svchost.exe (netsvcs) high CPU usage

[Akkupack]

Hello, recently I have discovered a problem with high CPU usage, which appeared to be something about a process called svchost (in the resource monitor it is called svchost.exe (netsvcs)) . It seems weird that a svchost process to use up so much processing power. I really need assistance, because I can't use my computer properly and my CPU basically became the new house heater. It is usually taking up 60% CPU according to Task Manager and Resource Monitor.

PS. I know what svchost.exe is and does 😛

 

[junkeymonkey]

if using google chrome may look up ''google chrome a resources hog '' and see any help or tips ?

http://superuser.com/questions/697567/how-to-reduce-google-chromes-cpu-usage

http://www.techverse.net/how-to-troubleshoot-google-chromes-high-cpu-memory-usage/

just for example ??

or right click in task manager the svchost.exe running high and select ''go to services'' and see what running under it and investigate one of them services listed under that svchost.exe as the cause [highlighted in blue I think]

 

[manv]

svchost.exe (netsvcs) is actually a windows service. But the high usage may be triggered by viruses/adware/spyware etc.
Use a good malicious software removal tool and scan your PC for any such programs.
Also disable windows update from services (type run in search or use win+R shortcut in it type services.msc) and disable windows update along with superfetch. Should solve it in most cases.

 

[Akkupack]

if using google chrome may look up ''google chrome a resources hog '' and see any help or tips ?

http://superuser.com/questions/697567/how-to-reduce-google-chromes-cpu-usage

http://www.techverse.net/how-to-troubleshoot-google-chromes-high-cpu-memory-usage/

just for example ??

or right click in task manager the svchost.exe running high and select ''go to services'' and see what running under it and investigate one of them services listed under that svchost.exe as the cause [highlighted in blue I think]

I forgot to mention that in the post...
The services are: wuauserv, Winmgmt, Themes, ShellHWDetection, SENS, Schedule, ProfSvc, MMCSS, LanmanServer, iphlpsvc, IKEEXT. gpsvc, Browser, BITS, Appinfo, AeLookupSvc.

Also my most-used browser is Opera, yet I have Chrome too when neither Opera or Firefox does not do the job. BTW I am getting high CPU even without any browser open.

 

[Akkupack]

svchost.exe (netsvcs) is actually a windows service. But the high usage may be triggered by viruses/adware/spyware etc.
Use a good malicious software removal tool and scan your PC for any such programs.
Also disable windows update from services (type run in search or use win+R shortcut in it type services.msc) and disable windows update along with superfetch. Should solve it in most cases.

Would AVG be good? I am using it because of its plenty of options and customizations, yet I have no idea about the virus database.

EDIT: Did it... it was goddamn Windows Update all this time. Well, I had another experience on another PC that had a svchost.exe eat up all memory and it was the same ole Windows Update. Thank you all for help.

 

[ThisPerson79]

netsvcs svchost.exe is a CIA malware framework (yes, CIA) that is better known as Aftermidnight. This allows operators to dynamically load and execute malware payloads on a target machine. The main controller disguises as a self-persisting Windows Service DLL and provides secure execution of ‘Gremlins’ via a HTTPS based Listening Post (LP) system called ‘Octopus’.” Here's your source:

https://wikileaks.org/vault7/document/AfterMidnight_v1_0_Users_Guide/ (literally CIA users guide... wow)
https://wikileaks.org/vault7/#AfterMidnight

There's actually two CIA malware frameworks. The other is known as "Assassin". Sources all there for you.

 

[bkdbkd]

From the first document:

AfterMidnight.dll can be renamed to <anything>.dll and placed anywhere on target. In this example, to hide our presence, we’ll use c:\windows\system32\am.dll. This should fool everyone

I'm no spook, nor do I play one on TV, but this sounds a little odd, for a government training document.