Which svchost service is causing a problem?

[John Latter]

i haven't seen anything of significance in the event log viewer but
remembering those log files that couldn't be opened during the scans -
are there any that can be viewed that might give some clues?

Jorolat

From: "John Latter" <[email protected]>


| Should I do safe mode now? Also, I've just looked at the help file
| again and I'm not too sure what's involved in a boot scan - mind you,
| I'm pushed for time again & I might understand it better later!
|
| --
|
| John Latter
|
| Model of an Internal Evolutionary Mechanism (based on an extension to homeostasis) linking
| Stationary-Phase Mutations to the Baldwin Effect. http://members.aol.com/jorolat/TEM.html
|
| 'Where Darwin meets Lamarck?' Discussion Egroup
| http://groups.yahoo.com/group/evomech

No. I think you have proven that your PC is clean and it is definitely not a virus !

That's good ;-)

However, now the original probelm needs exploration. That problem noted....

"In Windows Task Manager an instance of svchost.exe (with a PID number
of 972) is continuously accessing my hard drive at a frequency of just
under once per second."

The question -- What is the causitive factor in all this activity ?

--

John Latter

Model of an Internal Evolutionary Mechanism (based on an extension to homeostasis) linking Stationary-Phase Mutations to the Baldwin Effect.
http://members.aol.com/jorolat/TEM.html

'Where Darwin meets Lamarck?' Discussion Egroup
http://groups.yahoo.com/group/evomech

 

[John Latter]

Hi,

In Windows Task Manager an instance of svchost.exe (with a PID number
of 972) is continuously accessing my hard drive at a frequency of just
under once per second.

With the help I got on a related post I've used tasklist.exe to
establish that svchost.exe (PID 972) has the following components:

AudioSrv, BITS, Browser, CryptSvc, Dhcp,
ERSvc, EventSystem, helpsvc, lanmanserver,
lanmanworkstation, Netman, Nla, RasMan,
Schedule, seclogon, SENS, SharedAccess,
ShellHWDetection, srservice, TapiSrv,
Themes, TrkWks, W32Time, winmgmt, wscsvc,
wuauserv, WZCSVC

Bearing in mind I'm a novice what I would like to do (subject to
advice!) is disable each service one by one in an attempt to narrow
down the source of the problem?

Would this be a realistic way to go about the problem? If so what
would be the best way to do it & would I need to reboot each time I
disable a service?

Hope you can help

I've just installed XP slipstreamed with SP2 onto a new hard drive
(but I'm back on the old OS & HDD now) and as soon as I installed the
modem drivers the svchost disc activity started. I uninstalled the
drivers & the problem went away.

I ain't gotta clue why this is so & it'll be a few days before I can
spend some time on it. In the meantime, if anyone has any ideas I'ld
be glad to hear them!

--

John Latter

Model of an Internal Evolutionary Mechanism (based on an extension to homeostasis) linking Stationary-Phase Mutations to the Baldwin Effect.
http://members.aol.com/jorolat/TEM.html

'Where Darwin meets Lamarck?' Discussion Egroup
http://groups.yahoo.com/group/evomech

 

[John Latter]

Hi,

In Windows Task Manager an instance of svchost.exe (with a PID number
of 972) is continuously accessing my hard drive at a frequency of just
under once per second.

With the help I got on a related post I've used tasklist.exe to
establish that svchost.exe (PID 972) has the following components:

AudioSrv, BITS, Browser, CryptSvc, Dhcp,
ERSvc, EventSystem, helpsvc, lanmanserver,
lanmanworkstation, Netman, Nla, RasMan,
Schedule, seclogon, SENS, SharedAccess,
ShellHWDetection, srservice, TapiSrv,
Themes, TrkWks, W32Time, winmgmt, wscsvc,
wuauserv, WZCSVC

Bearing in mind I'm a novice what I would like to do (subject to
advice!) is disable each service one by one in an attempt to narrow
down the source of the problem?

Would this be a realistic way to go about the problem? If so what
would be the best way to do it & would I need to reboot each time I
disable a service?

Hope you can help

This would account for some of the 'anomalies' associated with the
problem:

"I/O doesn't necessarily refer to your hard drive. Input and output of
data are also part of the normal functioning of your modem, which
would be my guess at the cause of the numbers you are watching."

Hope to have time to look into it further at the weekend.

--

John Latter

Model of an Internal Evolutionary Mechanism (based on an extension to homeostasis) linking Stationary-Phase Mutations to the Baldwin Effect.
http://members.aol.com/jorolat/TEM.html

'Where Darwin meets Lamarck?' Discussion Egroup
http://groups.yahoo.com/group/evomech