Internet Sharing/Internet Firewall Service causing Major CPU usage

I have 2 computer running XP Pro hooked up with a plain hub and network cables.
one of them has dial up internet which I share with my other computer.

about a month ago I noticed that the computer with the internet connection was REALLY slow, turns out SVCHost was using upwards of 90% of the CPU usage, after much frustration I discovered that by turning off the internet sharing/internet firewall service the SVChost stops eating up all the CPU usage...

So now my computer is running fine but I no longer got internet sharing, I tried redoing the whole setup to do a home network but SVCHost will use 90% of the cpu usage whenever internet sharing/internet firewall service is enabled.

I'm thinking that the files may be corrupted and some how causing this problem, can anyone let me know what files I need to replace for this service?
What lse I should check with this issue?
Or anyone else come across this issue??
I really need to get the internet sharing back up and going between the 2 computers.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Try uninstalling QoS from the network control panel
For confirmation, thats the QoS Packet scheduler found if you right click my network places/properties, then right click local area network/properties and it should be in front of you on the general tab
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

blckknightAuthor Commented:
Sunray, Thanks but I have norton completly up to date and run ad-aware every few days to clean out any spyware.

as far as I'm aware my system is clean.

 MadAd1 Thank you, I will try that and see what comes of it.
blckknightAuthor Commented:
I removed QoS and reactivated internet sharing/internet firewall service...

and it still causes my SVChost to use 90% of the CPU usages..

I wan SFC scan and it didn't detect anything wrong, anyone have any ideas what else I could do??
ok well providing you have checked that its not the svchosts.exe virus (note the S on the end of svchost, with the s is the virus, without s is normal) then we had better see whats causing the problem.

1. Open your Task manager (CTL-ALT-DEL) and go to the menu bar, view>select columns and put a check (tick) in the box marked memory usage then ok the box.

2. Look down the list for the svchost that is a problem, and note its mem usage

3. open a dos console (start>run> type cmd) then type tasklist (return).  Cross reference the mem usage you already found in the task manager with the list in the console and obtain the PID for the offending svchost.

4. now type (at your dos prompt) tasklist /svc and look down the list for the PID - to the right youll see one or several names that runs under that svchost wrapper - note all those down and report back - one of those threads is the culprit.

blckknightAuthor Commented:
Ok here are the threads that are running under the problematic SVChost


Thats with the Internet connection/internet firewall service running..
when I stop the service I noticed that the
"SharedAccess" thread is not there anymore and my CPU usage is at a normal level.

Whats the next step?
Step? I dunno, im making it up as I go along ;)

Look in your system event log (start>programs>accessories>administrative tools>event viewer>system for problems, probably relating to programs in that list.

I notice you still have stuff like messenger running, thats a popular one to cause problems, kill it since theres no downside and it only gets used by spammers, also kill the other services you dont need ( refer here, but do be conservative, theres noting worse than doing 20 fixes and finding one has broken something you use).  As a trial, disable fast user switching (assuming you dont use it) and (assuming you do have your lan as static ips) disable dhcp - 2 problematic ones.

I had a look on the web, It seems lots of people get svchost using 100% however ive seen just about every service mentioned or blamed and there must be a pattern, but i cant see it other than they are all wrapped.  There is mention of a memory leak, and compounding matters, svchost does like to keep trying to restart services that have failed - put them together and you have a resource drain.

Just to make sure your ICF is all ok, you can try updating it with the ANP (if you havent already)

Make sure you dont have 2 hosts files running - along with norton that can really make a mess of things (windows\system32\drivers\etc\hosts )... lmhosts is allowed btw.  Some people have problems running norton itself, claims its causing problesm, but then so do some with mcaffe too.

Finally for now, give your registry a cleanup - jv power tools has a very useful version and its safe but hes got popular and now charges for the latest ed. but you can get an old download from a s/w site, its the same.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
blckknightAuthor Commented:
For some reason i didn't get a Email informing me of this reply..haha

so didn't know there was a reply..

ok i'm gonan check a few of these also..but yeah lke you I came across alot of the 100% SVC all over the net..

I'm busy this week..when I got some free time I'll see what I can come across with what else you suggested.

Figures the only comp problem I can't seem to fix is at home.
blckknightAuthor Commented:
In the long run..I couldn't solve the problem...
I ended up getting a new video card and the drivers wouldn't instal properly so I decided to give up and I just formatted my C drive and reinstalled windows, everything is back to normal now.

Thanks for your help MadAd1 I'll give you the points for your help.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows XP

From novice to tech pro — start learning today.