[zorba]

This svchost.exe process showed up in my Task Manager about a week ago.

Its typically taking 90-98% of CPU cycles.

I recognised the filename as a "service" process, so I went into Control Panel | Administrative Tools | Services and looked at the services.

I list below all those services that are running, whose executable is svchost.exe:

Automatic Updates
COM+ Event System
Computer Browser
Cryptographic Services
DCOM Server Process Launcher
DHCP Client
Distributed Link Tracking Client
DNS Client
Error Reporting Service
Event Log
Fast User Switching Compatibility
Help and Support
HP CUE DeviceDiscovery Service
HP Network Devices Support
hpqcxs08
HTTP SSL
Infrared Monitor
Logical Disk Manager
Net Driver HPZ12
Network Connections
Network Location Awareness (NLA)
Pml Driver HPZ12
Remote Access Connection Manager
Remote Procedure Call (RPC)
Remote Registry
Secondary Logon
Security Center
Server
Shell Hardware Detection
SSDP Discovery Service
System Event Notification
System Restore Service
Task Scheduler
TCP/IP NetBIOS Helper
Telephony
Terminal Services
Themes
WebClient
Windows Audio
Windows Driver Foundation - User-mode Driver Framework
Windows Firewall/Internet Connection Sharing (ICS)
Windows Image Acquisition (WIA)
Windows Management Instrumentation
Windows Time
Wireless Zero Configuration
Workstation

I presume this rogue process must be one of these that should not be running ?

Incidentally, while most of these are set to start Automatically, a few of these are set to Manual start. I can't figure out why they would be running, as I've just rebooted, and have not started ANY of these processes manually.

Interestingly Terminal Services is one of these.

When I went in to shut it down, "Stop Service" button was unavailable to me !
However "Disable" was, but when I pressed it, it didn't stop the service - I presume it will take effect whenever the service gets stopped, if I switch the computer off.

Knowing what Terminal Services is all about, I'm concerned someone/thing has hacked into my machine - what should I do here ???

pls help

[lunarlander]

One way is to compare your machine to another one thats running normally. Open up Accesories/System Tools/System Information. In there, go to Software Environment / Services . One of the columns displayed is the executable Path and Name. Compare this to your machine and see if anything is different. ( The above directions may be a little off track, since I'm looking at an XP machine, but what you need is there in System Information. )

[stevehp]

Have the same problem and just bought an HP C8180 printer.

After using processexplorer I discovered it was the HP Network Devices Support service after stopping the service the high cpu usage disappeared. I'm going to update the software and see what happens.

[zorba]

Funny, I had recently bought a HP printer too and installed the s/w off the cd (rather than checking for the most uptodate s/w on the website, I guess)....

How did you get on with updating your s/w for the printer ? Did it remove the greedy svchost problem ?

I wiped my pC started again, but will need to install printer s/w eventually, so would love to know if your update removed the problem.

many thanks for your reply and sorry for delayed reply - been busy with installing a new server and network