Startup jam-up

[Jodido]

When the system boots a process called "svchost.exe" takes over the
CPU and runs it up to 100 percent usage. When I shut the process
down, a few moments later a similarly-named process does the same
thing. When I shut the second one down, the startup process continues
normally. As far as I can tell the only thing that this affects is
the Computer Browser service (and the related Server service). The
same thing happens occasionally at other times but I don't understand
exactly when or why. I suspect there is a corrupted file somewhere
and I would reinstall it if I knew what it was. Thanks for any help.

Arnold

 

[Guest]

Everytime I've seen that happen it's been spyware related. Run Spybot, then
Ad-Aware and then boot the machine into safe mode and run hijack this. Make
sure you know what you're doing with HiJack this as you can nuke your machine
if you do it wrong.

 

[Jodido]

Thanks for the suggestion. It didn't help, as I thought it would not.
I'm on top of everything that's running or set to run on startup and
there's nothing running that isn't kosher.

 

[Ron Martell]

When the system boots a process called "svchost.exe" takes over the
CPU and runs it up to 100 percent usage. When I shut the process
down, a few moments later a similarly-named process does the same
thing. When I shut the second one down, the startup process continues
normally. As far as I can tell the only thing that this affects is
the Computer Browser service (and the related Server service). The
same thing happens occasionally at other times but I don't understand
exactly when or why. I suspect there is a corrupted file somewhere
and I would reinstall it if I knew what it was. Thanks for any help.

Arnold

While the suspect services are running open a Command Prompt window
and enter the following command:

TASKLIST /SVC

That list will include details of what specific items are running
under each instance of SVCHOST.

If you want assistance with the list use

TASKLIST /SVC > C:\SERVICES.TXT

Then close the command prompt window, launch Notepade and open the
c:\services.txt file. Copy and past the contents of the file into a
reply back here.

Good luck


Ron Martell Duncan B.C. Canada
--
Microsoft MVP
On-Line Help Computer Service
http://onlinehelp.bc.ca

In memory of a dear friend Alex Nichol MVP
http://aumha.org/alex.htm

 

[Jodido]

Thanks for the suggestion. "Tasklist" doesn't seem to exist on my
computer.

 

[Ron Martell]

Thanks for the suggestion. "Tasklist" doesn't seem to exist on my
computer.

It seems that tasklist.exe may be one of the items that is included
only with XP Pro.

So if you have Windows XP Home that would explain why you don't have
it.

Here is a site that lists it as available for download:
http://www.computerhope.com/download/winxp.htm

Good luck


Ron Martell Duncan B.C. Canada
--
Microsoft MVP
On-Line Help Computer Service
http://onlinehelp.bc.ca

In memory of a dear friend Alex Nichol MVP
http://aumha.org/alex.htm

 

[Jodido]

Thanks again. I downloaded and installed it but it won't run (except
for the /? switch) because some other process needs to run first--do
you happen to know what it is?

Arnold

 

[Ron Martell]

Thanks again. I downloaded and installed it but it won't run (except
for the /? switch) because some other process needs to run first--do
you happen to know what it is?

Arnold

Nope. And I don't have an XP Home system available at the moment to
try it on.

What exactly happens when you use the TASKLIST /SVC command? Is there
some sort of an error message produced?


Ron Martell Duncan B.C. Canada
--
Microsoft MVP
On-Line Help Computer Service
http://onlinehelp.bc.ca

In memory of a dear friend Alex Nichol MVP
http://aumha.org/alex.htm

 

[Jodido]

Oops. Ran just fine when after I rebooted. Amazing what rebooting
can do. Anyway, here's what I found:
When svchost.exe first takes over the CPU:
SVCHOST.EXE 1000 AudioSrv, Browser, CryptSvc, Dhcp,
ERSvc, EventSystem, helpsvc, LanmanServer, lanmanworkstation,
Netman, Nla, RasMan, Schedule, seclogon, SENS, ShellHWDetection,
srservice, TapiSrv, TrkWks, uploadmgr, W32Time, winmgmt, wuauserv,
WZCSVC
After I stop the SVCHOST.EXE process:
CryptSvc, EventSystem, helpsvc, SENS, uploadmgr, W32Time, winmgmt
After SVCHOST.EXE takes over the CPU again:
EventSystem, helpsvc, SENS, TapiSrv, uploadmgr, W32Time, winmgmt,
wuauserv

I checked out as best I could the processes in PID 1000. The ones I
could find seem to be plain-vanilla Windows things. I tried
restarting the ones I could figure out and the system did not
misbehave.
Thanks again for all your suggestions.
Arnold (if you're willing to continue helping me and want to do it via
email contact me at (e-mail address removed))

 

[Ron Martell]

Oops. Ran just fine when after I rebooted. Amazing what rebooting
can do. Anyway, here's what I found:
When svchost.exe first takes over the CPU:
SVCHOST.EXE 1000 AudioSrv, Browser, CryptSvc, Dhcp,
ERSvc, EventSystem, helpsvc, LanmanServer, lanmanworkstation,
Netman, Nla, RasMan, Schedule, seclogon, SENS, ShellHWDetection,
srservice, TapiSrv, TrkWks, uploadmgr, W32Time, winmgmt, wuauserv,
WZCSVC
After I stop the SVCHOST.EXE process:
CryptSvc, EventSystem, helpsvc, SENS, uploadmgr, W32Time, winmgmt
After SVCHOST.EXE takes over the CPU again:
EventSystem, helpsvc, SENS, TapiSrv, uploadmgr, W32Time, winmgmt,
wuauserv

I checked out as best I could the processes in PID 1000. The ones I
could find seem to be plain-vanilla Windows things. I tried
restarting the ones I could figure out and the system did not
misbehave.
Thanks again for all your suggestions.
Arnold (if you're willing to continue helping me and want to do it via
email contact me at (e-mail address removed))

I'm not wanting to abandon you but I am fresh out of ideas at this
point.

There is nothing untoward that I can see in your TASKLIST results.

Hopefully someone else reading these posts will have a further
suggestion.

Good luck


Ron Martell Duncan B.C. Canada
--
Microsoft MVP
On-Line Help Computer Service
http://onlinehelp.bc.ca

In memory of a dear friend Alex Nichol MVP
http://aumha.org/alex.htm