Solved

SVCHOST.EXE 100% disk activity

Posted on 2016-09-30
11
55 Views
Last Modified: 2016-11-09
I have a computer loaded with WIndows 7 64bit. Today they complaining about programs not responding.   I noticed that the Disk activity was steady at 100% being caused by svchost.exe (locasystemnetworkrestricted).  I've ended the process tree but when certain programs are loaded example: Office.  that process restarts and the disk activity goes back to 100% and makes the computer unusable.

I ran a diag on HD and it passed.

I uninstalled AV (Symantec) and problem still exists.

any ideas?
0
Comment
Question by:Goraps
  • 4
  • 3
  • 2
  • +1
11 Comments
 
LVL 22

Accepted Solution

by:
Adam Leinss earned 250 total points (awarded by participants)
ID: 41823654
If you run Process Explorer by Sysinternals, that will allow you to "drill" into the svchost.exe process to see what it is hosting.  Now, it could be hosting 15 different things or just one, but at least it will narrow down what is running from under it.
0
 

Author Comment

by:Goraps
ID: 41823873
Shows alot of svchost.exe  but nothing you can drill down into.
0
 
LVL 22

Expert Comment

by:Adam Leinss
ID: 41838508
Goraps, hopefully you were able to review the steps before the moderator removed them.  If not, please respond.
0
 
LVL 16

Assisted Solution

by:rbudj
rbudj earned 125 total points (awarded by participants)
ID: 41838987
I've had a lot of issues like this lately. Turn off windows update and test.
0
 
LVL 70

Expert Comment

by:Merete
ID: 41839497
Since it appears to Office on local system network restricted
Service Host: Local Service (Network Restricted) contains a lot of  sub-services, and one of these sub-services is causing Service Host: Local Service (Network Restricted) to use CPU to its maximum.

This service is called Superfetch and it’s used to pre-load data from hard disk into RAM memory.
To  improve your performance, and get rid of the high CPU usage, you have to disable Superfetch service,
Run services.msc to open the Services Manager.
Scroll down to Superfetch service,
Double-click on it to open it Properties box. Click on Stop to stop the process.
There's an article here with pictures
Disable Superfetch & Prefetch for SSD in Windows 8 / 7
http://www.thewindowsclub.com/disable-superfetch-prefetch-ssd
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 

Author Comment

by:Goraps
ID: 41852473
@Merete  Your suggestion didn't help issue with 100% Active time constant on system.
0
 
LVL 70

Expert Comment

by:Merete
ID: 41853108
agree with rbudj suggestion turn off windows updates.,
0
 

Author Comment

by:Goraps
ID: 41853857
Windows updates are turned off via a GPO because we use a patch management system (Shavlik)
0
 
LVL 70

Assisted Solution

by:Merete
Merete earned 125 total points (awarded by participants)
ID: 41853931
When I look in my task manager processes  I have no svchost.exe tasks running on a networked system. windows 7 x64 professional.
Related to Office?
As it is disc activity a couple of things you look at
extremely high HDD usage is MS Windows Defender,Check in control panel that it is turned off.
change the power plan from 'Balanced' to 'High performance"
Have you rebooted?
Run a check disc at the next boot.
Did you use the  (Symantec) removal tool what AV is on there now?
CleanWipe utility.
There is a small tool that runs on windows 7 as well as older systems called Svchost Viewer,
It shows exactly what each svchost.exe Instance is Doing.
it requires no installation and can run directly off a USB pen drive
Give it a try
0
 
LVL 70

Expert Comment

by:Merete
ID: 41880190
Without the author's assistance these experts answers are the best and highly likely would have resolved it based on experience.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
In this article, I will show you HOW TO: Perform a Physical to Virtual (P2V) Conversion the easy way from a computer backup (image).
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now