I'm trying to understand why my Windows 7 machine is constantly reading/writing to the HDD, making everything go slow. As you can see in the screenshot, resmon reports that there is a lot of disk activity originating from svchost.exe (pid 756). But in Process Monitor, process 756 doesn't seem to do anything at all, except the periodical profiling. How is this even possible? They seem to contradict each other?

I'm dumbstruck. How can I look further into this problem?enter image description here

  • I have not found a satisfactory answer to this question. Several types of IO-intensive tasks hides behind the "System" process, and I've yet to find a way to find out who is currently pulling the strings on that one. However, the cause of intensive reading/writing is most often one of these: superfetch, defragmentation, anti virus scans, and also the Windows hibernation feature. I'd just wish there was a way to easily find this out except by trial and error. – Mats Ekberg Dec 3 '12 at 11:45
  • I have just waited 5+ minutes for my PC to allow me to even click on anything again, extremely irritating. Traced it down to the superfetch service (using Resource Monitor). One important point was that I had recently resumed from hibernation and had 3 large applications open, so that was probably what Windows was trying to "prefetch" for me. Regardless, it is just utterly idiotic for Windows to behave this way. – Ash Jul 5 '13 at 4:30
  • @Ash There is a difference between Superfetch and Prefetch. Prefetch loads frequently used files from the harddrive into your RAM, Superfetch uses a USB stick to extend your RAM. If Superfetch is the problem behind your performance issues than you have a hardware or driver issue. – ZippyV Jul 5 '13 at 7:11

There are a couple of things that Windows does in the background:

  • Search and install updates,
  • Index documents for search,
  • Prefetch frequently used files,
  • Defragment the hard drive.

Installing updates is done by TrustedInstaller.exe so that is not your problem. I do see prefetch showing up so I'm going to assume that Windows is looking for frequently used files and load them in available memory. This way, most of your applications will start faster.

When you install updates you might notice a slight hiccup with your pc's performance but indexing, prefetching and defragmenting are all executed using low priority i/o which means you won't notice it. The moment you do an action that requires something from the hard drive, the low priority stuff will be halted.

  • 2
    I love answers like this that tell the asker that what they are actually experiencing can't be happening, very amusing. The superfetch service IS the culprit on my PC for making Windows practically unresponsive (mouse moves but clicking has no effect) for over 5 minutes. It's simply wrong to say it's a slight hiccup, or that it will be halted on user action. – Ash Jul 5 '13 at 4:20

Several sub process with the same PID can run inside of svhost.exe

You can see what they are in task manger by right clicking on the svchost process and select go to services, this will list all the services running under that particular instance of svchost. It will highlight them for you, you may have to scroll for them to show. These are all the services running under that specific PID. Another method is to go directly to the Services Tab in Taskmanager and then click the PID column header and this will sort them, then look for your PID's

Tracking down which service is causing the writes will require other software such as process monitor to sort that out. It is very powerful software and you would need to study up on how to use it

enter image description here


enter image description here

  • Great, but as you can see in the screenshot, I do have Process Monitor running, and you can see the configuration also in the screenshot. Process monitor is set to show all activity from the svchost pid. Shouldn't any subprocesses running under the same pid also show up in that list? – Mats Ekberg Nov 23 '11 at 22:05
  • Like I said PM is powerful software with many settings and filters you can use, I am no expert in using it so you will have to rely on someone else for PM expertise in how to show sub processes of svhost. – Moab Nov 25 '11 at 19:48

this looks like the Superfetch service. It runs with low IO priority and doesn't impact performance of other applications.

  • It's blatantly obvious that the superfetch service does severely impact the performance of other applications. I have the same problem now and then. – Ash Jul 5 '13 at 4:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.