Memory leaks- high memory usage svchost.exe

hello!
im having a kind of a similar problem. Im using a Q6600 with 4Gb of RAM running on Windows 7 x64. My physical memory usage history is 1.75GB idle but my CPU usage looks good ~ 0%.
In Windows Task Manager when i arranged the memory column, the process with the highest memory usge is svchost.exe with 116,572K. And i have 14 svchost.exe in my computer! I opened process exporer and check the legitimate of all those svchost.exe
and they are all legit. When i look at the properties of the highest svchost.exe in process explorer, the services which is running under it is as follows
AudioEndPointBuilder c:\Windows\System32\Audiosrv.dll
CscService c:\Windows\System32\cscsvc.dll
hidserv c:\Windows\System32\hidserv.dll
Netman c:\Windows\System32\netman.dll
PcaSvc c:\Windows\System32\pcasvc.dll
SysMain c:\Windows\System32\sysmail.dll
TrkWks c:\Windows\System32\trkwks.dll
UxSms c:\Windows\System32\uxsms.dll
wudfsvc c:\Windows\System32\WUDFSvc.dll
All are legit DLLS.
Is it normal to have 14 svchost.exe running at the same time(system, local service, network service in Task Manager)
and how can i reduce the memory usage of the svchost.exe?

Hi,
There can be multiple instances of Svchost.exe running at the same time. Each Svchost.exe session can contain a grouping of services, so that separate services can
be run depending on how and where Svchost.exe is started.
If you would like to reduce the usage of this service, I could share the following article with you:
Getting Started with SVCHOST.EXE Troubleshooting
PRF: High CPU (SVCHOST.EXE)
Hope it helps.
Alex Zhao
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Similar Messages

  • Memory leak when creating new thread.

    Hi,
    Each time i create a thread, it causes 8 bytes memory leak. The testing code is as below and you can see mem usage increasing in Windows Task Manager. But if i don't call ::OCIEnvCreate(), no memory leak.
    Memory validator shows the following call stack information:
    ........largest allocation 8 bytes at .......
    =>OraOCIEI10.dll ss_mem_thread_attach
    =>OraOCIEI10.dll sscoresetserverflag
    =>OraOCIEI10.dll slzgetevar
    =>ntdll.dll LdrInitializeThunk
    Anyone knows what is goiing on?
    /Yue
    #include <stdio.h>
    #include <windows.h>
    #include <process.h>
    #include <oci.h>
    static OCIEnv *env;
    static unsigned int counter = 0;
    unsigned __stdcall ThreadFunc(void* pArg)
    counter++;
    printf( "In %uth thread...\n", counter );
    Sleep(100);
    _endthreadex( 0 );
    return 0;
    int main( int argc, const char* argv[] )
         sword rc = ::OCIEnvCreate(&env, OCI_DEFAULT, NULL, NULL, NULL, NULL, 0, NULL );
         for(;;)
              HANDLE hThread;
              unsigned threadID;
              // Create the second thread.
              hThread = (HANDLE)_beginthreadex( NULL, 0, &ThreadFunc, NULL, 0, &threadID );
              WaitForSingleObject( hThread, INFINITE );
              // Destroy the thread object.
              CloseHandle( hThread );
         return 0;
    }

    Hi,
    I'm not suprised.
    OCI offers the feature OCIThreadKey that allow you to store a pointer within a thread context (without using OCIThread, just using natives threads).
    So OCI needs to catch thread creation to be able to register storage for its OCIThread key value and be able, once the thread is finished to call a callback with the pointer value associated with the thread....

  • Getting memory leak in OCCI

    these are the chunks from the file I made through valgrind a memory check software.
    these are the kind of leak or error you could say; that were reported by the software or a library to check memory leaks if u want i could send you the whole file please help
    ==22982== Memcheck, a memory error detector for x86-linux.
    ==22982== Copyright (C) 2002-2004, and GNU GPL'd, by Julian Seward et al.
    ==22982== Using valgrind-2.2.0, a program supervision framework for x86-linux.
    ==22982== Copyright (C) 2000-2004, and GNU GPL'd, by Julian Seward et al.
    ==22982== For more details, rerun with: -v
    ==22982==
    ==22982== Syscall param times(buf) contains unaddressable byte(s)
    ==22982== at 0x1E4522: times (in /lib/tls/libc-2.3.4.so)
    ==22982== by 0x1BF22146: kghinp (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== by 0x1BB6FBA6: kpuinit0 (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== by 0x1BB6EED9: kpuenvcr (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== Address 0x0 is not stack'd, malloc'd or (recently) free'd
    ==22982==
    ==22982== Invalid read of size 16
    ==22982== at 0x1C8E9B18: (within /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libnnz10.so)
    ==22982== Address 0x1CA35F60 is 112 bytes inside a block of size 127 alloc'd
    ==22982== at 0x1B904984: malloc (vg_replace_malloc.c:131)
    ==22982== by 0x1BE1E6B5: nlpainzert (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== by 0x1BE1D3B7: nlpaparse (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== by 0x1BE1E513: nlpardfile (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982==
    ==22982== Use of uninitialised value of size 16
    ==22982== at 0x1C8E988E: (within /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libnnz10.so)
    ==22982== by 0x1BDC2593: ztchn (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== by 0x1BDC24C1: ztch (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== by 0x1BDC57D5: ztcrsgstk (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982==
    ==22982== Use of uninitialised value of size 4
    ==22982== at 0x1BD79DA0: ztced_einit (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== by 0x1BD79EC5: ztcedgks (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== by 0x1BD79497: ztcedi (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== by 0x1BD785F7: ztcebi (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982==
    ==22982== Conditional jump or move depends on uninitialised value(s)
    ==22982== at 0x1C83BE39: CMP_OctetStringToCMPInt (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libnnz10.so)
    ==22982== by 0x1C82E155: Alg_ComputeModQ_GHash (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libnnz10.so)
    ==22982== by 0x1C837582: A_X931RandomGenerateBytes (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libnnz10.so)
    ==22982== by 0x1BDC4DF9: ztcr2rnd (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982==
    ==22982== Conditional jump or move depends on uninitialised value(s)
    ==22982== at 0x1BEE0BDF: kzsrepw (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== by 0x1BBB38B5: kpu8lgn (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== by 0x1BBADA00: kpuauthxa (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== by 0x1BBAD53E: kpuauth (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982==
    ==22982== Use of uninitialised value of size 4
    ==22982== at 0x1BD7A382: ztceai (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== by 0x1BD785F7: ztcebi (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== by 0x1BD77EC5: ztcei (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== by 0x1BDC65B1: ztvo5pe (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== by 0x1BD77F64: ztcen (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982==
    ==22982== Conditional jump or move depends on uninitialised value(s)
    ==22982== at 0x1BD79022: ztceb_unpadding (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== by 0x1BD788D4: ztcebf (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== by 0x1BD78010: ztcef (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982== by 0x1BD77D07: ztcedec (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
    ==22982==
    ==22982== Mismatched free() / delete / delete []
    ==22982== at 0x1B905043: operator delete(void*) (vg_replace_malloc.c:156)
    ==22982== by 0x1B95C23C: oracle::occi::ConnectionImpl::~ConnectionImpl() (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libocci.so.10.1)
    ==22982== by 0x1B95A094: oracle::occi::EnvironmentImpl::terminateConnection(oracle::occi::Connection*) (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libocci.so.10.1)
    ==22982== by 0x8050DE4: DBConnection::CloseEnv(DBError*) (in /home/jaka/IRIS/EXE/test.exe)
    ==22982== Address 0x1CA59618 is 0 bytes inside a block of size 5 alloc'd
    ==22982== at 0x1B904D39: operator new[](unsigned) (vg_replace_malloc.c:139)
    ==22982== by 0x1B95A86E: oracle::occi::ConnectionImpl::setUserName(void*, unsigned, bool) (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libocci.so.10.1)
    ==22982== by 0x1B95B14D: oracle::occi::ConnectionImpl::openConnection(OCIEnv*, OCIError*, void*, unsigned, void*, unsigned, void*, unsigned, void*, unsigned, unsigned) (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libocci.so.10.1)
    ==22982== by 0x1B95EFB5: oracle::occi::ConnectionImpl::ConnectionImpl(oracle::occi::EnvironmentImpl*, std::string const&, std::string const&, std::string const&) (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libocci.so.10.1)
    ==22982==
    ==22982== ERROR SUMMARY: 1524 errors from 165 contexts (suppressed: 27 from 2)
    ==22982== malloc/free: in use at exit: 960761 bytes in 309 blocks.
    ==22982== malloc/free: 2699 allocs, 2390 frees, 1313176 bytes allocated.
    ==22982== For counts of detected errors, rerun with: -v
    ==22982== searching for pointers to 309 not-freed blocks.
    ==22982== checked 20880568 bytes.
    ==22982==
    ==22982== LEAK SUMMARY:
    ==22982== definitely lost: 0 bytes in 0 blocks.
    ==22982== possibly lost: 0 bytes in 0 blocks.
    ==22982== still reachable: 960561 bytes in 308 blocks.
    ==22982== suppressed: 200 bytes in 1 blocks.
    ==22982== Reachable blocks (those to which a pointer was found) are not shown.
    ==22982== To see them, rerun with: --show-reachable=yes
    now if any body can help me removing this memory leak or is this the problem of OCCI
    apparently it seems to be OCCI's library issue but i could be wrong please help
    hoping to see a response
    Message was edited by:
    kjaka

    =============================================
    #include <iostream>
    #include <string>
    #include <vector>
    #include <occi.h>
    using namespace std;
    using namespace oracle::occi;
    int main()
         Environment* env;
    env = Environment::createEnvironment(Environment::OBJECT);
         cout << "Enviorment created " << endl;
         Connection* conn;
         Statement *stmt;
         ResultSet *rs;
         vector<MetaData> vMD;
         vector<MetaData> vArgMD;
         int dataType;
         char tmpChar[1024];
         Statement::Status status;
         try
              conn = env->createConnection("iris","tpstps", "iris10gr1");
              cout << "connection created " << endl;
              stmt = conn->createStatement();
              string sStmt = "begin :1 := PKGNETWORK.spGetNetworkInfoByIP(:2, :3); end;";
              // 1st sp     
              stmt->setSQL(sStmt);
              stmt->registerOutParam(1, OCCIINT);
              stmt->setString(2,"192.168.6.12");
              stmt->setMaxParamSize(2,20);
              stmt->registerOutParam(3,OCCICURSOR);
              status = stmt->execute();
              int retVal = stmt->getInt(1);
              rs = stmt->getCursor(3);//use ResultSet to fetch rows
              vMD = rs->getColumnListMetaData();
              dataType = vMD[0].getInt(MetaData::ATTR_DATA_TYPE);
              cout << "Attribute count : " << vMD[0].getAttributeCount() << endl;
    dataType=vMD[0].getInt(MetaData::ATTR_DATA_TYPE);
    cout << "Attribute type : " << dataType << endl;
              cout << "Attribute name : " << vMD[0].getString(MetaData::ATTR_NAME)<< endl;
    cout << "Size : " << vMD.size() << endl;
    while (rs->next())
    cout << "next row";
    cout << "NetID : " << rs->getString(1).c_str() << endl;
              cout << " vector filled for SP1" << endl;
              cin >> tmpChar;
              vMD.clear();
              stmt->closeResultSet(rs);
              conn->terminateStatement(stmt);
              cout << "1st sp executed" << endl;
         // 2nd sp     
              string sStmt1 = "begin :1 := PKGJUNK.SpGetTblAccount(:2); end;";
              stmt = conn->createStatement();
              stmt->setSQL(sStmt1);
              stmt->registerOutParam(1, OCCIINT);
              stmt->registerOutParam(2,OCCICURSOR);
              status = stmt->execute();
              retVal = stmt->getInt(1);
              rs = stmt->getCursor(2);//use ResultSet to fetch rows
              int loop = 1;
              vMD = rs->getColumnListMetaData();
              dataType = vMD[0].getInt(MetaData::ATTR_DATA_TYPE);
              cout << "Attribute count : " << vMD[0].getAttributeCount() << endl;
    dataType=vMD[0].getInt(MetaData::ATTR_DATA_TYPE);
    cout << "Attribute type : " << dataType << endl;
              cout << "Attribute name : " << vMD[0].getString(MetaData::ATTR_NAME)<< endl;
    cout << "Size : " << vMD.size() << endl;
    while (rs->next())
    cout << "next row";
    cout << "NetID : " << rs->getString(1).c_str() << endl;
              stmt->closeResultSet(rs);
              cout << "2nd sp executed" << endl;
              conn->terminateStatement(stmt);
              // sp-3     
              string sStmt2 = "begin :1 := PKGONELINK.spValidateAccount(:2,:3,:4,:5,:6); end;";
              stmt = conn->createStatement();
              stmt->setSQL(sStmt2);
              stmt->registerOutParam(1, OCCIINT);
              stmt->setString(2,"37863 ");
              stmt->setMaxParamSize(2,100);
              stmt->registerOutParam(3,OCCISTRING, 20);
              stmt->registerOutParam(4,OCCISTRING, 2);
              stmt->registerOutParam(5,OCCISTRING, 3);
              stmt->registerOutParam(6,OCCISTRING, 3);
              status = stmt->execute();
              cout << "3rd sp executed" << endl;
              conn->terminateStatement(stmt);
              conn->flushCache();
              env->terminateConnection(conn);
              vMD.clear();
         cout << "Demo completed...data deleted" << endl;
              cin >> tmpChar;
         catch (SQLException &ex)
    {//cleanup
              cout << "Error, cleaning up..." << ex.getMessage() << endl;
         conn->terminateStatement(stmt);
         env->terminateConnection(conn);
         cout << "terminating env" << endl;
         Environment::terminateEnvironment(env);
    // throw;//will be caught by outer handler
         Environment::terminateEnvironment(env);
         return 0;
    ===================================================
    this is not the same program but still this program gives the same amount of memory leak, this memory leak is reported in each program that uses OCCI
    this program was made with the help of the sample program posted at the OTN website
    "Calling PLSQL functions/procedures";
    hoping for a reply soon

  • Memory Leak, Macbook

    Good day folks,
    I'm looking for some advice regarding my Macbook and what is an apparent memory leak I'm experiencing. I've been getting a lot of 'beachball' activity in the last couple of months and after weeks of phone calls with Apple and a visit to the Genius bar, Diskwarrior, archive and install with Time Machine, etc., etc. it is now apparent that something is sucking memory on the machine even when I don't see any application running. Activity monitor doesn't show the CPU being taxed, but the available memory drops to almost 'zero green' in the pie chart.
    Prior to me doing a clean wipe of my hard drive and a selective re-install of data, does anyone have a tip as to what might be causing this? I really don't use a lot of apps. Most common would be iPhoto, Safari, Adobe, Mail, Numbers. My iPhoto library is about 6 GBs. I have tons of available HD space.
    Two items in Activity Monitor which appear to be using a lot of 'virtual memory' are 'Dashboard Client' (which I don't appear to be able to 'quit') and Apple80211Agent. I'm not very tech savvy so any tips you could offer would be appreciated. Thanks all.

    What evidence to you actually have of this so-called memory leak? Memory leaks happen in software, so you would have to examine individually running applications to determine if a leak actually occurs (and you would need to know how to discern one.) If you are running out of RAM as possibly evidenced by beachballing, it may be due to the fact that you are trying to run iPhoto, Safari, Adobe, Mail, Numbers. My iPhoto library, which is more than your 2 GBs of RAM can support. What you need is more RAM.
    Virtual memory usage in Activity Monitor has no meaning to you and has nothing to do with RAM usage or memory leaks.
    About OS X Memory Management and Usage
    Reading system memory usage in Activity Monitor
    Memory Management in Mac OS X
    Performance Guidelines- Memory Management in Mac OS X
    A detailed look at memory usage in OS X
    Understanding top output in the Terminal
    The amount of available RAM for applications is the sum of Free RAM and Inactive RAM. This will change as applications are opened and closed or change from active to inactive status. The Swap figure represents an estimate of the total amount of swap space required for VM if used, but does not necessarily indicate the actual size of the existing swap file. If you are really in need of more RAM that would be indicated by how frequently the system uses VM. If you open the Terminal and run the top command at the prompt you will find information reported on Pageins () and Pageouts (). Pageouts () is the important figure. If the value in the parentheses is 0 (zero) then OS X is not making instantaneous use of VM which means you have adequate physical RAM for the system with the applications you have loaded. If the figure in parentheses is running positive and your hard drive is constantly being used (thrashing) then you need more physical RAM.

  • Memory leak when browsing through records

    Hello,
    I have a problem with any page containing the component related to each other on three or more levels. (1st level ADF Table, 2nd level ADF Table and 3rd level ADF Form)
    By navigating through the records of the first level, there is refreshment at other levels (using partial triggers), but suddenly there is loss of memory (memory leak) for components of type Select One Choice.
    Precisely, the problem appears when browsing another Show Detail Item in the same page.
    Screenshot showing the Data Control in my page: [http://www.infotun.net/usersimages/1/adf/structure.jpg]
    Capture screen representing the initial state where all is well: [http://www.infotun.net/usersimages/1/adf/initial.jpg]
    Capture screen representing the final state after memory loss: [http://www.infotun.net/usersimages/1/adf/final.jpg]
    I'm using JDeveloper Studio 11.1.1.2.0
    JDK: 1.6.0_14
    Operating System: Windows 7.
    Any help/advice is highly appreciated !
    Thanks
    Edited by: InfoTun on 10 juin 2012 16:22
    Edited by: InfoTun on 10 juin 2012 16:26

    Hi,
    the screenshot does not indicate a memory leak. Memory leaks show by the server memory consumption that leads to slow performance or stale applications. Your issue seems to be different from that and doesn't really explain in the screen shots. If you have a support contract then customer support is the recommendation I like to give
    Frank

  • Memory leak playing podcasts in iTunes 11.2, Windows 8.1 x64

    I've already uninstalled and reinstalled iTunes 11.2 64 bit.
    When I play a podcast it plays for a few minutes then iTunes freezes.  Watching it in task manager its obvious there's a memory leak.  Memory climbs steadily until about 1.6Gb when it dies.
    Any suggestions?
    Can we download earlier versions?

    Was hoping 11.2.2 would fix it. Nope, the memory leak is still there in the podcasts tab. The workaround is to refresh podcasts and jump to the music tab.

  • How can memory leaks occur?

    Hi,
    I was just wondering how a memory leak can occur in Java. The garbage collector is supposed to free up all unused variables, so under what circumstances can it happen?

    This is not technically a "memory leak". I've seen
    this called "loitering objects", which conjures upa
    vivid picture: objects hanging around with nothingto
    do...I think it's the classic java memory leak. A bug in
    a program that prevents the freeing up of memory that
    it no longer needs.Yes, but it's not what is traditionally termed a memory leak.
    A real memory leak is memory that's claimed by the program but no longer accessible to the program for freeing up.
    That can in Java (where what we call a program isn't a complete program but runs inside a virtual machine which handles memory allocation and deallocation) only happen if there's a flaw in the JVM itself which causes errors in memory deallocation (so most likely a flaw in the garbage collector).
    In Java the objects you create are always out there somewhere where something can reach them so as to prevent them from being available to the garbage collector.
    Different cause, same effect in that in both cases memory isn't getting freed for reuse.

  • Can Java program cause memory leak?

    Can Java program cause memory leak or memory crash? I don't mean any memory overflow related exceptions. I mean something like core dump in UNIX or error reports in Windows XP.
    If it can really happen, in what circumstances? I raise such a question because our J2EE based system had really caused memory leak in Windows XP systems, but so far we still fail to troubleshoot the problem.

    Your code may leak memory. There are many, many, many reasons this could be. All of them represent bugs in your code.
    You should get a profiler to identify the problem spots of your code.
    You spoke of a memory crash as well. The VM may crash with some bug in the VM, or a bug in native code but that is not relevent to your problem. A memory leak is a problem in your code.

  • SVCHost.exe

    svchost.exe, is consuming 200-600mb of memory on start up and does not stop until i kill the process then does it again x2, then the display settings go from the sleek design to a windows 98 look then svchost.exe stops leaking but
    why is svchost.exe leaking in the first place after not doing it for 2-3 years of owning this computer running the same os.
    os: Windows 7 64 bit - fully up-to-date
    thanks in advance

    Hi Huzaifa,
    Please make sure the svchost.exe file is located in the folder C:\Windows\System32. In other cases, svchost.exe is a virus, spyware, trojan or worm. Also check the user name of the process, it should be SYSTEM、LOCAL
    SERVICE or NETWORK SERVICE.
    This process manages system services that run from dynamic link libraries (files with extension .dll). Examples for such system services are: "Automatic Updates", "Windows Firewall", "Plug and Play", "Fax Service",
    "Windows Themes".
    First you need to know what service/dll sys is running by SVCHOST.exe.
    Download Process Explorer from this website
    https://technet.microsoft.com/en-us/sysinternals/bb896653.aspx?f=255&MSPPError=-2147217396
    Information about pool monitor
    https://msdn.microsoft.com/en-us/library/windows/hardware/ff550442%28v=vs.85%29.aspx?f=255&MSPPError=-2147217396
    Open Process Explorer and find the problem SVCHOST.exe and check which service is taking resources.
    Regards
    D. Wu
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Windows Server 2012R2 - svchost.exe 60-100% load!

    We are using RDS collection with two Windows Server 2012R2 session hosts. Both hosts are virtual servers (clean installation) and are used as session hosts (terminals) with 10 to 25 users each. RDS Connection Broker is also virtual machine with Windows
    Server 2012 R2. Our users are using Windows 7 Embedded thin clients with MSTSC RDP 8.0.
    There is problem with high cpu load on these servers. Sometimes Svchost.exe starts to cause 60-100% load. Our virtual machines have 10 virtual processor cores. Load is caused by LSM (Local Session Manager) Service from DCOM Launcher group. Svchost
    creates many thread as you can see on picture attached. Sometimes this load disappears after 12-24 hours, sometimes it needs restarting whole server.
    We still cannot find cause of this problem, although we managed to reproduce this issue one time by logging two admin accounts to server console and force disconnecting one of these accounts by third admin account connecting to server console by RDP
    mstsc.exe with -admin parameter.
    Our users are very unsatisfied :-(
    This is screenshot of Process Explorer - svchost.exe - Threads:

    Hi,
    Thank you for posting in Windows Server Forum.
    Do you have any recent updates, might happens due to automatic updates which also can cause high cpu through svchost.exe. Please check as suggested by “Larry” by turning off Windows update service. In addition go through beneath articles for more information.
    1. Automatic Update causes SVCHOST.exe high CPU
    2. Getting Started with SVCHOST.EXE Troubleshooting
    Hope it helps!
    Thanks, 
    Dharmesh

  • Windows Server 2008 R2 - When svchost.exe memory-leaks Outlook does not load properly

    Hi all,
    We have a server which runs Windows Server 2008 R2, fully updated, and acts as a Terminal Server (Citrix XenApp 6.5).
    In the past couple months we have had problems with svchost.exe leaking memory, growing to 2-3GB of RAM usage. Sometimes is occurs with weeks between the incidents, sometimes days. To solve the issue we have to reboot the server.
    When this occurs, Outlook (fully updated) doesn't start for any users at all. Outlook doesn't continue from the "Loading profile.."-stage. The users who already has Outlook started doesn't have any problems, unless they close Outlook ;) . 
    The svchost.exe is the one which runs the services:
    NSI
    WinHttpAutoProxySvc
    W32Time
    Netprofm
    FontCache
    EventSystem
    We've patched the server with KB2847346 but with no result. Patch KB2950358 is not applicable..
    Any ideas?

    svchost is hosting multiple services. when the issue occurs you can use sysinternals procmon (or enable the command line column in task manager process tab) to view to determine which service is using that much memory.
    MCP/MCSA/MCTS/MCITP
    Did you read my whole post, or did you just misunderstand the part were I wrote:
    The svchost.exe is the one which runs the services:
    NSI
    WinHttpAutoProxySvc
    W32Time
    Netprofm
    FontCache
    EventSystem"
    I know that svchost.exe runs ALOT of services, so when the problem occurred I checked which services the specific svchost.exe runs. Everytime it happens the svchost.exe (which leaks and has 2-3GB mem usage) runs this specific services.

  • 2008 R2 - Memory Leak from svchost.exe - Module "rpcrt4" is the culprit

    Hi All
    Over the past week or so (after a set of Windows updates and restart) svchost.exe has increasingly used more and more memory. It probably gobbles up an extra 1GB per day and doesn't relent. 
    After running various diagnostics, the debug diagnostic tool finally provided me this information after a memory leak test:
    rpcrt4.dll is responsible for 1.76 GBytes worth of outstanding allocations. The following are the top 2 memory consuming functions:
    rpcrt4!AllocWrapper+2b: 1.76 GBytes worth of outstanding allocations.
    rpcrt4!Ndr64ClientInitialize+964: 1.36 MBytes worth of outstanding allocations.
    Detailed module report(Memory)
    Module details for rpcrt4
    Module Name   rpcrt4 
    Allocation Count   946941 allocation(s) 
    Allocation Size   1.76 GBytes 
    Module Information 
    Image Name: C:\Windows\System32\rpcrt4.dll   Symbol Type:  PDB 
    Base address: 0x00000003`00905a4d   Time Stamp:  Sat Nov 20 13:13:18 2010  
    Checksum: 0x00000000`00000000   Comments:   
    COM DLL: True   Company Name:  Microsoft Corporation 
    ISAPIExtension: False   File Description:  Remote Procedure Call Runtime 
    ISAPIFilter: False   File Version:  6.1.7601.17514 (win7sp1_rtm.101119-1850) 
    Managed DLL: False   Internal Name:  rpcrt4.dll 
    VB DLL: False   Legal Copyright:  © Microsoft Corporation. All rights reserved. 
    Loaded Image Name:  rpcrt4.dll   Legal Trademarks:   
    Mapped Image Name:     Original filename:  rpcrt4.dll 
    Module name:  rpcrt4   Private Build:   
    Single Threaded:  False   Product Name:  Microsoft® Windows® Operating System 
    Module Size:  1.18 MBytes   Product Version:  6.1.7601.17514 
    Symbol File Name:  c:\symcache\rpcrt4.pdb\7D748DA6D7454C9EA38C8CEF1C9E75F22\rpcrt4.pdb   Special Build:  & 
    rpcrt4!AllocWrapper+2b  has 944,468 allocations! 
    I'm running 2008 R2 64bit with anywhere up to 80/100 simultaneous RDP connections at any one time.
    Can anyone help or advise as I cannot find any hotfixes for this issue.
    Thanks
    Ryan

    Hi Ryan,
    Please narrow it down to the specific service that is having the issue.  That way you will know where to focus on.
    For the specific svchost.exe that is showing the large memory usage, use task manager/process explorer/etc. to determine which service(s) are running within it.  If there are multiple services running within it, I recommend you isolate them and then
    restart your server.  For example, say you determined that the following services are running in the "problem" svchost.exe: AudioEndpointBuilder, Netman, TrkWks, UmRdpService, Uxsms.  You would open an admin command prompt and enter the following
    commands:
    sc config AudioEndpointBuilder type= own
    sc config Netman type= own
    sc config TrkWks type= own
    sc config UmRdpService type= own
    sc config Uxsms type= own
    After entering the above commands you would restart your server for the changes to take effect.  Over time you would monitor memory usage of the suspect services, and eventually it will become apparent which one is using too much memory.
    Thanks.
    -TP

  • Alerts from Norton re high memory usage by plugin-container.exe

    Running Firefox 3.6.13 on Windows XP Pro Service Pack 3. The details from Norton are as follows:
    1. Program Path C:\program files\Mozilla firefox\plugin-container.exe
    2. Program Description - Plugin Container for Firefox
    3. Memory - 1,676 MB used
    4. Disk Write Activity - 10 MB (total for this process)
    5. File Origin - Source File = updater.exe, File Created: firefox.exe,updater.exe,plugin-container.exe

    Probably the alerts are nothing to worry about, and you may wish to suppress that particular alert.
    On a couple of old spec legacy machines I recently switched. <br>Partly because of economics, and partly because , of the two, <br> Norton can perform better (in my opinion) on legacy machines.
    The first thing I did notice was that Norton does pulse updates and background tasks very frequently (configurations can be changed) by default, and flags up quite a number of alerts.
    The Norton (NIS) 'Insight' facility will be flagging up firefox plugin container.exe. It can be configured to suppress the alerts from firefox plugin container, but unless disabled will probably just flag up another busy process or application. It is not flagging it up because it is a known security problem, merely because of the amount of activity.
    I imagine the alerts are when you are playing videos, probably with FlashPlayer, and may well depend on the resolution/quality of the videos.
    If you think the results are unusual or unexpected see:
    *[[High memory usage]]
    *[[Firefox consumes a lot of CPU resources]]
    PS not sure what is happening with this post are some phrases unacceptable eg alternative expressions about economics; one paragraph was behaving oddly in preview resorted to manually adding break tags to keep it within the container.

  • Fileserver.exe high memory usage

    Hi all,
    I am using BOXI3.0 installed on Tomcat & Windows Server 2003. I discover there is a high memory usage of fileserver.exe, always over 50%. After reboot the SIA, the memory usage drops back to 0. I have a regular reboot every weekend but still got that error. Anything I can check?
    And in the log, AAMetrics_xxxxxxxxx.log, I found there is an error
    assert failure: (d:/Titan_RTM/src/Common/export/iface\cxlib/refcount.h:89). (SNonInterlockedRead(&m_lRefCount) == 0 : no message).
    Anyone knows what it is and how to solve it?
    Thanks you in advanced.
    Grace

    I am using BOXI 3.0. Do you have any recommendation on which version of fix pack? or simply upgrade to 3.1 is better?
    Some people said we cannot upgrade from 3.0 to 3.1 directly, instead, we need to uninstall the BOXI 3.0 and reinstall the 3.1. Do you have any experience on it?
    Many thanks.

  • Very high memory usage..possible memory leak?  Solaris 10 8/07 x64

    Hi,
    I noticed yesterday that my machine was becoming increasingly slow, where once it was pretty snappy. It's a Compaq SR5250NX with 1GB of RAM. Upon checking vmstat, I noticed that the "Free" column was ~191MB. Now, the only applications I had open were FireFox 2.0.11, GAIM, and StarOffice. I closed all of them, and the number reported in the "Free" column became approximately 195MB. "Pagefile" was about 5.5x that size. There were no other applications running and it's a single user machine, so I was the only one logged in. System uptime: 9 days.
    I logged out, logged back in, to see if that had an affect. It did not. Rebooted and obviously, that fixed it. Now with only FireFox, GAIM, and a terminal open, vmstat reports "Free" as ~450MB. I've noticed if I run vmstat every few seconds, the "Free" total keeps going down. Example:
    unknown% vmstat
    kthr      memory            page            disk          faults      cpu
    r b w   swap  free  re  mf pi po fr de sr cd s0 s1 s2   in   sy   cs us sy id
    0 0 0 870888 450220  9  27 10  0  1  0  8  2 -0 -0 -0  595 1193  569 72  1 28
    unknown% vmstat
    kthr      memory            page            disk          faults      cpu
    r b w   swap  free  re  mf pi po fr de sr cd s0 s1 s2   in   sy   cs us sy id
    0 0 0 870880 450204  9  27 10  0  1  0  8  2 -0 -0 -0  596 1193  569 72  1 28
    unknown% vmstat
    kthr      memory            page            disk          faults      cpu
    r b w   swap  free  re  mf pi po fr de sr cd s0 s1 s2   in   sy   cs us sy id
    0 0 0 870828 450092  9  27 10  0  1  0  8  2 -0 -0 -0  596 1193  570 71  1 28
    unknown%Output of prstat -u Kendall (my username ) is as follows:
       PID USERNAME  SIZE   RSS STATE  PRI NICE      TIME  CPU PROCESS/NLWP
      2026 Kendall   124M   70M sleep   59    0   0:01:47 1.4% firefox-bin/7
      1093 Kendall    85M   77M sleep   59    0   0:07:15 1.1% Xsun/1
      1802 Kendall    60M   15M sleep   59    0   0:00:08 0.1% gnome-terminal/2
      1301 Kendall    93M   23M sleep   49    0   0:00:30 0.1% java/14
      1259 Kendall    53M   15M sleep   49    0   0:00:32 0.1% gaim/1
      2133 Kendall  3312K 2740K cpu1    59    0   0:00:00 0.0% prstat/1
      1276 Kendall    51M   12M sleep   59    0   0:00:11 0.0% gnome-netstatus/1
      1247 Kendall    46M   10M sleep   59    0   0:00:06 0.0% metacity/1
      1274 Kendall    51M   13M sleep   59    0   0:00:05 0.0% wnck-applet/1
      1249 Kendall    56M   17M sleep   59    0   0:00:07 0.0% gnome-panel/1
      1278 Kendall    48M 9240K sleep   59    0   0:00:05 0.0% mixer_applet2/1
      1245 Kendall  9092K 3844K sleep   59    0   0:00:00 0.0% gnome-smproxy/1
      1227 Kendall  8244K 4444K sleep   59    0   0:00:01 0.0% xscreensaver/1
      1201 Kendall  4252K 1664K sleep   59    0   0:00:00 0.0% sdt_shell/1
      1217 Kendall    55M   16M sleep   59    0   0:00:00 0.0% gnome-session/1
       779 Kendall    47M 2208K sleep   59    0   0:00:00 0.0% gnome-volcheck/1
       746 Kendall  5660K 3660K sleep   59    0   0:00:00 0.0% bonobo-activati/1
      1270 Kendall    49M   10M sleep   49    0   0:00:00 0.0% clock-applet/1
      1280 Kendall    47M 8904K sleep   59    0   0:00:00 0.0% notification-ar/1
      1199 Kendall  2928K  884K sleep   59    0   0:00:00 0.0% dsdm/1
      1262 Kendall    47M 2268K sleep   59    0   0:00:00 0.0% gnome-volcheck/1
    Total: 37 processes, 62 lwps, load averages: 0.11, 0.98, 1.63System uptime is 9 hours, 48 minutes. I'm just wondering why the memory usage seems so high to do...nothing. It's obviously a real problem as the machine turned very slow when vmstat was showing 195MB free.
    Any tips, tricks, advice, on which way to go with this?
    Thanks!

    Apologies for the delayed reply. School has been keeping me nice and busy.
    Anyway, here is the output of prstat -Z:
       PID USERNAME  SIZE   RSS STATE  PRI NICE      TIME  CPU PROCESS/NLWP
      2040 Kendall      144M   76M sleep   59    0   0:04:26 2.0% firefox-bin/10
    28809 Kendall     201M  193M sleep   59    0   0:42:30 1.9% Xsun/1
      2083 Kendall      186M   89M sleep   49    0   0:02:31 1.2% java/58
      2260 Kendall       59M   14M sleep   59    0   0:00:00 1.0% gnome-terminal/2
      2050 Kendall       63M   21M sleep   49    0   0:01:35 0.6% realplay.bin/4
      2265 Kendall     3344K 2780K cpu1    59    0   0:00:00 0.2% prstat/1
    29513 Kendall     71M   33M sleep   39    0   0:07:25 0.2% gaim/1
    28967 Kendall     56M   18M sleep   59    0   0:00:24 0.1% gnome-panel/1
    29060 Kendall     93M   24M sleep   49    0   0:02:58 0.1% java/14
    28994 Kendall     51M   13M sleep   59    0   0:00:23 0.1% wnck-applet/1
    28965 Kendall     49M   14M sleep   59    0   0:00:33 0.0% metacity/1
       649 noaccess   164M   46M sleep   59    0   0:09:54 0.0% java/23
    28996 Kendall     51M   12M sleep   59    0   0:00:50 0.0% gnome-netstatus/1
      2264 Kendall    1352K  972K sleep   59    0   0:00:00 0.0% csh/1
    28963 Kendall  9100K 3792K sleep   59    0   0:00:03 0.0% gnome-smproxy/1
    ZONEID    NPROC  SWAP   RSS MEMORY      TIME  CPU ZONE
         0           80          655M  738M    73%       1:18:40 7.7% global
    Total: 80 processes, 322 lwps, load averages: 0.27, 0.27, 0.22Sorry about the bad formatting, it's copied from the terminal.
    In any event, we can see that FireFox is sucking up 145MB (??!?!!? crazy...) XSun, 200MB, and java 190MB. I'm running Java Desktop System (Release 3) so I assume that is what accounts for the the high memory usage RE: java process. But, XSun, 200MB?
    Is this normal and I just need to toss another gig in, or what?
    Thanks

Maybe you are looking for

  • [Success] Dual Booting Arch and Windows 7 [Advice / Confirmation]

    So I have been trying to get Starcraft II to work with wine and no luck. I have decided to install windows back on my computer, besides it might come in handy since I'm heading back to school soon. Anyways I have tried dual booting arch and windows i

  • Wecam and USB mic input not working after upgrade to Lion

    The audio inputs (micraphones) all show up in Syetem Preferences but if I talk into the microfones (on USB soundcard/Trust Webcam) no levels are  being shown, I have tried clicking on eatch input it turh but n luck. I am getting the impresion Lion br

  • Customizing the QBE

    Hi, Does anyone know how can I customize the QBE? I want to remove the format mask textbox, the align combo box and the case sensitive check box? any help would very appreciated... thanks in advance, Miguel

  • Inbound IDOC lost

    hi all, I have output an outbound IDOC by ME9F and do an inbound by WE14 The outbound status changes from 30 to 03 as normal but the inbound IDOC is lost (Can't find in table EDIDC) Could anyone tell me what happen?

  • Simple JPA prog weblogic 10.3,  struggling with java.lang.NoClassDef s

    Hi, Trying to run a basic JPA program using createEntityManagerFactory, EntityManager and persistence.xml.....Everything compiling fine. I'm running it as a standalone Java application on Weblogic 10.3. First I got this error on running. Exception in