Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

100 percent CPU usage caused by SVCHOST process, need help

Apr 17, 2009 7:24AM PDT
Question:

Hi, I am most frustrated by a process that takes the CPU to 100 percent use and then lets it drop back to about 50 percent every couple of seconds, which seems to run while my Vista 32BIT computer is idle with no programs actually running other than Windows. The usage report shows the offending "thing" to be "svchost," whatever that is-?but it can hog up to 78 percent of the CPU, making everything else run like it was an old 286! Can you please tell me what this process is? Is it something I can disable? How I can fix this very frustrating problem! Thank you.

Submitted by: James T.

Here are some featured member answers and link to articles to get you started, but
please read all the advice and suggestions that our
members have contributed to this question.

Possible Solution on 100 Percent CPU Utilization --Submitted by gwiljr
http://forums.cnet.com/5208-12546_102-0.html?messageID=3028420#3028420

100 percent CPU usage caused by SVCHOST process --Submitted by callmebond
http://forums.cnet.com/5208-12546_102-0.html?messageID=3027123#3027123

Check your system thoroughly for viruses and adware --Submitted by darrenforster99
http://forums.cnet.com/5208-12546_102-0.html?messageID=3027183#3027183

Here's the solution --Submitted by chazzsubscribe
http://forums.cnet.com/5208-12546_102-0.html?messageID=3027032#3027032

What is svchost.exe and why is it running?
http://www.howtogeek.com/howto/windows-vista/what-is-svchostexe-and-why-is-it-running/

Stop svchost.exe from stealing CPU cycles
http://download.cnet.com/8301-2007_4-9865052-12.html

Read all member contributions to this topic
http://forums.cnet.com/5208-12546_102-0.html?messageID=3026704


If you have any additional advice for James, please click on the reply link and post it. Please be as detailed as possible in your answer. Thanks!

Discussion is locked

- Collapse -
SVCHOST usage
Apr 17, 2009 1:09PM PDT

I have seen that as well. I use the Process Explorer to watch my CPU usage as I use the laptop. I find that the same thing happens when the computer encounters a problem and is sending an error message to MS or HP about there program or printer. I prove it by suspending the operation and see if the CPU drops to normal. If it does, I kill the process if I think it is not important enough to send the report. If it is an update for Symantec or a live update for Windows, I let it finish and then go back to what I was doing on the computer before the SVCHOST program started. That takes care of that problem for me.
Frank

- Collapse -
100 percent CPU usage caused by SVCHOST process
Apr 17, 2009 1:17PM PDT

I had the same problem on my computer and when I killed the process using the task manager, it would stop the CPU hogging. I found that it was McAfee, the anti-virus program that was causing my problem and when I eliminated the anti-virus program and went to another, my problem was no longer with me.

If you need any further information about this from me please let me know.

- Collapse -
CPU
Apr 17, 2009 1:57PM PDT

go to task manager,then right click svchost ,then right click,end process. My cpu run at 4to6% I just did a system restore.When you open task manager up it go from 100 to 50 is normal.
end process for which opertion system you do not used.
hope this help.

- Collapse -
This Should DO IT for UUU
Apr 17, 2009 2:10PM PDT

Yeah, me too, wondering about the ever growing number of svchost.exe.'s on mu PC. I AM not a Geek, but do jump onto my taskmanager several times daily. I do end many active programs if I know I won't be using them for the day- and am getting quite good at knowing which ones to leave untouched. Now that is/was always accomplished the Hard way. Trial and Error- my least favorite learning mode- as in touching the bottom of a cast iron skillet, asking yourself: is it hot yet? is it hot yet?
AND, I noticed their number grows over time?? I recall, when my Sony Vaio rg44b was brand new some 2.5 years back. I think I then had only 4 instances running. I now have NINE (9) separate SVCHOST.exe's running on my PC. 4 are 'System', 3 are 'Local', and 2 are'NETWORK'. The biggest 1, a 'System', takes up some 32,800k memory. Unlike yours, none seem to take up many CPUs. I alphabatized the list of programs and counted from the bottom. 2 were right next to bottom, all but one were in the last 30 or so, and 1 usually stayed in the top 40, but never cracks the top 20. Re-Read that if you must, but it's there.
What I did was...


Go to this 1st: http://www.howtogeek.com/howto/windows-vista/what-is-svchostexe-and-why-is-it-running/

Next: http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx

and UU will soon be not having the current problem U will have some other problem, but now you can fix this one.

- Collapse -
CPU usage
Apr 17, 2009 2:21PM PDT

I have a similar problem, in that my CPU runs at 90-100% at times, yet when I look at the processes in Task Manager, I can't find the program that is hogging my computer. When I add up the CPU times the active processes use they don't come anywhere near 100%, yet Tas Manager shows very high CPU use.

I have the following configuration:
Toshiba Satellite laptop
Intel Core2 CPU
2 GB memory
Vista Home Premium 32bit OS
Any help/suggestion is appreciated.

- Collapse -
(NT) Please start another thread for your question. Thank you!
Apr 24, 2009 2:40AM PDT
- Collapse -
100% CPU usage
Apr 26, 2009 6:34AM PDT

I had this problem (up to 75 & 80% usage) until today. When I was searching for antispyware, I realized that MalwareBytes Antimalware was doing the same thing as SpywareFighter and was much better rated. I removed SpywareFighter and guess what ? My CPU usage has dropped to 0 - 10% and my computer response is way faster.

- Collapse -
What is svchost
Apr 17, 2009 2:34PM PDT

According to Microsoft: "svchost.exe is a generic host process name for services that run from dynamic-link libraries"
svchost is an executable file used by Microsoft to launch dll files. Why? because of the change in architecture away from Internal windows services and to a more manageable and secure mode of operation by not using .exe file (executable) to using dll (data link library) in this way if one program goes down it will not take down the whole OS. The problem with using dll is that you can't launch them, you need an .exe file to launch them; that's where the svchost.exe come in to play.
You can examen what's being run but it by using a dos window (command window) in both Vist and XP by typing tasklist /SVC. However it does not give you a view that normal users could read. In Vista simply double click the scv your interested in and will show you more readable information.

- Collapse -
Will Do It...
Apr 17, 2009 2:43PM PDT

Back, but only to repeat (and I won't waste time with the description- doesn't really matter, you'll probably find it here anyway)

GO TO THE 1ST URL I SHARED- THOSE 2 URL's are ALL U WILL NEED!!!

BOTH EDUCATION AND FIX!!!

THEN GO TO NEXT URL I POSTED- WILL HELP YOU FIX (FIX) YOUR PROBLEM- HOW TO FIND OUT AND GO TO THE SERVICES THAT REQUIRE MORE SCVHOSTS. THE MORE SERVICES YOU 'TURN OFF' THE FEWER SCVHOSTS you will require, meaning the fewer CPU's your PC will use.

HERE IS NO NEED TO GO ANY FURTHER!!

ROGER & OUTAHERE

GO TO MY POST ABOVE AND GET THE PACKAGE DEAL. IT WILL WALK YOU THROUGH THE PROCESS. WHAT MORE CAN YOU ASK FOR????

- Collapse -
aggravation factor::svchost
Apr 17, 2009 2:55PM PDT

I,too,have been dealing with this problem. I am starting to suspect this may be an inherent glitch w/ Vista OS. Occasionally, my CPU will peg out to 100% and stay there--the only thing I have found that tones it down is to run a Ccleaner scan. Any help on this front would certainly be appreciated.

- Collapse -
100 percent CPU usage caused by SVCHOST
Apr 17, 2009 4:12PM PDT
- Collapse -
Windows Vista Question of the week?
Apr 17, 2009 4:19PM PDT

The reason why your process are running so hard is because the windows VISTA IS FULLY AUTO AND IT TAKE UP A LOT OF CPU USSAGE
AND SO ON That's what windows Vista has as a down fall,
When they say it is a better system they were right but they didn't tell you that it takes up a lot of your resorses......

- Collapse -
Ouch! This ones a pickle
Apr 17, 2009 4:38PM PDT

More then likely you will be reinstalling your OS from scratch very soon. Why? Because it's broken. You have a corrupt file in SVCHOST.

You can do as suggested:

Restart SVCHOST it in task manager. (See above for instructions)

Run your virus scans.

You might also:

Check "event viewer" for possible causes. Tell us what you find here.

Run a "startup repair".

http://windowshelp.microsoft.com/Windows/en-US/Help/5c59f8c1-b0d1-4f1a-af55-74f3922f3f351033.mspx

Check the CVS files for corrupt files to confirm they are there. Check near the bottom of this very long file for corrupt files. Cut and paste what you find there, here. We do not need the entire file. Bottom 40 lines should do.


If the event viewer fails to identify the problem and these options fail then you reboot/re-install your OS. Corrupt file in OS. Sorry.

- Collapse -
bogus answer
Apr 17, 2009 4:50PM PDT

"More then likely you will be reinstalling your OS from scratch very soon. Why? Because it's broken. You have a corrupt file in SVCHOST."

===========

NONSENSE. Everybody at some time or another has problems with SVCHOST. And their OS is not "broken". It's the application driver behind that instance of SVCHOST that is broken. I've seen it caused by printers, and bloated antivirus modules like Norton and McAfee.

You download Process Explorer (free tool by Microsoft) and see what is BEHIND the SVCHOST, that is causing that instance to run all the time.

it's normal to have 5 or 6 SVCHOSTs running, for different reasons. But if one is hogging the CPU, then you use something like Process Explorer to investigate and stop the problem.

A lot of people are suggesting using task manager and that will work some, but Process Explorer is like Super Task Manager. Microsoft should include it with every copy of Windows. I don't know why they don't.

Download it from here:
http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx

- Collapse -
We'll see,
Apr 17, 2009 4:53PM PDT

this ones been around many times no one to date has ever fixed it. Maybe you'll be the first. Give it your best shot smart guy.

Not a bogus answer, a bogus reply.............

- Collapse -
I've fixed it many times!
Apr 17, 2009 5:01PM PDT

You find what app or equipment is causing the SVCHOST to run and run with high CPU cycles. And you fix that.

That's what Microsoft's Process Explorer does, show you what is behind the SVCHOST.

- Collapse -
SVCHOST
Apr 17, 2009 5:50PM PDT

"You find what app or equipment is causing the SVCHOST to run and run with high CPU cycles. And you fix that. "

svchost is not an application or related to a piece of hardware in the PC it is a manger of services within the Operating System. It is Operating System program.

http://windowshelp.microsoft.com/Windows/en-US/Help/057580a1-7002-4f43-9240-a74f42cb05c91033.mspx

Yes, Processes Explorer is very good I've used it for years. It repairs nothing just provides information.

I will not respond to your comment again.

- Collapse -
you can't read, can you? ha!
Apr 17, 2009 6:01PM PDT

"svchost is not an application or related to a piece of hardware"

I specifically said it's not an application. You can't comprehend words. You find out the application that is behind the SVCHOST and fix that. I can say it a dozen more times until you understand.

- Collapse -
Help moderator!
Apr 18, 2009 10:07AM PDT

I think I'm caught in a looping forum. This thread is Thrashing my Email. What is the process for removing posts from my list of submissions so I can have some peace? I did look it over in my profile section but found no obvious solution. Before the Cnet face lift you could disable tracked threads.

- Collapse -
I am going to tell you
Apr 18, 2009 12:18PM PDT

BUT first, it seems that you didn't look because it is right there in plain sight. Plus if you do not want to track a discussion you should have not checked the box Happy
Oh and the forum is exactly looping, there are alot of people who have something to say or advise to give, so it's "Popular".

Okay, so when you are signed in to CNET, in the upper right corner
you see "My Profile" ? Right next to "Welcome Dango517".?
Click it, then you will see 5 areas for settings you can choose from
one of them is called "Tracked Discussions", Click it, then the little box next to,
"100 percent CPU usage caused by SVCHOST process, need help"
by Lee Koo (ADMIN),
Then at the top OR bottom click that there "Unsubscribe" Button.

By the way when you reply at the bottom of this here box where you say what you want it also says,
(You are currently tracking this discussion. Go to my tracked discussions) and you can click (Go to my tracked discussions)

Hope this helps...

- Collapse -
Thank you
Apr 19, 2009 4:15PM PDT

I did find it and very quickly. I had been coming in through my profile (no way in that way).

Your right about this one:

"......if you do not want to track a discussion you should have not checked the box"

I seldom track these things. You never know when one will begin looping. The lengths some will go to for a T shirt ............

- Collapse -
Actual there are two ways in
Apr 19, 2009 4:36PM PDT

one is the gold star there at the top, on the right, once clicked if you click it again then it will take you to "My Tracked Discussions" where you can untrack the thread/discussion.

And

up there on the left at the top, in "Cnet forums" there is another way in called, "My tracked discussions".

On the old site layout you went in through profile or the gold star at the bottom if the page. Seems they moved it. I seldom track discussions, this one is rare.

Interesting side note, seems "untracked" may not be a word. Some debate about it being in dictionaries.

- Collapse -
similar problem
Apr 17, 2009 5:45PM PDT

I once had a similar problem on my computer...it turned out to be a virus in my temp folder. When this problem came up for me, there were 2 processes, each battling the other for processor time. One was some daemon.exe or something similar, and the other was svchost.exe

You probably already have a good idea on what svchost.exe is by now, and even probably know of a few ways to check it. I'm going to tell you yet another way to find out what it is running. Go to the command prompt (Start->Run->cmd {enter}) and type tasklist /svc.

Here are some tips about what you should do from there:
1) Google anything you're not familiar with (this could take a while)
2) download CCleaner and do a cleanup and a registry scan.
3) schedual a boot time virus scan and reboot
4) run the tasklist /svc command again

For me, this did the trick. For you, results may vary. Hope this helps.

- Collapse -
forgot to mention...
Apr 17, 2009 5:56PM PDT

I forgot to mention that in order for you to be able to do this in any sort of reasonable time frame, you will either have to escalate the priority of your other tasks, or terminate svchost.exe Because of the nature of svchost.exe no lasting damage will come of simply terminating it for a while. Just go to the Task Manager, select the offending svchost, and click End Process. This will allow you to get what you need accomplished.

- Collapse -
100 percent CPU usage caused by SVCHOST process
Apr 17, 2009 6:06PM PDT

This may be of some help to you, you need to download Process Explorer v11.33 By Mark Russinovich Published: February 4, 2009

You can easily download Process Explorer at Microsoft TechNet Windows Sysinternals site and it's free. Process Explorer runs on Windows 9x/Me, Windows NT 4.0, Windows 2000, Windows XP, Server 2003, and 64-bit versions of Windows for x64 processors, and Windows Vista.

Once downloaded, unzip it and click on procexp.exe (no installation required).

Process Explorer at first may look intimidating, but don't let that discourage you from using this tool. In the left window pane are all processes running on you computer. The right window pane has several columns. One column that you should add is the Command line column. This can be easily added by selecting from the menu, View, Select Columns then check Command Line and click on Ok.


As you can see in the first screen shot, all processes are easily identified by the Description and Company name. The two important columns are the Path and Command Line. These two columns display the exact location of the program that started the process and the command parameters that ran during execution.

One sign of a rogue process is usually when the Description and Company columns are blank. If you suspect a process is suspicious, check the directory location where it was started, and see what date the directory was created. Also mouse over the process and see if there are any services running for the process. In this case the process svchost.exe reveals all programs it has started.


You can also right click on a process and select properties which will display all information of the process such as Security, Environment settings, Performance and Threads. Two tabs that will be of most interest is the Image tab which displays path, command line and current directory of the process, and TCP/IP tab that identifies port and connection information which can be of value in understanding who the process is communicating with.


If you suspect a process is a problem, you can kill the process and see if it restarts on it's own (a real sign of spyware or virus). You can kill a process either by right clicking and selecting Kill Process or from the Image tab by selecting properties. Make sure no applications are open to avoid data loss before killing a process.

TIP: Not sure what a process is, right click on the process and select Search Online. Your browser will open and the process name will be searched in MSN Live. From there you can start to investigate and find detailed information about the process.

Process Explorer is a powerful tool that can provide a window into your Operating System and let you see what is running on your System. A good idea is to run the tool once a day so you can get used to seeing what processes should be running normally on your System. If you suspect something is wrong, you can then easily identify any process that are not recognizable and quickly determine where the process is located on your PC and if it causing problems.

- Collapse -
100 percent CPU usage caused by SVCHOST process, need help
Apr 17, 2009 6:33PM PDT

The only process that should normally be running and using the CPU when machine is idle is that of the system idle process.

I have heard before of a virus masquerading as the particular file you mention.

Try switching it off from the task manager and see what happens, and of course run a full virus/spyware scan.


Rgds

Mike

- Collapse -
SVCHOST
Apr 17, 2009 6:53PM PDT

No immediate solution I'm afraid however, it is worth looking at Microsoft's own description of this at http://support.microsoft.com/kb/314056 and if you are really interested in seeing what is going on then follow their example and do the following (I have changed the commands slightly to reflect what I do in Vista

To view the list of services that are running in Svchost:

1. Click Start on the Windows taskbar, and then click Run.
2. In the Open box, type COMMAND, and then press ENTER.
3. Type Tasklist /SVC, and then press ENTER.

Tasklist displays a list of active processes. The /SVC switch shows the list of active services in each process.

Personally when checking problems similar to the one quoted I use the now Microsoft supplied SysInternals, it's a terrific substitute for Task Manager.

- Collapse -
SVCHOST Hog
Apr 17, 2009 6:58PM PDT

I had same problem on my older pc (XP sp2) and tracked it down to Windows Update but as svchost is a system app it needn't be just that.
Might be worth turning off automatic updates for a while to see if it makes any difference.

Regards, Old Dodger.

- Collapse -
Sychost
Apr 17, 2009 7:19PM PDT

I am not that computer literate. But having like many found intractable problems occurring, have tried many different programs to help. One that I have is "the ultimate trouble shooter" which has all the programs on your pc listed and has a lot of information about all processes and programs. Looking down the lists to find sychost, it (to paraphrase) says it is an integrtal part of windows that deals with anything run by dll based services (as opposed to .exe) and then tells how to find all these running items. So it appears you cannot disable sychost but you can see what processes are running through it and deal with those.
jon coram

- Collapse -
Check your system thoroughly for viruses and adware
Apr 17, 2009 7:46PM PDT

SVCHOST is a process in Windows that allows other programs to access DLL files. DLL files are like "libraries" in Windows, they work very much like a real library, all programs in Windows use some kind of DLL even displaying an alert box uses a DLL file. Inside a DLL is the code that Windows uses to do the action, a DLL saves re-writing the same code to do the same job all over windows you just go to the DLL and "borrow" the code (like instead of re-inventing the wheel every time you want to make a car you use a template of a circular shaped object to create the wheel!)

What is happening with your SVCHOST file though is you have one program that is constantly making DLL calls, now this could either be a very badly wrote computer program, or more likely a virus or adware program of some sort.

If you run task manager and list the other processes you have running on here everyone could have a look through and see which process looks like it could be a virus of some sort, or I recommend trying to run NOD32 to see what that can be picked up, you have to pay for NOD32 but you can get it on a 30 day trial to remove any nasties that are on there. If you have another antivirus on your computer you could try running that, but as it appears that antivirus has let whatever it is through I don't expect it to be able to find and remove the virus, if you do have another anti-virus program running you should disable it before using NOD32.