Robert
Next time please do not hijack a thread started by another user.
There
are many different problems which involve svchost so your problem
could
be totally unrelated.
Please provide the Command Line of the Process giving the
unexplained
CPU usage and list the services that use that process.
Process Explorer is more commonly used than Process Express in these
newsgroups to diagnose these type of problems. If you cannot
provide the
information requested please download and install Process Explorer.
For further information about Process Explorer see
here:
http://www.microsoft.com/technet/sysinternals/SystemInformation/Proce...
It would be helpful if you could post the Command Line of the
svchost
process generating the excessive CPU usage. In Process Explorer
place
cursor on Process and select Properties, Image.
--
Hope this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
Robert Macy wrote:
I have a similar problem with svchost.exe
It hogs the CPU time. If right after all the icons appear on the
screen and I kill it using Task Manager, WinXP is as fast as I
would expect.
I did your complete set of disable on Startup, hide Microsoft and
disabled the list, yet that pesky svchost.exe runs and needs to be
killed to keep it from hogging all the CPU time.
Using Process Express the line appears to be
svchost -k NetworkServices
I think it's trying to run dnsrslvr.dll
I did finally find in Microsoft Remove Programs section that UPnP
is installed and trying to check for new Plug n Play on the
network [I think]. I assume that running that software explained
why once connected to the internet, the machine literally paused
for over 20 minutes. Earlier I had disabled SSDP Discover Service,
then I could get onto the internet.
There is also a quirk not yet resolved: an error log event that
aic78xx.sys failed to load.
No idea what is trying to load that program, or the significance of
not having this driver installed. The aic78xx.sys exists in two
places: in System 32 folder and in the cab file and both are
identical to the bit.
I only have dnsrslvr.dll in the System32 folder because it appears
to have come from an update. I think the size and the date code
match the version from MS, so I don't think it's a modified file.
What size, date code, etc should this file have to make certain
it's legitmate?
45,568 bits created 8/12/2004 5:18:43
5.1.2600.2180
is this a correct file?
Regards,
Robert- Hide quoted text -
- Show quoted text -
My sincere apologies to DL Golfs and I thank you all for resisting
righteously flaming me for this breech of ettiquette. In my defense,
I have been trying to resolve this problem since August. If it were
not a requirement that I get the WinXP set up for my lab work
[required OS], I would have long ago thrown it out entirely. For me,
WinXP has very little functional advantage, especially in view of how
the bloated code runs so slowly on the realtively fast, powerful
machine, and even more importantly, there has been very little help
to resolve my problem. So I very much appreciate your patience at my
jumping in on DL Golfs thread, since it did look a great deal like my
problem and I also very much appreciate your suggestions and help to
resolve what should be a simple problem for a knowledgeable person.
The program I was referring to is indeed Process Explorer. Somehow
when it installed itself the file name said Process Express, but when
it runs it says Process Explorer v11.21
Upon boot up, using Task Manager I kill the offending svchost and all
is well, so from memory from the time I did not kill it:
The reason I use Task Manager is that Task Manager comes up slowly
during bootup right after the DeskTop icons appear. But if I click on
Process Explorer, it takes eons of time before it starts up. So to
kill svchost faster, Task Manager is more effective.
Command line from Process Explorer, Properties, Image:
C:\WINDOWS\system32\svchost.exe -k NetworkServices
Note it may have ended with NetworkService, but I remember it being
plural.
Also, I believe it is calling on dnsrslvr.dll to create a DNS Cache.
After I select the offending svchost and End Process using Task
Manager, WinXP appears to be a normal experience of speed. Or, if I
allow 20 minutes and let svchost run its course, WinXP also appears
to be normal. However, later if the machine is used to access the
internet, the svchost starts hogging CPU time right after dial up
connection/handshaking is obtained. So, it's better to watch during
bootup and End Process [kill the offending svchost] then, followed by
Start > Run > ipconfig /flushdns
don't know if ipconfig helps, but it was once suggested and does not
seem to harm.
I only mention the failure of aic78xx.sys driver to load, because
such activity does not look correct and may relate. During these
boot up tests, there is NO antiviral/spyware running [or even
installed at these times]
I don't know any hardware that has SCSI in it on the WinXP system.
However, two versions of the driver exist and they are identical
using compare utility.
How do I find what program asks to load the aic78xx.sys driver?
I reviewed the software I can uninstall and none looks like it would
address this driver.
As another check, I followed another's suggestion use
msconfig/startup tab and temporarily disable all startup and then go
to system tab and disable the whole list and Hide All Microsoft
System. Upon bootup, the offending svchost was still doing its thing
and must not have been caused by one of those items?
One other strange quirk is that the event log shows that IPv6 Helper
Service hung on startup, yet by the time I can check, I always find
it running in the Services section of My Computer/Management
I believe this machine was originally set up for a LAN. I have
removed the PC from that service in order for it now to be used as an
isolated operating system for a specific project, which requires the
WinXP OS. Perhaps, some vestige of the old network is still running
and I can't find it to stop it.
Really would like to clean up this machine's act because I like to
have it boot up while not requiring me to watch and attend to it,
like I have to do now.
Also, new, this machine just developed a new quirk which may or may
not relate. Applications don't run. Click on short cut for Windows
Explorer and an hour glass comes on, goes off, and nothing
happens! ?? Click on my short cut for Process Explorer and same,
nothing happens. Go to the file and click on the file itself the
xxx.exe same thing nothing happens. Reboot solves that problem. But
I've never seen that before the last few days.
Suggestions? Where to look? Does that command line help?
Regards,
Robert- Hide quoted text -
- Show quoted text -