589 views
Jun 22

A fellow blogger Dave dropped me a note on this and it does make interesting reading? I must admit that I’ve always enabled the CPU Time in Task Manager as a habit and it can sometimes make it a little easier to find which component has been consuming the most CPU since the last reboot……

UPDATE:
From the sudden spike in traffic to my Blog it’s clear that this issue is vexing a lot of people out there - unfortunately I’m not one of them, so please bear this in mind when you review the following two "potential fixes" - however, if you check the detailed replies to both of these I think you’ll agree that there is a very good chance of getting things fixed?

Below these fixes you will find more detail, and at the bottom you will find some more detail on identifying the issue in Vista
Good Luck

So please try:
How to Fix svchost.exe using 100% CPU / Memory Leak - TechNibble.com
Fixed! Windows XP SVCHOST.EXE 100% CPU High Utilization - Some Life

Svchost.exe gets worse before it’s fixed

Scott Dunn
By Scott Dunn
Problems with an important Windows component, svchost.exe, can consume up to 100% of CPU time.
Now, a beta release of Windows Live Messenger threatens to spread the problem to even more users, unless their systems are patched soon.

The svchost.exe saga has persisted for months

Readers of the paid version of Windows Secrets are familiar with this story by now. Editorial director Brian Livingston first reported the issue nearly a year ago, on July 27, 2006. Contributing editor Susan Bradley has documented Microsoft’s attempts to solve it in the Jan. 18, Apr. 19, May 10, and May 24 issues this year. The problem has risen to a such a degree that we feel all Windows users should be aware of it.
Microsoft has long known of issues with svchost.exe — the process that runs services of DLLs (dynamic link libraries). There are many symptoms associated with the problem. Among the most common is a drastic slowdown of computer performance as svchost.exe consumes memory and CPU cycles.
The cause of the issue turned out to be the service that provides Automatic Updates. In response, many users began disabling Microsoft Update, an enhanced version of the more-limited Windows Update.
Recently, users who installed the beta 8.5 version of Microsoft’s Windows Live Messenger found that Microsoft Update is automatically turned on, with no choice for opting out. If you don’t read the initial installer dialog carefully, you might not even notice what has happened. The practice potentially exposes an even wider number of users to the svchost.exe bug. (For more information, see a posting by a blogger named Pharod.)
Windows Live Beta
Figure 1. The Windows Live Beta installer turns on auto-updates and switches to Microsoft Update from Windows Update.

Diagnosing the problem on your own system

How do you know if you have this problem? If your system is experiencing a dramatic slowdown, try launching Windows Task Manager to see. To do this, right-click the Task Bar, the area to the right of the Start button, (or press Ctrl+Shift+Esc) and choose Task Manager. Make sure the Processes tab is active, and click Image Name to sort the list. You’ll see one or more instances of svchost.exe. If the CPU column shows 100%, or the memory usage seems extraordinarily high, you may be experiencing this bug.
Microsoft has detailed other symptoms in Knowledge Base article 927891. These include an access violation error in svchost.exe and unresponsive systems during update scans by Windows Update or Microsoft Update.
Some users respond by selecting the memory-hogging svchost.exe in Task Manager’s Processes tab and clicking End Process. Unfortunately, doing so can kill other services your system needs, such as audio. And, it won’t prevent the problem from returning later.
The bug affects users of XP (all versions, including XP Media Center), Windows Server 2003, and Windows 2000.

What to do if you’re affected

To solve this problem, Microsoft is offering a two-part fix. The first part has been offered to those who use Automatic Updates since May 22, according to a source at Microsoft who asked not to be named. Microsoft has been rolling out the second patch to users gradually, beginning in early May, and expects to complete delivery by the end of June, according to my source. Those who don’t use Automatic Updates — or who haven’t received both fixes and want them sooner — can follow the steps below:
Step 1. Patch msi.dll. Users need to replace the msi.dll file (the Microsoft Installer DLL) that svchost.exe controls. To do this, download and install the patch from Knowledge Base article 927891.
Step 2. Update Windows Update. Users also need to get the latest Windows Update client, which is version 3.0. Links to the 32- and 64-bit versions can be found at the Windows Server Update Services (WSUS) Product Team blog.
Although previous Microsoft fixes to svchost.exe — nearly a half-dozen in the last 10 months — addressed specific issues for some users (such as patching memory leaks or eliminating svchost.exe crashes, according to my source), none have solved all the problems once and for all. Even the patches Microsoft currently offers will not stop svchost.exe from registering 100% CPU usage in Task Manager’s Processes tab at times. But, the company claims, your system should still be responsive and svchost.exe will share CPU cycles with other processes after both patches have been installed.
Unfortunately, Microsoft did not wait for these patches to be delivered to everyone before issuing a Windows Live Messenger beta that switches users from Windows Update to Microsoft Update. This introduced the problem to some users who had not experienced it before.
Microsoft is confident that it has developed an effective solution to this problem. Hopefully, this time the company’s right.

Scott Dunn is associate editor of the Windows Secrets Newsletter. He is also a contributing editor of PC World Magazine, where he has written a monthly column since 1992, and co-author of 101 Windows Tips & Tricks (Peachpit) with Jesse Berst and Charles Bermant.

Vista Update:
I’m afraid I’m not running Vista at the moment (as I have work to do..  ;-) so I won’t be that much help, sorry, but rather than grab a copy of Process Explorer to dig deeper, try the following to find out more detail in Vista?
You might also find these posts useful?
Microsoft 100% CPU usage and svchost.exe
Windows Updates Updater Updated

Andy Sweet [MSFT]

External

Since: Mar 20, 2007
Posts: 4

(Msg. 3) Posted: Wed Mar 21, 2007 4:29 pm
Post subject: Re: svchost.exe keeps use 100% CPU [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)


In Vista, you can now view which processes are running under instances of
svchost.exe by using Task Manager. It doesn’t show as much detail as the
tools Kerry mentions below, but it’s also built-in to Vista.
To view which services are currently running under svchost.exe
1. Open Task Manager by right-clicking the taskbar and then clicking Task
Manager.
2. Click the Processes tab.
3. Click Show processes from all users. If you are prompted for an
administrator password or confirmation, type the password or provide
confirmation.
4. Right-click an instance of svchost.exe, and then click Go to Service(s).
The services associated with the process are highlighted on the Services
tab.
More info at Windows Help and How-to online at
http://windowshelp.microsoft.com/Windows/en-US/Help/057580a1-7002-4f43…40-a74f

Andy Sweet
Windows User Assistance team
Microsoft Corporation

written by dcaddick