Svchost.exe causing CPU usage to go up and down

Sorry if I have posted this in the wrong forum but I rarely ever post here.  However I have run into an issue that I am unable to find assistance on.  On all of our domain controllers (3) running Server 2008 x64 we see the CPU spiking up and down.  The
CPU will start out next to nothing then jumps to 100% for a second, then returns to next to nothing for a second, then jumps to 100% for a second.... and so on.  Using Process Explorer we found out it is an svchost process that runs DHCP Client,
TCP/IP NetBIOS Helper, and Windows Event Log services.  If we kill the process we can start all the services back up without any issues except for the Windows Event Log service.  As soon as we start the Windows Event Log service the CPU starts spiking
up and down again.  There do not seem to be an unusual # of events being logged and we don't have any auditing turned on so I am not sure what is going on.  I was able to gather a procdump that I have posted below.  I will continue to investigate
but was just wondering if someone could offer any insight?
*                        Exception Analysis                                  
GetPageUrlData failed, server returned HTTP status 404
URL requested: http://watson.microsoft.com/StageOne/svchost_exe/6_0_6001_18000/47919291/unknown/0_0_0_0/bbbbbbb4/80000003/00000000.htm?Retriage=1
FAULTING_IP:
+70de990
00000000`00000000 ??              ???
EXCEPTION_RECORD:  ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 0000000000000000
   ExceptionCode: 80000003 (Break instruction exception)
  ExceptionFlags: 00000000
NumberParameters: 0
FAULTING_THREAD:  00000000000003d8
DEFAULT_BUCKET_ID:  STATUS_BREAKPOINT
PROCESS_NAME:  svchost.exe
ERROR_CODE: (NTSTATUS) 0x80000003 - {EXCEPTION}  Breakpoint  A breakpoint has been reached.
EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - One or more arguments are invalid
MOD_LIST: <ANALYSIS/>
NTGLOBALFLAG:  0
APPLICATION_VERIFIER_FLAGS:  0
PRIMARY_PROBLEM_CLASS:  STATUS_BREAKPOINT
BUGCHECK_STR:  APPLICATION_FAULT_STATUS_BREAKPOINT
LAST_CONTROL_TRANSFER:  from 000000007740616a to 0000000077636eda
STACK_TEXT: 
00000000`0010f2f8 00000000`7740616a : 00000000`00000010 00000000`0010f150 00000000`00000000 0000990d`354adee0 : ntdll!ZwReadFile+0xa
00000000`0010f300 000007fe`ff30fc9a : 00000000`0010f3c0 00000000`00246f28 00000000`0010f430 00000000`0010f3f8 : kernel32!ReadFile+0x8a
00000000`0010f390 000007fe`ff30fa3b : 00000000`00246f28 00000000`00000000 00000000`00000000 00000000`00000000 : advapi32!ScGetPipeInput+0x3a
00000000`0010f3e0 000007fe`ff30e00d : 00000000`0000003c 00000000`00000000 00000000`00000000 00000000`000004d3 : advapi32!ScDispatcherLoop+0x9a
00000000`0010f4e0 00000000`ffa81dca : 00000000`00245310 00000000`00000000 00000000`00000024 00000000`00000000 : advapi32!StartServiceCtrlDispatcherW+0x176
00000000`0010f780 00000000`ffa824b2 : 00000000`00000000 00000000`ffa85490 01ce990d`38280236 00000000`0d72c90f : svchost!wmain+0x110
00000000`0010f7b0 00000000`7740b22d : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : svchost!ScCreateWellKnownSids+0x301
00000000`0010f7f0 00000000`77616861 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0xd
00000000`0010f820 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x1d
STACK_COMMAND:  ~0s; .ecxr ; kb
FOLLOWUP_IP:
svchost!wmain+110
00000000`ffa81dca 33c9            xor     ecx,ecx
SYMBOL_STACK_INDEX:  5
SYMBOL_NAME:  svchost!wmain+110
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: svchost
IMAGE_NAME:  svchost.exe
DEBUG_FLR_IMAGE_TIMESTAMP:  47919291
FAILURE_BUCKET_ID:  STATUS_BREAKPOINT_80000003_svchost.exe!wmain
BUCKET_ID:  X64_APPLICATION_FAULT_STATUS_BREAKPOINT_svchost!wmain+110
WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/svchost_exe/6_0_6001_18000/47919291/unknown/0_0_0_0/bbbbbbb4/80000003/00000000.htm?Retriage=1
Followup: MachineOwner

Hi,
SVCHOST.EXE is a generic host process for services. There can be multiple SVCHOST.EXE running on a system and each SVCHOST.EXE can also hold multiple
services.
The first step is to identify the Process ID (PID) of the SVCHOST.EXE that is pegging the CPU. 
This can be done through Task Manager->Processes tab. If the PID column is not present, you can add it by selecting View->Select Columns and check the PID checkbox. 
Once the PID is identified, the next step is to determine which services are running under the PID. From a Command Prompt, type:
TASKLIST.EXE /SVC
TASKLIST.EXE will list all the processes and PID’s running on the system. Look for the PID in question and check the Services column. This will give
you a list of Services to start investigating.
For more troubleshooting information, please also refer to the following Microsoft TechNet blogs:
PRF: High CPU (Individual Process)
http://blogs.technet.com/b/askperf/archive/2009/04/10/prf-high-cpu-individual-process.aspx
PRF: High CPU (SVCHOST.EXE)
http://blogs.technet.com/b/askperf/archive/2009/04/10/prf-high-cpu-svchost-exe.aspx
Regards,
Arthur Li
TechNet Community Support

Similar Messages

  • Evenlog viewing causes CPU usage 100% on Windows server 2008 SP2

    We have Windows server 2008 SP2 with strange behaviour. When I scroll down events in eventlog viewer CPU usage hits 100% and eventlog viewer freeze. CPU usage is split between 2 processes SVCHOST.EXE (lmhosts, eventlog and Dhcp services) and MMC.EXE.
    1)I tried to replace eventlog files with new ones. That didn’t helped
    2)After server clean boot problem still exist.
    3)When CPU hits 100% usage process explorer shows that from SVCHOST.EXE process CPU is used by service EventLog.
    Any ideas how to fix this?

    Hi Santosh
    I re-installed VMware
    tools and also configured VMXNET 3 - nothing changed :(
    Sorry to hear that.
    Windows event log service has couple of dependencies i.e. task scheduler and windows event collector service. Can try restrating those services ?
    In addition to above, try following steps
    Change NTFS permission of  %WINDIR%\System32\WinEvt\Logs directory, add Local Service and
    Network Service, give them FULL permissions.
    Stop and Start event viewer service by running following command
    net stop eventlog && net start eventlog
    Issues like this might occur if the disk (FC or iSCSI SAN or even NAS) has some inconsistencies , this is true in case of both physical and virtual machines 
    You might want to try running chkdisk as well on the server in question
    http://technet.microsoft.com/en-us/library/cc730714(v=ws.10).aspx
    If nothing helps, try inplace upgrade of the Operating system as an last option.
    How to Perform an In-Place Upgrade on Windows Vista, Windows 7, Windows Server 2008 & Windows Server 2008 R2
    http://support.microsoft.com/kb/2255099
    Thanks
    Regards, Santosh
    I do not represent the organisation I work for, all the opinions expressed here are my own.
    This posting is provided "AS IS" with no warranties or guarantees and confers no rights.
    Whenever you see a helpful reply, click on Vote As Helpful & click on
    Mark As Answer if a post answers your question.

  • How do I lower the applemobiledeviceservice.exe*31 cpu usage?

    How do I lower the applemobiledeviceservice.exe*31 cpu usage? It is running between 10-16% of my cpu usage for my laptop. Even if I shut it down in the windows task manager it starts back up in a few minutes. I am running windows 7.
    Thank You for your help with this.

    Michel Chaouli wrote:
    I also ran Onyx and did all the maintenance steps.
    Did you also do all the cleaning steps?
    OnyX clears the dyld cache
    Run through the Steps here
    ..Step by Step to fix your Mac
    Also this
    Why is my computer slow?
    Eliminate a Wifi issue by connecting a Ethernet cable directly to your router or modem (power off/on)
    If your still having beachball issues, what I suspect has occured (which a lot of people mistakenly do) is the hard drive got sectors damaged when the computer was moved/bumped while it was in operation.
    The fix for this (and anything else) is rather drastic, all user data off the Macintosh HD will have to be removed, the entire partition Disk Utility > Erase with Secure Zero (or middle selection option), OS X reinstalled and updated, programs reinstalled and files returned.
    If one has a previous uneffected bootable clone or TimeMachine backup that can be used to restore.
    Most commonly used backup methods
    Reducing bad sectors effect on hard drives

  • After updating to latest Firefox - when I click on google taskbar my CPU usage goes to 100% and stays there... and computer is really slow. No other search engine show the 100% usage like Google. There was NOT a problem with older versions of Firefox...?

    My computer got really slow after updating to latest version of Firefox. I checked all processes and I was testing the system. THe CPU usage goes between 2 and 70 percent staying around 25% on average, when I check my e-mail. As soon as I click on Google taskbar (without even typing in anything) the CPU usage jumps to 100% and STAYS at 100 %, and computer extremely slow.

    My computer got really slow after updating to latest version of Firefox. I checked all processes and I was testing the system. THe CPU usage goes between 2 and 70 percent staying around 25% on average, when I check my e-mail. As soon as I click on Google taskbar (without even typing in anything) the CPU usage jumps to 100% and STAYS at 100 %, and computer extremely slow.

  • Microsoft.Exchange.AddressBook.Service.exe 100% CPU Usage

    Hi,
    We have an exchange server 2010 and the Microsoft.Exchange.AddressBook.Service.exe used 100% CPU Usage suddenly. However, after rebooting the server, the CPU Usage of the above .exe is back to normal. Client cannot connect to the exchange server during
    the high CPU Usage of the above .exe.
    Any ideas for the above problems? Thank You.

    Hi
       Microsoft.Exchange.AddressBook.Service.exe is related to OAB function.
       Maybe mobile or client fails to download will cause this problem.
    What was the fix for this?

  • Rim.desktop.exe high cpu usage and internet activity

    What the heck is going on with desktop 6 software? Rim.Desktop.exe is running 10-20% cpu utilization and my router lights are blinking like crazy. It won't shut down right away while this is going on either. I have to force the shutdown to close the app and stop the internet activity. This goes on when my phone is connected or not. Storm 9530.
    Dean

    Thanks for the quick reply.
    If you do not have that 3rd party add-on running, do you notice a difference in the cpu usage? or network connectivity?
    Also did you experience any of these problems with running with DTM 5.0.1
    The only network connection that Desktop Manager uses is to register the PIN number and to check for updates and down the new updates.  But it does not continue constantly.
    I would see if you can use BlackBerry Desktop Software without the 3rd party add-on unless you tried before, to see if it's a third party add-on causing the issue or Desktop Manager.
    I look forward to your results.
    -ViciousFerret
    Come follow your BlackBerry Technical Team on Twitter! @BlackBerryHelp
    Be sure to click Like! for those who have helped you.
    Click  Accept as Solution for posts that have solved your issue(s)!

  • Sppsvc.exe High cpu usage since 4/6/2015

    sppsvc.exe using 60% to 80% of cpu since 4/6/2015 in Windows Server tech preview. Is this due to a update or the upcoming 4/15/2015 expiration date for build 9841? This has not been a problem up until now. Any ideas?

    I've just tested it with the latest version of Firefox and the CPU usage is
    rising in line with the number of IDX files.
    Unfortunately I can't EASILY test the applet with IE6, I'm waiting for a
    response from my partner to see if anyone uses IE6 with the applet.
    Thanks
    Arth

  • Settingsynchost.exe high Cpu usage

    Hello Everybody,
    So lets get to the point.I clean installed Windows 10 Tech Preview Build 9841 x64 on my Hp pavilion g4 1303-au laptop
    Specs of my laptop :
    Amd a4-3330mx Radeon HD 6480g Microprocessor
    6 GB DDR3 Ram 1333 Mhz
    500 GB HDD
    what i found problematic in this build (ie.,build 9841) was that when i first boot my laptop after clean install,i opened my task manager and found that Settingsynchost.exe was using 25-35% of cpu without doing anything.My fan was throttling so fast than
    normal.I was really so pissed off with that so i retrieved back to my old win8.1 pro x64.So can anyone tell me how to fix this Settingsynchost.exe bug from tech preview because i want to see more aspects of window 10 and give my utmost regards for it.
    Thank You
    Sincerely,
    Aman Srivastava

    We have found that the information bubbles that open up in the top right hand corner of pdf documents can consume a lot of CPU, when visible for a user on our RDS servers Acrobat Reader would consume anything between 14-25% of CPU resource. This turned out to be very easy to resolve - first you can simply close the info bubble as the user, this setting is then retained for the next time any pdf documents are open. However this was not a suitable fix for the several hundred users that we have regularly connected to our various RDS farms. Instead we added the following registry settings to each users profile via our logon scripts - these disable the info bubbles and therefore prevent the high CPU usage.
    KEY = HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\11.0\AVGeneral
    DWORD = bReaderShouldShowInfoBubble
    VALUE = 0
    DWORD = bReaderShowEPDFToolsPaneInfoBubble
    VALUE = 0
    I hope that this information helps other users with similar High CPU issues when running Acrobat Reader.

  • AdbeRdr90_en_US.exe 98% CPU usage

    Hi,
    I'm having a very hard time trying to install Reader 9 ( I think I had similar problems with version 8 ) -- when I run the installer, it runs with 98% CPU usage, and is extremely slow. I haven't been able to reach the end of the installation yet.
    I have tried using the Windows Installer Clean Up utility, but it only listed Acrobat.com and AIR, which I removed.
    Any ideas?
    Thanks,
    Glen.

    My drive is fairly new, and I don't know of any other issues, so I don't think that's the issue.
    Is it possible to detect if the Windows Installer database is corrupt? Not sure that's the issue though, since I've had no problems with other applications.
    I'll leave the installer running tomorrow and see if it eventually finishes. Is it possible to run the file with msiexec so that I can log any errors that may occur?
    Thanks,
    Glen.

  • Ntoskrnl.exe 100% disk usage windows 8.0 and 8.1

    This is a bug report. I hope Microsoft will take it seriously as it took me a whole day and much stress to track it down. Basically my problem was the same as this: http://slopjong.de/2013/04/23/extremely-high-disk-activity-with-windows-8-and-how-to-fix-it/
    However in the graphic on this site it appears to show that Virtualbox is the culprit. However this is unlikely to be the case, as the author of the site fixed his problem by following his own advice. This is an extremely common problem as this Google search
    indicates:
    https://www.google.co.uk/#q=ntoskrnl.exe+100+disk+usage+windows+8
    To attempt to address my own problem first I disabled all non-microsoft services in Windows 8.1 professional. When this had no effect on the problem, I then disabled all non-essential Microsoft services. In turn. when this has no effect I disabled all user
    installed start-up items. Again when this failed to have an impact, I changed my browser from Firefox to Google Chrome, as I noted that the extremely high disk utilisation was at it's worst when using Firefox. This also had no effect.
    I then tried a variation of my search on Google "ntoskrnl.exe 100 disk usage windows 8" (I can't remember the exact variation) and stumbled over the above site at the beginning of this message. I had by that point tried everything that was in my power
    to try. But I noted from this article that the author recommended changing the power plan from 'balanced', to 'high performance'. Since I had   exhausted every other avenue, I decided to try this and like magic, instantly it worked. So there is clearly
    a bug in Windows 8.1 (and 8 prior to this) that causes 100% disk utilisation. I thought someone at MS might like to know about it and come up with a way to fix it.
    Below is my system configuration. Please note this system configuration may contain a number of errors, as it was generated with several non-essential Microsoft services disabled. I do not believe these issues need to be addressed. However the issue of 100%
    disk utilisation when using a 'balanced' power plan on Windows 8.1 (and 8.0) almost certainly does.
    PS
    This message board system will not allow me to post my full system configuration. MS need a better bug reporting system! Apple allow the public to submit bug reports, so why not Microsoft too. The public can find useful bugs!

    Hi,
    Thanks for your detailed description.
    We considered that the culprit for every computer is different. For the specific PC, we need to analyze the specific issue.
    Please trace the performance using the Windows performance toolkit.
    http://msdn.microsoft.com/en-us/library/hh162945.aspx
    The download link is below:
    http://www.microsoft.com/en-US/download/details.aspx?id=39982
    Then upload the .etl file to Skydrive. We will help you analyze.
    Karen Hu
    TechNet Community Support

  • 10.6.8 randomly freezing, CPU usage goes to 200% and never reduces

    Hi everyone,
    I have a Macbook running 10.6.8 and in my account, there are random times where CPU usage spikes, applications cannot be launched, and killing various processes causes them to spike right after relaunch. It almost always seem to have one of Google Software Update, pbs, or plugin-container in the list of processes taking up all of my CPU (eg. 70% Finder, 70% PBS, 60% Activity Monitor). If I kill all of those processes, when Finder relaunches it goes back to a huge amount of load and no responsiveness. Oddly enough, I can still use Quicksilver and occasionally Firefox when this occurs.
    I'm only ever running Firefox and Quicksilver and never had these issues before.
    I've verified & repaired permissions and verified the disk to no avail.
    Would anyone please be able to help? When it happens, I have no choice but to restart the computer by holding down the power button because it won't respond for 20minutes + when I tried leaving it alone.
    When I ran the 10.6.8 update last week it say Flashback was removed; I'm hoping this isn't related to some sort of malware....

    macbookcx16 wrote:
    When I ran the 10.6.8 update last week it say Flashback was removed; I'm hoping this isn't related to some sort of malware....
    It most certainly is or was malware. A Backdoor Trojan, to be exact.  Make sure you have installed everything that Software Update recommended as there were some subsequent updates to Java which will prevent you from being re-infected and I highly recommend you don't wait so long to update in the future.  Then disable Java (not JavaScript) in your browsers so as not to become infected when the next vulnerability is exploited.
    I don't think any of your current problems are related to Flashback, especially since it informed you that it had been removed. The symptoms were redirection of your browser to advertising sites and crashes of various applications, mostly Safari.
    Hopefully somebody else will come along with some ideas about CPU usage.

  • CPU Usage Question between Premier and Media Encoder

    Hey guys,
    Here is the question. I just built a new machine with the following specs:
    Intel i7 2.66GHz process overclocked to 3.2GHz
    12GB Memory
    Nvidia 260 Overclocked video card.
    When I export a video from Adobe Premier into Media Encoder, all 8 cores peg out at 100% and thus my CPU temp get hot really quick (78 - 80 degrees Celsius)
    Now if I take the same original video file and just drag it into Media Encoder, my 8 cores only show about 24-40% usage and the temp only gets to around 55-60 degrees Celsius.
    What is causing such a big difference in CPU usage? I'm afraid to use Adobe Premier as it causes the CPUs to max out everytime. I want to edit my videos, but as stuck with just using AME on the original files.

    I suspect its simply because in the first case Pr and AME are both running. In the later, just ame loading the Pr project. In the forst case two projects are running simultaneously, the one in Pr and a temp copy in AME.
    But more troublesome to me is why youve built a system that cant be maxed out. IN editing, we Want the CPUs to peg to process as fast as possible. IMHO; You should re-think the design of your workstation if it overheats so easily.
    Curt

  • When running itunes the cpu usage rises to 100% and remains there all the time, When running itunes the cpu usage rises to 100% and remains there all the time

    My computer is a Dell with 4bg RAM. It works perfect, with internet and several programs runing cpu usage goes upt to 60% top. normaly runs at 155 top, but as soon as I start itunes it goes to 100% and remains there making almost imposible to use the computer, even loading files to the library takes several minutes and trying to conect my ipod is almost5 imposible. I sude this pc before with itunes and ipod with no problmes. I appreciate any help on this

    I'm having the same issue for more than a month.  When it's not open it's draing the cpu making the pc run slow and when open the cpu is maxxed at 100% that the I can barely use the computer and can't sync.  And I only use it to back up and sync.  Just downloaded the new version today thinking it would help but it didn't.  Interesting to see if anyone has any answers.

  • System (ntoskrnl.exe) high cpu usage in Windows 8.1

    Sir/Mam,
    I'm having this issue since last week, when i checked it is the "system" (ntoskrnl.exe) file which is using upto 18-24% of my CPU and causing all other applications to stutter for a second (incluuding Media player, mouse pointer, everything).
    By using a Process Explorer software i found out that it's related to these values running under that file:
    " ntoskrnl.exe!RtlSidHashLookup+0x1ffc  "
    It slows down my PC for a second and it happens after every 5-6 seconds (approx.).
    Using Microsoft Windows 8.1
    Lenovo Z50-70
    Need help.

    Hi,
    The WPA shows that it is WmiPrvSE.exe (WMI Provider Host)that occupies up to 20% CPU, and three threads are the causes, 8328\7988\8828. but hard to find deeper information from this, so please use process Explorer or process monitor to find more information
    about WmiPrvSE.exe and the 3 threads, you can refer to this link
    http://social.technet.microsoft.com/Forums/en-US/77f8bc7d-663c-4c33-b732-f362c5585300/service-host-local-system-is-intermittently-using-30-of-my-cpu-windows-81?forum=w8itproperf
    Regarding to the wireless or LAN driver, I suggest you update the driver to latest version if it doesn't work fine.
    Yolanda Zhu
    TechNet Community Support

  • HT1925 applemobiledeviceservice.exe high cpu usage xp

    I would try cmd "netsh winsock reset", restart computer, thats it.
    I tried before this http://support.apple.com/kb/HT1925?viewlocale=en_US with no success.
    Hope this will help someone.
    P.S. i upgraded before from itunes 10.5.2 to 10.6.40

    Hi,
    Generally, we can perform a Clean Boot to narrow down the possible third party software conflicts. For the detailed steps, please refer to the following Microsoft KB article:
    How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7
    http://support.microsoft.com/kb/929135
    What’s the result in Clean Boot?
    If the issue persists in Clean Boot, please also refer to the following blog for how to use Netmon to figure out the root cause.
    Using Netmon to figure out the source of high CPU in WMIprvse.exe
    http://blogs.msdn.com/b/ntdebugging/archive/2009/04/24/using-netmon-to-figure-out-the-source-of-high-cpu-in-wmiprvse-exe.aspx
    Regards.
    Vincent Wang
    TechNet Community Support

Maybe you are looking for