'scvhost' processes using each 20 to 30% CPU

  • Thread starter Thread starter Donald Campbell
  • Start date Start date
D

Donald Campbell

SCVHOST


Anyone got any ideas why two of the 'scvhost' processes should be using
each 20 to 30% CPU when there are no applications running?

Network access is 0 so I assume that what ever is going on is local to
the machine.


BR
Don C
 
First, be sure your antivirus software has the latest definitions and run a
virus scan.

Second, download, install and run Ad Aware:
www.lavasoftusa.com
Note: you should always be well backed up before running an application of
this type.

If your system is clear of viruses, open Control Panel, open System, go to
the Advanced tab, click Settings under Startup and Recovery, remove the
check from "Automatically Restart" under System Failure. This will cause
the system to blue screen instead of restarting on errors and the
information on the blue screen may give a clue as to the source of the
issue.

Open Control Panel, open Administrative Tools, open Event Viewer, look for
errors corresponding to the crash, double click the error, the information
contained within may give a clue as to the
source of the problem.

Assuming you have an XP CD and not a recovery CD, place the XP CD in the
drive, when the setup screen appears, select "Check System Compatibility,"
the report it generates may point to problem hardware or software on your
system. If you do not have an XP CD, you can download this application
known as the Upgrade Advisor from the following site:
http://www.microsoft.com/windowsxp/pro/howtobuy/upgrading/advisor.asp
Note: If you have access to a broadband connection it might be best to
download using that as this is a rather large download.

Check for the latest drivers for your hardware, especially your graphics
card and soundcard and all peripherals connected to your system. No not use
Windows Update for this, go to the device manufacturer's web sites and if
you install updated drivers, ignore the message about drivers being unsigned
by Microsoft.
 
suggest you update your virus definitions and run a full anti-virus scan. Also you download Adaware from http://www.lavasoftusa.com/support/download/ and use it to remove parasites.

Look at processes in Task Manager. It is normal to have a number of Svchost.exe process entries appearing in Task Manager. For the process generating the high usage how is the User described? Next whilst Task Manager is showing high usage change from the Process Tab to the Application Tab. Then select each running Application in turn, right click and select "Go to Process" and see if you can identify the application causing the high usage.

Next select Start, Administrative Tools, Services. Compare the list of services with those shown as Started and for each in turn stop the service and observe the effect. If the CPU usage in Task Manager continues or something stops working restart the service. When you have found the likely cause i.e. the CPU usage stops then post details of what you have found.


~~~~~~


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA
(e-mail address removed)
Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.

~~~~~~~~~~~~~~~~~~~~~~~~
 
SCVHOST


Anyone got any ideas why two of the 'scvhost' processes should be using
each 20 to 30% CPU when there are no applications running?

Network access is 0 so I assume that what ever is going on is local to
the machine.


BR
Don C
Click to expand...

svchost is a windows system process. SCVHOST is a program file that a
couple of different viruses use. You need to stop this programming from
starting up.

One way is to boot into safe mode and run msconfig. Or boot into safe
mode and edit the registry if you are comfortable with that. When you
stop scvhost from running you should do a complete virus scan and an
ad/spy ware scan.

Chris
 
Alex Nichol said:
SVChost is the interface to run a slew of services, and you need to find
which one is doing this. Go to Admin Tools - Services and cautiously
try highlighting and stopping services that show as 'Started'; one at a
time, keeping Task manager open to watch the effect. Check the
indicated purpose to avoid stopping something vital, and if there is no
effect always restart the service straight away
Possible candidates that have been implicated in the past are Background
Intelligent Transfer (needed for automatic Windows Update, but if
disabled you can still use it Manual), and Routing and Remote Access.

Ones you could probably reasonably Stop on a stand alone
machine (or probably non-corporate LAN ) are

those two

SSDP Discovery and
U PnP
provided you don't need it for a UPnP router

Alerter (which is *not* needed for error alerts on the local machine)

Indexing (unless the use of context in searches is an actual benefit)

IMAPI CD Burning (if third party CD burning is implemented)

Messenger (against the pop-up ads, though of course NetBIOS should be
blocked in a firewall, this is better than nothing - and is doing no
good in the sort of setups mentioned)

QoS RSVP (not that it causes the trouble that street wisdom suggests -
but it doesn't do anything positive),

If you stop a service, then double click it and set Startup type to
Manual, rather than Disabled - then if it is really needed it can be
started after the next reboot
Click to expand...

It was the SSDP Discovery Service that was causing the problem.

It was flipping between "starting" and "stopped". After disabling the
service, the CPU load dropped to near zero.

I now have to work out why this machine (and no other) showed the
problem.


Thanks for the input.


BR
Don C
 
Back
Top