Our November Competition
User Reviews - Add Yours!
The PCHF Lounge
Go Back   PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs
Register for a Free Account

[Fixed] Hijackthis! Logs - Unknown possible problem posted in the Security & Safety forums; Hi, recently the midddle system svchost.exe that uses the most memory has been using up to 25% of the cpu . It will just go all of a sudden often ...


Reply
Free PC Performance Scan
Old 06-20-2008   #1
Tech Member
 
jakedude182's Avatar
 
Join Date: Oct 2006
Posts: 413
PC Experience: Some Experience
Default Unknown possible problem

Hi, recently the midddle system svchost.exe that uses the most memory has been using up to 25% of the cpu. It will just go all of a sudden often at least an hour apart, and use the cpu for a minute max. I have noticed that somtimes it does it when i have just connected to the internet, but not always. I have not had an event of it happening offline which I can recall. I have done scans with several apps, and they show no problems. This problem didn't happen in safemode.
I am not sure whether this is spyware, or somthing else, I have no idea about what it is or whetether it is ok/bad.

any help appreciated, thanks jake
Attached Files
File Type: log hijackthis v1.99.log (6.7 KB, 1 views)
__________________
jakedude182 is offline   Reply With Quote
Advertisement - Register to Remove
Old 06-20-2008   #2
Tech Member
 
ih8bills's Avatar
 
Join Date: Feb 2006
Location: coastal Rhode Island
Posts: 4,633
PC Experience: More Stubborn than any PC
Default Re: Unknown possible problem

While I defer to our security team for a double-check on your log
...25 % is not a lot.
Many system tools that run in the background-- could use that much.
What is svchost.exe And Why Is It Running? :: the How-To Geek

if you want to tweak your system--if your log is pronounced clean...
Black Viper's Operating System Guides
__________________


Without music, life would be a mistake
Friedrich Nietzsche

Last edited by ih8bills; 06-20-2008 at 02:27 AM.
ih8bills is offline   Reply With Quote
Old 06-20-2008   #3
Senior Security Analyst
 
Pancake's Avatar
 
Join Date: Jun 2006
Location: Victoria, Australia
Posts: 6,867
PC Experience: Elite PC Guru
Default Re: Unknown possible problem

Everything in your log looks fine .I see no problems.
__________________
  • An Australian Member of
  • and
My real name is Eddy
Pancake is offline   Reply With Quote
Old 06-20-2008   #4
Tech Member
 
jakedude182's Avatar
 
Join Date: Oct 2006
Posts: 413
PC Experience: Some Experience
Default Re: Unknown possible problem

ok, thank you ih8bills for those usefull links, I may disable a few unneeded services. Also thanks pancake for checking
I am looking at the services, and using the process xp program to look at all of the 7 svchost.exe instances, they all have information as to what they are. I didn't notice any unknown ones. I will try and find which threads are being used when the problem occurs.

thanks, jake
__________________
jakedude182 is offline   Reply With Quote
Old 06-20-2008   #5
Senior Security Analyst
 
Pancake's Avatar
 
Join Date: Jun 2006
Location: Victoria, Australia
Posts: 6,867
PC Experience: Elite PC Guru
Default Re: Unknown possible problem

Your welcome.
__________________
  • An Australian Member of
  • and
My real name is Eddy
Pancake is offline   Reply With Quote
Old 06-20-2008   #6
Tech Member
 
ih8bills's Avatar
 
Join Date: Feb 2006
Location: coastal Rhode Island
Posts: 4,633
PC Experience: More Stubborn than any PC
Default Re: Unknown possible problem

yeah-- everybody sees that svchost thing and says "what's that" ??

Not all bad... if it starts using 100% ... that's usually when there is a problem.
It's good to be cautious ...and it takes a bit to learn what's bad-- and what's just normal.

NOTE: When configuring with Black Viper's guides-- everyone's system is different... so it takes some trial-and-error.
Windows will tell you if needed services are disabled for anything to run.
__________________


Without music, life would be a mistake
Friedrich Nietzsche
ih8bills is offline   Reply With Quote
Old 06-20-2008   #7
Tech Member
 
jakedude182's Avatar
 
Join Date: Oct 2006
Posts: 413
PC Experience: Some Experience
Default Re: Unknown possible problem

This is what normally happens.
When I turn on the computer wuaulct.exe is running off the main system svchost.exe, which I can see in
process explorer. When I connect to the internet another wuauclt.exe appears and the cpu is used 25%
with svchost.exe for at least a minute before I get a windows update pop up message
from windows update.

Only this in most cases seems to happen at a random time when I am not installing an update, and
the windows update tray icon isn't there. As far as i know wuauclt.exe is always there
when the problem occurs, and wuaueng.dll is the main dll being used at around 25% when it happens.

Now i'm not really sure but believe this may be happening becuase windows update had previously
downloaded several windows defender updates automatically but without installing them, which I did not install later and asked windows update not to notify me again.

So a few days ago I set the updates to 'notify me but don't automatically download or install them', and the reason for this is because whenever I install a windoews defender update using windows automatic updates a restore point is created named Software Distribution service 3.0
And with this happening every few days I lose hard drive space. So I now download windows defender updates as a file manually on a microsoft site.

So now I am thinking, maybe all of the updates for windows defender (and outlook) that were downloaded but not installed are slowing wuauclt.exe (windows update down),and perhaps causing it to use cpu at random times. i don't use outlook, so i wasn't don't downloading the updates.



I then asked windows update to 'offer updates that i have previously hidden', and svchost.exe
used to 25% (anolther wuauclt.exe ran, and wuaueng.dll was used) like all the other times lol.
It just kept popping up to install these outlook updates even though I was not downloading them and asked them to stop notifying me, they had different KB numbers for each but looked like the same file. Microsoft is probably recognising I have the software, but not the updates. So i installed one, and the problem has not occured since yet.
(in the screenshots the read and green '.msp' files keep showing and then dissapearing quickly loads of times for about a minute till svchost.exe has stopped using the cpu- even when updates are not being installed or downloaded)

thanks, jake
Attached Images
File Type: jpg new 2.jpg (207.0 KB, 5 views)
File Type: jpg wuaueng.dll with wuaulct.JPG (146.7 KB, 3 views)
File Type: jpg setting to stop.jpg (200.2 KB, 2 views)
File Type: jpg re appearing updates.jpg (204.7 KB, 1 views)
File Type: jpg to post.jpg (207.1 KB, 1 views)
__________________
jakedude182 is offline   Reply With Quote

Reply


Bookmarks

Tags
fixed, Fixed:, problem, unknown, [Fixed]
Similar discussions...
Thread Thread Starter Forum Replies Last Post
Unknown Problem SquirrelsOfWar [Pending] HJT Logs 5 04-03-2009 01:11 AM
Pending: Windows Xp has unknown problem pirky Windows XP/2000 3 01-30-2009 09:28 AM
Question: Help with unknown virus? Jack4992 Windows Vista & 7 1 11-27-2008 08:54 PM
Explorer Problem and unknown pop up vnoeal [Fixed] Hijackthis! Logs 7 09-02-2008 11:20 PM
Unknown USB Device vicond Windows XP/2000 1 12-25-2005 03:47 AM

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On




All times are GMT. The time now is 08:05 AM.
Powered by vBulletin
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.3.2