Tuesday, September 15, 2009

windows7: find SVCHOST.EXE which system services are loaded. cpu 100% or more than 50%

In the Windows Task Manager "Processes" tab, view the resource-intensive high SVCHOST.EXE process in the corresponding PID, the PID record. (If you do not see in Task Manager "PID", please select the menu "View" - "Column Settings", select the "PID" check box.) 
With administrator privileges to run the command prompt (CMD.EXE), at the command prompt, run: 
TASKLIST-SVC 
You will see similar to the following results: 
Image Name PID Services 
      SVCHOST.EXE 1104 DcomLaunch, TermServices 
      SVCHOST.EXE 1188 RpcSs 
      ... ... 
Control your Task Manager to see SVCHOST.EXE of the PID, in the above results to find the corresponding SVCHOST.EXE. For example, suppose you see the PID in Task Manager for the 1188's SVCHOST.EXE takes up more system resources, while the TASKLIST-SVC results show that PID is 1188's SVCHOST.EXE load service is RpcSs, namely, that RpcSs Service (Remote Procedure Call (RPC) service) occupy a higher system resources. 
Method 2: 

In the microsoft.com download the System Tools Process Explorer: 
http://www.microsoft.com/technet/sysinternals/Utilities/ProcessExplorer.mspx (http://www.microsoft.com/technet/sysinternals/Utilities/ProcessExplorer.mspx)
Run Process Explorer, in the process list, find the occupier of the SVCHOST.EXE process in more system resources, right-click choose Properties (attributes), switch to the Services (Services) tab, where you can view the SVCHOST.EXE process in Canada what is contained in the system services.

win7 : Svchost.exe take up memory on the 100%

Recently once my computer connected to the internet, the CPU  is up to 100%! 

Task Manager to see many SVCHOST.EXE always ocuppy for a great memory, CPU at 100%. 

Termination of this process! And then to check the relevant web content! Prior to this process has a certain understanding of this to happen to them, and 

First, we first get to know what it is attached to svchost.exe system file C: \ Windows \ system32 management system under a variety of services to start Windows NT core of an important process, Svchost.exe is actually a service host, which in itself does not provide any services to users, but can be used to run dynamic-link library DLL files to start the corresponding service. Svchost.exe process can simultaneously start multiple services. Under normal circumstances, windows can have multiple Svchost.exe processes running simultaneously, such as Windows 2000 there are at least two Svchost process, Windows XP has more than 4. 
Svchost.exe is precisely because of these characteristics also make a lot of virus, the virus load used to hide Trojans, first of all when we find that this process take up too much memory, the first should take into account whether it is caused by a virus, use of tools to find svchost.exe, if the There is not: \ Windows \ system32 Under this document, then you have to be careful of, first, under this path is not in the file deleted in its entirety into the Registry Editor to view svchost is not in its next \ Windows \ system32 construction value of removed ! 
If you did not find the above questions then it is very likely perform a system update failed, resulting in this process take up too much CPU. To resolve this problem, enter C: windons / SoftwareDistribution to delete all files, this file is UPdate the downloaded file, if not removed. Right-click My Computer to enter the Computer Management interface for the service entry where the Automatic update of the status change can be removed manually restart. Then re-enter to change it back again to restart the problem solved!

windows 7, 15 svchost.exe processes

Few days ago, newly installed windows 7 ,and Rising and other software installed .
Every time you open task manager, a very scary look at the process, there are sixty or seventy one, sometimes more than 50 
 15 Svchost.exe !!!??
WIN7 has so many services, turn off the unimportant or not commonly used services, can reduce the svchost.exe, 
Download procexp, run procexp, see a lot of processes, point your mouse at any one svchost.exe corresponding service name will appear only in the services.exe process, svchost.exe under the tree is the system of services, if the process Explorer.EXE must be under the svchost.exe Trojan 

 
 

How do I view windows server 2008 or vista of Svchost-instance service

How do I view windows server 2008 or vista of Svchost-instance service 


Running windows server 2008 or vista, the command line mode, enter: 

Users \ Administrator.SAVTSTDC01> tasklist / svc 

So that you can view the windows server 2008 or vista of Svchost-instance of service

 

VISTA: SVCHOST.exe take up a lot of memory.

Is difficult to judge this situation, after all, everyone's situation is not the same machine. 
My notebook filled with VISTA, closed all the software and firewall, CPU occupancy rate has been a very significant jump in the state, about 1 percent, about fifty to sixty per cent, the process of the CPU inside the display is svchost occupancy rate has been leaps and colleagues VISTA process inside SVCHOST idle occupancy rate is 0, and this version of VISTA I've also used, are all right, now I reinstall the VISTA is true, but in XP inside the CPU to normal, anti-virus of the showed no virus

svchost.exe occupy CPU 50% solution.

Phenomenon: 

A few minutes later the machine started running svchost.exe will be accounted for system cpu resources, 100% 
Like unplug the network cable, and re-connect to the Internet after a while: svchost.exe has accounted for cpu resources, 99%; 
Address: 

Suppose you have to use a free anti-virus software to exclude the virus and anti-spyware software has been used to exclude the impact of malicious software: 
Think of ways to empty the C: \ WINDOWS \ SoftwareDistribution directory, all files you can restart the machine. (C: \ WINDOWS \ SoftwareDistribution is the Windows update services, temporary file storage directory) 

If the machine that the file is being used ( "Automatic Updates" service is running) can not delete the corresponding directory: 

Then think of ways to open the Control Panel == "Administrative Tools ==" service to find "Automatic Updates", set to manual start, 
Restart after the delete C: \ WINDOWS \ SoftwareDistribution. Problem solved. 
And then open the Control Panel == "Administrative Tools ==" service to find "Automatic Updates", to restore to start automatically restart. 
Note: The restart after the best conditions for better access to the system where the successful completion of one system is automatically updated. 

Promotion: Tingduo be having similar problems, and if you find this approach useful, please http://www.chedong.com/blog/archives/001286.html 
Add this link to your blog. 
html code: <a xhref="http://www.chedong.com/blog/archives/001286.html"> svchost.exe </ a> 

Analysis: 

Let us talk about what is svchost.exe: Simply do not have this RPC service, the machine almost can not go net. Many applications are dependent on the RPC interface, and if found that the process took too much CPU resources, directly to the RPC service is disabled the system will be a disaster: because even the restoration of this interface, the system interface for all service settings can not be used. Recovery method requires the use of Registry Editor, locate the HKEY_LOCAL_MACHINE>> SYSTEM>> CurrentControlSet>> Services>> RpcSs, the right to find Start property, the value of it can be changed to 2 and then restart 

Svchost causing CPU 100% of the total system, not due to svchost service itself: The above situation is due to Windows Update service to download / install the update service failures caused by repeated retry making. The Windows Automatic Updates is also dependent on the svchost service a background application, which showed a very high load svchost.exe. This problem often occurs the machine is generally access conditions (in particular, is to go abroad site) unstable machine, such as the parents of the machine at home, often in a few months after the installation of the machine from time to time occur, the second week of every month is a high-fat period: Since MS very laws in recent years in the second week of each month issued a patch). The above solution does not guarantee against re-attack, but the svchost files every few months in order to reinstall an operating system or a waste of time. 

Lesson: spoolsv.exe and svchost.exe problems are encountered in application failures / exceptions and automatically retry a result of this want to save users time, the design, but through the high-frequency re-examination has led the contrary, and viruses, like effect.

svchost.exe :CPU 100% solution.

Phenomenon: 

A few minutes later the machine started running svchost.exe will be accounted for system cpu resources, 100% 
Like unplug the network cable, and re-connect to the Internet after a while: svchost.exe has accounted for cpu resources, 99%; 
Address: 

Suppose you have to use a free anti-virus software to exclude the virus and anti-spyware software has been used to exclude the impact of malicious software: 
Think of ways to empty the C: \ WINDOWS \ SoftwareDistribution directory, all files you can restart the machine. (C: \ WINDOWS \ SoftwareDistribution is the Windows update services, temporary file storage directory) 

If the machine that the file is being used ( "Automatic Updates" service is running) can not delete the corresponding directory: 

Then think of ways to open the Control Panel == "Administrative Tools ==" service to find "Automatic Updates", set to manual start, 
Restart after the delete C: \ WINDOWS \ SoftwareDistribution. Problem solved. 
And then open the Control Panel == "Administrative Tools ==" service to find "Automatic Updates", to restore to start automatically restart. 
Note: The restart after the best conditions for better access to the system where the successful completion of one system is automatically updated. 

Promotion: Tingduo be having similar problems, and if you find this approach useful, please http://www.chedong.com/blog/archives/001286.html 
Add this link to your blog. 
html code: <a xhref="http://www.chedong.com/blog/archives/001286.html"> svchost.exe </ a> 

Analysis: 

Let us talk about what is svchost.exe: Simply do not have this RPC service, the machine almost can not go net. Many applications are dependent on the RPC interface, and if found that the process took too much CPU resources, directly to the RPC service is disabled the system will be a disaster: because even the restoration of this interface, the system interface for all service settings can not be used. Recovery method requires the use of Registry Editor, locate the HKEY_LOCAL_MACHINE>> SYSTEM>> CurrentControlSet>> Services>> RpcSs, the right to find Start property, the value of it can be changed to 2 and then restart 

Svchost causing CPU 100% of the total system, not due to svchost service itself: The above situation is due to Windows Update service to download / install the update service failures caused by repeated retry making. The Windows Automatic Updates is also dependent on the svchost service a background application, which showed a very high load svchost.exe. This problem often occurs the machine is generally access conditions (in particular, is to go abroad site) unstable machine, such as the parents of the machine at home, often in a few months after the installation of the machine from time to time occur, the second week of every month is a high-fat period: Since MS very laws in recent years in the second week of each month issued a patch). The above solution does not guarantee against re-attack, but the svchost files every few months in order to reinstall an operating system or a waste of time. 

Lesson: spoolsv.exe and svchost.exe problems are encountered in application failures / exceptions and automatically retry a result of this want to save users time, the design, but through the high-frequency re-examination has led the contrary, and viruses, like effect.