svchost.exe high cpu issues

[Guest]

My freshly loaded nForce2 PC with XP Pro has had constant problems with
receiving "Generic Host Process for WIN32 Services has encountered a problem
and needs to close. We are sorry for the inconvenience." messages when
starting just about any application. I initially had this problem when I did
a lazy install of XP on top of an existing one, so I completely reformatted
the disk first before re-installing. When the problem re-occurred I spent
lots of time troubleshooting and found a common symptom: Every instance of an
app failure was accompanied by 100% CPU utilization by svchost.exe. Further
research suggested that this problem is frequently caused by enabling
Automatic Updates in Windows Security Center. I disabled this option and the
problem with app terminations went away. But I still have the issue with
svchost.exe running at 100%. This happens upon every boot when *something*
within svchost.exe takes off. I did a full scan on the PC with AVG and
SpyBot (current definitions) and both said it was clean, other than some Web
trackers with SpyBot.

Even more research reveals that MS has released a public hotfix that appears
to address this issue. Now my problem is that I cannot execute the hotfix or
use Windows Update w/out svchost.exe pegging out the CPU tachometer. The
executing programs get hung up and I have to kill svchost.exe just to free
them up (because they are tied to svchost, they also terminate with it). So
basically I perceive that I have a Catch 22: I need a patch to fix a problem,
but the problem prevents me from applying a patch.

Based upon advice from tech forum, I tried switching AV programs and even
removing them entirely. No change in the problem. I also disabled Windows
Update and Security Center notifications based on other advice. Still no
change. Finally, I've included snapshots of executing services under the
"runaway" svchost.exe taken during various sessions, but all experiencing the
high CPU problem:

AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
lanmanserver, lanmanworkstation, Netman,
Nla, RasMan, Schedule, seclogon, SENS,
SharedAccess, ShellHWDetection, srservice,
TapiSrv, Themes, TrkWks, W32Time, winmgmt,
wscsvc, wuauserv, WZCSVC

AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
lanmanserver, lanmanworkstation, Netman,
Nla, RasMan, Schedule, seclogon, SENS,
SharedAccess, ShellHWDetection, srservice,
TapiSrv, Themes, TrkWks, W32Time, winmgmt,
wscsvc, wuauserv, WZCSVC

AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
lanmanserver, lanmanworkstation, Netman,
Nla, RasMan, Schedule, seclogon, SENS,
SharedAccess, ShellHWDetection, srservice,
TapiSrv, Themes, TrkWks, W32Time, winmgmt,
wscsvc, wuauserv, WZCSVC

Any and all help will be appreciated because this one has me totally stumped!

 

[Guest]

My freshly loaded nForce2 PC with XP Pro has had constant problems with
receiving "Generic Host Process for WIN32 Services has encountered a problem
and needs to close. We are sorry for the inconvenience." messages when
starting just about any application. I initially had this problem when I did
a lazy install of XP on top of an existing one, so I completely reformatted
the disk first before re-installing. When the problem re-occurred I spent
lots of time troubleshooting and found a common symptom: Every instance of an
app failure was accompanied by 100% CPU utilization by svchost.exe. Further
research suggested that this problem is frequently caused by enabling
Automatic Updates in Windows Security Center. I disabled this option and the
problem with app terminations went away. But I still have the issue with
svchost.exe running at 100%. This happens upon every boot when *something*
within svchost.exe takes off. I did a full scan on the PC with AVG and
SpyBot (current definitions) and both said it was clean, other than some Web
trackers with SpyBot.

Even more research reveals that MS has released a public hotfix that appears
to address this issue. Now my problem is that I cannot execute the hotfix or
use Windows Update w/out svchost.exe pegging out the CPU tachometer. The
executing programs get hung up and I have to kill svchost.exe just to free
them up (because they are tied to svchost, they also terminate with it). So
basically I perceive that I have a Catch 22: I need a patch to fix a problem,
but the problem prevents me from applying a patch.

Based upon advice from tech forum, I tried switching AV programs and even
removing them entirely. No change in the problem. I also disabled Windows
Update and Security Center notifications based on other advice. Still no
change. Finally, I've included snapshots of executing services under the
"runaway" svchost.exe taken during various sessions, but all experiencing the
high CPU problem:

AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
lanmanserver, lanmanworkstation, Netman,
Nla, RasMan, Schedule, seclogon, SENS,
SharedAccess, ShellHWDetection, srservice,
TapiSrv, Themes, TrkWks, W32Time, winmgmt,
wscsvc, wuauserv, WZCSVC

AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
lanmanserver, lanmanworkstation, Netman,
Nla, RasMan, Schedule, seclogon, SENS,
SharedAccess, ShellHWDetection, srservice,
TapiSrv, Themes, TrkWks, W32Time, winmgmt,
wscsvc, wuauserv, WZCSVC

AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
lanmanserver, lanmanworkstation, Netman,
Nla, RasMan, Schedule, seclogon, SENS,
SharedAccess, ShellHWDetection, srservice,
TapiSrv, Themes, TrkWks, W32Time, winmgmt,
wscsvc, wuauserv, WZCSVC

Any and all help will be appreciated because this one has me totally stumped!

Open a Run command and type in:
sfc /scannow click [OK] and wait for it to finish, get your XP CD handy to
insert it in if you prompted to do so by the system.

http://support.microsoft.com/kb/887740

Start clean Boot to determine if there is a software causing this!.

Here are many scenarios like yours and answers
http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us
HTH.
Let us know.
Regards,
nass

 

[Microsoft]

May not be your case but once uppon a time I had a 'svchost' problem on my
laptop that caused XP to have to shut down; this happened after a few
minutes online. It turned out to be caused by a virus, undetected by Norton
(on-demand scans didn't show any infection) but detected by a lesser
antivirus program, which, 4 yrs later, I still use.

 

[Guest]

Open a Run command and type in:
sfc /scannow click [OK] and wait for it to finish, get your XP CD handy to
insert it in if you prompted to do so by the system.

http://support.microsoft.com/kb/887740

Start clean Boot to determine if there is a software causing this!.

Here are many scenarios like yours and answers:
http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us

I ran the scan and it ran to completion, but merely terminated w/out giving
me any results. I read through many of the suggested other threads, but
didn't see anything revelatory.

 

[Guest]

Perform Clean Boot and see if there is a program causing this and also run
the Processor Explorer and see what running in the background:
http://www.microsoft.com/technet/sysinternals/utilities/processexplorer.mspx

FileMon download:
http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx
HTH.
Let us know.
Regards,
nass

Open a Run command and type in:
sfc /scannow click [OK] and wait for it to finish, get your XP CD handy to
insert it in if you prompted to do so by the system.

http://support.microsoft.com/kb/887740

Start clean Boot to determine if there is a software causing this!.

Here are many scenarios like yours and answers:
http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us

I ran the scan and it ran to completion, but merely terminated w/out giving
me any results. I read through many of the suggested other threads, but
didn't see anything revelatory.

 

[Guest]

I did a clean boot and ran both Process Explorer and Filemon. There was no
abnormal activity, so I tried to execute the MS hotfix and the CPU was
immediately pegged. What exactly am I looking for in either Filemon or
Process Explorer?

Perform Clean Boot and see if there is a program causing this and also run
the Processor Explorer and see what running in the background:
http://www.microsoft.com/technet/sysinternals/utilities/processexplorer.mspx

FileMon download:
http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx
HTH.
Let us know.
Regards,
nass

Open a Run command and type in:
sfc /scannow click [OK] and wait for it to finish, get your XP CD handy to
insert it in if you prompted to do so by the system.

http://support.microsoft.com/kb/887740

Start clean Boot to determine if there is a software causing this!.

Here are many scenarios like yours and answers:
http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us

I ran the scan and it ran to completion, but merely terminated w/out giving
me any results. I read through many of the suggested other threads, but
didn't see anything revelatory.

 

[Guest]

Any up normal activities that can make the Svchost.exe pog or hog your CPU,
Svchost.exe is a combination of Many running processes on your system like:
RAS
LANman
Cryptograph
and so on, try to be sure the machine is clean from Viruses by scanning from
different Vendors online scanners and also for malwares, don't depend on one
AV program that will protect your machine and spot every day new Cul of
Viruses been introduced to the world of computing.

Did you run the system File checker:
sfc /scannow
HTH.
nass

I did a clean boot and ran both Process Explorer and Filemon. There was no
abnormal activity, so I tried to execute the MS hotfix and the CPU was
immediately pegged. What exactly am I looking for in either Filemon or
Process Explorer?

Perform Clean Boot and see if there is a program causing this and also run
the Processor Explorer and see what running in the background:
http://www.microsoft.com/technet/sysinternals/utilities/processexplorer.mspx

FileMon download:
http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx
HTH.
Let us know.
Regards,
nass

Open a Run command and type in:
sfc /scannow click [OK] and wait for it to finish, get your XP CD handy to
insert it in if you prompted to do so by the system.

http://support.microsoft.com/kb/887740

Start clean Boot to determine if there is a software causing this!.

Here are many scenarios like yours and answers:
http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us

I ran the scan and it ran to completion, but merely terminated w/out giving
me any results. I read through many of the suggested other threads, but
didn't see anything revelatory.

 

[Guest]

I ran Panda's on-line scanner and AVG's local client. Neither found a virus,
but I'll try a few others. I did run sfc /scannow; it executed but did not
return any feedback as to whether it "did" anything. It reached 100% in its
scan, then just exited w/out any info.

Off to work, will keep troubleshooting tonight!

Any up normal activities that can make the Svchost.exe pog or hog your CPU,
Svchost.exe is a combination of Many running processes on your system like:
RAS
LANman
Cryptograph
and so on, try to be sure the machine is clean from Viruses by scanning from
different Vendors online scanners and also for malwares, don't depend on one
AV program that will protect your machine and spot every day new Cul of
Viruses been introduced to the world of computing.

Did you run the system File checker:
sfc /scannow
HTH.
nass

I did a clean boot and ran both Process Explorer and Filemon. There was no
abnormal activity, so I tried to execute the MS hotfix and the CPU was
immediately pegged. What exactly am I looking for in either Filemon or
Process Explorer?

Perform Clean Boot and see if there is a program causing this and also run
the Processor Explorer and see what running in the background:
http://www.microsoft.com/technet/sysinternals/utilities/processexplorer.mspx

FileMon download:
http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx
HTH.
Let us know.
Regards,
nass

:


Open a Run command and type in:
sfc /scannow click [OK] and wait for it to finish, get your XP CD handy to
insert it in if you prompted to do so by the system.

http://support.microsoft.com/kb/887740

Start clean Boot to determine if there is a software causing this!.

Here are many scenarios like yours and answers:
http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us

I ran the scan and it ran to completion, but merely terminated w/out giving
me any results. I read through many of the suggested other threads, but
didn't see anything revelatory.

 

[lumo]

The Generic Host Error may be fixed by downloading the update in the
first sentence of

http://motls.blogspot.com/2006/08/generic-host-process-for-win32.html

Best, Lubos

 

[Guest]

Assuming that this is a patch (I can't access the site from work), I am
unable to apply any hot fixes/patches/Windows Updates to the PC. Doing
causes svchost to go nuts. Thus my Catch 22 situation.

 

[Guest]

Does this behaviour repeat itself in Safe Mode?.
My Guess you may have a Memory Leakage, which is a pain in the neck, if this
issue still not resolved then back up your data and Perform a clean Install
from scratch.
HTH.
Regards,
nass
----
www.nasstec.co.uk

I ran Panda's on-line scanner and AVG's local client. Neither found a virus,
but I'll try a few others. I did run sfc /scannow; it executed but did not
return any feedback as to whether it "did" anything. It reached 100% in its
scan, then just exited w/out any info.

Off to work, will keep troubleshooting tonight!

Any up normal activities that can make the Svchost.exe pog or hog your CPU,
Svchost.exe is a combination of Many running processes on your system like:
RAS
LANman
Cryptograph
and so on, try to be sure the machine is clean from Viruses by scanning from
different Vendors online scanners and also for malwares, don't depend on one
AV program that will protect your machine and spot every day new Cul of
Viruses been introduced to the world of computing.

Did you run the system File checker:
sfc /scannow
HTH.
nass

I did a clean boot and ran both Process Explorer and Filemon. There was no
abnormal activity, so I tried to execute the MS hotfix and the CPU was
immediately pegged. What exactly am I looking for in either Filemon or
Process Explorer?

:

Perform Clean Boot and see if there is a program causing this and also run
the Processor Explorer and see what running in the background:
http://www.microsoft.com/technet/sysinternals/utilities/processexplorer.mspx

FileMon download:
http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx
HTH.
Let us know.
Regards,
nass

:


Open a Run command and type in:
sfc /scannow click [OK] and wait for it to finish, get your XP CD handy to
insert it in if you prompted to do so by the system.

http://support.microsoft.com/kb/887740

Start clean Boot to determine if there is a software causing this!.

Here are many scenarios like yours and answers:
http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us

I ran the scan and it ran to completion, but merely terminated w/out giving
me any results. I read through many of the suggested other threads, but
didn't see anything revelatory.

 

[Guest]

Yes, it also happens in Safe Mode.

I concur with your recommendation, but this is a clean install after running
into the same issue with my last install. Before doing this a 3rd time, I
would probably choose between switching to Linux (this PC is really only used
for mail and Internet, with occasional light productivity app use) or
upgrading the PC to run Vista.

Does this behaviour repeat itself in Safe Mode?.
My Guess you may have a Memory Leakage, which is a pain in the neck, if this
issue still not resolved then back up your data and Perform a clean Install
from scratch.
HTH.
Regards,
nass
----
www.nasstec.co.uk

I ran Panda's on-line scanner and AVG's local client. Neither found a virus,
but I'll try a few others. I did run sfc /scannow; it executed but did not
return any feedback as to whether it "did" anything. It reached 100% in its
scan, then just exited w/out any info.

Off to work, will keep troubleshooting tonight!

Any up normal activities that can make the Svchost.exe pog or hog your CPU,
Svchost.exe is a combination of Many running processes on your system like:
RAS
LANman
Cryptograph
and so on, try to be sure the machine is clean from Viruses by scanning from
different Vendors online scanners and also for malwares, don't depend on one
AV program that will protect your machine and spot every day new Cul of
Viruses been introduced to the world of computing.

Did you run the system File checker:
sfc /scannow
HTH.
nass
:

I did a clean boot and ran both Process Explorer and Filemon. There was no
abnormal activity, so I tried to execute the MS hotfix and the CPU was
immediately pegged. What exactly am I looking for in either Filemon or
Process Explorer?

:

Perform Clean Boot and see if there is a program causing this and also run
the Processor Explorer and see what running in the background:
http://www.microsoft.com/technet/sysinternals/utilities/processexplorer.mspx

FileMon download:
http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx
HTH.
Let us know.
Regards,
nass

:


Open a Run command and type in:
sfc /scannow click [OK] and wait for it to finish, get your XP CD handy to
insert it in if you prompted to do so by the system.

http://support.microsoft.com/kb/887740

Start clean Boot to determine if there is a software causing this!.

Here are many scenarios like yours and answers:
http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us

I ran the scan and it ran to completion, but merely terminated w/out giving
me any results. I read through many of the suggested other threads, but
didn't see anything revelatory.

 

[Guest]

Well, it is tricky, try the installation again but don't install third-party
at once, just one-by-one, there is should something upsetting the systy
somewhere!.
Look in the Event Viewer and see if any Error can shed some light or lead to
the culprit.
A memory leakage can be inherited even on a new install?, Did you test your
RAM and cleaned the Dust inside.
Try another New HDD and see if the issue will go, sometimes a horked HDD
clusters can be permanently damaged.
HTH.
Regards,
nass

Yes, it also happens in Safe Mode.

I concur with your recommendation, but this is a clean install after running
into the same issue with my last install. Before doing this a 3rd time, I
would probably choose between switching to Linux (this PC is really only used
for mail and Internet, with occasional light productivity app use) or
upgrading the PC to run Vista.

Does this behaviour repeat itself in Safe Mode?.
My Guess you may have a Memory Leakage, which is a pain in the neck, if this
issue still not resolved then back up your data and Perform a clean Install
from scratch.
HTH.
Regards,
nass
----
www.nasstec.co.uk

I ran Panda's on-line scanner and AVG's local client. Neither found a virus,
but I'll try a few others. I did run sfc /scannow; it executed but did not
return any feedback as to whether it "did" anything. It reached 100% in its
scan, then just exited w/out any info.

Off to work, will keep troubleshooting tonight!

:


Any up normal activities that can make the Svchost.exe pog or hog your CPU,
Svchost.exe is a combination of Many running processes on your system like:
RAS
LANman
Cryptograph
and so on, try to be sure the machine is clean from Viruses by scanning from
different Vendors online scanners and also for malwares, don't depend on one
AV program that will protect your machine and spot every day new Cul of
Viruses been introduced to the world of computing.

Did you run the system File checker:
sfc /scannow
HTH.
nass
:

I did a clean boot and ran both Process Explorer and Filemon. There was no
abnormal activity, so I tried to execute the MS hotfix and the CPU was
immediately pegged. What exactly am I looking for in either Filemon or
Process Explorer?

:

Perform Clean Boot and see if there is a program causing this and also run
the Processor Explorer and see what running in the background:
http://www.microsoft.com/technet/sysinternals/utilities/processexplorer.mspx

FileMon download:
http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx
HTH.
Let us know.
Regards,
nass

:


Open a Run command and type in:
sfc /scannow click [OK] and wait for it to finish, get your XP CD handy to
insert it in if you prompted to do so by the system.

http://support.microsoft.com/kb/887740

Start clean Boot to determine if there is a software causing this!.

Here are many scenarios like yours and answers:
http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us

I ran the scan and it ran to completion, but merely terminated w/out giving
me any results. I read through many of the suggested other threads, but
didn't see anything revelatory.

 

[Guest]

I think it's FUBAR. Didn't get any useful information from Event Viewer, can
apply any hot fixes or Updates, memory (MemTest 86) and HD checked out fine
last clean install, etc. I guess I'll load Ubuntu just to make sure the
hardware's OK and either keep that or see about using it with Vista. Thanks
to all for the responses!

Well, it is tricky, try the installation again but don't install third-party
at once, just one-by-one, there is should something upsetting the systy
somewhere!.
Look in the Event Viewer and see if any Error can shed some light or lead to
the culprit.
A memory leakage can be inherited even on a new install?, Did you test your
RAM and cleaned the Dust inside.
Try another New HDD and see if the issue will go, sometimes a horked HDD
clusters can be permanently damaged.
HTH.
Regards,
nass

Yes, it also happens in Safe Mode.

I concur with your recommendation, but this is a clean install after running
into the same issue with my last install. Before doing this a 3rd time, I
would probably choose between switching to Linux (this PC is really only used
for mail and Internet, with occasional light productivity app use) or
upgrading the PC to run Vista.

Does this behaviour repeat itself in Safe Mode?.
My Guess you may have a Memory Leakage, which is a pain in the neck, if this
issue still not resolved then back up your data and Perform a clean Install
from scratch.
HTH.
Regards,
nass
----
www.nasstec.co.uk

:

I ran Panda's on-line scanner and AVG's local client. Neither found a virus,
but I'll try a few others. I did run sfc /scannow; it executed but did not
return any feedback as to whether it "did" anything. It reached 100% in its
scan, then just exited w/out any info.

Off to work, will keep troubleshooting tonight!

:


Any up normal activities that can make the Svchost.exe pog or hog your CPU,
Svchost.exe is a combination of Many running processes on your system like:
RAS
LANman
Cryptograph
and so on, try to be sure the machine is clean from Viruses by scanning from
different Vendors online scanners and also for malwares, don't depend on one
AV program that will protect your machine and spot every day new Cul of
Viruses been introduced to the world of computing.

Did you run the system File checker:
sfc /scannow
HTH.
nass
:

I did a clean boot and ran both Process Explorer and Filemon. There was no
abnormal activity, so I tried to execute the MS hotfix and the CPU was
immediately pegged. What exactly am I looking for in either Filemon or
Process Explorer?

:

Perform Clean Boot and see if there is a program causing this and also run
the Processor Explorer and see what running in the background:
http://www.microsoft.com/technet/sysinternals/utilities/processexplorer.mspx

FileMon download:
http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx
HTH.
Let us know.
Regards,
nass

:


Open a Run command and type in:
sfc /scannow click [OK] and wait for it to finish, get your XP CD handy to
insert it in if you prompted to do so by the system.

http://support.microsoft.com/kb/887740

Start clean Boot to determine if there is a software causing this!.

Here are many scenarios like yours and answers:
http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us

I ran the scan and it ran to completion, but merely terminated w/out giving
me any results. I read through many of the suggested other threads, but
didn't see anything revelatory.

 

[bretton_s]

Here's the fix for SVCHOST hogging CPU cycles (and memory):

1. Go the to the Windows Update site via the normal method (i.e. under
Tools in Internet Explorer).
2. Don't scan for updates, but rather open the Change Settings page
(on the left).
3. Scroll down and check if it mentions using "Microsoft Update" vs.
"Windows Update". If the option is available, UNCHECK the option to
use Microsoft Update (it will complain, but proceed anyway). You can
then use the usual Windows Update.

The key here is to DISABLE "MICROSOFT Update" and instead use "WINDOWS
Update". You likely have this enabled if you have Microsoft Office
installed -- not sure why, but this does correct the problem. I've
found this in other forums throughout the Internet as well.

Just passing on what worked for me!

Brett Smith
A+ Technician

 

[Guest]

Thanks for the response, Brett! Here's how the comedy of errors played out:

I decided to do a clean install of XP Pro one more time.
I got numerous errors on the install, but was able to finally update with
all Windows patches.
Had a problem with repeated service failures and corrupted downloads.
Pretty much got tired of screwing around with it, so I decided to re-build
it in a different case and swap out hardware until I found a culprit.
Didn't get too far, because in my tiredness I forgot to plug in the CPU fan.
Cost: One dead CPU.
Found a much slower CPU in my parts box. Next, an I/O port shield popped
loose and I didn't see it. That shorted out the video card AND the
motherboard. Cost: 6600GT video card and nice nForce2 motherboard.
I *still* persisted and never found a fully working combination of hardware.
Final result: I threw it all in the closet and bought a new, Vista laptop.

One day I'll put the old one all back together and try to run Ubuntu on it.