How to prevent SVCHOST.EXE from taking over 100% of CPU!?

[Frank D]

Please help -- I'm going crazy!!!!

Every 3 to 5 minutes this "Generic Host Process for Win32 Services" starts up (I'm using Process Explorer so I can see everything that's running and how much of the CPU it's using) and takes over my entire PC for 2 to 3 minutes each time. For example, in the middle of the previous sentence I was prevented from doing *anything* with my computer for at least 2 minutes while this thing was running. No matter what I do it keeps running and interfering with everything I try to do. I can kill it but it just comes back in a few seconds. It happens whether I'm connected to the Internet or not. I tried shutting down all programs -- even those running in the background -- and it made no difference. I can't record music to my hard drive because this process keeps interrupting the recordings. Can anyone help?

This is not a case of a virus or spyware or trojan. It's purely Microsoft's stuff.

Frank D

Note: As I tried to send this it happened again!!!

Operating System System
Windows XP Professional Service Pack 2 (build 2600)
119.99 Gigabytes Usable Hard Drive Capacity
63.81 Gigabytes Hard Drive Free Space
WDC WD400BB-32CXA0 [Hard drive] (40.02 GB) -- drive 0, s/n WD-WMAC51166496, rev 02.05B02, SMART Status: Healthy
WDC WD800JB-00FMA0 [Hard drive] (80.03 GB) -- drive 1, s/n WD-WCAJ93105654, rev 13.03G13, SMART Status: Healthy
320 Megabytes Installed Memory
Local Drive Volumes
c: (FAT32 on drive 0) 40.01 GB 11.20 GB free
d: (FAT32 on drive 1) 79.98 GB 52.62 GB free

Virus Protection
AVG 7.5.446 Version 7.5.446
Realtime File Scanning On

 

[kimiraikkonen]

Please help -- I'm going crazy!!!!

Every 3 to 5 minutes this "Generic Host Process for Win32 Services" starts up (I'm using Process Explorer so I can see everything that's running and how much of the CPU it's using) and takes over my entire PC for 2 to 3 minutes each time. For example, in the middle of the previous sentence I was prevented from doing *anything* with my computer for at least 2 minutes while this thing was running. No matter what I do it keeps running and interfering with everything I try to do. I can kill it but it just comes back in a few seconds. It happens whether I'm connected to the Internet or not. I tried shutting down all programs -- even those running in the background -- and it made no difference. I can't record music to my hard drive because this process keeps interrupting the recordings. Can anyone help?

This is not a case of a virus or spyware or trojan. It's purely Microsoft's stuff.

Frank D

Note: As I tried to send this it happened again!!!

Operating System System
Windows XP Professional Service Pack 2 (build 2600)
119.99 Gigabytes Usable Hard Drive Capacity
63.81 Gigabytes Hard Drive Free Space
WDC WD400BB-32CXA0 [Hard drive] (40.02 GB) -- drive 0, s/n WD-WMAC51166496, rev 02.05B02, SMART Status: Healthy
WDC WD800JB-00FMA0 [Hard drive] (80.03 GB) -- drive 1, s/n WD-WCAJ93105654, rev 13.03G13, SMART Status: Healthy
320 Megabytes Installed Memory
Local Drive Volumes
c: (FAT32 on drive 0) 40.01 GB 11.20 GB free
d: (FAT32 on drive 1) 79.98 GB 52.62 GB free

Virus Protection
AVG 7.5.446 Version 7.5.446
Realtime File Scanning On

Perform a full-system scan with another Anti virus like Norton or
Spyware Doctor/spybot for spyware. Or HijackThis may help you.

 

[Andrey Tarasevich]

Please help -- I'm going crazy!!!!

Every 3 to 5 minutes this "Generic Host Process for Win32 Services" starts up (I'm using Process Explorer so I can see everything that's running and how much of the CPU it's using) and takes over my entire PC for 2 to 3 minutes each time. For example, in the middle of the previous sentence I was prevented from doing *anything* with my computer for at least 2 minutes while this thing was running. No matter what I do it keeps running and interfering with everything I try to do. I can kill it but it just comes back in a few seconds. It happens whether I'm connected to the Internet or not. I tried shutting down all programs -- even those running in the background -- and it made no difference. I can't record music to my hard drive because this process keeps interrupting the recordings. Can anyone help?

This is not a case of a virus or spyware or trojan. It's purely Microsoft's stuff.

Frank D

Note: As I tried to send this it happened again!!!
...

This is a well-known issue and it is indeed a native Windows problem, no
malicious software involved. Unfortunately, I haven't seen any good research
done on this issue so far (maybe someone can post a good link?). Some service
hosted by svchost suddenly starts to consume 100% of CPU for a period of 30 sec
up to several minutes. The first step to solving the problem is to identify that
particular service.

The main obstacle here is that every active svchost process runs (hosts) not one
but several services at once. Every time you hover your mouse over the name of a
svchost in Process Explorer, it will give you a popup listing all services this
instance of svchost is hosting. The instance that's acting up (eats 100% of CPU)
normally hosts a large number of services and, for this reason, it is impossible
to tell which particular service is actually responsible for this problem right
away.

One thing that comes to mind is to use the registry parameters described here

http://support.microsoft.com/Default.aspx?kbid=314056

and "split" the services hosted by the offending svchost into two equal groups,
wait for the issue to show itself again, then split the offending group again
and thus eventually find the culprit. I wonder if anyone has done it already...

 

[Frank D]

Andrey Tarasevich wrote:
| Frank D wrote:
|| Please help -- I'm going crazy!!!!
||
|| Every 3 to 5 minutes this "Generic Host Process for Win32 Services"
|| starts up (I'm using Process Explorer so I can see everything that's
|| running and how much of the CPU it's using) and takes over my entire PC
|| for 2 to 3 minutes each time. For example, in the middle of the previous
|| sentence I was prevented from doing *anything* with my computer for at
|| least 2 minutes while this thing was running. No matter what I do it
|| keeps running and interfering with everything I try to do. I can kill it
|| but it just comes back in a few seconds. It happens whether I'm connected
|| to the Internet or not. I tried shutting down all programs -- even those
|| running in the background -- and it made no difference. I can't record
|| music to my hard drive because this process keeps interrupting the
|| recordings. Can anyone help?
||
|| This is not a case of a virus or spyware or trojan. It's purely
|| Microsoft's stuff.
||
|| Frank D
||
|| Note: As I tried to send this it happened again!!!
|| ...
|
| This is a well-known issue and it is indeed a native Windows problem, no
| malicious software involved.

That's good to know. But if this is a known Windows problem, wouldn't Microsoft have issued a patch or hotfix, or some sort of advisory on how to avoid it or correct it?

| Unfortunately, I haven't seen any good
| research done on this issue so far (maybe someone can post a good link?).
| Some service hosted by svchost suddenly starts to consume 100% of CPU for
| a period of 30 sec up to several minutes. The first step to solving the
| problem is to identify that particular service.

I'm curious to know why I haven't seen any other calls for help on this topic.

| The main obstacle here is that every active svchost process runs (hosts)
| not one but several services at once. Every time you hover your mouse over
| the name of a svchost in Process Explorer, it will give you a popup
| listing all services this instance of svchost is hosting. The instance
| that's acting up (eats 100% of CPU) normally hosts a large number of
| services and, for this reason, it is impossible to tell which particular
| service is actually responsible for this problem right away.

I've done what you suggested and I see 27 services listed for the largest SVCHOST. (Each of the other three has only one or two.) Here they are: 6to4, AudioSrv, Browser, CryptSvc, Dhcp, dmserver, EventSystem, FastUserSwitchingCompatibility, lanmanserver, lanmanworkstation, Netman, Nla, NtmsSvc, RasMan, Schedule, seclogon, SENS, SharedAccess, ShellHWDetection, srservice, TapiSrv, Themes, W32Time, winmgmt, wscsvc, wuauserv, WZCSVC.

| One thing that comes to mind is to use the registry parameters described
| here
|
| http://support.microsoft.com/Default.aspx?kbid=314056
|
| and "split" the services hosted by the offending svchost into two equal
| groups, wait for the issue to show itself again, then split the offending
| group again and thus eventually find the culprit. I wonder if anyone has
| done it already...

Thank you for your good information and that last suggestion, Andrey, but I'm not confident enough to make experimental changes to the Registry and then understand the results of those changes.

Frank D

 

[kimiraikkonen]

Andrey Tarasevich wrote:
| Frank D wrote:

|| Please help -- I'm going crazy!!!!
||
|| Every 3 to 5 minutes this "Generic Host Process for Win32 Services"
|| starts up (I'm using Process Explorer so I can see everything that's
|| running and how much of the CPU it's using) and takes over my entire PC
|| for 2 to 3 minutes each time. For example, in the middle of the previous
|| sentence I was prevented from doing *anything* with my computer for at
|| least 2 minutes while this thing was running. No matter what I do it
|| keeps running and interfering with everything I try to do. I can kill it
|| but it just comes back in a few seconds. It happens whether I'm connected
|| to the Internet or not. I tried shutting down all programs -- even those
|| running in the background -- and it made no difference. I can't record
|| music to my hard drive because this process keeps interrupting the
|| recordings. Can anyone help?
||
|| This is not a case of a virus or spyware or trojan. It's purely
|| Microsoft's stuff.
||
|| Frank D
||
|| Note: As I tried to send this it happened again!!!
|| ...
|
| This is a well-known issue and it is indeed a native Windows problem, no
| malicious software involved.

That's good to know. But if this is a known Windows problem, wouldn't Microsoft have issued a patch or hotfix, or some sort of advisory on how to avoid it or correct it?

| Unfortunately, I haven't seen any good
| research done on this issue so far (maybe someone can post a good link?).
| Some service hosted by svchost suddenly starts to consume 100% of CPU for
| a period of 30 sec up to several minutes. The first step to solving the
| problem is to identify that particular service.

I'm curious to know why I haven't seen any other calls for help on this topic.

| The main obstacle here is that every active svchost process runs (hosts)
| not one but several services at once. Every time you hover your mouse over
| the name of a svchost in Process Explorer, it will give you a popup
| listing all services this instance of svchost is hosting. The instance
| that's acting up (eats 100% of CPU) normally hosts a large number of
| services and, for this reason, it is impossible to tell which particular
| service is actually responsible for this problem right away.

I've done what you suggested and I see 27 services listed for the largest SVCHOST. (Each of the other three has only one or two.) Here they are: 6to4, AudioSrv, Browser, CryptSvc, Dhcp, dmserver, EventSystem, FastUserSwitchingCompatibility, lanmanserver, lanmanworkstation, Netman, Nla, NtmsSvc, RasMan, Schedule, seclogon, SENS, SharedAccess, ShellHWDetection, srservice, TapiSrv, Themes, W32Time, winmgmt, wscsvc, wuauserv, WZCSVC.

| One thing that comes to mind is to use the registry parameters described
| here
|
|http://support.microsoft.com/Default.aspx?kbid=314056
|
| and "split" the services hosted by the offending svchost into two equal
| groups, wait for the issue to show itself again, then split the offending
| group again and thus eventually find the culprit. I wonder if anyone has
| done it already...

Thank you for your good information and that last suggestion, Andrey, but I'm not confident enough to make experimental changes to the Registry and then understand the results of those changes.

Frank D

This is not normal. Svchost (not sCVhost.exe) is required for many
services and in normal, it shouldn't use %100 of cpu. Generally that
type of problems are caused by a virus like Blaster worm.

I recommend you to scan your system with a respectful scanner like
Norton or McAfee.

 

[Andrey Tarasevich]

|| ...
|| Every 3 to 5 minutes this "Generic Host Process for Win32 Services"
|| starts up (I'm using Process Explorer so I can see everything that's
|| running and how much of the CPU it's using) and takes over my entire PC
|| for 2 to 3 minutes each time.
| ...
| This is a well-known issue and it is indeed a native Windows problem, no
| malicious software involved.

That's good to know. But if this is a known Windows problem, wouldn't Microsoft have issued a patch or hotfix, or some sort of advisory on how to avoid it or correct it?

Quite possibly Microsoft does not consider this to be a problem. In your
case it indeed sounds as a problem, since it is happening every 3 to 5
minutes. In my case something like this only happens like once in 1-2
days. Also, it might be possible that the assignment of the services to
concrete instances of svchost can vary from machine to machine. Maybe in
your case things turned out in the worst way possible.

| Unfortunately, I haven't seen any good
| research done on this issue so far (maybe someone can post a good link?).
| Some service hosted by svchost suddenly starts to consume 100% of CPU for
| a period of 30 sec up to several minutes. The first step to solving the
| problem is to identify that particular service.

I'm curious to know why I haven't seen any other calls for help on this topic.

Svchost consuming 100% CPU??? I believe the whole Web is chock full of
these cries for help.

...
I've done what you suggested and I see 27 services listed for the largest SVCHOST. (Each of the other three has only one or two.) Here they are: 6to4, AudioSrv, Browser, CryptSvc, Dhcp, dmserver, EventSystem, FastUserSwitchingCompatibility, lanmanserver, lanmanworkstation, Netman, Nla, NtmsSvc, RasMan, Schedule, seclogon, SENS, SharedAccess, ShellHWDetection, srservice, TapiSrv, Themes, W32Time, winmgmt, wscsvc, wuauserv, WZCSVC.

This looks like something you copied from the registry. But how many of
these do you actually have _running_ under that largest svchost? How
many entries Process Explorer gives you when you hover your mouse over
the offending svchost? (Or you can right-click the svchost, go to
properties and switch to "Services" tab).

 

[Frank D]

Please see inline comments.

| Frank D wrote:
| > || ...
| > || Every 3 to 5 minutes this "Generic Host Process for Win32 Services"
| > || starts up (I'm using Process Explorer so I can see everything that's
| > || running and how much of the CPU it's using) and takes over my entire PC
| > || for 2 to 3 minutes each time.
| > | ...
| > | This is a well-known issue and it is indeed a native Windows problem, no
| > | malicious software involved.
| >
| > That's good to know. But if this is a known Windows problem, wouldn't Microsoft have issued a patch or hotfix, or some sort of advisory on how to avoid it or correct it?
|
| Quite possibly Microsoft does not consider this to be a problem. In your
| case it indeed sounds as a problem, since it is happening every 3 to 5
| minutes. In my case something like this only happens like once in 1-2
| days. Also, it might be possible that the assignment of the services to
| concrete instances of svchost can vary from machine to machine. Maybe in
| your case things turned out in the worst way possible.

I see.

| > | Unfortunately, I haven't seen any good
| > | research done on this issue so far (maybe someone can post a good link?).
| > | Some service hosted by svchost suddenly starts to consume 100% of CPU for
| > | a period of 30 sec up to several minutes. The first step to solving the
| > | problem is to identify that particular service.
| >
| > I'm curious to know why I haven't seen any other calls for help on this topic.
|
| Svchost consuming 100% CPU??? I believe the whole Web is chock full of
| these cries for help.

Then wouldn't the problem be acknowledged by Microsoft? And would its cause(s) and remedy or at least a workaround be available now or soon? Or is there a Knowledge Base article on this?

| > ...
| > I've done what you suggested and I see 27 services listed for the largest SVCHOST. (Each of the other three has only one or two.) Here they are: 6to4, AudioSrv, Browser, CryptSvc, Dhcp, dmserver, EventSystem, FastUserSwitchingCompatibility, lanmanserver, lanmanworkstation, Netman, Nla, NtmsSvc, RasMan, Schedule, seclogon, SENS, SharedAccess, ShellHWDetection, srservice, TapiSrv, Themes, W32Time, winmgmt, wscsvc, wuauserv, WZCSVC.
|
| This looks like something you copied from the registry.

No, I ran a DOS command that I saw in an article (or post -- can't remember), and that listed the currently running processes (with each Image Name, PID, and Service listed) on my PC.

| But how many of
| these do you actually have _running_ under that largest svchost?

*All* of them were.

| How
| many entries Process Explorer gives you when you hover your mouse over
| the offending svchost? (Or you can right-click the svchost, go to
| properties and switch to "Services" tab).

I just now did what you suggested, and *every one* of those services is shown as running right now under that instance of SVCHOST.

Frank D

 

[Frank D]

Frank D wrote:
|Andrey Tarasevich wrote:
|| Frank D wrote:
|||| ...
|||| Every 3 to 5 minutes this "Generic Host Process for Win32 Services"
|||| starts up (I'm using Process Explorer so I can see everything that's
|||| running and how much of the CPU it's using) and takes over my entire PC
|||| for 2 to 3 minutes each time.
||| ...
||| This is a well-known issue and it is indeed a native Windows problem, no
||| malicious software involved.
||
|| That's good to know. But if this is a known Windows problem, wouldn't
|| Microsoft have issued a patch or hotfix, or some sort of advisory on how
|| to avoid it or correct it?
|
| Quite possibly Microsoft does not consider this to be a problem. In your
| case it indeed sounds as a problem, since it is happening every 3 to 5
| minutes. In my case something like this only happens like once in 1-2
| days. Also, it might be possible that the assignment of the services to
| concrete instances of svchost can vary from machine to machine. Maybe in
| your case things turned out in the worst way possible.

=============================

Update: Somewhat of an answer to this problem:

<snip>

||| The first step to solving the problem is to identify that particular service.
||
|| I'm curious to know why I haven't seen any other calls for help on this
|| topic.
|
| Svchost consuming 100% CPU??? I believe the whole Web is chock full of
| these cries for help.
|
| But how many of
| these do you actually have _running_ under that largest svchost? How
| many entries Process Explorer gives you when you hover your mouse over
| the offending svchost? (Or you can right-click the svchost, go to
| properties and switch to "Services" tab).

|| I've done what you suggested and I see 27 services listed for the largest
|| SVCHOST. (Each of the other three has only one or two.) Here they are:
|| 6to4, AudioSrv, Browser, CryptSvc, Dhcp, dmserver, EventSystem,
|| FastUserSwitchingCompatibility, lanmanserver, lanmanworkstation, Netman,
|| Nla, NtmsSvc, RasMan, Schedule, seclogon, SENS, SharedAccess,
|| ShellHWDetection, srservice, TapiSrv, Themes, W32Time, winmgmt, wscsvc,
|| wuauserv, WZCSVC.


Now I've done some research on the Web and found many websites that advise which services to keep automatic and which to disable or switch to manual. After a bit of trial-and-error I've pruned down my list of 27 services to 24:

AudioSrv, Browser, CryptSvc, Dhcp, dmserver, EventSystem,
FastUserSwitchingCompatibility, lanmanserver, lanmanworkstation, Netman,
Nla, NtmsSvc, RasMan, Schedule, seclogon, SENS, SharedAccess,
ShellHWDetection, srservice, TapiSrv, Themes, W32Time, winmgmt, wscsvc,
wuauserv, WZCSVC.

The ones I switched to manual or disabled are 6to4, seclogon, and TrkWks.

Result: the SVCHOST now seems to come up only about once every half hour or so and stay for only about 1 or 2 minutes. This is a small but appreciated improvement.

Do you see any other of these services that can be discontinued?

Frank D

 

[Regina]

Frank D wrote:
|Andrey Tarasevich wrote:
|| Frank D wrote:
|||| ...
|||| Every 3 to 5 minutes this "Generic Host Process for Win32 Services"
|||| starts up (I'm using Process Explorer so I can see everything that's
|||| running and how much of the CPU it's using) and takes over my entire PC
|||| for 2 to 3 minutes each time.
||| ...
||| This is a well-known issue and it is indeed a native Windows problem, no
||| malicious software involved.
||
|| That's good to know. But if this is a known Windows problem, wouldn't
|| Microsoft have issued a patch or hotfix, or some sort of advisory on how
|| to avoid it or correct it?
|
| Quite possibly Microsoft does not consider this to be a problem. In your
| case it indeed sounds as a problem, since it is happening every 3 to 5
| minutes. In my case something like this only happens like once in 1-2
| days. Also, it might be possible that the assignment of the services to
| concrete instances of svchost can vary from machine to machine. Maybe in
| your case things turned out in the worst way possible.

=============================

Update: Somewhat of an answer to this problem:

<snip>

||| The first step to solving the problem is to identify that particular
||| service.
||
|| I'm curious to know why I haven't seen any other calls for help on this
|| topic.
|
| Svchost consuming 100% CPU??? I believe the whole Web is chock full of
| these cries for help.
|
| But how many of
| these do you actually have _running_ under that largest svchost? How
| many entries Process Explorer gives you when you hover your mouse over
| the offending svchost? (Or you can right-click the svchost, go to
| properties and switch to "Services" tab).

|| I've done what you suggested and I see 27 services listed for the largest
|| SVCHOST. (Each of the other three has only one or two.) Here they are:
|| 6to4, AudioSrv, Browser, CryptSvc, Dhcp, dmserver, EventSystem,
|| FastUserSwitchingCompatibility, lanmanserver, lanmanworkstation, Netman,
|| Nla, NtmsSvc, RasMan, Schedule, seclogon, SENS, SharedAccess,
|| ShellHWDetection, srservice, TapiSrv, Themes, W32Time, winmgmt, wscsvc,
|| wuauserv, WZCSVC.


Now I've done some research on the Web and found many websites that advise which
services to keep automatic and which to disable or switch to manual. After a bit
of trial-and-error I've pruned down my list of 27 services to 24:

AudioSrv, Browser, CryptSvc, Dhcp, dmserver, EventSystem,
FastUserSwitchingCompatibility, lanmanserver, lanmanworkstation, Netman,
Nla, NtmsSvc, RasMan, Schedule, seclogon, SENS, SharedAccess,
ShellHWDetection, srservice, TapiSrv, Themes, W32Time, winmgmt, wscsvc,
wuauserv, WZCSVC.

The ones I switched to manual or disabled are 6to4, seclogon, and TrkWks.

Result: the SVCHOST now seems to come up only about once every half hour or so
and stay for only about 1 or 2 minutes. This is a small but appreciated
improvement.

Do you see any other of these services that can be discontinued?

Frank D

I think one of the best sites giving REASONABLE advice on the services issue is
www.eldergeek.com. There are quite a few that are unnecessary.

 

[Frank D]

Frank D wrote:

Thanks to Regina and to the Elder Geek!!! See at bottom.

Regina wrote:
| In article <[email protected]>,
| (e-mail address removed) says...
||
|| Frank D wrote:
||| Andrey Tarasevich wrote:
|||| Frank D wrote:
|||||| ...
|||||| Every 3 to 5 minutes this "Generic Host Process for Win32 Services"
|||||| starts up (I'm using Process Explorer so I can see everything that's
|||||| running and how much of the CPU it's using) and takes over my entire
|||||| PC for 2 to 3 minutes each time.
||||| ...
||||| This is a well-known issue and it is indeed a native Windows problem,
||||| no malicious software involved.
||||
|||| That's good to know. But if this is a known Windows problem, wouldn't
|||| Microsoft have issued a patch or hotfix, or some sort of advisory on how
|||| to avoid it or correct it?
|||
||| Quite possibly Microsoft does not consider this to be a problem. In your
||| case it indeed sounds as a problem, since it is happening every 3 to 5
||| minutes. In my case something like this only happens like once in 1-2
||| days. Also, it might be possible that the assignment of the services to
||| concrete instances of svchost can vary from machine to machine. Maybe in
||| your case things turned out in the worst way possible.
||
|| =============================
||
|| Update: Somewhat of an answer to this problem:
||
|| <snip>
||
||||| The first step to solving the problem is to identify that particular
||||| service.
||||
|||| I'm curious to know why I haven't seen any other calls for help on this
|||| topic.
|||
||| Svchost consuming 100% CPU??? I believe the whole Web is chock full of
||| these cries for help.
|||
||| But how many of
||| these do you actually have _running_ under that largest svchost? How
||| many entries Process Explorer gives you when you hover your mouse over
||| the offending svchost? (Or you can right-click the svchost, go to
||| properties and switch to "Services" tab).
||
|||| I've done what you suggested and I see 27 services listed for the
|||| largest SVCHOST. (Each of the other three has only one or two.) Here
|||| they are: 6to4, AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
|||| EventSystem, FastUserSwitchingCompatibility, lanmanserver,
|||| lanmanworkstation, Netman, Nla, NtmsSvc, RasMan, Schedule, seclogon,
|||| SENS, SharedAccess, ShellHWDetection, srservice, TapiSrv, Themes,
|||| W32Time, winmgmt, wscsvc, wuauserv, WZCSVC.
||
|| Now I've done some research on the Web and found many websites that advise which
|| services to keep automatic and which to disable or switch to manual.
|| After a bit of trial-and-error I've pruned down my list of 27 services to 24:
||
|| AudioSrv, Browser, CryptSvc, Dhcp, dmserver, EventSystem,
|| FastUserSwitchingCompatibility, lanmanserver, lanmanworkstation, Netman,
|| Nla, NtmsSvc, RasMan, Schedule, seclogon, SENS, SharedAccess,
|| ShellHWDetection, srservice, TapiSrv, Themes, W32Time, winmgmt, wscsvc,
|| wuauserv, WZCSVC.
||
|| The ones I switched to manual or disabled are 6to4, seclogon, and TrkWks.
||
|| Result: the SVCHOST now seems to come up only about once every half hour or so
|| and stay for only about 1 or 2 minutes. This is a small but appreciated improvement.
||
|| Do you see any other of these services that can be discontinued?
||
|| Frank D
|
| Regina wrote:
| I think one of the best sites giving REASONABLE advice on the services
| issue is www.eldergeek.com. There are quite a few that are unnecessary.

Per Regina's suggestion, I went to the eldergeek website and applied all his recommendations. Lo and Behold! I am now getting no more timeouts from SVCHOST!!! Many thanks to the Elder Geek for the science and to Regina for pointing me in his direction.

I think this is one case that's now closed.

Frank D