Another svchost.exe

[Mark]

I know that in other versions of windows, svchost.exe is
the netsky.f virus. Try downloading the mcafee stinger
from here : http://vil.nai.com/vil/stinger/
Run this program and it should delete infecte dfiles fore
you. I apologize if this is not what you are looking for.

-----Original Message-----
I have one offending svchost.exe, at around 40% CPU that

as long as it is running also keeps the lsass at the other
60%.

I identified what services this particular svchost is

hosting, quite a number I could not find in the Admin
Tools services list. Are they all legit? - and how could I
investigate further or remedy?

The list:
AudioSrv, Browser, CryptSvc, Dhcp, dmserver, EventSystem, HidsServ, lanmanserver,
lanmanworkstation, Netman,Nla, Rasman, Schedule, seclogon

SENS, ShellHWDetection, TapiSrv,

 

[Alex Nichol]

I know that in other versions of windows, svchost.exe is
the netsky.f virus. Try downloading the mcafee stinger

In XP svchost is the supporting interface for a whole slew of system
services, such as the ones the OP mentioned. Some of these do cause
heavy CPU use in some circumstances - of those mentioned I don't see any
likely to be the cause other than TrkWorks, which I do not recognise as
belonging to Windows at all. It may be one installed by some AV or
firewall.
WZCSVC is Wireless zero configuration, which *might* get in a knot if a
wireless connection was half heartedly trying to make a connection and
not succeeding.

I would go to Control Panel - Admin Tools - Services and look for those
two and use Stop - see if it has an effect on the problem. Others that
have been implicated in heavy CPU use are

Background Intelligent Transfer - needed for Windows Update to run
automatically but not otherwise (And Wuauserv mentioned is auto update
so turning that off might be worth trying)

Routing and Remote Access

and the pair
SSDP Discovery which works on behalf of
Universal Plug and Play
and they are only needed if you have a router that uses UPnP for Net
address translation

 

[R. McCarty]

To see an expanded list of what Svchost is handling (in XP
Professional ONLY). Open a Command prompt & Type
Tasklist /SVC