Ce sujet a besoin d'une solution.
Remerciements0

WIN10 Server process high cpu/memory - utilities isn't doing anything about it?

Envoyé le: 2023-01-16 | 07:57 · 10 Replies · · Traduction:

I've been researching for a while now, svchost.exe (netsvcs) process has been using high memory & cpu even after following everything I've found on the web. Was hoping NU would be able to help, so subscribed, but it's not even showing up on Process Scanner, or recognizing anything amiss even while the proc is using 30% cpu & 1gb+ memory. Using all other scans/fixes from NU doesn't help. Not likely to continue this subscription if it doesn't notice a dumpster fire in it's path. 

I can suspend the process in Resource Monitor with no ill effects other than opening/saving a file. I resume it to bypass long wait times for that activity but have to re-suspend since it starts climbing back up immediately. The process does not 'take a back seat' when other programs want resources, but just chokes the OS. 

Pièce Jointe: 
Image icon ResMon - cpu.png
Image icon ResMon - mem.png

Réponses

Remerciements0

Re: WIN10 Server process high cpu/memory - utilities isn't doing anything about it?

Envoyé le: 2023-01-16 | 11:12 · Permalien

Hello DP. Depending on what you have loading with Windows, svchost.exe high memory and so so CPU usage can be indications of malware/virus, or just that you have too many programs using your network resources. Norton Utilities won't correct that situation. If you have SysInternals from Microsoft you should run tcpview and track down what the running and offending process is. I would also run Malwarebytes to remove anything that MAY be on the system which Norton doesn't focus on.

https://learn.microsoft.com/en-us/sysinternals/downloads/sysinternals-suite

For Windows: https://www.malwarebytes.com/

SA

MS Certified Professional Windows 11 Home/Pro 22H2 x 64 build 22621.2361 - Windows 10 Pro x 64 version 22H2 / build 19045.3516 / Norton Security Ultra - Norton 360 Deluxe ver. 22.23.8.4 / Opera GX LVL5 (core:101.0.4843.85) 64 bit-Early Access w/Norton Chrome Extensions
Remerciements0

Re: WIN10 Server process high cpu/memory - utilities isn't doing anything about it?

Envoyé le: 2023-01-17 | 05:09 · Édité: 2023-01-17 | 05:49 · Permalien

Hi SA, thanks for the info. I had run Malwarebytes a number of times but it never found anything. Had also used SysInternals but mostly focused on things like ProcMon. Hadn't thought to check tcpview, but don't see what points to any offending processes (send/recv packets are fairly minimal for top procs). The issue begins immediately after reboot even after stripping out everything in startup that wasn't essential for windows. 

Remerciements0

Re: WIN10 Server process high cpu/memory - utilities isn't doing anything about it?

Envoyé le: 2023-01-18 | 16:59 · Édité: 2023-01-18 | 17:12 · Permalien

One of your screenshots shows more than 9 GB of system memory being utilized. Yet, the 21% CPU usage by svchost isn't accounting for it. Something else is happening as background tasks. I also see "ToolKit.exe" running with 11% CPU usage. What are you using that software for? That process may actually be the cause of the issues you are seeing.

Edited: In your sysinternals suite run "Autoruns" and see what processes are actually loading/loaded. You should also be able to view the registry entries related in the same window. 

FWIW!! Do you have a swap file set in your Windows settings? If not set one manually and reboot.

SA

MS Certified Professional Windows 11 Home/Pro 22H2 x 64 build 22621.2361 - Windows 10 Pro x 64 version 22H2 / build 19045.3516 / Norton Security Ultra - Norton 360 Deluxe ver. 22.23.8.4 / Opera GX LVL5 (core:101.0.4843.85) 64 bit-Early Access w/Norton Chrome Extensions
Remerciements0

Re: WIN10 Server process high cpu/memory - utilities isn't doing anything about it?

Envoyé le: 2023-01-20 | 06:12 · Édité: 2023-01-20 | 06:13 · Permalien

Thanks! The past 2 days the svchost proc hasn't been claiming more than 2-5mb memory, and although cpu is still 25-30% most times, it drops off when I run a cpu intensive app - and usually stays way down for a while after, so trying to narrow down what causes it to jump back up. So that isn't much of an issue anymore (So far. It occasionally behaved for a few days in the past, so will monitor). Maybe running a few more passes of Utilities did something positive. I've set min/max swap for C: drive (I installed SSD for it a few yrs ago along with a new motherboard and was on WIN-managed) and using Autoruns was able to remove a few apps that I no longer need. Maybe those changes will help keep it behaving.  As for toolkit, I haven't seen it since taking that screenshot. Searched entire C: drive (incl hidden) before removing any apps and no toolkit.exe. Never had any apps (like SeaGate) that use it. Awkward. 

Remerciements0

Re: WIN10 Server process high cpu/memory - utilities isn't doing anything about it?

Envoyé le: 2023-01-20 | 09:35 · Permalien

Thanks for the post-back. The file "ToolKit.exe" may be a part of software that manages your SSD, SeaGate and other manufacturers provide it as a separate download. I use SanDisk Dashboard on one of my machines. Check for software of that nature being installed. Also, DO NOT allow Windows OR Norton to run trim on your SSD. Doing so will cause issues and degrade the lifespan of your SSD.

SA

MS Certified Professional Windows 11 Home/Pro 22H2 x 64 build 22621.2361 - Windows 10 Pro x 64 version 22H2 / build 19045.3516 / Norton Security Ultra - Norton 360 Deluxe ver. 22.23.8.4 / Opera GX LVL5 (core:101.0.4843.85) 64 bit-Early Access w/Norton Chrome Extensions
Remerciements0

Re: WIN10 Server process high cpu/memory - utilities isn't doing anything about it?

Envoyé le: 2023-01-23 | 05:10 · Permalien

Thanks, my SSD is Samsung, Trim optimization is disabled;  toolkit.exe actually belongs to Norton Utilities. After behaving for a couple of days svchost again alternates between just high cpu and both high cpu/high memory usage. 

Remerciements1 Stats

Re: WIN10 Server process high cpu/memory - utilities isn't doing anything about it?

Envoyé le: 2023-01-23 | 11:24 · Permalien

Thanks. If you have Norton Utilities set for running when Windows boots, "Startup Optimizer", disable that setting and reboot the machine. Recheck.

SA

MS Certified Professional Windows 11 Home/Pro 22H2 x 64 build 22621.2361 - Windows 10 Pro x 64 version 22H2 / build 19045.3516 / Norton Security Ultra - Norton 360 Deluxe ver. 22.23.8.4 / Opera GX LVL5 (core:101.0.4843.85) 64 bit-Early Access w/Norton Chrome Extensions
Remerciements0

Re: WIN10 Server process high cpu/memory - utilities isn't doing anything about it?

Envoyé le: 2023-01-23 | 13:04 · Permalien

tookit only runs when I launch utilities, otherwise not running. 

Remerciements0

Re: WIN10 Server process high cpu/memory - utilities isn't doing anything about it?

Envoyé le: 2023-01-26 | 17:50 · Permalien

Update - I did a Windows 10 reinstall, keeping data & apps - but svchost still kept coming back with 25-30% cpu constant. Did a reinstall removing all apps; so far slowly re-installing apps and keeping an eye on metrics. I'll call this one solved with a white flag resolution :)

Thanks for the help! 

Remerciements0

Re: WIN10 Server process high cpu/memory - utilities isn't doing anything about it?

Envoyé le: 2023-01-27 | 05:43 · Permalien

Your welcome.

SA

MS Certified Professional Windows 11 Home/Pro 22H2 x 64 build 22621.2361 - Windows 10 Pro x 64 version 22H2 / build 19045.3516 / Norton Security Ultra - Norton 360 Deluxe ver. 22.23.8.4 / Opera GX LVL5 (core:101.0.4843.85) 64 bit-Early Access w/Norton Chrome Extensions

This thread is closed from further comment. Please visit the forum to start a new thread.