|
|
Post by Death Eye on Sept 20, 2011 0:34:30 GMT
I've been having some troubles on my computer with svchost.exe.
It gradually seems to take up my computer's resources until it reaches the point where I literally can't do anything.
I've been reading all over the internet about it, so I know what it is.
I just checked all three svchost.exe files on my computer with an anti-spyware program (and one of them was some kind of malware-downloading Trojan or something).
I can't figure out what could possibly be causing this problem.
Can anyone help?
(Or is it normal for the Working Set (Memory) column to reach 200,000?)
|
|
Deleted
Deleted Member
Posts: 0
|
Post by Deleted on Sept 20, 2011 10:11:19 GMT
have you tried using the process explorer? technet.microsoft.com/en-us/sysinternals/bb896653that lets you get a much more detailed idea of what is running on your system at any given time (can be set to replace the regular task manager too). For your particular case you can hover over the svchost.exe that is eating up that much resources (i assume you meant one instance of svchost.exe was eating up that much by itself which is absurd) and see what services its running, and determine A) if the 200k is justified and B) which service to stop if it isnt. Also as im sure you read, you can make sure to check the location of that process (the file path) since if it isn't in certain folders (i forget which specific ones) its a malware. If your saying that svchost is running multiple times and collectively eating up 200k that's not that abnormal depending on what services you have running. if it really is the cause of your computer slowdown (it usually isn't), you can start turning off windows services until your computer stops being a slowpoke. Hope this helps a bit. |
|
|
|
Post by Death Eye on Sept 20, 2011 10:55:55 GMT
have you tried using the process explorer? technet.microsoft.com/en-us/sysinternals/bb896653that lets you get a much more detailed idea of what is running on your system at any given time (can be set to replace the regular task manager too). For your particular case you can hover over the svchost.exe that is eating up that much resources (i assume you meant one instance of svchost.exe was eating up that much by itself which is absurd) and see what services its running, and determine A) if the 200k is justified and B) which service to stop if it isnt. Also as im sure you read, you can make sure to check the location of that process (the file path) since if it isn't in certain folders (i forget which specific ones) its a malware. If your saying that svchost is running multiple times and collectively eating up 200k that's not that abnormal depending on what services you have running. if it really is the cause of your computer slowdown (it usually isn't), you can start turning off windows services until your computer stops being a slowpoke. Hope this helps a bit. Yeah, I meant that it's one svchost.exe using 200,000. I'm not sure if I actually tried that yet, but if it won't tell me what service is causing this it won't help me all that much; I can find what services the svchost is using in the task manager, but I need something that can tell me which service is ruining everything to be able to do anything about it aside from repeatedly ending the process (and occasionally the process tree). And I did find that one of my svchosts was malware. But that one wasn't the one taking up my resources. Of course, I have to go to school in... not long, so I'll have to deal with this later. |
|
Deleted
Deleted Member
Posts: 0
|
Post by Deleted on Sept 20, 2011 11:02:13 GMT
not sure what you mean. i already told you if you use this and hover over the svchost it would tell you all the services that particular svchost was running. i302.photobucket.com/albums/nn120/godlyBlade/hover.jpgyou cant see the mouse since its just a ss taken with prtsc but its hovering over the one that has a pid (process id) of 1436 and is showing all the services its running. also this is a much better task manager in general as it can shows EVERYTHING a process does (even things like reads and writes to disc). |
|
|
|
Post by Death Eye on Sept 20, 2011 21:51:07 GMT
not sure what you mean. i already told you if you use this and hover over the svchost it would tell you all the services that particular svchost was running. i302.photobucket.com/albums/nn120/godlyBlade/hover.jpgyou cant see the mouse since its just a ss taken with prtsc but its hovering over the one that has a pid (process id) of 1436 and is showing all the services its running. also this is a much better task manager in general as it can shows EVERYTHING a process does (even things like reads and writes to disc). Okay, I downloaded it, and it looks to be a lot more useful than the task manager, but it doesn't show the resource consumption of the individual services as far as I can tell, only the svchost process as a whole. Which is what I was concerned about. Would suspending the process help? (It'd only be a temporary fix, if it would be a fix at all, but it's better than nothing.) |
|
Deleted
Deleted Member
Posts: 0
|
Post by Deleted on Sept 20, 2011 22:52:30 GMT
what the? i couldve sworn i posted something  anyway, suspending it might work as does lowering the priority (it will still take 200k though, it just wont slow you down much anymore). You could always try to right click on the svchost click properties and then click on the services tab and then stop some services and see if it made a difference and repeat as necessary till you find the culprit. Unless ur talking about that one svchost that always seems to take on all the network services (like 20 >_> ) this shouldnt take long to do. If you're feeling daring (or lazy) just kill the process and see whether windows explodes  |
|
|
|
Post by Death Eye on Sept 20, 2011 23:11:27 GMT
I don't suppose the network services one is the one with the BITS and Multimedia Class Scheduler?
Either way, I went through and disabled the services that didn't sound important. Because I disabled the Themes service, it now looks like windows exploded, but it doesn't seem to have...
More word on that once I restart my computer (since I read that changes to services don't apply until the computer is restarted).
|
|
njayhuang
Staff Member 
Cyber Ninja
Without Asuka from Germany, everybody would be lost
Posts: 3,472
|
Post by njayhuang on Sept 20, 2011 23:44:50 GMT
I don't think it takes 30 minutes for a computer to restart. Did your computer asplode? Reply 0 times for yes, ≥1 for no.
|
|
|
|
Post by Death Eye on Sept 20, 2011 23:49:30 GMT
I don't think it takes 30 minutes for a computer to restart. Did your computer asplode? Reply 0 times for yes, ≥1 for no. Oops, I forgot to post in here again.  Yeah, my computer has not asploded. My efforts to disable those processes mostly failed, though. The only one it seems to have remembered to disable is the Themes.  |
|
Deleted
Deleted Member
Posts: 0
|
Post by Deleted on Sept 21, 2011 2:00:57 GMT
that was only for you to figure out which ones you had to permanently stop. stopping only works till you restart if you want to turn them off you have to go to the services thing and disable them. Sorry i forgot to mention that. Do you know how to do that?
|
|
|
|
Post by Death Eye on Sept 21, 2011 2:47:34 GMT
that was only for you to figure out which ones you had to permanently stop. stopping only works till you restart if you want to turn them off you have to go to the services thing and disable them. Sorry i forgot to mention that. Do you know how to do that? Yes I do... I think... I went into the... Services menu, I think it was. Then I found all the unimportant-sounding processes, stopped them, then disabled them. But then when I restarted most of them (BITS comes to mind) seemed to have not been disabled, despite the fact that I definitely disabled them. |
|
Deleted
Deleted Member
Posts: 0
|
Post by Deleted on Sept 21, 2011 3:19:34 GMT
what version of windows are you using? and are you an admin account on you machine?
|
|
|
|
Post by Death Eye on Sept 21, 2011 3:24:05 GMT
what version of windows are you using? and are you an admin account on you machine? Windows 7. I think it was Home Premium, if that matters. And I'm the only one who uses it, so I don't know how I wouldn't have an admin account on it. |
|
Deleted
Deleted Member
Posts: 0
|
Post by Deleted on Sept 21, 2011 4:04:23 GMT
if this is what you did then i dont know what could be preventing it from stopping, other than maybe a process set to run at startup running the service again  But the way you normal shut down a service is you go to control panel and in the classic view (one of the icon views i.e large icon) you click on administrative tools and then click on services, then find the one you want right click on it. Then you click properties and you should immediately see what to do from there. |
|
|
|
Post by Death Eye on Sept 21, 2011 20:23:01 GMT
I'm guessing that leads you to the same thing as the button in the Task Manager? If it does, yeah, that's what I did. I've apparently disabled all but one of the services on the svchost and it still runs at way-too-high- *checks Task Manager* Hey! It's only running at about 6,000! ;D Problem is, it'll probably go back up to several hundred thousand before too long. Anyway, the only service I didn't stop (apparently) is the Multimedia Class Scheduler. And that would be the "Oh crap" detail here. The Windows Audio service depends on it. *checks again* And it just went up about 80,000 in about 10 seconds. So I need to find a way to get rid of the dependency. I did find this, but I'm not sure if that only works in a specific set of circumstances or not... EDIT: I think Windows Management Instrumentation was also on that one. Anyway, I just disabled the Multi-toolazytotypeallthat and my audio's still working. EDIT AGAIN: It hit 200,000 in about a minute, so I disabled Windows toolazytotypeallthat. I'm pretty sure my computer's going to die if I restart it now. |
|
Deleted
Deleted Member
Posts: 0
|
Post by Deleted on Sept 21, 2011 23:34:35 GMT
as far as i know the one svchost that has a child process (its a process thats indented because its the child of the other one) called audiodg is the only one that deals with audio. your sound should be fine but i dont know about the rest of your system. and fyi it doesnt lead to that same screen but the menu options are obvious enough that you should immediately know what to do. if what you tried just now doesnt work when you restart you should try it through the control panel.
|
|
|
|
Post by Death Eye on Sept 21, 2011 23:39:11 GMT
as far as i know the one svchost that has a child process (its a process thats indented because its the child of the other one) called audiodg is the only one that deals with audio. your sound should be fine but i dont know about the rest of your system. and fyi it doesnt lead to that same screen but the menu options are obvious enough that you should immediately know what to do. if what you tried just now doesnt work when you restart you should try it through the control panel. Okay, I'll make sure to do that then. But at this point I'm almost certain Windows Management Instrumentation is the cause. Now all I need to know is if it's safe to disable that, since it sounds like doing that would be extremely stupid but my computer hasn't seemed to fail at all since I did it (and I've had no svchost issues, either! ;D). And all I've found on Google is that disabling it will make my computer "spaz" and that it could be caused by hardware issues. |
|
anyway, suspending it might work as does lowering the priority (it will still take 200k though, it just wont slow you down much anymore). You could always try to right click on the svchost click properties and then click on the services tab and then stop some services and see if it made a difference and repeat as necessary till you find the culprit. Unless ur talking about that one svchost that always seems to take on all the network services (like 20 >_> ) this shouldnt take long to do. If you're feeling daring (or lazy) just kill the process and see whether windows explodes 
