The host process svchost exe loads the system. The host process for Windows Services uses memory and CPU
Svсhost is a system process in the families of operating systems Windows 2000, Windows XP, Windows Vista, Windows 8, Windows 10. Svсhost has importance for shared service processes, while multiple services can share a single process to reduce system resource consumption. Grouping services into a single process saves resources, a consideration that worries NT developers as process creation in Windows takes longer and consumes more RAM.
If one of the services raises an unhandled exception, the entire process may fail. It can also be more difficult for end users to identify component services. Problems with various hosted services, especially Windows Update, are reported by users, which is related to Svchost.
The Svchost process was introduced in Windows 2000, although basic support for service processes has existed since Windows NT 3.1.
Its executable image "%SystemRoot%"/"System32"/"Svchost.exe" or "%SystemRoot%"/"SysWOW64 "/"Svchost.exe" (for 32-bit services running on 64-bit systems) runs in multiple instances, each hosting one or more services.
Services running in Svchost are implemented as dynamically linked libraries (DLLs). The registry key for such a service should have a value named ServiceDll in the Options section, pointing to the corresponding service .dll file. Their ImagePath definition is "%SystemRoot%"/"System32"/"Svchost.exe -k". Services sharing the same Svchost process specify the same parameter, which has a single entry in the SCM database.
The first time the Svchost process is started with a certain parameter, it looks for a value with the same name in the key "HKLM"-"SOFTWARE"-"Microsoft"-"Windows NT"-"CurrentVersion"-"Svchost" which it interprets as list of service names. It then notifies the SCM of all the services it hosts. The SCM does not start a second Svchost process for any of the received services: instead, it simply sends a "start" command to the corresponding Svchost process containing the name of the service to be started in its context.
According to the MS 2003 presentation, the minimum working set for a shared service is approximately 150 KB versus 800 KB for a standalone process.
Service tags
Starting with Windows Vista, internal identification of services within common processes (including svchost) is achieved using so-called Service tags. Service tags for each thread are stored in the SubProcessTag of its thread environment block (TEB). The service tag is propagated to all threads that then run the main service thread, except for threads created indirectly by the Windows threading APIs. The Service tags management procedure set is currently an undocumented API, although it is used by some Windows utilities such as netstat to display the TCP connections associated with each service. Some third party tools like ScTagQuery also use this API.
Svchost.exe (netsvcs)
Netsvcs is a subprocess used by svchost.exe
Netsvcs is a subprocess used by svchost.exe (netsvcs). If and when there is a memory leak, svchost.exe starts to use a lot of CPU. This issue occurs because of a handle leak in the Winmgmt service after Windows Management Framework 3.0 is installed on the computer. The Winmgmt service is a Windows Management Instrumentation (WMI) service in the svchost.exe process that runs under the LocalSystem account.
Identification and management of hosted services
The Microsoft Sysinternals Process Explorer also provides information about the services running in the svchost.exe processes when the user hovers over svchost.
None of the above methods allow the user to determine which of the many services running inside svchost is a particular resource, such as CPU, disk, network, or memory. The Windows Resource Monitor takes into account most of these resources when the process is detailed. However, it takes into account CPU usage when you drill down on services by going to the CPU tab. A list of open TCP connections and open UDP ports can be obtained using "netstat -b".
To solve other problems with a service running inside svchost, the service (or services that should be causing the problem) must (all) be reconfigured to each run inside its own svchost instance. For example, "sc config foo type=own" will reconfigure a service named "foo" to start its own svchost. Changing the type "back to the general" is done using a similar command. You must restart the service for these configuration changes to take effect. However, this debugging process is not reliable. In some cases, a heisenbug may occur, causing the issue to go away when the service is running alone.
A more advanced troubleshooting technique is to create an isolated maintenance group.
high consumptionProcess CPU and RAMsvchost.exe
Problems with high level Svchost.exe uses, in most cases, occur on computers infected with a virus or malware. In other cases, high CPU problems or problems with Svchost.exe (netsvcs) can be caused by Windows Update, a full event log file, or other programs and services that start many processes while they are running.
Video - What to do if svchost loads the processor
How to fix Svchost.exe (netsvcs) problem with high memory or CPU consumption
Solution 1: Scan your computer for viruses
Many viruses or malware can cause svchost.exe high CPU and memory usage issues. Therefore, before you continue troubleshooting the problem with loading svchost.exe, use various to scan and remove malware.
Solution 2 – Find and disable the service that is causing the high svchost usage issue
Svchost.exe is a process that is required by several services or programs in order to run them. Thus, determine what service or program is running in the svchost.exe process, as well as loading your system resources and your system memory, and then proceed to disable or completely remove this program (or service).
Step 1. Press the Ctrl+Alt+Del keys at the same time and then open Task Manager.
Step 2 On the Processes tab, select the Show processes from all users check box.
Step 3 Right click on the high usage svchost.exe process and select "Go to Services".
Step 4 On the Services tab, you should see several highlighted services that are running under the svchost.exe process.
Step 5 Now it's time to figure out which process is hogging CPU resources. For this you have two options:
Step 6 Once you've identified the culprit service or program, go to Computer Management (Control Panel/System and Security/Administrative Tools) to disable that service (or completely uninstall the program).
To disable a service on your computer permanently:
Solution 3: Empty Event Viewer log
In some cases, the problem of using svchost.exe with high CPU usage (or high memory consumption) is due to large log files in the Windows Event Viewer. So, another solution is to clear the Event Viewer log.
For this:
Solution 4 – Troubleshooting Windows Updates
On other computers, the svchost.exe high usage issue may occur if Windows is looking for updates (in the background). To fix high CPU usage issues during Windows Update, follow these steps:
Step 1. Force Windows to re-create the empty Windows Update folder.
The Windows Update folder (commonly referred to as the SoftwareDistribution folder) is where Windows stores downloaded updates. If this folder is corrupted, you will run into problems during a Windows update. So first try to force Windows to re-create a new empty "SoftwareDistribution" folder.
For this:
- Simultaneously press the Windows key + R to open a command prompt window.
- In the run command input field, enter: "services.msc" and press "Enter".
- Locate the "Windows Update" service, then double left-click on it and select "Stop".
- Navigate to the "C:"/"Windows" folder.
- Delete (or rename) the "SoftwareDistribution.old" folder to the "SoftwareDistribution" folder.
Note! On restart, the next time Windows Update checks for available updates, a new SoftwareDistribution folder will be automatically created by Windows to store the updates.
- Restart your computer and try to check for updates.
If the problem with high "svchost" usage persists, continue to the next step.
Step 2 Run the Windows Update troubleshooter.
- Download the Windows Update Microsoft troubleshooter to your computer.
- Run the Windows Update troubleshooter.
- Select "Windows Update" in the first window and click "Next".
- Wait for the problem detection process to finish.
- Click on the "Apply this fix" link.
- Let the program fix problems with Windows Update and restart your computer.
- Check for updates again, and if the svchost.exe high loading issue persists, proceed to the next step.
Step 3 Install latest version Windows Update Agent
Step 4 Install Microsoft Security Bulletin MS13-097.
Step 5 Fix the damaged system files System Update Readiness Tool (e.g. Deployment Image Servicing and Management - DISM tool).
Other solutions that can be applied in different cases in which the problem with the high usage of "svchost.exe" occurs when searching for updates.
Case 1 Applies to new Windows installation 7SP1.
Case 2 Used on an HP laptop with Windows 7 SP1 Home.
Step 1. Install security update KB2993651 according to your OS version:
- Security Update for Windows 7 for x86-based Systems (KB2993651);
- Security Update for Windows 7 for x64 Systems (KB2993651);
- Security Update for Windows 8.1 for x86-based Systems (KB2993651);
- Security Update for Windows 8.1 for x64 Systems (KB2993651);
Step 2 Reset Windows Update Components. Restart your computer.
Case 3
Case 4 Applies to Windows 7 SP1 and Windows Server 2008 R2 SP1.
Download and install Cumulative Update 3 (KB3161608) for Windows Update according to your OS version.
Note! If the installation hangs: Restart your computer, stop the Windows Update service, and then install the update.
If after completing all these tasks, you are still encountering issues with high CPU or memory usage, disable Windows Update completely or reinstall Windows on your computer. If you are using Windows 8 or Windows 8.1, you can also update the system. Good luck!
Video - Svchost loads the processor. Solution
Today we will talk about Svchost.exe, what kind of process it is and why it can load the system.
How to access the processes tab
While the computer is working normally, the average user is of little interest in what processes are running on the system and what they are for at all.
But the non-standard behavior of Windows XP / Vista / 7 - braking, freezing, frequent reboots, makes us look for reasons.
Where to start the search? Let's try to launch the "Task Manager".
Launch options.
- Press the key combination "Ctrl" + "Alt" + "Del".
- Click the "Start" button, select the "Run" command, enter taskmgr.exe and click the "Ok" button.
Now go to the "Processes" tab and study the list.
A large number of svchost.exe processes immediately alarms. Well, it's time to deal with the possibilities of this application.
Getting Started with svchost.exe
Recently, dynamic link libraries with the .dll extension have been increasingly used to link Windows services instead of the usual executable files with the .exe extension.
This method is considered more efficient. However, a library file, unlike an executable file, cannot start itself.
The svchost.exe application “helps” start a service (service) from a dll file.
For example, here is how the DNS Client service starts:
C:\WINDOWS\system32\svchost.exe -k NetworkService.
A few words about svchost.exe processes
Each instance of the svhost.exe process is initiated by a parent, the services.exe system process.
A single svshost.exe process can run a single service or group of multiple logically related Windows services.
The launch option "one svchost process -> several Windows services" allows you to save RAM and CPU resources.
To view svchost groups and their composition, go to the Windows registry:
- press the "Start" button and find the "Run" command;
- V command line Enter regedit.exe and click the OK button.
- in the registry, go to the branch HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Svchost;
- find REG_MULTI_SZ parameters with lists of services of each group.
For example, the DcomLaunch group includes the following services:
- Power - a service that manages the power configuration and sends notifications about installed power configurations;
- PlugPlay is a service through which the computer automatically recognizes devices connected to it and configures them to work without user intervention or minimizes this involvement.
- DcomLaunch is a service for launching COM and DCOM servers for the stable operation of programs using server data.
It is not recommended to disable any of the above services.
When viewing the svchost process data, be sure to pay attention to the "Username" column.
It can contain only one of the following values: "Local Service", "System", "Network Service".
Where does the file live.
In Windows XP / Vista / 7 operating systems, the location of the svchost.exe file is standard:
- 32-bit OS - C:\Windows\System32\;
- 64-bit OS - C:\Windows\SysWOW64\.
Remember the exact address of the file. This will be useful to us in the future.
The svchost.exe process and its associations
The task manager gives us a whole list of running svchost.exe processes, but this information is clearly not enough.
Naturally, we are interested in what kind of services a particular instance of this process launches.
So here are a few ways to learn about svchost connections.
tasklist and sc commands.
The use of the tasklist and sc commands is possible in any Windows versions. Therefore, this method can be considered universal.
First of all, we launch cmd - the Windows command line interpreter:
- press the "Start" button;
- select the "Run" command;
- Enter cmd and press the OK button.
To get a list of services on the interpreter screen, run the tasklist command with the svc key and press the "Enter" key:
- tasklist /svc "Enter".
To save the query results to a text file svc.txt located on drive C: in the temp folder, we redirect the output of the tasklist command:
- tasklist /svc > C:\temp\svc.txt "Enter"
Note that the file will be saved in dos encoding.
Fragment of listing tasklist.exe.
Service PID Image Name:
- svchost.exe 1216 DcomLaunch
- svchost.exe 1300 RpcSs
- svchost.exe 1384 WudfSvc
- svchost.exe 1528 Dnscache
- svchost.exe 1584 LmHosts, SSDPSRV
Table columns:
- "Image name" - the name of the executable file;
- "PID" - process ID;
- "Services" - a list of services.
To get information about a specific service, specify its short name as a parameter of the sc service control command.
An example of getting information about the TermService service.
- sc qc TermService "Enter".
Two ways to navigate to the list of services.
- Click the "Start" button, find the "Run" command, enter services.msc in the command line and click the "Ok" button.
- Click the Start button, then select Settings -> Control Panel -> Administrative Tools -> Services.
Windows Vista/7 Task Manager.
We get a list of services associated with the svchost process using the Windows Vista/7 Task Manager:
- set the cursor to the name of the process;
- call the context menu by pressing the right mouse button and select the option "Go to services";
- we get a list in which the services associated with our process are highlighted.
In the Windows XP operating system, the option "Go to services" is unfortunately missing. This option cannot be considered universal.
Process Explorer utility.
This program is not included in Windows distributions, but is available for download from the Microsoft website or from the Process Explorer download page.
The launch process is very simple and does not require installation:
- download the zip archive;
- run the procexp.exe file.
The utility gives detailed information about the processes running in the system: pid, cpu load, short description, information about the manufacturer, etc.
When hovering the mouse over the name of one of the svchost instances, we received the following information:
- Command Line - a line for starting a service or a group of services via svchost;
- Path - path to the svchost.exe file;
- Services - list of services.
The right-click context menu provides great control over the process and the services it starts.
AnVir Task Manager utility.
The AnVir Task Manager program not only manages running processes, services, drivers, and startup, but also performs the functions of an antivirus.
The launch order is the same as for Process Explorer:
- download the free version of AnVir Task Manager in zip-archive format;
- unzip to a folder on the disk;
- run the file AnVir.exe.
To switch the language when you first start the program, use the main menu:
View->Language->English.
Select the "Processes" tab to get detailed information about our svchosts.
In the process line, we see information about the manufacturer, the path to the executable file, the percentage of CPU usage, etc.
But the most interesting data is presented in the "Startup" column. Here you will find a list of services that svchost starts.
Double-click the left mouse button on the name of the process and get more detailed information about it (a window with tabs at the bottom of the screen).
The system slows down what to do
What symptoms indicate svchost is guilty and how to fix the problems. Let's figure it out.
The system can slow down for various reasons. But if in the task manager you find the svchost.exe process with a high percentage of CPU utilization (sometimes even about 100%), it is likely that this is the reason.
Many users believe that svchost is necessarily a virus in this case. But it's not. The process can load the system for other reasons.
Let's look at how to solve the svchost problem in both cases.
Svchost - virus or not?
Many Trojans and other computer viruses masquerade as well-known Windows system applications. Svchost is no exception.
According to the Kaspersky Lab, Trojan-Clicker.Win32.Delf.cn, Virus.Win32.Hidrag.d, Net-Worm.Win32.Welchia.a viruses “pretend to be” svchost, as well as the Kido virus known to most users.
So, we begin to check our process.
First of all, pay attention to. If it differs from the standard one, the file can be safely deleted.
Check the name of the user who started the process. A list of valid names is given in the section "".
Read the process name carefully. Virus writers often use similar names: svhost, svchosts, etc.
The application can never be launched through the "Run" key of the Windows registry.
Therefore, it is necessary to check its presence in autoload:
- click the "Start" button, select the "Run" command, enter msconfig and click the "Ok" button;
- if the svchost.exe file is found, disable the launch.
For removing suspicious process Open the context menu in the task manager by right-clicking the mouse and select the End Process Tree command.
After completing all the steps described, it is imperative to run an anti-virus program and disinfect the computer.
If the laptop or computer starts to slow down and fail, then take a look at the Task Manager - it is quite possible that the svchost process consumes too many resources and it is because of it that problems occur. There are several ways to solve this problem.
Why is svchost needed and why does it load the system
Svchost is a system process, and by the way, there are several of them in the Task Manager. It is required to start system services. It is difficult to say more specifically, because there are a huge number of them and the number depends on several factors. But mostly it speeds up the launch of programs, components and applications. It is thanks to svchost that users have the opportunity to run several programs at once, for example, listen to music while playing a game.
There are several of them because if the developers made one file responsible for the assigned tasks, then it would eat up almost all the memory and heavily load the system.
Therefore, if you opened the Task Manager and saw sad statistics, then do not panic - this is not a virus or other malicious program, but only if the "User" column is system, local service or network service.
Many users begin to urgently terminate processes, which is fundamentally wrong and will only worsen the system.
If the account name or Administrator is there, then your computer has become infected with a virus that disguises itself as the desired program. In this case, everything is solved quite easily - use a good antivirus and leave your computer alone for the duration of the scan.
A loads svchost system because the creators of Windows 7 wanted to create a single service that would be responsible for running programs. And this is even in a sense good, because why run several different applications for one process, the call to dynamic libraries also applies to them. Their work is carried out only through hosts.
Thus, the idea came out a little one-sided and the service can load the processor and memory to one hundred percent. And given that many do not turn off the Internet, it is not surprising that the system starts to hang.
Causes and Solutions
To begin with, it is worth saying that the solutions given are suitable for Windows 7 and may not work or work incorrectly for other versions, although they are quite similar.
The very first thing to do in such a situation is to restart the computer. This method is universal and works for many problems, albeit temporarily.
Next, it's a good idea to check the system with an antivirus. If it is not installed, then immediately install it. After checking, see if there are any updates for Windows 7, if any, install. To do this, go to Control Panel - System and Security - Windows Update.
Also, the cause may be an incorrect update of the system or programs. For example, the antivirus cannot install updates and therefore load the system. Therefore, try disabling automatic updating of Windows and background programs. If this is the case, then the computer will start working normally again. Remember to restart your computer after changes and check for important updates once or twice a week.
Another reason may lie in the fact that a lot of programs are running in the background and the RAM simply cannot cope. Try turning apps on and off to find out.
Active surfing on the Internet can also cause lethargy. By collecting a huge amount of temporary files, you litter the registry. If this is the reason, then everything is solved with the help of special utilities like CCleaner.
If after all these manipulations the computer is stupid, then you can open the Task Manager, go to the "Processes" tab and identify the most voracious svchost process. For convenience, you can sort them by the amount of memory occupied. Right-click on it and select "Go to Services".
A list of services responsible for svchost will appear. Now you have to do hard work. Turn off each of them in turn and see how the system behaves.
To disable it, go to the Control Panel, find Administrative Tools and click on the Services shortcut. Select the desired file from the list, right-click on it and click on "Stop".
You can delete the Prefetch folder. She is in Windows folder on the system disk. This is not dangerous, but it can solve the problem.
You can also check if dust has accumulated in the system unit? Physical damage to memory chips can also cause Svchost to consume a lot of resources.
If all else fails, you can try to roll back the system a few days ago. This can be done in the Control Panel.
What to do: leave the process hanging or delete it manually - left to the discretion of the user. But it is worth remembering that terminating the process can adversely affect the system and memory. Therefore, it is better to be patient and wait a bit than to rake up the consequences later, up to the complete collapse of the system and the blue screen. Do not go straight to the Task Manager, it is better to use safer methods first.
In this article, I will tell you in detail what kind of Svchost.exe process is, why svchost.exe loads Windows 7 memory, and I will also describe ways to solve the problem with this process.
It happens that while working at the computer, it starts to slow down a lot. Trying to understand the cause of the dysfunction, you go to the “Task Manager”, and you see that the culprit of the problems is the Svchost.exe process, which heavily loads the central processor or memory of your PC.
I found out that Svchost. exe is a system process in Windows operating system that is used to start other system services. The use of this process dates back to Windows 2000, but now it is an integral part of the Windows 7 and 10 family of operating systems. To reduce the overall cost of the processor, the developers decided to use one process to run various services, giving the process some kind of versatility. Currently, there can be four or more Svchost processes in the task manager, and each of them is responsible for the operation of a separate service. Therefore, Svchost loads the computer's processor and memory, more on that later.
When viewing these processes in your task manager, you must remember that the user of the Svchost.exe process must always be either system (system), local service or network service. If this process is running on your behalf, administrator or someone else, then you are probably dealing with a virus.
Why Svchost.exe loads memory and processor in Windows 7
There are several reasons for overloading the processor and memory due to the operation of svchost.exe, and below I will list each of them.
- Random system crash. This sometimes happens in Windows 7
- A virus branded as svchost.exe. Frequently occurring problem. Virus creators like to use the name of this process for their malicious applications, so a virus called svchost.exe is hard to identify as a malign program, even when svchost.exe is heavily CPU or memory intensive.
- Errors in the operation of the Windows automatic updates module. If you have Windows 7 Automatic Updates enabled, failures to download them can cause problems with svchost.exe. There are also cases that the updates themselves contain various errors and bugs, and such an update can cause problems in operation. operating system, and svchost.exe in particular.
- Large event log file in the Windows 7 log. In some cases, high CPU and memory usage from svchost.exe is due to a very bloated log file in the system event log.
- Physical damage to memory chips, overheating of the system unit, etc. It happens rarely, but also should not be ruled out.
Svchost.exe loads the processor in Windows - what to do
Let's take a closer look at the toolkit for fixing existing errors if Svchost exe loads windows 7 memory.
- Try to just wait a while. Perhaps the operating system is just being updated, and soon its normal operation will be restored.
- Restart your computer. This helps to solve the problem with loading the process is not as rare as you might think.
- Try to close the most resource intensive svchost.exe if there are several. To do this, go to the Task Manager (simultaneously pressing Ctrl + Alt + Del and selecting "Task Manager"), click on the "Processes" tab, select "Display processes of all users" below and see which of the svchost.exe loads the system the most. Try to close it by right-clicking on it and clicking "End Process Tree" in the menu that appears.
- Check the health of your memory with special programs, ask yourself how long ago you cleaned your PC from dust, if the cooler inside your computer is buzzing a lot (this may signal that the PC cooling system is full of dust), how long ago you changed the thermal paste on the central processor. This hardware issues can be directly to blame for slowing down your PC speed and loading svchost.exe in particular.
- In many cases, the problem when svchost.exe loads memory is caused by malfunctions in the Windows Update automatic update service. Therefore, either install all available updates or completely disable the automatic updates service through "Start" - "Control Panel" - "System and Security" - "Windows Update 7". On the left side of the screen, select the "Settings" item, and in the "Important announcements" menu that appears, select "Do not check for updates" and confirm by clicking "OK".
- You can try to rollback the system to a date when there were no problems with svchost.exe, and you did not pay attention to the processor load.
- Check the system for viruses. To get started, go to the Task Manager (simultaneously pressing Ctrl + Alt + Del and selecting "Task Manager"), go to the "Processes" tab, select "Display processes of all users" below and see which user is in front of each svchost.exe process. Acceptable are system, local service or network service, all others are virus or other malware. They need to be terminated by clicking on this process, clicking on the right mouse button and selecting "End Process Tree". Use a good anti-virus program (try Dr.Web CureIt!, Trojan Remover, etc.), your system may be infected with malware.
- We delete the Prefetch folder used by the system to speed up the work of services and services. We go to the Windows shared directory, find the Prefetch folder there (usually located at C:\WINDOWS\Prefetch) and delete this folder, then restart the computer;
- If the wuauclt.exe process is active in the manager, then delete all existing directories in the Software Distribution folder located in the Windows shared directory.
- We clear the event log file in the Windows log To do this, press the Win + R key combination at the same time, type eventvwr in the menu that appears and confirm by clicking "OK". In the window that appears, double-click on "Windows Logs" (top left), and in the list below, right-click on "Applications" and select "Clear Log". We will do the same with the items "Security", "Installation", "System". We restart the computer.
A visual demonstration of some of the methods of action when svchost.exe loads memory in Windows 7 can be viewed in the video:
Conclusion
The main problems associated with processor overload by the svchost.exe file are errors in the automatic update of Windows 7 or 10, as well as virus programs hiding under an identical name or using svchost.exe for their own purposes. To combat them, it is recommended to scan your computer with the most powerful antiviruses (for example: Dr. Web CureIt), disable automatic system updates, and force close the most resource-intensive svchost.exe. It is the one that loads the processor, which means svchost.exe loads memory. If none of the above helped you, then seek advice in the comments below.
An unstable computer not only negatively affects the general emotional state of the user. Failures in the operation of the operating system (OS), slow loading of applications, freezing of the computer due to increased load on the RAM and processor can cause the accounting worker to fail to complete the reporting task or the architect to fail the design task. Windows 7 is no different from other operating systems in this regard. What to do if computer malfunctions become permanent?
One of the main reasons causing increased consumption of system resources and slowdown of the computer is the svchost.exe process, which is the main one in Windows 7 for services that are loaded directly from dynamic libraries. What this means and how it all happens should be considered in detail.
Svchost.exe loads Windows 7 memory: what is this process and why does it happen
The svchost.exe worker processes in Windows 7 are displayed under the Processes tab in the Task Manager. To open it, use the key combination Ctrl+Alt+Del.
In the task manager, you can see all running copies of the svchost.exe process
Svchost.exe is implemented as a single process that runs various services on a Windows 7 system. And this leads not only to a reduction in the consumption of RAM, but also reduces the cost of processor time. For each of the services, its own copy of svchost.exe is called, launched by this main process, which acts as a system one. In this case, certain parameters are used in each case. For example, to call the ComputerBrowser service, which makes it possible to see computers and other hardware devices compatible with the NetBIOS protocol on the network, the svchost.exe -k netsvcs construct works. In this case, it is the netsvcs parameter that will be visible in the Task Manager on the running services tab opposite ComputerBrowser in the group column. It indicates that the service uses the svchost.exe process to run, reducing resource consumption.
But then a reasonable question arises, why does svchost.exe often slow down the computer?
Here are the main possible reasons:
Solving the problem of increased load
By finding and eliminating the cause of increased resource consumption, you can not only stabilize, but also increase the speed of your personal computer. Do not put off this issue, because inaction will not help in solving the problem, but will only aggravate it.
Checking through the Task Manager
In the Task Manager, on the Processes tab, sort the files alphabetically by clicking on the Image Name column heading. After that, right-click on the context menu of any copy of svchost.exe and select "Go to Services".
Go to view running services
On this tab, all services that use the svchost.exe process belong to the netsvcs group.
All services that call the svchost.exe process belong to the netsvcs group
Using the context menu, stop each such service in sequence and check the result until the load is reduced. Once the process that is causing the load has been identified, it must be disabled. Keep in mind that through the Task Manager you can only stop, and not disable, the service that is causing the increased consumption of resources.
To completely disable the selected process, go through the "Start / / Control Panel" to the "Administrative Tools" tab. Here you will find a list of all services of the Windows 7 system. Select the one you need and disable it on the properties tab by selecting the appropriate item through the context menu. For example, let's show a screenshot of disabling the "Computer Browser" service.
To disable the selected service, it must not only be disabled, but also stopped
Disabling automatic updates
The svchost.exe process can create a load due to failures in the automatic update service or errors contained in the updates themselves.
In this case, it is preferable to disable this service and try to install all packages manually.
Through the tab "System and Security" of the control panel, go to "Windows Update" and change the setting so that it does not check for updates.
Automatic update is disabled through the drop-down list when selecting important parameters Windows updates 7
After manually installing service packs, you can reconnect the service and see if the svchost.exe associated with it has stopped loading memory and processor. If the problem is resolved, then automatic updating can be left running.
Antivirus scanning
First, just look in the Task Manager for which user the copies of svchost.exe are running, creating the load. If the process is running on your personal account, then there is most likely a virus in the system. Open the file location through the context menu and check the suspicious file with any antivirus program.
For such a check, as well as for a full anti-virus scan of both the system partition of the disk and the entire computer, you can use
such programs:
To start an antivirus scan, you just need to click the "Start scan" button
The utility will quickly find and remove malicious code from your personal computer
Avast's home free version of antivirus suite will satisfy any demanding user
Video: an overview of antivirus utilities
System Restore
The procedure for restoring Windows 7 to a point in time when the system worked without failures can correct the situation.
To start the process, select the appropriate item in the utilities menu and follow the instructions. After system restore and computer restart, open the task manager and check if the svchost.exe process has stopped loading the computer.
Starting the Windows 7 Restore Process for an Earlier Period
Prefetch Folder Contents
Files with the .pf extension that contain information about the applications that run on the computer are stored in the Prefetch folder located in the Windows directory on the system drive (usually C:Windows).
The folder can accumulate a large number of unnecessary files, slowing down Windows work 7
The more often a user installs new programs and uninstalls old ones, the more information accumulates in the Prefetch folder. This increases the load on memory and processor. In this case, you just need to clear the Prefetch folder and restart your computer. The first start of Windows 7 after deleting files will be slower than usual. After all, information about the applications installed on the computer will be generated and entered into the files again. On subsequent bootups, the OS will load faster and the load on memory and processor will decrease.
Keep in mind that by default, entries in the Prefetch folder are allowed to be made not only by system applications, but also by any other programs. This can cause Windows 7 to boot slowly. To fix this, you need to open the registry editor by typing regedit in the start menu search bar. Then open the PrefetchParameters folder located in HKEY_LOCAL_MACHINE//SYSTEM//CurrentControlSet//Control//Session Manager//Memory Management and change the value of the EnablePrefetcher parameter from 3 to 2, which will allow only system processes to start automatically.
Changing the value of the parameter that allows automatic loading of only system applications
At the same time, the amount of memory occupied by svchost.exe will be reduced and the load on the processor will decrease.
Video: Clearing the Prefetch Folder
Unverified software
Unverified programs from unknown developers can create an increased load through the called svchost.exe process.
Moreover, a lot of such software often accumulates on a computer. To search for such programs, it is best to use not the usual Task Manager, but the Process Explorer utility, which provides the user with an extended amount of data. In addition, the specified program contacts the VirusTotal anti-virus service in real time and checks whether the running files are malicious. Accordingly, the user can stop a program that consumes resources excessively at any time.
The program displays extended information on all work processes in the Windows 7 system
Checking System volume information
A computer's hard drive almost always has logical partitions, each of which has a hidden System volume information folder, where information about Windows 7 settings and recovery is stored. Often this directory becomes the target for virus attacks. Malicious programs infect the resources in the folder, and then when the svchost.exe process is called through programs associated with infected files, there is a sharp increase in memory and processor load.
You can use Avast antivirus to remove infected files. Moreover, this program is built into the context menu. In this case, there is no need to give additional permissions for the user to access the System volume information folder (by default, only system processes). But besides, the specified directory is also hidden from the user.
First you need to make the System volume information folder visible. To do this, open the "View" tab of the folder option from the top "Tools" menu in the "My Computer" window, uncheck the "Hide protected operating system files" checkbox and check the "Show hidden files, folders and drives" radio button. Then click "Apply" and then "OK".
In order to make system folders visible, you need to change two additional parameters
After that, launch an anti-virus scan of the System volume information folder in each of the existing logical partitions of the hard drive through the context menu using Avast.
Video: if svchost.exe heavily loads the system
It can be concluded that the increased load on RAM and the processor on a computer running Windows 7 can create various software products that are associated with services that are loaded from dynamic libraries and call the svchost.exe process. Mostly they are viruses. But not only. The load can be created by update packages and quite working programs, but conflicting with the Windows 7 system. The proposed material will help to eliminate the problems that arise.
Loading...
