Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: svchost.exe (netsvcs) draining all my memory

12 Jul 2015   #41
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Okay so the OP's problem is related to windows updates. Svchost high memory usage that returns to normal if windows updates and BITS service are stopped. Looking at NSI service is another matter entirely and I don't know much about it. If it helps - here's memory usage by that service on my machine:

svchost.exe (netsvcs) draining all my memory-whats-running.jpg

Here's the other services runiing under the same instance of svchost.

svchost.exe (netsvcs) draining all my memory-svchost.jpg

A complete shot in the dark here. Check your system clock?

Accurate Time




My System SpecsSystem Spec
.
12 Jul 2015   #42
Nedly

Debian Custom
 
 

Working with Windows makes me reminisce in times when I tried to understand women. I prepped for the A+ and have been all through W down to the CMD. For now I keep it around for when I have some class that wants me working in VB, but I end up flustered with the big W after using Linux for so long. It just seems to make every computer run like a gimped rabbit.
My System SpecsSystem Spec
12 Jul 2015   #43
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

@ Nedly. To answer your earlier question. Yes mine was a windows updates issue like the OP's.

@ripsaw. See if youi can work out which service running under svchost is using lots of memory like my screenshot in Post #41 that shows (normal) memory usage for NSI Service.

Will be offline for a while (getting some food) but I'd be really interested to learn how you manage to track this down if uou can.
My System SpecsSystem Spec
.

12 Jul 2015   #44
ripsw

windows 7 professional 64 bit
 
 

Quote   Quote: Originally Posted by Callender View Post
@ Nedly. To answer your earlier question. Yes mine was a windows updates issue like the OP's.

@ripsaw. See if youi can work out which service running under svchost is using lots of memory like my screenshot in Post #41 that shows (normal) memory usage for NSI Service.

Will be offline for a while (getting some food) but I'd be really interested to learn how you manage to track this down if uou can.
@Calender i'll do that problem is the rate of consumption of memory is very slow at times where others it just takes off.
My System SpecsSystem Spec
12 Jul 2015   #45
Nedly

Debian Custom
 
 

Take a look at this page for example. Scroll down to the bottom in the right pane you will see "Related Searches" and buttons "top / Rising". If you click Rising in the right pane you will find it is considered a "breakout" for Windows 7 and Vista....

https://www.google.com/trends/explore#q=svchost.exe
My System SpecsSystem Spec
12 Jul 2015   #46
Nedly

Debian Custom
 
 

It seems there have been malware reports in the past with these results. Kaspersky has reported on it as well. We should check for that in the infected computers. It is titled malware, and according to others there is one way to check by going to the svchost.exe service | right click and select "open file location". If you find it is in a dir other than C:\\Windows\System32, then it could be malware based. When it is malware based it is worm/trojan based and it replicates itself and lives in the 'temp' dir.

It would be great if we could check this just to mark it off of the list.

Memory leaks is an issue that has happened before.. Though this doc is outdated, it is an example of where the issue probably is if it is not malware.

"Application popup: svchost.exe - Application Error : The instruction at "0x745f2780" referenced memory at "0x00000070". The memory could not be "read"."

https://support.microsoft.com/en-us/kb/916089/en-us


One bug forum had a post regarding some shop with 30+ infected computers with the same issue, all running auto updates. If we can concentrate the problem updates we can uninstall the specific ones, or find patches for them.
My System SpecsSystem Spec
12 Jul 2015   #47
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Okay Nedly from what you said earlier it's not malware disguising itself as svchost.exe as it would appear that you have legitimate services running under that particular svcost instance. You can check running processes against VirusTotal using ProcessExplorer. There's a tutorial here:

Process Explorer + VirusTotal (to check all processes with 50+ AV's)

You can probaly ignore process with only one or two detections.

I also made a post a while back on SigCheckGUI which can do the same thing but in addition scan all executables in any directory specified. The admins must have deleted it. Probably got a complaint from a user who didn't like what they were reading!

Here's an article about it instead:

Check Windows folders for file signatures with SigcheckGUI - gHacks Tech News
My System SpecsSystem Spec
12 Jul 2015   #48
Nedly

Debian Custom
 
 

Can we check this on the infected computers? -- I am still working on setting up a system so I am not up to par yet. If this update is installed, I would wonder if removing this specific update for a test would yield results...

https://support.microsoft.com/en-us/kb/3050265

My other theory: when I look at updates available now compared to what updates were available "#" long ago, there is a differentiation. I think it is possible that Microsoft bundled up some of their older updates and changed things a bit. How easy would it be to remove all of the installed updates in a PC? - , and then scan for new updates -- reinstall.

I am going through various updates now, I will post as soon as I have some leads.
My System SpecsSystem Spec
12 Jul 2015   #49
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Are we back on windows upates again. I thought we had moved on tp a different problem with a different svchost process. Anyway for me the problem svchost process was running the windows update service. I can't answer your question on that specific update. All I can say is that I have previously blocked some windows 10 upgrade updates and installed others before removing them.

Here's the ones I didn't install and also the ones I removed. The ones marked xx were removed and the others not installed and hidden.

KB:2876229
KB:2923545
KB:2970228 xx
KB:3035583
KB:2990214
KB:3021917
KB:3068708
KB:2592687
KB:2660075 xx
KB:2506928 xx
KB:2952664
KB:3050265
KB:2726535 xx
KB:2994023
KB:3022345 xx
KB:3068708 xx

If you want to remove any you can check this post:

http://www.sevenforums.com/general-d...ows-7-8-a.html

Note the colon is needed if using the unistall command but not when checking which ones are installed.
My System SpecsSystem Spec
12 Jul 2015   #50
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Aslo note: They will download and re-install if you set windows updates to autocheck and autoinstall.
My System SpecsSystem Spec
Reply

 svchost.exe (netsvcs) draining all my memory




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
svchost (netsvcs) download from Akamai - What is initiating?
Platform: Windows 7 Home Premium 64 bit, ASUS K52F laptop Note: I have posted this on 2 other forums & did not receive a solution so I am posting it here. Hope that is okay. I have observed extensive downloads (using the NetMeter gadget) averaging 400-600kbps for up to 10 minutes from Akamai....
Network & Sharing
svchost.exe (netsvcs) is always downloading something
im running build 7100 fresh install. help, i need to shut this thing down.
Performance & Maintenance
svchost.exe(netsvcs) problem cpu load high
Hello, I have a problem. In the task manager -> system resources, I see that a process called svchost.exe(netsvcs) (if I'm correct) is using about 50% of cpu. The cpu is AMD dual core 2.81GHz. This doesn't always happen. Right now, it uses 48 %. Should I be concerned? Is it a legitimate process...
Performance & Maintenance
svchost.exe (netsvcs) maxing CPU out by streaming in audio feeds
I have encounter a problem with this svcshost streaming constant feeds of audio in. I have tried a registery fixer as suggested on search I did and it did fix it. I researched the problem on this forum and tried several things others suggested back in 2009 to others. Such as making sure that my...
Performance & Maintenance
svchost.exe -k netsvcs Slowing Down Computer
It's been doing this for a while now, too.. I don't know if this has anything to do with it, but I disabled windows update a long time ago; if I try to update it now, my system can't handle it, and it reverts its changes. Help would be appreciated. Where would I start?
General Discussion
Svchost.exe (netsvcs) and download related issue
hello everyone, i hope this is the right place to post this. it started about 2 weeks ago, i noticed that this process, Svchost.exe (netsvcs), is always downloading something, i tried alot of ideas that i read about online and non of them worked, i was using certain anti-virus when it happened....
Network & Sharing


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 00:27.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App