Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

Windows Vista Windows Vista
Search Search
Search for:
Tech Support Guy > > >

Solved: svchost.exe processor usage


(!)

alex.forencich's Avatar
alex.forencich alex.forencich is offline
Computer Specs
Member with 13 posts.
THREAD STARTER
 
Join Date: Jun 2007
Location: San Diego, CA
Experience: Advanced
25-Jun-2007, 12:52 AM #1
Question Solved: svchost.exe processor usage
svchost.exe is the windows host process for system services. I have a new Dell Inspiron E1705 notebook computer (2GB RAM, Core 2 Duo Processor, internal Wi-Fi card). Two svchost processes are showing a rather odd pattern in processor useage. I set the affinity of both processes to Core1. The processor useage graph shows very regular peaks in the processor utilization of Core1. The processes seem to spike to 100% CPU for about 1 second every 10 seconds. They idle at (I'm pretty sure) less than 1%. I read on another forum that the 1 second/10 second spikes could be caused by 3rd party wifi drivers, but I can't find anything obvious. It is a new laptop after all, and I haven't installed any extra wifi drivers. Turning the card off does nothing. tasklist /SVC /FI "IMAGENAME eq svchost.exe" returns the following:

Code:
Image Name                     PID Services
========================= ======== ===========================================
svchost.exe                    900 DcomLaunch, PlugPlay
svchost.exe                    960 RpcSs
svchost.exe                   1112 Audiosrv, Dhcp, Eventlog, lmhosts, wscsvc
svchost.exe                   1144 AudioEndpointBuilder, EMDMgmt, hidserv,
                                   Netman, PcaSvc, SysMain, TrkWks, UxSms,
                                   WdiSystemHost, Wlansvc, WPDBusEnum, wudfsvc
svchost.exe                   1172 AeLookupSvc, Appinfo, BITS, Browser,
                                   EapHost, gpsvc, IKEEXT, iphlpsvc,
                                   LanmanServer, MMCSS, ProfSvc, RasMan,
                                   Schedule, seclogon, SENS, ShellHWDetection,
                                   Themes, Winmgmt, wuauserv
svchost.exe                   1380 EventSystem, fdPHost, FDResPub,
                                   LanmanWorkstation, netprofm, nsi, SSDPSRV,
                                   upnphost, W32Time, WebClient,
                                   WinHttpAutoProxySvc
svchost.exe                   1520 CryptSvc, Dnscache, KtmRm, NlaSvc, TapiSrv,
                                   TermService
svchost.exe                   1788 BFE, DPS, MpsSvc
svchost.exe                   2840 BthServ
svchost.exe                   4060 PolicyAgent
svchost.exe                   4872 stisvc
svchost.exe                   5440 WerSvc
svchost.exe                    956 swprv
PIDs 900 and 1144 (in this instance) are the offending processes. Either of DcomLaunch and PlugPlay could be the problem; neither are stoppable for diagnostic purposes. Out of the other services, AudioEndpointBuilder, EMDMgmt, Netman, TrkWks, WdiSystemHost, Wlansvc, and WPDBusEnum were stopped to no effect. I could not stop wudfsvc. hidserv and UxSms were not stopped because they looked like they could affect the usability of the computer. Any ideas on what might be causing this odd behavior? Any possible solutions? This is only a problem because it uses 100% of my CPU. A workaround might be to write a script that identifies these processes and drops the priority to background, but I would rather not have to do that.
Rollin' Rog's Avatar
Computer Specs
Member with 45,855 posts.
 
Join Date: Dec 2000
Location: North of Hollywoodland
Experience: I know when to fold em'
25-Jun-2007, 10:27 AM #2
Install Process Explorer and right click on each of those svchost entries and select "properties"

Look at the "threads" tab and click the cpu column to order the processes according to it.

You should be able to find which thread is spiking and associate it with a service.

http://www.microsoft.com/technet/sys...sExplorer.mspx
alex.forencich's Avatar
alex.forencich alex.forencich is offline
Computer Specs
Member with 13 posts.
THREAD STARTER
 
Join Date: Jun 2007
Location: San Diego, CA
Experience: Advanced
25-Jun-2007, 03:15 PM #3
They all appear to be threads related to RPCRT4.DLL.
Rollin' Rog's Avatar
Computer Specs
Member with 45,855 posts.
 
Join Date: Dec 2000
Location: North of Hollywoodland
Experience: I know when to fold em'
25-Jun-2007, 05:08 PM #4
Possibly associated with email checking and scanning remotely -- if you have something like that going. It's a required MS dll and really has many uses -- but this is one of the most common.

You might try doing a "clean boot" and seeing if the problem still exists:

Run msconfig and select the "Services" tab. Check "Hide Microsoft Services" and then disable the rest. Also uncheck "load startup group" on the general page.

See this link for detailed information:


http://support.microsoft.com/kb/929135

Now restart and test the issue at hand

If no problems, run msconfig and recheck half the disabled items on the Services tab. Test again. If the problem recurs, UNcheck half the items you just checked to narrow down the culprit.

If the problem didn't occur, check the other half, so all the Services are enabled -- proceed to do this on the startup tab as well.

Get the idea? You want to isolate the problem to a specific startup if possible.

Note: if you already have items unchecked under msconfig > startups and are in “selective” startup mode – you should note what these are before beginning. They will need to be de-selected again.
alex.forencich's Avatar
alex.forencich alex.forencich is offline
Computer Specs
Member with 13 posts.
THREAD STARTER
 
Join Date: Jun 2007
Location: San Diego, CA
Experience: Advanced
03-Jul-2007, 06:36 PM #5
Lightbulb Problem solved!
I figured out what the problem is: VMWare virtual network adaptors. The problem disappeared after disabling both of the virtual adaptors.

Thanks for the suggestion, even though I didn't get a chance to try it - I didn't get an email reply notification for some reason.
Rollin' Rog's Avatar
Computer Specs
Member with 45,855 posts.
 
Join Date: Dec 2000
Location: North of Hollywoodland
Experience: I know when to fold em'
03-Jul-2007, 06:39 PM #6
Great -- feel free to mark the thread "Solved" using the Thread Tools menu here since all is well.

You're certainly welcome for any help.
petri816's Avatar
petri816 petri816 is offline
Computer Specs
Junior Member with 2 posts.
 
Join Date: Apr 2008
Experience: Intermediate
23-Apr-2008, 12:46 AM #7
i've got a similiar problem...
I was just wondering what exactly you did... i'm having a similiar problem...
Attached Thumbnails
Solved: svchost.exe processor usage-processes.jpg   Solved: svchost.exe processor usage-svchost.jpg   Solved: svchost.exe processor usage-sip.jpg  
jhausmann's Avatar
jhausmann jhausmann is offline
Junior Member with 1 posts.
 
Join Date: Jun 2008
21-Jun-2008, 04:31 PM #8
On my machine it was slightly different, but related.

I had lost sound and every time I re-installed the audio drivers, the sound would last until the next re-boot. Additionally, one process continually grabbed 40-60% of my dual cores (watching a usage monitor, it was all peaks and valleys). I figured I had a worm/virus but I was wrong.

After loading process explorer, I determined that the one process was using DHCP, WSCSVC and Eventlog, although there weren't entries being written to any logs) I tried shutting off all non-Microsoft services but the problem remained. So, I took a look at the Microsoft services. Two services were stopped that I expected to be running (set to disabled), Windows Audio and Windows Audio Endpoint builder. I started them up and, after a quick re-start, I noticed, in Process Manager, that Audiosrv now had joined the 3 problem services all belonging to Audiodg.exe (wasn't displayed before this). Even better my cpu usage has flatlined at about 4%.

Thanks for pointing me in the right direction.
IvanH's Avatar
IvanH IvanH is offline
Junior Member with 1 posts.
 
Join Date: Jul 2008
Experience: Intermediate
28-Jul-2008, 08:01 AM #9
My notebook running Windows Vista Home Premium SP1 has the same problem with svchost.exe pointing to the DComLaunch and PlugPlay services, as displayed by the process explorer. This svchost.exe uses up to 60% of my dual-core.

I couldn't stop the DComLaunch and PlugPlay services.

The problem started a few days ago when I installed the HP PhotoSmart All-In-One Printer software.

Somebody told me to disable the "Enhancement" from "Control Panel > Hardware and Sound > Manage audio devices > Speakers under Playback tab > Properties". But there is no "Enhancement" in the Speakers Properties where the controller is SoundMAX Integrated Digital HD inside the Asus A8Jr. I am already using the latest sound driver, according to Asus website.

What can I do?
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.


(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


WELCOME
You Are Using: Server ID
Trusted Website Back to the Top ↑

Content Relevant URLs by vBSEO 3.3.2