need help finding what causes 100% cpu on svchost.exe

[gs]

 

[Shenan Stanley]

We would need help from you to help you.

- What operating system (version/sp level) are you running?
- What have you done to figure it out so far?
- What other tasks do you have running when it happens?
- Have you cleaned up your startups/services so you know what is running at
a given time?
- What is your computing skill level?
- How often does this occur?
- When did it first start occurring?
- Did you try using system restore to return to a time before you noticed
the issue?
- Have you fully scanned for viruses/trojans/worms?
- Have you fully scanned for spyware/adware/malware?
- Have you ran a CHKDSK on your drives?
- Are you up-to-date with your patches (Windows, Office, other applications,
drivers?)
- Is there anything in your event log when this happens?

 

[JS]

Some extra info in case you need it:
From Ramesh's web site: http://windowsxp.mvps.org/svchost.htm
Also: http://support.microsoft.com/?kbid=314056

To find out more about Svchost.exe entries try Process Explorer:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and 'Show Lower
Pane' options.
(This will provide the detailed info you need)
Next click/Expand the Svchost.exe process that you are interest in.
Then highlight one of the process listed under Svchost, right click and from
the options listed select: google
This should display what out there on the web about that process.

JS

 

[gs]

thank you so far nothing abnormal found. mbsa 2 shows nothing wrong nor
missing. my antivirus scan found no malware.

since killing the process and reboot, I have not see the extended high cpu
consumption. but then this time around I started with the PC disconnected
form network.

I will try tomorrow with network attached and see what happens

 

[GS]

well, did get that 100% cpu for the service but did get a 2 to 3 minute of
high CPU by Explorer.

I think there is still something abnormal but so far I have not found it
yet. hopefully some one can give me some more hints