svchost pegs processor

  • Thread starter Thread starter smitty
  • Start date Start date
S

smitty

Greetings,
I have about 10 Windows XP pro clients on my active directory domain
that are experiencing the same issue. The user calls in complaining
that their PC or laptop is unusually slow. Once we examine the PC we
find that the processor is hitting 100 % in regular intervals of about
3 seconds. The process that appears to cause the spike is one instance
of SVChost, specifically: svchost.exe -k netsvcs. I have checked for
viruses: none and spyware: none. If I unplug the network cable, the
spikes stop. If I leave it in and unplug the uplink to the hub or
switch that it is attached, it stops. It occurs accross multiple
subnets. However, if I bring one of the laptops home and put it on my
network, no spikes. When I run a packet sniffer, there are a couple of
PCs that are trying to talk to the PC with the spikes. I check the PCs
and no viruses, spyware, etc. I put zone alarm on the victim PC and the
spikes stop.

smitty
 
Can you run TASKLIST /S <machinename> /SVC, and identify which services are
running under that SVCHOST process? Do you have access to any tool similar to
PROCEXP from Winternals?
 
Back
Top