Windows 10: We have an issue with high cpu utilization by svchost.exedcom launch process and its...

In the Registry, Excel is creating Trusted Records under the Trusted Documents key. How long are these trusted records retained? Is there any configuration/setting that can be changed to govern the retention period?Is there a limit to the number of trusted records? Does exceeding any limit change the behavior of svchost.exedcom launch process and related services?Are there known issues with large volume of trusted records and high cpu utilization by the svchost.exe dcom launch process and related services?Is there anything that can be done to control/limit or otherwis

:)

 

We have an issue with high cpu utilization by svchost.exe(dcom launch) process and its services. Kindly see questions below.

In the Registry, Excel is creating Trusted Records under the Trusted Documents key.

1. How long are these trusted records retained?
   
2. Is there any configuration/setting that can be changed to govern the retention period?
   
3. Is there a limit to the number of trusted records? Does exceeding any limit change the behavior of svchost.exe(dcom launch) process and related services?
   
4. Are there known issues with large volume of trusted records and high cpu utilization by the svchost.exe (dcom launch) process and related services?
   
5. Is there anything that can be done to control/limit or otherwise reduce the high cpu utilization?
   
6. Is the paged pool or non-paged pool used for the trusted documents/records?
   
7. If the volume of entries in the Trusted Records registry grows large (50, 70, 100K) can the entries be paged out to the pagefile?
   

This is on WIndows Server 2016 Standard, no service packs applied.

 

svchost(netsvcs) utilizing 25% of CPU def_update looping 1.237.1259.0

Hi team,
I am running windows 10, version 1067.
For past 1h my cpu is running high, and i have narrowed down issue to proces:
svchost(netsvcs) pid 576 to be utilizing cpu.



I've noticed that on windows update page, windows is trying to download
"Definition Update for Windows Defender - KB2267602 (Definition 1.237.1259.0)." and it is stuck in a loop there, trying to download and failing.



I tried rebooting notebook, but as soon as it boots up cpu usage is high again.
Windows defender seem to be updated with definitions mentioned above 1.237.1259.0




dump files for svchost.exe are ~200MB so can't really upload them here, but if anyone would find it helpful i will put them on dropbox.

Thanks

 

Analyzing Svchost processes in Windows

Here's how to track down detailed information about any Svchost.exe process running in Windows 7/8.

a) You can use the Tasklist command-line tool to learn which services are running in a Svchost.exe. Just run cmd (command prompt) and hit

Tasklist /svc /fo list

Scroll through the list and find what you need. It's not quite intuitive so you can use third party programs with gui. See below:

b) You can use svchost viewer. Best utility. Note: to run this under XP you need .Net framework 2.0





c) Svchost Process Analyzer is another app for that.





d) And another app called Svchost lookup tool





e) And it won't hurt if you use Process Explorer and System Explorer.


It's never bad to keep your system under control, plus all these apps are portable no installation is required.

kthbai