SVCHOST taking up 99% CPU usage


Recommended Posts

The otehr day my internet using programs (firefox, msn messenger) started to lagg, it was after downloading kazaa lite and kazaa lite plus plus. Neither of which really worked for me. Anyway, when my internet started to freeze up, i checked the system processes and saw that SVCHOST.exe was at 99% cpu usage! I can end the process fine and it solves the problem, but i do not want to have to do this everytime i boot my computer. adaware and symantec antivirus came up with nothing. Also, whenever i try to get inot Control Panel, windows explorer has to close...i dont know if they are related, but i have been without control panel for about a month now. Does anybody know what can help me?

Link to comment
https://www.neowin.net/forum/topic/371406-svchost-taking-up-99-cpu-usage/
Share on other sites

The otehr day my internet using programs (firefox, msn messenger) started to lagg, it was after downloading kazaa lite and kazaa lite plus plus.  Neither of which really worked for me.  Anyway, when my internet started to freeze up, i checked the system processes and saw that SVCHOST.exe was at 99% cpu usage!  I can end the process fine and it solves the problem, but i do not want to have to do this everytime i boot my computer.  adaware and symantec antivirus came up with nothing.  Also, whenever i try to get inot Control Panel, windows explorer has to close...i dont know if they are related, but i have been without control panel for about a month now.  Does anybody know what can help me?

586516878[/snapback]

This is a tough one.

Here's what you can try:

- Get it to lag again

- Open services.msc

- Sort services by "Status" column, so that the "Started" ones are on top

- Take note of all the services running, right them down if you need to

- Kill the svchost.exe process that is using 99% cpu usage

- Hit the refresh button in the services toolbar, or f5

- Find which service is no longer "Started" that was before

Report back on which one it is.

okay, i did what you said, i wrote down everything, then ended that task, and the lit shifted when i refreshed that page...DNS Client, thats the one that wasnt in the list this time. But, it looks important, domain name mumbojumbo and the such. Computer seems to work fine without it, but i dunno, its a network service, is it possible that that may leave me open for more attackers?

the DNS Client wont leave you open for more attackers, i doubt that if that really was the cause, it had anything to do with hackers.

You kinda need DNS Client, as this is the service that resolves DNS requests.

However I'd like to add my 2cents, if someone hacks your machine, their remote admin prog is usually called svchost.exe or explorer.exe or something that doesnt look suspicious in your task list.

Patch your machine, run a virus update, an adware update and check your firewall. If you run IIS, ensure you are secure (run iislockdown)

svchost.exe is the windows system host application for running system services for xp. It's likely that you recently installed something that was attached to a windows service and it is sucking up all your cpu cycles. Take a look at your running windows services (Control Panel -> Administrative Tools -> Services) and see if anything looks odd or out of place. Then again, since you are probably asking this, it's not exactly a good idea to messing witht hat kind of stuff.

I would check and see what you have running at start up. Some programs invoke svchost.exe on startup.

svchost.exe is the windows system host application for running system services for xp. It's likely that you recently installed something that was attached to a windows service and it is sucking up all your cpu cycles. Take a look at your running windows services (Control Panel -> Administrative Tools -> Services) and see if anything looks odd or out of place. Then again, since you are probably asking this, it's not exactly a good idea to messing witht hat kind of stuff.

I would check and see what you have running at start up. Some programs invoke svchost.exe on startup.

586520304[/snapback]

He already said it's the DNS client service.

Alot of times script kiddies will use "rootkits" and things to take control of your PC. Its very usefull to name the executable file svchost as theres like 4 concurent copies running in windows alone. So its much more likely to go unnoticed. I would honestly format the machine if you are unable to find where the exe is located. Of course it could actually be a windows issue, and svchost is a very important file. and unfortunatly its not a file you can just replace off of the XP cd, or from someone elses computer as it has specific information related to your hardware.

It's not a foreign exe. It's possible it got infected, but I doubt it. I've had it happen as well, and it was not a virus/trojan.

jesterman: The only thing I can suggest is to run repair from your XP disc. All your settings and data will remain in place, it'll just replace the system files.

This is probably because you installed the Supertrick during the Kazaa installation, which creates a HOSTS file with many false entries for the purpose of ad blocking.

A large HOSTS file can cause DNS Client problems such as you describe.

This is probably because you installed the Supertrick during the Kazaa installation, which creates a HOSTS file with many false entries for the purpose of ad blocking.

A large HOSTS file can cause DNS Client problems such as you describe.

586524988[/snapback]

if i did download the supertrick thing, how would i remove that host file?

  • 3 weeks later...
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Louis Rossmann suing Samsung over "990 Pro SSD warranty scam" by Sayan Sen Back in 2023, if you recall, Neowin reviewer Robbie Khan had a dispute with Samsung over his 990 Pro SSD, which was rapidly losing its health. After significant back and forth, the tech giant had finally released firmware to "stop" the issue. Interestingly, its previous flagship at the time, the 980 Pro was also facing problems leading to two consecutive sets of firmware fixes. Three years later, it looks like a similar conflict has now broken out between tech repair entrepreneur YouTuber Louis Rossmann and Samsung, as it has escalated into a threatened lawsuit after the company allegedly refused to appropriately replace a failing 990 Pro SSD that remained under warranty. According to Rossmann, a 4TB Samsung 990 Pro NVMe SSD purchased for approximately $330 less than two years ago, began experiencing major hiccups and issues, even though he claims it had been operated under ideal cooling conditions. It was installed in a RAID 1 array and cooled by a heatsink and dual high-speed fans. However the drive reportedly started dropping out of the array, exhibiting controller-level failures that eventually became not useable in any meaningful way. Rossmann said Samsung’s support process was marked by delays and confusion from the very start. After initially contacting the wrong regional support channel, he was redirected to Samsung’s memory support division where he submitted detailed diagnostics, logs, and proof of purchase. Rossmann runs a repair company and owns an ACE Lab PC-3000 machine, which is a professional-grade data recovery equipment. As such, he had been confident in his diagnostics. Samsung even seemingly acknowledged that later. Regardless, Rossmann claims that his initial support ticket was automatically closed before a full 24-hour response window had elapsed, forcing him to reopen the case and resubmit documentation. The controversy however intensified further from here after Samsung accepted the drive for warranty evaluation but later returned it with a repair report stating that the drive had passed its testing and that the SSD had been verified as functional. Rossmann strongly disputed those claims citing that his own independent testing on PC-3000 showed write speeds reducing to as low as 40–60 MB/s before the drive failed entirely. Samsung subsequently informed him that the SSD had been reset and reflashed, passing internal stress tests. However, the company also stated that replacement units were unavailable due to an industry-wide memory shortage and suggested that a refund process could be initiated if further testing confirmed the fault. Thus, to settle, the company offered a refund of $330, the amount that was initially paid by him to make the purchase. Here, Rossmann pointed out the seeming hypocrisy of the tech giant as in how no Samsung drive was apparently allocated for warranty replacements, but they were abundantly available for retail sales especially when using business accounts. As you can see, Rossmann is indeed right, there are Samsung 990 Pro 4TB SSDs on Amazon currently for $950 (shipped and sold by first-party Amazon US itself), and they are also available on Samsung's own store too, albeit for an even higher price of $1100. Thus Rossmann argues that Samsung’s inability or unwillingness to provide a replacement while the same model remains available for purchase at significantly higher market prices reflects a failure to honor its warranty obligations. He has issued a formal 60-day notice and says he intends to file suit in Texas small claims court, asserting that companies should face greater costs for denying legitimate warranty claims than for fulfilling them. You can check out the full video titled "Samsung's 990 Pro SSD warranty policy is a scam; I'm taking them to court," at the link below. Source and image: Louis Rossmann (YouTube) As an Amazon Associate we earn from qualifying purchases
    • Was it too much to ask to show the icon in this article?
    • Frankly, I blame whoever is writing such articles. "A big improvement/update and/or new feature is now available to everyone! Also, use this unofficial tweak tool to enable it because it actually isn't available to you yet officially and might not in fact even be entirely ready or whatever, hence why it is perhaps not enabled for you*. But it's great and you should enable it!" I mean there's nothing wrong with sharing info about some feature you might need to enable via unofficial means, of course. It's just that these articles tend to essentially end up being two news pieces in one, and one of them tends to be a bit misleading. (*Yes, yes, the "it's a controlled rollout!" thing. Not a fan of that one either. The argument, not the actual rollout.)
    • Thank you. Will do. I read in the release notes that editor config might be at play here.
    • Actually, I think even Microsoft doesn't know how to control it
  • Recent Achievements

    • Week One Done
      davidbazooked earned a badge
      Week One Done
    • One Month Later
      Jamswaz earned a badge
      One Month Later
    • Week One Done
      Jamswaz earned a badge
      Week One Done
    • Rookie
      Marzoid went up a rank
      Rookie
    • Community Regular
      coch went up a rank
      Community Regular
  • Popular Contributors

    1. 1
      +primortal
      508
    2. 2
      PsYcHoKiLLa
      185
    3. 3
      +Edouard
      157
    4. 4
      Steven P.
      83
    5. 5
      ATLien_0
      75
  • Tell a friend

    Love Neowin? Tell a friend!