tcpsvcs.exe using 99% of processor

G

Guest

Recently when I go to task manager, Performance tab, My
CPU usage is always at maximum. And my computer is
sluggish.
When I look in task manager, Processes tab, in CPU
column I notice that image name tcpsvcs.exe is constantly
using 99% of my processor power. To get my computer to
work correctly again I have to right click tcpsvcs.exe
and end the process. Then it is ok unless I restart my
computer again and I have the same problem again. Can you
tell me what this is how I stop it.
Also something else new is occurring that might be
related. When I run an ipconfig /all I get two new
adaptors that I didn't put in. they are;
Tunnel adapter teredo tunneling Pseudo-Interface
AND
Tunnel adapter Automatic Tunneling Pseudo-Interface
Help, what is going on. What do I do.
 
R

Rickey Braddam

anonymous wrote...
Recently when I go to task manager, Performance tab, My
CPU usage is always at maximum. And my computer is sluggish.
When I look in task manager, Processes tab, in CPU
column I notice that image name tcpsvcs.exe is constantly
using 99% of my processor power. To get my computer to
work correctly again I have to right click tcpsvcs.exe
and end the process. Then it is ok unless I restart my
computer again and I have the same problem again. Can you
tell me what this is how I stop it.

Looks like you might have picked up a trojan??? My machine
has
tcpsvcs.exe service present in task manager, but it is not
using any
CPU time.
Also something else new is occurring that might be
related. When I run an ipconfig /all I get two new
adaptors that I didn't put in. they are;
Tunnel adapter teredo tunneling Pseudo-Interface
AND
Tunnel adapter Automatic Tunneling Pseudo-Interface
Help, what is going on. What do I do.

Those two interfaces are made up when IPv6 is installed. If
you've installed any programs which use IPv6, they might
have enabled the IPv6 interface, it is disabled by default.
If you are SURE you haven't installed any program that might
use the IPv6 interface, you can easily uninstall it. After
you uninstall it, reboot a couple of times and check to see
if it's re-installed, if so, you probably have a trojan. To
see if IPv6 is installed, just type "IPv6" in a command
window (DOS box) and press "Enter". If IPv6 is installed
you'll see a list of commands you can use, if not you'll get
a message "IPv6 not installed" or " to install IPv6 type
IPv6 install and press Enter"... I'm not sure about that
message. I can't test it because I have IPv6 installed and
I'll just get the help screen.

If you want to disable IPv6 to see if it is causing the CPU
usage you're seeing, open a command window, type "ipv6
uninstall" and press the "Enter" key (no quote marks, of
course)... you must be logged in with Administrator
privilege to do it. If a program you've installed then stops
working, you'll probably have to re-install it to get all
the interfaces configured like they have to be for the
program to work correctly.

If you already know how to use netsh from a command window,
skip to the bottom...

If you want to look at IPv6 before doing anything dramatic,
type each of the commands below into a command window. Press
the "Enter" key after each command. After each command name
below is what the command line will look like after you
press "Enter". I'll put ^ where you press "Enter", my
remarks start with "//"..

//First, type netsh and press "Enter"...
c:\whatever your path is>netsh^

//Prompt will change to "netsh>", type "interface" and press
"Enter"
netsh>interface^

//Prompt will change to "netsh interface>", type "ipv6" and
press "Enter" (yes, again)
netsh interface>ipv6^

// prompt will change to "netsh interface ipv6>", type a "?"
mark and press enter
netsh interface ipv6>?^

// gives you a list of commands you can use in the ipv6
context
// below is the output of the "netsh interface ipv6>?"
command

The following commands are available:

Commands inherited from the netsh context:
... - Goes up one context level.
abort - Discards changes made while in offline
mode.
add - Adds a configuration entry to a list of
entries.
alias - Adds an alias.
bridge - Changes to the `netsh bridge' context.
bye - Exits the program.
commit - Commits changes made while in offline mode.
delete - Deletes a configuration entry from a list
of entries.
diag - Changes to the `netsh diag' context.
exit - Exits the program.
firewall - Changes to the `netsh firewall' context.
interface - Changes to the `netsh interface' context.
offline - Sets the current mode to offline.
online - Sets the current mode to online.
p2p - Changes to the `netsh p2p' context.
popd - Pops a context from the stack.
pushd - Pushes current context on stack.
quit - Exits the program.
ras - Changes to the `netsh ras' context.
routing - Changes to the `netsh routing' context.
set - Updates configuration settings.
show - Displays information.
unalias - Deletes an alias.

Commands inherited from the netsh interface context:
add - Adds a configuration entry to a table.
delete - Deletes a configuration entry from a table.
ip - Changes to the `netsh interface ip'
context.
ipv6 - Changes to the `netsh interface ipv6'
context.
portproxy - Changes to the `netsh interface portproxy'
context.
reset - Resets information.
set - Sets configuration information.
show - Displays information.

Commands in this context:
6to4 - Changes to the `netsh interface ipv6 6to4'
context.
? - Displays a list of commands.
add - Adds a configuration entry to a table.
delete - Deletes a configuration entry from a table.
dump - Displays a configuration script.
help - Displays a list of commands.
install - Installs IPv6.
isatap - Changes to the `netsh interface ipv6
isatap' context.
renew - Restarts IPv6 interfaces.
reset - Resets IPv6 configuration state.
set - Sets configuration information.
show - Displays information.
uninstall - Uninstalls IPv6.

The following sub-contexts are available:
6to4 isatap

To view help for a command, type the command, followed by a
space, and then
type ?.

// all the above is the output of the "netsh interface ipv6
?" command

// now type "show address" and press "Enter"
netsh interface ipv6>show address^
// gives you the addresses used by each adapter...
there will be more adapters
// than physical NICs in your machine. Adapter #1 is
for the loopback (localhost)
// adapter.
// #2 is for an "Automatic Tunneling
Pseudo-Interface", a 6to4 adapter that allows
// using IPv6 address encapsulated inside an ipv4
packet (so you don't have to
// have a true ipv6 connection directly to an ipv6
ISP) so you can connect
// to another user through their (?? normal ??) 6 to
4 interface

// #3 is a "6 To 4 Tunneling Pseudo-Interface", you
might not have one, I seem to
// remember that it has to be manually configured

// #4 is for your LAN card whether you're on a
client or the server

// #5 is for your Internet-connected card if you're
on the server
// #5 is for an interface called Teredo if you're on
a client

// #6 is for an interface called Teredo if you're on
a server
// you may have more if you have more than two NIC
cards in your machine.

// now type "show ?" and press "Enter" to see the list of
things netsh will display
// information about

If you have one machine connected to the Internet and one or
more machines connected to that one in a Local Area Network,
you might consider having IPv6 installed. It will enable you
to connect to any of your LAN machines from the Internet
using only one IP address that you have to pay your ISP for.
Here are some links for more information:

XP IPv6 FAQ:
http://www.microsoft.com/technet/treeview/default.asp?url=/t
echnet/prodtechnol/winxppro/Plan/FAQIPV6.asp

To download the Advanced Networking Pack:
http://www.microsoft.com/downloads/details.aspx?FamilyId=E88
CC382-8CE6-4739-97C0-1A52A6F005E4&displaylang=en

If the wrapped link fails:
http://www.microsoft.com/windowsserver2003/technologies/ipv6
/default.mspx

IPv6 NAT Transversal description (Teredo):
http://www.microsoft.com/technet/treeview/default.asp?url=/t
echnet/prodtechnol/winxppro/maintain/Teredo.asp

Windows XP Peer to Peer Networking links (including SDK):
http://www.microsoft.com/windowsxp/p2p/

hope this helps...
Rickey
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top