Solved

Svchost.exe (dcomlaunch and PlugPlay serice) high CPU usage

Posted on 2014-02-26
11
10,379 Views
Last Modified: 2014-06-16
Hi.
Have a win 2008 (not R2)std sever runing Terminal server.
It's on a Vmware ESXi host.
Lately Svchost.exe uses 50-60% CPU, so the server is always at 100%
In taskmanager , right-clicked service and chose Go to services.
Than showes Dcomlaunc and PlugPlay.
Have searched around and found a fix for Win 2008 R2: (http://support.microsoft.com/kb/2655998)
1. not sure it applies since on this server it's at 50-60% all the time, and
2. it's not Win 2008 R2

Also found allot about disabeling enhanced audio (Vista problem mostly), but this is a terminal server without audio device installed.

Any suggestion?'
Thanx
TStaskmanager.rtf
0
Comment
Question by:Tore Jacobsen
  • 6
  • 3
  • 2
11 Comments
 
LVL 1

Author Comment

by:Tore Jacobsen
ID: 39891355
After yesterdays reboot of the server, the svchost.exe container only contains dcomlaunch service. Still use all of my CPU.
Any suggestions?
0
 
LVL 27

Expert Comment

by:serialband
ID: 39892488
0
 
LVL 1

Author Comment

by:Tore Jacobsen
ID: 39899791
No phone connected to the server.
It's a virtual terminal server that the users connect to over RDP from their pc's.
Microsoft suggested to run fix mention in my question, but got error msg that "it does not apply to yor system" (guess it's for R2 only)
0
 
LVL 27

Expert Comment

by:serialband
ID: 39900485
Have you run a virus scan?
0
 
LVL 1

Author Comment

by:Tore Jacobsen
ID: 39900498
Yes, came back clean
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 
LVL 27

Expert Comment

by:serialband
ID: 39900907
Do you have a virus scanner installed and running?

Do you have systernals tools installed?  What do you see when you run this?
tasklist /svc /fi "imagename eq svchost.exe"

See if this helps.
Control Panel -> System -> System Protection -> System protection (tab) -> Protecting parameters -> Local disk C (System) -> click Setup button -> Turn off system Protection
0
 
LVL 1

Author Comment

by:Tore Jacobsen
ID: 39902658
Hi.
Yes, have Trend Worry free antivirus. Scan came back clean.
Have also tried uninstalling it, no difference.
Under Control panel, system . there is no System protection, so can't follow instructions..

This is a Win 2008 Std server (not R2)
0
 

Expert Comment

by:thecomputerplace
ID: 40109370
Same issue.  We're interested if you find any fixes.
0
 
LVL 1

Accepted Solution

by:
Tore Jacobsen earned 0 total points
ID: 40129031
CAUSE

We found that SVCHOST.exe which was consuming the CPU also had 'Plug and Play' service and it was consuming the CPU.

RESOLUTION

After removing the floppy station, CD-rom and USB controller from ESXi settings, CPU usage is fine
0
 
LVL 1

Author Closing Comment

by:Tore Jacobsen
ID: 40136449
found the solution
0
 

Expert Comment

by:thecomputerplace
ID: 40136656
FYI ours did not have an optical or floppy and thus that solution didn't apply in our environment.

What did it for ideas BIOS update and or the next pending OS roll up update. We installed both simultaneously and unfortunately were unable to determine which one did the trick.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

I have been working as System Administrators since 2003. I recently started working as a FreeLancer and was amazed to find out that very few people are taking full advantage of their Windows Server Machines. Microsoft Windows Server comes with so…
I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now