new problem for me

I got my router installed on this wired PC, the wireless one runs
well too and now i can share files but............ Now I have an
SVCHOST.EXE program running 100% CPU useage. Any thoughts???

Newbe here, but sounds like maybe you have a virus.
Happened to me during a SP1 download.

Cheers
"capn archer" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)...
> I got my router installed on this wired PC, the wireless one runs
> well too and now i can share files but............ Now I have an
> SVCHOST.EXE program running 100% CPU useage. Any thoughts???

If you're talking about the CPU column in the Processes tab, that is not %
of CPU usage. It is % of time that a process used the CPU since the last
update. Each process is assigned a CPU time slice and can't use more than
that time slice. To see the total CPU usage you need to look at the
Performance tab. What user name is assigned to svchost.exe? Probably network
service.

"capn archer" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> I got my router installed on this wired PC, the wireless one runs
> well too and now i can share files but............ Now I have an
> SVCHOST.EXE program running 100% CPU useage. Any thoughts???

On Thu, 26 Feb 2004 03:41:40 GMT, "Tom" <(E-Mail Removed)>
wrote:

>If you're talking about the CPU column in the Processes tab, that is not %
>of CPU usage. It is % of time that a process used the CPU since the last
>update. Each process is assigned a CPU time slice and can't use more than
>that time slice. To see the total CPU usage you need to look at the
>Performance tab. What user name is assigned to svchost.exe? Probably network
>service.
>
>"capn archer" <(E-Mail Removed)> wrote in message
>news:(E-Mail Removed).. .
>> I got my router installed on this wired PC, the wireless one runs
>> well too and now i can share files but............ Now I have an
>> SVCHOST.EXE program running 100% CPU useage. Any thoughts???
>
No actually it is "SYSTEM" I really dont know much about this,
reading what I can online i can see that there are probably a million
reasons for this. I assume something isnt starting up as it should
but I am not sure where to go from here. If I kill the svchost.exe I
of course get sporatic results, sometimes everything is OK but most
of the time not. Not sure exactly when this started but the last
thing I did was hang a D-link DI-524 router on it (wired)

I wouldnt expect that to cause a problem.

Any and all advice is welcome.

I did see something about running "tasklist" but I will be darned if
my PC or a new one I just bought, both XP respond to tasklist either
from the run or the cmd prompt.

TIA a million times over

To run tasklist you need to select Start, Run, then type "cmd" in the Open
dialog. Then in the dos window type "tasklist /svc", then press Enter.

What you're seeing is normal, especially if user name is system. It is a
grouping of multiple processes, and for it to be using 100% of its time
slice is normal. I have 5 of them running in my tasklist. You certainly
should not stop any svchost process. If you watch all the processes, you may
see several of them at 90% or higher at the same time, so it make sense that
it has nothing to do with total CPU usage.

Are you asking this question because you notice a drop in you system
performance?

"capn archer" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> On Thu, 26 Feb 2004 03:41:40 GMT, "Tom" <(E-Mail Removed)>
> wrote:
>
> >If you're talking about the CPU column in the Processes tab, that is not
%
> >of CPU usage. It is % of time that a process used the CPU since the last
> >update. Each process is assigned a CPU time slice and can't use more than
> >that time slice. To see the total CPU usage you need to look at the
> >Performance tab. What user name is assigned to svchost.exe? Probably
network
> >service.
> >
> >"capn archer" <(E-Mail Removed)> wrote in message
> >news:(E-Mail Removed).. .
> >> I got my router installed on this wired PC, the wireless one runs
> >> well too and now i can share files but............ Now I have an
> >> SVCHOST.EXE program running 100% CPU useage. Any thoughts???
> >
> No actually it is "SYSTEM" I really dont know much about this,
> reading what I can online i can see that there are probably a million
> reasons for this. I assume something isnt starting up as it should
> but I am not sure where to go from here. If I kill the svchost.exe I
> of course get sporatic results, sometimes everything is OK but most
> of the time not. Not sure exactly when this started but the last
> thing I did was hang a D-link DI-524 router on it (wired)
>
> I wouldnt expect that to cause a problem.
>
> Any and all advice is welcome.
>
> I did see something about running "tasklist" but I will be darned if
> my PC or a new one I just bought, both XP respond to tasklist either
> from the run or the cmd prompt.
>
> TIA a million times over

1. I have tried evrything to run "tasklist" I have even searched my
entire harddrive for a program called tasklist and another PC. It
isnt here. Is it possible that it doesnt exist n XP home edition?

2. I am not talking about 100% on start up or on occassion, it is
flat out 100% all of the time when it hangs. Yes the whole system
drops to it's knees. My wife was trying to type a report and she had
to wait 20 seconds for the letters to show up on the screen.

bear with me, here is what I have learned after 3 days of looking
into this.

A all I did was hang a D-Link DI-524 wireless router on the ethernet
port. I did do a little configuration to set up a home network.
Somewhere in the mess this started happening. mostly at start-up but
sometimes hours later.

hen it was hung I started shuting down services (services.msc I
found that I could access or shut down almost every one of them except

internet connection frewall/inernet connection sharing
nework connections
netwrk locations awareness
remte access connection manager
telephony
application layer gateway

of course the last 5 are tied to the first and that is the one that
refused to shut down for me.

I then noted that if I disabled these 6 services I had no problem,
even had internet functions, of course I couldnt make any network
changes.

Next thing I learned was that with everything back turned on the
probem seems to happen more quickly if I go into the network
connections and just breeze through properties and settings.

Next thing I learned was that if I disabled the lan NIC I didnt seem
to have the problem.

Nxt thing was that if I removed the router and cabled back up to the
cable modem I didnt seem to have the prob. So I reset the router and
re-configured it but still came back once I was back with the router.

Ialso did a system restore to a time previous to any of this,


I think it is a conflict as it is hit and miss. I suspect it has
something to do with talking to the router but I have next to no
experience here.

in the network config what should the link speed/duplex mode be
10mbps/half duplex? it was set at auto but I seem to have seen
something somewhere about changing it to half.

Just thi minute I updated the driver on my NIC so who knows, i am
just about out of ideas and it is 3:30 in the morning.

Thanks to anyone wh hs advise. by the way I put the wireless router
in so that I could buy a laptop and get to the internet and that part
( wireless PC to the router ) works great, I just ave trouble with
the existing wired PC, almost ready to buy a USB wireless and yank
the ether net but that is just the fatigue setting in.



On Fri, 27 Feb 2004 02:00:46 GMT, "Tom" <(E-Mail Removed)>
wrote:

>To run tasklist you need to select Start, Run, then type "cmd" in the Open
>dialog. Then in the dos window type "tasklist /svc", then press Enter.
>
>What you're seeing is normal, especially if user name is system. It is a
>grouping of multiple processes, and for it to be using 100% of its time
>slice is normal. I have 5 of them running in my tasklist. You certainly
>should not stop any svchost process. If you watch all the processes, you may
>see several of them at 90% or higher at the same time, so it make sense that
>it has nothing to do with total CPU usage.
>
>Are you asking this question because you notice a drop in you system
>performance?
>
>"capn archer" <(E-Mail Removed)> wrote in message
>news:(E-Mail Removed).. .
>> On Thu, 26 Feb 2004 03:41:40 GMT, "Tom" <(E-Mail Removed)>
>> wrote:
>>
>> >If you're talking about the CPU column in the Processes tab, that is not
>%
>> >of CPU usage. It is % of time that a process used the CPU since the last
>> >update. Each process is assigned a CPU time slice and can't use more than
>> >that time slice. To see the total CPU usage you need to look at the
>> >Performance tab. What user name is assigned to svchost.exe? Probably
>network
>> >service.
>> >
>> >"capn archer" <(E-Mail Removed)> wrote in message
>> >news:(E-Mail Removed).. .
>> >> I got my router installed on this wired PC, the wireless one runs
>> >> well too and now i can share files but............ Now I have an
>> >> SVCHOST.EXE program running 100% CPU useage. Any thoughts???
>> >
>> No actually it is "SYSTEM" I really dont know much about this,
>> reading what I can online i can see that there are probably a million
>> reasons for this. I assume something isnt starting up as it should
>> but I am not sure where to go from here. If I kill the svchost.exe I
>> of course get sporatic results, sometimes everything is OK but most
>> of the time not. Not sure exactly when this started but the last
>> thing I did was hang a D-link DI-524 router on it (wired)
>>
>> I wouldnt expect that to cause a problem.
>>
>> Any and all advice is welcome.
>>
>> I did see something about running "tasklist" but I will be darned if
>> my PC or a new one I just bought, both XP respond to tasklist either
>> from the run or the cmd prompt.
>>
>> TIA a million times over
>

XP home edition will not have tasklist at the cmd prompt. Just do a
ctrl-alt-del and select the processes tab, which will give you the same
info. Are you using the router with cable or dsl? Sounds like you may have a
large amount of broadcast traffic on the router. If you have NetBEUI and
IPX/SPX protocols installed, disable them. If that doesn't help, then look
and see if you have UPnP enabled. If so, disable it also.

"capn archer" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> 1. I have tried evrything to run "tasklist" I have even searched my
> entire harddrive for a program called tasklist and another PC. It
> isnt here. Is it possible that it doesnt exist n XP home edition?
>
> 2. I am not talking about 100% on start up or on occassion, it is
> flat out 100% all of the time when it hangs. Yes the whole system
> drops to it's knees. My wife was trying to type a report and she had
> to wait 20 seconds for the letters to show up on the screen.
>
> bear with me, here is what I have learned after 3 days of looking
> into this.
>
> A all I did was hang a D-Link DI-524 wireless router on the ethernet
> port. I did do a little configuration to set up a home network.
> Somewhere in the mess this started happening. mostly at start-up but
> sometimes hours later.
>
> hen it was hung I started shuting down services (services.msc I
> found that I could access or shut down almost every one of them except
>
> internet connection frewall/inernet connection sharing
> nework connections
> netwrk locations awareness
> remte access connection manager
> telephony
> application layer gateway
>
> of course the last 5 are tied to the first and that is the one that
> refused to shut down for me.
>
> I then noted that if I disabled these 6 services I had no problem,
> even had internet functions, of course I couldnt make any network
> changes.
>
> Next thing I learned was that with everything back turned on the
> probem seems to happen more quickly if I go into the network
> connections and just breeze through properties and settings.
>
> Next thing I learned was that if I disabled the lan NIC I didnt seem
> to have the problem.
>
> Nxt thing was that if I removed the router and cabled back up to the
> cable modem I didnt seem to have the prob. So I reset the router and
> re-configured it but still came back once I was back with the router.
>
> Ialso did a system restore to a time previous to any of this,
>
>
> I think it is a conflict as it is hit and miss. I suspect it has
> something to do with talking to the router but I have next to no
> experience here.
>
> in the network config what should the link speed/duplex mode be
> 10mbps/half duplex? it was set at auto but I seem to have seen
> something somewhere about changing it to half.
>
> Just thi minute I updated the driver on my NIC so who knows, i am
> just about out of ideas and it is 3:30 in the morning.
>
> Thanks to anyone wh hs advise. by the way I put the wireless router
> in so that I could buy a laptop and get to the internet and that part
> ( wireless PC to the router ) works great, I just ave trouble with
> the existing wired PC, almost ready to buy a USB wireless and yank
> the ether net but that is just the fatigue setting in.
>
>
>
> On Fri, 27 Feb 2004 02:00:46 GMT, "Tom" <(E-Mail Removed)>
> wrote:
>
> >To run tasklist you need to select Start, Run, then type "cmd" in the
Open
> >dialog. Then in the dos window type "tasklist /svc", then press Enter.
> >
> >What you're seeing is normal, especially if user name is system. It is a
> >grouping of multiple processes, and for it to be using 100% of its time
> >slice is normal. I have 5 of them running in my tasklist. You certainly
> >should not stop any svchost process. If you watch all the processes, you
may
> >see several of them at 90% or higher at the same time, so it make sense
that
> >it has nothing to do with total CPU usage.
> >
> >Are you asking this question because you notice a drop in you system
> >performance?
> >
> >"capn archer" <(E-Mail Removed)> wrote in message
> >news:(E-Mail Removed).. .
> >> On Thu, 26 Feb 2004 03:41:40 GMT, "Tom" <(E-Mail Removed)>
> >> wrote:
> >>
> >> >If you're talking about the CPU column in the Processes tab, that is
not
> >%
> >> >of CPU usage. It is % of time that a process used the CPU since the
last
> >> >update. Each process is assigned a CPU time slice and can't use more
than
> >> >that time slice. To see the total CPU usage you need to look at the
> >> >Performance tab. What user name is assigned to svchost.exe? Probably
> >network
> >> >service.
> >> >
> >> >"capn archer" <(E-Mail Removed)> wrote in message
> >> >news:(E-Mail Removed).. .
> >> >> I got my router installed on this wired PC, the wireless one runs
> >> >> well too and now i can share files but............ Now I have an
> >> >> SVCHOST.EXE program running 100% CPU useage. Any thoughts???
> >> >
> >> No actually it is "SYSTEM" I really dont know much about this,
> >> reading what I can online i can see that there are probably a million
> >> reasons for this. I assume something isnt starting up as it should
> >> but I am not sure where to go from here. If I kill the svchost.exe I
> >> of course get sporatic results, sometimes everything is OK but most
> >> of the time not. Not sure exactly when this started but the last
> >> thing I did was hang a D-link DI-524 router on it (wired)
> >>
> >> I wouldnt expect that to cause a problem.
> >>
> >> Any and all advice is welcome.
> >>
> >> I did see something about running "tasklist" but I will be darned if
> >> my PC or a new one I just bought, both XP respond to tasklist either
> >> from the run or the cmd prompt.
> >>
> >> TIA a million times over
> >
>

If svchost.exe is not running out of C:\windows\system32, then it's a
Trojan.

Also, malware or spyware can be using svchost.exe as a host to communicate,
since one of svchost.exe jobs is to provide communications on the LAN and
WAN.

You can use Active Ports to review all processes that are making outbound
and inbound connections to a machine in real time. And you should make a
short-cut for Active Ports and put it in the Start-up folder and watch what
connections are being made to get a clear picture as to what is happening.

In addition, you can use Process Explorer to look inside a running process
like svchost.exe and view what programs such as dll(s), ocx(s) etc., etc are
using the running process.

Both of the utility programs are free use Google.

One doesn't kill svchost.exe, if it is legit. One tries to discover what is
making svchost go 100% cpu.

HTH

Duane

"capn archer" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> I got my router installed on this wired PC, the wireless one runs
> well too and now i can share files but............ Now I have an
> SVCHOST.EXE program running 100% CPU useage. Any thoughts???