SVCHOST taking up 99% CPU usage


Recommended Posts

The otehr day my internet using programs (firefox, msn messenger) started to lagg, it was after downloading kazaa lite and kazaa lite plus plus. Neither of which really worked for me. Anyway, when my internet started to freeze up, i checked the system processes and saw that SVCHOST.exe was at 99% cpu usage! I can end the process fine and it solves the problem, but i do not want to have to do this everytime i boot my computer. adaware and symantec antivirus came up with nothing. Also, whenever i try to get inot Control Panel, windows explorer has to close...i dont know if they are related, but i have been without control panel for about a month now. Does anybody know what can help me?

Link to comment
https://www.neowin.net/forum/topic/371406-svchost-taking-up-99-cpu-usage/
Share on other sites

The otehr day my internet using programs (firefox, msn messenger) started to lagg, it was after downloading kazaa lite and kazaa lite plus plus.  Neither of which really worked for me.  Anyway, when my internet started to freeze up, i checked the system processes and saw that SVCHOST.exe was at 99% cpu usage!  I can end the process fine and it solves the problem, but i do not want to have to do this everytime i boot my computer.  adaware and symantec antivirus came up with nothing.  Also, whenever i try to get inot Control Panel, windows explorer has to close...i dont know if they are related, but i have been without control panel for about a month now.  Does anybody know what can help me?

586516878[/snapback]

This is a tough one.

Here's what you can try:

- Get it to lag again

- Open services.msc

- Sort services by "Status" column, so that the "Started" ones are on top

- Take note of all the services running, right them down if you need to

- Kill the svchost.exe process that is using 99% cpu usage

- Hit the refresh button in the services toolbar, or f5

- Find which service is no longer "Started" that was before

Report back on which one it is.

okay, i did what you said, i wrote down everything, then ended that task, and the lit shifted when i refreshed that page...DNS Client, thats the one that wasnt in the list this time. But, it looks important, domain name mumbojumbo and the such. Computer seems to work fine without it, but i dunno, its a network service, is it possible that that may leave me open for more attackers?

the DNS Client wont leave you open for more attackers, i doubt that if that really was the cause, it had anything to do with hackers.

You kinda need DNS Client, as this is the service that resolves DNS requests.

However I'd like to add my 2cents, if someone hacks your machine, their remote admin prog is usually called svchost.exe or explorer.exe or something that doesnt look suspicious in your task list.

Patch your machine, run a virus update, an adware update and check your firewall. If you run IIS, ensure you are secure (run iislockdown)

svchost.exe is the windows system host application for running system services for xp. It's likely that you recently installed something that was attached to a windows service and it is sucking up all your cpu cycles. Take a look at your running windows services (Control Panel -> Administrative Tools -> Services) and see if anything looks odd or out of place. Then again, since you are probably asking this, it's not exactly a good idea to messing witht hat kind of stuff.

I would check and see what you have running at start up. Some programs invoke svchost.exe on startup.

svchost.exe is the windows system host application for running system services for xp. It's likely that you recently installed something that was attached to a windows service and it is sucking up all your cpu cycles. Take a look at your running windows services (Control Panel -> Administrative Tools -> Services) and see if anything looks odd or out of place. Then again, since you are probably asking this, it's not exactly a good idea to messing witht hat kind of stuff.

I would check and see what you have running at start up. Some programs invoke svchost.exe on startup.

586520304[/snapback]

He already said it's the DNS client service.

Alot of times script kiddies will use "rootkits" and things to take control of your PC. Its very usefull to name the executable file svchost as theres like 4 concurent copies running in windows alone. So its much more likely to go unnoticed. I would honestly format the machine if you are unable to find where the exe is located. Of course it could actually be a windows issue, and svchost is a very important file. and unfortunatly its not a file you can just replace off of the XP cd, or from someone elses computer as it has specific information related to your hardware.

It's not a foreign exe. It's possible it got infected, but I doubt it. I've had it happen as well, and it was not a virus/trojan.

jesterman: The only thing I can suggest is to run repair from your XP disc. All your settings and data will remain in place, it'll just replace the system files.

This is probably because you installed the Supertrick during the Kazaa installation, which creates a HOSTS file with many false entries for the purpose of ad blocking.

A large HOSTS file can cause DNS Client problems such as you describe.

This is probably because you installed the Supertrick during the Kazaa installation, which creates a HOSTS file with many false entries for the purpose of ad blocking.

A large HOSTS file can cause DNS Client problems such as you describe.

586524988[/snapback]

if i did download the supertrick thing, how would i remove that host file?

  • 3 weeks later...
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • When will the Photos app be updated to remember the window size and position when reopened? They addressed this issue in a 2024 version of the app (though I can't recall the build number). Unfortunately, after that specific version, the problem persists! Please prioritise this fix in your K2 schedule. Additionally, the Snipping Tool has lost the ability to capture the Windows Taskbar starting from the 2024 version!
    • Same, never saw it on Android or iOS. Guess only some people got it *shrugs*
    • Anthropic pulls Fable 5 and Mythos 5 after US export control order by Pradeep Viswanathan In April this year, Anthropic launched the Claude Mythos Preview frontier model with state-of-the-art cyber and coding capabilities for a select set of companies around the world. After preparing appropriate guardrails, early this week, Anthropic launched Claude Fable 5 and Mythos 5, its most capable AI models. Claude Fable 5 is for general users and comes with strict safeguards, while Mythos 5 is designed with fewer safeguards for cybersecurity and biology use cases. Today, Anthropic abruptly suspended access to its Fable 5 and Mythos 5 AI models for all customers after receiving an export control directive from the US government. The company received the directive from the government today at 5:21 p.m. ET, and the received letter did not provide any details regarding the national security concern. Anthropic understands that the government became aware of a method to bypass, or “jailbreak,” Fable 5, which might be the reason behind the directive. The order was issued under national security authorities and requires the company to suspend all access to Fable 5 and Mythos 5 by any foreign national, whether they are inside or outside the United States. The restriction also applies to foreign national employees working at Anthropic. As a result, the company has disabled both models for all customers to ensure compliance. Access to previous Anthropic models like Opus and Sonnet is not affected by this government order. The company highlighted that it had developed strong safeguards to reduce the possibility that Fable is misused for tasks related to cybersecurity. In fact, many developers are complaining that the safeguards are going overboard. Additionally, the company worked with the US government, the UK AISI, multiple private third-party organizations, and internal teams to red-team Fable’s safeguards for thousands of hours. Finally, Anthropic noted that no testers have yet been able to find a universal jailbreak on Fable 5. As expected, Anthropic disagrees that a narrow potential jailbreak should lead to the recall of a commercial model used by hundreds of millions of people. It warned that applying this standard across the AI industry could effectively halt new frontier model deployments. Anthropic concluded by mentioning that it is working to restore access to Fable 5 and Mythos 5 as soon as possible and plans to share more details within the next 24 hours.
    • Brave Browser 1.91.172 is out.
  • Recent Achievements

    • Week One Done
      ssd21345 earned a badge
      Week One Done
    • Contributor
      MarkHughes4096 went up a rank
      Contributor
    • Dedicated
      jordanspringer earned a badge
      Dedicated
    • Rookie
      Rimplesnort went up a rank
      Rookie
    • One Year In
      Markus94287 earned a badge
      One Year In
  • Popular Contributors

    1. 1
      +primortal
      503
    2. 2
      +Edouard
      176
    3. 3
      PsYcHoKiLLa
      147
    4. 4
      ATLien_0
      92
    5. 5
      Steven P.
      79
  • Tell a friend

    Love Neowin? Tell a friend!