Solved svchost.exe (Local Service) eating my RAM!

[kado897]

Hi Mr Duck.

Regarding point 3. Windows 7 has its own built in imaging. There is a tutorial on it here http://www.sevenforums.com/tutorials/663-backup-complete-computer-create-image-backup.html?filter[2]=Backup%20Restore.

A lot of us however prefer the free Macrium Reflect (link in my sig) Tutorial here.http://www.sevenforums.com/tutorials/73828-imaging-free-macrium.html?filter[2]=Backup%20Restore. It was written for previous version but is still relevant.

 

[MrDuck]

I have found how to uninstall IE10, which others have found to be a solution (have to list all Installed Updates) and will try this soon.
Thanks for the backup info - I will try one of these solutions as they really are a godsend, especially when you have put so much effort into getting customised build.

 

[Callender]

Hello Callender. In response to your various suggestions:

Some people have found rewinding to an early version of IE to be solution (e.g. Massive svchost.exe memory leak w/ nsi windows 7 - Tech Support Forum) but I don't think I can get back to an earlier version than IE10 on my build, as IE10 is not shown in the Uninstall list via Control Panel.

3. I used to do image backups with XP but unfortunately the tool I used (a Ghost variant) did not work with W7. What tool do you use, please?

Now I know that I am very much not alone I will keep researching. This ten page thread seems pretty relevant: nsi memory leaks fixed yet? - Microsoft Community so maybe a Hotfix is the best way forward.

Kind regards

RE: IE11

The correct way to uninstall it is to follow Brink's tutorial.

You will not see earlier versions of IE listed anywhere in Control Panel (Remove Programs) but if you remove the current version it rolls back to the previously installed version.

   Note

For information only. See more details in Brink's tutorial:

How to Uninstall IE11 in Windows 7 to Restore Previous Version of Internet Explorer

Configure Windows Update settings to "Notify but do not download updates" then

1. Close all programs.

2. Click Start, and then click Control Panel.

3. Click Uninstall a Program under the Programs category

4. In the Tasks pane, click View installed updates.

5. In the list of installed updates, double-click Windows Internet Explorer 11.

​

6. In the Uninstall an update dialog box, click Yes.
Note If you are prompted for an administrator password or for confirmation, type the password, or click Continue.

7. Follow the instructions to uninstall Internet Explorer 11.

8. When the uninstall program is finished, restart your computer.

9. After you restart your computer, open Internet Explorer.

10. Click About Internet Explorer on the Help menu. If Internet Explorer 9 or 10 appears in the About Internet Explorer dialog box, then you have successfully completed the uninstall.

It may or may not fix the problem but you could test if you decide to do so.

Also after removal it would be worth running Advanced Disk Cleanup.

See the tutorial here:

How to Use Extended Disk Cleanup in Vista, Windows 7, and Windows 8

You don't need to worry about creating the shortcut mentioned.

From an Elevated Command Prompt use the following command:

%SystemRoot%\System32\Cmd.exe /c Cleanmgr /sageset:65535 & Cleanmgr /sagerun:65535

You will see options appear like this:

​

You should choose Windows Update Cleanup and everything else except

Thumbnails

and

Service Pack Backup Files.

A reboot is required. If you see a screen "Windows is configuring updates" which seems to take forever - just leave it until complete even if it takes an hour or more. Do not be tempted to switch off your computer.

 

[Callender]

RE: Backup. I personally use Macrium Reflect and a bootable Macrium Reflect Rescue USB. I store backups on another non windows partition. I prefer this approach. However it is wise to also store a backup on external media just in case of total hard drive failure.

 

[MrDuck]

Thanks everyone for all the tips and I think there is now a way forward. But first I need to give you some more background information (quite a bit actually, so please bear with me):

1. I actually have two Windows 7 Pro 64 machines, one the Dell Vostro with 8GB of memory that I previously referred to, but also an almost new HP ProBook AMD 455 G2 laptop with 4GB of memory. I try to keep both machines at essentially the same build standard, with the laptop being used for testing significant new software as it has no critical data on and can be rebuilt if essential. Both machines were supplied with IE10 out of the box. Note that the Dell is kept on 24x7 whilst the laptop sees only occasional usage (this turns out to be important).

2. In line with my conservative approach, when I was interested in upgrading to IE11 I tried it first on the laptop and was pleased with the results, with some performance improvement and better rendering of some websites. So a short time afterwards I upgraded the Dell to IE11 and again all seem well. But after about a week the Dell browser started running slowly and gave very worrying error messages that I had never seen before. As this machine is used for internet banking and other critical activities a degree of panic ensued! At this point I dug out the laptop and checked that this still worked, which it did. But after only few hours it, too, started showing the same symptoms!

3. The usual response to such events is, of course, to reboot the computers and this appeared to restore normal service to both machines. Perhaps understandably I thought the cause of the problem was some issue with the IE11 upgrade so I proceeded to uninstall this, firstly on the laptop. Interestingly this took me right back to IE8, from which I had to work forward successively until I got to IE10 again (note that you must ensure that in IE8 the text/icon presentation in the toolbar is as you want it, as from IE10 this can’t be changed). However, when I uninstalled IE11 on the Dell I was taken back to IE10 directly, which is where I am now.

4. Initially I thought my problems were over, but after a week or so the Dell started running slowly again (even with IE10) at which point I realised I still had a serious problem and traced it to the memory leak from svchost.exe (LocalService) which takes us back to the start of this thread! I now believe that both the laptop and the Dell must have had this memory leak after the IE11 upgrade, but the problem showed up at about the same time on the infrequently used laptop with only 4GB of memory as on the 24x7 Dell with 8GB of memory because the laptop had so little spare memory to be 'eaten'.

5. After all this the laptop was stable with no memory leak , but the Dell continues to leak . And last week I upgraded the laptop to IE11 again, and guess what - it’s perfect – no memory leak . So it now seems possible based on my experience that the solution to this problem is to rewind IE10 back as far as possible, to at least IE9, and possibly IE8, and then upgrade from there. I now realise that this is exactly the solution that alenshahnazarireports on page 10 of this thread http://answers.microsoft.com/en-us/windows/forum/all/nsi-memory-leaks-fixed-yet/f3c3e9db-36a7-45df-9dbd-de9455378498?page=10 but in relation to a 32GB server running Server 2008. Why this procedure should be needed I have no idea. But I intend to try this soon on the Dell, but only after I have had a go at imaging backup as a precaution.

6. I am very interested in the Macrium solution for image backup. I used to use a DOS-based version of Ghost booted off a USB stick for image backups, but found that the image writing side wouldn’t play under Windows 7. If Macrium can replace this it will be very useful. I note there are various free and purchasable versions around so need to do a bit of reading first.

That’s it for! Enjoy your weekend!

 

[kado897]

Good to see you have a way forward. Although I use a paid version of Macrium myself the free Macrium should be enough for most users. There is a comparison of features at the link in my sig.

 

[MrDuck]

Macrium Reflect problems now!

Well I have taken your advice and installed Macrium Reflect Free on the HP laptop, made a recovery disc, and imaged all four partitions on my laptop disc onto an external 2TB Seagate USB3 drive. All proceeded well .

However, booting Windows PE off the recovery disc fails to mount the 2TB disc so the solution is not currently usable. The disc just sits there flashing its blue status light . Is there something obvious I am doing wrong? These 2TB discs are being very widely sold (I got mine from Argos).

Regards

 

[kado897]

I've used Seagate disks before but not USB3. I wonder if you picked up the driver for it when you created the recovery disk.

 

[MrDuck]

I think I fixed it. It is necessary to use either Windows PE4 or Windows PE5 to get USB3 support. The boot process is awful, though, with just a blank screen for several minutes before the OS shows a glimmer of life, whereas PE3 gives you clear feedback from the outset.

Any comments?

 

[Callender]

Well personally I create a folder for Macrium Reflect backups on a non windows partiton on my hard drive rather than use an external drive. I know that's not ideal in the case of total hard drive failure (mechanical fault) or theft but it does allow you to restore a non booting windows machine from Macrium Reflect Rescue USB.

Possibly you could create a tiny partition just for backups.

My current backups (contain backups of drive C - windows only)

​

Well it's something to think about anyway!

 

[kado897]

I think I fixed it. It is necessary to use either Windows PE4 or Windows PE5 to get USB3 support. The boot process is awful, though, with just a blank screen for several minutes before the OS shows a glimmer of life, whereas PE3 gives you clear feedback from the outset.

Any comments?

I forgot about that. USB3 wasn't around much when PE3 was developed. I use PE5 and it gives a Windows 8.1 style boot but you don't get the PE3 style loading bar.

 

[MrDuck]

Thanks for the idea but now you've encouraged me to use MR I'm going to use it for backups of all my machines, and total hard disc failure is my main concern. I'm going to try MR on the Vostro tomorrow (I presume I have to make another recovery disc) and if that goes well I shall be in a position wind IE10 back in the hope it will solve my original problems.

The MR forum has several issues around USB3 drives so I am not alone...

 

[kado897]

You may not need another recovery disk. Try the one you have first.

 

[MrDuck]

As my machines are AMD and Intel respectively, and I saw MR pulling in AMD USB3 drivers I think I will play safe.

So far I am very impressed with Macrium Reflect and most grateful for the recommendation. As I use Seagate discs I had also looked at using Acronis True Image, which come for free with Seagate Disc Wizard, but MR seems more functional and easier use.

 

[kado897]

As my machines are AMD and Intel respectively, and I saw MR pulling in AMD USB3 drivers I think I will play safe.

So far I am very impressed with Macrium Reflect and most grateful for the recommendation. As I use Seagate discs I had also looked at using Acronis True Image, which come for free with Seagate Disc Wizard, but MR seems more functional and easier use.

I've been using MR since 2011 (version 4) and have restored my system several times. I bought the paid version as originally it had a lot more features. The free version is now much more capable.

 

[MrDuck]

Just when things were going so well MR failed to produce Rescue Discs on my Vostro. The files are generated correctly but the software seemed unable to drive my optical drive correctly and it locked up variously at 14%, 8% and 'writing leadout' necessitating a forced power off to recover the situation. In the end I used MR to create an iso file and then successfully made a CD of this using the Burn facility in Windows Explorer, and by using Nero Express. Both worked perfectly so I don't understand what the problem is with MR.

 

[kado897]

Just when things were going so well MR failed to produce Rescue Discs on my Vostro. The files are generated correctly but the software seemed unable to drive my optical drive correctly and it locked up variously at 14%, 8% and 'writing leadout' necessitating a forced power off to recover the situation. In the end I used MR to create an iso file and then successfully made a CD of this using the Burn facility in Windows Explorer, and by using Nero Express. Both worked perfectly so I don't understand what the problem is with MR.

I find that CDs are in general a bit iffy and prefer to use a usb. MR will create a bootable USB or you can create an ISo and use Rufus to create the USB drive.https://rufus.akeo.ie/

 

[MrDuck]

I agree with the use of USB sticks but unfortunately I am a bit short of those right now but have dozens of CDs! I will order some more shortly. The really annoying thing about the MR problem is that it is know to the company (see various forum posts) but they have done nothing about it. EVERY time I tried to make a CD using MR the drive locked up running at full speed and the only means of exit was to pull the power - a most undesirable thing to do on a complex operating system. Unfortunately my Dell has an extra flap over the front of the CD writer that prevents access other than by software so I can't even use the paperclip trick to release it. I intend to report my findings on the MR forum as my machine is a far from a DIY lash up as you can get.

 

[kado897]

I agree with the use of USB sticks but unfortunately I am a bit short of those right now but have dozens of CDs! I will order some more shortly. The really annoying thing about the MR problem is that it is know to the company (see various forum posts) but they have done nothing about it. EVERY time I tried to make a CD using MR the drive locked up running at full speed and the only means of exit was to pull the power - a most undesirable thing to do on a complex operating system. Unfortunately my Dell has an extra flap over the front of the CD writer that prevents access other than by software so I can't even use the paperclip trick to release it. I intend to report my findings on the MR forum as my machine is a far from a DIY lash up as you can get.

That's one of the problems with MR. Unless you have a paid version and can raise a bug they tend to ignore you.

 

[MrDuck]

More nightmares today (not helped by my having flu!).

As MR built in CD burning software doesn't work on my Dell I created a .iso rescue image and then followed the published MR instructions to burn this to CD using both Nero Express and Windows Explorer burning tools. But neither tool creates a bootable CD!!! I just have a WPB full of coasters. I tried using Nero Burning ROM to make a bootable CD but this demands a .ima file, not a .iso one! Or alternatively to pull in a Nero boot loader. Windows Explorer is a waste of space.

As a fall back I burnt a rescue USB stick and this works fine. Is there anything more I can do to fix my CD problem?