svchost.exe takes 95% of CPU time

[BRob]

I was trying to find out why my entry of text from my keyboard into word was
very jerky.

Checking the processes in task panel there are 10 instances of svchost.exe
running - with various usernames System - Network Service and Local Service.

One of those is taking 95% to 98% of CPU time - nothing else is taking much
CPU time at all - even word.

I've stopped that process and nothing bad seems to happen - and CPU usage
drops right down to almost nothing.

Can SKS tell me how to find out what that particular svchost instance is
actually doing and how to stop it starting (at least temporarily) to see if
I actually need it.

Tx

 

[Pegasus \(MVP\)]

I was trying to find out why my entry of text from my keyboard into word
was very jerky.

Checking the processes in task panel there are 10 instances of svchost.exe
running - with various usernames System - Network Service and Local
Service.

One of those is taking 95% to 98% of CPU time - nothing else is taking
much CPU time at all - even word.

I've stopped that process and nothing bad seems to happen - and CPU usage
drops right down to almost nothing.

Can SKS tell me how to find out what that particular svchost instance is
actually doing and how to stop it starting (at least temporarily) to see
if I actually need it.

Tx

You can find out by running Process Explorer (procexp.exe) from
www.sysinternals.com.

 

[Gerry]

Download Process Explorer.

For further information about Process Explorer see here:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

It would be helpful if you could post the Command Line of the svchost
process generating the excessive CPU usage. In Process Explorer place
cursor on Process and select Properties, Image.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[PA Bear [MS MVP]]

And that process is...?

================

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.