100% Disk Activity : Svchost - NTFS Volume Log File


Recommended Posts

Could anybody help he out to find the issue here please.

 

Description:
r0SKPzd.png

Disk Activity : 100 % for hours

From Perfmon:
Highest Disk Activity by svchost.exe on NTFS Volume Log file 
Im guessing its indexing & Stopped Windows search service, but No immediate change in Disk Activity.


Any thoughts whats happening here or a possible fix please?

Let's start by checking the Health of that 1TB 5400 RPM Drive

 

http://crystalmark.info/download/index-e.html

 

Download the Portable Zip, and then unzip it and run it. 

 

Let us know what the "Health Status is" ... If it says caution, scroll down and tell us which ones have yellow circles.

Type: HDD

Health Status is Good.

 

I started stopping services from task manager, under svchost one by one to to find if i could find the offending service.

As expected on stopping one of the services the disk usage came back to normal, unfortunately in the joy i missed the service name.. 

Some windows service was causing non stop writes..

 

Disk activity has been 100% for a few days, thought indexing was going on and ignored it..

Pretty sure windows used up a considerable amount of  the HDD rewrites , reducing HDD life..

 

Issue solved. Waiting for it to reoccur to find the service name.

 

Thanks @Eric & @+warwagon

  On 18/03/2017 at 13:54, Eric said:

Anything in the event log? What kind of drive is it, SSD or standard?

Expand  

Not sure how to do an Event log analysis..

  On 18/03/2017 at 16:16, rezurect said:

Type: HDD

Health Status is Good.

 

I started stopping services from task manager, under svchost one by one to to find if i could find the offending service.

As expected on stopping one of the services the disk usage came back to normal, unfortunately in the joy i missed the service name.. 

Some windows service was causing non stop writes..

 

Disk activity has been 100% for a few days, thought indexing was going on and ignored it..

Pretty sure windows used up a considerable amount of  the HDD rewrites , reducing HDD life..

 

Issue solved. Waiting for it to reoccur to find the service name.

 

Thanks @Eric & @+warwagon

Not sure how to do an Event log analysis..

Expand  
 
 

Judging by the drive model number it's a regular spinning hard drive and not an SSD, so it didn't really use up any HDD rewrites as that's not an issue with hard drives as it is with an SSD.

 

So which service did you kill which stopped it? Typically the "Windows update service" causes the highest CPU usage with Svchost

 

If it turns out to be the case you may want to clear the c:\windows\softwaredistribution folder out. But you'll have to stop the windows update service first.

  On 18/03/2017 at 16:21, warwagon said:

Judging by the drive model number it's a regular spinning hard drive and not an SSD, so it didn't really use up any HDD rewrites as that's not an issue with hard drives as it is with an SSD.

 

So which service did you kill which stopped it? Typically the "Windows update service" causes the highest CPU usage with SVChost.

Expand  

Kind of missed the service name in joy of seeing Disk activity drop to normal..

CPU usage was normal all the while

 

Will post back if it occurs again, and i get the service name

  On 18/03/2017 at 14:29, warwagon said:

Let's start by checking the Health of that 1TB 5400 RPM Drive

 

http://crystalmark.info/download/index-e.html

 

Download the Portable Zip, and then unzip it and run it. 

 

Let us know what the "Health Status is" ... If it says caution, scroll down and tell us which ones have yellow circles.

Expand  

UNrelated:

 

I tried Crystal mark on my External Seagate HDD

Status : Caution

 

2XEv6I0.png

 

Drive failure coming up?

  On 18/03/2017 at 16:29, rezurect said:

UNrelated:

 

I tried Crystal mark on my External Seagate HDD

Status : Caution

 

2XEv6I0.png

 

 

Expand  
 

That means that there is currently one or more bad sectors on that drive.

I had this happening with Windows Defender when downloading a lot of large files.  It would CONSTANTLY be scanning those files.  Killed a hard drive before I took time to figure it out.  It was on a media server that I'm not on a lot.  I could disable Defender, but it would be same issue when it started back on after restart, so I permanently disabled it.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • The 2025 Complete Splunk Beginner Bundle is now 25% off by Steven Parker Today's highlighted deal comes via Neowin Deals store, where you can save 75% on The 2025 Complete Splunk Beginner Bundle. Splunk is a powerful data platform used to gather information from multiple sources and index it for efficient access. You can then use collected data to create visualizations, analytics, and a variety of automated and security-related functions. With its web-style interface, Splunk is easy to use and is utilized by many companies worldwide. What's Included: Splunk Fundamentals for Effective Management of SOC and SIEM Oak Academy 38 Lessons (3.5h) Lifetime $20.00 Value Splunk | Splunk Core Certified User Certification Prep Lab Oak Academy, 63 Lessons (6h),Lifetime, $20.00 Value Splunk | Splunk Core Certified Power User SPLK 1002 Prep Oak Academy, 53 Lessons (5.5h), Lifetime, $20.00 Value Splunk| Splunk Enterprise Certified Admin Certification Prep Oak Academy, 68 Lessons (8.5h), Lifetime, $20.00 Value Requirements Basic understanding of IT and networking concepts Familiarity with Linux and Windows operating systems A computer with internet access for hands-on practice Good to Know Length of time users can access this course: lifetime Access options: desktop or mobile Redemption deadline: redeem your code within 30 days of purchase Experience level required: all levels Certificate of Completion ONLY Updates included Closed captioning NOT available NOT downloadable for offline viewing Learn more about our Lifetime deals here! Lifetime access to this 2025 Complete Splunk Beginner Bundle normally costs $80, but this deal can be yours for just $19.99, that's a saving of $60. For full terms, specifications, and info, click the link below. Get the 2025 Complete Splunk Beginner Bundle for just $19.99 (75% off MSRP: $80) Although priced in U.S. dollars, this deal is available for digital purchase worldwide. We post these because we earn commission on each sale so as not to rely solely on advertising, which many of our readers block. It all helps toward paying staff reporters, servers and hosting costs. Other ways to support Neowin Whitelist Neowin by not blocking our ads Create a free member account to see fewer ads Make a donation to support our day to day running costs Subscribe to Neowin - for $14 a year, or $28 a year for an ad-free experience Disclosure: Neowin benefits from revenue of each sale made through our branded deals site powered by StackCommerce.
    • and you got scammed because 2077 launch its one of the worse thing i ever remember and even to this day the game never reached its potential
    • Basic Auth needs to die especially for anything internet bound and exchange in the office 365 suite is extremely internet bound as the cloud service it is. Microsoft has been announcing it for years now. There is always a balance between security and usability, in this case it should be glaringly obvious.
    • the more they want to charge more the more people won't buy anything at launch and wait until its reduced price or discount, hell i even waited until its free on epic game store. and smoke pass model its not viable and having others to pay 80 dollars to subside it wont help
    • Pandemic of 2020, AKA justification to "print" 10 trillion $$$ and keep the Ponzi scheme alive for another while. Until the next one.
  • Recent Achievements

    • Apprentice
      Wireless wookie went up a rank
      Apprentice
    • Week One Done
      bukro earned a badge
      Week One Done
    • One Year In
      Wulle earned a badge
      One Year In
    • One Month Later
      Wulle earned a badge
      One Month Later
    • One Month Later
      Simmo3D earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      558
    2. 2
      ATLien_0
      258
    3. 3
      +FloatingFatMan
      182
    4. 4
      Michael Scrip
      124
    5. 5
      Steven P.
      100
  • Tell a friend

    Love Neowin? Tell a friend!