*

Recent Posts

Welcome, Guest. Please login or register.
March 28, 2024, 04:00:16 AM

Login with username, password and session length

Members
  • Total Members: 61
  • Latest: AciDeX
Stats
  • Total Posts: 28505
  • Total Topics: 1915
  • Online Today: 55
  • Online Ever: 455
  • (January 13, 2020, 04:13:29 PM)
Users Online
Users: 0
Guests: 58
Total: 58

Permissions

Author Topic: Runaway SVCHOST process  (Read 4462 times)

0 Members and 1 Guest are viewing this topic.

Offline ZWarrior

  • Administrator
  • Hero Member
  • *****
  • Posts: 7798
  • Karma: 8
  • Shhh! Be wery wery qwiet...
    • View Profile
    • Ambush!
Runaway SVCHOST process
« on: January 25, 2008, 06:16:25 PM »
Posting this so I remember it and others can learn from it.

I am having an issue where the process SVCHOST will eventually take up 100% of the CPU and grow in RAM use.  Obviously a memory leak is present, but as I troubleshot this I also found out about a cmd-line tool that would tell me what processes it is supporting.

I found this page that told me somethings about it and also said to run "tasklist /SVC" to get a list of the processes being supported. **Note - It should also tell you to add the PID column to the Processes tab for Task Manager to see which svchost is the one in question.

Here is the initial list from this time.

Image Name                 PID   Services
================  ===== ==========================================
svchost.exe                 1116 AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
                                         EventSystem, FastUserSwitchingCompatibility,
                                         helpsvc, HidServ, lanmanserver,
                                         lanmanworkstation, Netman, Nla, RasMan,
                                         Schedule, seclogon, SENS, SharedAccess,
                                         ShellHWDetection, TapiSrv, Themes, TrkWks,
                                         winmgmt, wscsvc, wuauserv, WZCSVC

I noticed that this starts eventually, as long as Outlook is loaded, but if I sync my cellphone I can get a svchost.exe to load and start leaking quicker.

The quick fix is to close that process, but that tends to de-stabilize the PC.  Ultimately I have to just reboot the system to clear it out.  I will post more as I start to isolate this.

In the meantime I thought you might like to hear about tasklist.exe.
--------------------------------
Zoë: Shepard, isn't the Bible kind of specific about killing?
Book: Very specific. It is, however, somewhat fuzzy around the area of kneecaps.

Offline ZWarrior

  • Administrator
  • Hero Member
  • *****
  • Posts: 7798
  • Karma: 8
  • Shhh! Be wery wery qwiet...
    • View Profile
    • Ambush!
Re: Runaway SVCHOST process
« Reply #1 on: February 06, 2008, 07:56:04 PM »
Round two.  I come home tonight and my CPU is at 100%.  Let's see what the culprit's were...

svchost.exe          1124 AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
                                 EventSystem, FastUserSwitchingCompatibility,
                                 helpsvc, HidServ, lanmanserver,
                                 lanmanworkstation, Netman, Nla, RasMan,
                                 Schedule, seclogon, SENS, SharedAccess,
                                 ShellHWDetection, TapiSrv, Themes, TrkWks,
                                 winmgmt, wscsvc, wuauserv, WZCSVC

Same exact processes from last time.  Guess I get to do some research on those processes.
--------------------------------
Zoë: Shepard, isn't the Bible kind of specific about killing?
Book: Very specific. It is, however, somewhat fuzzy around the area of kneecaps.