The svchost exe process loads the windows 7 processor. What is Svchost? Fixing Tunnel Adapter Issues

12.05.2019 Errors

In Windows 7, the most important process in the OS is Svchost.exe... Very often, Windows 7 PC users encounter a problem when this process heavily loads the processor. The load of processor cores can reach from 50 to 100 percent. Svchost.exe is an host process responsible for starting group services from dynamic DDL libraries... That is, the system uses this host process to start a group of services without creating unnecessary processes. This approach reduces the load on the processor and RAM. If the system slows down and Svchost.exe loads the processor heavily, this means that the OS is not working properly. This behavior of the system can be caused by malware, as well as malfunctions in the operating system itself. To deal with this problem, in this article we will look at all the ways to solve the problem with a high CPU load caused by the Svchost.exe process.

First steps to troubleshoot Svchost.exe process

If you have a situation where the Svchost.exe host process is heavily loading the processor, then you should not immediately think that it is a virus. In addition to a virus, the OS itself may be the culprit for this problem. Below we will consider list of problems, as well as methods of fixing them:

Restoring normal processor operation using antivirus

If the above methods did not help, then most likely your Windows 7 infected with a virus... Typically, virus infection occurs from the outside. That is, via the Internet or via an external data storage device. If you have a good antivirus, then most likely the virus will not work. But there are times when antiviruses do not see new versions of viruses and let them pass. If your computer is infected, the Svchost.exe host process will load the processor up to 100 percent, and in the username you will see not the system names "LOCAL" and "NETWORK SERVICE", but a completely different name.

To get rid of the virus in the system, you need run full scan computer in Windows 7 to search for malware. Below we will look at an example of running a full computer scan using Comodo Internet Security antivirus. Also, before starting any anti-virus to check the OS, update its anti-virus database. Let's move on and launch the antivirus Comodo Internet Security.

In the main window of the antivirus, go to the bottom tab “ Scanning”And a menu will open from which you can select scan options.

In our case, you need to select the item " Full scan". This option will scan the entire hard drive, identify malware and neutralize it... Shown below is the Comodo Internet Security scan window.

In other anti-virus programs, the principle of running a full PC scan is as similar as possible to the one discussed. Therefore, if you have a problem with the Svchost.exe host process, then feel free to run a full PC scan.

For this example, we chose Comodo Internet Security antivirus for a reason. This antivirus has a built-in module called KillSwitch(this module is currently part of the free set of utilities COMODO Cleaning Essentials, which you can download).

This module is a task manager that has advanced functionality. For instance, KillSwitch can stop the process tree and revert back the changes made after that.

Also a feature of KillSwitch is checking running processes for trust... That is, if the process is untrusted, KillSwitch will find it and indicate this in the third column “ Grade". This feature of the KillSwitch module will help you more quickly identify the issue related to Svchost.exe and CPU usage.

It is also worth mentioning when the virus infects the antivirus itself or is reliably masked from it, as a result of which the installed antivirus does not see it. In this situation, a boot disk will come to the rescue of the user. This disk is a Linux-based portable operating system that boots from it. After booting from this disk, the user will be able to run a PC scan directly from the loaded operating system.

Such a check should find and neutralize viruses that force Svchost.exe to load processor cores. Most known viruses which load the processor using Svchost.exe are:

« Virus.Win32.Hidrag.d"- is a virus written in C ++. Once in the system, he replaces Svchost.exe... After that, it searches for files with the "* exe" extension and infects them. The virus is harmless, it does not harm the system and does not steal information. But constant infection of files with the "* exe" extension puts a heavy load on the processor.
« Net-Worm.Win32.Welchia.a"- this virus is an internet worm that overloads the processor through internet attacks.
« Trojan-Clicker.Win32.Delf.cn» - a primitive Trojan that registers a new Svchost.exe process on the system to open a specific page in the browser, thereby loading the system.
« Trojan.Carberp» - a dangerous Trojan that also disguises itself as Svchost.exe... The main purpose of this virus is search and theft of information from large retail chains.

High CPU usage due to Windows Update

On computers running Windows 7, a situation is often observed where the Svchost.exe process loads the processor and memory because of the update center... To check what exactly the update center is loading memory and processor, you need to go to " Task Manager"And use Svchost.exe to navigate to the services it is currently controlling. An example of such a transition is shown in the image below.

After such a transition, a window with services should open, where the service " wuauserv».

This particular service responsible for downloading and installing updates seven. The fix for this problem is quite simple.

In the Task Manager Services window, you can completely stop "wuauserv" or disable checking for updates in the control panel.

But disabling the "wuauserv" service is an ugly way out of this situation.

Disabling this service violates the security of the OS as a whole, since the installation of updates through the update center will be disabled.

You can solve this problem by manually installing updates. In order not to download dozens of updates from www.microsoft.com and then install them for a long time, it is best to use a set of updates UpdatePack7R2... The developer of this set is “ simplix», Who is also known by this nickname and is a moderator on the www.oszone.net forum. You can download this set at http://update7.simplix.info. At the moment, the website has the latest version under the number 17.12.15. After downloading the kit, you can start installing updates. To do this, run the installer.

In the window that appears, click the Install button. After that, the process of installing updates will begin.

This process can take quite a long time and depends on the number of updates already installed. You can constantly update Windows 7 in this offline way, since the author of the project is constantly releasing new sets. Also, after completing the installation of updates, you can restart the update center. This time, the memory and cpu issues should go away as these updates contain a fix.

Conclusion

In this article, we have covered quite extensively the problem associated with high CPU utilization due to the Svchost.exe process. Based on this, our readers will certainly be able to solve this problem and ensure the normal operation of the computer.

About the svchost system process

Svchost is an abbreviation for "Service Host". This is the main Windows system process. It was first implemented in the Windows 2000 version and reached Windows 10 - the latest version of the Windows operating system for today. As an example, the operation of the svchost process in Windows 7 is considered. The svchost process is the Generic Host Process for Win32 services component.

What is it needed for

The svchost process is an advanced mechanism for optimizing PC performance. It performs important functions:

saves random access memory (RAM), timely freeing it from the processes of other programs, work with which has been completed;
improves resource utilization of processor performance.

How to start

Each time Windows starts, the svchost process is started from the svchost.exe executable file in multiple copies. Svchost.exe is initiated by another system process - services.exe, a Windows component responsible for the operation of all Windows system services.

The svchost.exe program runs for services stored in the Windows registry at: HKEY_LOCAL_MACHINE \ System \ CurrentControlSet \ Services \ (where - service name) in the ImagePath column;

For example, the ComputerBrowser service (service name Browser) is initiated as% SystemRoot% \ system32 \ svchost.exe with the -k netsvcs option. Redistribution and accounting of running processes in accordance with the information in the registry entries HKEY_LOCAL_MACHINE \ Software \ Microsoft \ WindowsNT \ CurrentVersion \ Svchost - where each key or subkey matches the group name, and the key value corresponds to the list of service names "bound" to the group.

Open the Windows registry to view the svchost directory

How Host Process Works for Windows Services

The svchost.exe processes are one of the most important shared resources of the Windows operating system. Any program that comes to your PC accesses it.

Each of the running copies of svchost.exe has its own settings, which are determined by dynamic DLLs of the Windows system. This is the basis of the mechanism for optimizing the use of processor and memory resources. Simply put - the PC "flies" from it even when several programs are running simultaneously.

Failures of this important "brick" for the "life" of Windows - the svchost.exe process - can lead to the inoperability of the entire system.

How svchost affects the processor and RAM

It would seem that work and do not know any problems. However, the svchost.exe process often pretends to be viruses, all kinds of Windows spyware and adware applications.

Disguise viruses and trojans

The imitation of the svchost.exe system process is as follows. As you know, these malicious programs place their executable files not in the \ Winwows \ system32 folder, but in another folder, for example, Net-Worm.Win32.Welchia.a - it is created in the same Windows system folder. Antivirus programs are able to isolate it from reading / writing, or even remove it altogether ("network worm" means "network worm").

The svchost.exe system process is not a virus but a Windows component. It never starts from the Run folder of the Windows registry, but is executed only through the system services algorithm written by another Windows component - services.exe. This means that it should not be in the msconfig startup folder.

How to make sure it's safe

Test the svchost process to make sure it is viral. For example, Security Task Manager will help you make sure that the security of your PC is in doubt by checking the "cleanliness" of the copy of Windows installed on your computer.

The process starts to load the computer - the solution to the problem

Sooner or later, the day will come when the svchost process will slow down Windows. You can see it right away - it is a copy of svchost.exe, "eating away" from tens to two-three hundred megabytes of RAM.

Restart this process

And it also "loads" the processor a lot - you will see how it will take 90 and more percent of its performance. In this case, the implementation of any tasks will be very difficult.

There is a solution - and more than one!

Reboot your PC

It would seem to take and restart Windows. This solution is point-by-point - where is the guarantee that the svchost process will not "grow" again? Give the command Start - Shutdown - Restart. Windows will restart.

Restarting svchost from Task Manager

Attention! Forcibly stopping the related services and terminating the svchost.exe processes can severely crash the Windows operating system.

Check for Windows Updates to restore the svchost process to work

Installing Windows updates to fix svchost can come in handy when a licensed copy of Windows is installed on the computer. If there is a “custom” build of Windows, Windows “patchers” (activators) may crash, the desktop splash screen will disappear, and when you start any standard Windows applications, you will be bored with a window asking you to activate your copy of Windows.

Follow the steps below to update Windows.

If the svchost "overload" problem persists, skip to the next action plan.

Recover Windows from milestone

To start recovering your system, do the following.

1. In the Main Menu, search for the word "recovery".
  Select Windows System Restore
2. Run the Windows Files and Settings Recovery tool.
  Click this button
3. Select the box to roll back Windows to the date before the svchost.exe process malfunctions
  Select the desired date and time
4. Confirm Windows System Restore at the indicated mark.
  Click to start
5. Please confirm again.
  Confirm the process
6. Windows will now launch the repair tool and end the current session, restore the system files, and restart. After restarting Windows, an information window will appear indicating the success of the process. Close it.
  Close it up

It happens that these actions did not help to restore the normal operation of the svchost.exe host process. Then maybe it is worth digging into the Windows system folder?

How to fix the error by cleaning the system Prefetch folder

The system writes data about installed and launched applications to the \ Windows \ Prefetch folder. It also stores data for components and standard Windows applications. As you install new programs and remove unnecessary programs, the contents of the Prefetch folder grows. If you clear it, the necessary data of the programs currently running will be written by Windows from scratch.

If you allow writing only system data to the Prefetch folder, the Windows system will work somewhat faster, and the overflow of the resource occupied by the svchost.exe processes will be slightly reduced. For this we need the Windows Registry Editor.

Setting up and cleaning the \ Windows \ Prefetch folder didn't help? It's time to check if the Windows system has gotten viruses and other unwanted nasty stuff.

Checking your PC for viruses and other malicious applications as a way to fix the error

Everything flows, everything changes - progress does not bypass the antivirus applications either. This software package is Kaspersky (Anti-Virus + Antispam), 360 Total Security, Dr. Web CureIt, NOD32, Panda, Avast, VirusTotal, etc. First, remember: the svchost component is located in the following Windows directories: \ WINDOWS \ system32, \ WINDOWS \ ServicePackFiles \ i386, \ WINDOWS \ Prefetch and \ WINDOWS \ winsxs \

If "left" directories are specified in the Windows system folder - as well as all sorts of combinations of the svchost.exe file name maliciously typed by cybercriminals with typos, syntax errors - antiviruses will delete such entries, rightly considering them viral. The list of "left" svchost.exe files can be endless - an unpretentious and cheap way to bypass Windows protection. The information is sent to the servers of the respective antivirus vendors.

If no malicious programs were found, and the "recalcitrant" copy of svchost.exe continues to "load" the computer, try other methods.

Other ways to normalize the svchost process

There can be dozens of these methods. Here are some of them.

Simultaneous application of several anti-virus programs

You can run a scan in two or more anti-virus programs - for example, first in NOD32, then in Kaspersky Anti-Virus, then call Avast for help. Checks are limited only by your imagination. Do not run two or more anti-virus packages at the same time - they can interfere with each other, your already "slow" PC will freeze altogether.

Windows backup

Creating an "image" of a running Windows operating system, along with installed applications and drivers for your hardware, can help. Before creating a "image" of Windows, you need to select exactly those applications that you have been using in your work for a long time. Installation of all software occurs automatically and in one go. For example, this is how the well-known Windows XP ZverDVD disk was made.

Checking the SystemVolumeInformation folder

This is another "secret" folder where Windows recovery marks and other service information are written. Unlike the Prefetch folder, the System Volume Information folder is located at the "root" of each of the hard disk partitions, it is hidden and write-protected.

Many Windows users just clean it up. But remember that by clearing the contents of the System Volume Information folder, you will not be able to restore (rollback) Windows. On the other hand, virus files can get into it, bypassing the write protection of this folder through the vulnerabilities of the Windows operating system, so cleaning the folder is very arbitrary.

Reinstalling the operating system

This is the easiest and most painless way. Remove the "sick" and "littered" Windows system - and install a "fresh" and "clean" one. Having at hand an installation CD or "flash drive" with a Windows "image", you can do it in less than an hour. During the installation process, it is recommended to format the hard drive partition where you usually install Windows. Reinstalling Windows will really get rid of all problems, including the "buggy" svchost.exe process - but it has one drawback: reinstalling PC drivers and other programs that you previously used.

How svchost.exe netsvcs process overloads your PC - and how to turn it off. Step-by-step video tutorial

The svchost.exe process is one of the whales behind the concept of Windows multitasking. Keeping this “pillar” in action is one of the top priorities. The svchost component actually saves your computer from lags and freezes. Good job and good health to your system!

Svchost.exe (service host) is a file and process of operating systems of the Windows family. Its task is to load and execute internal services from dynamic link libraries (files with the .dll extension), ensuring the operability of almost all components of the operating system. Figuratively speaking, svchost.exe is the liver, kidneys and lungs of Windows, without which its existence is unthinkable. But why do these "vital organs" sometimes create so many problems for us?

Today we'll talk about what to do if svchost.exe loads the processor, preventing it from working normally on the computer.

Reasons for loading the system by the svchost process

Since svchost.exe provides a significant part of system services, there can be many reasons for the intensive load on the processor. The most common ones are:

Viral infection.
Too high network congestion, for example, with many open slots in uTorrent.
Errors in device drivers (sound, network, etc.), since the latter closely interact with system services.
Damage to operating system files (in particular, the service host itself and various dynamic libraries).
System services errors.
PC hardware malfunction.

Sometimes this is the result of unsuccessful pirated Windows activation (not all activators are equally useful) and hacked programs.

How to determine which service is loading a service host

To view the services running in the loading host process, a built-in or alternative task manager is suitable. In the first, the information we are interested in is contained in the section " ProcessesWindows". Each host process is displayed in it under the name " Service Host».

The green box in the screenshot shows a list of services from one svchost process.

As an alternative to the stock Task Manager, I prefer the free one from Sysinternals. In it, just hover the cursor over a line - and all the necessary information will be displayed in a pop-up window.

If more than one service is running in the loading host process, you will have to search for the one that causes the problem using the brute force method:

Open the application " Services"(The open button is located at the bottom of the task manager tab of the same name).

Disable the first service from the list of the loading service host: open its properties from the right-click menu and select “ Launch type» « Manually" or " Disabled».

Restart your computer. If the problem persists, start this service again and disable the next one.

Problem service found, what's next?

Then proceed according to the situation. If the failure is caused by a minor component such as Superfetch(quite a common problem for Windows 8 and 10 users), just leave it disabled. If the service is hardware related (audio, network, etc.) - try updating or rolling back the device driver. In case of problems with Update CenterWindows(often found on "sevens" and XP), in 90% of cases, disabling the check for updates helps. However, a complete refusal to install system updates is a big security hole in Windows, so it's better to switch it to manual mode.

If svchost starts to load the processor after installing Windows updates, applications or drivers, or uninstall the source of the failure.

In some cases, cleaning the folder helps \ Windows \ Prefetch where the trace files of the Prefetcher are stored - a system component that accelerates the loading of the system and programs.

How to unload the network

Too much network congestion, network driver errors, failures of applications using the Internet, network viruses (worms) become the source of the problem, perhaps in half the cases. To check this version, disable the network adapter in the device manager and restart the PC. If the load on the processor has returned to normal, the cause has been found, and it remains to find the culprit.

It helps to reduce the processor load by network components:

reducing the number of simultaneous downloads and torrent distributions;
prohibition of access to the Internet for programs for which it is not necessary (especially if there are many of them);
shutdown of network programs when they are not in use;
cleaning temporary folders (temp) - they may contain under-downloaded files that rocking applications are trying to download to the end;
antivirus scan for network worms;

Another "disease" plagued Windows 7 for quite a long time. With it, the CPU utilization by the svchost process reached 100% and decreased only when the network was disconnected. The reason lay in the rampant "proliferation" of virtual tunnel adapters Microsoft 6to4, of which several hundred were sometimes created.

To check if this is your case, open the device manager, go to the menu " View"And check the box" Show hidden devices". Next, expand the list of network adapters. All "Microsoft 6to4" clones, if any, are located there.

To fix the problem, simply delete the redundant copies of the virtual adapters. This can be done either manually one at a time or automatically - all at once. For automatic removal, you need a console utility, which is available for download on the Microsoft MSDN website.

After unpacking devcon to your hard drive, run command line as administrator and follow the instructions C: \ devcon.exe remove * 6to4 *(replace C: \ with your path to devcon.exe). To prevent the situation from repeating, update your operating system.

Today, the problem with 6to4 adapters has already been fixed by the developers and is only encountered by those who do not install Windows updates.

And if it's a virus? How to distinguish malicious svchost from normal

A malicious program can:

Create a copy of yourself on your hard disk under the name svchost.exe, which will be located anywhere except the directory \ Windows \ System32 because it contains the system file of the same name. That is, disguise as a system process.
Inject your DLLs into one of the legitimate host processes.
Modify (patch) the svchost.exe system file by placing your own executable code in its body.

Some users are intimidated by the too large, in their opinion, the number of running host processes. In fact, this indicator does not mean anything bad. The number of svchost processes on a normally working system is 8-9 or more. Each of them runs one or more services - this can be seen in the task manager. Services are divided into groups depending on the level of access to resources they need, so there are several processes.

Most normal host processes run on behalf of the system, network service and local service. Before the release of Windows 8, any service host launched on behalf of a user was automatically recognized as a virus, but now this is only true for Windows 7 and its predecessors. In the G8 and Ten, one service host running on behalf of the user is the norm.

At least one of the following signs indicates that the host process is running or is being used by a virus:

The host process file is NOT in the folder \ Windows \ System32.
An unknown service is running in the process or a non-system library (.dll) is loaded into it.

On Windows XP-7, the host process is started as a user, and on Windows 8-10, there is more than one host process as the user.
The Parent of a normal service host is always Services.exe. When infected with a virus, anything can be done instead.

The screenshots show ProcessExplorer launched as administrator. To view the list of dlls loaded into the service host, select the last one with a mouse click and press Ctrl + D on the keyboard. To find out its parent process, click the " Properties"In the upper panel of the program and open the tab" Image».

What to do if svchost.exe gets infected with a virus

It is important to figure out exactly where the infection is hiding: in the system file svchost.exe itself or in the one that uses it. If a system file is infected, in no case delete it, but replace it with a clean one, taking from a similar copy of Windows (for this you have to boot the computer from another media). Malicious libraries, on the other hand, must be removed completely.

How to check system files for errors

Most of the dynamic libraries from where the service host loads the services are native Windows files, the smaller part are device driver components. System file errors can be corrected by the console utility sfc.exe.

Run command line as administrator and follow the instructions sfc /scannow... The / scannow option means "immediately check and replace any corrupted files from the cached copy."

The results will be shown after the end of the check in the same window.

What to do if all else fails

In quite rare cases, one hundred percent processor load svchost.exe is not eliminated even by reinstalling Windows. The culprits of such situations are faulty drivers or even the devices themselves - network adapters, audio codecs, RAM (the latter's errors sometimes appear very bizarrely), or something else. There were times when the problem was solved by the computer.

If you suspect the hardware, the first step is to completely reinstall all drivers using known stable versions. Check the devices by turning them off one by one - in the BIOS or, if possible, physically. If you find the source of the problem, replace or repair the problem unit.

Svchost.exe (netsvcs) service: what is this process?

Let's take Windows 7 as a basis, since the problem with this service is not so pronounced on systems with a higher rank.

It was starting with the seventh modification of Windows that the developers decided to make the system faster, using for this, as they believed, a universal solution, the essence of which was not to call the executable file of some system or user process, but to start it through one service in background.

How the service works

If you look at the list of processes in Task Manager, you can see several Svchost.exe services (netsvcs). What this is and why this is happening will become clear if you understand the basic principles of this component's operation.

In general, processes can contain from four (minimum) or more such components, but they all belong to the same group (netsvcs). The principle of the process is to launch system processes through special svc hosts using the Services.exe tool. In this case, the accompanying components of any program (for example, dynamic DLLs, which are not accepted for execution by the system in the usual way) are loaded into RAM. It is believed that this allows you to speed up the start of executable applications (including custom ones).

Why does the process load RAM and virtual memory?

But why then does the Svchost.exe (netsvcs) process load Windows 7 memory? The decision to eliminate such a problem will have to be made based on the reasons for this behavior of the system. Among them, the following are called the main:

the impact of viruses masquerading as Svchost.exe processes;
malfunctions of the Windows update search and installation tool;
accumulation of computer garbage when surfing the Internet;
tunnel adapter problems;
Prefetch service enabled.

It should be noted that the Svchost.exe (netsvcs) process loads physical memory (RAM and virtual, which uses the space reserved on the hard drive to load program components when there is not enough RAM).

In the simplest case, overloading can be eliminated by a simple system restart. But this gives only a short-term effect, as well as the completion of each process in the same "Task Manager". Therefore, you will have to use drastic measures.

Scanning for the presence of viruses and malicious codes

First of all, you need to determine the presence of viruses masquerading in the system as Svchost.exe (netsvcs) processes, by their attributes in the "Task Manager". On launched services with a username, the process description can only contain the Network Service, Local Service, or System attributes. If something else is specified (most often Admin), you need to start checking right away.

In the simplest version, you can use a standard scanner, but in most cases this does not work (after all, apparently, the antivirus has already missed the threat). Most experts recommend using independent utilities, among which one of the most powerful is Rescue Disk from Kaspersky Lab. Antivirus can be loaded from a disk or flash drive even before Windows starts, and at the same time it is able to find viruses, even those that are very deeply integrated into the system.

Svchost.exe (netsvcs) loads Windows 7 memory. Solution - System Update Service

Many experts cite problems with the Update Center as another common problem. It so happens that Svchost.exe (netsvcs) loads the processor (Windows 7) for no apparent reason (as it seems). But there is a reason. It consists in the fact that some updates could be underloaded, so the system tries to download and install them again and again.

Disabling the search and installation of updates through the "Update Center" called from the "Control Panel" may not work (even if you set the automatic search mode and offer installation at the discretion of the user). In this case, it is best to use a command line running as administrator, in which three commands are written, followed by pressing the enter key after each of them (for any version of Windows):

to stop the service - net stop wuauserv;
to disable background intelligent transmission - net stop bits;
to deactivate delivery optimization - net stop bits.

Terminating related processes

Now let's look at another option for deactivating Svchost.exe (netsvcs) processes. How do I disable service-related components? First, you need to find out which processes are "attached" to it and are called at system startup, but are absent in the automatic boot menu.

To do this, in the "Task Manager" you need to find all the search lines containing Svchost.exe (netsvcs), sorting the processes in alphabetical order.

On the selected process, through the right-click menu, you need to go to services using the appropriate line.

Each service can be stopped right here or you can open the service management section (you can also do this through the Run menu (Win + R), where you enter the services.msc command. But this option is somewhat inconvenient only because you have to remember the name of each service, and then look for it in the service tree.

Further, a double-click brings up the settings menu, where the service is either stopped by the corresponding button, or it is assigned a different startup or complete shutdown priority. But you should not overdo it, because you can disable important system processes, which can negatively affect the operation of the entire OS (up to a failure, after which you will have to restore or roll back to the previous operable state).

Removing computer junk and optimizing the registry

In some cases, the load on the system from the Svchost.exe (netsvcs) processes may be associated with a banal clogging of computer garbage.

Cleaning on your own is a very troublesome task, therefore, to simplify the work, it is worth using optimizers like CCleaner, Glary Utilities, Advanced SystemCare, in which for scanning you need to note not only deleting temporary files or clearing the cache, but also enable searching for problems in the system registry, followed by fixing or removing invalid keys and even defragmentation.

Troubleshooting Tunneling Adapter Issues

Uncommon, but there is a problem with the Teredo tunnel adapter. At the same time, even some of its controls can hang corny. The way out of this situation is to disable the corresponding protocol (especially if it is enabled by default, but not used).

To deactivate it, you need to run the command line with administrator rights and write two commands: netsh interface ipv6 set teredo disable and netsh interface teredo set state disable, and after they are completed, restart the computer terminal.

Checking the status of the SuperFetch service

Finally, another global problem, albeit partially related to Svchost processes, is the activated service for storing frequently used programs and applications to optimize or speed up their launch, which is called SuperFetch.

You can disable this component through the services management section (services.msc) with the choice of the desired startup type or perform similar actions in the system registry, which is not very convenient.

But, as it is believed, the simplest method to reduce the load on system resources in relation to this particular service is to delete the Prefetch folder, which is located in the Windows root directory on the system partition. After that, it will be possible to terminate all Svchost processes in the standard "Task Manager" and perform a complete restart of Windows.

Outcomes

What can be said about the considered processes, if we summarize some results and draw conclusions? Among the main reasons for the increased use of system resources, and especially in Windows 7, the main ones are the problems of exposure to viruses, failures in the operation of the update service and the SuperFetch service. But this situation in most cases manifests itself on low-power computers that are too weak to simultaneously support the optimization of the launch of a large number of resource-intensive programs. And, what is most interesting, most often the main blow is taken not by the processor, but by the RAM, the use of which in some cases can reach even one hundred percent. The lack of RAM leads to the fact that the system begins to actively use virtual memory (hard disk space), which leads to a strong slowdown when accessing the hard drive.

As for solving this problem, you should use each of the above methods. But you have to be extremely careful not to complete some systemically important process (although in this case, a spontaneous reboot with recovery may simply follow). But the SuperFetch component on modern machines with large amounts of RAM and powerful processors should not be disabled. This solution is applicable only in the case of outdated computer equipment.

An actual problem for Windows 7 users is the Svchost.exe process, since all of them, without exception, faced the problem when it loads the computer's processor as much as possible. The article proposes five methods for solving this problem.

What is Svchost?

Is it a virus or an operating system service? Svchost.exe is a service that is used for programs that open from DLLs. It appeared in the operating system since 2000 and is still in use, Microsoft began to use one service for the functioning of several programs, justifying this by the fact that this solution will reduce the cost of processor time and RAM. Therefore, a number of disadvantages have appeared, which are reflected in this article.

It should be noted that cybercriminals often assign the name Svchost.exe to their virus programs. And this is a very effective technique for them, because in this case the owner of an infected Windows 7 computer sees only a large number of processes called Svchost.exe that load the processor and it can be very difficult to isolate the consequences of work, for example, Trojans.

In this case, users generally do not dare to stop the Windows system process and continue to look for other virus activities. So a simple name change can effectively steer the victim down the wrong path.

Attention! You need to know the following - svchost.exe is a Windows process and any possibility of running it as a user is completely excluded.

This system process is launched only from LOCAL or NETWORK SERVICE, SYSTEM, and it functions only through system services. In cases where svchost.exe is run under some other account, it is virus software. In the example in the screenshot below, everything is fine, as it should be.

Problem solving methods

Let's list 5 effective methods for solving the problem if Svchost.exe loads the processor on Windows 7:

A restart of the PC is required (sometimes it helps).
Analysis for the presence of computer infections by viral processes. Perhaps you can do it manually, but it is easier to use a specially designed antivirus program. Of course, manual analysis of processes in Win will take less time to identify the reasons that load the processor, but scanning with an antivirus program is still more effective. The most optimal option is to perform a preliminary analysis yourself, and then run the antivirus program.

In the "Task Manager" you need to enter the "Processes" tab. In order to speed up the analysis process, it is necessary to sort by the degree of processor load by clicking on "CPU".

As a result, the processes that load the processor the most will be located at the top. Most likely, svchost.exe will occupy the top line. In the "User" column, you need to look at the name of the process. If SYSTEM, LOCAL and NETWORK SERVICE are displayed, then everything is fine. Otherwise, an analysis of the system with an anti-virus program is urgently required.

In order to find out the name of the program that works with svchost.exe, you need to click on "Go to services" by calling the context menu.

All data about programs currently running with svchost.exe will be available here.

Then, step by step through the names of the programs, it is possible to identify the problematic service. The most common processor load is "IP Helper Service" or "Windows Automatic Updates". Their actions can temporarily be quietly and without prejudice to the functionality of windows, turn off and analyze what happens.

It is not uncommon for an antivirus scan to detect no infection. This can happen due to an antivirus infection.

In this case, you need to use free antivirus utilities that do not need installation. Examples of such programs are: Kaspersky Virus Removal Tool, Kaspersky Security Scan, DrWeb Cureit. It is required to download them to flash memory and, having booted in safe mode, analyze the entire operating system win.

Start Windows Update Service. If updates are found, install them.
Start the Windows recovery process.
Clear all contents of the Prefetch directory, which is used to speed up Windows startup.