General discussion

What is wrong with this svchost??

Hello, there is a svchost.exe in my computer that takes 29000 KB of memory. I have disabled some services associated to it but consume have lowered only in 1000 or 2000 KB. What can I do?


Discussion is locked
Reply to: What is wrong with this svchost??
PLEASE NOTE: Do not post advertisements, offensive materials, profanity, or personal attacks. Please remember to be considerate of other members. If you are new to the CNET Forums, please read our CNET Forums FAQ. All submitted content is subject to our Terms of Use.
Reporting: What is wrong with this svchost??
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
- Collapse -
Why do you think something is wrong?

29 MB isn't really much if you've got a 1 Gb machine. And it might be necessary.

I have 6 occurrences of svchost at the moment in my Task Manager. They are 5.2, 4.5, 23.3, 4.4, 4.6 and 3.8 Mb.
And a 20 Mb ashWebSv, a 26.7 Mb Explorer, a 20 Mb MsMpEng and a 24.8 Mb vsmon (=Zonealarm firewall) running for the SYSTEM user, to name only the big ones.

Why mind?


- Collapse -
It lowers my pc

It is not a very big problem but I would like to solve it because I feel like it lowers my computer and it keeps cpu fan making a lot of noise.

- Collapse -
Link, comment.
- Collapse -
- Collapse -
Tell us the output of this command.
- Collapse -
Command output

Hello there, the cmd window shows this:

System Idle Process 0 N/D
System 4 N/D
smss.exe 628 N/D
csrss.exe 684 N/D
winlogon.exe 716 N/D
services.exe 760 Eventlog, PlugPlay
lsass.exe 772 SamSs
ati2evxx.exe 940 Ati HotKey Poller
svchost.exe 956 DcomLaunch, TermService
svchost.exe 1012 RpcSs
svchost.exe 1084 AudioSrv, BITS, CryptSvc, Dhcp, EventSystem,
lanmanworkstation, Netman, Schedule,
SharedAccess, ShellHWDetection, Themes,
winmgmt, wuauserv
svchost.exe 1152 Dnscache
spoolsv.exe 1224 Spooler
ati2evxx.exe 1496 N/D
explorer.exe 1612 N/D
WinPatrol.exe 1772 N/D
a2guard.exe 1780 N/D
avp.exe 1788 N/D
ctfmon.exe 1796 N/D
a2service.exe 1880 a2AntiMalware
avp.exe 1916 AVP
slserv.exe 1948 SLService
SpySweeper.exe 1976 WebrootSpySweeperService
alg.exe 1564 ALG
firefox.exe 2212 N/D
hpqtra08.exe 2664 N/D
svchost.exe 3156 stisvc
cmd.exe 2060 N/D
tasklist.exe 3452 N/D
wmiprvse.exe 2096 N/D


- Collapse -
Tell me about

lanmanworkstation, Netman. Did you install some other protocols?


- Collapse -
to R. Proffitt

Sorry but what is a protocol and how should I have installed it?

- Collapse -
Just checking to see if you had done anything unordinary.

Let's try just TASKLIST and we may have to move to a HIJACKTHIS log, but for now just TASKLIST.


- Collapse -
Hello my friends. Tasklist reported this:

System Idle Process 0 Console 0 28 KB
System 4 Console 0 260 KB
smss.exe 628 Console 0 720 KB
csrss.exe 688 Console 0 6.420 KB
winlogon.exe 716 Console 0 15.696 KB
services.exe 760 Console 0 3.984 KB
lsass.exe 772 Console 0 1.348 KB
ati2evxx.exe 932 Console 0 2.716 KB
svchost.exe 948 Console 0 5.892 KB
svchost.exe 1004 Console 0 4.888 KB
svchost.exe 1076 Console 0 33.648 KB
svchost.exe 1132 Console 0 3.588 KB
spoolsv.exe 1236 Console 0 5.508 KB
ati2evxx.exe 1500 Console 0 4.064 KB
explorer.exe 1648 Console 0 29.280 KB
WinPatrol.exe 1764 Console 0 5.744 KB
a2guard.exe 1772 Console 0 7.972 KB
avp.exe 1780 Console 0 6.700 KB
ctfmon.exe 1788 Console 0 4.140 KB
a2service.exe 1868 Console 0 34.324 KB
avp.exe 1916 Console 0 45.244 KB
slserv.exe 1964 Console 0 1.012 KB
SpySweeper.exe 1984 Console 0 9.224 KB
alg.exe 1628 Console 0 3.804 KB
hpqtra08.exe 2784 Console 0 10.404 KB
firefox.exe 3436 Console 0 51.208 KB
cmd.exe 2160 Console 0 3.368 KB
tasklist.exe 3276 Console 0 5.208 KB
wmiprvse.exe 1572 Console 0 6.388 KB

- Collapse -
more tasklist info:

svchost.exe 948 DcomLaunch, TermService
svchost.exe 1004 RpcSs
svchost.exe 1076 AudioSrv, BITS, CryptSvc, Dhcp, EventSystem,
lanmanworkstation, Netman, Schedule,
SharedAccess, ShellHWDetection, Themes,
winmgmt, wscsvc, wuauserv
svchost.exe 1132 Dnscache

- Collapse -
As a test run...

Uninstall your firewall. Don't go without and connect to the internet. I only see the usual here so far. Let me write your tasklist does look quite normal for all those protection softwares.

Here's why. To protect your machine the SIGNATURES of the pests are growing fast. Those have to be in memory for fast access. Therefore it is not unusual to find firewalls, antivirus and such to soak a machine of a few hundred megabytes of RAM.


CNET Forums