Solved

SVCHOST.EXE 100% disk activity

Posted on 2016-09-30
11
59 Views
Last Modified: 2016-11-09
I have a computer loaded with WIndows 7 64bit. Today they complaining about programs not responding.   I noticed that the Disk activity was steady at 100% being caused by svchost.exe (locasystemnetworkrestricted).  I've ended the process tree but when certain programs are loaded example: Office.  that process restarts and the disk activity goes back to 100% and makes the computer unusable.

I ran a diag on HD and it passed.

I uninstalled AV (Symantec) and problem still exists.

any ideas?
0
Comment
Question by:Goraps
  • 4
  • 3
  • 2
  • +1
11 Comments
 
LVL 22

Accepted Solution

by:
Adam Leinss earned 250 total points (awarded by participants)
ID: 41823654
If you run Process Explorer by Sysinternals, that will allow you to "drill" into the svchost.exe process to see what it is hosting.  Now, it could be hosting 15 different things or just one, but at least it will narrow down what is running from under it.
0
 

Author Comment

by:Goraps
ID: 41823873
Shows alot of svchost.exe  but nothing you can drill down into.
0
 
LVL 22

Expert Comment

by:Adam Leinss
ID: 41838508
Goraps, hopefully you were able to review the steps before the moderator removed them.  If not, please respond.
0
The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

 
LVL 16

Assisted Solution

by:rbudj
rbudj earned 125 total points (awarded by participants)
ID: 41838987
I've had a lot of issues like this lately. Turn off windows update and test.
0
 
LVL 70

Expert Comment

by:Merete
ID: 41839497
Since it appears to Office on local system network restricted
Service Host: Local Service (Network Restricted) contains a lot of  sub-services, and one of these sub-services is causing Service Host: Local Service (Network Restricted) to use CPU to its maximum.

This service is called Superfetch and it’s used to pre-load data from hard disk into RAM memory.
To  improve your performance, and get rid of the high CPU usage, you have to disable Superfetch service,
Run services.msc to open the Services Manager.
Scroll down to Superfetch service,
Double-click on it to open it Properties box. Click on Stop to stop the process.
There's an article here with pictures
Disable Superfetch & Prefetch for SSD in Windows 8 / 7
http://www.thewindowsclub.com/disable-superfetch-prefetch-ssd
0
 

Author Comment

by:Goraps
ID: 41852473
@Merete  Your suggestion didn't help issue with 100% Active time constant on system.
0
 
LVL 70

Expert Comment

by:Merete
ID: 41853108
agree with rbudj suggestion turn off windows updates.,
0
 

Author Comment

by:Goraps
ID: 41853857
Windows updates are turned off via a GPO because we use a patch management system (Shavlik)
0
 
LVL 70

Assisted Solution

by:Merete
Merete earned 125 total points (awarded by participants)
ID: 41853931
When I look in my task manager processes  I have no svchost.exe tasks running on a networked system. windows 7 x64 professional.
Related to Office?
As it is disc activity a couple of things you look at
extremely high HDD usage is MS Windows Defender,Check in control panel that it is turned off.
change the power plan from 'Balanced' to 'High performance"
Have you rebooted?
Run a check disc at the next boot.
Did you use the  (Symantec) removal tool what AV is on there now?
CleanWipe utility.
There is a small tool that runs on windows 7 as well as older systems called Svchost Viewer,
It shows exactly what each svchost.exe Instance is Doing.
it requires no installation and can run directly off a USB pen drive
Give it a try
0
 
LVL 70

Expert Comment

by:Merete
ID: 41880190
Without the author's assistance these experts answers are the best and highly likely would have resolved it based on experience.
0

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question