Link to home
Start Free TrialLog in
Avatar of dolfan650
dolfan650

asked on

Another svchost.exe running the cpu at 100%

I've noticed others with this issue, I know have a computer doing the same thing.  The computer will boot into Windows, and then svchost.exe will run the CPU at 100%.  First thing I did was disable everything in startup with msconfig, and restart them all a few at a time.  That worked, for  a while.  Then I installed Spybot S & D 1.5, and svchost took off running at 100% again.  I see others have tried running Process Explorer to see what else is going on.  Is that the next logical step to this?
Avatar of r-k
r-k

My guess is the Windows Update Service malfunctioning. As a test, type the following at a command prompt and see if that stops the 100% CPU usage:

 > net stop wuauserv

(If you need to restart it you can type: net start wuauserv)

Also see the tips posted by LeeTutor in the following thread:

 https://www.experts-exchange.com/questions/23321792/svchost-exe-CPU-hog.html
ASKER CERTIFIED SOLUTION
Avatar of jcimarron
jcimarron
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of dolfan650

ASKER

Jonvee, interesting thought on the CA Antivirus.  I realize that svchost is only an assistant to other processes, but I couldn't determine using task manager exactly which process it was hanging on.  This computer does have CA on it, and when I disabled svchost yesterday, a message popped up that CA Antivirus had completed an update.  You're probably on the right track.  I'll let you know what I find when I get to work today.  I'm pretty sure this is not a virus issue, as I scanned the drive as a slave with Trend Micro and found nothing.  Adaware and Spybot S&D also came up clean, nothing more than cookies.
Ok, thanks.   Well if you decide to run Process Explorer you should be able to double click the svchost.exe file that appears to be the cause of the problem.  
Then select the Services tab which should list the services that are running in svchost.exe.
If you then select the Threads tab you should be able to see what .exe or .dll is using the CPU, and select it by double clicking it, as required.

If you still have the problem after following all of the suggestions above, suggest you run Trend HijackThis 2.02:
http://majorgeeks.com/Trend_Micro_HijackThis_d5554.html

The technique is to create a folder where you would like the HijackThis file to reside, and run it from there, not from the Desktop or a temp folder.
Run the scan & save the logfile, then click the "Attach File" box and paste into the "Add File" page and we can then study it.  We would be 'thinking' rootkits, etc.
Running process explorer and disabling services, it seems to have narrowed down to Distributed Link Tracking Service.  Disabling that one brought the CPU down to normal.  I rebooted, CPU is running normally, but that process is enabled again.  I don't know if the issue will return or not.  Is that a necessary service?
Two explanations>
"Distributed Link Tracking Client Service":
http://www.theeldergeek.com/distributed_link_tracking_client.htm

"Distributed Link Tracking Client":
http://www.blackviper.com/WinVista/Services/Distributed_Link_Tracking_Client.htm
dolfan650--" I couldn't determine using task manager exactly which process it was hanging on."  That is where using tasklist.exe comes in.
"when I disabled svchost yesterday"  Huh?  How is a process needing svchost.exe going to run?  Of course there are several copies of svchost.exe on the PC (such as in Prefetch, System32, Service Pack Files, etc.)
Avatar of djMundy
I spent days trying to figure this one out, finally determined it was Windows Update causing the issues. I've documented the steps I took to resolve it here, hope it helps!

http://wiki.mundy.com.au/index.php?title=Windows/Windows_Update/100%25_CPU_Usage_by_svchost_and_Windows_Update

This explains using dial-a-fix.exe to automate many of the steps recommended by Microsoft. I have a lot of clients all suddenly having this problem so was glad to find the tool.

Cheers,
Daniel
@ djMundy'  ... thanks for the "svchost.exe Resolution" Daniel, no doubt it's going to help others!   Jonvee.
Yes, that's a good one, and from what I've heard, Windows Update is often the problem.  I even gave dial-a-fix a chance on this one, but this time it didn't do it.