Very slow computerHow do I stop and keep stopped the svchost syste

D

DLGolfs

I guess my IE is slowing down and the computer in general b/c too many things
are running in svchost. How can I tell what to stop and how do I stop them
from starting up again and is this the problem?
 
E

Elmo

DLGolfs said:
I guess my IE is slowing down and the computer in general b/c too many things
are running in svchost. How can I tell what to stop and how do I stop them
from starting up again and is this the problem?

When you open Task Manager (Ctrl/Alt-Del) and click Processes tab, are
any of the svchost.exe processes using a large amount of CPU time? How
much RAM and HD space do you have? What junk is running in the
background, what a/v software, etc.?
 
D

db ´¯`·.. >

there are a number
of methods to resolve
the questions that your
issue poses.

and everyone has their
own methods.

my suggestion is based
on the process of elimination.

what you can try is to
click on start>run>msconfig

then go to the startup tab
and disable everything that
is enabled - jotting down
on paper what you changed.

next, go to the services tab
and "hide" all microsoft services.

then disable what remains
listed, again jotting down
what you changed.

then reboot and see if you
gained any improvement
in performance.

if so, then the method above
eliminated a cause of the
issue.

to determine which one or
ones are the cause, you
would have to re enable each
one, then reboot and carefully
monitor the performance of
the o.s.

let us know which items
you think are the trouble
makers and perhaps we
can provide you with more
info on them or alternatives.

--

db·´¯`·...¸><)))º>
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces
 
G

Gerry

DLGolfs

What is the image name of the process producing high CPU usage? If it is
one of the svchost entries you should use Process Explorer to identify
which.

Download Process Explorer.
For further information about Process Explorer see here:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

It would be helpful if you could post the Command Line of the svchost
process generating the excessive CPU usage. In Process Explorer place
cursor on Process and select Properties, Image.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
D

DLGolfs

THere is nothng running except IE and system idle. I have AVG but it is not
"running" a scan just running in the background, I have Spybot tea timer
that is using 1 or 2 CPU that is it.
Pentium 4, 2.4 GHX and 2GB of RAM, 80 HD that is only 25% full

I don't have a spyware runing in the background, been dissappointed with
Lavasoft support. I run it before i start my day ,but that removal does not
have an effect.
I am ready to install office 2007 today.
 
D

DLGolfs

ACtually,none of the svchost are using a lot, someone told me to download
this and I did and nothing is there. I don't see anything wtih high CPU
usage, untl I open one of the hosts and see it is using 7 or 8 but it does
not show it on the procexp program.
 
D

DLGolfs

OK, I will try that , but I do keep it 'clean' for start up , etc. problem
is I cant disable the Anti virus then go on IE...so will have to keep that
running.
 
G

Gerry

DLGolfs

What is the CPU and how much RAM does your computer have? Right click on
the My Computer icon on your Desktop and select Properties to get this
information.

Try Ctrl+Alt+Delete to select Task Manager and click the Performance
Tab. Under Commit Charge what is the Total, the Limit and the Peak?

Is the computer left on 24/7?

What Add-Ons are being used with Internet Explorer? In Internet Explorer
select Tools, Manage Add Ons, Enable or Disable Add Ons.

Does running with No Add Ons enabled make a noticeable difference when
browsing the internet?

What version of Internet Explorer are you using?

What is the Current Transfer Mode for your hard drives?
http://www.helpwithwindows.com/WindowsXP/howto-05.html


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
R

Robert Macy

there are a number
of methods to resolve
the questions that your
issue poses.

and everyone has their
own methods.

my suggestion is based
on the process of elimination.

what you can try is to
click on start>run>msconfig

then go to the startup tab
and disable everything that
is enabled - jotting down
on paper what you changed.

next, go to the services tab
and "hide" all microsoft services.

then disable what remains
listed, again jotting down
what you changed.

then reboot and see if you
gained any improvement
in performance.

if so, then the method above
eliminated a cause of the
issue.

to determine which one or
ones are the cause, you
would have to re enable each
one, then reboot and carefully
monitor the performance of
the o.s.

let us know which items
you think are the trouble
makers and perhaps we
can provide you with more
info on them or alternatives.

--

db·´¯`·...¸><)))º>
DatabaseBen, Retired Professional
 - Systems Analyst
 - Database Developer
 - Accountancy
 - Veteran of the Armed Forces

I have a similar problem with svchost.exe
It hogs the CPU time. If right after all the icons appear on the
screen and I kill it using Task Manager, WinXP is as fast as I would
expect.

I did your complete set of disable on Startup, hide Microsoft and
disabled the list, yet that pesky svchost.exe runs and needs to be
killed to keep it from hogging all the CPU time.
Using Process Express the line appears to be
svchost -k NetworkServices
I think it's trying to run dnsrslvr.dll

I did finally find in Microsoft Remove Programs section that UPnP is
installed and trying to check for new Plug n Play on the network [I
think]. I assume that running that software explained why once
connected to the internet, the machine literally paused for over 20
minutes. Earlier I had disabled SSDP Discover Service, then I could
get onto the internet.

There is also a quirk not yet resolved: an error log event that
aic78xx.sys failed to load.
No idea what is trying to load that program, or the significance of
not having this driver installed. The aic78xx.sys exists in two
places: in System 32 folder and in the cab file and both are identical
to the bit.

I only have dnsrslvr.dll in the System32 folder because it appears to
have come from an update. I think the size and the date code match
the version from MS, so I don't think it's a modified file. What
size, date code, etc should this file have to make certain it's
legitmate?
45,568 bits created 8/12/2004 5:18:43
5.1.2600.2180
is this a correct file?

Regards,
Robert
 
G

Gerry

Robert

Next time please do not hijack a thread started by another user. There
are many different problems which involve svchost so your problem could
be totally unrelated.

Please provide the Command Line of the Process giving the unexplained
CPU usage and list the services that use that process.

Process Explorer is more commonly used than Process Express in these
newsgroups to diagnose these type of problems. If you cannot provide the
information requested please download and install Process Explorer.

For further information about Process Explorer see here:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

It would be helpful if you could post the Command Line of the svchost
process generating the excessive CPU usage. In Process Explorer place
cursor on Process and select Properties, Image.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Robert said:
I have a similar problem with svchost.exe
It hogs the CPU time. If right after all the icons appear on the
screen and I kill it using Task Manager, WinXP is as fast as I would
expect.

I did your complete set of disable on Startup, hide Microsoft and
disabled the list, yet that pesky svchost.exe runs and needs to be
killed to keep it from hogging all the CPU time.
Using Process Express the line appears to be
svchost -k NetworkServices
I think it's trying to run dnsrslvr.dll

I did finally find in Microsoft Remove Programs section that UPnP is
installed and trying to check for new Plug n Play on the network [I
think]. I assume that running that software explained why once
connected to the internet, the machine literally paused for over 20
minutes. Earlier I had disabled SSDP Discover Service, then I could
get onto the internet.

There is also a quirk not yet resolved: an error log event that
aic78xx.sys failed to load.
No idea what is trying to load that program, or the significance of
not having this driver installed. The aic78xx.sys exists in two
places: in System 32 folder and in the cab file and both are identical
to the bit.

I only have dnsrslvr.dll in the System32 folder because it appears to
have come from an update. I think the size and the date code match
the version from MS, so I don't think it's a modified file. What
size, date code, etc should this file have to make certain it's
legitmate?
45,568 bits created 8/12/2004 5:18:43
5.1.2600.2180
is this a correct file?

Regards,
Robert
 
D

DLGolfs

pent 4 2.4 2BG ram
commit 677/3944M
thanks

Gerry said:
DLGolfs

What is the CPU and how much RAM does your computer have? Right click on
the My Computer icon on your Desktop and select Properties to get this
information.

Try Ctrl+Alt+Delete to select Task Manager and click the Performance
Tab. Under Commit Charge what is the Total, the Limit and the Peak?

Is the computer left on 24/7?

What Add-Ons are being used with Internet Explorer? In Internet Explorer
select Tools, Manage Add Ons, Enable or Disable Add Ons.

Does running with No Add Ons enabled make a noticeable difference when
browsing the internet?

What version of Internet Explorer are you using?

What is the Current Transfer Mode for your hard drives?
http://www.helpwithwindows.com/WindowsXP/howto-05.html


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
D

db ´¯`·.. >

I was curious about those
files you mentioned and
searched them out.

----------------

I don't think that the
dnsrslvr.dll you have
is not legit or outdated.

http://support.microsoft.com/kb/945553/en-US

here is more info on
that dll:

http://search.microsoft.com/results.aspx?form=MSHOME&mkt=en-US&setlang=en-US&q=dnsrslvr.dll

incidentally, my version of
that file is dated 04/2008.
--------------------

in regards to that other file
you mentioned aicxxx.sys,
here is more information
from the net.

http://www.softwaretipsandtricks.com/sys/64-Aic78xxsys.html

http://search.msn.com/results.aspx?q=aic78xx.sys&FORM=MSNH11


I can't really provide any
suggestions for the above,
because you have a better
understanding of your system
and its hardware.

perhaps, since the one
file has xxx in it, it may
have been blocked or
deleted by your anti virals.

you may have to uninstall
software or reinstall it.

-------------


db·´¯`·...¸><)))º>
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces



Robert Macy said:
there are a number
of methods to resolve
the questions that your
issue poses.

and everyone has their
own methods.

my suggestion is based
on the process of elimination.

what you can try is to
click on start>run>msconfig

then go to the startup tab
and disable everything that
is enabled - jotting down
on paper what you changed.

next, go to the services tab
and "hide" all microsoft services.

then disable what remains
listed, again jotting down
what you changed.

then reboot and see if you
gained any improvement
in performance.

if so, then the method above
eliminated a cause of the
issue.

to determine which one or
ones are the cause, you
would have to re enable each
one, then reboot and carefully
monitor the performance of
the o.s.

let us know which items
you think are the trouble
makers and perhaps we
can provide you with more
info on them or alternatives.

--

db·´¯`·...¸><)))º>
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces

I have a similar problem with svchost.exe
It hogs the CPU time. If right after all the icons appear on the
screen and I kill it using Task Manager, WinXP is as fast as I would
expect.

I did your complete set of disable on Startup, hide Microsoft and
disabled the list, yet that pesky svchost.exe runs and needs to be
killed to keep it from hogging all the CPU time.
Using Process Express the line appears to be
svchost -k NetworkServices
I think it's trying to run dnsrslvr.dll

I did finally find in Microsoft Remove Programs section that UPnP is
installed and trying to check for new Plug n Play on the network [I
think]. I assume that running that software explained why once
connected to the internet, the machine literally paused for over 20
minutes. Earlier I had disabled SSDP Discover Service, then I could
get onto the internet.

There is also a quirk not yet resolved: an error log event that
aic78xx.sys failed to load.
No idea what is trying to load that program, or the significance of
not having this driver installed. The aic78xx.sys exists in two
places: in System 32 folder and in the cab file and both are identical
to the bit.

I only have dnsrslvr.dll in the System32 folder because it appears to
have come from an update. I think the size and the date code match
the version from MS, so I don't think it's a modified file. What
size, date code, etc should this file have to make certain it's
legitmate?
45,568 bits created 8/12/2004 5:18:43
5.1.2600.2180
is this a correct file?

Regards,
Robert
 
G

Gerry

DLGolfs

Thje answers to my other points are?


--



Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
R

Robert Macy

Robert

Next time please do not hijack a thread started by another user. There
are many different problems which involve svchost so your problem could
be totally unrelated.

Please provide the Command Line of the Process giving the unexplained
CPU usage and list the services that use that process.

Process Explorer is more commonly used than Process Express in these
newsgroups to diagnose these type of problems. If you cannot provide the
information requested please download and install Process Explorer.

For further information about Process Explorer see here:http://www.microsoft.com/technet/sysinternals/SystemInformation/Proce...

It would be helpful if you could post the Command Line of the svchost
process generating the excessive CPU usage. In Process Explorer place
cursor on Process and select Properties, Image.

--

Hope  this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~



Robert said:
I have a similar problem with svchost.exe
It hogs the CPU time.  If right after all the icons appear on the
screen and I kill it using Task Manager, WinXP is as fast as I would
expect.
I did your complete set of disable on Startup, hide Microsoft and
disabled the list, yet that pesky svchost.exe runs and needs to be
killed to keep it from hogging all the CPU time.
Using Process Express the line appears to be
svchost -k NetworkServices
I think it's trying to run dnsrslvr.dll
I did finally find in Microsoft Remove Programs section that UPnP is
installed and trying to check for new Plug n Play on the network [I
think].  I assume that running that software explained why once
connected to the internet, the machine literally paused for over 20
minutes.   Earlier I had disabled SSDP Discover Service, then I could
get onto the internet.
There is also a quirk not yet resolved: an error log event that
aic78xx.sys failed to load.
No idea what is trying to load that program, or the significance of
not having this driver installed.  The aic78xx.sys exists in two
places: in System 32 folder and in the cab file and both are identical
to the bit.
I only have dnsrslvr.dll in the System32 folder because it appears to
have come from an update.  I think the size and the date code match
the version from MS, so I don't think it's a modified file.  What
size, date code, etc should this file have to make certain it's
legitmate?
45,568 bits created 8/12/2004 5:18:43
5.1.2600.2180
is this a correct file?
Regards,
Robert- Hide quoted text -

- Show quoted text -

My sincere apologies to DL Golfs and I thank you all for resisting
righteously flaming me for this breech of ettiquette. In my defense,
I have been trying to resolve this problem since August. If it were
not a requirement that I get the WinXP set up for my lab work
[required OS], I would have long ago thrown it out entirely. For me,
WinXP has very little functional advantage, especially in view of how
the bloated code runs so slowly on the realtively fast, powerful
machine, and even more importantly, there has been very little help to
resolve my problem. So I very much appreciate your patience at my
jumping in on DL Golfs thread, since it did look a great deal like my
problem and I also very much appreciate your suggestions and help to
resolve what should be a simple problem for a knowledgeable person.

The program I was referring to is indeed Process Explorer. Somehow
when it installed itself the file name said Process Express, but when
it runs it says Process Explorer v11.21

Upon boot up, using Task Manager I kill the offending svchost and all
is well, so from memory from the time I did not kill it:

The reason I use Task Manager is that Task Manager comes up slowly
during bootup right after the DeskTop icons appear. But if I click on
Process Explorer, it takes eons of time before it starts up. So to
kill svchost faster, Task Manager is more effective.

Command line from Process Explorer, Properties, Image:
C:\WINDOWS\system32\svchost.exe -k NetworkServices

Note it may have ended with NetworkService, but I remember it being
plural.

Also, I believe it is calling on dnsrslvr.dll to create a DNS Cache.
After I select the offending svchost and End Process using Task
Manager, WinXP appears to be a normal experience of speed. Or, if I
allow 20 minutes and let svchost run its course, WinXP also appears to
be normal. However, later if the machine is used to access the
internet, the svchost starts hogging CPU time right after dial up
connection/handshaking is obtained. So, it's better to watch during
bootup and End Process [kill the offending svchost] then, followed by
Start > Run > ipconfig /flushdns
don't know if ipconfig helps, but it was once suggested and does not
seem to harm.

I only mention the failure of aic78xx.sys driver to load, because such
activity does not look correct and may relate. During these boot up
tests, there is NO antiviral/spyware running [or even installed at
these times]

I don't know any hardware that has SCSI in it on the WinXP system.
However, two versions of the driver exist and they are identical using
compare utility.

How do I find what program asks to load the aic78xx.sys driver?

I reviewed the software I can uninstall and none looks like it would
address this driver.

As another check, I followed another's suggestion use msconfig/startup
tab and temporarily disable all startup and then go to system tab and
disable the whole list and Hide All Microsoft System. Upon bootup,
the offending svchost was still doing its thing and must not have been
caused by one of those items?

One other strange quirk is that the event log shows that IPv6 Helper
Service hung on startup, yet by the time I can check, I always find it
running in the Services section of My Computer/Management

I believe this machine was originally set up for a LAN. I have
removed the PC from that service in order for it now to be used as an
isolated operating system for a specific project, which requires the
WinXP OS. Perhaps, some vestige of the old network is still running
and I can't find it to stop it.

Really would like to clean up this machine's act because I like to
have it boot up while not requiring me to watch and attend to it, like
I have to do now.

Also, new, this machine just developed a new quirk which may or may
not relate. Applications don't run. Click on short cut for Windows
Explorer and an hour glass comes on, goes off, and nothing
happens! ?? Click on my short cut for Process Explorer and same,
nothing happens. Go to the file and click on the file itself the
xxx.exe same thing nothing happens. Reboot solves that problem. But
I've never seen that before the last few days.

Suggestions? Where to look? Does that command line help?

Regards,
Robert
 
R

Robert Macy

Next time please do not hijack a thread started by another user. There
are many different problems which involve svchost so your problem could
be totally unrelated.
Please provide the Command Line of the Process giving the unexplained
CPU usage and list the services that use that process.
Process Explorer is more commonly used than Process Express in these
newsgroups to diagnose these type of problems. If you cannot provide the
information requested please download and install Process Explorer.
For further information about Process Explorer see here:http://www.microsoft.com/technet/sysinternals/SystemInformation/Proce...
It would be helpful if you could post the Command Line of the svchost
process generating the excessive CPU usage. In Process Explorer place
cursor on Process and select Properties, Image.

Hope  this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
Robert Macy wrote:
I have a similar problem with svchost.exe
It hogs the CPU time.  If right after all the icons appear on the
screen and I kill it using Task Manager, WinXP is as fast as I would
expect.
I did your complete set of disable on Startup, hide Microsoft and
disabled the list, yet that pesky svchost.exe runs and needs to be
killed to keep it from hogging all the CPU time.
Using Process Express the line appears to be
svchost -k NetworkServices
I think it's trying to run dnsrslvr.dll
I did finally find in Microsoft Remove Programs section that UPnP is
installed and trying to check for new Plug n Play on the network [I
think].  I assume that running that software explained why once
connected to the internet, the machine literally paused for over 20
minutes.   Earlier I had disabled SSDP Discover Service, then I could
get onto the internet.
There is also a quirk not yet resolved: an error log event that
aic78xx.sys failed to load.
No idea what is trying to load that program, or the significance of
not having this driver installed.  The aic78xx.sys exists in two
places: in System 32 folder and in the cab file and both are identical
to the bit.
I only have dnsrslvr.dll in the System32 folder because it appears to
have come from an update.  I think the size and the date code match
the version from MS, so I don't think it's a modified file.  What
size, date code, etc should this file have to make certain it's
legitmate?
45,568 bits created 8/12/2004 5:18:43
5.1.2600.2180
is this a correct file?
Regards,
Robert- Hide quoted text -
- Show quoted text -

My sincere apologies to DL Golfs and I thank you all for resisting
righteously flaming me for this breech of ettiquette.  In my defense,
I have been trying to resolve this problem since August.  If it were
not a requirement that I get the WinXP set up for my lab work
[required OS], I would have long ago thrown it out entirely.  For me,
WinXP has very little functional advantage, especially in view of how
the bloated code runs so slowly on the realtively fast, powerful
machine, and even more importantly, there has been very little help to
resolve my problem.  So I very much appreciate your patience at my
jumping in on DL Golfs thread, since it did look a great deal like my
problem and I also very much appreciate your suggestions and help to
resolve what should be a simple problem for a knowledgeable person.

The program I was referring to is indeed Process Explorer.  Somehow
when it installed itself the file name said Process Express, but when
it runs it says Process Explorer v11.21

Upon boot up, using Task Manager I kill the offending svchost and all
is well, so from memory from the time I did not kill it:

The reason I use Task Manager is that Task Manager comes up slowly
during bootup right after the DeskTop icons appear.  But if I click on
Process Explorer, it takes eons of time before it starts up.  So to
kill svchost faster, Task Manager is more effective.

Command line from Process Explorer, Properties, Image:
  C:\WINDOWS\system32\svchost.exe -k NetworkServices

Note it may have ended with NetworkService, but I remember it being
plural.

Also, I believe it is calling on dnsrslvr.dll to create a DNS Cache.
After I select the offending svchost and End Process using Task
Manager, WinXP appears to be a normal experience of speed.  Or, if I
allow 20 minutes and let svchost run its course, WinXP also appears to
be normal.  However, later if the machine is used to access the
internet, the svchost starts hogging CPU time right after dial up
connection/handshaking is obtained.  So, it's better to watch during
bootup and End Process [kill the offending svchost] then, followed by
Start > Run > ipconfig /flushdns
don't know if ipconfig helps, but it was once suggested and does not
seem to harm.

I only mention the failure of aic78xx.sys driver to load, because such
activity does not look correct and may relate.  During these boot up
tests, there is NO antiviral/spyware running [or even installed at
these times]

I don't know any hardware that has SCSI in it on the WinXP system.
However, two versions of the driver exist and they are identical using
compare utility.

How do I find what program asks to load the aic78xx.sys driver?

I reviewed the software I can uninstall and none looks like it would
address this driver.

As another check, I followed another's suggestion use msconfig/startup
tab and temporarily disable all startup and then go to system tab and
disable the whole list and Hide All Microsoft System.  Upon bootup,
the offending svchost was still doing its thing and must not have been
caused by one of those items?

One other strange quirk is that the event log shows that IPv6 Helper
Service hung on startup, yet by the time I can check, I always find it
running in the Services section of My Computer/Management

I believe this machine was originally set up for a LAN.  I have
removed the PC from that service in order for it now to be used as an
isolated operating system for a specific project, which requires the
WinXP OS.  Perhaps, some vestige of the old network is still running
and I can't find it to stop it.

Really would like to clean up this machine's act because I like to
have it boot up while not requiring me to watch and attend to it, like
I have to do now.

Also, new, this machine just developed a new quirk which may or may
not relate.  Applications don't run.  Click on short cut for Windows
Explorer and an hour glass comes on, goes off, and nothing
happens! ??  Click on my short cut for Process Explorer and same,
nothing happens.  Go to the file and click on the file itself the
xxx.exe same thing nothing happens.  Reboot solves that problem.  But
I've never seen that before the last few days.

Suggestions?  Where to look?  Does that command line help?

Regards,
Robert- Hide quoted text -

- Show quoted text -

Have to respond to my own email here, but this follow up on my 'slow'
WinXP problem describing this 'workaround' may help others.


To make my WinXP not act like molasses, I used to do this each boot
up:

At boot up, one of the svchost.exe hogs the CPU. If using Task
Manager I manually 'kill' the svchost.exe hogging the CPU right after
the icons appear, this WinXP system acts almost as fast as the Win98.
So, it is acceptible. But I have to catch the offending svchost.exe
right at boot up for this workaround to be effective. Process
Explorer showed that DNS Client, called Network Service was using this
svchost.exe.


FIX, or WORKAROUND:

When I went to the Manager section of My Computer and view Services,
there appeared a dire warning about the importance of running DNS
Client; so, I never touched it until today. But today, out of
frustration at fighting this WinXP slowness, after never receiving any
help to solve the problem [except for telling me it's probably caused
by viruses and/or malware and sending me on wild goose chases], and
buoying up a bit of courage to modify the WinXP; I simply DISABLED the
DNS Client and rebooted. Wow! what a difference. Now my WinXP is
runing as fast as I expect it to.


SOLUTION:

Just disabled DNS Client in the Manager Services section of My
Computer. Didn't see any adverse effect, but did see a 100 times
speed up.


Note: Still no idea why aic78xx.sys fails to load at bootup, what
application asks for it.

Robert
 
G

Gerry

Robert

You do not seem to appreciate that this is a peer to peer newsgroup.
This means that all those seeking to help others do so on a voluntary
basis. Many of us have other demanding committments. No contributors are
paid to answer questions.

The Command Line for the Process you gave makes no sense. Please recheck
which process is involved. It would help if you listed the services
using the process -see the Services tab for the process.

It is possible that this is the command line you should have quoted:
C:\WINDOWS\System32\svchost.exe -k netsvcs

You should be able determine and isolate which service is hogging the
CPU. An obvious place to start is the DHCP Client service. The StartUp
type for this service is automatic.

Have I correctly pinpointed the Process and the Service involved in your
problem or is it another?

aic78xx.sys is an Adaptec driver associated with drives. Whether the
message is linked to your excessive CPU usage or an unrelated problem
cannot be determined without further information. Examine and post
copies of Error Reports from the Event Viewer System log.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

Your solution to your problem conflicts with this advice

"The overall performance of the client computer decreases and the
network traffic for DNS queries increases if the DNS resolver cache is
deactivated.

The DNS Client service optimizes the performance of DNS name resolution
by storing previously resolved names in memory. If the DNS Client
service is turned off, the computer can still resolve DNS names by using
the network's DNS servers "
Source: http://support.microsoft.com/kb/318803

BTW I find bottom posting unhelpful. I appreciate many users prefer it .


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
Robert said:
Next time please do not hijack a thread started by another user.
There
are many different problems which involve svchost so your problem
could
be totally unrelated.
Please provide the Command Line of the Process giving the
unexplained
CPU usage and list the services that use that process.
Process Explorer is more commonly used than Process Express in these
newsgroups to diagnose these type of problems. If you cannot
provide the
information requested please download and install Process Explorer.
For further information about Process Explorer see
here:http://www.microsoft.com/technet/sysinternals/SystemInformation/Proce...
It would be helpful if you could post the Command Line of the
svchost
process generating the excessive CPU usage. In Process Explorer
place
cursor on Process and select Properties, Image.

Hope this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
Robert Macy wrote:
I have a similar problem with svchost.exe
It hogs the CPU time. If right after all the icons appear on the
screen and I kill it using Task Manager, WinXP is as fast as I
would expect.
I did your complete set of disable on Startup, hide Microsoft and
disabled the list, yet that pesky svchost.exe runs and needs to be
killed to keep it from hogging all the CPU time.
Using Process Express the line appears to be
svchost -k NetworkServices
I think it's trying to run dnsrslvr.dll
I did finally find in Microsoft Remove Programs section that UPnP
is installed and trying to check for new Plug n Play on the
network [I think]. I assume that running that software explained
why once connected to the internet, the machine literally paused
for over 20 minutes. Earlier I had disabled SSDP Discover Service,
then I could get onto the internet.
There is also a quirk not yet resolved: an error log event that
aic78xx.sys failed to load.
No idea what is trying to load that program, or the significance of
not having this driver installed. The aic78xx.sys exists in two
places: in System 32 folder and in the cab file and both are
identical to the bit.
I only have dnsrslvr.dll in the System32 folder because it appears
to have come from an update. I think the size and the date code
match the version from MS, so I don't think it's a modified file.
What size, date code, etc should this file have to make certain
it's legitmate?
45,568 bits created 8/12/2004 5:18:43
5.1.2600.2180
is this a correct file?
Regards,
Robert- Hide quoted text -
- Show quoted text -

My sincere apologies to DL Golfs and I thank you all for resisting
righteously flaming me for this breech of ettiquette. In my defense,
I have been trying to resolve this problem since August. If it were
not a requirement that I get the WinXP set up for my lab work
[required OS], I would have long ago thrown it out entirely. For me,
WinXP has very little functional advantage, especially in view of how
the bloated code runs so slowly on the realtively fast, powerful
machine, and even more importantly, there has been very little help
to resolve my problem. So I very much appreciate your patience at my
jumping in on DL Golfs thread, since it did look a great deal like my
problem and I also very much appreciate your suggestions and help to
resolve what should be a simple problem for a knowledgeable person.

The program I was referring to is indeed Process Explorer. Somehow
when it installed itself the file name said Process Express, but when
it runs it says Process Explorer v11.21

Upon boot up, using Task Manager I kill the offending svchost and all
is well, so from memory from the time I did not kill it:

The reason I use Task Manager is that Task Manager comes up slowly
during bootup right after the DeskTop icons appear. But if I click on
Process Explorer, it takes eons of time before it starts up. So to
kill svchost faster, Task Manager is more effective.

Command line from Process Explorer, Properties, Image:
C:\WINDOWS\system32\svchost.exe -k NetworkServices

Note it may have ended with NetworkService, but I remember it being
plural.

Also, I believe it is calling on dnsrslvr.dll to create a DNS Cache.
After I select the offending svchost and End Process using Task
Manager, WinXP appears to be a normal experience of speed. Or, if I
allow 20 minutes and let svchost run its course, WinXP also appears
to be normal. However, later if the machine is used to access the
internet, the svchost starts hogging CPU time right after dial up
connection/handshaking is obtained. So, it's better to watch during
bootup and End Process [kill the offending svchost] then, followed by
Start > Run > ipconfig /flushdns
don't know if ipconfig helps, but it was once suggested and does not
seem to harm.

I only mention the failure of aic78xx.sys driver to load, because
such activity does not look correct and may relate. During these
boot up tests, there is NO antiviral/spyware running [or even
installed at these times]

I don't know any hardware that has SCSI in it on the WinXP system.
However, two versions of the driver exist and they are identical
using compare utility.

How do I find what program asks to load the aic78xx.sys driver?

I reviewed the software I can uninstall and none looks like it would
address this driver.

As another check, I followed another's suggestion use
msconfig/startup tab and temporarily disable all startup and then go
to system tab and disable the whole list and Hide All Microsoft
System. Upon bootup, the offending svchost was still doing its thing
and must not have been caused by one of those items?

One other strange quirk is that the event log shows that IPv6 Helper
Service hung on startup, yet by the time I can check, I always find
it running in the Services section of My Computer/Management

I believe this machine was originally set up for a LAN. I have
removed the PC from that service in order for it now to be used as an
isolated operating system for a specific project, which requires the
WinXP OS. Perhaps, some vestige of the old network is still running
and I can't find it to stop it.

Really would like to clean up this machine's act because I like to
have it boot up while not requiring me to watch and attend to it,
like I have to do now.

Also, new, this machine just developed a new quirk which may or may
not relate. Applications don't run. Click on short cut for Windows
Explorer and an hour glass comes on, goes off, and nothing
happens! ?? Click on my short cut for Process Explorer and same,
nothing happens. Go to the file and click on the file itself the
xxx.exe same thing nothing happens. Reboot solves that problem. But
I've never seen that before the last few days.

Suggestions? Where to look? Does that command line help?

Regards,
Robert- Hide quoted text -

- Show quoted text -

Have to respond to my own email here, but this follow up on my 'slow'
WinXP problem describing this 'workaround' may help others.


To make my WinXP not act like molasses, I used to do this each boot
up:

At boot up, one of the svchost.exe hogs the CPU. If using Task
Manager I manually 'kill' the svchost.exe hogging the CPU right after
the icons appear, this WinXP system acts almost as fast as the Win98.
So, it is acceptible. But I have to catch the offending svchost.exe
right at boot up for this workaround to be effective. Process
Explorer showed that DNS Client, called Network Service was using this
svchost.exe.


FIX, or WORKAROUND:

When I went to the Manager section of My Computer and view Services,
there appeared a dire warning about the importance of running DNS
Client; so, I never touched it until today. But today, out of
frustration at fighting this WinXP slowness, after never receiving any
help to solve the problem [except for telling me it's probably caused
by viruses and/or malware and sending me on wild goose chases], and
buoying up a bit of courage to modify the WinXP; I simply DISABLED the
DNS Client and rebooted. Wow! what a difference. Now my WinXP is
runing as fast as I expect it to.


SOLUTION:

Just disabled DNS Client in the Manager Services section of My
Computer. Didn't see any adverse effect, but did see a 100 times
speed up.


Note: Still no idea why aic78xx.sys fails to load at bootup, what
application asks for it.

Robert
 
R

Robert Macy

Robert

You do not seem to appreciate that this is a peer to peer newsgroup.
This means that all those seeking to help others do so on a voluntary
basis. Many of us have other demanding committments. No contributors are
paid to answer questions.

The Command Line for the Process you gave makes no sense. Please recheck
which process is involved. It would help if you listed the services
using the process -see the Services tab for the process.

It is possible that this is the command line you should have quoted:
C:\WINDOWS\System32\svchost.exe -k netsvcs

You should be able determine and isolate which service is hogging the
CPU. An obvious place to start is the DHCP Client service. The StartUp
type for this service is automatic.

Have I correctly pinpointed the Process and the Service involved in your
problem or is it another?

aic78xx.sys is an Adaptec driver associated with drives. Whether the
message is linked to your excessive CPU usage or an unrelated problem
cannot be determined without further information. Examine and post
copies of Error Reports from the Event Viewer System log.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

Your solution to your problem conflicts with this advice

"The overall performance of the client computer decreases and the
network traffic for DNS queries increases if the DNS resolver cache is
deactivated.

The DNS Client service optimizes the performance of DNS name resolution
by storing previously resolved names in memory. If the DNS Client
service is turned off, the computer can still resolve DNS names by using
the network's DNS servers "
Source:http://support.microsoft.com/kb/318803

BTW I find bottom posting unhelpful. I appreciate many users prefer it .

--

Hope  this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~



Robert said:
Robert
Next time please do not hijack a thread started by another user.
There
are many different problems which involve svchost so your problem
could
be totally unrelated.
Please provide the Command Line of the Process giving the
unexplained
CPU usage and list the services that use that process.
Process Explorer is more commonly used than Process Express in these
newsgroups to diagnose these type of problems. If you cannot
provide the
information requested please download and install Process Explorer.
For further information about Process Explorer see
here:http://www.microsoft.com/technet/sysinternals/SystemInformation/Proce...
It would be helpful if you could post the Command Line of the
svchost
process generating the excessive CPU usage. In Process Explorer
place
cursor on Process and select Properties, Image.
--
Hope this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
Robert Macy wrote:
I have a similar problem with svchost.exe
It hogs the CPU time. If right after all the icons appear on the
screen and I kill it using Task Manager, WinXP is as fast as I
would expect.
I did your complete set of disable on Startup, hide Microsoft and
disabled the list, yet that pesky svchost.exe runs and needs to be
killed to keep it from hogging all the CPU time.
Using Process Express the line appears to be
svchost -k NetworkServices
I think it's trying to run dnsrslvr.dll
I did finally find in Microsoft Remove Programs section that UPnP
is installed and trying to check for new Plug n Play on the
network [I think]. I assume that running that software explained
why once connected to the internet, the machine literally paused
for over 20 minutes. Earlier I had disabled SSDP Discover Service,
then I could get onto the internet.
There is also a quirk not yet resolved: an error log event that
aic78xx.sys failed to load.
No idea what is trying to load that program, or the significance of
not having this driver installed. The aic78xx.sys exists in two
places: in System 32 folder and in the cab file and both are
identical to the bit.
I only have dnsrslvr.dll in the System32 folder because it appears
to have come from an update. I think the size and the date code
match the version from MS, so I don't think it's a modified file.
What size, date code, etc should this file have to make certain
it's legitmate?
45,568 bits created 8/12/2004 5:18:43
5.1.2600.2180
is this a correct file?
Regards,
Robert- Hide quoted text -
- Show quoted text -
My sincere apologies to DL Golfs and I thank you all for resisting
righteously flaming me for this breech of ettiquette. In my defense,
I have been trying to resolve this problem since August. If it were
not a requirement that I get the WinXP set up for my lab work
[required OS], I would have long ago thrown it out entirely. For me,
WinXP has very little functional advantage, especially in view of how
the bloated code runs so slowly on the realtively fast, powerful
machine, and even more importantly, there has been very little help
to resolve my problem. So I very much appreciate your patience at my
jumping in on DL Golfs thread, since it did look a great deal like my
problem and I also very much appreciate your suggestions and help to
resolve what should be a simple problem for a knowledgeable person.
The program I was referring to is indeed Process Explorer. Somehow
when it installed itself the file name said Process Express, but when
it runs it says Process Explorer v11.21
Upon boot up, using Task Manager I kill the offending svchost and all
is well, so from memory from the time I did not kill it:
The reason I use Task Manager is that Task Manager comes up slowly
during bootup right after the DeskTop icons appear. But if I click on
Process Explorer, it takes eons of time before it starts up. So to
kill svchost faster, Task Manager is more effective.
Command line from Process Explorer, Properties, Image:
C:\WINDOWS\system32\svchost.exe -k NetworkServices
Note it may have ended with NetworkService, but I remember it being
plural.
Also, I believe it is calling on dnsrslvr.dll to create a DNS Cache.
After I select the offending svchost and End Process using Task
Manager, WinXP appears to be a normal experience of speed. Or, if I
allow 20 minutes and let svchost run its course, WinXP also appears
to be normal. However, later if the machine is used to access the
internet, the svchost starts hogging CPU time right after dial up
connection/handshaking is obtained. So, it's better to watch during
bootup and End Process [kill the offending svchost] then, followed by
Start > Run > ipconfig /flushdns
don't know if ipconfig helps, but it was once suggested and does not
seem to harm.
I only mention the failure of aic78xx.sys driver to load, because
such activity does not look correct and may relate. During these
boot up tests, there is NO antiviral/spyware running [or even
installed at these times]
I don't know any hardware that has SCSI in it on the WinXP system.
However, two versions of the driver exist and they are identical
using compare utility.
How do I find what program asks to load the aic78xx.sys driver?
I reviewed the software I can uninstall and none looks like it would
address this driver.
As another check, I followed another's suggestion use
msconfig/startup tab and temporarily disable all startup and then go
to system tab and disable the whole list and Hide All Microsoft
System. Upon bootup, the offending svchost was still doing its thing
and must not have been caused by one of those items?
One other strange quirk is that the event log shows that IPv6 Helper
Service hung on startup, yet by the time I can check, I always find
it running in the Services section of My Computer/Management
I believe this machine was originally set up for a LAN. I have
removed the PC from that service in order for it now to be used as an
isolated operating system for a specific project, which requires the
WinXP OS. Perhaps, some vestige of the old network is still running
and I can't find it to stop it.
Really would like to clean up this machine's act because I like to
have it boot up while not requiring me to watch and attend to it,
like I have to do now.
Also, new, this machine just developed a new quirk which may or may
not relate. Applications don't run. Click on short cut for Windows
Explorer and an hour glass comes on, goes off, and nothing
happens! ?? Click on my short cut for Process Explorer and same,
nothing happens. Go to the file and click on the file itself the
xxx.exe same thing nothing happens. Reboot solves that problem. But
I've never seen that before the last few days.
Suggestions? Where to look? Does that command line help?
Regards,
Robert- Hide quoted text -
- Show quoted text -
Have to respond to my own email here, but this follow up on my 'slow'
WinXP problem describing this 'workaround' may help others.
To make my WinXP not act like molasses, I used to do this each boot
up:
At boot up,

...

read more »- Hide quoted text -

- Show quoted text -

Gerry,

Thank you for your reply.

I realize this is a 'volunteer' group, but I was, and am continuously,
startled by the differences between this group and the Win98 group.

I will do a step by step check and post as much as possible to answer
your questions. I appreciate your help.

Yes, I noticed DNS Client is supposed to 'speed up' your computer.
But, 'find fast' used to slow down a computer, so I was not surprised
to see this computer actually speed up when such a "speed up" addition
was removed.

I prefer top answers, too. But sadly, people requesting bottom
answers are more insistent in their requests, plus I'm using google as
the usenet portal and google automatically sets up bottom answers,
etc.

A new problem has started. At boot up a black screen comes up stating
can't find Operating System ?? Then suddenly a normal boot up. Ran
chkdsk /f on next boot up. It came up clean, not a single problem.
Ran Defrag, lots of fragmented files, to the extent I noticed some
speed improvements. Will try again and see if I can get information
you requested. I think the line you referred to ending in -k
netservices was 'scooped' from the display using ctrl-c, but not
sure.

Robert
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top