svchost.exe running @ 100%

[nawbus]

On my rather elderly HP laptop, I'm having a problem with svchost.exe running at nearly 100%. This, of course, means that everything else grinds to a halt.
I've only recently wiped it and freshly installed everything. It's running XP Home SP2.
Any suggestions?

[ajbritton]

SVCHOST.EXE is used to host certain services. Get SysInternals Process Explorer. This will show you which services the SVCHOST.EXE is hosting. That might give some clues.

[altecsole]

I had a similar problem and found that it was linked to Windows Update. The machine was fine for the first couple of minutes after startup, but then svchost maxed out the CPU for ages.

I think (as far as I can remember) that I'd changed the default behaviour of windows update to not download updates, but it was spending ages looking for them. Try changing the settings and see if it helps.

[nawbus]

Seem like it was something to do with Microsoft Update. Roll back to Windows Update and everything's fine! Most odd.......

[Geoff]

Reseting the Windows Update cache usually fixes that.

[eejit]

Reseting the Windows Update cache usually fixes that.

How do you do that, Geoff? I am suffering from this problem at the mo.
Cheers

[HodgeHi]

I also had a problem with this svchost.exe and upon reading this thread have probably just found the reason why. My problem was the svchost was crashing constantly throughout the day. It would suggest that it is due to the WSUS i have just implemented if these issues are Windows update related since i didn't have this problem previously.

[Geoff]

1. Stop the Automatic Updates Service
2. Delete the C:\Windows\SoftwareDistribution Folder
3. Start the Automatic Updates Service.

Also have a look at these knowledge base articles.

http://support.microsoft.com/kb/916089/
http://support.microsoft.com/kb/927891/

[Geoff]

Ah, and here's the hotfix.

http://www.microsoft.com/downloads/d...playlang=en&tm

[eejit]

Thanks for all that Geoff.
I'll apply the hotfix right now and update this thread.

[rdhawkins]

You can use tasklist.exe to see what services are running in a svchost.exe.

Type tasklist.exe /svc in a command prompt.

Might help see which service is misbehaving

[eejit]

@rdhawkins - unfortunately that is not ideal when it's a svchost process as many processes may be using that.

Initial returns on the Hotfix are not good

I'll try the manual emptying of the softwaredistribution folder next.

[DMcCoy]

The hotfix doesn't itself stop the update process from using all the CPU, it just stops it from crashing. After reading the KBs again I realised that this cpu usage is still the expected behaviour from MS.

Then only way I found to fix it is to reinstall my wsus server without updates for any *office* products.

[eejit]

If you just remove the office updates and re-sync do you think it'll fix the problem?
I'll give it a shot

[contink]

The hotfix doesn't itself stop the update process from using all the CPU, it just stops it from crashing. After reading the KBs again I realised that this cpu usage is still the expected behaviour from MS.

Then only way I found to fix it is to reinstall my wsus server without updates for any *office* products.

Just out of interest has anyone applied the patch, retained the office products and noted if the situation with the svchost process continues after the initial burst of detection.

It'd be interesting to find out if it keeps on happening.