Solved

SVCHOST.EXE 100% disk activity

Posted on 2016-09-30
11
51 Views
Last Modified: 2016-11-09
I have a computer loaded with WIndows 7 64bit. Today they complaining about programs not responding.   I noticed that the Disk activity was steady at 100% being caused by svchost.exe (locasystemnetworkrestricted).  I've ended the process tree but when certain programs are loaded example: Office.  that process restarts and the disk activity goes back to 100% and makes the computer unusable.

I ran a diag on HD and it passed.

I uninstalled AV (Symantec) and problem still exists.

any ideas?
0
Comment
Question by:Goraps
  • 4
  • 3
  • 2
  • +1
11 Comments
 
LVL 22

Accepted Solution

by:
Adam Leinss earned 250 total points (awarded by participants)
Comment Utility
If you run Process Explorer by Sysinternals, that will allow you to "drill" into the svchost.exe process to see what it is hosting.  Now, it could be hosting 15 different things or just one, but at least it will narrow down what is running from under it.
0
 

Author Comment

by:Goraps
Comment Utility
Shows alot of svchost.exe  but nothing you can drill down into.
0
 
LVL 22

Expert Comment

by:Adam Leinss
Comment Utility
Goraps, hopefully you were able to review the steps before the moderator removed them.  If not, please respond.
0
 
LVL 16

Assisted Solution

by:rbudj
rbudj earned 125 total points (awarded by participants)
Comment Utility
I've had a lot of issues like this lately. Turn off windows update and test.
0
 
LVL 69

Expert Comment

by:Merete
Comment Utility
Since it appears to Office on local system network restricted
Service Host: Local Service (Network Restricted) contains a lot of  sub-services, and one of these sub-services is causing Service Host: Local Service (Network Restricted) to use CPU to its maximum.

This service is called Superfetch and it’s used to pre-load data from hard disk into RAM memory.
To  improve your performance, and get rid of the high CPU usage, you have to disable Superfetch service,
Run services.msc to open the Services Manager.
Scroll down to Superfetch service,
Double-click on it to open it Properties box. Click on Stop to stop the process.
There's an article here with pictures
Disable Superfetch & Prefetch for SSD in Windows 8 / 7
http://www.thewindowsclub.com/disable-superfetch-prefetch-ssd
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 

Author Comment

by:Goraps
Comment Utility
@Merete  Your suggestion didn't help issue with 100% Active time constant on system.
0
 
LVL 69

Expert Comment

by:Merete
Comment Utility
agree with rbudj suggestion turn off windows updates.,
0
 

Author Comment

by:Goraps
Comment Utility
Windows updates are turned off via a GPO because we use a patch management system (Shavlik)
0
 
LVL 69

Assisted Solution

by:Merete
Merete earned 125 total points (awarded by participants)
Comment Utility
When I look in my task manager processes  I have no svchost.exe tasks running on a networked system. windows 7 x64 professional.
Related to Office?
As it is disc activity a couple of things you look at
extremely high HDD usage is MS Windows Defender,Check in control panel that it is turned off.
change the power plan from 'Balanced' to 'High performance"
Have you rebooted?
Run a check disc at the next boot.
Did you use the  (Symantec) removal tool what AV is on there now?
CleanWipe utility.
There is a small tool that runs on windows 7 as well as older systems called Svchost Viewer,
It shows exactly what each svchost.exe Instance is Doing.
it requires no installation and can run directly off a USB pen drive
Give it a try
0
 
LVL 69

Expert Comment

by:Merete
Comment Utility
Without the author's assistance these experts answers are the best and highly likely would have resolved it based on experience.
0

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

The use of stolen credentials is a hot commodity this year allowing threat actors to move laterally within the network in order to avoid breach detection.
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum editing capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

5 Experts available now in Live!

Get 1:1 Help Now