It's not occupying whole CPU, but on my new CPU with XP SVCHOST.exe is loaded FIVE times, using plenty memory. What gives? Also, don't know if related, but while XP doesn't crash, Outlook, Winword and Excel crash regularly.

0

Read this article on Microsoft.com. http://support.microsoft.com/directory/article.asp?ID=KB;EN-US;q263201 This will explain what services svchost.exe runs and why it sometimes has multiple instances (more than one PIDs). I'm not having any of these problems with excessive CPU consumption but I am having a bit of difficulty with Zone Alarm Pro 2.6.362 and my Cable Modem connection. Apparently svchost has something to do with DHCP renewal?

0

I believe that Microsoft is using this to access your computers or someone has hacked MS and is doing it for them. I was getting somene typing in blank spaces for me. I installed Zone Alarm to see if it was coming from outside, well the first ping came from MS and I refused access and it has never happened again. Thanks

0

i get the same thing, but not all the time, ONLY when my monitor goes into stand by mode/power managemtn option thingy. my hard drive starts whirling and everything starts clicking and stuff. ive got a 1.3ghz machine with 384 mb's of rdram@800mhz, nothing makes my computter work as hard as svhost. 3d games, dvd's....... converting and editing video is the only thing that makes my machine cry like svchost does.....

0

same thing happened here after using MS windows update website. Frankly, this update routine never worked for me. Everytime I used it and it crashed IE and rouined my cable connection. I have to reboot to only found out svchost.exe using nearly 100% cpu. After killing it (only the one that caused the problem), another program then started eating CPU, after kiss that one too the CPU usage returned to normal, but now because the svchost.exe was killed my cable was done again. After a hard reset (power-off) and system returned to normal. I have been using xp for 1 week now and it had crashed on me several times already with no reason, just restart itself without giving any warning or blue screens.

0

According to the Microsoft KnowledgeBase (http://support.microsoft.com/default.aspx?scid=kb;en-us;Q314056 for Windows XP and http://support.microsoft.com/default.aspx?scid=kb;EN-US;q250320 for Windows 2000), SVCHOST.exe manages a task list of services. I have Norton Internet Security 2002 running on XP Professional (all the latest patches). I configured it to block SVCHOST.exe from scanning port 1900. Read this article for more: http://www.incidents.org/archives/intrusions/msg03026.html - Roland

0

Hey, guys add MCAfee Firewall into all this. I installed it. Then unistalled it and hey presto, it disabled my LAN card and has left some odd internal DHCP server handing out IPs to my machine. All this with a SVCHOSTS.exe running at 99%.. nice.

0

re MS is using svchost to acces... My TinyPersonalFirewall tells me that on each startup svchost tries to contact "224.0.0.2" which is registered to the following IANA (NET-MCAST-NET) Internet Assigned Numbers Authority 4676 Admiralty Way, Suite 330 Marina del Rey, CA 90292-6695 US Netname: MCAST-NET Now, if anybody knows who these guys are...

0

Same tbl running XP, in services disabled all using configuration utility- turned stuff on by tens, rebooting- ended up with "plug and play" service as the culprit, now back to sane cpu, 2% at rest instead of 99% & 100%. Now I have to go see what MS says. I knew I should have bought a MAC... One week on a new machine and I was faced with a reload. How do they get away with this trash? This saved me. Hope it helps.

0

Can I delete SVCHOST.exe from my computer??

0

Here is all the necessary information on SVCHOST.exe from Microsoft's web site! http://msdn.microsoft.com/library/default.asp?url=/library/en-us/still/hh/still/wiaguide_2vjd.asp Still Image Devices: Windows DDK Windows XP/Windows Me Core Components The still image components for Windows XP and Windows Me are shown in the following figure. Windows XP/Windows Me Core Components The still image components in Windows XP and Windows Me differ considerably from those in Windows 98 and Windows 2000. On the service side (which is called server in Windows 98/Windows 2000), svchost.exe (called stimon.exe on Windows Me) acts as a generic host for the service, and communicates with wiaservc.dll, which operates on a more detailed level. Wiaservc.dll communicates with one or more user-mode still image drivers (labeled USD1, USD2, and USD3 in the figure), each of which communicates with a particular type of kernel-mode driver. As does Windows 2000, Windows XP and Windows Me provide three types of bus abstraction: USB, SCSI, and serial, represented by usbscan.sys, scsiscan.sys, and serscan.sys. On the client side, an application can be either a TWAIN-compatible application (see Support for TWAIN-Compatible Applications) or a WIA application. A TWAIN application calls into the Data Source Manager, which in turn calls into wiadss.dll, a translation component that communicates with an instance of sti.dll (not shown in preceding figure). Sti.dll is a stub that communicates with the WIA service. In contrast, a WIA application makes calls directly to sti.dll. Built on Wednesday, October 03, 2001

0

scvhost.exe is the tool of devil!!!

0

I am grappling with this problem on Windows 2000 Server. this may help. It seems svchost.exe is used when services are running that are a dynamic link library - .dll - ie. they are not executable themselves. The following is from Micro$oft's website - please note, don't mess with the registry if you don't know what you are doing - 'nuff said: For a Microsoft Windows XP version of this article, see Q314056 . SUMMARY Svchost.exe is a generic host process name for services that are run from dynamic-link libraries (DLLs). The Svchost.exe file is located in the %SystemRoot%\System32 folder. At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. There can be multiple instances of Svchost.exe running at the same time. Each Svchost.exe session can contain a grouping of services, so that separate services can be run depending on how and where Svchost.exe is started. This allows for better control and debugging. Svchost.exe groups are identified in the following registry key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost Each value under this key represents a separate Svchost group and is displayed as a separate instance when you are viewing active processes. Each value is a REG_MULTI_SZ value and contains the services that run under that Svchost group. Each Svchost group can contain one or more service_names extracted from the following registry key, whose Parameters key contains a ServiceDLL value: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ Service MORE INFORMATION To view the list of services that are running in Svchost: On the Start menu, click Run , and type CMD type tlist -s Tlist displays a list of active processes. The -s switch shows the list of active services in each process. For futher information on the process type tlist pid . The following sample Tlist output shows two instances of Svchost.exe running: 0 System Process 8 System 132 smss.exe 160 csrss.exe Title: 180 winlogon.exe Title: NetDDE Agent 208 services.exe Svcs: AppMgmt,Browser,Dhcp,dmserver,Dnscache,Eventlog,lanmanserver,LanmanWorkstation,LmHosts,Messenger,PlugPlay,ProtectedStorage,seclogon,TrkWks,W32Time,Wmi 220 lsass.exe Svcs: Netlogon,PolicyAgent,SamSs 404 svchost.exe Svcs: RpcSs 452 spoolsv.exe Svcs: Spooler 544 cisvc.exe Svcs: cisvc 556 svchost.exe Svcs: EventSystem,Netman,NtmsSvc,RasMan,SENS,TapiSrv 580 regsvc.exe Svcs: RemoteRegistry 596 mstask.exe Svcs: Schedule 660 snmp.exe Svcs: SNMP 728 winmgmt.exe Svcs: WinMgmt 852 cidaemon.exe Title: OleMainThreadWndName 812 explorer.exe Title: Program Manager 1032 OSA.exe Title: Reminder 1300 cmd.exe Title: D:\WINNT5\System32\cmd.exe - tlist -s 1080 MAPISP32.exe Title: WMS Idle 1264 rundll32.exe Title: 1000 mmc.exe Title: Device Manager 1144 tlist.exe The registry setting for the two groupings for this example are as follows: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost: netsvcs: Reg_Multi_SZ: EventSystem Ias Iprip Irmon Netman Nwsapagent Rasauto Rasman Remoteaccess SENS Sharedaccess Tapisrv Ntmssvc rpcss :Reg_Multi_SZ: RpcSs

0

Anyone out there think it may be related to any of the recent Code Red, Code Blue, etc. viruses? http://www.europe.f-secure.com/v-descs/codeblue.shtml

0

If you don't mind messing with the registry (in any case be sure to back it up first!) read and follow the instructions in this article: http://www.naa.gov.au/search/srchadm/help/filtrhlp.htm I haven't done it yet but between that and w32.wierd installing bnlotsdq.exe in countless places on my hard drive (among 80K + folders...) I could use the performance back!

0

I figured the problem out... if you have installed AVENTAILED recently... UNINSTALL immediately.... this will fix your problem... or any prg that connects to the internet... as for the clean installs that have the prob... no idea... lates..

0

I have a similar situation. I also have a process called cmmon32.exe running. Between the 2 they are maxing my cpu. Just browsing around I'm thinking these 2 are spyware. Try downloading ad-aware and scanning. Link is: http://www.zdnet.com/downloads/stories/info/0,10615,63806,00.html Another link with a story on ad-aware and spyware in general is: http://www.techtv.com/screensavers/downloadoftheday/story/0,24330,3327636,00.html Hope this helps. Doug

0

I had also this conflict when using w2k. Issue solved by disinstalling AOL v6.0 software and removing anything which was leftover. Mmmm, AOL spyware?!

0

I have XP and have had this problem twice. First time rebooting seemed to fix it but it later came back. Second time I tried start - run - enter " services.msc " - ok - select Messenger - change Starting type from Auto to Manual, then reboot. Seems OK so far, 2 days. Does this work for you?

0