Discussion:
svchost.exe
(too old to reply)
D-man
2007-03-05 20:07:11 UTC
Permalink
Hi, does anyone have a fix or troubleshooting option for the svchost.exe
application? It sometimes goes crazy on some systems and takes up the CPU's
resources, both network and system can keep the processor maxed. This
application appears to have something to do with IE.
--
Thanks,
D-man
Ron Martell
2007-03-05 20:21:52 UTC
Permalink
Post by D-man
Hi, does anyone have a fix or troubleshooting option for the svchost.exe
application? It sometimes goes crazy on some systems and takes up the CPU's
resources, both network and system can keep the processor maxed. This
application appears to have something to do with IE.
SVCHOST is a Windows system component that acts as the "host" for
running a large number of services. It is normal to have 5 or 6
instances of it running.

It is possible that some malware item has infested your computer and
is running as a service under SVCHOST. In order to diagnose this
further you need to do some investigation:

1. If you are running XP Home edition then you need to download the
TASKLIST utility from
http://www.xmission.com/~comphope/download/winxp.htm
and install it. TASKLIST is included with XP Pro.

2. Bring up the Windows Task Manager (Ctrl+Shift+Esc) and go to the
processes tab. Identify the PID number of the SVCHOST instance that
has the high CPU usage and make note of it. If you click twice on the
CPU column header the list will sorted based on CPU usage with the
highest usage at the top.

3. Open a Command Prompt window and enter the following command:

TASKLIST /SVC

Locate the problem instance of SVCHOST by its PID number and make note
of the names of the individual services that are running under that
specific instance of SVCHOST. Post those names back here.

Good luck

Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2006)
On-Line Help Computer Service
http://onlinehelp.bc.ca
Syberfix Remote Computer Repair

"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."
D-man
2007-03-05 20:38:10 UTC
Permalink
Hi, Ron, I assume that the steps are different for XP Professional?
--
Thanks,
D-man
Post by Ron Martell
Post by D-man
Hi, does anyone have a fix or troubleshooting option for the svchost.exe
application? It sometimes goes crazy on some systems and takes up the CPU's
resources, both network and system can keep the processor maxed. This
application appears to have something to do with IE.
SVCHOST is a Windows system component that acts as the "host" for
running a large number of services. It is normal to have 5 or 6
instances of it running.
It is possible that some malware item has infested your computer and
is running as a service under SVCHOST. In order to diagnose this
1. If you are running XP Home edition then you need to download the
TASKLIST utility from
http://www.xmission.com/~comphope/download/winxp.htm
and install it. TASKLIST is included with XP Pro.
2. Bring up the Windows Task Manager (Ctrl+Shift+Esc) and go to the
processes tab. Identify the PID number of the SVCHOST instance that
has the high CPU usage and make note of it. If you click twice on the
CPU column header the list will sorted based on CPU usage with the
highest usage at the top.
TASKLIST /SVC
Locate the problem instance of SVCHOST by its PID number and make note
of the names of the individual services that are running under that
specific instance of SVCHOST. Post those names back here.
Good luck
Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2006)
On-Line Help Computer Service
http://onlinehelp.bc.ca
Syberfix Remote Computer Repair
"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."
D-man
2007-03-05 20:43:12 UTC
Permalink
Nevermind, ha ha, I read your email again. Good things. Thanks, Ron.
--
Thanks,
D-man
Post by Ron Martell
Post by D-man
Hi, does anyone have a fix or troubleshooting option for the svchost.exe
application? It sometimes goes crazy on some systems and takes up the CPU's
resources, both network and system can keep the processor maxed. This
application appears to have something to do with IE.
SVCHOST is a Windows system component that acts as the "host" for
running a large number of services. It is normal to have 5 or 6
instances of it running.
It is possible that some malware item has infested your computer and
is running as a service under SVCHOST. In order to diagnose this
1. If you are running XP Home edition then you need to download the
TASKLIST utility from
http://www.xmission.com/~comphope/download/winxp.htm
and install it. TASKLIST is included with XP Pro.
2. Bring up the Windows Task Manager (Ctrl+Shift+Esc) and go to the
processes tab. Identify the PID number of the SVCHOST instance that
has the high CPU usage and make note of it. If you click twice on the
CPU column header the list will sorted based on CPU usage with the
highest usage at the top.
TASKLIST /SVC
Locate the problem instance of SVCHOST by its PID number and make note
of the names of the individual services that are running under that
specific instance of SVCHOST. Post those names back here.
Good luck
Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2006)
On-Line Help Computer Service
http://onlinehelp.bc.ca
Syberfix Remote Computer Repair
"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."
D-man
2007-03-05 20:49:10 UTC
Permalink
svchost.exe [PID]1900: httpfilter
--
Thanks,
D-man
Post by Ron Martell
Post by D-man
Hi, does anyone have a fix or troubleshooting option for the svchost.exe
application? It sometimes goes crazy on some systems and takes up the CPU's
resources, both network and system can keep the processor maxed. This
application appears to have something to do with IE.
SVCHOST is a Windows system component that acts as the "host" for
running a large number of services. It is normal to have 5 or 6
instances of it running.
It is possible that some malware item has infested your computer and
is running as a service under SVCHOST. In order to diagnose this
1. If you are running XP Home edition then you need to download the
TASKLIST utility from
http://www.xmission.com/~comphope/download/winxp.htm
and install it. TASKLIST is included with XP Pro.
2. Bring up the Windows Task Manager (Ctrl+Shift+Esc) and go to the
processes tab. Identify the PID number of the SVCHOST instance that
has the high CPU usage and make note of it. If you click twice on the
CPU column header the list will sorted based on CPU usage with the
highest usage at the top.
TASKLIST /SVC
Locate the problem instance of SVCHOST by its PID number and make note
of the names of the individual services that are running under that
specific instance of SVCHOST. Post those names back here.
Good luck
Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2006)
On-Line Help Computer Service
http://onlinehelp.bc.ca
Syberfix Remote Computer Repair
"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."
Ron Martell
2007-03-05 21:54:46 UTC
Permalink
Post by D-man
svchost.exe [PID]1900: httpfilter
HTTPFILTER is a legitimate Windows component. However there are known
viruses/trojans/spyware items which infect or replace this file,
causing problems such as you are experiencing.

Go to one of the following free online scanning sites and check your
system for possible infestations:
Bit Defender http://www.bitdefender.com/scan8/ie.html
Trend Micro http://housecall.trendmicro.com
Kaspersky Online Scanner http://www.kaspersky.com/virusscanner
Panda ActiveScan http://www.pandasoftware.com/activescan
WindowSecurity.com TrojanScan http://windowssecurity.com/trojanscan
Webroot http://www.webroot.com/

Good luck

Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2006)
On-Line Help Computer Service
http://onlinehelp.bc.ca
Syberfix Remote Computer Repair

"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."
Pierpaolo Pedicini
2012-03-25 13:08:00 UTC
Permalink
Hallo, this is the problem I have: at every Windows start, when I try to launch eMule it doesn't appear, but emule.exe starts and I can see it in Task Manager. Such situation may last even 2-3 hours.

I notice a svchost.exe [PID 1896, but it can be 1900 or other] blocked on 23-25% of CPU usage: if I terminate this process, eMule appears in a few seconds, but audio doesn't work anymore (I can hear only Windows sounds, not audio files like mp3s and waves; I can watch Avi files but not hear any sound).

I prompted TASKLIST /SVC and these are the Services running under PID 1896:

AudioSrv, BITS, Browser, CryptSvc, Dhcp, dmserver, ERSvc, EventSystem, FastUserSwitchingCompatibility, helpsvc, HidServ, LanmanServer, lanmanworkstation, Netman, Nla, RasAuto, RasMan, Schedule, seclogon, SENS, SharedAccess, ShellHWDetection, srservice, TapiSrv, Themes, TrkWks, W32Time, winmgmt, wscsvc, wuauserv, wzcsvc

Is there a way to kill these services one by one, so I can identify the problem without killing the entire Svchost?

Greetings from Italy ;-)
Post by D-man
Hi, does anyone have a fix or troubleshooting option for the svchost.exe
application? It sometimes goes crazy on some systems and takes up the CPU's
resources, both network and system can keep the processor maxed. This
application appears to have something to do with IE.
--
Thanks,
D-man
Post by Ron Martell
SVCHOST is a Windows system component that acts as the "host" for
running a large number of services. It is normal to have 5 or 6
instances of it running.
It is possible that some malware item has infested your computer and
is running as a service under SVCHOST. In order to diagnose this
1. If you are running XP Home edition then you need to download the
TASKLIST utility from
http://www.xmission.com/~comphope/download/winxp.htm
and install it. TASKLIST is included with XP Pro.
2. Bring up the Windows Task Manager (Ctrl+Shift+Esc) and go to the
processes tab. Identify the PID number of the SVCHOST instance that
has the high CPU usage and make note of it. If you click twice on the
CPU column header the list will sorted based on CPU usage with the
highest usage at the top.
TASKLIST /SVC
Locate the problem instance of SVCHOST by its PID number and make note
of the names of the individual services that are running under that
specific instance of SVCHOST. Post those names back here.
Good luck
Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2006)
On-Line Help Computer Service
http://onlinehelp.bc.ca
Syberfix Remote Computer Repair
"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."
Post by D-man
Hi, Ron, I assume that the steps are different for XP Professional?
--
Thanks,
D-man
Post by D-man
Nevermind, ha ha, I read your email again. Good things. Thanks, Ron.
--
Thanks,
D-man
Post by D-man
svchost.exe [PID]1900: httpfilter
--
Thanks,
D-man
Post by Jack (MVP-Networking).
Hi
Microsoft provides am excellent Free utility that shows extensive info.
about all the processes that run in memory (including svchost).
See this page for a link and explanations, http://www.ezlan.net/svchost.html
Screen Shot, http://www.ezlan.net/example/ProcessExplor.jpg
Jack (MVP-Networking).
Post by Ron Martell
HTTPFILTER is a legitimate Windows component. However there are known
viruses/trojans/spyware items which infect or replace this file,
causing problems such as you are experiencing.
Go to one of the following free online scanning sites and check your
Bit Defender http://www.bitdefender.com/scan8/ie.html
Trend Micro http://housecall.trendmicro.com
Kaspersky Online Scanner http://www.kaspersky.com/virusscanner
Panda ActiveScan http://www.pandasoftware.com/activescan
WindowSecurity.com TrojanScan http://windowssecurity.com/trojanscan
Webroot http://www.webroot.com/
Good luck
Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2006)
On-Line Help Computer Service
http://onlinehelp.bc.ca
Syberfix Remote Computer Repair
"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."
Post by D-man
Very cool! thanks much.
--
Thanks,
D-man
Post by D-man
Jack, I noticed that you have a screen shot of what appears to be a program
you loaded that shows you what each application does. I was not able to find
how to load this tools on the site provided. Do you happen to have the link?
--
Thanks,
D-man
Post by Jack (MVP-Networking).
Hi
Take a look at your hard drive if you clicked on the link that is on my page
you probably already downloaded it.
Look for a file, ProcessExplorer.zip unzip it and run the exe file.
Otherwise, here you go,
http://www.microsoft.com/technet/sysinternals/utilities/ProcessExplorer.mspx
Jack (MVP-Networking).
Jack (MVP-Networking).
2007-03-05 21:19:19 UTC
Permalink
Hi
Microsoft provides am excellent Free utility that shows extensive info.
about all the processes that run in memory (including svchost).
See this page for a link and explanations, http://www.ezlan.net/svchost.html
Screen Shot, Loading Image...
Jack (MVP-Networking).
Post by D-man
Hi, does anyone have a fix or troubleshooting option for the svchost.exe
application? It sometimes goes crazy on some systems and takes up the CPU's
resources, both network and system can keep the processor maxed. This
application appears to have something to do with IE.
--
Thanks,
D-man
D-man
2007-03-05 23:13:12 UTC
Permalink
Very cool! thanks much.
--
Thanks,
D-man
Post by Jack (MVP-Networking).
Hi
Microsoft provides am excellent Free utility that shows extensive info.
about all the processes that run in memory (including svchost).
See this page for a link and explanations, http://www.ezlan.net/svchost.html
Screen Shot, http://www.ezlan.net/example/ProcessExplor.jpg
Jack (MVP-Networking).
Post by D-man
Hi, does anyone have a fix or troubleshooting option for the svchost.exe
application? It sometimes goes crazy on some systems and takes up the CPU's
resources, both network and system can keep the processor maxed. This
application appears to have something to do with IE.
--
Thanks,
D-man
D-man
2007-03-05 23:34:20 UTC
Permalink
Jack, I noticed that you have a screen shot of what appears to be a program
you loaded that shows you what each application does. I was not able to find
how to load this tools on the site provided. Do you happen to have the link?
--
Thanks,
D-man
Post by Jack (MVP-Networking).
Hi
Microsoft provides am excellent Free utility that shows extensive info.
about all the processes that run in memory (including svchost).
See this page for a link and explanations, http://www.ezlan.net/svchost.html
Screen Shot, http://www.ezlan.net/example/ProcessExplor.jpg
Jack (MVP-Networking).
Post by D-man
Hi, does anyone have a fix or troubleshooting option for the svchost.exe
application? It sometimes goes crazy on some systems and takes up the CPU's
resources, both network and system can keep the processor maxed. This
application appears to have something to do with IE.
--
Thanks,
D-man
Jack (MVP-Networking).
2007-03-06 00:33:04 UTC
Permalink
Hi
Take a look at your hard drive if you clicked on the link that is on my page
you probably already downloaded it.
Look for a file, ProcessExplorer.zip unzip it and run the exe file.
Otherwise, here you go,
http://www.microsoft.com/technet/sysinternals/utilities/ProcessExplorer.mspx
Jack (MVP-Networking).
Post by D-man
Jack, I noticed that you have a screen shot of what appears to be a program
you loaded that shows you what each application does. I was not able to find
how to load this tools on the site provided. Do you happen to have the link?
--
Thanks,
D-man
Post by Jack (MVP-Networking).
Hi
Microsoft provides am excellent Free utility that shows extensive info.
about all the processes that run in memory (including svchost).
See this page for a link and explanations,
http://www.ezlan.net/svchost.html
Screen Shot, http://www.ezlan.net/example/ProcessExplor.jpg
Jack (MVP-Networking).
Post by D-man
Hi, does anyone have a fix or troubleshooting option for the svchost.exe
application? It sometimes goes crazy on some systems and takes up the CPU's
resources, both network and system can keep the processor maxed. This
application appears to have something to do with IE.
--
Thanks,
D-man
Loading...