Hot answers tagged

41 votes
Accepted

svchost.exe eating CPU: which of these services can be the cause?

First of all: Don't use Windows XP. This is an accident waiting to happen. That said, I am nearly certain, that wuauserv is the culprit: Windows Update is completely broken with Windows XP, and it no ...
Eugen Rieck's user avatar
  • 20.2k
12 votes
Accepted

After Windows 10 Fall Creators Update, a svchost.exe instance is constantly using CPU time

As it turns out, this was related to Internet Connection Sharing (ICS). In the following, I'd like to describe how I got to this conclusion in hope it helps other people with similar problems. The ...
fefrei's user avatar
  • 397
11 votes
Accepted

HDD activity when computer is idle

Situation I had the same problem in Windows 10: after about 5 minutes of system idle, there was a lot of disk activity on data disks (non swap, just data files), which disappeared on just a single ...
Devabc's user avatar
  • 234
4 votes

Controlled folder access blocks svchost.exe application

Protected access prevents ransomware from encrypting your files. It blocked svchost.exe because "one of the svchost processes may be host to a 3rd party service, which Windows Security is not ...
Doug's user avatar
  • 41
4 votes
Accepted

How many svchost.exe's are normal?

Yes. If you have Windows 10 1709 or higher, each instance represents one active service. I have 73 running on my workstation myself. Process Explorer freeware from Microsoft can be used to identify ...
K7AAY's user avatar
  • 9,614
4 votes

waaaaaaay too many svchosts running and causing 1st logical cpu load to increase

Starting with Windows 10 version 1703, 64bit systems with more than 3.5GB RAM run each service in its own service host. The resource saving rationale of running several services in the same host has ...
David Marshall's user avatar
3 votes

What determines which services svchost.exe hosts?

There is a database in the Registry to control how services are loaded. This is the Service Control Manager database. The Service Control Manager runs services.exe. Services are defined in the ...
David Marshall's user avatar
3 votes

What command line options are available to svchost.exe?

This blog post explains there exist three known arguments: -k to run a group of services, -s to only run a specific service from the specified group, and -p to turn on process mitigation policies. ...
Simon Kissane's user avatar
2 votes
Accepted

Why is svchost always taking up half of CPU?

The CPU usage you're seeing is coming from wuauserv, which is the Windows Update service. What's most likely happening is that your computer is currently busy installing Windows Updates in the ...
Etienne Dechamps's user avatar
2 votes

What determines which services svchost.exe hosts?

You won't find controls in services.msc, but each service will be started under a particular user/service account which has particular rights depending on the requirements of the service. The column "...
Mokubai's user avatar
  • 92.3k
2 votes
Accepted

Svchost.exe using upload

scvhost is, literally, the Host Process For Services. By itself it is nothing, but, depending on your Windows version, each instance of svchost.exe will be hosting one or more services, and these are ...
music2myear's user avatar
  • 41.5k
2 votes

After Windows 10 Fall Creators Update, a svchost.exe instance is constantly using CPU time

It's more simple, I have had success by resetting their Windows Firewall settings (particularly if there's a related spike in CPU load) using this instructions :- Resetting the Windows Defender ...
Mohamad Osama's user avatar
2 votes

HDD activity when computer is idle

The Windows Task Scheduler starts running various tasks including the ones you mentioned when the computer has been idle (no user interaction) for 4 minutes. You'd think there would be a way to alter ...
Ron's user avatar
  • 21
1 vote

svchost.exe hogging all my internet

you can disable win downloading any time and specify special hours for ur updates or do it manually. also in win 10, there is an option you can provide downloaded updates in your system for other ...
mahdi d's user avatar
  • 11
1 vote

Flags of svchost

There is a detail write-up about this flag, citing it verbatim: P flag enforces different policies: DynamicCodePolicy, BinarySignaturePolicy and ExtensionPolicy.
Ta Thanh Dinh's user avatar
1 vote

What is Windows constantly sending?

https://docs.microsoft.com/en-us/sysinternals/downloads/tcpview Mark Russinovich (the master programmer!) TCPView is a Windows program that will show you detailed listings of all TCP and UDP ...
vssher's user avatar
  • 918
1 vote

What is Windows constantly sending?

When you run Perfmon, open up the network section. Perfmon is only monitoring the apps you have running. I see DropBox, VMware, and so on. System and svchost are related activities. You can look at ...
John's user avatar
  • 49.4k
1 vote

Windows 10 Firewall - How to deny all outbound but allow only Windows updates?

I'm trying to figure this out as well. The maker of "Windows Firewall Control" says "On Windows 7 you could create service based rules for svchost.exe, but not on Windows 10" Windows firewall has ...
Boja's user avatar
  • 23
1 vote
Accepted

Suggest me to understand why my windows 10 found connected to that many hosts. checked with netstat -fb

This is typical background noise caused by Windows checking if you have internet connectivity, reporting back to Microsoft, Google services running, and so on. You can run them down one by one if you ...
David Schwartz's user avatar
1 vote

Windows 7 Firewall outbound allow rule for CryptSvc not matching

Long ago, but still a valid question. Since the problem persists here is my Solution Open a CMD Window and get the SID of the cryptsvc service: sc showsid cryptsvc Create an advanced outbound ...
WildTbag's user avatar
1 vote
Accepted

How to identify memory hoarding service within svchost.exe process?

This sounds exactly like Windows Updates running. The high svchost memory usage is typical of Windows 8.1 and older. And the tell tale sign is the intermittent spike then drop every so often, usually ...
Appleoddity's user avatar
  • 11.7k
1 vote

waaaaaaay too many svchosts running and causing 1st logical cpu load to increase

You can use Process Explorer by System Internals to see what services these svchosts are running. If the exes aren't in the right place you might have a virus problem.
Beige The Color's user avatar
1 vote
Accepted

How do I set a breakpoint within WlanSvc?

The problem is that wlansvc!WlanSvcDisconnectRequest is actually a data structure stored in .rdata section of wlansvc.dll. It is stored in read-only memory and doesn't contain any code. Thus creating ...
ge0rdi's user avatar
  • 1,553
1 vote
Accepted

Windows 8 High CPU usage, windows firewall

Analyzing the ETL with WPA shows the CPU usage comes from enumerating the firewall rules (FirewallAPI.dll!FwEnumRules) which results in a lot of MrmCoreR.dll calls like MrmCoreR.dll!Microsoft::...
magicandre1981's user avatar
1 vote

SVCHOST uses a large amount of memory for short periods of time

What is the cause and how can I prevent this from happening? This is the Windows Update service which scans for new updates. Microsoft tries to fix it with several updates. Install this update to ...
magicandre1981's user avatar
1 vote
Accepted

Windows 7 high CPU and HDD load

The high CPU usage is mainly caused by 4 process (2 x svchost.exe, googletalkplugin.exe and Skype.exe). The first svchost.exe process tries to load driver Inf files (SPInf.dll!SpInfLoadInfFile). This ...
magicandre1981's user avatar
1 vote
Accepted

svchost keeps changing publisher to empty value and back

The svchost.exe is a facilitator for running .dlls. By itself it does nothing. It only helps those dlls to run. So the application publisher may change depending on the .dll that is being run.
whs's user avatar
  • 1,311
1 vote
Accepted

How much memory should svchost.exe(netsvcs) use normally?

The memory requirements of svchost.exe (and netsvcs) vary. Basically, SvcHost is a "trick" that Microsoft Windows uses to have multiple services show up as a single process. This is because there is ...
TOOGAM's user avatar
  • 15.6k
1 vote

What command line options are available to svchost.exe?

I have seen the option -p inside the registry, but not followed by any argument. A Google search for "svchost.exe -p" site:docs.microsoft.com results in zero hits, so there does not seem to ...
Henke - Нава́льный П с м's user avatar
1 vote

svchost.exe taking 25% cpu

I had this happening too; but it may or may not be what was happening to you. As you asked this ~5 years ago, this will more likely help others than the asker. I too have a large HOSTS file, and ...
CodeLurker's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible