Svchost.exe constantly taking up about 50% CPU and lots of memory.

DarkGhost

New member
Local time
8:39 PM
Messages
10
The problem is svchost.exe (localservice). I have posted an image which contains all services under that process.

Please help me SevenForums, you're my only hope.
 

Attachments

  • Svchost PROBLEM.jpg
    Svchost PROBLEM.jpg
    55 KB · Views: 28

My Computer My Computer

At a glance

Windows 7 home premium x64AMD E-450 APU HD graphics 1.6516 GB
Computer type
Laptop
Computer Manufacturer/Model Number
Toshiba Satellite c655d
OS
Windows 7 home premium x64
CPU
AMD E-450 APU HD graphics 1.65
Memory
16 GB
Antivirus
Eset Smart Security 8
Browser
Chrome
Is this happening every boot? Open a resource monitor and switch to CPU tab, sort by CPU. See if you can get additional info, take a screenshot if you can and post here.
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64 SP1AMD Phenom 2 1090T2x8GB Kingston HyperX Fury Black 1600Mhz Unga...MSI GTX 970 Gaming 4G
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Build
OS
Windows 7 Ultimate x64 SP1
CPU
AMD Phenom 2 1090T
Motherboard
Gigabyte GA-890FXA-UD5
Memory
2x8GB Kingston HyperX Fury Black 1600Mhz Unganged
Graphics Card(s)
MSI GTX 970 Gaming 4G
Sound Card
Realtek On-Board HD 7.1 Audio / Logitech G35
Monitor(s) Displays
3xAcer GD245HQ
Screen Resolution
1920x1080
Hard Drives
Samsung 850 Pro 512GB SSD - OS /
WD Caviar Black SATA 3 - 1 TBx2 - Dynamic RAID 0 /
WD Caviar Green SATA 2 - 640GBx2 - Dynamic RAID 0 /
WD Caviar Green SATA 2 - 640GB - Internal Backup /
Seagate Barracude SATA 3 - 3TB - External Backup/ Sync
PSU
HighPower 1000W
Case
Cooler Master HAF 932
Cooling
Noctua NH-D14
Keyboard
Logitech G19
Mouse
Logitech G500
Internet Speed
100/4 Mbit Cable (100GB quota)
Antivirus
ZoneAlarm Extreme Security / MBAM Pro / MBAE Free / SAS Free
Browser
IE 11 - Firefox - Chrome
Other Info
Logitech F710/ G27/ G940/ Z5500 // TrackIR 5 // Nvidia 3D Surround Vision
It does not start at boot, it seems to be random as to when it starts but once it begins it does not go away. As for what you want can you be more specific? I opened the resource monitor but am not sure what you want me to show you.

Here is two images from the resource monitor.
 

Attachments

  • Svchost resmon1.jpg
    Svchost resmon1.jpg
    35.1 KB · Views: 5
  • Svchost resmon2.jpg
    Svchost resmon2.jpg
    38 KB · Views: 3

My Computer My Computer

At a glance

Windows 7 home premium x64AMD E-450 APU HD graphics 1.6516 GB
Computer type
Laptop
Computer Manufacturer/Model Number
Toshiba Satellite c655d
OS
Windows 7 home premium x64
CPU
AMD E-450 APU HD graphics 1.65
Memory
16 GB
Antivirus
Eset Smart Security 8
Browser
Chrome
In CPU tab of Resource Monitor sort by CPU (like you did), now tick the "svchost.exe (LocalService)" at left most column (Services part will now show only LocalService ones). Lets see which one actually consumes CPU time.
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64 SP1AMD Phenom 2 1090T2x8GB Kingston HyperX Fury Black 1600Mhz Unga...MSI GTX 970 Gaming 4G
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Build
OS
Windows 7 Ultimate x64 SP1
CPU
AMD Phenom 2 1090T
Motherboard
Gigabyte GA-890FXA-UD5
Memory
2x8GB Kingston HyperX Fury Black 1600Mhz Unganged
Graphics Card(s)
MSI GTX 970 Gaming 4G
Sound Card
Realtek On-Board HD 7.1 Audio / Logitech G35
Monitor(s) Displays
3xAcer GD245HQ
Screen Resolution
1920x1080
Hard Drives
Samsung 850 Pro 512GB SSD - OS /
WD Caviar Black SATA 3 - 1 TBx2 - Dynamic RAID 0 /
WD Caviar Green SATA 2 - 640GBx2 - Dynamic RAID 0 /
WD Caviar Green SATA 2 - 640GB - Internal Backup /
Seagate Barracude SATA 3 - 3TB - External Backup/ Sync
PSU
HighPower 1000W
Case
Cooler Master HAF 932
Cooling
Noctua NH-D14
Keyboard
Logitech G19
Mouse
Logitech G500
Internet Speed
100/4 Mbit Cable (100GB quota)
Antivirus
ZoneAlarm Extreme Security / MBAM Pro / MBAE Free / SAS Free
Browser
IE 11 - Firefox - Chrome
Other Info
Logitech F710/ G27/ G940/ Z5500 // TrackIR 5 // Nvidia 3D Surround Vision
OK found it. I think. It was the tab just below processes in the cpu tab. Tell me if you need anything else.

EDIT: the nsi shows up as "network store interface service"
 

Attachments

  • Svchost resmon3.jpg
    Svchost resmon3.jpg
    77.9 KB · Views: 2
Last edited:

My Computer My Computer

At a glance

Windows 7 home premium x64AMD E-450 APU HD graphics 1.6516 GB
Computer type
Laptop
Computer Manufacturer/Model Number
Toshiba Satellite c655d
OS
Windows 7 home premium x64
CPU
AMD E-450 APU HD graphics 1.65
Memory
16 GB
Antivirus
Eset Smart Security 8
Browser
Chrome
Last edited:

My Computer My Computer

At a glance

Microsoft Windows 7 Home Premium 64-bit 7601 ...AMD C-60 APU with Radeon(tm) HD Graphics4.00 GBAMD Radeon HD 6290 Graphics
Computer type
Laptop
Computer Manufacturer/Model Number
ASUS
OS
Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
CPU
AMD C-60 APU with Radeon(tm) HD Graphics
Motherboard
ASUSTeK COMPUTER INC. X501U
Memory
4.00 GB
Graphics Card(s)
AMD Radeon HD 6290 Graphics
Sound Card
(1) AMD High Definition Audio Device (2) Realtek High Defi
Screen Resolution
1366 x 768 x 32 bits (4294967296 colors) @ 60 Hz
Hard Drives
Hitachi HTS545050A7E380 SATA Disk Device
Antivirus
Comodo CIS & FW, SecureAplus App Whitelisting, Threatfire
Browser
Cyberfox 64bit, Opera 64bit, Airfox
Other Info
Spy-The-Spy, HitmanPro.Alert, Norton Connect Safe, MJRegWatcher, BitDefender TrafficLight, Voodoo Shield, Zemana AntiMalware

My Computer My Computer

At a glance

Windows 7 Ultimate x64 SP1AMD Phenom 2 1090T2x8GB Kingston HyperX Fury Black 1600Mhz Unga...MSI GTX 970 Gaming 4G
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Build
OS
Windows 7 Ultimate x64 SP1
CPU
AMD Phenom 2 1090T
Motherboard
Gigabyte GA-890FXA-UD5
Memory
2x8GB Kingston HyperX Fury Black 1600Mhz Unganged
Graphics Card(s)
MSI GTX 970 Gaming 4G
Sound Card
Realtek On-Board HD 7.1 Audio / Logitech G35
Monitor(s) Displays
3xAcer GD245HQ
Screen Resolution
1920x1080
Hard Drives
Samsung 850 Pro 512GB SSD - OS /
WD Caviar Black SATA 3 - 1 TBx2 - Dynamic RAID 0 /
WD Caviar Green SATA 2 - 640GBx2 - Dynamic RAID 0 /
WD Caviar Green SATA 2 - 640GB - Internal Backup /
Seagate Barracude SATA 3 - 3TB - External Backup/ Sync
PSU
HighPower 1000W
Case
Cooler Master HAF 932
Cooling
Noctua NH-D14
Keyboard
Logitech G19
Mouse
Logitech G500
Internet Speed
100/4 Mbit Cable (100GB quota)
Antivirus
ZoneAlarm Extreme Security / MBAM Pro / MBAE Free / SAS Free
Browser
IE 11 - Firefox - Chrome
Other Info
Logitech F710/ G27/ G940/ Z5500 // TrackIR 5 // Nvidia 3D Surround Vision
The problem with this is that I have never updated the graphics driver. Any suggestions on this?

As for Malwarebytes Anti-Malware, wouldn't this conflict with Eset Smart Security?

I will look into the clean start up but honestly I am not sure how far I will be able to get with that due to this issue not popping up at a predictable time.

Could this have anything to do with an issue that the Eset firewall had recently?

7/12/2015 6:02:55 PM Duplicate IP addresses detected in network ***.***.1.5 ***.***.1.2 ARP
7/12/2015 6:02:02 PM Detected ARP cache poisoning attack ***.***.1.5 ***.***.1.2 ARP

I did a check and everything seemed to say that it is just something that Eset picks up sometimes. After checking to make sure it was not someone trying to get into my network I should add the 1.5 (which is another system in the network) to the zone as being exempt from active protection.
 

My Computer My Computer

At a glance

Windows 7 home premium x64AMD E-450 APU HD graphics 1.6516 GB
Computer type
Laptop
Computer Manufacturer/Model Number
Toshiba Satellite c655d
OS
Windows 7 home premium x64
CPU
AMD E-450 APU HD graphics 1.65
Memory
16 GB
Antivirus
Eset Smart Security 8
Browser
Chrome
MBAM is not an AV itself. It supplements and works nicely (and advised to run) along with a proper AV.

You will have to wait for the issue to happen and decide if it has been fixed with a clean startup (after waiting for enough time). Then you can start enabling services and startup programs a few at a time and wait again. It is tedious especially when issue doesn't happen every boot.
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64 SP1AMD Phenom 2 1090T2x8GB Kingston HyperX Fury Black 1600Mhz Unga...MSI GTX 970 Gaming 4G
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Build
OS
Windows 7 Ultimate x64 SP1
CPU
AMD Phenom 2 1090T
Motherboard
Gigabyte GA-890FXA-UD5
Memory
2x8GB Kingston HyperX Fury Black 1600Mhz Unganged
Graphics Card(s)
MSI GTX 970 Gaming 4G
Sound Card
Realtek On-Board HD 7.1 Audio / Logitech G35
Monitor(s) Displays
3xAcer GD245HQ
Screen Resolution
1920x1080
Hard Drives
Samsung 850 Pro 512GB SSD - OS /
WD Caviar Black SATA 3 - 1 TBx2 - Dynamic RAID 0 /
WD Caviar Green SATA 2 - 640GBx2 - Dynamic RAID 0 /
WD Caviar Green SATA 2 - 640GB - Internal Backup /
Seagate Barracude SATA 3 - 3TB - External Backup/ Sync
PSU
HighPower 1000W
Case
Cooler Master HAF 932
Cooling
Noctua NH-D14
Keyboard
Logitech G19
Mouse
Logitech G500
Internet Speed
100/4 Mbit Cable (100GB quota)
Antivirus
ZoneAlarm Extreme Security / MBAM Pro / MBAE Free / SAS Free
Browser
IE 11 - Firefox - Chrome
Other Info
Logitech F710/ G27/ G940/ Z5500 // TrackIR 5 // Nvidia 3D Surround Vision
I will get it.

Could clean startup cause system instability or cause issues somewhere like in the browser? Would that also turn of Eset?

Would turning down the priority help or hurt?
 

My Computer My Computer

At a glance

Windows 7 home premium x64AMD E-450 APU HD graphics 1.6516 GB
Computer type
Laptop
Computer Manufacturer/Model Number
Toshiba Satellite c655d
OS
Windows 7 home premium x64
CPU
AMD E-450 APU HD graphics 1.65
Memory
16 GB
Antivirus
Eset Smart Security 8
Browser
Chrome
Windows doesn't need any third party programs/services to start up. However, some programs which depend on the services disabled may disfunction. They will start working when the appropriate service/s are enabled once again. However, disabling everything (except AV services and programs - ESET in your case) is crucial to efficiently testing a clean startup.

I don't understand the priority bit, priority of ESET? I don't think you would need to change its default.
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64 SP1AMD Phenom 2 1090T2x8GB Kingston HyperX Fury Black 1600Mhz Unga...MSI GTX 970 Gaming 4G
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Build
OS
Windows 7 Ultimate x64 SP1
CPU
AMD Phenom 2 1090T
Motherboard
Gigabyte GA-890FXA-UD5
Memory
2x8GB Kingston HyperX Fury Black 1600Mhz Unganged
Graphics Card(s)
MSI GTX 970 Gaming 4G
Sound Card
Realtek On-Board HD 7.1 Audio / Logitech G35
Monitor(s) Displays
3xAcer GD245HQ
Screen Resolution
1920x1080
Hard Drives
Samsung 850 Pro 512GB SSD - OS /
WD Caviar Black SATA 3 - 1 TBx2 - Dynamic RAID 0 /
WD Caviar Green SATA 2 - 640GBx2 - Dynamic RAID 0 /
WD Caviar Green SATA 2 - 640GB - Internal Backup /
Seagate Barracude SATA 3 - 3TB - External Backup/ Sync
PSU
HighPower 1000W
Case
Cooler Master HAF 932
Cooling
Noctua NH-D14
Keyboard
Logitech G19
Mouse
Logitech G500
Internet Speed
100/4 Mbit Cable (100GB quota)
Antivirus
ZoneAlarm Extreme Security / MBAM Pro / MBAE Free / SAS Free
Browser
IE 11 - Firefox - Chrome
Other Info
Logitech F710/ G27/ G940/ Z5500 // TrackIR 5 // Nvidia 3D Surround Vision
Malwarebytes found nothing.

The priority of the svchost.exe I mean.

Apparently a second svchost.exe is now also starting to hog CPUs and memory. Joy.

Could doing a clean restart cause issues with chrome and any extensions installed on it? That is what I primarily do on the laptop.
 

My Computer My Computer

At a glance

Windows 7 home premium x64AMD E-450 APU HD graphics 1.6516 GB
Computer type
Laptop
Computer Manufacturer/Model Number
Toshiba Satellite c655d
OS
Windows 7 home premium x64
CPU
AMD E-450 APU HD graphics 1.65
Memory
16 GB
Antivirus
Eset Smart Security 8
Browser
Chrome
It is not something irreversible :) You can anytime run msconfig again and enable entries. I wouldn't mess with priority.

Also the one that started recently may be a legit one that runs once in a while. You can still try to learn what exactly with the same method from earlier.
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64 SP1AMD Phenom 2 1090T2x8GB Kingston HyperX Fury Black 1600Mhz Unga...MSI GTX 970 Gaming 4G
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Build
OS
Windows 7 Ultimate x64 SP1
CPU
AMD Phenom 2 1090T
Motherboard
Gigabyte GA-890FXA-UD5
Memory
2x8GB Kingston HyperX Fury Black 1600Mhz Unganged
Graphics Card(s)
MSI GTX 970 Gaming 4G
Sound Card
Realtek On-Board HD 7.1 Audio / Logitech G35
Monitor(s) Displays
3xAcer GD245HQ
Screen Resolution
1920x1080
Hard Drives
Samsung 850 Pro 512GB SSD - OS /
WD Caviar Black SATA 3 - 1 TBx2 - Dynamic RAID 0 /
WD Caviar Green SATA 2 - 640GBx2 - Dynamic RAID 0 /
WD Caviar Green SATA 2 - 640GB - Internal Backup /
Seagate Barracude SATA 3 - 3TB - External Backup/ Sync
PSU
HighPower 1000W
Case
Cooler Master HAF 932
Cooling
Noctua NH-D14
Keyboard
Logitech G19
Mouse
Logitech G500
Internet Speed
100/4 Mbit Cable (100GB quota)
Antivirus
ZoneAlarm Extreme Security / MBAM Pro / MBAE Free / SAS Free
Browser
IE 11 - Firefox - Chrome
Other Info
Logitech F710/ G27/ G940/ Z5500 // TrackIR 5 // Nvidia 3D Surround Vision
I tried to install updates and restart but it seemed to slow/stop the updater. So I am going straight to shut down and start praying.

Is there a way to have a program monitor for a spike of activity with that service? Is there a way to find out what might have happened in the event viewer? If I get really desperate is there someone who I could go to for help IRL?

Can you point me to where I can make sure to revert any changes made to chrome and its extensions in case something goes wrong?

Thanks for all the help you have been giving me, wish I could just stop and then restart this stupid NIS service.

Edit: I restarted the system and immediately a different svchost.exe started taking up huge amounts of cpu the service was wuauserv or windows update. I fear this may be because windows update hung before the restart when I tried to stop it.
 
Last edited:

My Computer My Computer

At a glance

Windows 7 home premium x64AMD E-450 APU HD graphics 1.6516 GB
Computer type
Laptop
Computer Manufacturer/Model Number
Toshiba Satellite c655d
OS
Windows 7 home premium x64
CPU
AMD E-450 APU HD graphics 1.65
Memory
16 GB
Antivirus
Eset Smart Security 8
Browser
Chrome
Quick reply before bed time: The tutorial shows how to revert back to normal Windows (Step three).
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64 SP1AMD Phenom 2 1090T2x8GB Kingston HyperX Fury Black 1600Mhz Unga...MSI GTX 970 Gaming 4G
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Build
OS
Windows 7 Ultimate x64 SP1
CPU
AMD Phenom 2 1090T
Motherboard
Gigabyte GA-890FXA-UD5
Memory
2x8GB Kingston HyperX Fury Black 1600Mhz Unganged
Graphics Card(s)
MSI GTX 970 Gaming 4G
Sound Card
Realtek On-Board HD 7.1 Audio / Logitech G35
Monitor(s) Displays
3xAcer GD245HQ
Screen Resolution
1920x1080
Hard Drives
Samsung 850 Pro 512GB SSD - OS /
WD Caviar Black SATA 3 - 1 TBx2 - Dynamic RAID 0 /
WD Caviar Green SATA 2 - 640GBx2 - Dynamic RAID 0 /
WD Caviar Green SATA 2 - 640GB - Internal Backup /
Seagate Barracude SATA 3 - 3TB - External Backup/ Sync
PSU
HighPower 1000W
Case
Cooler Master HAF 932
Cooling
Noctua NH-D14
Keyboard
Logitech G19
Mouse
Logitech G500
Internet Speed
100/4 Mbit Cable (100GB quota)
Antivirus
ZoneAlarm Extreme Security / MBAM Pro / MBAE Free / SAS Free
Browser
IE 11 - Firefox - Chrome
Other Info
Logitech F710/ G27/ G940/ Z5500 // TrackIR 5 // Nvidia 3D Surround Vision
Alright thanks. I decided to say screw it, and just reverted windows back several days. Hopefully this will fix things.

Good night.
 
Last edited:

My Computer My Computer

At a glance

Windows 7 home premium x64AMD E-450 APU HD graphics 1.6516 GB
Computer type
Laptop
Computer Manufacturer/Model Number
Toshiba Satellite c655d
OS
Windows 7 home premium x64
CPU
AMD E-450 APU HD graphics 1.65
Memory
16 GB
Antivirus
Eset Smart Security 8
Browser
Chrome
Update: I used system restore to revert the system back several days ago. This seems to have fixed my issues with windows update. I then ran windows update to get my system up to date it turned out fine.

I know NIS is a service that deals with internet connectivity, would restarting it be possible if this happens again? Is there a way for me to look into just what this service is actually doing?

Is there a program that can monitor for a spike of activity with that service? Is there a way to find out what might have happened in the event viewer? Is there someone who would be really knowledgeable about this?

Thank you for all the help you give me GokAy.
 

My Computer My Computer

At a glance

Windows 7 home premium x64AMD E-450 APU HD graphics 1.6516 GB
Computer type
Laptop
Computer Manufacturer/Model Number
Toshiba Satellite c655d
OS
Windows 7 home premium x64
CPU
AMD E-450 APU HD graphics 1.65
Memory
16 GB
Antivirus
Eset Smart Security 8
Browser
Chrome
I can't answer your questions but glad you fixed it :)
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64 SP1AMD Phenom 2 1090T2x8GB Kingston HyperX Fury Black 1600Mhz Unga...MSI GTX 970 Gaming 4G
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Build
OS
Windows 7 Ultimate x64 SP1
CPU
AMD Phenom 2 1090T
Motherboard
Gigabyte GA-890FXA-UD5
Memory
2x8GB Kingston HyperX Fury Black 1600Mhz Unganged
Graphics Card(s)
MSI GTX 970 Gaming 4G
Sound Card
Realtek On-Board HD 7.1 Audio / Logitech G35
Monitor(s) Displays
3xAcer GD245HQ
Screen Resolution
1920x1080
Hard Drives
Samsung 850 Pro 512GB SSD - OS /
WD Caviar Black SATA 3 - 1 TBx2 - Dynamic RAID 0 /
WD Caviar Green SATA 2 - 640GBx2 - Dynamic RAID 0 /
WD Caviar Green SATA 2 - 640GB - Internal Backup /
Seagate Barracude SATA 3 - 3TB - External Backup/ Sync
PSU
HighPower 1000W
Case
Cooler Master HAF 932
Cooling
Noctua NH-D14
Keyboard
Logitech G19
Mouse
Logitech G500
Internet Speed
100/4 Mbit Cable (100GB quota)
Antivirus
ZoneAlarm Extreme Security / MBAM Pro / MBAE Free / SAS Free
Browser
IE 11 - Firefox - Chrome
Other Info
Logitech F710/ G27/ G940/ Z5500 // TrackIR 5 // Nvidia 3D Surround Vision
Well I have no idea when the original svchost.exe issue will arise again.

Any suggestions on where I might be able to get those questions answered?
 

My Computer My Computer

At a glance

Windows 7 home premium x64AMD E-450 APU HD graphics 1.6516 GB
Computer type
Laptop
Computer Manufacturer/Model Number
Toshiba Satellite c655d
OS
Windows 7 home premium x64
CPU
AMD E-450 APU HD graphics 1.65
Memory
16 GB
Antivirus
Eset Smart Security 8
Browser
Chrome
Back
Top