svchost.exe is causing 100% cpu usage

[Zach]

Lately I've noticed that under my task manager my computer
is idling on 100% cpu usage when I am running virtually no
applications. One of the svchosts.exe tasks is routinely
taking about 70-90% of the cpu. I went into the command
window and executed tasklist /svc to see what services
where running under that svchost.exe and what came up was:

Lmhosts
RemoteRegistery
SSDPSRV
WebClient

This has only recently been happening after I had to
reformat my hard drive. Was Wondering If anyone had any
ideas on what i could do to fix this problem, my
performance has drastically decreased

 

[Chuck]

Lately I've noticed that under my task manager my computer
is idling on 100% cpu usage when I am running virtually no
applications. One of the svchosts.exe tasks is routinely
taking about 70-90% of the cpu. I went into the command
window and executed tasklist /svc to see what services
where running under that svchost.exe and what came up was:

Lmhosts
RemoteRegistery
SSDPSRV
WebClient

This has only recently been happening after I had to
reformat my hard drive. Was Wondering If anyone had any
ideas on what i could do to fix this problem, my
performance has drastically decreased

Zach,

It's probably UPnP. Control Panel - Administrative Tools - Services - Universal
Plug and Play Device Host. Stop then Disable.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Zach]

I disabled UPnP and my system is still idling at 100% cpu
usage.....btw im running an athlon xp 3000+ with 512 ddr
ram, winxp pro, ati radeon 9800 pro. Thats probably the
only remotely relevant hardware

 

[Unknown]

Do you know what idling is? Lets hope the idle time is very high when you're
not running anything.

 

[R. C. White]

Hi, Zach.

What do you mean by "idling at 100% cpu usage"?

When your computer is doing "nothing", the motor is still running, just like
your car motor when you are waiting at the stop light. The WinXP Task
Manager shows that the System Idle Process is running perhaps 97% of the
time. This is good, in a way, because it means that your computer is just
sitting there idling, waiting for you to "step on the gas". Give it
something useful to do and the System Idle Process won't have a chance to
run as much.

Is that what you meant?

RC

 

[Guest]

I merely used my own computer lingo. The system idle
process is using 0 cpu in the task manager and one of the
svchost.exe is currently using 67. At the bottom of the
task manager there is a little box that says "CPU Usage:
100%". By idling i meant that i was running no programs
except minor background programs that normally use up at 4%
cpu max. My system idle process is almost nvr more than 0.
Oh and also, my computer has started randomly rebooting
without any error message. Thanks for your time

Zach

 

[Chuck]

I merely used my own computer lingo. The system idle
process is using 0 cpu in the task manager and one of the
svchost.exe is currently using 67. At the bottom of the
task manager there is a little box that says "CPU Usage:
100%". By idling i meant that i was running no programs
except minor background programs that normally use up at 4%
cpu max. My system idle process is almost nvr more than 0.
Oh and also, my computer has started randomly rebooting
without any error message. Thanks for your time

Zach

Zach,

What virus protection do you have? Try these for a recheck:
<http://security.symantec.com/ssc/vc_about.asp>
<http://housecall.trendmicro.com/housecall/start_corp.asp>

Next do a spyware check.

Start by downloading LSP-Fix from <http://www.cexx.org/lspfix.htm>, and
CWShredder from <http://www.majorgeeks.com/download4086.html>.

First, run CWShredder.

Now check for, and remove, spyware. Get HijackThis
<http://www.majorgeeks.com/download.php?det=3155> and Spybot S&D
<http://security.kolla.de/index.php?lang=en&page=download>.
1) Install and run Spybot. First update it ("Search for updates"), then run a
scan ("Check for problems"). Trust Spybot, and make all recommended deletions.
2) Install and run HijackThis. Do NOT make any changes immediately. Save the
Log.
3) Have your HJT log interpreted by experts at one or more of the following
forums (and post it here):
<http://forums.tomcoyote.org/>
<http://63.247.79.145/~coyote/forums/>
<http://www.wilderssecurity.com/>
<http://forums.net-integration.net/>
<http://www.spywareinfo.com/forums/>

If removal of any spyware affects your ability to access the internet (some
spyware builds itself into the network software, and its removal may damage your
network), run LSP-Fix.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[zach]

Hey thanks chuck,
The guys at http://www.wilderssecurity.com where able to
help me fix the problem. Apparently i had a nice
infestation of the welchia worm. I forgot to patch my
computer before hooking up to my schools network. Thanks
for pointing me in the right direction.

 

[Chuck]

Hey thanks chuck,
The guys at http://www.wilderssecurity.com where able to
help me fix the problem. Apparently i had a nice
infestation of the welchia worm. I forgot to patch my
computer before hooking up to my schools network. Thanks
for pointing me in the right direction.

Excellent, Zach. Wilders is one of the best. Thanks for the update.