svchost.exe sucking up all memory

For at least the past month I've noticed a problem ... after several days my Windows 7 laptop grinds to an almost-halt. Command takes minutes to work; and we're talking around 10 minutes or so! This includes closing windows, launching new programs, etc. When this happens the task manager indicates that svchost.exe has sucked up nearly all available member, over 1.5G on my 3.6GB usable computer. Task manager show Memory usage at 100%, and it stays there. Even when I laboriously close program and have almost nothing running, memory usage is still maxed out and svhost.exe has not released any memory. Sometime, if I let it sit in this state for a few hours (with nothing running), svchost.exe gets back to normal with around 94M memory. More often than not the only remedy is to reboot -- which can take up to 10 minutes! After rebooting, everything works fine ... for 3 or 4 days.

There were a number of postings in this problem, but I saw no resolutions.

Anything?
LVL 1
jmarkfoleyAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

aboo_sCommented:
This could very well be Virus/Spyware related.
Aadvise updating AntiViris scanning pc, installing antispyware and scanning (like superAntiSpyware).
It could also be an AntiVirus fault. So it could also help to uninstall AntiVirus, see what happens and then re-install.
0
jmarkfoleyAuthor Commented:
I've been running Norton Internet Security for years - all up-to-date. I'll try downloading the msert program and running a full scan, and possibly a few others like roguekiller. I'll post back results
0
McKnifeCommented:
Probably this service needs to be stopped: Windows update. Stop it next time you visit this problem for a test.
0
Cloud Class® Course: Ruby Fundamentals

This course will introduce you to Ruby, as well as teach you about classes, methods, variables, data structures, loops, enumerable methods, and finishing touches.

jcimarronCommented:
jmarkfoley--
By itself svchost.exe rarely causes high CPU usage.  svshost.exe's role is assist another application's .dll in running, and it is the other application that is causing the problem.
Try running Process Explorer
http://technet.microsoft.com/en-us/sysinternals/bb896653
and see what other applications are listed under the various svchost.exe instances.

This will explain in more detail.  (using Process Explorer is mentioned toward the bottom.)
http://www.howtogeek.com/howto/windows-vista/what-is-svchostexe-and-why-is-it-running/
0
jmarkfoleyAuthor Commented:
When my system ground to a halt, I checked and svchost.exe was using over 1.5G of memory. I launched the Services panel (which of course took several minutes) and stopped Windows Update and immediately svchost.exe memory usage dropped back to a more normal 150M+.

So, what is the issue? Do I have to permanently disable Windows Update? I don't mind since I pro-actively check for updates and I have no updates automatically applied.
0
jcimarronCommented:
jmarkfoley-
Run these in the order given

https://support.microsoft.com/en-us/kb/3065987

Reset Windows Update
http://support.microsoft.com/gp/windows-update-issues/en-us

http://support.microsoft.com/kb/906602

Windows Update Troubleshooter
http://go.microsoft.com/?linkid=9830262  or
http://support.microsoft.com/kb/971058

Fixit
http://support.microsoft.com/mats/windows_update/en-us

Reinstall Windows Update Agent (different links for different Win 7 systems (32bit and 64bit))

http://download.windowsupdate.com/WindowsUpdate/redist/standalone/7.1.6001.65/WindowsUpdateAgent30-x86.exe

http://download.windowsupdate.com/windowsupdate/redist/standalone/7.6.7600.320/WindowsUpdateAgent-7.6-x64.exe

Run the Windows Update Readiness tool:
http://support2.microsoft.com/?kbid=947821

Run SFC /SCANNOW from a Command Prompt

Run a System Restore to a date before the problem started.

Run a Repair Install.  A Repair Install should not affect personal data or installed programs. but it never hurts to backup first.
http://www.sevenforums.com/tutorials/3413-repair-install.html 

If nothing helps there is also a very complicated reference with a solution from Xircal at the very beginning.
http://answers.microsoft.com/en-us/windows/forum/windows_xp-update/windows-update-svchostexe-100-cpu-in-task-manager/6b372d8b-0ca4-4042-ba37-b2a7cdcdbd06?auth=1
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jmarkfoleyAuthor Commented:
jcimarron: I've done your 1st suggestion. I'll give it a couple of days to see if that helps. Interestingly, kb3065987 was not in my list of pending updates.
0
McKnifeCommented:
Windows update is known to do this. It is a bad component and microsoft should get busy and recode it.
People that do not notice this are usually using strong machines with SSDs and plenty of RAM, but on older machines, one or two CPU cores, less than 4 GB RAM, you can really feel it and it's annoying so many people.

Setting the update service to manual and doing an update check manually once a week (you can even automate those, feel free to ask) is the best way out.
0
jmarkfoleyAuthor Commented:
McKnife:
Windows update is known to do this ...
Why am I not surprised.
Setting the update service to manual and doing an update check manually once a week ... is the best way out.
I can do this on my home computer, but where I work has lots of workstations, so I don't favor that solution.
(you can even automate those, feel free to ask)
OK, yes, I'm asking! Maybe that solution will work on the office workstations. In fact, I think one user is experiencing this problem now.

Meanwhile, I've applied the kb3065987 update mentioned by jcimarron in his first suggested link and so far so good, although it's only been 2 days.
0
McKnifeCommented:
The update kb3065987 wasn't installed? That would mean the machine had not been updated for months...
Ok, to do this scripted, there are only 2 commands needed:
net start wuauserv
wuauclt /detectnow /updatenow

Open in new window


The windows update service should be set to manual start before you start using that script.
0
jmarkfoleyAuthor Commented:
McKnife:
The update kb3065987 wasn't installed?
That update wasn't even in my list of pending updates. I checked.

Where does your suggested script get installed? Windows scheduler on the Win7 workstation?
0
McKnifeCommented:
It is a batch file. Simply save a textfile as updater.bat on your desktop, rightclick it and select "run as administrator".
0
jmarkfoleyAuthor Commented:
I've been running several days with no more problems. jcimarron's 1st suggest update seems to have fixed it! Thanks. Some points to McKnife for initially identifying the culprit.
0
jcimarronCommented:
jmarkfoley--
You are welcome.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.