Malware causes spike in svchost.exe program

By H4rbinger
Jul 10, 2013
Post New Reply
  1. My pc is running on windows 7 and is having an issue where the svchost.exe escalates it's memory usage and maxes out my cpu until it causes the computer to crash. I do not know what to do.
  2. H4rbinger

    H4rbinger TS Rookie Topic Starter

    Currently running malware bytes scan in order to generate a log.
  3. jobeard

    jobeard TS Ambassador Posts: 9,322   +620

    Here's a list of services (at least on my win/7) that are threads within svchosts:
    {the PID is the program itself and everything shown after it is a thread therein}

    So; first question would be in services.msc, which services are actually started and do you know why?

    Second, you need something like Process Explorer from to find the threads
    Image Name					 PID Services									
    ========================= ======== ============================================
    svchost.exe					808 DcomLaunch, PlugPlay, Power				 
    svchost.exe					896 RpcEptMapper, RpcSs						 
    svchost.exe					976 AudioSrv, Dhcp, eventlog,				   
    								   HomeGroupProvider, lmhosts				  
    svchost.exe					428 AudioEndpointBuilder, hidserv, IPBusEnum,   
    								   Netman, PcaSvc, SysMain, TrkWks,			
    								   UmRdpService, UxSms, Wlansvc, wudfsvc	   
    svchost.exe					588 AeLookupSvc, Appinfo, AppMgmt, BITS,		
    								   Browser, CertPropSvc, EapHost, gpsvc,	   
    								   IKEEXT, iphlpsvc, LanmanServer, MMCSS,	  
    								   ProfSvc, RasAuto, RasMan, Schedule,		 
    								   seclogon, SENS, SessionEnv,				 
    								   ShellHWDetection, Themes, Winmgmt, wuauserv 
    svchost.exe				   1160 EventSystem, fdPHost, netprofm, nsi,		
    								   SstpSvc, THREADORDER, W32Time,			  
    svchost.exe				   1240 CryptSvc, Dnscache, LanmanWorkstation,	  
    								   NlaSvc, TapiSrv, TermService, Wecsvc		
    svchost.exe				   1376 BFE, DPS, MpsSvc, WwanSvc 
    svchost.exe				   1752 FDResPub, SensrSvc, SSDPSRV, upnphost,	  
    svchost.exe				   2052 LPDSVC								 
    svchost.exe				   2348 stisvc									  
    svchost.exe				   2656 p2pimsvc, p2psvc, PNRPsvc				   
    svchost.exe				   3320 PolicyAgent								 
    svchost.exe				   3380 WinDefend 
    svchost.exe				   1168 SDRSVC

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...