[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1399
  • Last Modified:

svchost taking up memory and cpu time

There is a process called svchost.exe that keeps grabbing memory and cpu time.  
Can you help me find out what it is so I can remove it?
 Here is an example of the
output of
NETSTAT -A -B


 TCP    bts456:4292            216.156.211.80.ptr.us.xo.net:http  ESTABLISHED
   3504
  c:\windows\system32\WS2_32.dll
  C:\WINDOWS\system32\WININET.dll
  [svchost.exe]

  TCP    bts456:4293            208.71.123.133:http    ESTABLISHED     3504
  c:\windows\system32\WS2_32.dll
  C:\WINDOWS\system32\WININET.dll
  [svchost.exe]

  TCP    bts456:4310            a72-247-218-27.deploy.akamaitechnologies.com:http  ESTABLISHED     3504
  c:\windows\system32\WS2_32.dll
  C:\WINDOWS\system32\WININET.dll
  [svchost.exe]

  TCP    bts456:4312            server-216-137-37-71.sfo4.cloudfront.net:http  ESTABLISHED     3504
  c:\windows\system32\WS2_32.dll
  C:\WINDOWS\system32\WININET.dll
  [svchost.exe]

  TCP    bts456:4313            server-216-137-37-71.sfo4.cloudfront.net:http  ESTABLISHED     3504
  c:\windows\system32\WS2_32.dll
  C:\WINDOWS\system32\WININET.dll
  [svchost.exe]

  TCP    bts456:4316            69.22.162.8:http       ESTABLISHED     3504
  c:\windows\system32\WS2_32.dll
  C:\WINDOWS\system32\WININET.dll
  [svchost.exe]

  TCP    bts456:4319            nuq04s06-in-f14.1e100.net:http  ESTABLISHED
3504
  c:\windows\system32\WS2_32.dll
  C:\WINDOWS\system32\WININET.dll
  [svchost.exe]

  TCP    bts456:4320            server-216-137-37-71.sfo4.cloudfront.net:http  ESTABLISHED     3504
  c:\windows\system32\WS2_32.dll
  C:\WINDOWS\system32\WININET.dll
  C:\WINDOWS\system32\SHLWAPI.dll
  ntdll.dll
  C:\WINDOWS\system32\kernel32.dll
  [svchost.exe]

  TCP    bts456:4321            server-216-137-37-71.sfo4.cloudfront.net:http  ESTABLISHED     3504
  c:\windows\system32\WS2_32.dll
  C:\WINDOWS\system32\WININET.dll
  C:\WINDOWS\system32\SHLWAPI.dll
  ntdll.dll
  C:\WINDOWS\system32\kernel32.dll
  [svchost.exe]

  TCP    bts456:4349            a72-247-218-96.deploy.akamaitechnologies.com:http  ESTABLISHED     3504
  c:\windows\system32\WS2_32.dll
  C:\WINDOWS\system32\WININET.dll
  -- unknown component(s) --
  [svchost.exe]

  TCP    bts456:4361            mpr8.ngd.vip.sp2.yahoo.com:http  ESTABLISHED 3504
  c:\windows\system32\WS2_32.dll
  C:\WINDOWS\system32\WININET.dll
  [svchost.exe]

  TCP    bts456:4362            a184-30-253-95.deploy.akamaitechnologies.com:http  ESTABLISHED     3504
  c:\windows\system32\WS2_32.dll This shows how the svc process taking up the cpu and memory
0
vrosas_03
Asked:
vrosas_03
4 Solutions
 
edbedbCommented:
Use Process Exlorer to get a better idea of what is causing it.
http://technet.microsoft.com/en-us/sysinternals/bb896653
0
 
g000seCommented:
Hi,

Also try running a anti-virus and anti-spyware scan.
0
 
vrosas_03Author Commented:
Any Idea what these two .dll do? can i remove them?

c:\windows\system32\WS2_32.dll
  C:\WINDOWS\system32\WININET.dll
  -- unknown component(s) --
  [svchost.exe]
0
A Cyber Security RX to Protect Your Organization

Join us on December 13th for a webinar to learn how medical providers can defend against malware with a cyber security "Rx" that supports a healthy technology adoption plan for every healthcare organization.

 
edbedbCommented:
You need them so don't remove.

As suggested earlier, it sounds like  a virus/malware issue. What are you using for anti virusus?
0
 
vrosas_03Author Commented:
I'm installing Vipre
0
 
WalrusSoupCommented:
Please use process explorer and hover over the Svchost,exe that is having the most memory consumption, under it will appear which services it is hosting. Can you reply with those services?
0
 
vrosas_03Author Commented:
Thanks guys. It looks to be better now. I was able to install Vipre and it found and removed some trojans.
0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now