SVCHOST-svchost.exe -k netsvcs uses 90% + CPU Usage, slows powerful machine to crawl-Whatsup?

Anonymous
2010-02-24T02:18:43+00:00

SVChost.exe - k netsvcs has crippled my machine like no malwaer ever has. From what I can tell, this has something to do with Windows Update.

Nothing else unsual is running. There is no malware involved. And all updaes are installed Except I cannot update .net. I get the following error message:

"Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework 3.5 Family Update for .NET versions 2.0 through 3.5 (KB951847) x86"

What can I do? I am frustrated.

Windows for home | Previous Windows versions | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments
Answer accepted by question author
Anonymous
2010-02-27T17:55:51+00:00

Thanks for the help! I followed Joel's advise above & it SEEMS to have resolved the problem. I say SEEMS, because I have seen the problem apparently resolved, only to resume again after a few days. Updated Malwarebytes showed no infection doing a deep scan.

I will be back if proble returns.... for now, issue resolved!

Was this answer helpful?

400+ people found this answer helpful.
0 comments No comments

45 additional answers

Sort by: Most helpful
  1. Anonymous
    2010-02-27T13:46:39+00:00

    Right - in the referenced case, the instance of svchost that was responsible for the CPU usage was the netsvcs instance - it was the Network Connections service (implemented by netman.dll, hosted by the netsvcs instance).

    Perhaps, try this.   Download and run Process Explorer.  Then, configure symbols in Process Explorer. Then, when the problem happens, sort the CPU column in Process Explorer in descending order and verify the process consuming CPU is the netsvcs instance of svchost.exe; visit its Threads tab in the Process properties, sort by CSwitch Delta (descending) and get the full stack of the topmost thread(s) (double-click the thread line on the Thread's tab to display its stack when it is acting up).

    To configure symbols in Process Explorer, download the Debugging Tools for Windows (DTW) for the version (x86 or x64) of Windows you are using.  Install the DTW, and then start Process Explorer.  In Process Explorer, go to Options->Configure Symbols.  In the DbgHelp.dll path, navigate to the path to which the DTW were installed, and specify the dbghelp.dll in that folder (don't accept the default of %systemroot%\system32\dbghelp.dll, e.g. c:\windows\system32\dbghelp.dll, as that version of the DLL does not have the desired capabilities).  Then, in the Symbols path box, paste the following, and click OK.  Then proceed with getting the stack.

      Symbols Path:

    symsrv*symsrv.dll*C:\Symbols*http://msdl.microsoft.com/download/symbols

    (If you don't want to get the whole WDK just to get the DTW, you can choose to download and  install a previous version of the DTW.)

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2010-02-27T02:41:31+00:00

    Click here to download HJTsetup.exe:

    Highjackthis download

    Click on "Download Now"

    Save HJTsetup.exe to your desktop.

    Double click on the HJTsetup.exe icon on your desktop.

    By default it will install to C:\Program Files\Hijack This.

    Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.

    Put a check by Create a desktop icon then click Next again.

    Continue to follow the rest of the prompts from there.

    At the final dialogue box click Finish and it will launch Hijack This.

    Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.

    Click Save to save the log file and then the log will open in notepad.

    Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.

    Come back here to this thread and Paste the log in your next reply.

    DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.

    DO NOT install or uninstall anything or otherwise make changes to your computer until we are finished with this process.


    Sometimes deciding which battle to fight is the toughest battle of all….. Please visit my website @ http://repairbotsonline.weebly.com/

    Was this answer helpful?

    0 comments No comments
  3. Anonymous
    2010-02-27T02:30:13+00:00

    If I knew how to on this forum, I could send a "Hijack this" log.

    Was this answer helpful?

    0 comments No comments
  4. Anonymous
    2010-02-27T02:28:55+00:00

    My system restore points were all lost when I had to repair a Virtual Disk malfunction a while ago. So, no, that is not an option.

    AnVir points out that there are several svchost.exe lines working. The one that is causing all the high CPU usage is:

    SVChost.exe - k netsvcs

    Any idea why this one is causing high CPU usage?

    Was this answer helpful?

    0 comments No comments