svchost.exe

Hallo, this is the problem I have: at every Windows start, when I try to launch eMule it doesn't appear, but emule.exe starts and I can see it in Task Manager. Such situation may last even 2-3 hours.

I notice a svchost.exe [PID 1896, but it can be 1900 or other] blocked on 23-25% of CPU usage: if I terminate this process, eMule appears in a few seconds, but audio doesn't work anymore (I can hear only Windows sounds, not audio files like mp3s and waves; I can watch Avi files but not hear any sound).

I prompted TASKLIST /SVC and these are the Services running under PID 1896:

AudioSrv, BITS, Browser, CryptSvc, Dhcp, dmserver, ERSvc, EventSystem, FastUserSwitchingCompatibility, helpsvc, HidServ, LanmanServer, lanmanworkstation, Netman, Nla, RasAuto, RasMan, Schedule, seclogon, SENS, SharedAccess, ShellHWDetection, srservice, TapiSrv, Themes, TrkWks, W32Time, winmgmt, wscsvc, wuauserv, wzcsvc

Is there a way to kill these services one by one, so I can identify the problem without killing the entire Svchost?

Greetings from Italy ;-)

On Monday, March 05, 2007 3:07 PM Dma wrote:

Hi, does anyone have a fix or troubleshooting option for the svchost.exe
application? It sometimes goes crazy on some systems and takes up the CPU's
resources, both network and system can keep the processor maxed. This
application appears to have something to do with IE.
--
Thanks,
D-man


On Monday, March 05, 2007 3:21 PM Ron Martell wrote:

D-man wrote:


SVCHOST is a Windows system component that acts as the "host" for
running a large number of services. It is normal to have 5 or 6
instances of it running.

It is possible that some malware item has infested your computer and
is running as a service under SVCHOST. In order to diagnose this
further you need to do some investigation:

1. If you are running XP Home edition then you need to download the
TASKLIST utility from
http://www.xmission.com/~comphope/download/winxp.htm
and install it. TASKLIST is included with XP Pro.

2. Bring up the Windows Task Manager (Ctrl+Shift+Esc) and go to the
processes tab. Identify the PID number of the SVCHOST instance that
has the high CPU usage and make note of it. If you click twice on the
CPU column header the list will sorted based on CPU usage with the
highest usage at the top.

3. Open a Command Prompt window and enter the following command:

TASKLIST /SVC

Locate the problem instance of SVCHOST by its PID number and make note
of the names of the individual services that are running under that
specific instance of SVCHOST. Post those names back here.

Good luck

Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2006)
On-Line Help Computer Service
http://onlinehelp.bc.ca
Syberfix Remote Computer Repair

"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."


On Monday, March 05, 2007 3:38 PM Dma wrote:

Hi, Ron, I assume that the steps are different for XP Professional?
--
Thanks,
D-man


"Ron Martell" wrote:


On Monday, March 05, 2007 3:43 PM Dma wrote:

Nevermind, ha ha, I read your email again. Good things. Thanks, Ron.
--
Thanks,
D-man


"Ron Martell" wrote:


On Monday, March 05, 2007 3:49 PM Dma wrote:

svchost.exe [PID]1900: httpfilter
--
Thanks,
D-man


"Ron Martell" wrote:


On Monday, March 05, 2007 4:19 PM Jack \(MVP-Networking\). wrote:

Hi
Microsoft provides am excellent Free utility that shows extensive info.
about all the processes that run in memory (including svchost).
See this page for a link and explanations, http://www.ezlan.net/svchost.html
Screen Shot, http://www.ezlan.net/example/ProcessExplor.jpg
Jack (MVP-Networking).

"D-man" wrote in message
...


On Monday, March 05, 2007 4:54 PM Ron Martell wrote:

D-man wrote:

HTTPFILTER is a legitimate Windows component. However there are known
viruses/trojans/spyware items which infect or replace this file,
causing problems such as you are experiencing.

Go to one of the following free online scanning sites and check your
system for possible infestations:
Bit Defender http://www.bitdefender.com/scan8/ie.html
Trend Micro http://housecall.trendmicro.com
Kaspersky Online Scanner http://www.kaspersky.com/virusscanner
Panda ActiveScan http://www.pandasoftware.com/activescan
WindowSecurity.com TrojanScan http://windowssecurity.com/trojanscan
Webroot http://www.webroot.com/

Good luck

Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2006)
On-Line Help Computer Service
http://onlinehelp.bc.ca
Syberfix Remote Computer Repair

"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."


On Monday, March 05, 2007 6:13 PM Dma wrote:

Very cool! thanks much.
--
Thanks,
D-man


"Jack (MVP-Networking)." wrote:


On Monday, March 05, 2007 6:34 PM Dma wrote:

Jack, I noticed that you have a screen shot of what appears to be a program
you loaded that shows you what each application does. I was not able to find
how to load this tools on the site provided. Do you happen to have the link?
--
Thanks,
D-man


"Jack (MVP-Networking)." wrote:


On Monday, March 05, 2007 7:33 PM Jack \(MVP-Networking\). wrote:

Hi
Take a look at your hard drive if you clicked on the link that is on my page
you probably already downloaded it.
Look for a file, ProcessExplorer.zip unzip it and run the exe file.
Otherwise, here you go,
http://www.microsoft.com/technet/sys...sExplorer.mspx
Jack (MVP-Networking).

"D-man" wrote in message
...