SCVHOST at 99%....laptop useless for at least 10 minutes

[Guest]

Below is what is under the scvhost that is causing the issue each time I boot
my computer. What items are not jiving...HELP PLEASE!

1st Boot
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ SVCHO
ST.EXE" /FI "PID EQ 244"

Image Name PID Services
========================= ====== =============================================
svchost.exe 244
AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
HidServ, lanmanserver, lanmanworkstation,
Netman, Nla, RasMan, Schedule, seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks, W32Time,
winmgmt, wuauserv, WZCSVC

C:\Documents and Settings<My Name>

2nd Boot – BITS is the only difference in the two boots
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ SVCHO
ST.EXE" /FI "PID EQ 208"

Image Name PID Services
========================= ====== =============================================
svchost.exe 208
AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
HidServ, lanmanserver, lanmanworkstation,
Netman, Nla, RasMan, Schedule, seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks, W32Time,
winmgmt, wuauserv, WZCSVC

BELOW IS A LIST OF THE ITEMS AND WHAT THEY ARE......

AudioSrv: Windows Audio Manages audio devices for Windows-based
programs. If this service is stopped, audio devices and effects will not
function properly. If this service is disabled, any services that explicitly
depend on it will fail to start.

Browser Computer Browser Maintains an updated list of computers on the
network and supplies this list to computers designated as browsers. If this
service is stopped, this list will not be updated or maintained. If this
service is disabled, any services that explicitly depend on it will fail to
start

CryptSvc: Cryptographic Services Provides three management services:
Catalog Database Service, which confirms the signatures of Windows files;
Protected Root Service, which adds and removes Trusted Root Certification
Authority certificates from this computer; and Key Service, which helps
enroll this computer for certificates. If this service is stopped, these
management services will not function properly. If this service is disabled,
any services that explicitly depend on it will fail to start.

Dhcp: DHCP Client Manages network configuration by registering and
updating IP addresses and DNS names.

Dmserver: DCOM Server Process Launcher Provides launch functionality for
DCOM services.

ERSvc: Error Reporting Service Allows error reporting for services and
applictions running in non-standard environments.

EventSystem: Event Log Enables event log messages issued by
Windows-based programs and components to be viewed in Event Viewer. This
service cannot be stopped.

FastUserSwitchingCompatibility: Fast User Switching Compatibility Provides
management for applications that require assistance in a multiple user
environment.

Helpsvc: Help and Support Enables Help and Support Center to run on
this computer. If this service is stopped, Help and Support Center will be
unavailable. If this service is disabled, any services that explicitly depend
on it will fail to start.

HidServ : HID Input Service Enables generic input access to Human
Interface Devices (HID), which activates and maintains the use of predefined
hot buttons on keyboards, remote controls, and other multimedia devices. If
this service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that explicitly
depend on it will fail to start.

Lanmanserver: Server Supports file, print, and named-pipe sharing
over the network for this computer. If this service is stopped, these
functions will be unavailable. If this service is disabled, any services that
explicitly depend on it will fail to start.

Lanmanworkstation:

Netman: Network Connections Manages objects in the Network and Dial-Up
Connections folder, in which you can view both local area network and remote
connections.

NLA: Network Location Awareness (NLA) Collects and stores network
configuration and location information, and notifies applications when this
information changes.

RasMan: Remote Access Connection Manager Creates a network connection.
Schedule

Seclogon: Secondary Logon Enables starting processes under alternate
credentials. If this service is stopped, this type of logon access will be
unavailable.

SENS: System Event Notification Tracks system events such as Windows
logon, network, and power events. Notifies COM+ Event System subscribers of
these events.

SharedAccess: Windows Firewall/Internet Connection Sharing (ICS) Provides
network address translation, addressing, name resolution and/or intrusion
prevention services for a home or small office network.

ShellHWDetection: Shell Hardware Detection Provides notifications for
AutoPlay hardware events.

Srservice: System Restore Service Performs system restore functions. To
stop service, turn off System Restore from the System Restore tab in My
Computer->Properties

TapiSrv: Telephony Provides Telephony API (TAPI) support for programs
that control telephony devices and IP based voice connections on the local
computer and, through the LAN, on servers that are also running the service

Themes: Themes Provides user experience theme management.

TrkWks: Distributed Link Tracking Client Maintains links between NTFS
files within a computer or across computers in a network domain

W32Time: Windows Time Maintains date and time synchronization on all clients
and servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.


Winmgmt: Windows Management Instrumentation Provides a common interface
and object model to access management information about operating system,
devices, applications and services. If this service is stopped, most
Windows-based software will not function properly. If this service is
disabled, any services that explicitly depend on it will fail to start. OR
Windows Management Instrumentation Driver Extensions Provides systems
management information to and from drivers.

Wuauserv: Workstation Creates and maintains client network
connections to remote servers. If this service is stopped, these connections
will be unavailable. If this service is disabled, any services that
explicitly depend on it will fail to start.

WZCSVC: Security Center Monitors system security settings and
configurations

I have been trying to fix this issue....I have the NIS 2007 installed as
virus/spyware protectio.....NORTON was NO help.

 

[kdfake]

Google process explorer and download it from microsoft.
That way you can identify which process under svchost is takin the 99%

I had this problem and it was a windows update thing which microsoft of since patched.

 

[JS]

From Ramesh's web site: http://windowsxp.mvps.org/svchost.htm
Also: http://support.microsoft.com/?kbid=314056

To find out more about Svchost.exe entries try Process Explorer:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and 'Show Lower
Pane' options.
(This will provide the detailed info you need)
Next click/Expand the Svchost.exe process that you are interest in.
Then highlight one of the process listed under Svchost, right click and from
the options listed select: google
This should display what out there on the web about that process.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

Below is what is under the scvhost that is causing the issue each time I
boot
my computer. What items are not jiving...HELP PLEASE!

1st Boot
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ SVCHO
ST.EXE" /FI "PID EQ 244"

Image Name PID Services
========================= ======
=============================================
svchost.exe 244
AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
HidServ, lanmanserver, lanmanworkstation,
Netman, Nla, RasMan, Schedule, seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

C:\Documents and Settings<My Name>

2nd Boot - BITS is the only difference in the two boots
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ SVCHO
ST.EXE" /FI "PID EQ 208"

Image Name PID Services
========================= ======
=============================================
svchost.exe 208
AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
HidServ, lanmanserver, lanmanworkstation,
Netman, Nla, RasMan, Schedule, seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

BELOW IS A LIST OF THE ITEMS AND WHAT THEY ARE......

AudioSrv: Windows Audio Manages audio devices for Windows-based
programs. If this service is stopped, audio devices and effects will not
function properly. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Browser Computer Browser Maintains an updated list of computers on the
network and supplies this list to computers designated as browsers. If
this
service is stopped, this list will not be updated or maintained. If this
service is disabled, any services that explicitly depend on it will fail
to
start

CryptSvc: Cryptographic Services Provides three management services:
Catalog Database Service, which confirms the signatures of Windows files;
Protected Root Service, which adds and removes Trusted Root Certification
Authority certificates from this computer; and Key Service, which helps
enroll this computer for certificates. If this service is stopped, these
management services will not function properly. If this service is
disabled,
any services that explicitly depend on it will fail to start.

Dhcp: DHCP Client Manages network configuration by registering and
updating IP addresses and DNS names.

Dmserver: DCOM Server Process Launcher Provides launch functionality for
DCOM services.

ERSvc: Error Reporting Service Allows error reporting for services and
applictions running in non-standard environments.

EventSystem: Event Log Enables event log messages issued by
Windows-based programs and components to be viewed in Event Viewer. This
service cannot be stopped.

FastUserSwitchingCompatibility: Fast User Switching Compatibility Provides
management for applications that require assistance in a multiple user
environment.

Helpsvc: Help and Support Enables Help and Support Center to run on
this computer. If this service is stopped, Help and Support Center will be
unavailable. If this service is disabled, any services that explicitly
depend
on it will fail to start.

HidServ : HID Input Service Enables generic input access to Human
Interface Devices (HID), which activates and maintains the use of
predefined
hot buttons on keyboards, remote controls, and other multimedia devices.
If
this service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that explicitly
depend on it will fail to start.

Lanmanserver: Server Supports file, print, and named-pipe sharing
over the network for this computer. If this service is stopped, these
functions will be unavailable. If this service is disabled, any services
that
explicitly depend on it will fail to start.

Lanmanworkstation:

Netman: Network Connections Manages objects in the Network and Dial-Up
Connections folder, in which you can view both local area network and
remote
connections.

NLA: Network Location Awareness (NLA) Collects and stores network
configuration and location information, and notifies applications when
this
information changes.

RasMan: Remote Access Connection Manager Creates a network connection.
Schedule

Seclogon: Secondary Logon Enables starting processes under alternate
credentials. If this service is stopped, this type of logon access will be
unavailable.

SENS: System Event Notification Tracks system events such as Windows
logon, network, and power events. Notifies COM+ Event System subscribers
of
these events.

SharedAccess: Windows Firewall/Internet Connection Sharing (ICS) Provides
network address translation, addressing, name resolution and/or intrusion
prevention services for a home or small office network.

ShellHWDetection: Shell Hardware Detection Provides notifications for
AutoPlay hardware events.

Srservice: System Restore Service Performs system restore functions. To
stop service, turn off System Restore from the System Restore tab in My
Computer->Properties

TapiSrv: Telephony Provides Telephony API (TAPI) support for programs
that control telephony devices and IP based voice connections on the local
computer and, through the LAN, on servers that are also running the
service

Themes: Themes Provides user experience theme management.

TrkWks: Distributed Link Tracking Client Maintains links between NTFS
files within a computer or across computers in a network domain

W32Time: Windows Time Maintains date and time synchronization on all
clients
and servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.


Winmgmt: Windows Management Instrumentation Provides a common interface
and object model to access management information about operating system,
devices, applications and services. If this service is stopped, most
Windows-based software will not function properly. If this service is
disabled, any services that explicitly depend on it will fail to start.
OR
Windows Management Instrumentation Driver Extensions Provides systems
management information to and from drivers.

Wuauserv: Workstation Creates and maintains client network
connections to remote servers. If this service is stopped, these
connections
will be unavailable. If this service is disabled, any services that
explicitly depend on it will fail to start.

WZCSVC: Security Center Monitors system security settings and
configurations

I have been trying to fix this issue....I have the NIS 2007 installed as
virus/spyware protectio.....NORTON was NO help.

 

[Guest]

Just did it...Gotta figure out what I am looking at...
Thanks

 

[Guest]

Hey Thanks ....
I feel like I have finally found people willing to help!...
Thanks in advance to all who post!!!!

Now...The "show Process tree" is greyed out....any sugestions!

From Ramesh's web site: http://windowsxp.mvps.org/svchost.htm
Also: http://support.microsoft.com/?kbid=314056

To find out more about Svchost.exe entries try Process Explorer:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and 'Show Lower
Pane' options.
(This will provide the detailed info you need)
Next click/Expand the Svchost.exe process that you are interest in.
Then highlight one of the process listed under Svchost, right click and from
the options listed select: google
This should display what out there on the web about that process.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

Below is what is under the scvhost that is causing the issue each time I
boot
my computer. What items are not jiving...HELP PLEASE!

1st Boot
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ SVCHO
ST.EXE" /FI "PID EQ 244"

Image Name PID Services
========================= ======
=============================================
svchost.exe 244
AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
HidServ, lanmanserver, lanmanworkstation,
Netman, Nla, RasMan, Schedule, seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

C:\Documents and Settings<My Name>

2nd Boot - BITS is the only difference in the two boots
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ SVCHO
ST.EXE" /FI "PID EQ 208"

Image Name PID Services
========================= ======
=============================================
svchost.exe 208
AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
HidServ, lanmanserver, lanmanworkstation,
Netman, Nla, RasMan, Schedule, seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

BELOW IS A LIST OF THE ITEMS AND WHAT THEY ARE......

AudioSrv: Windows Audio Manages audio devices for Windows-based
programs. If this service is stopped, audio devices and effects will not
function properly. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Browser Computer Browser Maintains an updated list of computers on the
network and supplies this list to computers designated as browsers. If
this
service is stopped, this list will not be updated or maintained. If this
service is disabled, any services that explicitly depend on it will fail
to
start

CryptSvc: Cryptographic Services Provides three management services:
Catalog Database Service, which confirms the signatures of Windows files;
Protected Root Service, which adds and removes Trusted Root Certification
Authority certificates from this computer; and Key Service, which helps
enroll this computer for certificates. If this service is stopped, these
management services will not function properly. If this service is
disabled,
any services that explicitly depend on it will fail to start.

Dhcp: DHCP Client Manages network configuration by registering and
updating IP addresses and DNS names.

Dmserver: DCOM Server Process Launcher Provides launch functionality for
DCOM services.

ERSvc: Error Reporting Service Allows error reporting for services and
applictions running in non-standard environments.

EventSystem: Event Log Enables event log messages issued by
Windows-based programs and components to be viewed in Event Viewer. This
service cannot be stopped.

FastUserSwitchingCompatibility: Fast User Switching Compatibility Provides
management for applications that require assistance in a multiple user
environment.

Helpsvc: Help and Support Enables Help and Support Center to run on
this computer. If this service is stopped, Help and Support Center will be
unavailable. If this service is disabled, any services that explicitly
depend
on it will fail to start.

HidServ : HID Input Service Enables generic input access to Human
Interface Devices (HID), which activates and maintains the use of
predefined
hot buttons on keyboards, remote controls, and other multimedia devices.
If
this service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that explicitly
depend on it will fail to start.

Lanmanserver: Server Supports file, print, and named-pipe sharing
over the network for this computer. If this service is stopped, these
functions will be unavailable. If this service is disabled, any services
that
explicitly depend on it will fail to start.

Lanmanworkstation:

Netman: Network Connections Manages objects in the Network and Dial-Up
Connections folder, in which you can view both local area network and
remote
connections.

NLA: Network Location Awareness (NLA) Collects and stores network
configuration and location information, and notifies applications when
this
information changes.

RasMan: Remote Access Connection Manager Creates a network connection.
Schedule

Seclogon: Secondary Logon Enables starting processes under alternate
credentials. If this service is stopped, this type of logon access will be
unavailable.

SENS: System Event Notification Tracks system events such as Windows
logon, network, and power events. Notifies COM+ Event System subscribers
of
these events.

SharedAccess: Windows Firewall/Internet Connection Sharing (ICS) Provides
network address translation, addressing, name resolution and/or intrusion
prevention services for a home or small office network.

ShellHWDetection: Shell Hardware Detection Provides notifications for
AutoPlay hardware events.

Srservice: System Restore Service Performs system restore functions. To
stop service, turn off System Restore from the System Restore tab in My
Computer->Properties

TapiSrv: Telephony Provides Telephony API (TAPI) support for programs
that control telephony devices and IP based voice connections on the local
computer and, through the LAN, on servers that are also running the
service

Themes: Themes Provides user experience theme management.

TrkWks: Distributed Link Tracking Client Maintains links between NTFS
files within a computer or across computers in a network domain

W32Time: Windows Time Maintains date and time synchronization on all
clients
and servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.


Winmgmt: Windows Management Instrumentation Provides a common interface
and object model to access management information about operating system,
devices, applications and services. If this service is stopped, most
Windows-based software will not function properly. If this service is
disabled, any services that explicitly depend on it will fail to start.
OR
Windows Management Instrumentation Driver Extensions Provides systems
management information to and from drivers.

Wuauserv: Workstation Creates and maintains client network
connections to remote servers. If this service is stopped, these
connections
will be unavailable. If this service is disabled, any services that
explicitly depend on it will fail to start.

WZCSVC: Security Center Monitors system security settings and
configurations

I have been trying to fix this issue....I have the NIS 2007 installed as
virus/spyware protectio.....NORTON was NO help.

 

[JS]

This is normal as the 'Show Process Tree' option is only available if you
change the default sort order of the listed processes. Click on help and
search on 'show process tree' for more info.

JS

Hey Thanks ....
I feel like I have finally found people willing to help!...
Thanks in advance to all who post!!!!

Now...The "show Process tree" is greyed out....any sugestions!

From Ramesh's web site: http://windowsxp.mvps.org/svchost.htm
Also: http://support.microsoft.com/?kbid=314056

To find out more about Svchost.exe entries try Process Explorer:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and 'Show Lower
Pane' options.
(This will provide the detailed info you need)
Next click/Expand the Svchost.exe process that you are interest in.
Then highlight one of the process listed under Svchost, right click and
from
the options listed select: google
This should display what out there on the web about that process.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

Below is what is under the scvhost that is causing the issue each time
I
boot
my computer. What items are not jiving...HELP PLEASE!

1st Boot
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 244"

Image Name PID Services
========================= ======
=============================================
svchost.exe 244
AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

C:\Documents and Settings<My Name>

2nd Boot - BITS is the only difference in the two boots
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 208"

Image Name PID Services
========================= ======
=============================================
svchost.exe 208
AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

BELOW IS A LIST OF THE ITEMS AND WHAT THEY ARE......

AudioSrv: Windows Audio Manages audio devices for Windows-based
programs. If this service is stopped, audio devices and effects will
not
function properly. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Browser Computer Browser Maintains an updated list of computers on the
network and supplies this list to computers designated as browsers. If
this
service is stopped, this list will not be updated or maintained. If
this
service is disabled, any services that explicitly depend on it will
fail
to
start

CryptSvc: Cryptographic Services Provides three management services:
Catalog Database Service, which confirms the signatures of Windows
files;
Protected Root Service, which adds and removes Trusted Root
Certification
Authority certificates from this computer; and Key Service, which helps
enroll this computer for certificates. If this service is stopped,
these
management services will not function properly. If this service is
disabled,
any services that explicitly depend on it will fail to start.

Dhcp: DHCP Client Manages network configuration by registering and
updating IP addresses and DNS names.

Dmserver: DCOM Server Process Launcher Provides launch functionality
for
DCOM services.

ERSvc: Error Reporting Service Allows error reporting for services and
applictions running in non-standard environments.

EventSystem: Event Log Enables event log messages issued by
Windows-based programs and components to be viewed in Event Viewer.
This
service cannot be stopped.

FastUserSwitchingCompatibility: Fast User Switching Compatibility
Provides
management for applications that require assistance in a multiple user
environment.

Helpsvc: Help and Support Enables Help and Support Center to run on
this computer. If this service is stopped, Help and Support Center will
be
unavailable. If this service is disabled, any services that explicitly
depend
on it will fail to start.

HidServ : HID Input Service Enables generic input access to Human
Interface Devices (HID), which activates and maintains the use of
predefined
hot buttons on keyboards, remote controls, and other multimedia
devices.
If
this service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Lanmanserver: Server Supports file, print, and named-pipe sharing
over the network for this computer. If this service is stopped, these
functions will be unavailable. If this service is disabled, any
services
that
explicitly depend on it will fail to start.

Lanmanworkstation:

Netman: Network Connections Manages objects in the Network and Dial-Up
Connections folder, in which you can view both local area network and
remote
connections.

NLA: Network Location Awareness (NLA) Collects and stores network
configuration and location information, and notifies applications when
this
information changes.

RasMan: Remote Access Connection Manager Creates a network connection.
Schedule

Seclogon: Secondary Logon Enables starting processes under alternate
credentials. If this service is stopped, this type of logon access will
be
unavailable.

SENS: System Event Notification Tracks system events such as Windows
logon, network, and power events. Notifies COM+ Event System
subscribers
of
these events.

SharedAccess: Windows Firewall/Internet Connection Sharing (ICS)
Provides
network address translation, addressing, name resolution and/or
intrusion
prevention services for a home or small office network.

ShellHWDetection: Shell Hardware Detection Provides notifications for
AutoPlay hardware events.

Srservice: System Restore Service Performs system restore functions. To
stop service, turn off System Restore from the System Restore tab in My
Computer->Properties

TapiSrv: Telephony Provides Telephony API (TAPI) support for programs
that control telephony devices and IP based voice connections on the
local
computer and, through the LAN, on servers that are also running the
service

Themes: Themes Provides user experience theme management.

TrkWks: Distributed Link Tracking Client Maintains links between NTFS
files within a computer or across computers in a network domain

W32Time: Windows Time Maintains date and time synchronization on all
clients
and servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.


Winmgmt: Windows Management Instrumentation Provides a common interface
and object model to access management information about operating
system,
devices, applications and services. If this service is stopped, most
Windows-based software will not function properly. If this service is
disabled, any services that explicitly depend on it will fail to start.
OR
Windows Management Instrumentation Driver Extensions Provides systems
management information to and from drivers.

Wuauserv: Workstation Creates and maintains client network
connections to remote servers. If this service is stopped, these
connections
will be unavailable. If this service is disabled, any services that
explicitly depend on it will fail to start.

WZCSVC: Security Center Monitors system security settings and
configurations

I have been trying to fix this issue....I have the NIS 2007 installed
as
virus/spyware protectio.....NORTON was NO help.

 

[Guest]

have you found a solution to this problem? my desktop does the exact same
thing when i turn it on, freezes up for about 10mins the its fine. task mang
reading svchost.exe 99%

This is normal as the 'Show Process Tree' option is only available if you
change the default sort order of the listed processes. Click on help and
search on 'show process tree' for more info.

JS

Hey Thanks ....
I feel like I have finally found people willing to help!...
Thanks in advance to all who post!!!!

Now...The "show Process tree" is greyed out....any sugestions!

From Ramesh's web site: http://windowsxp.mvps.org/svchost.htm
Also: http://support.microsoft.com/?kbid=314056

To find out more about Svchost.exe entries try Process Explorer:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and 'Show Lower
Pane' options.
(This will provide the detailed info you need)
Next click/Expand the Svchost.exe process that you are interest in.
Then highlight one of the process listed under Svchost, right click and
from
the options listed select: google
This should display what out there on the web about that process.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

Below is what is under the scvhost that is causing the issue each time
I
boot
my computer. What items are not jiving...HELP PLEASE!

1st Boot
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 244"

Image Name PID Services
========================= ======
=============================================
svchost.exe 244
AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

C:\Documents and Settings<My Name>

2nd Boot - BITS is the only difference in the two boots
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 208"

Image Name PID Services
========================= ======
=============================================
svchost.exe 208
AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

BELOW IS A LIST OF THE ITEMS AND WHAT THEY ARE......

AudioSrv: Windows Audio Manages audio devices for Windows-based
programs. If this service is stopped, audio devices and effects will
not
function properly. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Browser Computer Browser Maintains an updated list of computers on the
network and supplies this list to computers designated as browsers. If
this
service is stopped, this list will not be updated or maintained. If
this
service is disabled, any services that explicitly depend on it will
fail
to
start

CryptSvc: Cryptographic Services Provides three management services:
Catalog Database Service, which confirms the signatures of Windows
files;
Protected Root Service, which adds and removes Trusted Root
Certification
Authority certificates from this computer; and Key Service, which helps
enroll this computer for certificates. If this service is stopped,
these
management services will not function properly. If this service is
disabled,
any services that explicitly depend on it will fail to start.

Dhcp: DHCP Client Manages network configuration by registering and
updating IP addresses and DNS names.

Dmserver: DCOM Server Process Launcher Provides launch functionality
for
DCOM services.

ERSvc: Error Reporting Service Allows error reporting for services and
applictions running in non-standard environments.

EventSystem: Event Log Enables event log messages issued by
Windows-based programs and components to be viewed in Event Viewer.
This
service cannot be stopped.

FastUserSwitchingCompatibility: Fast User Switching Compatibility
Provides
management for applications that require assistance in a multiple user
environment.

Helpsvc: Help and Support Enables Help and Support Center to run on
this computer. If this service is stopped, Help and Support Center will
be
unavailable. If this service is disabled, any services that explicitly
depend
on it will fail to start.

HidServ : HID Input Service Enables generic input access to Human
Interface Devices (HID), which activates and maintains the use of
predefined
hot buttons on keyboards, remote controls, and other multimedia
devices.
If
this service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Lanmanserver: Server Supports file, print, and named-pipe sharing
over the network for this computer. If this service is stopped, these
functions will be unavailable. If this service is disabled, any
services
that
explicitly depend on it will fail to start.

Lanmanworkstation:

Netman: Network Connections Manages objects in the Network and Dial-Up
Connections folder, in which you can view both local area network and
remote
connections.

NLA: Network Location Awareness (NLA) Collects and stores network
configuration and location information, and notifies applications when
this
information changes.

RasMan: Remote Access Connection Manager Creates a network connection.
Schedule

Seclogon: Secondary Logon Enables starting processes under alternate
credentials. If this service is stopped, this type of logon access will
be
unavailable.

SENS: System Event Notification Tracks system events such as Windows
logon, network, and power events. Notifies COM+ Event System
subscribers
of
these events.

SharedAccess: Windows Firewall/Internet Connection Sharing (ICS)
Provides
network address translation, addressing, name resolution and/or
intrusion
prevention services for a home or small office network.

ShellHWDetection: Shell Hardware Detection Provides notifications for
AutoPlay hardware events.

Srservice: System Restore Service Performs system restore functions. To
stop service, turn off System Restore from the System Restore tab in My
Computer->Properties

TapiSrv: Telephony Provides Telephony API (TAPI) support for programs
that control telephony devices and IP based voice connections on the
local
computer and, through the LAN, on servers that are also running the
service

Themes: Themes Provides user experience theme management.

TrkWks: Distributed Link Tracking Client Maintains links between NTFS
files within a computer or across computers in a network domain

W32Time: Windows Time Maintains date and time synchronization on all
clients
and servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.


Winmgmt: Windows Management Instrumentation Provides a common interface
and object model to access management information about operating
system,
devices, applications and services. If this service is stopped, most
Windows-based software will not function properly. If this service is
disabled, any services that explicitly depend on it will fail to start.
OR
Windows Management Instrumentation Driver Extensions Provides systems
management information to and from drivers.

Wuauserv: Workstation Creates and maintains client network
connections to remote servers. If this service is stopped, these
connections
will be unavailable. If this service is disabled, any services that
explicitly depend on it will fail to start.

WZCSVC: Security Center Monitors system security settings and
configurations

I have been trying to fix this issue....I have the NIS 2007 installed
as
virus/spyware protectio.....NORTON was NO help.

 

[Guest]

Not Really....Good advise from the other posts...I am tryng the wuauclt.exe
route now...
It seems to have settled down when I turned it off....It is the Win XP auto
updater...
Does anybody have any coments about this?

have you found a solution to this problem? my desktop does the exact same
thing when i turn it on, freezes up for about 10mins the its fine. task mang
reading svchost.exe 99%

This is normal as the 'Show Process Tree' option is only available if you
change the default sort order of the listed processes. Click on help and
search on 'show process tree' for more info.

JS

Hey Thanks ....
I feel like I have finally found people willing to help!...
Thanks in advance to all who post!!!!

Now...The "show Process tree" is greyed out....any sugestions!

:

From Ramesh's web site: http://windowsxp.mvps.org/svchost.htm
Also: http://support.microsoft.com/?kbid=314056

To find out more about Svchost.exe entries try Process Explorer:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and 'Show Lower
Pane' options.
(This will provide the detailed info you need)
Next click/Expand the Svchost.exe process that you are interest in.
Then highlight one of the process listed under Svchost, right click and
from
the options listed select: google
This should display what out there on the web about that process.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

Below is what is under the scvhost that is causing the issue each time
I
boot
my computer. What items are not jiving...HELP PLEASE!

1st Boot
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 244"

Image Name PID Services
========================= ======
=============================================
svchost.exe 244
AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

C:\Documents and Settings<My Name>

2nd Boot - BITS is the only difference in the two boots
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 208"

Image Name PID Services
========================= ======
=============================================
svchost.exe 208
AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

BELOW IS A LIST OF THE ITEMS AND WHAT THEY ARE......

AudioSrv: Windows Audio Manages audio devices for Windows-based
programs. If this service is stopped, audio devices and effects will
not
function properly. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Browser Computer Browser Maintains an updated list of computers on the
network and supplies this list to computers designated as browsers. If
this
service is stopped, this list will not be updated or maintained. If
this
service is disabled, any services that explicitly depend on it will
fail
to
start

CryptSvc: Cryptographic Services Provides three management services:
Catalog Database Service, which confirms the signatures of Windows
files;
Protected Root Service, which adds and removes Trusted Root
Certification
Authority certificates from this computer; and Key Service, which helps
enroll this computer for certificates. If this service is stopped,
these
management services will not function properly. If this service is
disabled,
any services that explicitly depend on it will fail to start.

Dhcp: DHCP Client Manages network configuration by registering and
updating IP addresses and DNS names.

Dmserver: DCOM Server Process Launcher Provides launch functionality
for
DCOM services.

ERSvc: Error Reporting Service Allows error reporting for services and
applictions running in non-standard environments.

EventSystem: Event Log Enables event log messages issued by
Windows-based programs and components to be viewed in Event Viewer.
This
service cannot be stopped.

FastUserSwitchingCompatibility: Fast User Switching Compatibility
Provides
management for applications that require assistance in a multiple user
environment.

Helpsvc: Help and Support Enables Help and Support Center to run on
this computer. If this service is stopped, Help and Support Center will
be
unavailable. If this service is disabled, any services that explicitly
depend
on it will fail to start.

HidServ : HID Input Service Enables generic input access to Human
Interface Devices (HID), which activates and maintains the use of
predefined
hot buttons on keyboards, remote controls, and other multimedia
devices.
If
this service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Lanmanserver: Server Supports file, print, and named-pipe sharing
over the network for this computer. If this service is stopped, these
functions will be unavailable. If this service is disabled, any
services
that
explicitly depend on it will fail to start.

Lanmanworkstation:

Netman: Network Connections Manages objects in the Network and Dial-Up
Connections folder, in which you can view both local area network and
remote
connections.

NLA: Network Location Awareness (NLA) Collects and stores network
configuration and location information, and notifies applications when
this
information changes.

RasMan: Remote Access Connection Manager Creates a network connection.
Schedule

Seclogon: Secondary Logon Enables starting processes under alternate
credentials. If this service is stopped, this type of logon access will
be
unavailable.

SENS: System Event Notification Tracks system events such as Windows
logon, network, and power events. Notifies COM+ Event System
subscribers
of
these events.

SharedAccess: Windows Firewall/Internet Connection Sharing (ICS)
Provides
network address translation, addressing, name resolution and/or
intrusion
prevention services for a home or small office network.

ShellHWDetection: Shell Hardware Detection Provides notifications for
AutoPlay hardware events.

Srservice: System Restore Service Performs system restore functions. To
stop service, turn off System Restore from the System Restore tab in My
Computer->Properties

TapiSrv: Telephony Provides Telephony API (TAPI) support for programs
that control telephony devices and IP based voice connections on the
local
computer and, through the LAN, on servers that are also running the
service

Themes: Themes Provides user experience theme management.

TrkWks: Distributed Link Tracking Client Maintains links between NTFS
files within a computer or across computers in a network domain

W32Time: Windows Time Maintains date and time synchronization on all
clients
and servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.


Winmgmt: Windows Management Instrumentation Provides a common interface
and object model to access management information about operating
system,
devices, applications and services. If this service is stopped, most
Windows-based software will not function properly. If this service is
disabled, any services that explicitly depend on it will fail to start.
OR
Windows Management Instrumentation Driver Extensions Provides systems
management information to and from drivers.

Wuauserv: Workstation Creates and maintains client network
connections to remote servers. If this service is stopped, these
connections
will be unavailable. If this service is disabled, any services that
explicitly depend on it will fail to start.

WZCSVC: Security Center Monitors system security settings and
configurations

I have been trying to fix this issue....I have the NIS 2007 installed
as
virus/spyware protectio.....NORTON was NO help.

 

[db]

i don't have a direct comment.
however, i would like to offer
some information that I have
come across recently:


to my recollection the
issue with svchost has popped
here maybe on three or four threads.

fundamentally, it seems reasonable
that an update caused an issue
with this file recently and it is likely
that it affected similar machines
like yours and not others.

there was a solution discovered
by the first one who initially posted
an issue. he discovered that
renaming the file fixed the issue.

i haven't done any research
nor did i ask what exactly did
he do. but as a guess he may
have renamed that svchost.exe
file to something else like svchost.bak

you might want to try his discovery
as well. i don't think it would hurt
otherwise...

- db

Not Really....Good advise from the other posts...I am tryng the wuauclt.exe
route now...
It seems to have settled down when I turned it off....It is the Win XP auto
updater...
Does anybody have any coments about this?

have you found a solution to this problem? my desktop does the exact same
thing when i turn it on, freezes up for about 10mins the its fine. task mang
reading svchost.exe 99%

This is normal as the 'Show Process Tree' option is only available if you
change the default sort order of the listed processes. Click on help and
search on 'show process tree' for more info.

JS

Hey Thanks ....
I feel like I have finally found people willing to help!...
Thanks in advance to all who post!!!!

Now...The "show Process tree" is greyed out....any sugestions!

:

From Ramesh's web site: http://windowsxp.mvps.org/svchost.htm
Also: http://support.microsoft.com/?kbid=314056

To find out more about Svchost.exe entries try Process Explorer:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and 'Show Lower
Pane' options.
(This will provide the detailed info you need)
Next click/Expand the Svchost.exe process that you are interest in.
Then highlight one of the process listed under Svchost, right click and
from
the options listed select: google
This should display what out there on the web about that process.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

Below is what is under the scvhost that is causing the issue each time
I
boot
my computer. What items are not jiving...HELP PLEASE!

1st Boot
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 244"

Image Name PID Services
===============================
=============================================
svchost.exe 244
AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

C:\Documents and Settings<My Name>

2nd Boot - BITS is the only difference in the two boots
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 208"

Image Name PID Services
===============================
=============================================
svchost.exe 208
AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

BELOW IS A LIST OF THE ITEMS AND WHAT THEY ARE......

AudioSrv: Windows Audio Manages audio devices for Windows-based
programs. If this service is stopped, audio devices and effects will
not
function properly. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Browser Computer Browser Maintains an updated list of computers on the
network and supplies this list to computers designated as browsers. If
this
service is stopped, this list will not be updated or maintained. If
this
service is disabled, any services that explicitly depend on it will
fail
to
start

CryptSvc: Cryptographic Services Provides three management services:
Catalog Database Service, which confirms the signatures of Windows
files;
Protected Root Service, which adds and removes Trusted Root
Certification
Authority certificates from this computer; and Key Service, which helps
enroll this computer for certificates. If this service is stopped,
these
management services will not function properly. If this service is
disabled,
any services that explicitly depend on it will fail to start.

Dhcp: DHCP Client Manages network configuration by registering and
updating IP addresses and DNS names.

Dmserver: DCOM Server Process Launcher Provides launch functionality
for
DCOM services.

ERSvc: Error Reporting Service Allows error reporting for services and
applictions running in non-standard environments.

EventSystem: Event Log Enables event log messages issued by
Windows-based programs and components to be viewed in Event Viewer.
This
service cannot be stopped.

FastUserSwitchingCompatibility: Fast User Switching Compatibility
Provides
management for applications that require assistance in a multiple user
environment.

Helpsvc: Help and Support Enables Help and Support Center to run on
this computer. If this service is stopped, Help and Support Center will
be
unavailable. If this service is disabled, any services that explicitly
depend
on it will fail to start.

HidServ : HID Input Service Enables generic input access to Human
Interface Devices (HID), which activates and maintains the use of
predefined
hot buttons on keyboards, remote controls, and other multimedia
devices.
If
this service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Lanmanserver: Server Supports file, print, and named-pipe sharing
over the network for this computer. If this service is stopped, these
functions will be unavailable. If this service is disabled, any
services
that
explicitly depend on it will fail to start.

Lanmanworkstation:

Netman: Network Connections Manages objects in the Network and Dial-Up
Connections folder, in which you can view both local area network and
remote
connections.

NLA: Network Location Awareness (NLA) Collects and stores network
configuration and location information, and notifies applications when
this
information changes.

RasMan: Remote Access Connection Manager Creates a network connection.
Schedule

Seclogon: Secondary Logon Enables starting processes under alternate
credentials. If this service is stopped, this type of logon access will
be
unavailable.

SENS: System Event Notification Tracks system events such as Windows
logon, network, and power events. Notifies COM+ Event System
subscribers
of
these events.

SharedAccess: Windows Firewall/Internet Connection Sharing (ICS)
Provides
network address translation, addressing, name resolution and/or
intrusion
prevention services for a home or small office network.

ShellHWDetection: Shell Hardware Detection Provides notifications for
AutoPlay hardware events.

Srservice: System Restore Service Performs system restore functions. To
stop service, turn off System Restore from the System Restore tab in My
Computer->Properties

TapiSrv: Telephony Provides Telephony API (TAPI) support for programs
that control telephony devices and IP based voice connections on the
local
computer and, through the LAN, on servers that are also running the
service

Themes: Themes Provides user experience theme management.

TrkWks: Distributed Link Tracking Client Maintains links between NTFS
files within a computer or across computers in a network domain

W32Time: Windows Time Maintains date and time synchronization on all
clients
and servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.


Winmgmt: Windows Management Instrumentation Provides a common interface
and object model to access management information about operating
system,
devices, applications and services. If this service is stopped, most
Windows-based software will not function properly. If this service is
disabled, any services that explicitly depend on it will fail to start.
OR
Windows Management Instrumentation Driver Extensions Provides systems
management information to and from drivers.

Wuauserv: Workstation Creates and maintains client network
connections to remote servers. If this service is stopped, these
connections
will be unavailable. If this service is disabled, any services that
explicitly depend on it will fail to start.

WZCSVC: Security Center Monitors system security settings and
configurations

I have been trying to fix this issue....I have the NIS 2007 installed
as
virus/spyware protectio.....NORTON was NO help.

 

[Guest]

If I Delete the .exe file....will a Windows Update from the website relpace it?

i don't have a direct comment.
however, i would like to offer
some information that I have
come across recently:


to my recollection the
issue with svchost has popped
here maybe on three or four threads.

fundamentally, it seems reasonable
that an update caused an issue
with this file recently and it is likely
that it affected similar machines
like yours and not others.

there was a solution discovered
by the first one who initially posted
an issue. he discovered that
renaming the file fixed the issue.

i haven't done any research
nor did i ask what exactly did
he do. but as a guess he may
have renamed that svchost.exe
file to something else like svchost.bak

you might want to try his discovery
as well. i don't think it would hurt
otherwise...

- db

Not Really....Good advise from the other posts...I am tryng the wuauclt.exe
route now...
It seems to have settled down when I turned it off....It is the Win XP auto
updater...
Does anybody have any coments about this?

have you found a solution to this problem? my desktop does the exact same
thing when i turn it on, freezes up for about 10mins the its fine. task mang
reading svchost.exe 99%

This is normal as the 'Show Process Tree' option is only available if you
change the default sort order of the listed processes. Click on help and
search on 'show process tree' for more info.

JS

Hey Thanks ....
I feel like I have finally found people willing to help!...
Thanks in advance to all who post!!!!

Now...The "show Process tree" is greyed out....any sugestions!

:

From Ramesh's web site: http://windowsxp.mvps.org/svchost.htm
Also: http://support.microsoft.com/?kbid=314056

To find out more about Svchost.exe entries try Process Explorer:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and 'Show Lower
Pane' options.
(This will provide the detailed info you need)
Next click/Expand the Svchost.exe process that you are interest in.
Then highlight one of the process listed under Svchost, right click and
from
the options listed select: google
This should display what out there on the web about that process.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

Below is what is under the scvhost that is causing the issue each time
I
boot
my computer. What items are not jiving...HELP PLEASE!

1st Boot
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 244"

Image Name PID Services
========================= ======
=============================================
svchost.exe 244
AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

C:\Documents and Settings<My Name>

2nd Boot - BITS is the only difference in the two boots
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 208"

Image Name PID Services
========================= ======
=============================================
svchost.exe 208
AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

BELOW IS A LIST OF THE ITEMS AND WHAT THEY ARE......

AudioSrv: Windows Audio Manages audio devices for Windows-based
programs. If this service is stopped, audio devices and effects will
not
function properly. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Browser Computer Browser Maintains an updated list of computers on the
network and supplies this list to computers designated as browsers. If
this
service is stopped, this list will not be updated or maintained. If
this
service is disabled, any services that explicitly depend on it will
fail
to
start

CryptSvc: Cryptographic Services Provides three management services:
Catalog Database Service, which confirms the signatures of Windows
files;
Protected Root Service, which adds and removes Trusted Root
Certification
Authority certificates from this computer; and Key Service, which helps
enroll this computer for certificates. If this service is stopped,
these
management services will not function properly. If this service is
disabled,
any services that explicitly depend on it will fail to start.

Dhcp: DHCP Client Manages network configuration by registering and
updating IP addresses and DNS names.

Dmserver: DCOM Server Process Launcher Provides launch functionality
for
DCOM services.

ERSvc: Error Reporting Service Allows error reporting for services and
applictions running in non-standard environments.

EventSystem: Event Log Enables event log messages issued by
Windows-based programs and components to be viewed in Event Viewer.
This
service cannot be stopped.

FastUserSwitchingCompatibility: Fast User Switching Compatibility
Provides
management for applications that require assistance in a multiple user
environment.

Helpsvc: Help and Support Enables Help and Support Center to run on
this computer. If this service is stopped, Help and Support Center will
be
unavailable. If this service is disabled, any services that explicitly
depend
on it will fail to start.

HidServ : HID Input Service Enables generic input access to Human
Interface Devices (HID), which activates and maintains the use of
predefined
hot buttons on keyboards, remote controls, and other multimedia
devices.
If
this service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Lanmanserver: Server Supports file, print, and named-pipe sharing
over the network for this computer. If this service is stopped, these
functions will be unavailable. If this service is disabled, any
services
that
explicitly depend on it will fail to start.

Lanmanworkstation:

Netman: Network Connections Manages objects in the Network and Dial-Up
Connections folder, in which you can view both local area network and
remote
connections.

NLA: Network Location Awareness (NLA) Collects and stores network
configuration and location information, and notifies applications when
this
information changes.

RasMan: Remote Access Connection Manager Creates a network connection.
Schedule

Seclogon: Secondary Logon Enables starting processes under alternate
credentials. If this service is stopped, this type of logon access will
be
unavailable.

SENS: System Event Notification Tracks system events such as Windows
logon, network, and power events. Notifies COM+ Event System
subscribers
of
these events.

SharedAccess: Windows Firewall/Internet Connection Sharing (ICS)
Provides
network address translation, addressing, name resolution and/or
intrusion
prevention services for a home or small office network.

ShellHWDetection: Shell Hardware Detection Provides notifications for
AutoPlay hardware events.

Srservice: System Restore Service Performs system restore functions. To
stop service, turn off System Restore from the System Restore tab in My
Computer->Properties

TapiSrv: Telephony Provides Telephony API (TAPI) support for programs
that control telephony devices and IP based voice connections on the
local
computer and, through the LAN, on servers that are also running the
service

Themes: Themes Provides user experience theme management.

TrkWks: Distributed Link Tracking Client Maintains links between NTFS
files within a computer or across computers in a network domain

W32Time: Windows Time Maintains date and time synchronization on all
clients
and servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.


Winmgmt: Windows Management Instrumentation Provides a common interface
and object model to access management information about operating
system,
devices, applications and services. If this service is stopped, most
Windows-based software will not function properly. If this service is
disabled, any services that explicitly depend on it will fail to start.
OR
Windows Management Instrumentation Driver Extensions Provides systems
management information to and from drivers.

Wuauserv: Workstation Creates and maintains client network
connections to remote servers. If this service is stopped, these
connections
will be unavailable. If this service is disabled, any services that
explicitly depend on it will fail to start.

WZCSVC: Security Center Monitors system security settings and
configurations

I have been trying to fix this issue....I have the NIS 2007 installed
as
virus/spyware protectio.....NORTON was NO help.

 

[db]

don't think that you need to delete it
just renaming it would be the idea
behind the fix.


i have not studied this particular file,
however, it is one of those files that
gets modified when needed, like the
registry.


windows has many safeguards in place.
and it seems reasonable that if it can
rebuild/replace prefetch files, or replace
a registry with one stored in a safe place,
then it is likely that the svchost.exe file
will be as well.

if you are still interested in additional
research, try searching this newsgroup
and windowsxp.general group with
a search criterion of svchost & db.

you will find the thread i mentioned
to you and maybe contact the genius
who found the solution to his problem
and shared it with us.....
If I Delete the .exe file....will a Windows Update from the website relpace it?

i don't have a direct comment.
however, i would like to offer
some information that I have
come across recently:


to my recollection the
issue with svchost has popped
here maybe on three or four threads.

fundamentally, it seems reasonable
that an update caused an issue
with this file recently and it is likely
that it affected similar machines
like yours and not others.

there was a solution discovered
by the first one who initially posted
an issue. he discovered that
renaming the file fixed the issue.

i haven't done any research
nor did i ask what exactly did
he do. but as a guess he may
have renamed that svchost.exe
file to something else like svchost.bak

you might want to try his discovery
as well. i don't think it would hurt
otherwise...

- db

Not Really....Good advise from the other posts...I am tryng the wuauclt.exe
route now...
It seems to have settled down when I turned it off....It is the Win XP auto
updater...
Does anybody have any coments about this?

have you found a solution to this problem? my desktop does the exact same
thing when i turn it on, freezes up for about 10mins the its fine. task mang
reading svchost.exe 99%

This is normal as the 'Show Process Tree' option is only available if you
change the default sort order of the listed processes. Click on help and
search on 'show process tree' for more info.

JS

Hey Thanks ....
I feel like I have finally found people willing to help!...
Thanks in advance to all who post!!!!

Now...The "show Process tree" is greyed out....any sugestions!

:

From Ramesh's web site: http://windowsxp.mvps.org/svchost.htm
Also: http://support.microsoft.com/?kbid=314056

To find out more about Svchost.exe entries try Process Explorer:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and 'Show Lower
Pane' options.
(This will provide the detailed info you need)
Next click/Expand the Svchost.exe process that you are interest in.
Then highlight one of the process listed under Svchost, right click and
from
the options listed select: google
This should display what out there on the web about that process.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

Below is what is under the scvhost that is causing the issue each time
I
boot
my computer. What items are not jiving...HELP PLEASE!

1st Boot
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 244"

Image Name PID Services
===============================
=============================================
svchost.exe 244
AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

C:\Documents and Settings<My Name>

2nd Boot - BITS is the only difference in the two boots
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 208"

Image Name PID Services
===============================
=============================================
svchost.exe 208
AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

BELOW IS A LIST OF THE ITEMS AND WHAT THEY ARE......

AudioSrv: Windows Audio Manages audio devices for Windows-based
programs. If this service is stopped, audio devices and effects will
not
function properly. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Browser Computer Browser Maintains an updated list of computers on the
network and supplies this list to computers designated as browsers. If
this
service is stopped, this list will not be updated or maintained. If
this
service is disabled, any services that explicitly depend on it will
fail
to
start

CryptSvc: Cryptographic Services Provides three management services:
Catalog Database Service, which confirms the signatures of Windows
files;
Protected Root Service, which adds and removes Trusted Root
Certification
Authority certificates from this computer; and Key Service, which helps
enroll this computer for certificates. If this service is stopped,
these
management services will not function properly. If this service is
disabled,
any services that explicitly depend on it will fail to start.

Dhcp: DHCP Client Manages network configuration by registering and
updating IP addresses and DNS names.

Dmserver: DCOM Server Process Launcher Provides launch functionality
for
DCOM services.

ERSvc: Error Reporting Service Allows error reporting for services and
applictions running in non-standard environments.

EventSystem: Event Log Enables event log messages issued by
Windows-based programs and components to be viewed in Event Viewer.
This
service cannot be stopped.

FastUserSwitchingCompatibility: Fast User Switching Compatibility
Provides
management for applications that require assistance in a multiple user
environment.

Helpsvc: Help and Support Enables Help and Support Center to run on
this computer. If this service is stopped, Help and Support Center will
be
unavailable. If this service is disabled, any services that explicitly
depend
on it will fail to start.

HidServ : HID Input Service Enables generic input access to Human
Interface Devices (HID), which activates and maintains the use of
predefined
hot buttons on keyboards, remote controls, and other multimedia
devices.
If
this service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Lanmanserver: Server Supports file, print, and named-pipe sharing
over the network for this computer. If this service is stopped, these
functions will be unavailable. If this service is disabled, any
services
that
explicitly depend on it will fail to start.

Lanmanworkstation:

Netman: Network Connections Manages objects in the Network and Dial-Up
Connections folder, in which you can view both local area network and
remote
connections.

NLA: Network Location Awareness (NLA) Collects and stores network
configuration and location information, and notifies applications when
this
information changes.

RasMan: Remote Access Connection Manager Creates a network connection.
Schedule

Seclogon: Secondary Logon Enables starting processes under alternate
credentials. If this service is stopped, this type of logon access will
be
unavailable.

SENS: System Event Notification Tracks system events such as Windows
logon, network, and power events. Notifies COM+ Event System
subscribers
of
these events.

SharedAccess: Windows Firewall/Internet Connection Sharing (ICS)
Provides
network address translation, addressing, name resolution and/or
intrusion
prevention services for a home or small office network.

ShellHWDetection: Shell Hardware Detection Provides notifications for
AutoPlay hardware events.

Srservice: System Restore Service Performs system restore functions. To
stop service, turn off System Restore from the System Restore tab in My
Computer->Properties

TapiSrv: Telephony Provides Telephony API (TAPI) support for programs
that control telephony devices and IP based voice connections on the
local
computer and, through the LAN, on servers that are also running the
service

Themes: Themes Provides user experience theme management.

TrkWks: Distributed Link Tracking Client Maintains links between NTFS
files within a computer or across computers in a network domain

W32Time: Windows Time Maintains date and time synchronization on all
clients
and servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.


Winmgmt: Windows Management Instrumentation Provides a common interface
and object model to access management information about operating
system,
devices, applications and services. If this service is stopped, most
Windows-based software will not function properly. If this service is
disabled, any services that explicitly depend on it will fail to start.
OR
Windows Management Instrumentation Driver Extensions Provides systems
management information to and from drivers.

Wuauserv: Workstation Creates and maintains client network
connections to remote servers. If this service is stopped, these
connections
will be unavailable. If this service is disabled, any services that
explicitly depend on it will fail to start.

WZCSVC: Security Center Monitors system security settings and
configurations

I have been trying to fix this issue....I have the NIS 2007 installed
as
virus/spyware protectio.....NORTON was NO help.

 

[Guest]

very helpful.
could this be why I cannot install any MS update downloads?
I have 38 critical downloads from the MS update site
that will not install.
I have used all MS resolutions (BITS and event log turn on)
they will now download but when it starts instaling it then says
38 updates failed?

don't think that you need to delete it
just renaming it would be the idea
behind the fix.


i have not studied this particular file,
however, it is one of those files that
gets modified when needed, like the
registry.


windows has many safeguards in place.
and it seems reasonable that if it can
rebuild/replace prefetch files, or replace
a registry with one stored in a safe place,
then it is likely that the svchost.exe file
will be as well.

if you are still interested in additional
research, try searching this newsgroup
and windowsxp.general group with
a search criterion of svchost & db.

you will find the thread i mentioned
to you and maybe contact the genius
who found the solution to his problem
and shared it with us.....
If I Delete the .exe file....will a Windows Update from the website relpace it?

i don't have a direct comment.
however, i would like to offer
some information that I have
come across recently:


to my recollection the
issue with svchost has popped
here maybe on three or four threads.

fundamentally, it seems reasonable
that an update caused an issue
with this file recently and it is likely
that it affected similar machines
like yours and not others.

there was a solution discovered
by the first one who initially posted
an issue. he discovered that
renaming the file fixed the issue.

i haven't done any research
nor did i ask what exactly did
he do. but as a guess he may
have renamed that svchost.exe
file to something else like svchost.bak

you might want to try his discovery
as well. i don't think it would hurt
otherwise...

- db

Not Really....Good advise from the other posts...I am tryng the wuauclt.exe
route now...
It seems to have settled down when I turned it off....It is the Win XP auto
updater...
Does anybody have any coments about this?

have you found a solution to this problem? my desktop does the exact same
thing when i turn it on, freezes up for about 10mins the its fine. task mang
reading svchost.exe 99%

:

This is normal as the 'Show Process Tree' option is only available if you
change the default sort order of the listed processes. Click on help and
search on 'show process tree' for more info.

JS

Hey Thanks ....
I feel like I have finally found people willing to help!...
Thanks in advance to all who post!!!!

Now...The "show Process tree" is greyed out....any sugestions!

:

From Ramesh's web site: http://windowsxp.mvps.org/svchost.htm
Also: http://support.microsoft.com/?kbid=314056

To find out more about Svchost.exe entries try Process Explorer:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and 'Show Lower
Pane' options.
(This will provide the detailed info you need)
Next click/Expand the Svchost.exe process that you are interest in.
Then highlight one of the process listed under Svchost, right click and
from
the options listed select: google
This should display what out there on the web about that process.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

Below is what is under the scvhost that is causing the issue each time
I
boot
my computer. What items are not jiving...HELP PLEASE!

1st Boot
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 244"

Image Name PID Services
========================= ======
=============================================
svchost.exe 244
AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

C:\Documents and Settings<My Name>

2nd Boot - BITS is the only difference in the two boots
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 208"

Image Name PID Services
========================= ======
=============================================
svchost.exe 208
AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

BELOW IS A LIST OF THE ITEMS AND WHAT THEY ARE......

AudioSrv: Windows Audio Manages audio devices for Windows-based
programs. If this service is stopped, audio devices and effects will
not
function properly. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Browser Computer Browser Maintains an updated list of computers on the
network and supplies this list to computers designated as browsers. If
this
service is stopped, this list will not be updated or maintained. If
this
service is disabled, any services that explicitly depend on it will
fail
to
start

CryptSvc: Cryptographic Services Provides three management services:
Catalog Database Service, which confirms the signatures of Windows
files;
Protected Root Service, which adds and removes Trusted Root
Certification
Authority certificates from this computer; and Key Service, which helps
enroll this computer for certificates. If this service is stopped,
these
management services will not function properly. If this service is
disabled,
any services that explicitly depend on it will fail to start.

Dhcp: DHCP Client Manages network configuration by registering and
updating IP addresses and DNS names.

Dmserver: DCOM Server Process Launcher Provides launch functionality
for
DCOM services.

ERSvc: Error Reporting Service Allows error reporting for services and
applictions running in non-standard environments.

EventSystem: Event Log Enables event log messages issued by
Windows-based programs and components to be viewed in Event Viewer.
This
service cannot be stopped.

FastUserSwitchingCompatibility: Fast User Switching Compatibility
Provides
management for applications that require assistance in a multiple user
environment.

Helpsvc: Help and Support Enables Help and Support Center to run on
this computer. If this service is stopped, Help and Support Center will
be
unavailable. If this service is disabled, any services that explicitly
depend
on it will fail to start.

HidServ : HID Input Service Enables generic input access to Human
Interface Devices (HID), which activates and maintains the use of
predefined
hot buttons on keyboards, remote controls, and other multimedia
devices.
If
this service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Lanmanserver: Server Supports file, print, and named-pipe sharing
over the network for this computer. If this service is stopped, these
functions will be unavailable. If this service is disabled, any
services
that
explicitly depend on it will fail to start.

Lanmanworkstation:

Netman: Network Connections Manages objects in the Network and Dial-Up
Connections folder, in which you can view both local area network and
remote
connections.

NLA: Network Location Awareness (NLA) Collects and stores network
configuration and location information, and notifies applications when
this
information changes.

RasMan: Remote Access Connection Manager Creates a network connection.
Schedule

Seclogon: Secondary Logon Enables starting processes under alternate
credentials. If this service is stopped, this type of logon access will
be
unavailable.

SENS: System Event Notification Tracks system events such as Windows
logon, network, and power events. Notifies COM+ Event System
subscribers
of
these events.

SharedAccess: Windows Firewall/Internet Connection Sharing (ICS)
Provides
network address translation, addressing, name resolution and/or
intrusion
prevention services for a home or small office network.

ShellHWDetection: Shell Hardware Detection Provides notifications for
AutoPlay hardware events.

Srservice: System Restore Service Performs system restore functions. To
stop service, turn off System Restore from the System Restore tab in My
Computer->Properties

TapiSrv: Telephony Provides Telephony API (TAPI) support for programs
that control telephony devices and IP based voice connections on the
local
computer and, through the LAN, on servers that are also running the
service

Themes: Themes Provides user experience theme management.

TrkWks: Distributed Link Tracking Client Maintains links between NTFS

 

[kdfake]

yeha sounds like the same problem

there are some tools to repair windows update you will find them if you search google.

also search for this problema nd patch on microsoft

 

[db]

glad it helped you

but the magic behind the
fix is microsoft's secret.
i only remember the trick
and i can only extrapolate the
logic that may be used for it.

as far as the failed updates, that
is another trick and different animal.

as you may know there is "free" tech
support from a certified technician
for any issues involving updates. the
process to create a support ticket is
embedded neatly via their update webpage.

however, on occasion i get
errors with updating. so i
made my own windows update
fix batch file called wuf.bat
with the following:

regsvr32 jscript.dll
regsvr32 wuapi.dll
regsvr32 wuaueng.dll
regsvr32 wuaueng1.dll
regsvr32 wucltui.dll
regsvr32 wups.dll
regsvr32 wups2.dll
regsvr32 wuweb.dll

so if i get somekind of an error
when i do a manual update, i simply
run the above and it usually resolves
the "unable to update" issue.


- db
very helpful.
could this be why I cannot install any MS update downloads?
I have 38 critical downloads from the MS update site
that will not install.
I have used all MS resolutions (BITS and event log turn on)
they will now download but when it starts instaling it then says
38 updates failed?

don't think that you need to delete it
just renaming it would be the idea
behind the fix.


i have not studied this particular file,
however, it is one of those files that
gets modified when needed, like the
registry.


windows has many safeguards in place.
and it seems reasonable that if it can
rebuild/replace prefetch files, or replace
a registry with one stored in a safe place,
then it is likely that the svchost.exe file
will be as well.

if you are still interested in additional
research, try searching this newsgroup
and windowsxp.general group with
a search criterion of svchost & db.

you will find the thread i mentioned
to you and maybe contact the genius
who found the solution to his problem
and shared it with us.....
If I Delete the .exe file....will a Windows Update from the website relpace it?

i don't have a direct comment.
however, i would like to offer
some information that I have
come across recently:


to my recollection the
issue with svchost has popped
here maybe on three or four threads.

fundamentally, it seems reasonable
that an update caused an issue
with this file recently and it is likely
that it affected similar machines
like yours and not others.

there was a solution discovered
by the first one who initially posted
an issue. he discovered that
renaming the file fixed the issue.

i haven't done any research
nor did i ask what exactly did
he do. but as a guess he may
have renamed that svchost.exe
file to something else like svchost.bak

you might want to try his discovery
as well. i don't think it would hurt
otherwise...

- db

Not Really....Good advise from the other posts...I am tryng the wuauclt.exe
route now...
It seems to have settled down when I turned it off....It is the Win XP auto
updater...
Does anybody have any coments about this?

have you found a solution to this problem? my desktop does the exact same
thing when i turn it on, freezes up for about 10mins the its fine. task mang
reading svchost.exe 99%

:

This is normal as the 'Show Process Tree' option is only available if you
change the default sort order of the listed processes. Click on help and
search on 'show process tree' for more info.

JS

Hey Thanks ....
I feel like I have finally found people willing to help!...
Thanks in advance to all who post!!!!

Now...The "show Process tree" is greyed out....any sugestions!

:

From Ramesh's web site: http://windowsxp.mvps.org/svchost.htm
Also: http://support.microsoft.com/?kbid=314056

To find out more about Svchost.exe entries try Process Explorer:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and 'Show Lower
Pane' options.
(This will provide the detailed info you need)
Next click/Expand the Svchost.exe process that you are interest in.
Then highlight one of the process listed under Svchost, right click and
from
the options listed select: google
This should display what out there on the web about that process.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

Below is what is under the scvhost that is causing the issue each time
I
boot
my computer. What items are not jiving...HELP PLEASE!

1st Boot
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 244"

Image Name PID Services
===============================
=============================================
svchost.exe 244
AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

C:\Documents and Settings<My Name>

2nd Boot - BITS is the only difference in the two boots
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 208"

Image Name PID Services
===============================
=============================================
svchost.exe 208
AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

BELOW IS A LIST OF THE ITEMS AND WHAT THEY ARE......

AudioSrv: Windows Audio Manages audio devices for Windows-based
programs. If this service is stopped, audio devices and effects will
not
function properly. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Browser Computer Browser Maintains an updated list of computers on the
network and supplies this list to computers designated as browsers. If
this
service is stopped, this list will not be updated or maintained. If
this
service is disabled, any services that explicitly depend on it will
fail
to
start

CryptSvc: Cryptographic Services Provides three management services:
Catalog Database Service, which confirms the signatures of Windows
files;
Protected Root Service, which adds and removes Trusted Root
Certification
Authority certificates from this computer; and Key Service, which helps
enroll this computer for certificates. If this service is stopped,
these
management services will not function properly. If this service is
disabled,
any services that explicitly depend on it will fail to start.

Dhcp: DHCP Client Manages network configuration by registering and
updating IP addresses and DNS names.

Dmserver: DCOM Server Process Launcher Provides launch functionality
for
DCOM services.

ERSvc: Error Reporting Service Allows error reporting for services and
applictions running in non-standard environments.

EventSystem: Event Log Enables event log messages issued by
Windows-based programs and components to be viewed in Event Viewer.
This
service cannot be stopped.

FastUserSwitchingCompatibility: Fast User Switching Compatibility
Provides
management for applications that require assistance in a multiple user
environment.

Helpsvc: Help and Support Enables Help and Support Center to run on
this computer. If this service is stopped, Help and Support Center will
be
unavailable. If this service is disabled, any services that explicitly
depend
on it will fail to start.

HidServ : HID Input Service Enables generic input access to Human
Interface Devices (HID), which activates and maintains the use of
predefined
hot buttons on keyboards, remote controls, and other multimedia
devices.
If
this service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Lanmanserver: Server Supports file, print, and named-pipe sharing
over the network for this computer. If this service is stopped, these
functions will be unavailable. If this service is disabled, any
services
that
explicitly depend on it will fail to start.

Lanmanworkstation:

Netman: Network Connections Manages objects in the Network and Dial-Up
Connections folder, in which you can view both local area network and
remote
connections.

NLA: Network Location Awareness (NLA) Collects and stores network
configuration and location information, and notifies applications when
this
information changes.

RasMan: Remote Access Connection Manager Creates a network connection.
Schedule

Seclogon: Secondary Logon Enables starting processes under alternate
credentials. If this service is stopped, this type of logon access will
be
unavailable.

SENS: System Event Notification Tracks system events such as Windows
logon, network, and power events. Notifies COM+ Event System
subscribers
of
these events.

SharedAccess: Windows Firewall/Internet Connection Sharing (ICS)
Provides
network address translation, addressing, name resolution and/or
intrusion
prevention services for a home or small office network.

ShellHWDetection: Shell Hardware Detection Provides notifications for
AutoPlay hardware events.

Srservice: System Restore Service Performs system restore functions. To
stop service, turn off System Restore from the System Restore tab in My
Computer->Properties

TapiSrv: Telephony Provides Telephony API (TAPI) support for programs
that control telephony devices and IP based voice connections on the
local
computer and, through the LAN, on servers that are also running the
service

Themes: Themes Provides user experience theme management.

TrkWks: Distributed Link Tracking Client Maintains links between NTFS

 

[db]

glad it helped you

but the magic behind the
fix is Microsoft's secret.
i only remember the trick
and i can only extrapolate the
logic that may be used for it.

as far as the failed updates, that
is another trick and different animal.

as you may know there is "free" tech
support from a certified technician
for any issues involving updates. the
process to create a support ticket is
embedded neatly via their update webpage.

however, on occasion i get
errors with updating. so i
made my own windows update
fix batch file called wuf.bat
with the following:

regsvr32 jscript.dll
regsvr32 wuapi.dll
regsvr32 wuaueng.dll
regsvr32 wuaueng1.dll
regsvr32 wucltui.dll
regsvr32 wups.dll
regsvr32 wups2.dll
regsvr32 wuweb.dll

so if i get somekind of an error
when i do a manual update, i simply
run the above and it usually resolves
the "unable to update" issue.


- db
very helpful.
could this be why I cannot install any MS update downloads?
I have 38 critical downloads from the MS update site
that will not install.
I have used all MS resolutions (BITS and event log turn on)
they will now download but when it starts instaling it then says
38 updates failed?

don't think that you need to delete it
just renaming it would be the idea
behind the fix.


i have not studied this particular file,
however, it is one of those files that
gets modified when needed, like the
registry.


windows has many safeguards in place.
and it seems reasonable that if it can
rebuild/replace prefetch files, or replace
a registry with one stored in a safe place,
then it is likely that the svchost.exe file
will be as well.

if you are still interested in additional
research, try searching this newsgroup
and windowsxp.general group with
a search criterion of svchost & db.

you will find the thread i mentioned
to you and maybe contact the genius
who found the solution to his problem
and shared it with us.....
If I Delete the .exe file....will a Windows Update from the website relpace it?

i don't have a direct comment.
however, i would like to offer
some information that I have
come across recently:


to my recollection the
issue with svchost has popped
here maybe on three or four threads.

fundamentally, it seems reasonable
that an update caused an issue
with this file recently and it is likely
that it affected similar machines
like yours and not others.

there was a solution discovered
by the first one who initially posted
an issue. he discovered that
renaming the file fixed the issue.

i haven't done any research
nor did i ask what exactly did
he do. but as a guess he may
have renamed that svchost.exe
file to something else like svchost.bak

you might want to try his discovery
as well. i don't think it would hurt
otherwise...

- db

Not Really....Good advise from the other posts...I am tryng the wuauclt.exe
route now...
It seems to have settled down when I turned it off....It is the Win XP auto
updater...
Does anybody have any coments about this?

have you found a solution to this problem? my desktop does the exact same
thing when i turn it on, freezes up for about 10mins the its fine. task mang
reading svchost.exe 99%

:

This is normal as the 'Show Process Tree' option is only available if you
change the default sort order of the listed processes. Click on help and
search on 'show process tree' for more info.

JS

Hey Thanks ....
I feel like I have finally found people willing to help!...
Thanks in advance to all who post!!!!

Now...The "show Process tree" is greyed out....any sugestions!

:

From Ramesh's web site: http://windowsxp.mvps.org/svchost.htm
Also: http://support.microsoft.com/?kbid=314056

To find out more about Svchost.exe entries try Process Explorer:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and 'Show Lower
Pane' options.
(This will provide the detailed info you need)
Next click/Expand the Svchost.exe process that you are interest in.
Then highlight one of the process listed under Svchost, right click and
from
the options listed select: google
This should display what out there on the web about that process.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

Below is what is under the scvhost that is causing the issue each time
I
boot
my computer. What items are not jiving...HELP PLEASE!

1st Boot
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 244"

Image Name PID Services
===============================
=============================================
svchost.exe 244
AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

C:\Documents and Settings<My Name>

2nd Boot - BITS is the only difference in the two boots
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 208"

Image Name PID Services
===============================
=============================================
svchost.exe 208
AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

BELOW IS A LIST OF THE ITEMS AND WHAT THEY ARE......

AudioSrv: Windows Audio Manages audio devices for Windows-based
programs. If this service is stopped, audio devices and effects will
not
function properly. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Browser Computer Browser Maintains an updated list of computers on the
network and supplies this list to computers designated as browsers. If
this
service is stopped, this list will not be updated or maintained. If
this
service is disabled, any services that explicitly depend on it will
fail
to
start

CryptSvc: Cryptographic Services Provides three management services:
Catalog Database Service, which confirms the signatures of Windows
files;
Protected Root Service, which adds and removes Trusted Root
Certification
Authority certificates from this computer; and Key Service, which helps
enroll this computer for certificates. If this service is stopped,
these
management services will not function properly. If this service is
disabled,
any services that explicitly depend on it will fail to start.

Dhcp: DHCP Client Manages network configuration by registering and
updating IP addresses and DNS names.

Dmserver: DCOM Server Process Launcher Provides launch functionality
for
DCOM services.

ERSvc: Error Reporting Service Allows error reporting for services and
applictions running in non-standard environments.

EventSystem: Event Log Enables event log messages issued by
Windows-based programs and components to be viewed in Event Viewer.
This
service cannot be stopped.

FastUserSwitchingCompatibility: Fast User Switching Compatibility
Provides
management for applications that require assistance in a multiple user
environment.

Helpsvc: Help and Support Enables Help and Support Center to run on
this computer. If this service is stopped, Help and Support Center will
be
unavailable. If this service is disabled, any services that explicitly
depend
on it will fail to start.

HidServ : HID Input Service Enables generic input access to Human
Interface Devices (HID), which activates and maintains the use of
predefined
hot buttons on keyboards, remote controls, and other multimedia
devices.
If
this service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Lanmanserver: Server Supports file, print, and named-pipe sharing
over the network for this computer. If this service is stopped, these
functions will be unavailable. If this service is disabled, any
services
that
explicitly depend on it will fail to start.

Lanmanworkstation:

Netman: Network Connections Manages objects in the Network and Dial-Up
Connections folder, in which you can view both local area network and
remote
connections.

NLA: Network Location Awareness (NLA) Collects and stores network
configuration and location information, and notifies applications when
this
information changes.

RasMan: Remote Access Connection Manager Creates a network connection.
Schedule

Seclogon: Secondary Logon Enables starting processes under alternate
credentials. If this service is stopped, this type of logon access will
be
unavailable.

SENS: System Event Notification Tracks system events such as Windows
logon, network, and power events. Notifies COM+ Event System
subscribers
of
these events.

SharedAccess: Windows Firewall/Internet Connection Sharing (ICS)
Provides
network address translation, addressing, name resolution and/or
intrusion
prevention services for a home or small office network.

ShellHWDetection: Shell Hardware Detection Provides notifications for
AutoPlay hardware events.

Srservice: System Restore Service Performs system restore functions. To
stop service, turn off System Restore from the System Restore tab in My
Computer->Properties

TapiSrv: Telephony Provides Telephony API (TAPI) support for programs
that control telephony devices and IP based voice connections on the
local
computer and, through the LAN, on servers that are also running the
service

Themes: Themes Provides user experience theme management.

TrkWks: Distributed Link Tracking Client Maintains links between NTFS

 

[Guest]

the problem showed up on my computer following an automatic windows update.
when scvhost kicks in it uses 100% of the CPU and nearly shuts down the
computer. MS does not have an update to fix this. In the meantime I go
into Windows Task Manager (Ctrl-Alt-Delete) when the computer boots up and
under Processes I find the file scvhost with the large memory and I delete
it. The computer then runs normal until it is turned off. During the day I
just use the "sleep" button to avoid having to delete it again.

don't think that you need to delete it
just renaming it would be the idea
behind the fix.


i have not studied this particular file,
however, it is one of those files that
gets modified when needed, like the
registry.


windows has many safeguards in place.
and it seems reasonable that if it can
rebuild/replace prefetch files, or replace
a registry with one stored in a safe place,
then it is likely that the svchost.exe file
will be as well.

if you are still interested in additional
research, try searching this newsgroup
and windowsxp.general group with
a search criterion of svchost & db.

you will find the thread i mentioned
to you and maybe contact the genius
who found the solution to his problem
and shared it with us.....
If I Delete the .exe file....will a Windows Update from the website relpace it?

i don't have a direct comment.
however, i would like to offer
some information that I have
come across recently:


to my recollection the
issue with svchost has popped
here maybe on three or four threads.

fundamentally, it seems reasonable
that an update caused an issue
with this file recently and it is likely
that it affected similar machines
like yours and not others.

there was a solution discovered
by the first one who initially posted
an issue. he discovered that
renaming the file fixed the issue.

i haven't done any research
nor did i ask what exactly did
he do. but as a guess he may
have renamed that svchost.exe
file to something else like svchost.bak

you might want to try his discovery
as well. i don't think it would hurt
otherwise...

- db

Not Really....Good advise from the other posts...I am tryng the wuauclt.exe
route now...
It seems to have settled down when I turned it off....It is the Win XP auto
updater...
Does anybody have any coments about this?

have you found a solution to this problem? my desktop does the exact same
thing when i turn it on, freezes up for about 10mins the its fine. task mang
reading svchost.exe 99%

:

This is normal as the 'Show Process Tree' option is only available if you
change the default sort order of the listed processes. Click on help and
search on 'show process tree' for more info.

JS

Hey Thanks ....
I feel like I have finally found people willing to help!...
Thanks in advance to all who post!!!!

Now...The "show Process tree" is greyed out....any sugestions!

:

From Ramesh's web site: http://windowsxp.mvps.org/svchost.htm
Also: http://support.microsoft.com/?kbid=314056

To find out more about Svchost.exe entries try Process Explorer:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and 'Show Lower
Pane' options.
(This will provide the detailed info you need)
Next click/Expand the Svchost.exe process that you are interest in.
Then highlight one of the process listed under Svchost, right click and
from
the options listed select: google
This should display what out there on the web about that process.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

Below is what is under the scvhost that is causing the issue each time
I
boot
my computer. What items are not jiving...HELP PLEASE!

1st Boot
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 244"

Image Name PID Services
========================= ======
=============================================
svchost.exe 244
AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

C:\Documents and Settings<My Name>

2nd Boot - BITS is the only difference in the two boots
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 208"

Image Name PID Services
========================= ======
=============================================
svchost.exe 208
AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

BELOW IS A LIST OF THE ITEMS AND WHAT THEY ARE......

AudioSrv: Windows Audio Manages audio devices for Windows-based
programs. If this service is stopped, audio devices and effects will
not
function properly. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Browser Computer Browser Maintains an updated list of computers on the
network and supplies this list to computers designated as browsers. If
this
service is stopped, this list will not be updated or maintained. If
this
service is disabled, any services that explicitly depend on it will
fail
to
start

CryptSvc: Cryptographic Services Provides three management services:
Catalog Database Service, which confirms the signatures of Windows
files;
Protected Root Service, which adds and removes Trusted Root
Certification
Authority certificates from this computer; and Key Service, which helps
enroll this computer for certificates. If this service is stopped,
these
management services will not function properly. If this service is
disabled,
any services that explicitly depend on it will fail to start.

Dhcp: DHCP Client Manages network configuration by registering and
updating IP addresses and DNS names.

Dmserver: DCOM Server Process Launcher Provides launch functionality
for
DCOM services.

ERSvc: Error Reporting Service Allows error reporting for services and
applictions running in non-standard environments.

EventSystem: Event Log Enables event log messages issued by
Windows-based programs and components to be viewed in Event Viewer.
This
service cannot be stopped.

FastUserSwitchingCompatibility: Fast User Switching Compatibility
Provides
management for applications that require assistance in a multiple user
environment.

Helpsvc: Help and Support Enables Help and Support Center to run on
this computer. If this service is stopped, Help and Support Center will
be
unavailable. If this service is disabled, any services that explicitly
depend
on it will fail to start.

HidServ : HID Input Service Enables generic input access to Human
Interface Devices (HID), which activates and maintains the use of
predefined
hot buttons on keyboards, remote controls, and other multimedia
devices.
If
this service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Lanmanserver: Server Supports file, print, and named-pipe sharing
over the network for this computer. If this service is stopped, these
functions will be unavailable. If this service is disabled, any
services
that
explicitly depend on it will fail to start.

Lanmanworkstation:

Netman: Network Connections Manages objects in the Network and Dial-Up
Connections folder, in which you can view both local area network and
remote
connections.

NLA: Network Location Awareness (NLA) Collects and stores network
configuration and location information, and notifies applications when
this
information changes.

RasMan: Remote Access Connection Manager Creates a network connection.
Schedule

Seclogon: Secondary Logon Enables starting processes under alternate
credentials. If this service is stopped, this type of logon access will
be
unavailable.

SENS: System Event Notification Tracks system events such as Windows
logon, network, and power events. Notifies COM+ Event System
subscribers
of
these events.

SharedAccess: Windows Firewall/Internet Connection Sharing (ICS)
Provides
network address translation, addressing, name resolution and/or
intrusion
prevention services for a home or small office network.

ShellHWDetection: Shell Hardware Detection Provides notifications for
AutoPlay hardware events.

Srservice: System Restore Service Performs system restore functions. To
stop service, turn off System Restore from the System Restore tab in My
Computer->Properties

TapiSrv: Telephony Provides Telephony API (TAPI) support for programs
that control telephony devices and IP based voice connections on the
local
computer and, through the LAN, on servers that are also running the
service

Themes: Themes Provides user experience theme management.

TrkWks: Distributed Link Tracking Client Maintains links between NTFS

 

[guzarva]

don't think that you need to delete it
just renaming it would be the idea
behind the fix.


i have not studied this particular file,
however, it is one of those files that
gets modified when needed, like the
registry.


windows has many safeguards in place.
and it seems reasonable that if it can
rebuild/replace prefetch files, or replace
a registry with one stored in a safe place,
then it is likely that the svchost.exe file
will be as well.

if you are still interested in additional
research, try searching this newsgroup
and windowsxp.general group with
a search criterion of svchost & db.

you will find the thread i mentioned
to you and maybe contact the genius
who found the solution to his problem
and shared it with us.....
If I Delete the .exe file....will a Windows Update from the website relpace it?

i don't have a direct comment.
however, i would like to offer
some information that I have
come across recently:


to my recollection the
issue with svchost has popped
here maybe on three or four threads.

fundamentally, it seems reasonable
that an update caused an issue
with this file recently and it is likely
that it affected similar machines
like yours and not others.

there was a solution discovered
by the first one who initially posted
an issue. he discovered that
renaming the file fixed the issue.

i haven't done any research
nor did i ask what exactly did
he do. but as a guess he may
have renamed that svchost.exe
file to something else like svchost.bak

you might want to try his discovery
as well. i don't think it would hurt
otherwise...

- db

Not Really....Good advise from the other posts...I am tryng the wuauclt.exe
route now...
It seems to have settled down when I turned it off....It is the Win XP auto
updater...
Does anybody have any coments about this?

have you found a solution to this problem? my desktop does the exact same
thing when i turn it on, freezes up for about 10mins the its fine. task mang
reading svchost.exe 99%

:

This is normal as the 'Show Process Tree' option is only available if you
change the default sort order of the listed processes. Click on help and
search on 'show process tree' for more info.

JS

Hey Thanks ....
I feel like I have finally found people willing to help!...
Thanks in advance to all who post!!!!

Now...The "show Process tree" is greyed out....any sugestions!

:

From Ramesh's web site: http://windowsxp.mvps.org/svchost.htm
Also: http://support.microsoft.com/?kbid=314056

To find out more about Svchost.exe entries try Process Explorer:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and 'Show Lower
Pane' options.
(This will provide the detailed info you need)
Next click/Expand the Svchost.exe process that you are interest in.
Then highlight one of the process listed under Svchost, right click and
from
the options listed select: google
This should display what out there on the web about that process.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

Below is what is under the scvhost that is causing the issue each time
I
boot
my computer. What items are not jiving...HELP PLEASE!

1st Boot
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 244"

Image Name PID Services
========================= ======
=============================================
svchost.exe 244
AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

C:\Documents and Settings<My Name>

2nd Boot - BITS is the only difference in the two boots
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 208"

Image Name PID Services
========================= ======
=============================================
svchost.exe 208
AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

BELOW IS A LIST OF THE ITEMS AND WHAT THEY ARE......

AudioSrv: Windows Audio Manages audio devices for Windows-based
programs. If this service is stopped, audio devices and effects will
not
function properly. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Browser Computer Browser Maintains an updated list of computers on the
network and supplies this list to computers designated as browsers. If
this
service is stopped, this list will not be updated or maintained. If
this
service is disabled, any services that explicitly depend on it will
fail
to
start

CryptSvc: Cryptographic Services Provides three management services:
Catalog Database Service, which confirms the signatures of Windows
files;
Protected Root Service, which adds and removes Trusted Root
Certification
Authority certificates from this computer; and Key Service, which helps
enroll this computer for certificates. If this service is stopped,
these
management services will not function properly. If this service is
disabled,
any services that explicitly depend on it will fail to start.

Dhcp: DHCP Client Manages network configuration by registering and
updating IP addresses and DNS names.

Dmserver: DCOM Server Process Launcher Provides launch functionality
for
DCOM services.

ERSvc: Error Reporting Service Allows error reporting for services and
applictions running in non-standard environments.

EventSystem: Event Log Enables event log messages issued by
Windows-based programs and components to be viewed in Event Viewer.
This
service cannot be stopped.

FastUserSwitchingCompatibility: Fast User Switching Compatibility
Provides
management for applications that require assistance in a multiple user
environment.

Helpsvc: Help and Support Enables Help and Support Center to run on
this computer. If this service is stopped, Help and Support Center will
be
unavailable. If this service is disabled, any services that explicitly
depend
on it will fail to start.

HidServ : HID Input Service Enables generic input access to Human
Interface Devices (HID), which activates and maintains the use of
predefined
hot buttons on keyboards, remote controls, and other multimedia
devices.
If
this service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Lanmanserver: Server Supports file, print, and named-pipe sharing
over the network for this computer. If this service is stopped, these
functions will be unavailable. If this service is disabled, any
services
that
explicitly depend on it will fail to start.

Lanmanworkstation:

Netman: Network Connections Manages objects in the Network and Dial-Up
Connections folder, in which you can view both local area network and
remote
connections.

NLA: Network Location Awareness (NLA) Collects and stores network
configuration and location information, and notifies applications when
this
information changes.

RasMan: Remote Access Connection Manager Creates a network connection.
Schedule

Seclogon: Secondary Logon Enables starting processes under alternate
credentials. If this service is stopped, this type of logon access will
be
unavailable.

SENS: System Event Notification Tracks system events such as Windows
logon, network, and power events. Notifies COM+ Event System
subscribers
of
these events.

SharedAccess: Windows Firewall/Internet Connection Sharing (ICS)
Provides
network address translation, addressing, name resolution and/or
intrusion
prevention services for a home or small office network.

ShellHWDetection: Shell Hardware Detection Provides notifications for
AutoPlay hardware events.

Srservice: System Restore Service Performs system restore functions. To
stop service, turn off System Restore from the System Restore tab in My
Computer->Properties

TapiSrv: Telephony Provides Telephony API (TAPI) support for programs
that control telephony devices and IP based voice connections on the
local
computer and, through the LAN, on servers that are also running the
service

Themes: Themes Provides user experience theme management.

TrkWks: Distributed Link Tracking Client Maintains links between NTFS

 

[guzarva]

From Ramesh's web site: http://windowsxp.mvps.org/svchost.htm
Also: http://support.microsoft.com/?kbid=314056

To find out more about Svchost.exe entries try Process Explorer:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and 'Show Lower
Pane' options.
(This will provide the detailed info you need)
Next click/Expand the Svchost.exe process that you are interest in.
Then highlight one of the process listed under Svchost, right click and from
the options listed select: google
This should display what out there on the web about that process.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

Below is what is under the scvhost that is causing the issue each time I
boot
my computer. What items are not jiving...HELP PLEASE!

1st Boot
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ SVCHO
ST.EXE" /FI "PID EQ 244"

Image Name PID Services
========================= ======
=============================================
svchost.exe 244
AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
HidServ, lanmanserver, lanmanworkstation,
Netman, Nla, RasMan, Schedule, seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

C:\Documents and Settings<My Name>

2nd Boot - BITS is the only difference in the two boots
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ SVCHO
ST.EXE" /FI "PID EQ 208"

Image Name PID Services
========================= ======
=============================================
svchost.exe 208
AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
HidServ, lanmanserver, lanmanworkstation,
Netman, Nla, RasMan, Schedule, seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

BELOW IS A LIST OF THE ITEMS AND WHAT THEY ARE......

AudioSrv: Windows Audio Manages audio devices for Windows-based
programs. If this service is stopped, audio devices and effects will not
function properly. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Browser Computer Browser Maintains an updated list of computers on the
network and supplies this list to computers designated as browsers. If
this
service is stopped, this list will not be updated or maintained. If this
service is disabled, any services that explicitly depend on it will fail
to
start

CryptSvc: Cryptographic Services Provides three management services:
Catalog Database Service, which confirms the signatures of Windows files;
Protected Root Service, which adds and removes Trusted Root Certification
Authority certificates from this computer; and Key Service, which helps
enroll this computer for certificates. If this service is stopped, these
management services will not function properly. If this service is
disabled,
any services that explicitly depend on it will fail to start.

Dhcp: DHCP Client Manages network configuration by registering and
updating IP addresses and DNS names.

Dmserver: DCOM Server Process Launcher Provides launch functionality for
DCOM services.

ERSvc: Error Reporting Service Allows error reporting for services and
applictions running in non-standard environments.

EventSystem: Event Log Enables event log messages issued by
Windows-based programs and components to be viewed in Event Viewer. This
service cannot be stopped.

FastUserSwitchingCompatibility: Fast User Switching Compatibility Provides
management for applications that require assistance in a multiple user
environment.

Helpsvc: Help and Support Enables Help and Support Center to run on
this computer. If this service is stopped, Help and Support Center will be
unavailable. If this service is disabled, any services that explicitly
depend
on it will fail to start.

HidServ : HID Input Service Enables generic input access to Human
Interface Devices (HID), which activates and maintains the use of
predefined
hot buttons on keyboards, remote controls, and other multimedia devices.
If
this service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that explicitly
depend on it will fail to start.

Lanmanserver: Server Supports file, print, and named-pipe sharing
over the network for this computer. If this service is stopped, these
functions will be unavailable. If this service is disabled, any services
that
explicitly depend on it will fail to start.

Lanmanworkstation:

Netman: Network Connections Manages objects in the Network and Dial-Up
Connections folder, in which you can view both local area network and
remote
connections.

NLA: Network Location Awareness (NLA) Collects and stores network
configuration and location information, and notifies applications when
this
information changes.

RasMan: Remote Access Connection Manager Creates a network connection.
Schedule

Seclogon: Secondary Logon Enables starting processes under alternate
credentials. If this service is stopped, this type of logon access will be
unavailable.

SENS: System Event Notification Tracks system events such as Windows
logon, network, and power events. Notifies COM+ Event System subscribers
of
these events.

SharedAccess: Windows Firewall/Internet Connection Sharing (ICS) Provides
network address translation, addressing, name resolution and/or intrusion
prevention services for a home or small office network.

ShellHWDetection: Shell Hardware Detection Provides notifications for
AutoPlay hardware events.

Srservice: System Restore Service Performs system restore functions. To
stop service, turn off System Restore from the System Restore tab in My
Computer->Properties

TapiSrv: Telephony Provides Telephony API (TAPI) support for programs
that control telephony devices and IP based voice connections on the local
computer and, through the LAN, on servers that are also running the
service

Themes: Themes Provides user experience theme management.

TrkWks: Distributed Link Tracking Client Maintains links between NTFS
files within a computer or across computers in a network domain

W32Time: Windows Time Maintains date and time synchronization on all
clients
and servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.


Winmgmt: Windows Management Instrumentation Provides a common interface
and object model to access management information about operating system,
devices, applications and services. If this service is stopped, most
Windows-based software will not function properly. If this service is
disabled, any services that explicitly depend on it will fail to start.
OR
Windows Management Instrumentation Driver Extensions Provides systems
management information to and from drivers.

Wuauserv: Workstation Creates and maintains client network
connections to remote servers. If this service is stopped, these
connections
will be unavailable. If this service is disabled, any services that
explicitly depend on it will fail to start.

WZCSVC: Security Center Monitors system security settings and
configurations

I have been trying to fix this issue....I have the NIS 2007 installed as
virus/spyware protectio.....NORTON was NO help.

 

[Ant.]

I have myself discovered a few malware programs that hide behind or replace
svchost.exe

Another problem is that there may be bad registry entries that put you into
a loop.

Suggest all of the following (freeware) programs:

SDFIX
AVG Free 8.5
Spybot Search and Destroy
SuperAntiSpyware
Trojan Remover (wonderful, needs registering after 30 days)
CCleaner

Sorry, can't be bothered to add links, do your own searches

I run AVG as well as SuperAntiVirus, and re-install Trojan Remover if the
previous don't work. CCleaner and Spybot as needed. Don't like Norton's,
MacAfee is too expensive for an unemployed person Above should do all
you need. I'd pay for Trojan Remover if I had any money lol

Regards
--
Ant. Thompson
Darwin, Australia

glad it helped you

but the magic behind the
fix is Microsoft's secret.
i only remember the trick
and i can only extrapolate the
logic that may be used for it.

as far as the failed updates, that
is another trick and different animal.

as you may know there is "free" tech
support from a certified technician
for any issues involving updates. the
process to create a support ticket is
embedded neatly via their update webpage.

however, on occasion i get
errors with updating. so i
made my own windows update
fix batch file called wuf.bat
with the following:

regsvr32 jscript.dll
regsvr32 wuapi.dll
regsvr32 wuaueng.dll
regsvr32 wuaueng1.dll
regsvr32 wucltui.dll
regsvr32 wups.dll
regsvr32 wups2.dll
regsvr32 wuweb.dll

so if i get somekind of an error
when i do a manual update, i simply
run the above and it usually resolves
the "unable to update" issue.


- db
very helpful.
could this be why I cannot install any MS update downloads?
I have 38 critical downloads from the MS update site
that will not install.
I have used all MS resolutions (BITS and event log turn on)
they will now download but when it starts instaling it then says
38 updates failed?

don't think that you need to delete it
just renaming it would be the idea
behind the fix.


i have not studied this particular file,
however, it is one of those files that
gets modified when needed, like the
registry.


windows has many safeguards in place.
and it seems reasonable that if it can
rebuild/replace prefetch files, or replace
a registry with one stored in a safe place,
then it is likely that the svchost.exe file
will be as well.

if you are still interested in additional
research, try searching this newsgroup
and windowsxp.general group with
a search criterion of svchost & db.

you will find the thread i mentioned
to you and maybe contact the genius
who found the solution to his problem
and shared it with us.....
If I Delete the .exe file....will a Windows Update from the website relpace it?

i don't have a direct comment.
however, i would like to offer
some information that I have
come across recently:


to my recollection the
issue with svchost has popped
here maybe on three or four threads.

fundamentally, it seems reasonable
that an update caused an issue
with this file recently and it is likely
that it affected similar machines
like yours and not others.

there was a solution discovered
by the first one who initially posted
an issue. he discovered that
renaming the file fixed the issue.

i haven't done any research
nor did i ask what exactly did
he do. but as a guess he may
have renamed that svchost.exe
file to something else like svchost.bak

you might want to try his discovery
as well. i don't think it would hurt
otherwise...

- db

Not Really....Good advise from the other posts...I am tryng the wuauclt.exe
route now...
It seems to have settled down when I turned it off....It is the Win XP auto
updater...
Does anybody have any coments about this?

:

have you found a solution to this problem? my desktop does the exact same
thing when i turn it on, freezes up for about 10mins the its fine. task mang
reading svchost.exe 99%

:

This is normal as the 'Show Process Tree' option is only available if you
change the default sort order of the listed processes. Click on help and
search on 'show process tree' for more info.

JS

Hey Thanks ....
I feel like I have finally found people willing to help!...
Thanks in advance to all who post!!!!

Now...The "show Process tree" is greyed out....any sugestions!

:

From Ramesh's web site: http://windowsxp.mvps.org/svchost.htm
Also: http://support.microsoft.com/?kbid=314056

To find out more about Svchost.exe entries try Process Explorer:
http://www.microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

Once you have Process Explorer installed and running:
In the taskbar select View and check 'Show Process Tree' and 'Show Lower
Pane' options.
(This will provide the detailed info you need)
Next click/Expand the Svchost.exe process that you are interest in.
Then highlight one of the process listed under Svchost, right click and
from
the options listed select: google
This should display what out there on the web about that process.

Still another tool is What's Running
http://www.whatsrunning.net/whatsrunning/main.aspx

JS

Below is what is under the scvhost that is causing the issue each time
I
boot
my computer. What items are not jiving...HELP PLEASE!

1st Boot
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 244"

Image Name PID Services
========================= ======
=============================================
svchost.exe 244
AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

C:\Documents and Settings<My Name>

2nd Boot - BITS is the only difference in the two boots
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\<My Name>TASKLIST /SVC /FI "IMAGENAME EQ
SVCHO
ST.EXE" /FI "PID EQ 208"

Image Name PID Services
========================= ======
=============================================
svchost.exe 208
AudioSrv, BITS, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility,
helpsvc,
HidServ, lanmanserver,
lanmanworkstation,
Netman, Nla, RasMan, Schedule,
seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks,
W32Time,
winmgmt, wuauserv, WZCSVC

BELOW IS A LIST OF THE ITEMS AND WHAT THEY ARE......

AudioSrv: Windows Audio Manages audio devices for Windows-based
programs. If this service is stopped, audio devices and effects will
not
function properly. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Browser Computer Browser Maintains an updated list of computers on the
network and supplies this list to computers designated as browsers. If
this
service is stopped, this list will not be updated or maintained. If
this
service is disabled, any services that explicitly depend on it will
fail
to
start

CryptSvc: Cryptographic Services Provides three management services:
Catalog Database Service, which confirms the signatures of Windows
files;
Protected Root Service, which adds and removes Trusted Root
Certification
Authority certificates from this computer; and Key Service, which helps
enroll this computer for certificates. If this service is stopped,
these
management services will not function properly. If this service is
disabled,
any services that explicitly depend on it will fail to start.

Dhcp: DHCP Client Manages network configuration by registering and
updating IP addresses and DNS names.

Dmserver: DCOM Server Process Launcher Provides launch functionality
for
DCOM services.

ERSvc: Error Reporting Service Allows error reporting for services and
applictions running in non-standard environments.

EventSystem: Event Log Enables event log messages issued by
Windows-based programs and components to be viewed in Event Viewer.
This
service cannot be stopped.

FastUserSwitchingCompatibility: Fast User Switching Compatibility
Provides
management for applications that require assistance in a multiple user
environment.

Helpsvc: Help and Support Enables Help and Support Center to run on
this computer. If this service is stopped, Help and Support Center will
be
unavailable. If this service is disabled, any services that explicitly
depend
on it will fail to start.

HidServ : HID Input Service Enables generic input access to Human
Interface Devices (HID), which activates and maintains the use of
predefined
hot buttons on keyboards, remote controls, and other multimedia
devices.
If
this service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that
explicitly
depend on it will fail to start.

Lanmanserver: Server Supports file, print, and named-pipe sharing
over the network for this computer. If this service is stopped, these
functions will be unavailable. If this service is disabled, any
services
that