Solved svchost.exe High CPU usage 98% of at least one CPU.

mitchell65 · Jul 15, 2016

I have had that message a couple of times whilst on the Forum. Haven't noticed it when I am doing anything else.
Here's the info I get when I click on more details;

Filename: svchost.exe
Full Path: c:\windows\system32\svchost.exe

____________________________

____________________________

Developers
Microsoft Corporation

Version
6.1.7600.16385

Identified
21/11/2014 at 18:32:15

Last Used
14/07/2016 at 09:14:42

Startup Item
No

____________________________

Many Users
Millions of users in the Norton Community have used this file.

Mature
This file was released 6 years 11 months ago.

Trusted
Norton has given this file a trusted rating.

____________________________

Source File:
svchost.exe

____________________________

Performance

____________________________

Avg. Resource Usage: Low
Avg. CPU Usage: Low
Avg. Memory Usage: Low
____________________________

Performance Alert

Process ID
444

CPU
98% of at least one CPU.

Memory
Normal

Handles Count
Normal

Disk Read Activity
Normal

Disk Write Activity
Normal
____________________________

File Thumbprint - SHA:
93b2ed4004ed5f7f3039dd7ecbd22c7e4e24b6373b4d9ef8d6e45a179b13a5e8
File Thumbprint - MD5:
c78655bc80301d76ed4fef1c1ea40a7d

Here's a screenshot of Process Explorer which I think indentifies the problem. I'm just not sure what to do to rectify this.

Any help much appreciated.
P.S. I have Malwarebytes Pro installed and running, I have also done a complete scn just to be safe!

Callender · Jul 15, 2016

Get the PID of the problematic svchost.exe process (586 in your screenshot

Run Task Manger and right click on the matching svchost process and choose "Go to service"

Let us know which services are running under it.

If Windows Update shows up it's likely to be the culprit. You can confirm by stopping Windows Update Service via Start> Run> services.msc

Stop then set startup type to disabled and reboot to test.

Also worth a mention:

Grab copies if these and run them:

Svchost Process Analyzer

svchost viewer

The first one helps you check for anything out of the ordinary (malware running under svchost.exe) or unusual services configuration.

The second one just breaks down each svchost.exe process into it's component services.

Windows Update problem (if suspect can also be confirmed using RAMMap:

http://www.sevenforums.com/vip/394745-windows-7-updates-post3239385.html#post3239385

http://www.sevenforums.com/windows-...es-windows-7-8-a-post3163350.html#post3163350

Note: RAMMap must be run when the problem is actually happening.

mitchell65 · Jul 15, 2016

Thanks for the response. Getting a bit late now so will get to it tomorrow. Jusy one point there isn't a PID 586 in my screenshot. Did you perhaps mean "356"?
EDIT: Had a quick look using Process Explorer and there is a Windows Update process in there . Will look again tomorrow as it is not showing high at the moment

Callender · Jul 15, 2016

Yes, sorry. I meant svchost.exe ~~PID 586~~ PID 356 in your screenshot. The process might use a different PID next boot.

svchost is how windows groups running services together and assuming that you do not have an unsigned malware process disguising itself as svchost.exe - the problem is likely to be with one of those services.

mitchell65 · Jul 17, 2016

I think I 'm getting to the nub of the problem. The PID 356 does contain an "update service. Have run RamMap and here's a screenshot of the result after clicking "Active" tab

What's my next step?

Callender · Jul 17, 2016

Well that confirms that you've got the windows update high svchost.exe RAM usage problem. Solving the problem might not br straightforward. Many users report that installing some version of WU Client solves the issue.

If you could possibly take a look at which Windows Update clients are installed it would help. Then for the last couple of months there have been other updates that also need installing to fix the problem.

If you open an Elevated Command Prompt, start a PowerShell prompt and run the following it should produce a list.

http://www.sevenforums.com/performa...andom-cpu-spikes-post3070782.html#post3070782

Use this after the Powershell prompt appears:

Code:

get-hotfix -id KB2990214,KB305026,KB3065987,KB3075851,KB3083324,KB3083710,KB3102810,KB3112343,KB3135445,KB3138612

Here's mine for comparison:

Administrator_ Elevated Command Prompt - Powershell.jpg

Callender · Jul 17, 2016

You could also review this post:

http://www.sevenforums.com/vip/398521-slow-updates.html#post3266227

Then check if any of the updates mentioned are missing.

mitchell65 · Jul 17, 2016

Many thanks. I'm out all day tomorrow, hospital appointment so may not get back until Tuesday.

Callender · Jul 17, 2016

No problem. There are a few other members here who might be able to help too. It's a known problem but the fixes are varied and can be tricky.

mitchell65 · Jul 20, 2016

Am back for a short spell. More Hospital later. Here's the result of the Powershell:

Callender · Jul 20, 2016

See Posts #2 & #3 in this thread:

http://www.sevenforums.com/windows-...te-win-7-x64-completely-dead.html#post3267104

Forget the part about KB3136812 as it's already installed.

After the final reboot and manual update check let us know if it's still not working.

mitchell65 · Jul 20, 2016

Thank you for that response. Have read and understood but have had a long day today so hope to give this matter the time it deserves tomorrow (I'm getting a bit slow in my old age) plus bits of me need replacing. Bit like getting the tyres changed on your car!!

Callender · Jul 20, 2016

Also from your screenshot you have KB2952664 installed. That one is known to cause problems so it's best to uninstall it before doing anything else. You can uninstall via Elevated Command Prompt> Powershell then type:

wusa /uninstall /KB:2952664

Press Enter.

Reboot after the update has uninstalled.

Then go through the rest of those updates.

If it's not working after that there are more steps to try. Even if it is subsequently working there may be a couple of other updates that you can install to help Windows Updates work better.

DavidE · Jul 20, 2016

Install KB3161608, it has a fix for Windows Update Client
https://support.microsoft.com/en-us/kb/3161608

mitchell65 · Jul 21, 2016

Callender
Am back a gain.
Have uninstalled KB2952664.
All other updates listed inPosts #2 & #3 in this thread:

Windows Update (Win 7 x64) is completely dead

are already installed,
Have tried to install KB3168965 via Elevated command Prompt and Powershell but failed . I assume I have the command correct but have included a screenshot of the Cmd window.

I assume i need to edit the "User" but got a bit confused I'm afraid.
Sorry to be a pain but need your help some more!

mitchell65 · Jul 21, 2016

DavidE said:
Install KB3161608, it has a fix for Windows Update Client
https://support.microsoft.com/en-us/kb/3161608

Thanks for that but i cannot download the update. I get this:

Have tried two or three times!

ThrashZone · Jul 21, 2016

Hi,
Try another browser

Make sure KB3020369 is installed
Win-7 32 bit
https://www.microsoft.com/en-us/download/details.aspx?id=46827
Win-7 64 bit
https://www.microsoft.com/en-us/download/details.aspx?id=46817

If it is install this one too KB3161608
Win-7 32bit
https://www.microsoft.com/en-us/download/details.aspx?id=52976
Win-7 64bit
https://www.microsoft.com/en-us/download/details.aspx?id=52974

mitchell65 · Jul 21, 2016

KB3020369 is installed but have tried both Firefox and IE and still get :

ThrashZone · Jul 21, 2016

Hi,
Try In-Private browsing on either ie11 or Firefox on the links.
Or clean boot you obviously have something interfering somewhere.

ThrashZone · Jul 21, 2016

Oops try this link for 64 bit
https://www.microsoft.com/en-us/download/details.aspx?id=52974

Solved svchost.exe High CPU usage 98% of at least one CPU.

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

____________

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

R.I.P. Britton30=Gary

My Computer My Computer

New member

My Computer My Computer

R.I.P. Britton30=Gary

My Computer My Computer

R.I.P. Britton30=Gary

My Computer My Computer

Similar threads

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer