svchost.exe gobles up all CPU time

[Stephen Ford]

When my PC starts, it's very slow for many minutes. I want to know how to
speed it up.

The culprit is the process svchost.exe which takes 99% CPU time. I've looked
at the MS support article 314056 but I don't know enough to use the
information to fix the problem.

To get the PC back I kill the svchost.exe process shortly after startup and
I then it flies! Using the article above I have been able to extract the
list of svchost processes as shown below.

I keep the PC up to date with the MS Update service.

svchost.exe
980 RpcSs

svchost.exe
924 DcomLaunch, TermService

svchost.exe
1300 LmHosts, RemoteRegistry, SSDPSRV, WebClient

svchost.exe
336 stisvc

svchost.exe
1168 Dnscache

svchost.exe
1824 BthServ

svchost.exe
2664 usnsvc

svchost.exe
2184 EventSystem, helpsvc, Netman, Nla, RasMan, SENS, TapiSrv, Themes,
W32Time, winmgmt

 

[Pennywise]

When my PC starts, it's very slow for many minutes. I want to know how to
speed it up.

The culprit is the process svchost.exe which takes 99% CPU time. I've looked
at the MS support article 314056 but I don't know enough to use the
information to fix the problem.

To get the PC back I kill the svchost.exe process shortly after startup and
I then it flies! Using the article above I have been able to extract the
list of svchost processes as shown below.

I keep the PC up to date with the MS Update service.

svchost.exe
1824 BthServ

Bet it's this one, if so disable your bluetooth until you need it.

Download Process Explorer
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/ProcessExplorer.mspx
Unzip and run, find the svchost that's taking up all the CPU.
Cursor will show what svchost is running, or double click on the
process and read it's image.

If it is bthserv you should be able to disable it thru services.

Start | Run <type in>
services.msc
<enter>

 

[Stephen Ford]

OK, I'll give it a go.

I use BlueT to drive an adapter to connect to my mobile.

A couple of things that puzzle me are -:
Why does a "Send to BlueT" option appear in IE Tool dropdown menu? Why would
I want to send anything from IE to my phone?
Why does my BlueT connection s/w offer me several comm ports when only one
works?

These sort of issues are way out of my sphere of knowledge, but I've done
quite a lot of s/w dev in years gone by and if I feel uneasy about issues on
my PC, the hunch is usually well founded. And I'm uneasy about these - what
I would call- untidy configurations.

I'll be back to see if your hunch is right .....

 

[Stephen Ford]

Hmmm.... a bit inconclusive so far... would you believe that after
installing ProcessExplorer and adding a shortcut to the startup folder,
there appear to be no processes grabbing the CPU for more than a few
ticks... and it starts up as cleanly as you might expect it to...

I'll see how thing go and report back in a day or so.

 

[Pennywise]

Why does my BlueT connection s/w offer me several comm ports when only one
works?

These are virtual ports, and can be a pain to setup, I see you have
one working. Their used to connect your Phone's modem to your computer
allowing you to connect to the internet that way (GPRS)

 

[Stephen Ford]

OK, I think I know a little more of what is going on: One of the svchost
processes is packed with registered services, namely

AudioSrv, Browser, CryptSvc, Dhcp, dmserver,ERSvc,
EventSystem,FastUserSwitchingCompatibility, helpsvc,lanmanserver,
lanmanworkstation, Netman,Nla, RasMan, Schedule, seclogon,
SENS,SharedAccess, ShellHWDetection, srservice,TapiSrv, Themes, TrkWks,
W32Time, winmgmt,wscsvc, wuauserv, WZCSVC

The others have one or two.

So, what happens is the PC starts is this: a few of the svchost process do
their job early on (within a few seconds of starting), other stuff starts
and I launch a few apps. and then this svchost process starts (probably a
minute after boot up). CPU usage goes to 100% and the PC more or less stops
for about 90 seconds.

In the grand scheme of things, it's not a long time, but when I want to get
something off the PC "quickly" it's a bl**dy nuisance.

Is it possible to create a few more svchosts and share the above registered
services between them?

 

[Pennywise]

OK, I think I know a little more of what is going on: One of the svchost
processes is packed with registered services, namely

AudioSrv, Browser, CryptSvc, Dhcp, dmserver,ERSvc,
EventSystem,FastUserSwitchingCompatibility, helpsvc,lanmanserver,
lanmanworkstation, Netman,Nla, RasMan, Schedule, seclogon,
SENS,SharedAccess, ShellHWDetection, srservice,TapiSrv, Themes, TrkWks,
W32Time, winmgmt,wscsvc, wuauserv, WZCSVC

The others have one or two.

Those are network services, double click on the process, image:
E:\WINDOWS\System32\svchost.exe -k netsvcs

One command loads all that.

What you can do it stop services you don't need,
http://www.jasonn.com/turning_off_unnecessary_services_on_windows_xp