scvhost.exe

This process is consuming the memory on my machine if I leave the computer on and noting is running I see this process gradually taking all the memory resources untill it reaches 89% and then my computer stops responding. I have win7 OS and I am not sure why this process keeps on doing this and there are many of them listed in my task manager. What is wrong with my machine and if I reboot all comes back to normal for few days and I get the same issue.

Thanks,
LVL 5
SR ZakNetwork Solutions Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

bigeven2002Commented:
Hello,

This can be a couple things.  First, it may be a botched windows update that is causing a memory leak.  Second, it may be a virus.

I would suggest running a full virus/malware scan.  If nothing is found, recall the last date the machine was working fine, and use System Restore to go back to that date.  Using system restore will undo any system changes and program installations up to that point, but you will not lose any data.
SR ZakNetwork Solutions Author Commented:
This has started from the day I built this machine. I have mcafee antivirus on it. I dont think system restore will help and I can not remove mcafee because on the LAN it is monitored and a ticket is generated indicating the PC has no anti virus software.

what is your other suggestion?
n2fcCommented:
Replace McAfee with a GOOD antivirus... If your IT people REQUIRE McAfee, you will have to have them either get educated or have them correct the  issue for you!

SVCHOST is a wrapper that runs several processes within it... There may several copies running at any time.  To isolate WHICH process within SVCHOST is the culprit, use the SVCHOST viewer utility...   See: http://www.sevenforums.com/software/157509-svchost-viewer.html

Active Protection takes the fight to cryptojacking

While there were several headline-grabbing ransomware attacks during in 2017, another big threat started appearing at the same time that didn’t get the same coverage – illicit cryptomining.

SR ZakNetwork Solutions Author Commented:
Its a centralized system with EPO orchestrator. I am not sure what exactly they call it but they push DAT updates via the network. I thought Mcafee is good.
johnb6767Commented:
Process Explorer
http://live.sysinternals.com/procexp.exe

Double click the offencing SVCHost.exe and make note of the Services listed in the Services Tab......Next, try a process of elimination, by stopping each service one by one, until the cpu usage drops......

Select the Threads Tab, and double click the highest CPU hog, and paste the contents here please...

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
SR ZakNetwork Solutions Author Commented:
Guys,

I have a problem with the physical memory utilization going higher and higher by the day and not the CPU untilization. The CPU is normal.
johnb6767Commented:
My mistake.....

What services are hosted in this svchost.exe?
SR ZakNetwork Solutions Author Commented:
The tool helped.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.