Recently an svchost.exe has started taking up 50% of the cpu, I found that is related to the NSI service. However I hit a dead end. I have no viruses or rootkits that could cause this (I checked.) So here is my question(s).

I know NIS is a service that deals with internet connectivity, would restarting it be practical if this happens again? Is there a way for me to look into just what this service is actually doing?

Is there a program that can monitor for a spike of activity with that service so I can try and nail down the cause? Is there a way to find out what might have happened in the event viewer or an equivalent program? Is there someone who would be really knowledgeable about this?

  • svchost.exe is microsoft helper for some applications to connect to internet. so dns queries also will be send using this helper. to know which applications being serviced by this helper, i only know wireshark. u can monitor the packets – Botmaster Jul 21 '15 at 9:19
  • I know what Svchost is, I asked some of these questions in another forum but got no answer beyond "I do not know." For some unknown reason, seemingly at random, a local version of Svchost starts using up a massive amount of memory and almost constantly use 50% cpu. I traced the culprit service to NIS. NIS having to do with the computer talking to the internet. However I have no way of finding out what it is that is causing the issue. If I had some way of setting a program to monitor the service to tell me when it starts up and what was the cause I would be ecstatic. – DarkspookyX Jul 22 '15 at 9:47
  • try comodo firewall. it monitors all activities including connections to internet and exactly tell u which process is trying to send packet out to internet – Botmaster Jul 22 '15 at 10:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.