Svchost.exe termsvcs eating up memory ?

Hi,
On a windows 2012 remote desktop session host I see the svchost.exe (termsvcs) using approx 13 GB of 16 GB available memory .... (Free memory on the host is zero now :-( ).
these are the memory figures:
In use: 16176 MB
Standby: 150 MB
Free: 0-40 MB
what is causing termsvcs process to take so much memory ?

Hi,
Are there many RDP sessions on the server?
You can use command Query Session to query RDP sessions.
More information for you:
Query session
http://technet.microsoft.com/en-us/library/cc785434.aspx
An Overview of Troubleshooting Memory Issues
http://blogs.technet.com/b/askperf/archive/2008/01/25/an-overview-of-troubleshooting-memory-issues.aspx
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Similar Messages

SVCHOST.exe take 4.5gb memory in Windows 2008 R2

Hi
i am using Windows server 2008R2 with IIS and i don't know why but svchost.exe started to taking 4.5GB of memory
i really don't know why it's happen and how to solve it.
EL
you can find screenshot attach.

Search for the PID of the process (which is taking 4.5GB mem) and check concerning services related to
that particular PID.
The below link may help you somehow. Try once.
http://windowsitpro.com/windows/resolve-memory-leaks-faster
Regards, Ravikumar P

Svchost.exe problems

I am getting svchost.exe error 0x7c919af2 referenced memory at 0x00000010 memory could not be written on windows xp

Hi,
About the Windows XP question please post to the Client forum.
Windows XP support forum
http://social.technet.microsoft.com/Forums/windows/en-US/home?category=windowsxpitpro&filter=alltypes&sort=lastpostdesc
Thanks for your understanding and support.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Memory leaks- high memory usage svchost.exe

hello!
im having a kind of a similar problem. Im using a Q6600 with 4Gb of RAM running on Windows 7 x64. My physical memory usage history is 1.75GB idle but my CPU usage looks good ~ 0%.
In Windows Task Manager when i arranged the memory column, the process with the highest memory usge is svchost.exe with 116,572K. And i have 14 svchost.exe in my computer! I opened process exporer and check the legitimate of all those svchost.exe
and they are all legit. When i look at the properties of the highest svchost.exe in process explorer, the services which is running under it is as follows
AudioEndPointBuilder c:\Windows\System32\Audiosrv.dll
CscService c:\Windows\System32\cscsvc.dll
hidserv c:\Windows\System32\hidserv.dll
Netman c:\Windows\System32\netman.dll
PcaSvc c:\Windows\System32\pcasvc.dll
SysMain c:\Windows\System32\sysmail.dll
TrkWks c:\Windows\System32\trkwks.dll
UxSms c:\Windows\System32\uxsms.dll
wudfsvc c:\Windows\System32\WUDFSvc.dll
All are legit DLLS.
Is it normal to have 14 svchost.exe running at the same time(system, local service, network service in Task Manager)
and how can i reduce the memory usage of the svchost.exe?

Hi,
There can be multiple instances of Svchost.exe running at the same time. Each Svchost.exe session can contain a grouping of services, so that separate services can
be run depending on how and where Svchost.exe is started.
If you would like to reduce the usage of this service, I could share the following article with you:
Getting Started with SVCHOST.EXE Troubleshooting
PRF: High CPU (SVCHOST.EXE)
Hope it helps.
Alex Zhao
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Windows Server 2008 R2 - When svchost.exe memory-leaks Outlook does not load properly

Hi all,
We have a server which runs Windows Server 2008 R2, fully updated, and acts as a Terminal Server (Citrix XenApp 6.5).
In the past couple months we have had problems with svchost.exe leaking memory, growing to 2-3GB of RAM usage. Sometimes is occurs with weeks between the incidents, sometimes days. To solve the issue we have to reboot the server.
When this occurs, Outlook (fully updated) doesn't start for any users at all. Outlook doesn't continue from the "Loading profile.."-stage. The users who already has Outlook started doesn't have any problems, unless they close Outlook ;) .
The svchost.exe is the one which runs the services:
NSI
WinHttpAutoProxySvc
W32Time
Netprofm
FontCache
EventSystem
We've patched the server with KB2847346 but with no result. Patch KB2950358 is not applicable..
Any ideas?

svchost is hosting multiple services. when the issue occurs you can use sysinternals procmon (or enable the command line column in task manager process tab) to view to determine which service is using that much memory.
MCP/MCSA/MCTS/MCITP
Did you read my whole post, or did you just misunderstand the part were I wrote:
The svchost.exe is the one which runs the services:
NSI
WinHttpAutoProxySvc
W32Time
Netprofm
FontCache
EventSystem"
I know that svchost.exe runs ALOT of services, so when the problem occurred I checked which services the specific svchost.exe runs. Everytime it happens the svchost.exe (which leaks and has 2-3GB mem usage) runs this specific services.

2008 R2 - Memory Leak from svchost.exe - Module "rpcrt4" is the culprit

Hi All
Over the past week or so (after a set of Windows updates and restart) svchost.exe has increasingly used more and more memory. It probably gobbles up an extra 1GB per day and doesn't relent.
After running various diagnostics, the debug diagnostic tool finally provided me this information after a memory leak test:
rpcrt4.dll is responsible for 1.76 GBytes worth of outstanding allocations. The following are the top 2 memory consuming functions:
rpcrt4!AllocWrapper+2b: 1.76 GBytes worth of outstanding allocations.
rpcrt4!Ndr64ClientInitialize+964: 1.36 MBytes worth of outstanding allocations.
Detailed module report(Memory)
Module details for rpcrt4
Module Name rpcrt4
Allocation Count 946941 allocation(s)
Allocation Size 1.76 GBytes
Module Information
Image Name: C:\Windows\System32\rpcrt4.dll Symbol Type: PDB
Base address: 0x00000003`00905a4d Time Stamp: Sat Nov 20 13:13:18 2010
Checksum: 0x00000000`00000000 Comments:
COM DLL: True Company Name: Microsoft Corporation
ISAPIExtension: False File Description: Remote Procedure Call Runtime
ISAPIFilter: False File Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
Managed DLL: False Internal Name: rpcrt4.dll
VB DLL: False Legal Copyright: © Microsoft Corporation. All rights reserved.
Loaded Image Name: rpcrt4.dll Legal Trademarks:
Mapped Image Name: Original filename: rpcrt4.dll
Module name: rpcrt4 Private Build:
Single Threaded: False Product Name: Microsoft® Windows® Operating System
Module Size: 1.18 MBytes Product Version: 6.1.7601.17514
Symbol File Name: c:\symcache\rpcrt4.pdb\7D748DA6D7454C9EA38C8CEF1C9E75F22\rpcrt4.pdb Special Build: &
rpcrt4!AllocWrapper+2b has 944,468 allocations!
I'm running 2008 R2 64bit with anywhere up to 80/100 simultaneous RDP connections at any one time.
Can anyone help or advise as I cannot find any hotfixes for this issue.
Thanks
Ryan

Hi Ryan,
Please narrow it down to the specific service that is having the issue. That way you will know where to focus on.
For the specific svchost.exe that is showing the large memory usage, use task manager/process explorer/etc. to determine which service(s) are running within it. If there are multiple services running within it, I recommend you isolate them and then
restart your server. For example, say you determined that the following services are running in the "problem" svchost.exe: AudioEndpointBuilder, Netman, TrkWks, UmRdpService, Uxsms. You would open an admin command prompt and enter the following
commands:
sc config AudioEndpointBuilder type= own
sc config Netman type= own
sc config TrkWks type= own
sc config UmRdpService type= own
sc config Uxsms type= own
After entering the above commands you would restart your server for the changes to take effect. Over time you would monitor memory usage of the suspect services, and eventually it will become apparent which one is using too much memory.
Thanks.
-TP

Win2k8R2 svchost.exe suddenly starts to use all memory

Dear all
I have a Windows 2008 R2 SP1 + current Patchlevel Remote Desktop Host. Installed are a lot of applications, SCCM 2012 Client, Kasperksky AntiVirus Enterprise Edition.
Yesterday i had the problem that the svchost.exe is using all RAM of the Server (32GB) and has a private working set of 120GB. A quick "fix" was to restart the server. And now after around 24h i have the same problem again.
I did not change something on the server except install the Microsoft CA Hotfix against flame.
The svchost that has this problem controls this services:
svchost.exe
AeLookupSvc, CertPropSvc, gpsvc, IKEEXT, iphlpsvc, LanmanServer, MMCSS, ProfSvc, Schedule, SENS, SessionEnv, ShellHWDetection, Themes, Winmgmt
The server is now running since 2 Years without any problems and now it starts :/
After a restart this svchost.exe is using just 48MB RAM.
Thanks for any tips
JBAB

Hi,
For troubleshooting purposes please reconfigure so that the services for this group run in their own process. To do this you may create a .cmd file using Notepad with the following contents:
sc config AeLookupSvc type= own
sc config Appinfo type= own
sc config AppMgmt type= own
sc config BITS type= own
sc config Browser type= own
sc config CertPropSvc type= own
sc config EapHost type= own
sc config gpsvc type= own
sc config hkmsvc type= own
sc config IKEEXT type= own
sc config iphlpsvc type= own
sc config LanmanServer type= own
sc config MMCSS type= own
sc config MSiSCSI type= own
sc config ProfSvc type= own
sc config RasAuto type= own
sc config RasMan type= own
sc config RemoteAccess type= own
sc config sacsvr type= own
sc config Schedule type= own
sc config SCPolicySvc type= own
sc config seclogon type= own
sc config SENS type= own
sc config SessionEnv type= own
sc config SharedAccess type= own
sc config ShellHWDetection type= own
sc config Themes type= own
sc config wercplsupport type= own
sc config Winmgmt type= own
sc config wuauserv type= own
After saving the file please double-click to apply the changes and then restart your server so that they will take effect.
After restarting your server please open task manager, select the Processes tab, and sort the display by the memory column so that the processes that are using the most memory will appear on top. When one of the services starts to use too much memory
you will be able to right-click on it and choose Go to Service(s) and you will know which service is misbehaving.
Thanks.
-TP

Many itunes install/uninstalls...hangs on shutdown - svchost.exe memory err

On my new desktop, I've been fighting to install itunes. This was frought with problems from the first try, but I'll skip all those sordid details. Escalating from some earlier more simple attempts to uninstall & reinstall iTunes, I just went through what must be the Ultimate exhaustive complete uninstall process, shown at support.apple.com/kb/HT1926 (Completely Remove iTunes and Quicktime). As this section instructs, I then reinstalled iTunes from a fresh download. Between the uninstall and reinstall, my system shut down normally, with no hangs. As always, though, with itunes installed, I get an interruption at shutdown:
svchost.exe Application Error
The instruction at "0x77dd6bcc" referenced memory at "0x77dd6bcc". The memory could not be "written".
Three more clicks of "cancel" on that advisory only serve to shift the code a few digits or letters (i.e. 0x77df5655, etc), and then the system is hung for good on "Saving Your Settings..."
This hang did't happen before my attempts at installing itunes.
On my last two attempts at this, at least the radio function has come back - nothing worked before. But I can't tolerate a hang at shutdown in my life - it'll happen every time from now on & who knows what else will be affected by this.
Any help appreciated.

<bump>
Anyone?

Svchost.exe with "Dhcp, eventlog, lmhosts" services is generating thousands of page faults and I/O reads per second?

On one of our Windows 2008 R2 Enterprise (SP1) servers, we're noticing a strange phenomenon.....that the svchost.exe that hosts "Dhcp, eventlog, lmhosts" is constantly generating page faults....a few thousand per second, accumulating to billions of total
page faults. I/O reads and I/O other are also rising every second. Cpu is consistently 2%, and memory is constant. (~40M).
I'm guessing that it's the eventlog service because our HP openview log reader (opcle.exe) is also working hard to keep up. I've searched for others posting a similar problem but am coming up empty handed.
This is a MS Analysis Services 2008 server, but we haven't noticed any problems coming from SSAS. We have other file sharing-related jobs that interact with this server, that sometimes take 30 min and sometimes 6 hours, for the same workload....and
we're thinking that the 6 hour runs are somehow related to this process's unusual page faults.
Anyone else seen this eventlog strange behavior?
Thanks
-Mark

Hi,
The best thing would be downloading the Process Explorer and analyzing the problem.
Process Explorer
http://technet.microsoft.com/en-us/sysinternals/bb896653
For how to use Process Explorer to troubleshoot the performance issue, please refer to the following Microsoft TechNet blogs:
HIGH CPU – SVCHOST.EXE
http://blogs.technet.com/b/askperf/archive/2009/04/10/prf-high-cpu-svchost-exe.aspx
Getting Started with SVCHOST.EXE Troubleshooting
http://blogs.technet.com/b/askperf/archive/2008/01/11/getting-started-with-svchost-exe-troubleshooting.aspx
If you find the cause is Automatic update, please also refer to the following Microsoft TechNet blog:
Automatic Update causes SVCHOST.exe high CPU
http://blogs.technet.com/b/asiasupp/archive/2007/05/29/automatic-update-causes-svchost-exe-high-cpu.aspx
Regards,
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

SVCHOST.EXE Overflow and WMI Crash

Hello, collegues!
I faced with a problem after deploying SCCM 2012 Agent and SCEP 2012 on clients on Windows 7 SP1.
The WMI Compent crushes and svchost.exe proccess for netsvc services got overflowed and it uses a lot of RAM Memory and grows and grows.
I found out that this error appears when the agent tries to ask WMI and recieves an error ".....WBEM_E_NOT_FOUND....."
Also i found some hotfixes from MS how to solve this problem, here they are:
KB2492536
KB2465990
KB2492536
KB982293
KB974930
Anyway, these help only before installing SCCM 2012 agent, afterwards i need to rebuild WMI Repository for system working correct. By the way there is no log information in Event Viewer, provided by system. I found this error only in log files of SCCM agent
located localy in the System.
Did anyone faced with this issue?
Is there any normal solves provided by MS or maybe is it known?

Since no one has answer this post, I recommend opening a support case with CSS as they can work with you to solve this problem.
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

IPod generates a svchost.exe error and blocks the computer

Ok, I got an iPod Nano 2GB Silver today and when I plug it in the USB port, a svchost.exe error pops up. The only thing I can do is to press OK, but when I do that, another and another and another... same error pops up. I have to reset the computer in order for the computer to start functioning normally.
I will try to translate what the Event Viewer says about the error (and this is what the error pop-up also states):
Opening application: svchost.exe - Program error : Instructions on »0x00000000« reffered to the memory on »0x00000000«. The memory couldn't be written.
The thing is though, it's working fine on some other laptop, but I don't understand why this is happening on my desktop?! And some of the older mp3 players (not iPods) are working just fine.
Please, help me!

I have a similar problem which began a couple weeks ago. Same svchost.exe closure, only I couldn't figure out what was causing the problem. Did the format C: and clean XP install, then gradually reinstalled software. When I got around to installing iTunes again, and about 24 hours goes by, I get the same message again. Both the popup and event viewer tell me that the iPod
Service caused the failure. Windows would only suggest that the problem was caused by Windows Update.
Before the fault bucket was generated, there was an Application Information message that states:
The description for Event ID ( 0 ) in Source ( iPod Service ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.
So now I am unable to keep my iPod updated, charged, used. Is this what I paid a premium price for?

SVCHost.exe

svchost.exe, is consuming 200-600mb of memory on start up and does not stop until i kill the process then does it again x2, then the display settings go from the sleek design to a windows 98 look then svchost.exe stops leaking but
why is svchost.exe leaking in the first place after not doing it for 2-3 years of owning this computer running the same os.
os: Windows 7 64 bit - fully up-to-date
thanks in advance

Hi Huzaifa,
Please make sure the svchost.exe file is located in the folder C:\Windows\System32. In other cases, svchost.exe is a virus, spyware, trojan or worm. Also check the user name of the process, it should be SYSTEM、LOCAL
SERVICE or NETWORK SERVICE.
This process manages system services that run from dynamic link libraries (files with extension .dll). Examples for such system services are: "Automatic Updates", "Windows Firewall", "Plug and Play", "Fax Service",
"Windows Themes".
First you need to know what service/dll sys is running by SVCHOST.exe.
Download Process Explorer from this website
https://technet.microsoft.com/en-us/sysinternals/bb896653.aspx?f=255&MSPPError=-2147217396
Information about pool monitor
https://msdn.microsoft.com/en-us/library/windows/hardware/ff550442%28v=vs.85%29.aspx?f=255&MSPPError=-2147217396
Open Process Explorer and find the problem SVCHOST.exe and check which service is taking resources.
Regards
D. Wu
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Satellite P100-238 freezes after an svchost.exe program error message:

PC: Satellite P100-238 from December 2006.
approx. a minute after startup i get an error message:
Danish:
svchost.exe - programfejl
Instruktionen ved "0x745f278o" refererede hukommelse ved "0x00000000". Hukommelsen kunne ikke "read".
Klik p OK for at afslutte program.
Klik p Annuller for at udfe fejlfinding i programmet.
English translation:
svchost.exe - program error
Instruction on "0x745f278o" refered memory on "0x00000000". Memory could not "read".
Click OK for ending program
Click Cansel to do error search in the program.
After the above error message the PC freezes totally and I can only turn it off by the on/off button.
What has happened with my PC?
What should i do?
How do I get access to my data to make a backup?

Hi
I goggled a little bit in the net for some help and I was surprised that many Windows users have had the same problem
So I thought there must be generally something wrong with the windows operating system.
I have investigated a little bit in the MS knowledge base and found this:
http://support.microsoft.com/kb/916089/en-us
According to the MS info this problem may occur when you have Microsoft Office installed and the Windows Update Agent tries to scan for Windows Installer updates.

System Slow/Freezes on startup - svchost.exe uses 8GB+ RAM

Hi,
At each boot, my computer is low. In task manager i see
svchost.exe -k LocalService will max out around at around 8GB of 16Gb RAM and the process disappear after 4 and 5 minutes and my computer works normally after that.
I have no idea what is going on but I suspect 4 files of 2 Go in C:\Windows\System32\NetworkList\Icons
09/11/2014 22:49 <REP> .
09/11/2014 22:49 <REP> ..
09/11/2014 22:32 2 147 483 647 010103000F0000F0080000000F0000F0FD6351BBB831AB52F2AB90C652199FC03C6429E69137EB3A821E7FAF2FE7DB7F_16.bin
09/11/2014 22:33 2 147 483 647 010103000F0000F0080000000F0000F0FD6351BBB831AB52F2AB90C652199FC03C6429E69137EB3A821E7FAF2FE7DB7F_24.bin
09/11/2014 22:33 2 147 483 647 010103000F0000F0080000000F0000F0FD6351BBB831AB52F2AB90C652199FC03C6429E69137EB3A821E7FAF2FE7DB7F_32.bin
09/11/2014 22:33 2 147 483 647 010103000F0000F0080000000F0000F0FD6351BBB831AB52F2AB90C652199FC03C6429E69137EB3A821E7FAF2FE7DB7F_48.bin
14/07/2009 04:20 <REP> StockIcons
12/01/2014 17:14 1 112 {3493F66E-C426-4B67-BEE1-F640C8611BAA}_16.bin
12/01/2014 17:14 2 456 {3493F66E-C426-4B67-BEE1-F640C8611BAA}_24.bin
12/01/2014 17:14 4 280 {3493F66E-C426-4B67-BEE1-F640C8611BAA}_32.bin
12/01/2014 17:14 9 560 {3493F66E-C426-4B67-BEE1-F640C8611BAA}_48.bin
18/05/2013 14:18 1 112 {78CCFA92-C742-4005-89AE-BB74532BE064}_16.bin
18/05/2013 14:18 2 456 {78CCFA92-C742-4005-89AE-BB74532BE064}_24.bin
18/05/2013 14:18 4 280 {78CCFA92-C742-4005-89AE-BB74532BE064}_32.bin
18/05/2013 14:18 9 560 {78CCFA92-C742-4005-89AE-BB74532BE064}_48.bin
13/06/2013 15:16 1 112 {BC9AD51C-3271-4DA2-A9BF-5F32F57A81D4}_16.bin
13/06/2013 15:16 2 456 {BC9AD51C-3271-4DA2-A9BF-5F32F57A81D4}_24.bin
13/06/2013 15:16 4 280 {BC9AD51C-3271-4DA2-A9BF-5F32F57A81D4}_32.bin
13/06/2013 15:16 9 560 {BC9AD51C-3271-4DA2-A9BF-5F32F57A81D4}_48.bin
16 fichier(s) 8 589 986 812 octets
3 Rép(s) 12 967 731 200 octets libres
As
mentionned here :(https://social.technet.microsoft.com/Forums/windows/en-US/35aa5d51-89d4-4dfa-a4fa-1138ff8b43c8/system-slowfreezes-on-startup-svchostexe-uses-8gb-ram) I
try to delete this files and reboot but, svchost create these file at each boot.
When i'm running windows in safe mode without network the probleme is not present.
Motherboard : Asustek P8P67 LE
CPU : Sandy Bridge i5-2500K @ 3.30GHz
Memory : 4*4096 Mbytes (PC3-10700 Corsair/Kingston)
GPU : NVIDIA GeForce GTX560 Ti 1Go
Thanks for any advices, i'm lost.

Hi,
For this problem, in my opinion, it would be better to make troubleshooting with Windows startup diagnosis tool, you can refer to the contents of the link below for more details:
http://social.technet.microsoft.com/wiki/contents/articles/10128.tools-for-troubleshooting-slow-boots-and-slow-logons-sbsl.aspx
Since you said it work fine in Safe Mode, you can also check is there any program start up with system, then try to disable them for test if Windows works fine.
Roger Lu
TechNet Community Support

SVCHost.exe takes 100% cpu on random occasions

Ok so I have had a rather interesting problem and I don't know for sure if it is related to the sound blaster card in my computer or not.
I have a Sound Blaster Audigy 2ZS. Once in a while, usually later at night an svchost.exe process starts taking up 00% of my cpu. If I kill it and run any programs after killing it that use sound, I get no sound until I restart my PC. Programs that are running while that process takes 00% of my cpu keep their sound even after I kill the process until I close and reopen those programs. These programs consist of things like World of Warcraft, Windows Media Player, VLC Media Player and the like.
I was wondering if anyone has had a similar problem or knows what it might be, and possibly a solution.
Thanks
::edit:: renamed svchost.dll to correct name of svchost.exe. Was confused my bad!Message Edited by jziah86 on 05-4-200702:43 PM

Aware that svchost is not a driver. Aware that it manages the functions of any program that opens and is running on your system. Aware that Creative driver is loaded and problem with an instance of svc.host begins to display and that 00% of system resources are in use. Aware that when that instance of svc.host is ended that the problem is resolved and that the sound card will no longer function. Visitng other forums lead me to the investigate the Creative issue further. It is clear that there is a relationship between the loading of the Audigy sound card driver and the malfunction in the management of memory and system resources at a root level. The claim being made at present is that there is a conflict between the driver and something in a recent XP update from our friends and family at Microsoft. Since this is on one of my home systems, this weekend I will try to rollback to an older driver to see if it makes any difference. I will then try a different sound card to see if the problem persists. If so, I'll simply dump my Audigy card(s) and move onto something else. Hate to do it, but I don't have the time to fix their problem. Any other suggestions - especially from the Creative people who have advised that my card is beyond warranty and I can pay them to try to find a solution. Well, I'll pay for another sound card first! Don't expect them to fix my problems, but to fix their own. Like many buyers I do a lot of research BEFORE I purchase new components. Reviews and user comments mean a lot.

Svchost.exe termsvcs eating up memory ?

Similar Messages

Maybe you are looking for