my previous message i ended the update process
and reset what i was told and turned it back on.

what should i do from here?

 

[Wesley Vogel]

I looked at all of the other services that you did NOT have asterisks by.

Here's what I think.

svchost.exe 976 LmHosts, SSDPSRV, WebClient

SSDPSRV = SSDP Discovery Service

upnphost = Universal Plug and Play Device Host service. I didn't see it on
your tasklist /svc, but...

Try disabling the SSDP Discovery Service and the Universal Plug and Play
Device Host service.

Notification area icons are missing at startup
http://windowsxp.mvps.org/trayicons.htm

How To: Fix Missing System Tray Icons at Windows XP startup
http://www.tech-pro.net/howto_013.html

Your pointer changes to an hourglass when you hold it over the taskbar for a
few minutes after starting your Windows XP-based computer
http://support.microsoft.com/?kbid=841571

svchost.exe 916 Dnscache

Dnscache = DNS Client
Resolves and caches Domain Name System (DNS) names for this computer. If
this service is stopped, this computer will not be able to resolve DNS names
and locate Active Directory domain controllers. If this service is disabled,
any services that explicitly depend on it will fail to start.

Set it to Manual if not on a network.

Only side effect is you have to have the DNS Client service running in order
for ipconfig /displaydns and ipconfig /flushdns to work properly.

You can manually start DNS Client for those commands if you need them.

svchost.exe 976 LmHosts, SSDPSRV, WebClient

LmHosts = TCP/IP NetBIOS Helper
Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name
resolution.

Recommended State Disabled, if on a simple home network (Even if using
Netbios over TcpIp).

Automatic, if needing to login on to a domain using Netbios/WINS or using
the LmHosts-file.

Note if using netbios to logon to the domain and this service is disabled,
then the Group Policy will not be applied to the machine.
from...
http://smallvoid.com/tweak/winnt/service/stuv.html#LMHOSTS

SSDPSRV = SSDP Discovery Service
Enables discovery of UPnP devices on your home network.

Not needed if not on a network. May not be needed even then.

Recommended State Disabled, unless working with networked Universal Plug and
Play devices or using Internet Connection Sharing.

The Simple Service Discovery Protocol (SSDP) enables detection of Universal
Plug and Play (UPnP) devices on your home network. This service listens for
UPnP connections at TCP port 5000 and UDP port 1900.

UPnP devices can for example be printers or Internet Gateway Devices (IGD)
like routers, firewalls or computers running Internet Connection Sharing.
When contact have been made to an UPnP device, then it is possible for the
UPnP device to respond what it can be used for.

Note if using Internet Connection Sharing then this service should be
started on the server and the clients (If WinXP) as it will provides the
ability to see the Gateway icon on the clients.

Note even if having disabled this service, then SSDP traffic might still
occur. This can be caused by applications like MSN Messenger
from...
http://smallvoid.com/tweak/winnt/service/stuv.html#SSDPSRV

WebClient = WebClient
Enables Windows-based programs to create, access, and modify Internet-based
files. If this service is stopped, these functions will not be available. If
this service is disabled, any services that explicitly depend on it will
fail to start.

Disable this service right now!!!!. It makes your machine act as an
internet server.

Note this service interferes when accessing remote files and can cause long
delays when accessing My Network Places.

Note with SP2 the basic authentication has been disabled

The WebClient service allows Win32 applications to access documents on the
Internet.

The WebClient extends the networking capability of Windows by allowing
standard Win32 applications to create, read and write files on Internet file
servers using the WebDAV protocol. The WebDAV protocol is a file access
protocol described in Extensible Markup Language (XML) that travels over the
Hypertext Transfer Protocol (HTTP). By using standard HTTP, WebDAV runs over
existing Internet infrastructure (e.g., firewalls and routers).

Disabling the service will remove this capability, and will prevent users
from using the Web Publishing Wizard to publish data to the internet for
locations that use the WebDAV protocol (e.g., MSN).
from ...
http://www.microsoft.com/technet/pr...r2003/technologies/management/svrxpser_7.mspx

Here's the skinny on the WebClient Service on Windows XP:
Real World Description: the WebClient service provides WebDAV (Web
Distributed Authoring and Versioning) integration in the Explorer shell. It
makes it possible to use "web folders" and to browse the file systems of web
servers (not unlike FTP, but better -- adds secure password authentication
and file locking) within an Explorer window. WebDAV is an extension of the
HTTP/1.1 protocol.

It is not needed.

You can also use Internet Explorer 5 and above for this functionality (File

Open > enter URL and check the "Open as Web Folder" checkbox), as well as

a host of other downloadable tools that implement WebDAV.
from...
http://www.theeldergeek.com/webclient.htm

I didn't attribute evertning that I copied and pasted, I'm getting tired.
Good night.