Yet another SVCHOST.EXE posting (my workaround)

[BIG AL]

I have been having this problem with 100% CPU usage for some time now. The
SVCHOST.EXE is using approx 90-99% of CPU.

My work around has been to:

1.) END the process for SVCHOST.EXE (Windows Task Manager, processes tab)
2.) start > run and type in %TEMP% (highlight & delete all files)
3.) start > run and type in PREFETCH (highlight & delete all files)
4.) REBOOT computer.

Once my computer has rebooted the CPU usage now only display whenever
programs are running and their amount of usage.

NOTE: If I shut down the computer or restarted it, I have to repeat this
process over again because the CPU will be at 100% usage again.

This is how I have been working around this problem now for better that a
year...

I was thinking that my antivirus was the cause to this problem, but just
tonight Norton help had removed my Norton360 off of my computer and the
problem still exists. So I now believe that it is one of Microsoft updates
that have caused this problem.

 

[ramannanda991]

I have been having this problem with 100% CPU usage for some time now.  The
SVCHOST.EXE is using approx 90-99% of CPU.

My work around has been to:

1.) END the process for SVCHOST.EXE    (Windows Task Manager, processes tab)
2.) start > run and type in    %TEMP%    (highlight & delete all files)
3.) start > run and type in    PREFETCH   (highlight & delete all files)
4.) REBOOT computer.

Once my computer has rebooted the CPU usage now only display whenever
programs are running and their amount of usage.

NOTE:  If I shut down the computer or restarted it, I have to repeat this
process over again because the CPU will be at 100% usage again.  

This is how I have been working around this problem now for better that a
year...

I was thinking that my antivirus was the cause to this problem, but just
tonight Norton help had removed my Norton360 off of my computer and the
problem still exists.  So I now believe that it is one of Microsoft updates
that have caused this problem.

hey maybe i think it's a malware try this
open cmd and type tasklist /SVC
see the processes running under Svchost and then mark and paste your
output in this post.If it's a malware problem you can try using
malware bytes to do a scan.
http://ramannanda.blogspot.com/2009/04/malware-bytes.html

 

[Gerry]

BIG AL

You need to research more about the svchost.exe process that is displaying
high CPU usage!

You can investigate Processes using Process Explorer, which is a better
tool than Task Manager.

Please provide the Command Line of the Process giving any unexplained
CPU usage and list the services that use that process.

Process Explorer is more commonly used than Process Express in these
newsgroups to diagnose these type of problems. If you cannot provide the
information requested please download and install Process Explorer.

For further information about Process Explorer see here:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

It would be helpful if you could post the Command Line of the svchost
process generating the excessive CPU usage. In Process Explorer place
cursor on Process and select Properties, Image.

Your deletions relating to prefetch are I suspect of dubious value. If you
have deleted layout.ini you may removed the ability to use prefetch and the
performance benefits it can bring.





Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Tim Meddick]

Layout.ini is just a generated list of what apps use the prefetch data,
we're not talking about Layout.inf here, which IS crucial but nothing to do
with prefetch.

 

[Gerry]

Tim

You may be right. I picked up the reference to layout.ini yesterday.
However, the point is that clearing prefetch will only slow down the
computer until the contents of the folder has been rebuilt.

--


Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Thip]

I have been having this problem with 100% CPU usage for some time now. The
SVCHOST.EXE is using approx 90-99% of CPU.

My work around has been to:

1.) END the process for SVCHOST.EXE (Windows Task Manager, processes
tab)
2.) start > run and type in %TEMP% (highlight & delete all files)
3.) start > run and type in PREFETCH (highlight & delete all files)
4.) REBOOT computer.

Once my computer has rebooted the CPU usage now only display whenever
programs are running and their amount of usage.

NOTE: If I shut down the computer or restarted it, I have to repeat this
process over again because the CPU will be at 100% usage again.

This is how I have been working around this problem now for better that a
year...

I was thinking that my antivirus was the cause to this problem, but just
tonight Norton help had removed my Norton360 off of my computer and the
problem still exists. So I now believe that it is one of Microsoft
updates
that have caused this problem.

Gerry's suggestion to use Process Explorer is an excellent one. Mine went
to 100% whenever I tried to open my browser. I finally tracked the problem
to an entry in my HOST file.

 

[Tim Meddick]

True! - if there was a particular app that was causing problems the could go
into the PREFETCH folder and delete the matching Prefetch file which has the
program's name as part of it's own so easy to identify and delete. But yes,
I don't know how effective that might be either, but has got to be better
than deleting the whole cache.

 

[olfart]

Gerry's suggestion to use Process Explorer is an excellent one. Mine went
to 100% whenever I tried to open my browser. I finally tracked the
problem to an entry in my HOST file.

try CCleaner. It will delete temp and prefech files everytime it is run.
Might solve your problem or at least make it easier to delete the files.
Google for it...it's free

 

[PA Bear [MS MVP]]

Such behavior is almost always caused by hijackware/malware.

 

[BIG AL]

Ramannanda991,

Thank your for your suggestion about trying tasklist /svc. But I was not
able to get this to work. Upon reading about tasklist this option is not
available in XP HOME. Althrough I did try in on a different computer which
has XP MEDIA and it did work exact as it should have. I am sorry that I did
not mention it in my orginal posting. The computer with XP MEDIA is not the
computer which is having the 100% CPU useage.... Please read GOOD NEWS in
next thread posted to Gerry.

 

[BIG AL]

Gerry,

GOOD NEWS & not so good news.

I want to thank you for your help. You gave me enough of insite on my
problem. I first ran the program "PROCESS EXPLORER" and found its a great
utility program. Lots of information was displayed, most of which I did not
understand, but it gave me enough of insite of which program was causing my
problem with the SVCHOST.EXE and what computer progam was causing my problem.


First off I killed PID 1302 and noticed that CPU usage fell down from the
100% useage. I rebooted the computer and the 100% CPU usage returned. I
next download the program and saved it to the desktop and unzipped it. I
re-ran the program and found that P!D 1408 was the new SVCHOST.EXE was
causing the problem. I highlighted in and found that a window opened up with
lots of tabs. Starting looking at all this unknow information I figured out
the program that had been causing my problem was located in
C:\program files\HP\digital imaging\bin. The file name is HPSLPSVC32.DLL.
I did a search for this file and changed the file ext. from DLL to BAK. I
have rebooted the computer several times and have found that my CPU is
running normal now.

NOW for the NOT SO GOOD I dont know what I have screw-up !!! by
changing this file name. I kind of figure that maybe my wireless network
printer will not work correctly now. But I will work on that soon. I was
thinking of maybe uninstall the network computer on that computer and and try
to reinstall it again. I will be giving this a shot really soon. I will
keep you all up to date on what I have found...

Gerry, Again I wish to thank you for all of your help because with out you
giving me a link to the program "PROCESS EXPLORER" I would still be there
pulling my hair out....

Thank you.....

BIG AL

 

[Jim Rusling]

NOW for the NOT SO GOOD I dont know what I have screw-up !!! by
changing this file name. I kind of figure that maybe my wireless network
printer will not work correctly now. But I will work on that soon. I was
thinking of maybe uninstall the network computer on that computer and and try
to reinstall it again. I will be giving this a shot really soon. I will
keep you all up to date on what I have found...

Gerry, Again I wish to thank you for all of your help because with out you
giving me a link to the program "PROCESS EXPLORER" I would still be there
pulling my hair out....

Thank you.....

BIG AL

<snip>
Go to the HP site and make sure that you have the latest drivers and
utilities.

 

[Gerry]

BIG AL

Change the file name back to HPSLPSVC32.DLL.

I think to this is the Service you need to change. It monitors ink levels
amongst other things.

Select Start, Control Panel, Administrative Tools, Services and right click
on HP Digital Image Monitor and select Properties. Change the
StartUp type from Automatic to Manual.

The change could be just a Stop gap requiring an update of HP software.


--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Gerry]

Jim

You may need to disconnect Printer, uninstall the existing software, install
the latest software and finally reconnect the printer.

--


Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[BIG AL]

Gerry,

I changed the file back to a "DLL"

I also changed the the setup from automatic to manual.

After a Reboot the CPU is running normal... VERY GOOD

I will watch it for a few day to see if this fixes the problem....

I have been doing lots of reading about this nasty little program called
"SVCHOST.EXE" and what problems it is causing many people. Just doing a
Google search will reply back of hundreds of fixes, problems etc etc etc. I
had read one report that a person paid HP several hundred dollors and still
never got the problem fixed. It appears that this SVCHOST.EXE program is the
watch dog for other programs whenever a computer boots up and it can hold
several programs within it. But whenever a problem is occured that it will
never reports to the user which program is causing the error. Thank goodness
for the person who wrote "PROCESS EXPLORER", this is one very nice utility
program and very handy to use. I still have not been able to understand all
of its information within it, but at least it gave me a direction on where to
go and what to look for....

Thank again for everything and I will keep you up to date if I find out any
more information about this problem. But IAW all the listings that I have
read it has been going on for around 3 years now.

PS. That person that I said above that spent hundreds of dollors also said
that he talked with HP help and that HP person said that there was no problem
with that file and it was not their problem......

Any way thank you for all of your help....

BIG AL

 

[Gerry]

Big Al

I am pleased you seem to have a solution.

SVCHOST.EXE is an important part of Windows. Using Task Manager it is
difficult to narrow down which svchost process is generating CPU. usage. In
Process Explorer you can see which and that is why I asked about the Command
Line of the Process. The Command Line will identify which Services are
commonly used on most computers. Inevitably the Services on all computers
are not identical but it is a good way to understand what is going on on a
computer that you cannot see. Thus if the Command Line had been
C:\WINDOWS\System32\svchost.exe -k netsvcs I might have asked questions
about the Windows Automatic Update service -a common cause of excessive CPU
usage.

You mentioned PID numbers earlier. These are not helpful in that they are
not common to all computers and if you restart the computer the same process
will have a new PID number. The Command Line is always the same.


--


Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
..

 

[Jim Rusling]

Jim

You may need to disconnect Printer, uninstall the existing software, install
the latest software and finally reconnect the printer.

I am not the one with the problem.

 

[Gerry]

I know that Jim. I was leading up to your suggestion but you beat me to it
so I thought it better to add my bit to yours.


--


Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~