Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: svchost.exe (netsvcs) draining all my memory

12 May 2015   #11
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

My thoughts: Disabling windows updates and running them on demand doesn't actually fix the problem. It would be better to use a machine that does what it's supposed to do. Anyway, having said that it's a decent enough workaround until you track down the culprit.

Here's a suggestion. Check for KB3038314 (windows update) and remove it if found. Your svchost problem is very likely to be related to problems with windows updates or internet explorer.

See the thread here:

What's blocking Google search from being added in IE11?

If you find the update and want to remove it using powershell refer to the screenshot here or use your own method if preferred.

http://www.sevenforums.com/attachmen...ows-update.jpg

After removal reboot and check for windows updates. Install any marked "important"

Of course if you don't have the update installed ignore this post!


My System SpecsSystem Spec
.
13 May 2015   #12
wlowewalker

Windows 7 Home Premium 64 bit
 
 

Thanks Callender - I noticed the Windows Update thing when it happened yesterday - the memory use started escalating as soon as Windows started downloading updates. I have disabled automatic updates, and we'll see if that helps.

Same to you, Guilyou. I am getting a good idea of what I am dealing with here.

@ Callender - I'll check out that particular update when I get home
My System SpecsSystem Spec
13 May 2015   #13
wlowewalker

Windows 7 Home Premium 64 bit
 
 

One more thing - I still have the issue with my "hardware reserved" being way too much - usually 2604 MB. Sometimes it jumps down to 556 MB after a restart, but then usually pops back to 2604 on another restart.

Is this related? Or something else do you think? Most posts I've found were about recently installed RAM, but I haven't changed my hardware at all.

I'm starting to think it's something else entirely - but it just exacerbates the memory problem when it happens because I have less to play with.

I'm thinking I'll just add some more memory to at least give myself more wiggle room.

Any other ideas?
My System SpecsSystem Spec
.

16 May 2015   #14
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

"Hardware Reserved" - no idea about that. Sorry!

Re: svchost netsvcs memory leak.

Well finally fixed it but it took a couple of hours.
Edit: Actually the fix was only temporary and the problem returned after a couple of reboots. See the next post.

Briefly the steps were:

Make a system image backup (important)

Run a specific MS Fixit in aggressive mode to repair BITS and Windows Update Agent.

Reboot with no internet connection.

Run a script to register all DLL and OCX files.

Reboot.

BITS service now starts properly when called.

Disable security software that could interfere with installing windows updates.

Run a check for Windows Updates and install important & recommended updates.

Reboot.

Run another check for Windows Updates.

Reboot.

Repeat until all updates are installed.

Note: Some updates took more than one attempt to install.
My System SpecsSystem Spec
16 May 2015   #15
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Okay so the above post didn't work in the end. Tried a different approach.

Edit: Ignore the script in this post - see next post.

Ran a whole lot of commands to reset windows updates components then dicovered that the same result could be achieved by running a batch file.

Note: I still needed to run that MS Fixit that I mentioned with aggressive options then reboot before running the other repairs.

On another note: It was also neccessary to use the default windows Hosts File during repairs and not the heavily modified one that I usually use.

I can't post a link to the MS Fixit as I've only got a direct download link.

1. Run MS Fixit (aggressive option)
2. Reboot.
3. Reset Hosts.
4. Disable security software
5. Run the batch file - contents as follows:

Code:
@echo off
cls

REM ==================================================================================
REM DESCRIPTION    : This script resets all of Windows Update Agent settings.
REM AUTHOR         : Luca Fabbri
REM VERSION HISTORY: 2.0 - Start
REM ==================================================================================

@echo 1. Stopping Windows Update, BITS, Application Identity, Cryptographic Services and SMS Host Agent services...
net stop wuauserv
net stop bits
net stop appidsvc
net stop cryptsvc
net stop ccmexec

@echo 2. Checking if services were stopped successfully...
sc query wuauserv | findstr /I /C:"STOPPED"
if %errorlevel% NEQ 0 goto END

sc query bits | findstr /I /C:"STOPPED"
if %errorlevel% NEQ 0 goto END

sc query appidsvc | findstr /I /C:"STOPPED"
if %errorlevel% NEQ 0 sc query appidsvc | findstr /I /C:"OpenService FAILED 1060"
if %errorlevel% NEQ 0 goto END

sc query cryptsvc | findstr /I /C:"STOPPED"
if %errorlevel% NEQ 0 goto END

sc query ccmexec | findstr /I /C:"STOPPED"
if %errorlevel% NEQ 0 sc query ccmexec | findstr /I /C:"OpenService FAILED 1060"
if %errorlevel% NEQ 0 goto END

@echo 3. Deleting AU cache folder and log file... 
del /f /q "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr*.dat"
del /f /s /q %SystemRoot%\SoftwareDistribution\*.* 
del /f /s /q %SystemRoot%\system32\catroot2\*.*
del /f /q %SystemRoot%\WindowsUpdate.log 

REM @echo 3. Renaming AU cache folder and log file...
REM del /f /q "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr*.dat"
REM ren %SystemRoot%\SoftwareDistribution *.bak
REM ren %SystemRoot%\system32\catroot2 *.bak
REM ren %SystemRoot%\WindowsUpdate.log *.bak

REM sc.exe sdset bits D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
REM sc.exe sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

@echo 4. Re-registering DLL files...
cd /d %WinDir%\system32
regsvr32.exe /s atl.dll
regsvr32.exe /s urlmon.dll
regsvr32.exe /s mshtml.dll
regsvr32.exe /s shdocvw.dll
regsvr32.exe /s browseui.dll
regsvr32.exe /s jscript.dll
regsvr32.exe /s vbscript.dll
regsvr32.exe /s scrrun.dll
regsvr32.exe /s msxml.dll
regsvr32.exe /s msxml3.dll
regsvr32.exe /s msxml6.dll
regsvr32.exe /s actxprxy.dll
regsvr32.exe /s softpub.dll
regsvr32.exe /s wintrust.dll
regsvr32.exe /s dssenh.dll
regsvr32.exe /s rsaenh.dll
regsvr32.exe /s gpkcsp.dll
regsvr32.exe /s sccbase.dll
regsvr32.exe /s slbcsp.dll
regsvr32.exe /s cryptdlg.dll
regsvr32.exe /s oleaut32.dll
regsvr32.exe /s ole32.dll
regsvr32.exe /s shell32.dll
regsvr32.exe /s initpki.dll
regsvr32.exe /s wuapi.dll
regsvr32.exe /s wuaueng.dll
regsvr32.exe /s wuaueng1.dll
regsvr32.exe /s wucltui.dll
regsvr32.exe /s wups.dll
regsvr32.exe /s wups2.dll
regsvr32.exe /s wuweb.dll
regsvr32.exe /s qmgr.dll
regsvr32.exe /s qmgrprxy.dll
regsvr32.exe /s wucltux.dll
regsvr32.exe /s muweb.dll
regsvr32.exe /s wuwebv.dll

@echo 5. Removing WSUS Client Id...
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v AccountDomainSid /f
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v PingID /f
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f

@echo 6. Resetting Winsock and WinHTTP Proxy...
netsh winsock reset
proxycfg.exe -d
netsh winhttp reset proxy

@echo 7. Starting SMS Host Agent, Cryptographic Services, Application Identity, BITS, Windows Update services...
net start ccmexec
net start cryptsvc
net start appidsvc
net start bits
net start wuauserv

@echo 8. Deleting all BITS jobs...
bitsadmin.exe /reset /allusers

@echo 9. Forcing AU discovery...
wuauclt /resetauthorization /detectnow

:END
6. Reboot

7. Reinstall Windows Update Agent. Can provide a link to download.

8. Reboot.

The above seems to work for me but maybe you'd get different results!
My System SpecsSystem Spec
19 May 2015   #16
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

New instructions to replace those in the previous post:

Step 5 should be:

Open an Elevated Command Prompt.

Run the following.

net stop wuauserv
net stop bits
net stop appidsvc
net stop cryptsvc

del /f /q "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr*.dat"
del /f /s /q %SystemRoot%\SoftwareDistribution\*.*
del /f /s /q %SystemRoot%\system32\catroot2\*.*
del /f /q %SystemRoot%\WindowsUpdate.log

Note: On my machine I had to force delete the four entries above using software that can force delete files/ folders. and manually search for them to confirm deletion.

Run Powershell (in Elevated Command Prompt)

Use powershell to run the following:

sc.exe sdset bits D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRP WPDTLOCRRC;;;PU)
REM sc.exe sdset wuauserv D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRP WPDTLOCRRC;;;PU)

Exit Powershell but leave command prompt window open and run the following:

regsvr32.exe /s atl.dll
regsvr32.exe /s urlmon.dll
regsvr32.exe /s mshtml.dll
regsvr32.exe /s shdocvw.dll
regsvr32.exe /s browseui.dll
regsvr32.exe /s jscript.dll
regsvr32.exe /s vbscript.dll
regsvr32.exe /s scrrun.dll
regsvr32.exe /s msxml.dll
regsvr32.exe /s msxml3.dll
regsvr32.exe /s msxml6.dll
regsvr32.exe /s actxprxy.dll
regsvr32.exe /s softpub.dll
regsvr32.exe /s wintrust.dll
regsvr32.exe /s dssenh.dll
regsvr32.exe /s rsaenh.dll
regsvr32.exe /s gpkcsp.dll
regsvr32.exe /s sccbase.dll
regsvr32.exe /s slbcsp.dll
regsvr32.exe /s cryptdlg.dll
regsvr32.exe /s oleaut32.dll
regsvr32.exe /s ole32.dll
regsvr32.exe /s shell32.dll
regsvr32.exe /s initpki.dll
regsvr32.exe /s wuapi.dll
regsvr32.exe /s wuaueng.dll
regsvr32.exe /s wuaueng1.dll
regsvr32.exe /s wucltui.dll
regsvr32.exe /s wups.dll
regsvr32.exe /s wups2.dll
regsvr32.exe /s wuweb.dll
regsvr32.exe /s qmgr.dll
regsvr32.exe /s qmgrprxy.dll
regsvr32.exe /s wucltux.dll
regsvr32.exe /s muweb.dll
regsvr32.exe /s wuwebv.dll

Open regedit and manually delete the follwing (if found)

"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v AccountDomainSid /f
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v PingID /f
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f

From Elevated Command Prompt:

net start cryptsvc
net start appidsvc
net start bits
net start wuauserv

Run Powershell again (from your open Command Prompt Window)

Execute the following:

bitsadmin.exe /reset /allusers

wuauclt /resetauthorization /detectnow

Exit Powershell, Exit Command Prompt.

Reboot.
My System SpecsSystem Spec
20 May 2015   #17
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 
Windows Update Agent issues?

Okay so I've done some more digging and here's what I suspect.

Installing KB2990214 also installs the latest Windows Update Agent.

Quote:

Quote from article linked below.

These WU [Windows Update] clients are used as part of the Windows 10 upgrade scenarios which will go live at release but are still used for down-level operating systems as the "regular" Windows Update client. This update is applicable to your systems even if you're not planning to migrate to Windows 10, so don't think you can skip it.
Microsoft elaborates on KB 2990214, KB 3044374 Win10 nagware

So having removed that update might have caused issues with Windows Update Agent on my own machine resulting in sky high svchost.exe netsvcs issues.

Anyway I've fixed it by resetting Windows Update Components and reinstalling Windows Update Agent and everything works as it should.

For now I've hidden KB2990214 and will wait to see if it's possible to install the latest Windows Update Agent using a standalone installer at some point in the future.

@guilyou

Four posts in different threads advising people to disable windows updates when experiencing problems with svchost.exe isn't helpful in my opinion. I suppose some users might like that approach.

Never turn automatic updates off. If you did just that and end up with problems, itís your fault.
My System SpecsSystem Spec
23 May 2015   #18
narc

Windows 7 Professional x86
 
 

Hi guys,
i've installed windows 7 Professional on my old laptop, but i've this problem with Windows Update, during "Check for Updates":

It does not seem normal memory usage!
Callender, you can write a step by step guide to solve it? i'm little confuse about the passages that you mentioned above.

1. Run MS Fixit (aggressive option)
where can i found a link to download it? i've found only this: https://support.microsoft.com/en-us/kb/971058

thanks
My System SpecsSystem Spec
23 May 2015   #19
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 
Windows updates issues

Quote   Quote: Originally Posted by narc View Post
Hi guys,
i've installed windows 7 Professional on my old laptop, but i've this problem with Windows Update, during "Check for Updates":

It does not seem normal memory usage!
Callender, you can write a step by step guide to solve it? i'm little confuse about the passages that you mentioned above.

1. Run MS Fixit (aggressive option)
where can i found a link to download it? i've found only this: https://support.microsoft.com/en-us/kb/971058

thanks
Link to MS Fixit in this thread:

Windows Update memory leak, and random CPU spikes


Write a guide? Well not really. You need to be aware that for some users the fix won't work anyway and in my case I needed to run some of the fixes a few times and reboot a few times too before the changes stuck.


Steps are:

Make a system image backup (important) so that you can restore in the event of problems.

Check for an remove this update if found: svchost.exe (netsvcs) draining all my memory

Reboot.

Reset Hosts or make sure that you're using the default hosts file during repairs.
Disable security software.

Run MS Fixit (aggressive options)

Reboot and stop Windows Update service.

Run the batch file here:

Windows Update - Reset - see option 3.

If you get problems running the batch file open an elevated command prompt and run the commands manually using Powershell in instances where you get error messages.

Reboot

Edit:

If there are still problems - Search for and remove update 3006137 using Elevated Command Prompt and Powershell.


Open an Elevated Command Prompt that should open at C:\Windows\System32

Type Powershell then press Enter.

Type the following:

get-hotfix -id KB:3006137

Press Enter and wait to see if it's found. If found type:

wusa /uninstall /KB:3006137

Press Enter. Wait for the update to uninstall.

Reboot.

Using Internet Explorer follow the instructions in this article.

http://smallbusiness.support.microso...n-us/kb/947821

Scroll down to "Download the package from Microsoft Update Catalog directly" and follow the instructions using Internet Explorer.

Then continue from where it says "For example, you may have problems when you try to install update 3006137 from Windows Update in Windows 7. In this situation, you can download the update package and try to install the update manually. To do this, follow these steps:
Open Microsoft Update Catalog in Internet Explorer."

Download update 3006137 as described and install it.

Reboot.

Note: You will see high svchost usage as file integrity checks are carried out. This could take 30 minutes or more. Once they're finished svchost usage will return to normal and Windows will check for updates. Hide any updates that you don't require and install the ones you need.

Reboot.

Change Windows Update settings to "Check for updates but let me choose whether to download and install them"
My System SpecsSystem Spec
01 Jul 2015   #20
Nedly

Debian Custom
 
 

Hi everyone, just signed up for this forum to help. I fixed this on two machines recently, it is an issue in updates regarding svchost + windows management framework. The best fix is to go to control panal | admin tools | services -- find service called "superfetch" and double click it. In its info you can first stop the service, and then set the startup default to disabled. It is fixed instantly.

My System SpecsSystem Spec
Reply

 svchost.exe (netsvcs) draining all my memory




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
svchost (netsvcs) download from Akamai - What is initiating?
Platform: Windows 7 Home Premium 64 bit, ASUS K52F laptop Note: I have posted this on 2 other forums & did not receive a solution so I am posting it here. Hope that is okay. I have observed extensive downloads (using the NetMeter gadget) averaging 400-600kbps for up to 10 minutes from Akamai....
Network & Sharing
svchost.exe (netsvcs) is always downloading something
im running build 7100 fresh install. help, i need to shut this thing down.
Performance & Maintenance
svchost.exe(netsvcs) problem cpu load high
Hello, I have a problem. In the task manager -> system resources, I see that a process called svchost.exe(netsvcs) (if I'm correct) is using about 50% of cpu. The cpu is AMD dual core 2.81GHz. This doesn't always happen. Right now, it uses 48 %. Should I be concerned? Is it a legitimate process...
Performance & Maintenance
svchost.exe (netsvcs) maxing CPU out by streaming in audio feeds
I have encounter a problem with this svcshost streaming constant feeds of audio in. I have tried a registery fixer as suggested on search I did and it did fix it. I researched the problem on this forum and tried several things others suggested back in 2009 to others. Such as making sure that my...
Performance & Maintenance
svchost.exe -k netsvcs Slowing Down Computer
It's been doing this for a while now, too.. I don't know if this has anything to do with it, but I disabled windows update a long time ago; if I try to update it now, my system can't handle it, and it reverts its changes. Help would be appreciated. Where would I start?
General Discussion
Svchost.exe (netsvcs) and download related issue
hello everyone, i hope this is the right place to post this. it started about 2 weeks ago, i noticed that this process, Svchost.exe (netsvcs), is always downloading something, i tried alot of ideas that i read about online and non of them worked, i was using certain anti-virus when it happened....
Network & Sharing


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 21:07.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App