Share this question

Welcome to Teachnovice Q&A, where you can ask questions and receive answers from other members of the community.

This is a collaboratively edited question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Svchost.exe using lots of memory slowing my PC down?

0 like 0 dislike
497 views
On my Windows 7 32-bit. svchost.exe is using lots of Memory and slowing my PC down big time.

I already have auto update turned off and it is on manual mode.

How can I fix this problem? Thanks
asked Apr 27, 2015 by user206168  

I’ve had this issue(SVCHOST was using 1.2GB).

Installing hotfix https://support.microsoft.com/en-us/kb/3050265 appears to have resolved my issue.

5 Answers

0 like 0 dislike
 
Best answer

There's no way for us to know what is causing a svchost.exe high CPU usage problem on any given machine because:

svchost.exe is a host process that contains running DLLs as services in Windows XP and beyond. At any given time, there are multiple services running inside svchost.exe. You could kill the process, but you would never be able to tell which service is causing the problem, because you would be killing all of them.

To determine which one is causing high CPU usage, you can try a few methods:

  • Open Task Manager, right-click the svchost.exe that is causing problems, then click the last option - "Go to Services"

    enter image description here

    You will get a list of all the services that are running in that particular svchost.

    enter image description here

  • You can also use Process Explorer to view which services are running in a particular svchost instance:

    enter image description here

    Source


While a virus could certainly cause this problem, it's not any more likely than just a poorly written software program hogging resources, or a poor choice of antivirus suite.

answered Apr 27, 2015 by Moses  

Try stopping one process at a time to avoid PC to crash

if you double click the svchost entry in process explorer, there is a tab which will give you more fine-grained information regarding which services are using the CPU for that process. IIRC, "threads". You might be able to narrow down the choices for what to toggle off.

0 like 0 dislike
It could be caused by a virus infection. Generally speaking, svchost.exe is a normal windows system file and should NOT consume lots of resources including CPU and RAM. You should definitely perform a complete scan for the suspicious infection
answered Apr 27, 2015 by Freelanzer  
0 like 0 dislike

The SvcHost.exe process hosts services that run in the background on Windows. It's literally "Service Host." You may have a dozen services or more running inside that process. More complex is that you'll sometimes see multiple SvcHost.exe's in your TaskManager. 

Let me tell you now, Task Manager will not save you. You can see the PIDs for a running Service for the Services tab, but when a service goes insane, good luck nailing it down.

This inevitably leads you to questions like, "What Services are running inside what SvcHost.exe?" and "Which Service is using 100% CPU."

There's lots of ways to figure this out, but first I'll tell you that simply killing the SvcHost.exe process that is using the most CPU will also kill ALL the other services that were running inside that host process.

There's many command line ways to figure this stuff out, like

net start

or

sc query type= service

or

tasklist /svc

But this post is about doing it the easy way without lining up Process IDs and such.

Which Service is Freaking Out?

From the Start Menu, type "Resource Monitor" and run it.

Resource Monitor

Click the checkboxes to the left of each of the svchost.exe processes (or just those that you care about). Now, switch to the CPU tab:

Resource Monitor - CPU

See the names of the logical services in the middle pane? Now you can sort by the CPU column and you've got the name of your out of control process.

You can right click and try to stop or restart just the one services, or even use default browser's default search engine to "Search Online" for that service name:

Resource Monitor with the Right Click Menu showing

This tip has helped me several times while writing and debugging services. Resource Monitor is your friend. Many folks don't' even know it's there!

answered Apr 27, 2015 by hanselman  
0 like 0 dislike

SVCHOST.EXE is one of those mysterious processes that constantly runs in Windows and is utterly essential, yet you never know exactly what it is doing. So what is SVCHOST.EXE? Identifying the actual services and programs that are running inside each SVCHOST.EXE process is a task well worth knowing, especially when the process eats up 99 or 100 percent of your CPU!

So before we dive into solutions, let’s get a deeper understanding of what this process actually does and how you can go about fixing some of the problems that might occur. Firstly, svchost stands for “Service Host” and it does exactly what as the name suggest: helps to “host” services. A service in Windows is simply a program in the operating system that does a particular job and runs in the background at all times when your computer is on, even if you are not logged in.

Most programs that you are familiar with run as a stand-alone executable, such .EXE. However, most services are implemented in the form of DLLs, which cannot run on their own. Hence, svchost loads those DLLs and runs them itself. That’s why when you open the Windows Task Manager, you’ll see a bunch of svchost.exe processes running. If you want more info on the Task Manger, check out my articles on understanding the Task Manager.

svchost

You’ll notice that there are currently eight svchost processes running on my computer, all using up various amounts of memory and running under different user names. So let’s say one of them is running at an excessively high CPU usage of 100 percent, how can we identify the actual application running?

There are actually two ways to go about this: doing it all manually using the command prompt and Services tool or by using a third party application. I’m going to mention both here in case one does not work for you.

Identify svchost.exe Processes via Command Prompt (hard way)

1. First, go ahead and click on Start and then Run and type in CMD and click OK. In Windows 8.1, go ahead and right-click on the Start button and choose Run.

run cmd

2. Type in the following into the command window and press Enter

tasklist /svc /fi “imagename eq svchost.exe

You should get an output as shown below with the name, PID, and service description

svchost processes

You’ll now see each svchost process along with it’s unique ID number and the services it is responsible for running. However, these names are still very cryptic and are all short-hand names. In order to get some more useful information about the process, we can use the Services browser in Windows.

3. Right-click on My Computer, choose Manage. On the resulting screen, choose Computer Management and then choose Services and Applications. Finally, choose Services.

windows services

4. Now try to match the cryptic Windows service name with the easily readable names in the Services tab. This is a little and can take some time because if you take the process with ID 1436 and it’s name WudfSvc, you have to try to find it in the list. If you double-click on one the service names, you’ll see their cryptic name also, so that’s how you can match them up. In my case, I guessed that the W means the process starts with “Windows” and opened them until I saw a match.

windows driver foundation

As you can see, the Windows Driver Foundation service is actually called wudfsvc for short!

Identify svchost.exe Processes via Process Explorer (easy way)

If you found to be too difficult, there is a much easier way! Check out the Process Explorer tool from Microsoft (originally from SysInternals). The tool is completely free and gives you detailed information for each process currently running.

Once you download it, just run the exe file as it does not have to be installed. Hover your mouse over the svchost process and you’ll get a popup showing you which services are running under that process. The nice thing about process explorer is that it gets you the friendly name for each process instead of the short name.

process explorer

answered Apr 27, 2015 by Computer-Tips  
0 like 0 dislike

Windows 8 Task Manager

One last thing I wanted to mention was the fact that the Windows 8 task manager basically makes using the command line or Process Explorer totally obsolete. Open the Task Manager by pressing CTRL + SHIFT + ESC and scroll down on the Processes tab to where it says Windows Processes.

windows 8 processes

Here you will see every svchost.exe process listed as Service Host: followed by the type of account it is running under (Local System, Network Service, etc). It’ll also have a number next to it and if you expand the item out by clicking the arrow, you will also see every service running under that particular process.

list of services

Fixing SVCHOST High CPU Usage

Now that you have figured out exactly which process is eating up all of your CPU, we can address how to fix it. If you have found that the process is not a Windows process, such as Windows Update or Windows Firewall, etc, then simply kill the process and uninstall the program.

However, most of the time that this problem occurs, it has something to do with a Windows process. The best solution in this case is to install all of the latest updates from Microsoft’s web site. If you’re not able to do so normally in Windows, try restarting the computer in safe mode and try it again.

Also, if you can get to the Services tab like we did above, go ahead and right-click on the service and choose Disable. Even if it’s Windows Update or the Firewall, don’t worry, you can re-enable it later. Then restart the computer and go to Microsoft’s web site and manually get the updates. Re-enable the service and restart the computer again and hopefully things are working!

In order to disable a service in Windows, right-click on it from the Services tab and choose Properties.

service properties

Next choose Disabled from the Startup type combo box located in the middle of the dialog box:

disable service

I have gone through this process a couple of times and it has worked for me. So again, first disable the service, then restart computer, then install updates manually, then re-enable service, and then restart computer again. If this doesn’t work, you have to perform a repair install of Windows. Do a Google search for repair install and follow the steps. If you’re running Windows 8, you can refresh your computer.

answered Apr 27, 2015 by Computer-Tips  
...