Identifying the Process
1. The Svchost.exe groups are located in the registry key:<br /><br />HKEY_LOCAL_MACHINE\\Software\\Microsoft\\WindowsNT\\CurrentVersion\\Svchost<br /><br />Each of the separate instances appearing as active process under this key contain ServiceDLL values under the key:<br /><br />HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Service
2. Svchost may be taking too much CPU time and this could be caused by a bug related to the Windows Update Service for automatically downloading Microsoft updates to your machine. Stop and disable the Windows Automatic Update service by clicking on \"My Computer,\" \"Manage,\" \"Services and Applications,\" \"Services,\" \"Automatic Updates\" and changing its startup type to \"Disabled.\"
3. Due to a virus, the Svchost.exe file may occasionally crash your computer. Replace the file by browsing on the Windows Installation CD to the i386 folder.
4. Locate the compressed SVCHOST.EXE file and expand it using the command: <br /><br />C: SVCHOST.EXE_ C: SVCHOST.EXE
5. Boot into Linux or from the rescue Windows CD and copy the file to the folder C: WINDOWS\\System32.
6. Patch Windows using FIX KB958644 from the Microsoft website (see Resources).
Using Windows Recovery Console
7. Insert the Windows CD to repair all corrupted system files.
8. Boot the system from the CD.
9. Select the \"Repair\" option and follow the wizard to completion.
Memory Leaks in Svchost.exe
10. Memory leaks are caused by inefficient memory use by the Remote Procedure Call Server Service (RPCSS), resulting in memory leaks in Svchost.exe.
11. Obtain the Microsoft COM+ Rollup HotFix 14 from Microsoft (see Resources).
12. Changed registry keys are caused by viruses, spyware, adware and trojans, and these can affect svchost, which is an integral application for these forms of malware. Download and scan the registry using a registry cleaner software to repair and clean invalid registry entries.
Read more ►