svchost?

[rplaw]

My computer has been getting bogged down and constantly running at 100% CPU and almost that on my page swap file capacity. It's ancient and runs on WinXP. I only have 2gb RAM on this one too.

I know what svchost does, it's an application program to help windows manage multiple applications which need swap file space at the same time. It can handle more than one program at a time but I don't know how many programs all at once it's able to do that for.

Currently Task Manager says I have separate 9 svchost applications running simultaneously. I have a feeling at least 1 of them is a trojan but I can't end program them through task manager - access denied.

I did clear my application/security/etc logs and that helped but nine svchost applications running at once? My antivirus doesn't find anything when I run it but I still have concerns.

Is this normal? I seem to remember having no more than 3 or 4 running at one time in the past on this machine, but that's no longer the case.

Anyone a certified techie who can help ease my mind?

[Epaphroditus]

Years ago I installed several distributed computing programs (on hundreds or computers!) that ran in the background at low priority so they didn't interfere with users but they constantly had processors pegged at 100%.

Thing like Fold@home protein folding computation and SETI app to analyze ratio signals from space (looking for aliens).

Any chance something like that?

[Epaphroditus]

2GB is not much even for XP. Any chance you max add more RAM? I always opted to max RAM.

There is an obscure setting that let's you set the amount of RAM windows takes ... I think you can set it to only 1GB. I'll have to dig around a bit to get specifics.

Any chance you can upgrade to SSD? It's an amazing performance booster.

[SactoDoug]

Open your service manager. Right-click on your start menu and select run. Then type in services.msc. That will open your Services Manager. Carefully go through the long list and stop and disable any that you know for sure you do not need. If you are not sure about one, just do a search for it on the internet.

When you are done, restart your computer.

If you change your mind about a service, you can just open up the Services Manager again and re-enable any that you disabled.

[arrix]

Boot into safe mode and uninstall any suspicious apps. But personally on hardware that old I would wipe the HDD and install Linux.

[ldsnet]

Out dated OS and hardware....I can only assume you are running this ancient machine for a specific purpose or software application?

If you suspect it has a bug, you need to boot it on an external media (with the network disconnected) and then scan and remove any virus and malware that may be on the machine.

Once you have it clean of any external bugs, then you can boot the OS in safe mode and clean and uninstall anything not strictly necessary.

If contact to the internet is necessary for this machine's function, it needs to be behind a robust firewall to protect it from getting infected again.

But I strongly recommend upgrading to newer hardware ASAP!

[rplaw]

Out dated OS and hardware....I can only assume you are running this ancient machine for a specific purpose or software application?

If you suspect it has a bug, you need to boot it on an external media (with the network disconnected) and then scan and remove any virus and malware that may be on the machine.

Once you have it clean of any external bugs, then you can boot the OS in safe mode and clean and uninstall anything not strictly necessary.

If contact to the internet is necessary for this machine's function, it needs to be behind a robust firewall to protect it from getting infected again.

But I strongly recommend upgrading to newer hardware ASAP!

The machine handles all my incoming work from a referral service. Since I actually work 7 days per week and get new work referrals every day, there's no time to take it offline and put another machine in its place. I can't just plug in another machine and start over because the new work depends, in part, on the old work that's on the old machine.

[ibanezfoo]

My computer has been getting bogged down and constantly running at 100% CPU and almost that on my page swap file capacity. It's ancient and runs on WinXP. I only have 2gb RAM on this one too.

I know what svchost does, it's an application program to help windows manage multiple applications which need swap file space at the same time. It can handle more than one program at a time but I don't know how many programs all at once it's able to do that for.

Currently Task Manager says I have separate 9 svchost applications running simultaneously. I have a feeling at least 1 of them is a trojan but I can't end program them through task manager - access denied.

I did clear my application/security/etc logs and that helped but nine svchost applications running at once? My antivirus doesn't find anything when I run it but I still have concerns.

Is this normal? I seem to remember having no more than 3 or 4 running at one time in the past on this machine, but that's no longer the case.

Anyone a certified techie who can help ease my mind?

What does this machine do? I still have a couple XP machines running big multi axis CNC plasma cutters.

[Epaphroditus]

3GB switch.

Normally windows claim 2GB for OS and leaves 2GB for apps- addressing space is limited to 4GB.

Use the 3GB switch to open up 3GB of address space to apps and limit OS to 1GB - this makes the swap file smaller.

https://knowledge.autodesk.com/support/autocad/learn-explore/caas/sfdcarticles/sfdcarticles/How-to-enable-a-3GB-switch-on-Windows-Vista-Windows-7-or-Windows-XP-s.html

To actually enable apps to fully utilize the 3GB each exe must be modified.

Point here is to minimize the swap file so you probably don't need to worry about tweaking the app exe.

[Epaphroditus]

Here is a more detailed explanation of how to get the full 3GB app space enabled - ah, sweet memories of pushing the boundaries!

https://docs.microsoft.com/en-us/windows/win32/memory/4-gigabyte-tuning

[cleonard]

You really need to get off the old machine.

All those processes are probably what the hackers have installed on your wide open unpatched security vulnerabilities.

I seem to remember something process explorer that helped figure out what all the svchost entries actually were. Downloading XP tools might be tough now as it's been dead for a long time.

[mblat]

You may have a virus..... Or you may have some application installed updates that makes more daemons running.

The truth is that unless you never connect this computer to internet ( like somebody mentioned here its primary use to run some equipment ) it is incredibly unsafe to run depreciated version of Windows. Find $500 and buy yourself new box.

I understand the predicament with "this regulate my primary source of income" but it is actually even more reasons to spend a day or two or whatever and upgrade the thing. The last thing you want for it to stop completely with no chance to recover any data.

[Epaphroditus]

Not even need to connect to internet ti get infected - even use of an infected USB drive will spread virus.