Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

What is going on here? I have almost nothing running.

6.5/8

By almost nothing, I mean Firefox, and some background network applications that are entirely passive and would never use this much memory.

Related services: UxSms, TrkWks, SysMain, PcaSvc, Netman, CscService, AudioEndpointBuilder, TabletInputService

The only thing I can think of is that I was running Virtualbox with Ubuntu for a little while but that is limited to 2GB of memory and it's no longer running.


Edit: I am most interested in the question of why/how? Likely a leak somewhere but given the services listed above, do any stand out as being a potential culprit?

share|improve this question
1  
add comment

6 Answers 6

up vote 4 down vote accepted

svchost.exe is the process that runs all your windows services. One of them has gone mad apaprentely. right click on svchost.exe and select "Go to Service(s)". That will tell you which service it is, and you can use services manager to restart or disable it if you dont need it.

For a better description with nice screenshots check out:


Per your update, you can check out a couple of those services:

  1. CscService: Related to the "offline folders" feature of Windows. Do you use that?
  2. UxSms: Related to Desktop Window Manager. Try disabling Aero, see if the problem occurs.
share|improve this answer
add comment

Another option: Use Process Explorer.
It can be downloaded via Microsoft TechNet.

It displays all running processes, you can easily see which svchost.exe is using CPU or RAM resources, to track down which service is runnning wild.

Tip:
When hovering the mouse cursor over the 'svchost.exe' entries, all services associated with this process are listed in an infotip window.
Alternatively, select the process, click "Properties" and choose the "Services" tab.

share|improve this answer
    
Both of those things are possible with task manager also btw. –  Enigma Apr 17 '13 at 14:32
1  
True, but I think Process Explorer is making this a bit easier. You can also view all threads, stack, network connections and security settings etc. of the svchost.exe process in question, as well as detailed performance data and graphs for a single process only. –  Awa Apr 18 '13 at 18:06
1  
Can it tell which of the many services running under each svchost process is consuming all the memory? Because if not, then its useless. –  Havenard Apr 18 '13 at 18:14
    
Basically, yes. You can view the CPU usage / cycles per thread and also settings like memory priority. The service that belongs to a given thread is also listed. It's not a debugging or profiling tool, though. –  Awa Apr 18 '13 at 18:37
add comment

Thanks Colin for your useful hint.

I found that the Windows Time Service W32Time caused the memory leak. (Windows 7/64 Home Premium, IE11, up-to-date Windows Updates).

Other forum's entries indicate that some Internet Explorer update brought the problem. But I did't try to verify this.

Solution: open the Services panel and disable the W32Time service. Drawback: your clock is no longer synchronised with an Internet time service.

share|improve this answer
add comment

Deep scanning by zone Alarm.

Don't stop svchost.exe that may cause some problems in your internet connection or sounds and voices.

share|improve this answer
    
I had to kill it but Windows recovered. It wasn't a virus but seems to be a leak issue related to the network driver. –  Enigma Nov 13 '13 at 18:13
add comment

Try to turn off your service for :

Superfetch  
Offline files 

Most of the cases for why svchost is using too much RAM is because the Superfetch service is running.

Superfetch is loading most of applications the you're using into RAM to make it "instantly" to load. But some times it can drain your RAM.

Offline files can also consume lot of RAM.

Last word, maybe if you're having the same case, try to open it using Process Explorer : http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx

Then right-click and Properties and select Services, for find out what kind of service is running and what could possibly goes wild... :)

share|improve this answer
add comment

After splitting suspected services to separate processes I was able to identify Network Store Interface Service (nsi) to be the cause of memory leak in my case (Windows 7).

There is ten-page thread about this issue at http://answers.microsoft.com/en-us/windows/forum/windows_7-system/nsi-memory-leaks-fixed-yet/f3c3e9db-36a7-45df-9dbd-de9455378498.

It mentions couple hotfixes available for download on demand:

http://support.microsoft.com/kb/2847346/en-us

http://support.microsoft.com/kb/2950358/en-us

There is also a similar fix for Vista and Server 2008:

http://support.microsoft.com/kb/2743187/EN-US

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.