India Broadband Forum

sunray

hii friends

I use BSNL net. When I connect to internet my system struccks.
when I launched task manager i found that my processor is running 100 %.
when i checked processes tab in task manager i found that a processor named SVCHOST.exe coming under network service is using 98 ( % i think) of cpu.

was there any remedy to this problem
i am just ending the process tree which solves my problem temporarily.

just4kix

Please run this command in command window:

tasklist /svc /fi "imagename eq svchost.exe"

Paste the results here.

Admin

Run a spyware scan and remove anything that is flagged up.

sunray

how to copy the text from command prompt window
or tell me how to pase a screen shot

just4kix

Right click on the command window and select 'Mark'. After marking, right click again and select copy.

Or you can also do the following:

tasklist /svc /fi "imagename eq svchost.exe" > x.txt

All the output will be written to a file called x.txt in the same directory.

sunray

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Administrator>tasklist/svd/fi "imagename eq svchost.ex
e"
ERROR: Invalid Argument/Option - '/svd/fi'.
Type "TASKLIST /?" for usage.

C:\Documents and Settings\Administrator>tasklist/svc/fi "imagename eq svchost.ex
e"
ERROR: Invalid Argument/Option - '/svc/fi'.
Type "TASKLIST /?" for usage.

C:\Documents and Settings\Administrator>tasklist /svc /fi "imagename eq svchost.
exe"

Image Name PID Services
========================= ====== =============================================
svchost.exe 752 DcomLaunch, TermService
svchost.exe 800 RpcSs
svchost.exe 840 AudioSrv, CryptSvc, Dhcp, dmserver, ERSvc,
EventSystem, FastUserSwitchingCompatibility,
helpsvc, lanmanserver, lanmanworkstation,
Netman, Nla, RasMan, Schedule, seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks, W32Time,
winmgmt, wscsvc, wuauserv, WZCSVC
svchost.exe 996 LmHosts, RemoteRegistry, SSDPSRV, WebClient

C:\Documents and Settings\Administrator>

whitestar_999

just scan your computer using a good updated antivirus like kaspersky or nod32.

mandiees

I use SpyBot Search and Destroy to take care of issues like this - its totally free and always gets rid of the junk.

sunray

kaspersky always blocks the pc
saying incorrect code.

sb21pro

may be ur win updates are active! check it.

smoothvibes

yes its a known issue with kaspersky...

you can try to run AVG on your system it gets updated automatically after evey 4 hours...

do you have any webcam installed on your system coz few months back i was also facing the same issue on my system and found that my webcam drivers messing up everywhere... i uninstalled and reinstalled webcam which solved my problem...

svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. This program is important for the stable and secure running of your computer and should not be terminated.

Note: svchost.exe is a process registered as a backdoor vulnerability which may be installed for malicious purposes by an attacker allowing access to your computer from remote locations, stealing passwords, Internet banking and personal data. If unaccounted for, this process should be removed immediately.

so before terminating this process try to run a good system security software...

whitestar_999

most probably a virus.try nod32/AVG/trend micro etc whichever installs successfully & then update & scan computer.use process explorer to verify all the svchosts processes running currently on your PC & if anyone fails the verification then it's a virus.

sunray

i am using avast antivirus free version and update are kept on.
and all my windows updates are on firewall also kept on.
I hate AVG beecause it deletes all my crack files.
i use a genuine XP.
I have never installed cam on my pc.

this was the exact command prompt results as asked by some of our member
this wast the result copied and pasted when svchost.exe is using 99 of my cpu


Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Administrator>tasklist /svc /fi "imagename eq svchost.
exe"

Image Name PID Services
========================= ====== =============================================
svchost.exe 748 DcomLaunch
svchost.exe 796 RpcSs
svchost.exe 864 AudioSrv, CryptSvc, Dhcp, dmserver, ERSvc,
EventSystem, helpsvc, lanmanserver,
lanmanworkstation, Netman, Schedule,
seclogon, SENS, SharedAccess,
ShellHWDetection, srservice, Themes, TrkWks,
W32Time, winmgmt, wscsvc, wuauserv, WZCSVC
svchost.exe 920 Dnscache
svchost.exe 1052 LmHosts, RemoteRegistry, WebClient

C:\Documents and Settings\Administrator>

tasklist /svc /fi "imagename eq svchost.exe"

just4kix

Which process id is taking 100% CPU?

sunray

Svchost.exe

whitestar_999

run process explorer
Process Explorer
run it & then move your mouse over the svchost.exe which is consuming 99% CPU.you will see its exact location & services associated with it.if the location is anything else then C:\windows\system32 it's a virus.post complete results here anyway.

sunray

at first this svchost is a small problem for me
but now its becoming a trouble.
when i connect to net this svchost.exe utilises 99 of my cpu.
it also blocks my windows firewall i think. ( when i click on firewall it says unable to find).
after a few minutes my task bar which is in XP blue turns automatically to
windows classic version for five seconds and it retransforms back to my xp classic blue.

but after this transformation mu audio stops working ( no sound from speakers)
and says unable to detect audio device.

i think its wrecking me and i should format my PC.

sb21pro

no dont format yet
try sfc /scannow in run

whitestar_999

it's definitely a virus problem & you should format the computer but before that have you tried my previous suggestion.always remember that running away from problems will never solve your problems.if you had read & tried my suggestion you would be much more prepared to handle such situations in future but looks like you are taking the easy way out of this situation.well if that's what you want then be it but keep in mind that you have learned nothing from this & if a similar situation arises in future you will again be asking for help.

sunray

i have downloaded process manager and now i am pasting its results


Process PID CPU Description Company Name
winlogon.exe 536 Windows NT Logon Application Microsoft Corporation
svchost.exe 748 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 796 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 864 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 920 92.42 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 1048 Generic Host Process for Win32 Services Microsoft Corporation
spoolsv.exe 1696 Spooler SubSystem App Microsoft Corporation
smss.exe 456 Windows NT Session Manager Microsoft Corporation
services.exe 580 1.52 Services and Controller app Microsoft Corporation
lsass.exe 592 LSA Shell (Export Version) Microsoft Corporation
explorer.exe 1268 Windows Explorer Microsoft Corporation
csrss.exe 512 3.03 Client Server Runtime Process Microsoft Corporation
alg.exe 2364 Application Layer Gateway Service Microsoft Corporation
aswUpdSv.exe 1288 avast! Antivirus updating service ALWIL Software
ashWebSv.exe 1920 avast! Web Scanner ALWIL Software
ashServ.exe 1340 avast! antivirus service ALWIL Software
ashMaiSv.exe 1552 avast! e-Mail Scanner Service ALWIL Software
System Idle Process 0
System 4
Interrupts n/a Hardware Interrupts
DPCs n/a Deferred Procedure Calls