high cpu lsass.exe and svchost.exe

ninjadanger · April 21, 2010

i've been using uTorrent for 3+ years now and have never had any problems. it's a sweet client. however, recently i've been having some issues with high cpu usage in lsass.exe and one of the svchosts. i've held off on posting until i became a bit more familiarized with Process Explorer but unfortunately i couldn't resolve the issue on my own. apologies for my n00bocity.

i run uTorrent exclusively on my laptop so the high cpu usage is causing me some serious heat issues. the problem happens very sporadically; sometimes i'll be running uTorrent for hours on end without issue, sometimes my cpu will spike, i'll restart, and it will happen straight away over the course of several restarts. no real rhyme or reason, or so it seems.

i'm running Vista Home Premium 32-bit, Core Duo 1.73GHz, 4GB RAM and AVG 9 Free for AV. uTorrent 2.0.1 build 19078 as well as PeerBlock. i've included my HiJackThis log as well as the .dll list for uTorrent and the svchost in question. all logs were created while the cpu usage was spiking. not sure if that makes a difference...

one other random note; just to see what happened i ended the svchost process and my cpu usuage dropped right off. i guess that's obvious but i figured i'd mention it. let me know if there are more details you need. this has been driving me nuts. thanks.

HiJackThis:

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 4:06:05 AM, on 4/21/2010

Platform: Windows Vista (WinNT 6.00.1904)

MSIE: Internet Explorer v7.00 (7.00.6000.17037)

Boot mode: Normal

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe

C:\Program Files\AVG\AVG9\avgtray.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\DAEMON Tools\daemon.exe

C:\Windows\ehome\ehtray.exe

C:\Windows\ehome\ehmsas.exe

C:\Windows\system32\Taskmgr.exe

C:\Users\earl\RealTemp_2.70\RealTemp.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Peerblock\peerblock.exe

C:\Program Files\uTorrent\uTorrent.exe

C:\Program Files\VideoLAN\VLC\vlc.exe

C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe

O4 - HKLM\..\Run: [sigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe

O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User '?')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User '?')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User '?')

O4 - HKUS\S-1-5-21-1799871919-398039151-3539954368-1000\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 (User '?')

O4 - HKUS\S-1-5-21-1799871919-398039151-3539954368-1006\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User '?')

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000

O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll

O20 - AppInit_DLLs: avgrsstx.dll

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe

O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe

O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Creative Labs Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Google Update Service (gupdate1c9b9ad48ff2228) (gupdate1c9b9ad48ff2228) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: M-Audio Series II MIDI Installer (MA_CMIDI_InstallerService) - Avid Technology, Inc. - C:\Program Files\M-Audio\M-Audio Series II MIDI\MA_CMIDI_Inst.exe

O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)

O23 - Service: PostgreSQL Database Server 8.2 (pgsql-8.2) - PostgreSQL Global Development Group - C:\Program Files\PostgreSQL\8.2\bin\pg_ctl.exe

O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe

--

End of file - 6323 bytes

Process Explorer uTorrent:

Process PID CPU Private Bytes Working Set Description Company Name

System Idle Process 0 27.18 0 K 28 K

Interrupts n/a 0.76 0 K 0 K Hardware Interrupts

DPCs n/a 0.76 0 K 0 K Deferred Procedure Calls

System 4 2.27 0 K 98,464 K

smss.exe 564 292 K 720 K Windows Session Manager Microsoft Corporation

csrss.exe 636 2,072 K 5,556 K Client Server Runtime Process Microsoft Corporation

wininit.exe 676 1,448 K 4,068 K Windows Start-Up Application Microsoft Corporation

avgchsvx.exe 696 24,812 K 380 K AVG Cache Server AVG Technologies CZ, s.r.o.

avgrsx.exe 704 2,324 K 640 K AVG Resident Shield Service AVG Technologies CZ, s.r.o.

avgcsrvx.exe 876 8,440 K 372 K AVG Scanning Core Module - Server Part AVG Technologies CZ, s.r.o.

services.exe 764 0.76 2,672 K 5,668 K Services and Controller app Microsoft Corporation

svchost.exe 1012 2,756 K 5,892 K Host Process for Windows Services Microsoft Corporation

ehmsas.exe 2676 1,080 K 3,792 K Media Center Media Status Aggregator Service Microsoft Corporation

svchost.exe 1196 1.51 3,684 K 6,516 K Host Process for Windows Services Microsoft Corporation

svchost.exe 1392 14,484 K 11,952 K Host Process for Windows Services Microsoft Corporation

audiodg.exe 1560 15,184 K 17,356 K Windows Audio Device Graph Isolation Microsoft Corporation

svchost.exe 1420 62,772 K 66,884 K Host Process for Windows Services Microsoft Corporation

dwm.exe 1408 5.29 130,348 K 185,084 K Desktop Window Manager Microsoft Corporation

svchost.exe 1432 18.12 24,036 K 30,804 K Host Process for Windows Services Microsoft Corporation

taskeng.exe 1636 2,032 K 5,460 K Task Scheduler Engine Microsoft Corporation

GoogleUpdate.exe 2112 2,996 K 2,456 K Google Installer Google Inc.

taskeng.exe 2120 10,528 K 9,888 K Task Scheduler Engine Microsoft Corporation

taskeng.exe 4804 1,284 K 3,788 K Task Scheduler Engine Microsoft Corporation

SLsvc.exe 1596 4,396 K 9,120 K Microsoft Software Licensing Service Microsoft Corporation

svchost.exe 1660 9,080 K 13,932 K Host Process for Windows Services Microsoft Corporation

svchost.exe 1804 18,184 K 20,108 K Host Process for Windows Services Microsoft Corporation

aawservice.exe 1908 23,780 K 2,724 K Ad-Aware 2007 Service Lavasoft

spoolsv.exe 420 6,112 K 9,120 K Spooler SubSystem App Microsoft Corporation

svchost.exe 472 6.04 13,952 K 17,276 K Host Process for Windows Services Microsoft Corporation

AppleMobileDeviceService.exe 2988 2,300 K 3,700 K Apple Mobile Device Service Apple Inc.

avgwdsvc.exe 3028 7,712 K 2,816 K AVG Watchdog Service AVG Technologies CZ, s.r.o.

avgnsx.exe 3620 7,040 K 856 K AVG Network scanner Service AVG Technologies CZ, s.r.o.

mDNSResponder.exe 3048 1,668 K 4,592 K Bonjour Service Apple Inc.

CreativeLicensing.exe 3060 692 K 2,312 K System Level Service Utility Creative Labs

LSSrvc.exe 3272 1,036 K 3,392 K Hewlett-Packard Company

MA_CMIDI_Inst.exe 3328 2,844 K 4,668 K M-Audio USB Installer service Avid Technology, Inc.

pg_ctl.exe 3768 2,452 K 5,620 K pg_ctl - starts/stops/restarts the PostgreSQL server PostgreSQL Global Development Group

postgres.exe 3828 3,152 K 7,528 K PostgreSQL Server PostgreSQL Global Development Group

postgres.exe 3888 2,548 K 4,684 K PostgreSQL Server PostgreSQL Global Development Group

postgres.exe 3948 2,604 K 5,280 K PostgreSQL Server PostgreSQL Global Development Group

postgres.exe 3960 2,524 K 4,688 K PostgreSQL Server PostgreSQL Global Development Group

svchost.exe 3788 2,068 K 4,728 K Host Process for Windows Services Microsoft Corporation

stacsv.exe 3820 3,924 K 5,708 K STacSV Module IDT, Inc.

svchost.exe 4024 4,204 K 6,292 K Host Process for Windows Services Microsoft Corporation

svchost.exe 4060 560 K 2,056 K Host Process for Windows Services Microsoft Corporation

SearchIndexer.exe 2100 42,804 K 15,320 K Microsoft Windows Search Indexer Microsoft Corporation

avgemc.exe 2432 6,072 K 1,544 K AVG E-Mail Scanner AVG Technologies CZ, s.r.o.

avgcsrvx.exe 2280 3,180 K 6,052 K AVG Scanning Core Module - Server Part AVG Technologies CZ, s.r.o.

iPodService.exe 1728 2,908 K 5,064 K iPodService Module (32-bit) Apple Inc.

alg.exe 1960 1,516 K 4,384 K Application Layer Gateway Service Microsoft Corporation

lsass.exe 780 21.14 3,388 K 2,260 K Local Security Authority Process Microsoft Corporation

lsm.exe 788 2,904 K 4,956 K Local Session Manager Service Microsoft Corporation

csrss.exe 688 1,880 K 7,128 K Client Server Runtime Process Microsoft Corporation

winlogon.exe 864 2,044 K 5,412 K Windows Logon Application Microsoft Corporation

taskmgr.exe 3128 2.27 2,864 K 9,764 K Windows Task Manager Microsoft Corporation

explorer.exe 1684 34,716 K 51,284 K Windows Explorer Microsoft Corporation

hkcmd.exe 2308 1,388 K 4,356 K hkcmd Module Intel Corporation

igfxpers.exe 2356 1,196 K 4,036 K persistence Module Intel Corporation

sttray.exe 2384 4,404 K 9,700 K Sigmatel Audio system tray application IDT, Inc.

avgtray.exe 2412 4,944 K 1,028 K AVG Tray Monitor AVG Technologies CZ, s.r.o.

iTunesHelper.exe 2508 6,648 K 11,204 K iTunesHelper Apple Inc.

daemon.exe 2524 1,640 K 5,076 K Virtual DAEMON Manager DT Soft Ltd.

ehtray.exe 2564 2,136 K 1,512 K Media Center Tray Applet Microsoft Corporation

RealTemp.exe 2960 2,064 K 5,608 K RealTemp

firefox.exe 1356 101,780 K 115,956 K Firefox Mozilla Corporation

peerblock.exe 3564 0.76 36,672 K 5,932 K PeerBlock PeerBlock, LLC

uTorrent.exe 3344 1.51 18,348 K 23,144 K µTorrent BitTorrent, Inc.

vlc.exe 5924 0.76 101,264 K 78,972 K VLC media player the VideoLAN Team

procexp.exe 5384 10.57 19,964 K 35,076 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com

Process: uTorrent.exe Pid: 3344

Name Description Company Name Version

ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 6.0.6000.16386

apphelp.dll Application Compatibility Client Library Microsoft Corporation 6.0.6000.16386

avgrsstx.dll AVG Resident Shield Starter AVG Technologies CZ, s.r.o. 9.0.0.782

CLBCatQ.DLL COM+ Configuration Catalog Microsoft Corporation 2001.12.6930.16386

COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.10.6000.16386

comdlg32.dll Common Dialogs DLL Microsoft Corporation 6.0.6000.16386

dhcpcsvc.DLL DHCP Client Service Microsoft Corporation 6.0.6000.16512

dhcpcsvc6.DLL DHCPv6 Client Microsoft Corporation 6.0.6000.16512

DnsApi.dll DNS Client API DLL Microsoft Corporation 6.0.6000.16615

FirewallAPI.dll Windows Firewall API Microsoft Corporation 6.0.6000.16501

GDI32.dll GDI Client DLL Microsoft Corporation 6.0.6000.16766

hccutils.DLL

IMM32.DLL Multi-User Windows IMM32 API Client DLL Microsoft Corporation 6.0.6000.16386

Iphlpapi.dll IP Helper API Microsoft Corporation 6.0.6000.16386

kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 6.0.6000.16820

kernel32.dll.mui Windows NT BASE API Client DLL Microsoft Corporation 6.0.6000.16386

locale.nls

LPK.DLL Language Pack Microsoft Corporation 6.0.6000.16939

mdnsNSP.dll Bonjour Namespace Provider Apple Inc. 1.0.6.2

MSCTF.dll MSCTF Server DLL Microsoft Corporation 6.0.6000.16386

msctf.dll.mui MSCTF Server DLL Microsoft Corporation 6.0.6000.16386

msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.0.6000.16386

mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 6.0.6000.16386

napinsp.dll E-mail Naming Shim Provider Microsoft Corporation 6.0.6000.16386

NLAapi.dll Network Location Awareness 2 Microsoft Corporation 6.0.6000.16386

NSI.dll NSI User-mode interface DLL Microsoft Corporation 6.0.6000.16386

ntdll.dll NT Layer DLL Microsoft Corporation 6.0.6000.16386

ole32.dll Microsoft OLE for Windows Microsoft Corporation 6.0.6000.16386

oleaut32.dll Microsoft Corporation 6.0.6000.16609

pnrpnsp.dll PNRP Name Space Provider Microsoft Corporation 6.0.6000.16386

PROPSYS.dll Microsoft Property System Microsoft Corporation 6.0.6000.16386

PSAPI.DLL Process Status Helper Microsoft Corporation 6.0.6000.16386

rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 6.0.6000.16386

RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 6.0.6000.16850

rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 6.0.6000.16386

Secur32.dll Security Support Provider Interface Microsoft Corporation 6.0.6000.16870

SETUPAPI.dll Windows Setup API Microsoft Corporation 6.0.6000.16609

setupapi.dll.mui Windows Setup API Microsoft Corporation 6.0.6000.16609

SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.0.6000.16774

shfolder.dll Shell Folder Service Microsoft Corporation 6.0.6000.16386

SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.0.6000.16386

USER32.dll Multi-User Windows USER API Client DLL Microsoft Corporation 6.0.6000.16438

user32.dll.mui Multi-User Windows USER API Client DLL Microsoft Corporation 6.0.6000.16386

USERENV.dll Userenv Microsoft Corporation 6.0.6000.16386

USP10.dll Uniscribe Unicode script processor Microsoft Corporation 1.626.6000.16386

uTorrent.exe µTorrent BitTorrent, Inc. 2.0.1.19078

uxtheme.dll Microsoft UxTheme Library Microsoft Corporation 6.0.6000.16386

VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 6.0.6000.16386

WINNSI.DLL Network Store Information RPC interface Microsoft Corporation 6.0.6000.16386

winrnr.dll LDAP RnR Provider DLL Microsoft Corporation 6.0.6000.16386

WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 6.0.6000.16386

WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 6.0.6000.16386

wship6.dll Winsock2 Helper DLL (TL/IPv6) Microsoft Corporation 6.0.6000.16386

wshtcpip.dll Winsock2 Helper DLL (TL/IPv4) Microsoft Corporation 6.0.6000.16386

Process Explorer svchost:

Process PID CPU Private Bytes Working Set Description Company Name

System Idle Process 0 36.50 0 K 28 K

Interrupts n/a 1.49 0 K 0 K Hardware Interrupts

DPCs n/a 0 K 0 K Deferred Procedure Calls

System 4 0 K 98,468 K

smss.exe 564 292 K 720 K Windows Session Manager Microsoft Corporation

csrss.exe 636 2,072 K 5,564 K Client Server Runtime Process Microsoft Corporation

wininit.exe 676 1,448 K 4,068 K Windows Start-Up Application Microsoft Corporation

avgchsvx.exe 696 24,812 K 380 K AVG Cache Server AVG Technologies CZ, s.r.o.

avgrsx.exe 704 2,324 K 636 K AVG Resident Shield Service AVG Technologies CZ, s.r.o.

avgcsrvx.exe 876 8,440 K 372 K AVG Scanning Core Module - Server Part AVG Technologies CZ, s.r.o.

services.exe 764 0.74 2,700 K 5,680 K Services and Controller app Microsoft Corporation

svchost.exe 1012 2,756 K 5,904 K Host Process for Windows Services Microsoft Corporation

ehmsas.exe 2676 1,080 K 3,792 K Media Center Media Status Aggregator Service Microsoft Corporation

svchost.exe 1196 2.23 3,740 K 6,548 K Host Process for Windows Services Microsoft Corporation

svchost.exe 1392 14,512 K 11,988 K Host Process for Windows Services Microsoft Corporation

audiodg.exe 1560 15,184 K 17,356 K Windows Audio Device Graph Isolation Microsoft Corporation

svchost.exe 1420 1.49 63,240 K 66,928 K Host Process for Windows Services Microsoft Corporation

dwm.exe 1408 0.74 132,588 K 187,260 K Desktop Window Manager Microsoft Corporation

svchost.exe 1432 22.35 24,152 K 30,868 K Host Process for Windows Services Microsoft Corporation

taskeng.exe 1636 2,032 K 5,460 K Task Scheduler Engine Microsoft Corporation

GoogleUpdate.exe 2112 2,996 K 2,456 K Google Installer Google Inc.

taskeng.exe 2120 10,548 K 9,896 K Task Scheduler Engine Microsoft Corporation

taskeng.exe 4804 1,284 K 3,792 K Task Scheduler Engine Microsoft Corporation

SLsvc.exe 1596 4,396 K 9,120 K Microsoft Software Licensing Service Microsoft Corporation

svchost.exe 1660 9,080 K 13,932 K Host Process for Windows Services Microsoft Corporation

svchost.exe 1804 18,184 K 20,108 K Host Process for Windows Services Microsoft Corporation

aawservice.exe 1908 23,780 K 2,724 K Ad-Aware 2007 Service Lavasoft

spoolsv.exe 420 6,112 K 9,120 K Spooler SubSystem App Microsoft Corporation

svchost.exe 472 10.43 13,952 K 17,276 K Host Process for Windows Services Microsoft Corporation

AppleMobileDeviceService.exe 2988 2,300 K 3,700 K Apple Mobile Device Service Apple Inc.

avgwdsvc.exe 3028 7,712 K 2,816 K AVG Watchdog Service AVG Technologies CZ, s.r.o.

avgnsx.exe 3620 7,040 K 768 K AVG Network scanner Service AVG Technologies CZ, s.r.o.

mDNSResponder.exe 3048 1,668 K 4,592 K Bonjour Service Apple Inc.

CreativeLicensing.exe 3060 692 K 2,312 K System Level Service Utility Creative Labs

LSSrvc.exe 3272 1,036 K 3,392 K Hewlett-Packard Company

MA_CMIDI_Inst.exe 3328 2,844 K 4,668 K M-Audio USB Installer service Avid Technology, Inc.

pg_ctl.exe 3768 2,452 K 5,620 K pg_ctl - starts/stops/restarts the PostgreSQL server PostgreSQL Global Development Group

postgres.exe 3828 3,152 K 7,528 K PostgreSQL Server PostgreSQL Global Development Group

postgres.exe 3888 2,548 K 4,684 K PostgreSQL Server PostgreSQL Global Development Group

postgres.exe 3948 2,604 K 5,280 K PostgreSQL Server PostgreSQL Global Development Group

postgres.exe 3960 2,524 K 4,688 K PostgreSQL Server PostgreSQL Global Development Group

svchost.exe 3788 2,068 K 4,728 K Host Process for Windows Services Microsoft Corporation

stacsv.exe 3820 3,924 K 5,708 K STacSV Module IDT, Inc.

svchost.exe 4024 4,204 K 6,292 K Host Process for Windows Services Microsoft Corporation

svchost.exe 4060 560 K 2,056 K Host Process for Windows Services Microsoft Corporation

SearchIndexer.exe 2100 42,788 K 15,244 K Microsoft Windows Search Indexer Microsoft Corporation

SearchProtocolHost.exe 5396 5,888 K 8,608 K Microsoft Windows Search Protocol Host Microsoft Corporation

SearchFilterHost.exe 4164 3,152 K 5,196 K Microsoft Windows Search Filter Host Microsoft Corporation

avgemc.exe 2432 6,072 K 1,544 K AVG E-Mail Scanner AVG Technologies CZ, s.r.o.

avgcsrvx.exe 2280 3,180 K 6,052 K AVG Scanning Core Module - Server Part AVG Technologies CZ, s.r.o.

iPodService.exe 1728 2,908 K 5,064 K iPodService Module (32-bit) Apple Inc.

alg.exe 1960 1,516 K 4,384 K Application Layer Gateway Service Microsoft Corporation

lsass.exe 780 18.62 3,424 K 2,308 K Local Security Authority Process Microsoft Corporation

lsm.exe 788 2,904 K 5,012 K Local Session Manager Service Microsoft Corporation

csrss.exe 688 1,880 K 7,132 K Client Server Runtime Process Microsoft Corporation

winlogon.exe 864 2,044 K 5,412 K Windows Logon Application Microsoft Corporation

taskmgr.exe 3128 2.23 2,896 K 9,796 K Windows Task Manager Microsoft Corporation

explorer.exe 1684 35,448 K 51,984 K Windows Explorer Microsoft Corporation

hkcmd.exe 2308 1,388 K 4,356 K hkcmd Module Intel Corporation

igfxpers.exe 2356 1,196 K 4,036 K persistence Module Intel Corporation

sttray.exe 2384 4,404 K 9,700 K Sigmatel Audio system tray application IDT, Inc.

avgtray.exe 2412 4,944 K 1,028 K AVG Tray Monitor AVG Technologies CZ, s.r.o.

iTunesHelper.exe 2508 6,648 K 11,204 K iTunesHelper Apple Inc.

daemon.exe 2524 1,640 K 5,076 K Virtual DAEMON Manager DT Soft Ltd.

ehtray.exe 2564 2,136 K 1,512 K Media Center Tray Applet Microsoft Corporation

RealTemp.exe 2960 2,064 K 5,608 K RealTemp

firefox.exe 1356 101,780 K 115,956 K Firefox Mozilla Corporation

peerblock.exe 3564 36,672 K 5,940 K PeerBlock PeerBlock, LLC

uTorrent.exe 3344 18,352 K 23,156 K µTorrent BitTorrent, Inc.

vlc.exe 5924 1.49 101,264 K 78,984 K VLC media player the VideoLAN Team

procexp.exe 3016 1.49 22,884 K 36,648 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com

Process: svchost.exe Pid: 1432

Name Description Company Name Version

ACTIVEDS.dll ADs Router Layer DLL Microsoft Corporation 6.0.6000.16386

adsldpc.dll ADs LDAP Provider C DLL Microsoft Corporation 6.0.6000.16386

ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 6.0.6000.16386

aelupsvc.dll Application Experience Service Microsoft Corporation 6.0.6000.16386

apphelp.dll Application Compatibility Client Library Microsoft Corporation 6.0.6000.16386

ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.5.2284.2

AUTHZ.dll Authorization Framework Microsoft Corporation 6.0.6000.16386

avgrsstx.dll AVG Resident Shield Starter AVG Technologies CZ, s.r.o. 9.0.0.782

AVRT.dll Multimedia Realtime Runtime Microsoft Corporation 6.0.6000.16386

BCRYPT.dll Windows Cryptographic Primitives Library Microsoft Corporation 6.0.6000.16386

bitsigd.dll Background Intelligent Transfer Service IGD Support Microsoft Corporation 7.0.6000.16386

bitsperf.dll Perfmon Counter Access Microsoft Corporation 7.0.6000.16386

Cabinet.dll Microsoft® Cabinet File API Microsoft Corporation 6.0.6000.16386

CLBCatQ.DLL COM+ Configuration Catalog Microsoft Corporation 2001.12.6930.16386

CLUSAPI.DLL Cluster API Library Microsoft Corporation 6.0.6000.16386

COMCTL32.dll User Experience Controls Library Microsoft Corporation 5.82.6000.16386

comctl32.dll User Experience Controls Library Microsoft Corporation 6.10.6000.16386

credssp.dll TS Single Sign On Security Package Microsoft Corporation 6.0.6000.16386

credui.dll Credential Manager User Interface Microsoft Corporation 6.0.6000.16386

CRYPT32.dll Crypto API32 Microsoft Corporation 6.0.6000.16425

cryptdll.dll Cryptography Manager Microsoft Corporation 6.0.6000.16386

CRYPTUI.dll Microsoft Trust UI Provider Microsoft Corporation 6.0.6000.16386

dhcpcsvc.DLL DHCP Client Service Microsoft Corporation 6.0.6000.16512

dhcpcsvc6.DLL DHCPv6 Client Microsoft Corporation 6.0.6000.16512

DNSAPI.dll DNS Client API DLL Microsoft Corporation 6.0.6000.16615

eapphost.dll Microsoft EAPHost Peer service Microsoft Corporation 6.0.6000.16386

eapsvc.dll Microsoft EAPHost service Microsoft Corporation 6.0.6000.16386

ESENT.dll Extensible Storage Engine for Microsoft® Windows® Microsoft Corporation 6.0.6000.16386

esscli.dll WMI Microsoft Corporation 6.0.6000.16386

FastProx.dll WMI Custom Marshaller Microsoft Corporation 6.0.6000.16830

FirewallAPI.DLL Windows Firewall API Microsoft Corporation 6.0.6000.16501

FirewallAPI.dll.mui Windows Firewall API Microsoft Corporation 6.0.6000.16386

fwpuclnt.dll FWP/IPsec User-Mode API Microsoft Corporation 6.0.6000.21226

GDI32.dll GDI Client DLL Microsoft Corporation 6.0.6000.16766

GPAPI.dll Group Policy Client API Microsoft Corporation 6.0.6000.16386

gpsvc.dll Group Policy Client Microsoft Corporation 6.0.6000.16386

gpsvc.dll.mui Group Policy Client Microsoft Corporation 6.0.6000.16386

hnetcfg.dll Home Networking Configuration Manager Microsoft Corporation 6.0.6000.16386

iertutil.dll Run time utility for Internet Explorer Microsoft Corporation 7.0.6000.17037

ikeext.dll IKE extension Microsoft Corporation 6.0.6000.21226

imagehlp.dll Windows NT Image Helper Microsoft Corporation 6.0.6000.16470

IMM32.DLL Multi-User Windows IMM32 API Client DLL Microsoft Corporation 6.0.6000.16386

IPHLPAPI.DLL IP Helper API Microsoft Corporation 6.0.6000.16386

iphlpsvc.dll Service that offers IPv6 connectivity over an IPv4 network. Microsoft Corporation 6.0.6000.17021

ipnathlp.dll Microsoft NAT Helper Components Microsoft Corporation 6.0.6000.16522

kerberos.dll Kerberos Security Package Microsoft Corporation 6.0.6000.16870

kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 6.0.6000.16820

kernel32.dll.mui Windows NT BASE API Client DLL Microsoft Corporation 6.0.6000.16386

ktmw32.dll Windows KTM Win32 Client DLL Microsoft Corporation 6.0.6000.16386

locale.nls

LPK.DLL Language Pack Microsoft Corporation 6.0.6000.16939

mdnsNSP.dll Bonjour Namespace Provider Apple Inc. 1.0.6.2

mmcss.dll Multimedia Class Scheduler Service Microsoft Corporation 6.0.6000.16386

MPR.dll Multiple Provider Router DLL Microsoft Corporation 6.0.6000.16386

MPRAPI.dll Windows NT MP Router Administration DLL Microsoft Corporation 6.0.6000.16386

MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 6.0.6000.16922

MSCTF.dll MSCTF Server DLL Microsoft Corporation 6.0.6000.16386

MSIMG32.dll GDIEXT Client DLL Microsoft Corporation 6.0.6000.16386

mspatcha.dll Microsoft File Patch Application API Microsoft Corporation 6.0.6000.16386

msv1_0.dll Microsoft Authentication Package v1.0 Microsoft Corporation 6.0.6000.16926

msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.0.6000.16386

mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 6.0.6000.16386

msxml3.dll MSXML 3.0 SP10 Microsoft Corporation 8.100.3501.0

msxml3r.dll XML Resources Microsoft Corporation 8.20.8730.1

napinsp.dll E-mail Naming Shim Provider Microsoft Corporation 6.0.6000.16386

NCObjAPI.DLL Microsoft Corporation 6.0.6000.16386

ncprov.dll Non-COM WMI Event Provision APIs Microsoft Corporation 6.0.6000.16386

ncrypt.dll Windows cryptographic library Microsoft Corporation 6.0.6000.16386

NETAPI32.dll Net Win32 API DLL Microsoft Corporation 6.0.6000.16764

netshell.dll Network Connections Shell Microsoft Corporation 6.0.6000.16386

nlaapi.dll Network Location Awareness 2 Microsoft Corporation 6.0.6000.16386

npmproxy.dll Network List Manager Proxy Microsoft Corporation 6.0.6000.16386

NSI.dll NSI User-mode interface DLL Microsoft Corporation 6.0.6000.16386

ntdll.dll NT Layer DLL Microsoft Corporation 6.0.6000.16386

NTDSAPI.dll Active Directory Domain Services API Microsoft Corporation 6.0.6000.16386

NTMARTA.DLL Windows NT MARTA provider Microsoft Corporation 6.0.6000.16386

ole32.dll Microsoft OLE for Windows Microsoft Corporation 6.0.6000.16386

OLEACC.dll Active Accessibility Core Component Microsoft Corporation 4.2.5406.0

oleaccrc.dll Active Accessibility Resource DLL Microsoft Corporation 4.2.5406.0

OLEAUT32.dll Microsoft Corporation 6.0.6000.16609

pnrpnsp.dll PNRP Name Space Provider Microsoft Corporation 6.0.6000.16386

profsvc.dll ProfSvc Microsoft Corporation 6.0.6000.16386

PROPSYS.dll Microsoft Property System Microsoft Corporation 6.0.6000.16386

PSAPI.DLL Process Status Helper Microsoft Corporation 6.0.6000.16386

qmgr.dll Background Intelligent Transfer Service Microsoft Corporation 7.0.6000.16531

QUtil.dll Quarantine Utilities Microsoft Corporation 6.0.6000.16386

rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 6.0.6000.16386

RASAPI32.dll Remote Access API Microsoft Corporation 6.0.6000.16386

raschap.dll Remote Access PPP CHAP Microsoft Corporation 6.0.6000.16932

raschap.dll.mui Remote Access PPP CHAP Microsoft Corporation 6.0.6000.16386

rasman.dll Remote Access Connection Manager Microsoft Corporation 6.0.6000.16386

rasmans.dll Remote Access Connection Manager Microsoft Corporation 6.0.6000.16386

rasppp.dll Remote Access PPP Microsoft Corporation 6.0.6000.16386

RASQEC.DLL RAS Quarantine Enforcement Client Microsoft Corporation 6.0.6000.16386

rastapi.dll Remote Access TAPI Compliance Layer Microsoft Corporation 6.0.6000.16386

rastls.dll Remote Access PPP EAP-TLS Microsoft Corporation 6.0.6000.16932

rastls.dll.mui Remote Access PPP EAP-TLS Microsoft Corporation 6.0.6000.16386

repdrvfs.dll WMI Repository Driver Microsoft Corporation 6.0.6000.16386

RESUTILS.DLL Microsoft Cluster Resource Utility DLL Microsoft Corporation 6.0.6000.16386

RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 6.0.6000.16850

rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 6.0.6000.16386

rtutils.dll Routing Utilities Microsoft Corporation 6.0.6000.16386

SAMLIB.dll SAM Library DLL Microsoft Corporation 6.0.6000.16386

schannel.dll TLS / SSL Security Provider Microsoft Corporation 6.0.6000.16870

schedsvc.dll Task Scheduler Service Microsoft Corporation 6.0.6000.16609

schedsvc.dll.mui Task Scheduler Service Microsoft Corporation 6.0.6000.16386

seclogon.dll Secondary Logon Service DLL Microsoft Corporation 6.0.6000.16386

Secur32.dll Security Support Provider Interface Microsoft Corporation 6.0.6000.16870

sens.dll System Event Notification Service (SENS) Microsoft Corporation 6.0.6000.16386

SensApi.dll SENS Connectivity API DLL Microsoft Corporation 6.0.6000.16386

SETUPAPI.dll Windows Setup API Microsoft Corporation 6.0.6000.16609

setupapi.dll.mui Windows Setup API Microsoft Corporation 6.0.6000.16609

SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.0.6000.16774

SHFOLDER.dll Shell Folder Service Microsoft Corporation 6.0.6000.16386

SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.0.6000.16386

shsvcs.dll Windows Shell Services Dll Microsoft Corporation 6.0.6000.16386

slc.dll Software Licensing Client Dll Microsoft Corporation 6.0.6000.16509

sqmapi.dll SQM Client Microsoft Corporation 6.0.6000.16386

srvsvc.dll Server Service DLL Microsoft Corporation 6.0.6000.16386

SSCORE.DLL Server Service Core DLL Microsoft Corporation 6.0.6000.16386

SSDPAPI.dll SSDP Client API DLL Microsoft Corporation 6.0.6000.16386

svchost.exe Host Process for Windows Services Microsoft Corporation 6.0.6000.16386

svchost.exe.mui Host Process for Windows Services Microsoft Corporation 6.0.6000.16386

SXS.DLL Fusion 2.5 Microsoft Corporation 6.0.6000.16386

SYSNTFY.dll Windows Notifications Dynamic Link Library Microsoft Corporation 6.0.6000.16386

TAPI32.dll Microsoft® Windows Telephony API Client DLL Microsoft Corporation 6.0.6000.16386

taskcomp.dll Task Scheduler Backward Compatibility Plug-in Microsoft Corporation 6.0.6000.16386

taskcomp.dll.mui Task Scheduler Backward Compatibility Plug-in Microsoft Corporation 6.0.6000.16386

tschannel.dll Task Scheduler Proxy Microsoft Corporation 6.0.6000.16386

upnp.dll UPnP Control Point API Microsoft Corporation 6.0.6000.16386

upnphost.dll UPnP Device Host Microsoft Corporation 6.0.6000.16386

urlmon.dll OLE32 Extensions for Win32 Microsoft Corporation 7.0.6000.17037

USER32.dll Multi-User Windows USER API Client DLL Microsoft Corporation 6.0.6000.16438

USERENV.dll Userenv Microsoft Corporation 6.0.6000.16386

USP10.dll Uniscribe Unicode script processor Microsoft Corporation 1.626.6000.16386

UxTheme.dll Microsoft UxTheme Library Microsoft Corporation 6.0.6000.16386

VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 6.0.6000.16386

VSSAPI.DLL Microsoft® Volume Shadow Copy Requestor/Writer Services API DLL Microsoft Corporation 6.0.6000.16386

vsstrace.dll Microsoft® Volume Shadow Copy Requestor/Writer tracing DLL Microsoft Corporation 6.0.6000.16386

vsstrace.dll.mui Microsoft® Volume Shadow Copy Requestor/Writer tracing DLL Microsoft Corporation 6.0.6000.16386

wbemcomn.dll WMI Microsoft Corporation 6.0.6000.16553

wbemcore.dll Windows Management Instrumentation Microsoft Corporation 6.0.6000.16386

wbemess.dll WMI Microsoft Corporation 6.0.6000.16386

wbemsvc.dll WMI Microsoft Corporation 6.0.6000.16386

wer.dll Windows Error Reporting DLL Microsoft Corporation 6.0.6000.16386

wevtapi.dll Eventing Consumption and Configuration API Microsoft Corporation 6.0.6000.16386

wiarpc.dll Windows Image Acquisition RPC client DLL Microsoft Corporation 6.0.6000.16386

WINHTTP.dll Windows HTTP Services Microsoft Corporation 6.0.6000.16913

WINMM.dll MCI API DLL Microsoft Corporation 6.0.6000.16386

WINNSI.DLL Network Store Information RPC interface Microsoft Corporation 6.0.6000.16386

winrnr.dll LDAP RnR Provider DLL Microsoft Corporation 6.0.6000.16386

WinSCard.dll Microsoft Smart Card API Microsoft Corporation 6.0.6000.16386

WINSPOOL.DRV Windows Spooler Driver Microsoft Corporation 6.0.6000.16386

WINSTA.dll Winstation Library Microsoft Corporation 6.0.6000.16386

WINTRUST.dll Microsoft Trust Verification APIs Microsoft Corporation 6.0.6000.16984

WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 6.0.6000.16386

wmiprvsd.dll WMI Microsoft Corporation 6.0.6000.16830

wmisvc.dll WMI Microsoft Corporation 6.0.6000.16386

wmiutils.dll WMI Microsoft Corporation 6.0.6000.16386

WMsgAPI.dll WinLogon IPC Client Microsoft Corporation 6.0.6000.16386

WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 6.0.6000.16386

wscapi.dll Windows Security Center API Microsoft Corporation 6.0.6000.16386

wship6.dll Winsock2 Helper DLL (TL/IPv6) Microsoft Corporation 6.0.6000.16386

wshtcpip.dll Winsock2 Helper DLL (TL/IPv4) Microsoft Corporation 6.0.6000.16386

WTSAPI32.dll Windows Terminal Server SDK APIs Microsoft Corporation 6.0.6000.16553

wuaueng.dll Windows Update Agent Microsoft Corporation 7.4.7600.226

wuaueng.dll.mui Windows Update Agent Microsoft Corporation 7.4.7600.226

XmlLite.dll Microsoft XmlLite Library Microsoft Corporation 1.1.1002.0

DreadWingKnight · April 21, 2010

Does the problem persist with peerblock uninstalled?

Which user's SVCHost were you killing (BTW killing those can lead to MAJOR system instability)?

ninjadanger · April 21, 2010

the svchost i killed was SYSTEM under the user name column in task manager. i hope that's what you were asking about and i'm not being insanely dense. i knew it could eff the system up, it was only down for a second. right after i saw the cpu drop off i restarted.

i uninstalled Peerblock and i'm just running uTorrent right now. weirdly uncomfortable. the cpu usage is fine right now but i'm going to run it for a while and see if it remains stable. i haven't noticed a pattern to the cpu spikage so i'll have to run it for a while to be convinced.

thanks for the quick response. if it seems to be running fine sans Peerblock what do you recommend i do to replace it? i've heard a bit about an ipfilter in uTorrent. is that a solid replacement?

DreadWingKnight · April 21, 2010

Honestly, if you're using peerblock for the blocklist support, you're wasting your resources on something that won't actually protect you from anything.

We've had several discussions about blocklists on these forums and they all come back to having more proof of the uselessness of the lists than anything else.

Sign In

high cpu lsass.exe and svchost.exe

Recommended Posts

ninjadanger

Link to comment

Share on other sites

DreadWingKnight

Link to comment

Share on other sites

ninjadanger

Link to comment

Share on other sites

DreadWingKnight

Link to comment

Share on other sites

Archived

Browse

Activity