svchost.exe consumes CPU memory

[Rob]

I'm running Windows XP Home, Version 5.1, Service Pack 3 with 2GB RAM.
When the machine is connected to the internet (no applications open), a
svchost.exe file consumes about 90% of CPU and the machine grinds to a halt.

Using Process Explorer I can see that the file concerned is svchost.exe file
and is used to support two files, the DCOM Server Process launcher
C:\Windows\System32\rpcss.dll file and a Terminal Services file
....System32\termsrv.dll.

I installed RegCure to clean the registry files in an unsuccessful attempt
to fix. I run AVG Internet Security V 8.5.432. The AVG is uptodate seems to
run ok. I have minimum software installed and have seldom had virus issues.

MS Automatic Updates has been active, although I've turned this off thinking
this might be a contributor. (makes no difference).

The machine is now disconnected from the internet as this is the only way it
is useable!. The mahcine ran fine up to end of October 2009 and just
progressively got worse.

Any thoughts most welcome PLEASE !

 

[Daave]

I'm running Windows XP Home, Version 5.1, Service Pack 3 with 2GB RAM.
When the machine is connected to the internet (no applications open),
a svchost.exe file consumes about 90% of CPU and the machine grinds
to a halt.

Using Process Explorer I can see that the file concerned is
svchost.exe file and is used to support two files, the DCOM Server
Process launcher C:\Windows\System32\rpcss.dll file and a Terminal
Services file ...System32\termsrv.dll.

I installed RegCure to clean the registry files in an unsuccessful
attempt to fix.

This is a very bad idea!!!

Programs like RegCure cause more problems than they solve. If you search
the archives of this newsgroup, you will see many examples.

Was that the only time you ran RegCure? Or did you ever run it before
this svchost.exe problem began?

I run AVG Internet Security V 8.5.432. The AVG is
uptodate seems to run ok. I have minimum software installed and have
seldom had virus issues.

I used to run AVG 8.5 Free and was very happy with it (the minimum
configuration, too). However, now that I've test-driven 9.0, I avoid it
like the plague because of its horrible resource hogging.

Actually, I never ran the "Internet Security" suite. Suites, as a rule,
are problematic and can cause conflicts with other programs. You might
want to consider configuring a Clean Boot to see if AVG is causing you
problems:

http://support.microsoft.com/kb/310353

http://support.microsoft.com/kb/331796

MS Automatic Updates has been active, although I've turned this off
thinking this might be a contributor. (makes no difference).

The machine is now disconnected from the internet as this is the only
way it is useable!. The mahcine ran fine up to end of October 2009
and just progressively got worse.

Any thoughts most welcome PLEASE !

I ran a Google search and learned that others with your particular
symptoms had malware. Example:

http://www.pchelpforum.com/fixed-hi...ing-all-my-central-processing-unit-usage.html

 

[Thee Chicago Wolf (MVP)]

I'm running Windows XP Home, Version 5.1, Service Pack 3 with 2GB RAM.

When the machine is connected to the internet (no applications open), a
svchost.exe file consumes about 90% of CPU and the machine grinds to a halt.

Using Process Explorer I can see that the file concerned is svchost.exe file
and is used to support two files, the DCOM Server Process launcher
C:\Windows\System32\rpcss.dll file and a Terminal Services file
...System32\termsrv.dll.

I installed RegCure to clean the registry files in an unsuccessful attempt
to fix. I run AVG Internet Security V 8.5.432. The AVG is uptodate seems to
run ok. I have minimum software installed and have seldom had virus issues.

MS Automatic Updates has been active, although I've turned this off thinking
this might be a contributor. (makes no difference).

The machine is now disconnected from the internet as this is the only way it
is useable!. The mahcine ran fine up to end of October 2009 and just
progressively got worse.

Any thoughts most welcome PLEASE !

This is indicative of another process or processes being launched by
svchost so my guess is you have gobs of stuff running in the
background. Go and grab Process Explorer (free) and fire it up. It
will show you what sub-processes are being launched under svchost.exe
and then you can see very clearly the offending CPU hog. Post back
with your findings.

You could try the following hotfix :
http://support.microsoft.com/kb/897571
Don't be fooled by the date, the hotfix will install svchost.exe
version 5.1.2600.5689 which is newer than what is in SP3.

 

[The Real Truth MVP]

Try my Svchosts Fix tool. Download it here http://www.ms-mvp.org/



--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.

 

[Jose]

I'm running Windows XP Home, Version 5.1, Service Pack 3 with 2GB RAM.
When the machine is connected to the internet (no applications open), a
svchost.exe file consumes about 90% of CPU and the machine grinds to a halt.

Using Process Explorer I can see that the file concerned is svchost.exe file
and is used to support two files, the DCOM Server Process launcher
C:\Windows\System32\rpcss.dll file and a Terminal Services file
...System32\termsrv.dll.

I installed RegCure to clean the registry files in an unsuccessful attempt
to fix.  I run AVG Internet Security V 8.5.432. The AVG is uptodate seems to
run ok. I have minimum software installed and have seldom had virus issues.

MS Automatic Updates has been active, although I've turned this off thinking
this might be a contributor. (makes no difference).

The machine is now disconnected from the internet as this is the only wayit
is useable!.  The mahcine ran fine up to end of October 2009 and just
progressively got worse.

Any thoughts most welcome PLEASE !

Perform some scans for malicious software, then fix any remaining
issues:

Download, install, update and do a full scan with these free malware
detection programs:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

They can be uninstalled later if desired.

Be sure both scans run clean and you have rebooted, see if Process
Explorer still reveals the same results.

 

[PA Bear [MS MVP]]

I installed RegCure...

If you ever think your Registry needs to be cleaned, repaired, boosted,
tuned-up, or optimized (it doesn't), read
http://aumha.net/viewtopic.php?t=28099 and draw your own conclusions.

...I run AVG Internet Security V 8.5.432. The AVG is uptodate seems to
run ok. I have minimum software installed and have seldom had virus
issues.

Seldom? Well, I think you've got another one now...

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

Also available via...

Consumer Security Support home page
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7=> Run this scan instead:
http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now run a thorough check for hijackware, including posting requested logs
in an appropriate forum, not here.

Checking for/Help with Hijackware:
• http://mvps.org/winhelp2002/unwanted.htm
• http://inetexplorer.mvps.org/tshoot.html
• http://www.mvps.org/sramesh2k/Malware_Defence.htm
• http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

 

[Barry Schwarz]

Try my Svchosts Fix tool. Download it here http://www.ms-mvp.org/

This is not the MVP site despite its fake logos.

The correct MVP site is http://www.mvps.org/.

 

[Rob]

"PA Bear [MS MVP]"

Thankyou for the advice.

I upgraded AVG April 2009 and have a 12 month licence subscription. Have
always run this antivirus with updates without issues. its a home pc and
used conservatively on the web.

I have always used MS Updates and not being computer literate, I have never
changed from automatic MS updates.

Only after spending two days trying to figure the problem out, reading
whatever I could find on the web, trying to figure out who to believe and
trust given all of the opinions, did I elect to download Program Explorer and
Regcure and even then only after deliberating and reading the Regcure white
paper and reading independent magazine articles which seemed to verify the
softwares' capabilities.

I had checked out Microsoft sites and understood all support was charged -
evidently I got that wrong as well ! I'll work through your suggestions and
get back.

Sncerely many thanks