What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Software

SVChost.exe hog

5 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
On startup my computer appears bogged down by a svchost application. I've been ending the process via taskmgr as a workaround, but I'd like to resolve the problem. I have been a long time user of highjack this, Adaware SE, spyware blaster and SSS and these don't seem to identify anything. Via the CMD tasklist/svc command, I've identified the following Svchost services: RpcSs Lmhosts, RemoteRegistry, SSDPSRV, WebClient Dnscache stisvc Eventsystem, helpsvc, Netman, Nla, Rasman, SENS, Tapiserv, Themes, uploadmgr, W32Time, winmgmt I can't tell which grouping I'm actually ending. It uses 42,000K of memory before I end it.
Post #2
Hi 98xlt75, I'll be needing a little more information to assist you with this and have posted to a Senior Member for a specific piece of assistance. Please be patient while I work to gather the needed information. Best Regards
Post #3
98xlt75,

Just stepping in for a moment to help out Dough, use the link in my signatue to download and install Hijackthis, then open HJT > Misc Tools> Uninstall Manager and click on Save List and post that list into this thread.

Ken :D
Post #4
thanks Ken Per instructions, upgraded to latest HJT and have included result from Unistall Mgr tool list below Ad-Aware SE Personal Adobe Download Manager 1.2 (Remove Only) Adobe Reader 7.0 Advanced Networking Pack for Windows XP America Online (Choose which version to remove) AOL Coach Version 1.0(Build:20030807.3) ArcSoft PhotoStudio 2000 Avery Media Software 32 bit Canon Camera Support Core Library Canon Camera Window DS for ZoomBrowser EX Canon Camera Window DVC for ZoomBrowser EX Canon Camera Window for ZoomBrowser EX Canon MovieEdit Task for ZoomBrowser EX Canon PhotoRecord Canon RAW Image Task for ZoomBrowser EX Canon RemoteCapture Task for ZoomBrowser EX Canon ScanGear Toolbox CS 2.2 Canon Utilities PhotoStitch 3.1 Canon ZoomBrowser EX CC_ccProxyExt ccCommon ccPxyCore CheckIt 86 Easy CD Creator 5 Basic Gallery Remote Google Earth Google Toolbar for Internet Explorer Hijackthis 1.99.1 HijackThis 1.99.1 hp photosmart P1100 series HP PhotoSmart Photo Printing Software hp photosmart printer series (Remove only) IconXP Identity Theft Protector iPod for Windows 2005-10-12 iTunes J2SE Runtime Environment 5.0 Update 6 Java 2 Runtime Environment, SE v1.4.2_12 LiveUpdate 3.0 (Symantec Corporation) Macromedia Flash Player 8 Macromedia Shockwave Player Microsoft Data Access Components KB870669 Microsoft Office Professional Edition 2003 MSRedist Musicmatch® Jukebox Norton AntiSpam Norton AntiSpam Norton AntiVirus 2006 Norton Internet Security Norton Internet Security Norton Internet Security Norton Internet Security Norton Internet Security Norton Internet Security Norton Internet Security 2006 (Symantec Corporation) Norton Protection Center Norton WMI Update Norton WMI Update Outlook Express Q823353 QuickTime RealPlayer Shockwave SPBBC Spybot - Search & Destroy 1.3 SpywareBlaster v3.5.1 System Security Suite 1.04 TurboTax Deluxe 2004 TurboTax Deluxe 2005 TurboTax ItsDeductible 2005 Viewpoint Media Player WexTech AnswerWorks Windows Installer 3.1 (KB893803) Windows Installer 3.1 (KB893803) Windows Media Format Runtime Windows XP Hotfix - KB820291 Windows XP Hotfix - KB822603 Windows XP Hotfix - KB823182 Windows XP Hotfix - KB824105 Windows XP Hotfix - KB824141 Windows XP Hotfix - KB825119 Windows XP Hotfix - KB826939 Windows XP Hotfix - KB826942 Windows XP Hotfix - KB828028 Windows XP Hotfix - KB828035 Windows XP Hotfix - KB828741 Windows XP Hotfix - KB833407 Windows XP Hotfix - KB833987 Windows XP Hotfix - KB835732 Windows XP Hotfix - KB837001 Windows XP Hotfix - KB839643 Windows XP Hotfix - KB839645 Windows XP Hotfix - KB840315 Windows XP Hotfix - KB840374 Windows XP Hotfix - KB840987 Windows XP Hotfix - KB841356 Windows XP Hotfix - KB841533 Windows XP Hotfix - KB841873 Windows XP Hotfix - KB842773 Windows XP Hotfix - KB867282 Windows XP Hotfix - KB871250 Windows XP Hotfix - KB873333 Windows XP Hotfix - KB873339 Windows XP Hotfix - KB873376 Windows XP Hotfix - KB885250 Windows XP Hotfix - KB885835 Windows XP Hotfix - KB885836 Windows XP Hotfix - KB888113 Windows XP Hotfix - KB888302 Windows XP Hotfix - KB890047 Windows XP Hotfix - KB890175 Windows XP Hotfix - KB890859 Windows XP Hotfix - KB890923 Windows XP Hotfix - KB891711 Windows XP Hotfix - KB891781 Windows XP Hotfix - KB892944 Windows XP Hotfix - KB893066 Windows XP Hotfix - KB893086 Windows XP Hotfix (SP2) Q327979 Windows XP Hotfix (SP2) Q814995 Windows XP Hotfix (SP2) Q819696 Yahoo! Install Manager Yahoo! Photos Easy Upload Tool 1v7 Yahoo! Toolbar
Post #5 last edited
I'm not sure how to respond to be helpful here.

Even before we start, a note of caution: Making Changes in Services can have a huge impact on your machine, much like making changes in the Registry. Some changes can make your machine inoperable until you restore the service.

So here we go: "Services" are integral parts of the Windows operating system that "turn on" at boot, and which are generally never "seen", but still are actively involved in conducting the business that the owner/user may be instructing through mouse/keyboard input, for instance when loading applications/utilities and general browsing inside of the computer.

SVChost.exe is a general service that provides a vehicle for various procedures that generally load from a .dll file in the C:\Windows\System32 file. As such, there are a huge variety of routines that can run in "dependency" to SVChost. You've identified a fairly long list of items that are running in dependency to SVChost.exe.

Services "do" consume system resources, but most often any one item running in dependency to SVChost is not consuming much in the way of resource. The "accumulation" may be a different story.

To my knowledge there are a ton of articles available via the Internet regarding Services.
so "Google Is Your Friend".
Unfortunately the constellation of Services running on any one persons machine will most likely be "very" different that what is running on another person's machine. So there are no "general guidelines" that have a hard-and-fast rule for best performance.

This MS Article gives a reasonable overview of services, but without recommendations of what good or bad changes you could make.
http://support.microsoft.com/default.aspx?…b;en-us;Q314056

Here's a site (ElderGeek) which take one of the most sensible approaches to educating people about Services.

I recommend that you "look up" each of the items that you wish to learn about.
And yes, ElderGeek does give at least "limited" recommendations about need for an item:
yes, possibly, optional, no. ………………………..Hey, It's your choice.

Bottom Line: if you are trying to recover system resources, you may be better off disabling many of your installed softwares that install "auto-updaters". That's why I asked you to generate the list above.

http://www.theeldergeek.com/services_guide.htm
in it you can examine any of the following:

Alerter Service
Application Layer Gateway Service
Application Management Service
Automatic Updates Service
Background Intelligent Transfer Service
ClipBook Service
COM+ Event System Service
COM+ System Application Service
Computer Browser Service
Cryptographic Services Service
DCOM Server Process Launcher
DHCP Client Service
Distributed Link Tracking Client Service
Distributed Transaction Coordinator Service
DNS Client Service
Error Reporting Service
Event Log Service
Fast User Switching Compatibility Service
Help and Support Service
HID Input Service
HTTP SSL
IMAPI CD-Burning COM Service
Indexing Service
Internet Connection - Firewall (ICF) / Sharing (ICS) Service
IPSEC Services Service
Logical Disk Manager Service
Logical Disk Manager Administrative Service
Machine Debug Manager Service
Messenger Service
MS Software Shadow Copy Provider Service
Net Logon Service
NetMeeting Remote Desktop Sharing Service
Network Connections Service
Network DDE Service
Network DDE DSDM Service
Network Location Awareness (NLA) Service
Network Provisioning Service
NT LM Security Support Provider Service
Performance Logs and Alerts Service
Plug and Play Service
Portable Media Serial Number Service
Print Spooler Service
Protected Storage Service
QoS RSVP Service
Remote Access Auto Connection Manager Service
Remote Access Connection Manager Service
Remote Desktop Help Session Manager Service
Remote Procedure Call (RPC) Service
Remote Procedure Call (RPC) Locator Service
Remote Registry Service
Removable Storage Service
Routing and Remote Access Service
ScriptBlocking Service
Secondary Logon Service
Security Accounts Manager Service
Security Center
Server Service
Shell Hardware Detection Service
Smart Card Service
Smart Card Helper Service
SSDP Discovery Service
System Event Notification Service
System Restore Service
Task Scheduler Service
TCP/IP NetBIOS Helper Service
Telephony Service
Telnet Service
Terminal Services Service
Themes Service
Uninterruptible Power Supply Service
Universal Plug and Play Device Host Service
Upload Manager Service
Volume Shadow Copy Service
WebClient Service
Windows Audio Service
Windows Firewall/Internet Connection Sharing (ICS)
Windows Image Acquisition (WIA) Service
Windows Installer Service
Windows Management Instrumentation Service
Windows Management Instrumentation Driver Extensions
Windows Time Service
Wireless Zero Configuration Service
WMI Performance Adapter Service
Workstation Service

Best Regards
Post #6
Thanks. I let the processes continue for a long while without manual interruption and ran the tasklist command again and got these on the larger svchost entry. AudioSrv, Browser, Cryptsvc, Dhcp, dmserver, ERSvc, EventSystem, FastUserSwitchingCompatibility, helpsvc, lanmanserver, lannanworkstation, Netman, Nla, RasMan, Schedule, seclogon, SENS, ShellHWDetection, srservice, TapiSrv, Termservice, Themes, IrkWks, uploadmgr, W32Time, winmgmt, wuauserv, WZCSVC A number of these don't appear on the windows and eldergeek list on quick inspection. Unless someone points out some obvious glitch, I may be headed for lots of time on google or a reinstall . the "lanmanserver and lanmanworkstion" look odd.
Post #7
Kinda seems like you're concerned that items may be appearing in your machine that you didn't intentionally install. Sorta the definition of spyware.

The LanManServer is related to a legitimate Security Routine more typical of larger Networked systems running with shared file permissions on a Server.

Is the machine you are investigating part of a business system that has a central server with various levels of permission assigned to workstations, of which your machine is one of the workstations?

Or perhaps did you "inherit" this machine and it was previously part of such a system.

Seems like if you are concerned about things running on your machine that you don't want or didn't intend, you would do well to Run a HJT Log and Post it over in the HJT Forum. That at least would assure you that you are not experiencing a malware infection.

I make the above suggestion, even though you state:

I have been a long time user of highjack this, Adaware SE, spyware blaster and SSS and these don't seem to identify anything.


By the way, What's SSS? Are you referring to Spybot Search & Destroy?

Best Regards
Post #8
SSS is System Security Suite, which is an item I downloaded a couple years ago per help via TomCoyote when trouble shooting at that time. It basically cleans up a number of temp files. this is just a home computer, but my wife and I have separate email accounts via Outlook express on this machine. we also have a wireless home network, which serves to feed the kids computer and share a color printer. Within the last few days, we encountered the problem of not being able to use the main computer for an extended period after startup because something has been consuming all the CPU's capability. Elements associated with svchost applications appear to be the culpret.
Post #9
hi, I was thinking that the process that might bugging your comp is SVhost and no SVChost. Check if u got that one right and see if u can remove it. Nico

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI