How do I fix this high CPU usage svchost virus or whatever it is?

Read the article that everyone's commenting on.
Subscribe to the RSS Feed for comments on this article.

Well KB927891 is installed and automatic updates are turned off.

But the problem persists!

Why can't MS get things together ? They may have to pay for divorce proceedings. My wife is really getting pee'ed off.

I dwnloaded this fix and i would like folks to post what the CPU is running at after the fic is installed mine is still running at 75% to 85% that is of coarse with task manager running might be a littlelower without it running. Anyway I think this CPU usage is still high for and after shutting down quite a few services that i read carefully about doing firstbefore shutting them offin msconfig. I also do a clean boot,and have no non-microsoft programs load,upon start up and still 75% - 85% CPU usage. If after any of you have installed this update (hot fix KB927891) what are your CPU usages running at?? Mine is lower but wonder what decrease in CPU usage others are getting after the update. Thnx appreciate any input........

In light of information from this article I found that part of the problem can be associated to regsvr32.exe if it is not the most current version. I recently tracked the issue back to a non-Microsoft software deployment we had previously ago that would replace C:\WINDOWS\system32\regsvr32.exe only on XP SP2 PCs from version 5.1.2600.2180 to version 4.0.0. The deployment team said this would not be an issue to accept these files as all attempts to use a CD and restore the files would fail.

The first problem caused by the incorrect version of regsvr32.exe caused the installation of Windows Media Player 11 (WMP11) upon installation to max out CPU usage while attempting to install for three to four hours and although would complete it would not function fully (example: visualizations and codec’s would not function). Later the updates that would call for the regsvr32.exe to be used would similarly crap out due to the older file not knowing how to process commands correctly. It seems this might be the source for why the updates would keep attempting to re-install because the install wasn't complete and would attempt again starting the loop.

To correct the issue we replaced the regsvr32.exe in C:\WINDOWS\system32 via a copy in C:\WINDOWS\ServicePackFiles\i386\ and then rebooting the PCs and have the updates install.

You might need to go back and re-install any programs that you had installed if you encountered the similar errors because they might not be installed correctly.

I used RegCure and it appears to have fixed the problem. It takes them ages to send you the licence number once you hvae paid your $35 but it works a treat.

I tried to fix a PC that actually froze immediately after booting into windows XP. Virus and spyware checkers did not identify any problems. After working through the diagnostic mode in MSCONFIG I eventually identified the problem to be The Windows Management Instrumentation service - another incarnation of SVCHOST.EXE. Turning off the service resulted in a normal boot and a working operating windows system. Closer comparison of the executable located in the windows\system32 folder with two (2) other PCs running the same OS (including updates) revealed that the SVCHOST.EXE on the problem PC was dated 4/08/2004 whereas the other PCs showed it dated as 3/08/2004. I deleted the problem PCs file, replaced it with the 3/08/2004 version and have not had a problem since. This post is being writen on the problem PC. Virus or otherwise infected file? Who knows, its worth a play - it worked for this PC.

I just had this problem on a Dell Optiplex SX270 and had scheduled a motherboard replacement on it before I read your article and followed you advice. Your suggestion worked perfectly and it was the Windows automatic updates service that was causing my CPU useage to go to 99%. After disabling the service the computer bacame stable and responsive.

What was interesting was that the Dell guy showed up and did the motherboard replacement. I told him what I had done to alleviate the problem, but he wanted to do the replacement anyway. Amazingly, that actually fixed the problem! Windows automatic updater could be turned back on and the computer was fine. In other words, it was actually a hardware problem that I had circumvented by turning off that automatic uptates service.

Hi
I have a worm insvchost.exe ,is called worm.win32.Small.r.although Kaspersky 7 finds it but cannot disinfect it.what have I to do to get rid of this worm in system32 folder.I used nod32 but also the same problem.I have no way but re-installing windows because the system is so sluggish. I think there is some problems with ICAgent30.exe that our institute install on PCs because while I end task it the system works better,I think.I have no automatic update in computer management section!!!waht do you suggest me?
Thanks

Hi there,

This is a persistant issue. I have done all that was suggested but still have an issue. I disabled the Auto Update service as described and all was well. However, on next boot I had the problem again. With a little investigation I have discovered its related to the Firewall settings. If I switch off the firewall, the problem disappears. The service is Shared Access / Windows Firewall Internet Connection Sharing (ICS) and the Dll is INATHLP.dll. My REGSVR.exe is the later version.

I do not want to leave the firewall off so I have put the priority for this instance down to the lowest value and am suffering it.

If you can help that would be great - otherwise, I am contemplating a re-install of XP.

Kind Regards,

Bill Harte

Wife's laptop running at 100% CPU. Tried everything I knew to do. Downloaded Process Explorer and it told me that "Spyware Terminator" was the culprit. Have no idea if it hung up or what. Didn't show as a running application but, killed the process and immediate fix. I run the same Spyware on my PC and have never had a problem. Have to admit, I don't even know if this fits your Svchost category

I found another solution for you. My SVCHOST.EXE was maxing out my CPU only on DNS request, in tracking it, it was the DNSRSLVR.DLL that was the problem. In order to fix, I had to go into services, right click on the DNS Client, select properties, then Click on the Log On tab. From there changing it to the local admin or domain admin accounts works fine.

To post a comment on "How do I fix this high CPU usage svchost virus or whatever it is?", please return to that article's main page.