Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


What’s taking up all the memory in svchost.exe?

Posted on 2012-08-26
Medium Priority
Last Modified: 2016-11-23
I have a laptop running XP Home with all the latest service packs and updates

-      Laptop has 1 GB of ram of RAM – For basic email and internet browsing it has been enough but I will be installing a 2 GB upgrade

Up till recently, the svchost.exe file has been growing rapidly with nothing open and just idling. I would monitor the task manager and see the cpu utilization climb along memory for the “svchost.exe” process
-      I would use msconfig to eliminate non windows processes until I got down to the Dell wireless tool
-      I would uninstall and reinstall the Dell Wireless driver and even use the Windows wireless tool but eventually the memory usage would climb past 2 GB
-      I would use Sysinternals  “process explorer”  to see what’s running in svchost.exe. there must have been over 50 entries. Even then, I could not tell which process took up the most ram

Is there any other way to tell what process under svchost.exe is what amount of memory? I recall a program called “WhatsRunningInside” but even that tool wasn’t great.
Any help would be appreciated
Question by:agieryic

Accepted Solution

PaulHend earned 800 total points
ID: 38334403
First, I would do some basic trouble shooting:

A) Close all foreground and background applications that require internet access, one at a time.  Meanwhile, monitor the scvhost process tree and see what ones disappear.
B) Go in msconfig (Start, Run, msconfig) and go though all your services and start-up, get rid of tools one at a time and see what works best and eliminates your issues.

And keep in mind that anything that requires internet access will require scvhost, so the application that uses the most physical memory is most likely your culprit.
LVL 84

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 200 total points
ID: 38334508
procmon.exe from sysinternals (http://www.microsoft.com/sysinternals) will let you dig deeper into svchost.

Author Comment

ID: 38335002
Its good to know anything that requires internet access will require scvhost. That helps.

I did perform the "msconfig" eliminations and there were many. I got down to the "Dell related processes" At first I thought it was the Dell Wireless software but it ended up not being the culprit.

This particuler older laptop laptop was rebuilt about 1 year ago using the built-in Dell Recovery partition which was near 7 years old. When I rebuilt it I uninstalled all outdated and non-used software. The only software I didnt delete was the actual culprit. It was the Dell software that monitors the hardware on the laptop (I cant recall the Dell tool name). When I deleted this Dell program, it immediately resolved the issue.

I rebooted and the PC is running fine. However, this was very time consuming. If I could have determined how much ram a process in the svchost.exe, it would have been easier. Process explorer will show you the cpu usage but not the memory usage. In this case, the Dell software tool used near 2 GB ram and climbing but no cpu usage.
Fill in the form and get your FREE NFR key NOW!

Veeam is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.


Author Comment

ID: 38335019
The tool I was thinking about was the "Dell Quickset" that I removed. It was outdated anyway.

Ve3ofa, Ive seen this procmon tool before. Im just not sure how it shows the memory usage of any given process under the svchost.exe file. I just tried using it on my newer Windows 7 64bit laptop. the only indication of any ram being used is under the "Event" tab under "Event Properties". Let me know if this is it ot there's more to find about memory usage.
LVL 11

Assisted Solution

epichero22 earned 800 total points
ID: 38335114
If your scvhost is out of control it could be a program that's running as a service that's causing this.  You can try what others described but I would do a simple computer cleanup to try to alleviate this and any other lingering problems that may surface:

1. Go to Start-> Control Panel -> Add / Remove Programs.

Go through that list and remove anything that looks foreign or not necessary.  You might end up seeing something you don't need, remove it, and in turn remove what services it's causing scvhost to bloat with.

Author Comment

ID: 38335138
epichero22, I did exactly that including several Visual Basic programs that this laptop never needed. the Dell Quickset wasw the culprit in this case. I also agree that there could be bogus programs disguised as a real named program.

Still wanting to know if there's a way to see whats taking up RAM specifically

PaulHend, I pretty much did what you recomended. It confirms and helps to know what I've already done. Thanks!

Assisted Solution

by:Shahnawaz Ahmed
Shahnawaz Ahmed earned 200 total points
ID: 38340506
Dear Agieryic,

Fir you need to know what are the servcies running in that SVCHOST.exe and there might be many SVCHOST.exe's extries you will find in the task manager. Kindly note down the PID and go to the command prompt and type tasklist /svc which will give you all process list along with the details at the right hand side. if you have already use Process explorere & Procmon from sisinternals, then try AutoRun this time it will give you more options and result.

Author Comment

ID: 38453008
Sorry for getting back so late. All the information provided was extremely helpful.

Featured Post

Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you are like me and like multiple layers of protection, read on!
Most folks would know the basics of how Dropbox works, so that’s not the purpose of this article. Security is what it’s all about, so here I’ll share how I choose to secure my Dropbox Account and the Data it contains.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question