excessive use of svchost.exe memory

Operating system Windows XP Home Edition SP3

RAM 1 GB (just upgrade to 512 MB)

Atitvirus Zone Alarm Firewall/antivirus Suite Secruity

Internet - IE8 browser

A classic computer session the process svchost.exe (System user), seen in the Windows Task Manager, will constantly increase its memory consumption until my computer slows to a crawl.  I've increased the RAM from 1 GB to compensate and now amseeing a much bigger memory usage by the process - up to 250 MB!  I tried to end the task and restart the bulk of the process svchost manages but have been unable to isolate the subtask that causes excessive memory consumption.  This has the advantage of reducing the consumption of RAM temporarily, but in half an hour or so consumption of memory is way up again.

I repeatedly ran some virus scans by Zone Alarm (currently being updated), Malwarebytes "Anti-malware", "Search and Destroy" Spybot and SuperAntiSpyWare 4.9 nothing done.  I have IE8 configured to avoid pop ups and have blocked most of the cookies.

What can I do to manage the svchost process to stop the runaway memory usage?

Chaos_Edit,

Of course, you were correct.  I downloaded the latest version of MS MSRT last Thursday (v 3.9.3901.0) and he discovered the Alureon virus.  He "partially" deleted and recommended I run a full scan using anti-virus software.  I ran my Checkpoint/Zone Alarm antivirus-Super-scan and it finally detected and quaranteed the virus.  Since then, my svchost.exe program slept about 25 MB memory usage.

What intrigues me (or mind depending on my mood) is that this evidentlly virus exists since 2006 and still my anti-virus for Checkpoint/Zone Alarm, Malwaretytes Anti-Malware and SuperAntiSpyware all failed to find it.  I ran great/deep scans using the latest versions of each of these software products every night for the last month.  My ZA product is set to check and download updates every evening before the scan in depth.

In addition, I started to download HitmanPro to discover that he wanted to maintain a direct link to my computer.  Probably not in my interest.

Tags: Windows

Similar Questions

  • All svchost.exe memory leak issues and the answers seem to be of mid-2010.

    I tried to correct my leak memory using the anwser and so far nothing has worked.

    http://download.windowsupdate.com/v9/microsoftupdate/redir/Muauth.cab
    2012-01-07 09:52:27:625 1428 1654 Misc validation signature for C:\WINDOWS\SoftwareDistribution\AuthCabs\authcab.cab:
    2012-01-07 09:52:27:625 1428 1654 Misc Microsoft signed: Yes
    2012-01-07 09:52:27:703 1428 1654 Misc validation signature for C:\WINDOWS\SoftwareDistribution\AuthCabs\authcab.cab:
    2012-01-07 09:52:27:703 1428 1654 Misc Microsoft signed: Yes
    2012-01-07 09:52:27:703 1428 1654 Misc validation signature for C:\WINDOWS\SoftwareDistribution\AuthCabs\authcab.cab:
    2012-01-07 09:52:27:734 1428 1654 Misc Microsoft signed: Yes
    The service properties 2012-01-07 09:52:27:828 4560 1630 DtaStor update: registered with AU service is {7971F918-A847-4430-9279-4A52D1EFE18D}
    2012-01-07 09:53:50:281 1428 1654 Agent * WARNING: exit code = 0x8007000E
    2012-01-07 09:53:50:281 1428 1654 Agent *.
    2012-01-07 09:53:50:281 1428 1654 Agent * END * Agent: finding updates [CallerId = MicrosoftUpdate] of
    2012-01-07 09:53:50:281 1428 1654 Agent *.
    2012-01-07 09:53:50:281 1428 1654 Agent WARNING: customer WU didn't search for the update with error 0x8007000e
    2012-01-07 09:53:50:296 496 518 COMAPI > COMAPI - RECOVERY -: search [ClientId = MicrosoftUpdate]
    2012-01-07 09:53:50:296 496 518 COMAPI - updates found = 0
    2012-01-07 09:53:50:296 496 518 COMAPI - WARNING: exit code = 0x00000000, result code = 0x8007000E
    2012-01-07 09:53:50:296 496 518 COMAPI-
    2012-01-07 09:53:50:296 496 518 COMAPI - END--COMAPI: search [ClientId = MicrosoftUpdate]
    2012-01-07 09:53:50:296 496 518 COMAPI-
    2012-01-07 09:53:50:296 496 9 a 4 COMAPI WARNING: operation failed because the previous error, hr = 8007000E
    2012-01-07 09:53:50:296 496 9 a 4 COMAPI FATALE: impossible search asynchronous complete. (hr = 8007000E)
    2012-01-07 09:53:55:296 1428 1654 report REPORT EVENT: {D9F17968-B8BC-481E-AA08-5EDA6B57B321} 2012-01-07 09:53:50:234 - 0500 1 148 101 {00000000-0000-0000-0000-000000000000} 0 8007000e MicrosoftUpdate software synchronization failure Windows Update Client did not detect with error 0x8007000e.

    Hello

    ·         What are the troubleshooting steps you have tried?

    ·         You try to install Windows update? If you try to install Windows update then update you are trying to install?

    ·         What is the exact error message?

    Response with above information to better help you.

    I suggest you follow the steps in the link and check if the problem persists:

    http://Windows.Microsoft.com/en-us/Windows7/Windows-Update-error-80070008-or-8007000e

    Note: this link is also applicable for Windows XP.

  • Why use high svchost.exe SO?

    So, I have 25% usage all the time, what is Microsoft do? Can I fix other than to go to win 10?

    [moved German forums]

    I'm talking about money it is updated for windows. Set never 'Find updates' automatic updates, restart, and install the client update KB3161647, only available in June 2016 cumulative patch.

    https://support.Microsoft.com/en-us/KB/3161608

    Best regards, VZ :)

  • Svchost.exe - k netsvcs constantly download

    I work on a XP Home SP3 computer that constantly downloading using system32\svchost.exe - k netsvcs. It will download as long as the computer is connected. Before realizing the problem, downloading 1.4 GB. I use Netbalancer to observe the process. This is a customers computer.
    Things I've tried:

    > Disable automatic updates of windows. The computer has been updated last week.
    > Scan with Malwarebytes, Security Essentials, MFRT, AVG TDDSkiller in windows and safe mode when possible. AVG found 6 google corrupt toolbar.exe in Temp files. Others do nothing are.
    > Deactivate restore system and rescan with AVG, while the computer is connected.
    > The computer has always had Norton AntiVirus installed. It found and removed 1 virus by setup_lib_srf [1] .exe which contained "Downloader" in 2009.
    > Disabled Background Intelligent Transfer service but netsvcs downloads yet and the BITS service back to automatic after a reboot.
    > Ran svchost.exe fix from Microsoft which is for high processor use but thought it might help.
    > The IP remote netsvcs is in contact with belongs to Akamai Technologies when windows automatic updating is disabled. With the updates automatically on other ip addresses belong to Microsoft.

    I ran Hijackthis if you want as the journal.
    Any help is greatly appreciated.
    Tom

    Hi trg53,

    Your question is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please ask your question in the following forum.

    Windows XP IT Pro category

  • Svchost.exe using excessive hard disk

    After the latest version of windows update 29 June downloaded the file SVCHOST. EXE is using memory and excessive hard drive. I have 6 GB of memory and an Intel! 3 processor.

    The svchost.exe blocks all other processes and prohibits the normal use of the computer. I tried the system restore, but could not restore to any restore point, even in safe mode.

    Thank you very much for the help.

    Huib.

    Hi HuibKeizer,

    Method: 1

    I suggest you to download Microsoft Safety Scanner from the following link and scan your computer for viruses and malware.

    Microsoft safety scanner

    Method: 2

    Also I suggest you perform a file system check to find all of the corrupted system files.

    How to use the System File Checker tool to troubleshoot missing or corrupted system files

  • Svchost.exe with service Client DHCP [Dhcp] and DNS Client [DNScache] high memory use

    I'm using Windows 2003 standard Server SP 2 found problem svchost.exe run service Client DHCP [DHCP] and DNS Client [DNScache]
    use a lot around 2 GB of memory. Virus scan try and Hijackthis is not found. I try to restart memory return service.

    I have 4 servers and the same symptoms.

    Anyone know why it caused?

    Hello
     
    Your Windows 7 is better suited for the public of Windows Server on TechNet. Please post your question in the TechNet Windows server forum.

    http://social.technet.Microsoft.com/forums/en/category/WindowsServer

  • the process Svchost.exe to netsvcs uses a lot of memory (~ 600 MB) and 100% cpu

    I have windows xp edition sp3 family. I hit the power button to hibernate the pc but I think an automatice update was running.  Pc crashes when windows resumes after hibernation. I forced a re-boot, but now the svchost.exe to netsvcs process uses a lot of RAM and CPU. I have a Dell Dimension 8250 with 1 GB of RAM. Svchost uses > 600 MB of memory and 100% of the CPU unless I have stop the DHCP service. When I stop DHCP the svchost stops using CPU and memory affected slowly decreases to about 150 MB and remains at this level. But without DHCP I do have access to the network.

    After installing SP3 recently I started having some weird problems, as I lost my printer and had to re - install the software. Also noticed that after re-booting and desktop appears completely empty, the screen turns white and the taskbar at the bottom will appear empty for about 30 seconds, then reappears. PC seems to be more slow tha before installing SP3.

    I've tried everything. Nothing stopped the svchost to chew all the memory, virtual memory and time processor. Had to re - install windows xp.

  • Explorer.exe and svchost.exe using too much memory

    I have disabled the automatic updates after the last round of updates, and now, all of a sudden, explorer.exe and svchost.exe use too much memory... enough to interfere with other programs, I try to use.

    Help?

    Windows XP Professional - Svc Pack 3 processor: Intel (r) Pentium (r) D CPU 2.80GHz CPU speed: 2.73 GHz memory: 512 MB

    Why you turn off automatic updates?

    There are between the two options. I just set it to notify. When it is practical, I go to the Microsoft Update slte and use the custom (not Express) option. This gives the user full control of the update of trial.

    You will have a better idea of the cause of the problem using Process Explorer.

    Download Process Explorer.
    For more information about Process Explorer, see here:
    http://www.Microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

    With svchost.exe provide us a list of services using the process. There are number of processes that are using svchost.exe, so we need to know that we provide more targeted assistance. Right click on the process, click on properties and look at the Services tab.

    Solution Explorer. exe has a number of subprocesses. Select the sub-process, click Properties and check the Services tab.

    Have you recently changed all types of starting any service. This often leads to the problem. Users often disable a reflection of service to speed up the system performance. In practice what is done is of one or several programs to malfunction.

    Hope this helps, Gerry Cornell

    Hello

    I inadvertly solves the problem by changing my default from iTunes media player to Media Player.

    Hope this helps someone else!

    Thanks for the link to Process Explorer :)

    Windows XP Professional - Svc Pack 3 processor: Intel (r) Pentium (r) D CPU 2.80GHz CPU speed: 2.73 GHz memory: 512 MB

  • Why system32\svchost.exe using too much memory

    My computer freezes several times a day.  I have to wait several minutes to get it working again.  When it starts up, it shows a window saying c:\windows\system32\svchost.exe uses a lot of memory.  What is the cause for this?

    Hi Cyndy62,

    1. When did you start to question?

    2 did you a recent software or changes to the material on the computer?

    3. This occurs when you use a specific application or all applications?

    Step 1:

    You can check in safe mode and check if it uses the same energy...

    Start your computer in safe mode

    Step 2:

    If you are not faced with the question in safe mode, then you can try to perform a clean boot and see if it helps.

    A clean boot to check if startup item or services to third-party application is causing this issue.

    You can read the following article to put the computer in a clean boot:

    How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7

    After the troubleshooting steps, please refer to clean the boot link to put the computer to normal startup mode.

    You can also read the following article and see if it helps.

    Optimize the performance of Microsoft Windows Vista

    How to troubleshoot performance issues in Windows Vista

    Hope this information is useful.

  • Svchost.exe is the use of very large amounts of memory

    He has more than 20 or 25 of them running at the same time. Some take place a trivial amount of memory part takes as much as 100-120 MB, and dragging my pc.

    Hello

    It is interesting information about your question, which is too long to post here.

    It applies to Windows 7 and Vista.

    "What is svchost.exe and why it works?

    http://www.howtogeek.com/HOWTO/Windows-Vista/what-is-svchostexe-and-why-is-it-running/

    Also Scan for Malware:

    Download, install, update and scan your system with the free version of Malwarebytes AntiMalware:

    http://www.Malwarebytes.org/products/malwarebytes_free

    See you soon.

  • Svchost.exe consumes 90-100% cpu memory

    When I start my computer there are 5-6 processes svchost.exe and none of them use 90% above the memory of the cpu. There is that one, IE, idle system process that uses more than 90% cpu. But when I turn off my net by right clicking on the icon in the status bar notification area and select Disable, after a while, one of the svchost.exe process begins to consume more than 90% cpu. Also its members use is superior to 40 000 K and my computer responds very slowly.

    Also as soon as I finish this process my computer responds normally.
    Also when I shut down my computer shows blue scree an additional message «closing network connections...» ', this isn't usually comes.
    Please help me...
    Thank you

    Are you now a statement is not a problem.

    1. the amount of memory in the "working set" of a process (10 000 K = 10 MB) should not be a problem for most systems.  Even an old computer running XP probably has at least 512 MB of RAM installed.

    2 PIDs are specific to your system.  Reports that a process has 912 PID doesn't mean anything to anyone else.  The svchost.exe instance you mention hosts most of all instances of svchost services into a Windows XP system (this is the "netsvcs" of services group), is not at all surprising that he needs more memory.

    Buried in this long list of services is wuauserv, which is the Windows Update automatic update service.  It wouldn't surprise me at all if this is the service that used a lot of cycles CPU when you shut down your Internet connection.

    If you 'end process' for this instance of svchost, most of the things that will stop working are related to the network, which may be important to you if you have disconnected your network connection.  Not all, however, are related to the network.  For example, the sound does work more (AudioSrv).

    For more information, go here--> http://www.blackviper.com/service-configurations/black-vipers-windows-xp-x86-32-bit-service-pack-3-service-configurations/ names when you run tasklist/SVC are the "service name" rather than the name, "display" then click on the header in the second column of the table in the Black Viper to sort by service name.  You can click on the "display name" of the any services to learn more on this subject.

  • How to check a Svchost.exe high memory usage and troubleshoot?

    How to check a Svchost.exe high memory usage and troubleshoot

    Beautiful Basu 'ASK ',.

    I think I know the answer. Visit this link

    And you can download SvcHost Viwer here.

    Run the following command from cmd: tasklist/SVC /fi "imagename eq svchost.exe".

    Focus on the PID that is causing the high CPU.

    Run SC Config = own Type for each service under this PID. It will launch each service with a separate svchost.exe.

    I would recommend for a complete AV scan.
    Use the following link for the same thing:
    Microsoft safety scanner

  • Svchost.exe 0x7c919af2 referenced memory at 0 x 00000010 memory could not be "written".

    It appears each time I start my computer: svchost.exe 0x7c919af2 referenced memory at 0 x 00000010 memory could not be "written".

    Then a total of 3 BACK Windows pop open, titled in reference to MSE, which close shortly after.

    Code title: original error: 0x7c919af2
    And then my Firewall is NOT on.

    It started a few days, after having spent a lot of time and effort trying to run after failed installs updates for .NET framework. It is unclear what I screwed up.

    Using WIN XP Pro SP3.

    If you mean you see messages like this:

    Svchost.exe at startup
    Application error: the instruction at "0x7c91b21a" referenced memory at "0x00000010". Memory could not be "written".
    The instruction at "0x7c91b21a" referenced memory at 0x00000010 ".
    application 0x7c91b21a error 0x00000010
    The instruction at "0x7c928fea" referenced memory at "0x00000010". The memory can not be "written".

    Why isn't your firewall on?

    This is a popular remedy for this situation:

    It seems that the last update for Windows Media Player may contribute to this problem when the system has the Windows Driver Foundation Service active and running.

    Unless you write your own drivers for XP and using the Windows Driver Foundation Service to help you debug, you should disable the WDF Service.

    Click Start, run and enter in the box:

    services.msc

    Click OK to launch the Services Applet

    Locate the Windows Driver Foundation - User-mode Driver Framework Service, right-click right the Service, select properties and choose disabled and OK your way out of the Services Applet to save the changes.

    Note that you will not be able to 'Stop' Service first, but it's OK.

    Restart your system (the WDF service is now disabled) and check your failure condition now.

  • Svchost.exe using 99% of my CPU

    Title says it all

    It seems that your system may be achieved a malware.

    Some reading on svchost.exe and how it can be hidden (just read).

    http://www.file.NET/process/Svchost.exe.html

    Sometimes, it may seem that one of your svchost.exe process is out of control with all kinds of CPU and memory, so understand that some malware will hide as a process behind one of your several svchost.exe processes.  Everything you see in the Task Manager is a process that has run amok of svchost.exe.

    The malware knows that you will not be able to find and see it in the Task Manager.  The hopes of malware, it will inspire you to do something drastic as use a Restore Point, perform a repair installation, or even reinstall your XP from scratch when none of this is necessary.

    No matter what you use for software malware, detection and removal do this first:

    Download, install, update and do a quick scan with these free malware detection programs:

    Malwarebytes (MMFA): http://www.malwarebytes.org/products/malwarebytes_free
    SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

    They can be uninstalled later if you wish.

    After the scans run clean and a reboot, see what things look like.

  • Svchost.exe - Application error. The instruction at "0x7d4caa9b" reference memory at "0x00000010". The memory cannot be: "read"

    Hi, I get the error message after my system boots - svchost.exe - Application error. The instruction at "0x7d4caa9b" reference memory at "0x00000010". The memory could not be "read".

    And then after a few minutes it stops and restarts.
    I'm also not able to use the mouse.
    I need help with this problem
    Thank you and best regards

    Hi GeorgeMotaung,

    ·         Did you do changes on the computer before the show?

    ·         Are you able to boot to the desktop?

    Follow these methods.

    Method 1: Start your computer in last known good configuration.

    How to start your computer by using last good known Windows XP Configuration

    http://support.Microsoft.com/kb/307852

    Method 2: Follow these steps:

    Step 1: Start the computer in safe mode and check if the problem persists.

    A description of the options to start in Windows XP Mode

    http://support.Microsoft.com/kb/315222

    Step 2: Perform a clean boot to see if there is a conflict of software like the clean boot helps eliminate software conflicts.

    How to configure Windows XP to start in a "clean boot" State

    http://support.Microsoft.com/kb/310353

    Note: After the boot minimum troubleshooting steps, follow section How to configure Windows to use a Normal startup state of the link to return the computer to a Normal startupmode.

    After the clean boot used to resolve the problem, you can follow these steps to configure Windows XP to start normally.

    (a) click Start and then click Run.

    (b) type msconfig and click OK.

    (c) the System Configuration Utility dialog box appears.

    (d) click the general tab, click Normal Startup - load all services and device drivers and then click OK.

    (e) when you are prompted, click on restart to restart the computer.

Maybe you are looking for