Thread: processor running 100 %

hii friends

I use BSNL net. When I connect to internet my system struccks.
when I launched task manager i found that my processor is running 100 %.
when i checked processes tab in task manager i found that a processor named SVCHOST.exe coming under network service is using 98 ( % i think) of cpu.

was there any remedy to this problem
i am just ending the process tree which solves my problem temporarily.

Please run this command in command window:

tasklist /svc /fi "imagename eq svchost.exe"

Paste the results here.

Run a spyware scan and remove anything that is flagged up.

how to copy the text from command prompt window
or tell me how to pase a screen shot

Right click on the command window and select 'Mark'. After marking, right click again and select copy.

Or you can also do the following:

tasklist /svc /fi "imagename eq svchost.exe" > x.txt

All the output will be written to a file called x.txt in the same directory.

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Administrator>tasklist/svd/fi "imagename eq svchost.ex
e"
ERROR: Invalid Argument/Option - '/svd/fi'.
Type "TASKLIST /?" for usage.

C:\Documents and Settings\Administrator>tasklist/svc/fi "imagename eq svchost.ex
e"
ERROR: Invalid Argument/Option - '/svc/fi'.
Type "TASKLIST /?" for usage.

C:\Documents and Settings\Administrator>tasklist /svc /fi "imagename eq svchost.
exe"

Image Name PID Services
========================= ====== =============================================
svchost.exe 752 DcomLaunch, TermService
svchost.exe 800 RpcSs
svchost.exe 840 AudioSrv, CryptSvc, Dhcp, dmserver, ERSvc,
EventSystem, FastUserSwitchingCompatibility,
helpsvc, lanmanserver, lanmanworkstation,
Netman, Nla, RasMan, Schedule, seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks, W32Time,
winmgmt, wscsvc, wuauserv, WZCSVC
svchost.exe 996 LmHosts, RemoteRegistry, SSDPSRV, WebClient

C:\Documents and Settings\Administrator>

just scan your computer using a good updated antivirus like kaspersky or nod32.

I use SpyBot Search and Destroy to take care of issues like this - its totally free and always gets rid of the junk.

kaspersky always blocks the pc
saying incorrect code.

may be ur win updates are active! check it.

yes its a known issue with kaspersky...

you can try to run AVG on your system it gets updated automatically after evey 4 hours...

do you have any webcam installed on your system coz few months back i was also facing the same issue on my system and found that my webcam drivers messing up everywhere... i uninstalled and reinstalled webcam which solved my problem...

svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. This program is important for the stable and secure running of your computer and should not be terminated.

Note: svchost.exe is a process registered as a backdoor vulnerability which may be installed for malicious purposes by an attacker allowing access to your computer from remote locations, stealing passwords, Internet banking and personal data. If unaccounted for, this process should be removed immediately.

so before terminating this process try to run a good system security software...

most probably a virus.try nod32/AVG/trend micro etc whichever installs successfully & then update & scan computer.use process explorer to verify all the svchosts processes running currently on your PC & if anyone fails the verification then it's a virus.

i am using avast antivirus free version and update are kept on.
and all my windows updates are on firewall also kept on.
I hate AVG beecause it deletes all my crack files.
i use a genuine XP.
I have never installed cam on my pc.

this was the exact command prompt results as asked by some of our member
this wast the result copied and pasted when svchost.exe is using 99 of my cpu


Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Administrator>tasklist /svc /fi "imagename eq svchost.
exe"

Image Name PID Services
========================= ====== =============================================
svchost.exe 748 DcomLaunch
svchost.exe 796 RpcSs
svchost.exe 864 AudioSrv, CryptSvc, Dhcp, dmserver, ERSvc,
EventSystem, helpsvc, lanmanserver,
lanmanworkstation, Netman, Schedule,
seclogon, SENS, SharedAccess,
ShellHWDetection, srservice, Themes, TrkWks,
W32Time, winmgmt, wscsvc, wuauserv, WZCSVC
svchost.exe 920 Dnscache
svchost.exe 1052 LmHosts, RemoteRegistry, WebClient

C:\Documents and Settings\Administrator>

tasklist /svc /fi "imagename eq svchost.exe"

Which process id is taking 100% CPU?

Svchost.exe

run process explorer
Process Explorer
run it & then move your mouse over the svchost.exe which is consuming 99% CPU.you will see its exact location & services associated with it.if the location is anything else then C:\windows\system32 it's a virus.post complete results here anyway.

at first this svchost is a small problem for me
but now its becoming a trouble.
when i connect to net this svchost.exe utilises 99 of my cpu.
it also blocks my windows firewall i think. ( when i click on firewall it says unable to find).
after a few minutes my task bar which is in XP blue turns automatically to
windows classic version for five seconds and it retransforms back to my xp classic blue.

but after this transformation mu audio stops working ( no sound from speakers)
and says unable to detect audio device.

i think its wrecking me and i should format my PC.

no dont format yet
try sfc /scannow in run

it's definitely a virus problem & you should format the computer but before that have you tried my previous suggestion.always remember that running away from problems will never solve your problems.if you had read & tried my suggestion you would be much more prepared to handle such situations in future but looks like you are taking the easy way out of this situation.well if that's what you want then be it but keep in mind that you have learned nothing from this & if a similar situation arises in future you will again be asking for help.

i have downloaded process manager and now i am pasting its results


Process PID CPU Description Company Name
winlogon.exe 536 Windows NT Logon Application Microsoft Corporation
svchost.exe 748 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 796 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 864 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 920 92.42 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 1048 Generic Host Process for Win32 Services Microsoft Corporation
spoolsv.exe 1696 Spooler SubSystem App Microsoft Corporation
smss.exe 456 Windows NT Session Manager Microsoft Corporation
services.exe 580 1.52 Services and Controller app Microsoft Corporation
lsass.exe 592 LSA Shell (Export Version) Microsoft Corporation
explorer.exe 1268 Windows Explorer Microsoft Corporation
csrss.exe 512 3.03 Client Server Runtime Process Microsoft Corporation
alg.exe 2364 Application Layer Gateway Service Microsoft Corporation
aswUpdSv.exe 1288 avast! Antivirus updating service ALWIL Software
ashWebSv.exe 1920 avast! Web Scanner ALWIL Software
ashServ.exe 1340 avast! antivirus service ALWIL Software
ashMaiSv.exe 1552 avast! e-Mail Scanner Service ALWIL Software
System Idle Process 0
System 4
Interrupts n/a Hardware Interrupts
DPCs n/a Deferred Procedure Calls

svchost.exe 920 92.42 Generic Host Process for Win32 Services Microsoft Corporation

this one is problamatic
try sfc it should work.

Originally Posted by sb21pro

no dont format yet
try sfc /scannow in run

i found members, mods and admin are very helpful in this forum.
so, i am not going to format my system so early.
i will wait for a solution.
if i dont get then i will format my system.
but i dont think i need to format my system.
i am having confidence that u guys are going to find a solution.


tried sfc /scannow


it launched a small window naming windows file protection

and scanned windows files and gone. it dint show any results

ce sfc means system file checker ok
that means it checks the intregrity of the sys files

so it basically copies those files from cd to Hdd

dit it complete properly??

found a probable solution.try it & i don't think now that it's a virus problem after seeing your process explorer result.disable XP DNS cache.type services.msc in run box.go to DNS Client service.right click & select properties.under general tab select startup type as disabled.restart computer & then connect to net to see if it helps.

Originally Posted by whitestar_999

found a probable solution.try it & i don't think now that it's a virus problem after seeing your process explorer result.disable XP DNS cache.type services.msc in run box.go to DNS Client service.right click & select properties.under general tab select startup type as disabled.restart computer & then connect to net to see if it helps.

after doing this my problem has not repeated.
I hope this is a correct solution.
can any one explain why this happens?