svchost.exe process using a lot of memory...

Thanks guys/// I've run malwarebytes, Eset Online Scanner, RogueKiller, and panda online scanner... and each one found a few things and cleared them out. Dave and Dan - I think you might be on to something as I haven't did any Windows Uodates in a while. I launched that a few hours ago and it is suspiciously *still* saying:

"Downloading updates
Downloading 30 updates (0 KB total, 0% complete)"

I don't know if that's going to kick in anytime soon, or maybe like Dan suggested, my Windows Update client needs fixing...

Thanks
   Shawn

Thanks John, I am doing this right now. It's been sitting on "Checking for updates" for the last 15 minutes.... will let it go for a while and see what happens.

Thanks
   Shawn

OK guys, I think I'm making progress. It found and ran all the pending updates (almost 30)... I gave it a day to settle down and sort itself out after that. Now the svchost.exe task is taking only 90 megs - a very good improvement.

Dan Craciun - do you think there is still a need for me to install a whole new Windows Update Client for Vista?


David Johnson - I am going to download and install "sysinternals procmon" and investigate what you recommended.

Thanks!
    Shawn

Hmm, I guess I spoke too soon... svchost.exe is back up now to almost 600 megs, sheesh. Maybe I will have to seek out the latest version of the update client for Windows Vista...

Shawn

According to this page:

https://support.microsoft.com/en-ca/kb/949104

it would seem I've already got the latest version:  7.6.7600.256, dated 02/06/2012

Shawn

Thanks John... I'm really not keen to overhaul the Vista OS to something else. It's not that I'm so attached to Vista, it's just that I don't need the extra ordeal right now in trying to upgrade that desktop to something newer. It's a computer that I don't use all that often, so it's not especially crucial or pressing... and I've never really had a problem with Vista.

Thanks
   Shawn

Sorry for the long absence guys, I was sidetracked by something. I'm still having the same problem - a svchost.exe process using about 500 megs and 50% CPU when my Vista machine is running nothing else and basically just idle. David Johnson, I ran Process Explorer and I've attached the screenshot. The svchost.exe in question shows several processes - is there a way to hone in on which particular process is hogging all the juice?

Thanks
   Shawn
ProcessExplorer.jpg

Thanks Dan, I tried the on the Command Line - net stop wuauserv

... but it gave error msg "System error 5 has occurred. Access is denied"

I'm not sure what you mean by the "Services snapin".

Thanks
    Shawn

Thanks Dan, I stopped the service and it seemed to fix things - that svchost.exe process quieted right down. But I did a re-boot and now the same svchost.exe process is back up again to 600 megs/50% CPU, and checking services.msc, that Windows Update task is running again. Is it as simple as UNchecking the Windows Update process under the "Services" tab in the screen that comes up when I do a "msconfig"... so it won't re-launch whenever I do a reboot?

Thanks
   Shawn

That did it Dan, success! Thank you!

Cheers
   Shawn

Well, I spoke to soon guys.... I shut my machine down last night and booted it back up this morning and Windows Update is back running again - using 800 megs of RAM! In the Services snapin, it is now listed as "Manual" Startup Type. Double-clicking on that, it shows "Startup Type" as Disabled... so I don't know how it could have started up again. There's a button to STOP the service right now, so I'm going to click that. Hmm, now I see in the "Recovery" tab there, there's an option "Select the computers response if this service fails", and it shows 3 dropdown boxes - 1st failure, 2nd Failure, and Subsequent failures. 1st Failure says "Restart the service", and the other two say "Take no action". Could that be the culprit? I'm going to set that "1st Failure" to "Take No Action" also.

In the msconfig/services tab, it's back there listed again also. I'm going to try to uncheck it from that tab, and shut down and boot up again. Will let you know the progress...

Thanks
   Shawn

OK, that seems to have worked... no sign of that process running after the reboot and my settings made are still intact. Could someone please confirm if I did everything correctly or maybe there's something else I overlooked?

Thanks!
   Shawn