Isolating a process within svchost

Posted on 2014-08-22
Last Modified: 2014-09-08

I have a workstation that is semi-freezing each hour for about 2 minutes.   Today I have managed to observe the case with process explorer open and found a svchost with 5 services seems to be the cause.

How can I isloate which service is causing the high cpu usage?
How can I split these 5 services to 1 svchost = 1 service?

Screenshots attached!

Question by:pc-cyt
    LVL 3

    Expert Comment

    I don't think you can, but then I'm not really sure, but I did want to contribute that the Telephone service can usually be set to manual or disabled to no ill effect ( so long as you're not using a modem or some such). But at least that's one service you can eliminate as a potential problem.
    LVL 50

    Accepted Solution

    The main Process Explorer window should have a CPU column showing which processes are using the most time.
    As you mention there are more than one svchost.exe shown.  The svchost instances that are hosting other Services will have those other processes shown immediately below that svchost.  (Make sure View|"Show Process Tree" is being used.)  Their CPU use is also shown.  The svchost.exe instances not hosting other Services will not have other Services shown immediately below.
    Or right click an instance of svchost.exe and choose Properties|Services tab to see what Services are being hosted.
    LVL 1

    Author Comment

    I've noticed that not all svchosts have a tree of processes beneath it, even though the services tab shows multiple running services.  In my case pid 1452 does have several services which did not show on the tree.

    I have narrowed the offending service down stopping a service and waiting for ten past to come round.    I have found that 'DNS Client' is causing the issue.

    After some googling, I checked my local 'hosts' file and found a 2MB long list.   If I delete the file and copy over a default win7 file, restart the service then the issue does now seem to be fixed.

    The long hosts file is something i was playing with over two years, so not sure I've had an issue for two years or a recent update has caused the issue.

    Thanks for your processer explorer help
    LVL 50

    Expert Comment

    I understood you to say that restoring the HOSTS file to its original state (presumably blocking no websites) fixed the problem.  Good for you.
    LVL 1

    Author Closing Comment

    The use of proccess explorer helped to identify the issue

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    I hope this helps those who have been battling the SanDisk / U3 problem for a while. For anyone that is running Windows 7 64bit and is receiving and searching the internet for the “Windows Error: Windows has allocated a drive letter to the U3 dri…
    If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
    The viewer will learn how to install the Spideroak software to backup files. Start your default browser: In the URL location bar type and press enter: When you see the spideroak site, click the “Try for free” button in the upper ri…
    The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now