svhosts process pinned at 99%

Discussion in 'Windows Desktop Systems' started by Heeter, May 30, 2007.

  1. Heeter

    Heeter Overclocked Like A Mother

    Messages:
    2,732
    Hey all,

    I got a machine here that has an svhost process that is pinned all the time at 95%.

    It is the "svhost.exe - SYSTEM - 99 - 80,176(mem usage)" process.

    In the Performance tab, the CPU is running at 100%, and the PF is at 384MB.

    Needless to say that nothing is getting accomplished with this process pinned.


    Once I end the process, everything runs very very good.

    I ran a spybot, nothing to write home about was found in the scan. I think that I will run an AVG scan as well.

    I did notice that when I stop the service the theme of XP resorts back "Classic". Maybe someone installed a bad theme in this machine.

    Any ideas as to why this is happening?

    Thanks,

    Heeter
     
  2. fitz

    fitz Just Floating Along Staff Member Political User Folding Team

    Messages:
    4,076
    Location:
    Chicagoland
    hey heeter..

    note the PID of the svchost process and run "tasklist /svc" from the command line. It should show you which services are using that particular svchost process (match the ProcessID)

    My first guess would be windows update process..
     
  3. madmatt

    madmatt Bow Down to the King Political User

    Messages:
    13,312
    Location:
    New York
    It may have something to do with KB927891. It is said that the latest fix isn't working.
     
  4. fitz

    fitz Just Floating Along Staff Member Political User Folding Team

    Messages:
    4,076
    Location:
    Chicagoland
    yup.. that would be one of the reasons I suspect the windows update service. But you should check to make sure the windows update is running off that svchost process (using tasklist) before uninstalling the client. :)
     
  5. Heeter

    Heeter Overclocked Like A Mother

    Messages:
    2,732
    Okay The PID is 1092

    What do I write in the command line? I am kinda lost at this stage.

    I followed the KB link and updated and it is still doing this.


    Heeter
     

    Attached Files:

  6. fitz

    fitz Just Floating Along Staff Member Political User Folding Team

    Messages:
    4,076
    Location:
    Chicagoland
    drop to a command prompt

    type: tasklist /svc

    It will display a whole bunch of info on all the processID (PID) running. Find the one that matches the svchost process (in your case 1092 - at least until your next reboot) and note which windows services are handled by that instance of the svchost process.

    report info back here :)

    edit: screenshot example attached
     

    Attached Files:

  7. _kC_

    _kC_ Moderator

    Messages:
    514
    go to ie/tools/windows update

    do you use microsoft update? if so thats the cause.... revert to "windows update"

    if so click on change options and click "remove microsoft update"
     
  8. Heeter

    Heeter Overclocked Like A Mother

    Messages:
    2,732
    Duh, forgot the space between the words...

    Now it is service PID 1088

    This is what I got:
     

    Attached Files:

  9. Heeter

    Heeter Overclocked Like A Mother

    Messages:
    2,732
    How/where do I change options, can't see it.

    Thanks,

    I think that might be the problem as I open Microsoft update and the machine is locking up again.

    Thanks,

    Heeter
     
  10. _kC_

    _kC_ Moderator

    Messages:
    514
    on the microsoft update page, on the left menu, click "change options"
    then in the main window scroll down...


    should be a tick box at the very bottom "REMOVE MICROSOFT UPDATE"

    do that and reboot.. hey presto.. your fixed:)

    have had 200-300 of these probs in our workshop and on callouts in the past few month
     
  11. LordOfLA

    LordOfLA Godlike!

    Messages:
    7,027
    Location:
    Maidenhead, Berkshire, UK
    restart the automatic updates service from services.msc
     
  12. _kC_

    _kC_ Moderator

    Messages:
    514
    yeh then the 99% will just restart when the service restarts..

    just remove the microsoft update and its solved for good
     
  13. Heeter

    Heeter Overclocked Like A Mother

    Messages:
    2,732
    Looks Like that did it!!!

    Thanks KC
     
  14. _kC_

    _kC_ Moderator

    Messages:
    514
  15. Heeter

    Heeter Overclocked Like A Mother

    Messages:
    2,732
    Funny thing, this machine doesn't even use IE, it has FF as default.


    Oh well,

    Heeter