Svchost loads the system. Computer resource Y SM Disable drive C indexing

Article updated 12/09/2011

Symptoms:
Your computer suddenly began to freeze and slow down the system. At the same time, you have an antivirus with the latest antivirus databases. Click Ctrl+Alt+Delete and click the tab Processes. You will see a list of all processes that are running at the moment; at the same time, you will see that one of the processes consumes a lot of computer resources (although you are not currently using any programs). Here you will see a process svchost(there will be several processes with the same name, but you need the one that loads the system at 100%).

Solution:
1) Try, first of all, just restart your computer.
2) If after the reboot this process continues to load the system, then right-click on the process and, in the list that opens, select End process tree. Then restart your computer.
3) If the first two methods did not help you, then go to the folder Windows and find the folder there Prefetch(C:\WINDOWS\Prefetch). Delete this folder ( delete the folder Prefetch; DO NOT accidentally delete the folder itself Windows!!!) Next, follow the second point (i.e. delete the svchost process tree). Restart your computer.

How many processes should there besvchost.exe in the Processes tab?
The number of processes with this name depends on how many services are running through svchost. The number may depend on the version of Windows, the properties of your computer, etc. And therefore, processes with the name "svchost.exe" can be from 4 (the absolute minimum) to infinity. I have 12 svchosts in the Processes tab on a 4-core computer with Windows 7 (including running services).

How to determine which one is a virus?
You can see in the screenshot above that in the "User" column, next to each svchost, there is the name of the source that launched this very process. Normally, next to svchosts it will say "system", or "network service", or "local service". Viruses, on the other hand, run themselves as "user" (it can be written "user" or "administrator").

What is a process in general?svchost.exe?
In simple terms, the svchost process is an accelerator for the launch and operation of services and services. svchosts are launched through the services.exe system process

What happens if I accidentally end the system process by clicking on "End Process Tree"svchost and not the virus itself?
Nothing bad will happen. The system will give you an error and restart your computer. After a reboot, everything will fall into place.

What viruses masquerade assvchost.exe?
According to Kaspersky Lab, svchost.exe masks viruses: Virus.Win32.Hidrag.d, Trojan-Clicker.Win32.Delf.cn, Net-Worm.Win32.Welchia.a
According to unconfirmed reports, some versions of Trojan.Carberp also disguise themselves as svchost.exe

How do these viruses work?
These viruses enter special servers without your knowledge, from where they either download something else dangerous, or send information to the server (namely your passwords, logs, etc.)

Processsvchost.exe loads the system, but in the "User" column it says "system". What it is?
Most likely - this means that some service or service is working hard. Wait a bit, and this process will stop loading the system. Or it won't stop... There are some viruses (for example: Conficker) that use real svchosts to mess up your system. These are very dangerous viruses, and therefore you should check your computer with an antivirus (or better, several at once). For example, you can download DrWeb CureIt - it will find such viruses and remove them.

Why you need to end the process tree and delete the folderPrefetch?
If you end the process tree of your system-slowing svchost, then the computer will urgently reboot. And at startup, when the virus tries to start again, the antivirus (which you must have installed without fail) will immediately detect and remove it. Although there are many modifications. For example, the original source of such a virus may be in the Prefetch folder. This folder is needed to speed up the work of services and services. Removing it will not harm your computer.

Your advice didn't help me. Processsvchost.exe continues to load the system.
First of all, check your computer with an antivirus. Better yet, check your computer with several antiviruses.
I can also advise you to clean the System Volume Information folder. This folder contains restore points for your computer. Viruses register themselves in this folder, since the system does not allow the antivirus to delete anything from this folder. But this is unlikely to be useful to you. I have not yet heard of such modifications of viruses that would pretend to be svchost.exe and were located in the System Volume Information folder.

If you have any more questions, I'll be happy to answer them.

Recent tips from the Computers & Internet section:

Council comments:

Thank you very much! Everything is clear and without water. All unnecessary processes have disappeared. Thank you!

Windows6.1-KB3102810 x86 (x64) - for 7, whose updater eats a lot of operatives.

In short, I figured out why svchost loaded the percentage by 30%, the Spyware Process Detector utility helped to uncover this mysterious process (you can find it on the Internet with a crack), and it turned out not to be some kind of malware, but an ordinary Defrag exe system process, it ratted. In short, I turned off the service Disk defragmentation, svchost no longer occurs. All the problem is solved.

I tried everything, and turned off the update center, and deleted Prefetch, and completed the process tree, nothing helps, svchost still loads the percentage by 30%.

Ilya, thank you very much! Helped! Did everything as written. Only I have a service called Automatic Updates on XP. After disabling autorun, as soon as I managed to stop the service, this process disappeared, and the CPU load subsided. Who has XP or updates are not important - I recommend this method.

Ivan, thank you so much for the comment) Helped. Denied access and everything returned to normal. Nothing has worked so far!

I demolished the Prefetch folder, but after a reboot, it reappears, just like the problem with the RAM.

On Win XP I solved the problem simply - by disabling system updates. probably small-soft in this way gently pushing users to leave XP and 7.

Rustam, the article clearly states that this folder is not for system files (which are in the windows folder). Here is a quote from the article "Removing it won't harm your computer." READ THE ARTICLE CAREFULLY, cykablyat!

I looked into the svchost folder, but found only the root folders of all the programs running on the computer. when deleting, a catastrophe could occur, but mienno: a complete shutdown of all life-supporting programs, which would ultimately lead to the fact that the computer after a reboot would stop working altogether, and I would have to reinstall Windows. So, I did not dare to delete the entire host folder . I'll look for other solutions. And for those who think that disabling the update solves the problem, I’ll say: I did it once, so the virus that got into the computer ate the entire motherboard and the hard one stopped working. in fact, it starts the laptop, but immediately freezes, and does not even respond to ctrl-alt-del. And on the button to start and turn off the computer. you have to take out the battery... since then the laptop is retired... not a single workshop undertakes to repair it. some nonsense...

took down this folder - helped. Thank you!

who can help with svchot? my contact details whatsapp viber +7 999 171 60 74 skype West00073 I will be grateful. Tested the computer in all possible ways does not help

who can help this SVSHOT just tortured and tried everything. Is there a specialist who can solve this issue?

All the methods indicated in the article did not help me, I decided to read the comments and they most often said that this was not a virus, but updates, and I turned off these updates and everything went away

Thank you!! removed the folder. corrected;)

I beg your pardon, nerd. other processes in Sestem32

And if the process that loads the CPU is located not like all the other svchosts in Win32, but in AppDataRoaming?

thanks, deleted the folder and everything is fine.

I was helped by advice from comments, from Roman on 08/30/2016, exactly the second (additional) way, through Administration!

ATP everything fell into place!

Can I contact you on Skype?

The other day I myself encountered such a problem that the computer (or rather a laptop) began to "slow down". Of course, as an experienced user, I immediately launched it and saw what the process was loading. svchost.exe
After some time, I solved the problem with "brakes" and now I share with site visitors how this can be done in several ways.

First of all, I’ll immediately warn you that, firstly, I did this on Windows 7 and the methods will be described specifically for it. How it will look in other Windows families, I cannot answer exactly, but they are similar. And secondly, the article is more focused on advanced users (after all, you somehow determined what exactly the process is loading, which means you already more or less understand Windows) and therefore the instructions may seem incomprehensible to some.

So, to begin with, I will show my Dispatcher:

As you can see, the processes are sorted by the most occupied resources (in particular, by Memory) and in the first place it is svchost.exe. Well, then you can still see that it also takes up decent space. More than it should be.

Those who see this process for the first time may ask themselves at least two questions: What kind of process is svchost.exe?" And " Why are there several of them in processes?". I answer immediately and briefly: svchost.exe is a system process that is needed to start system services (there are a lot of them and it makes no sense to list everything because it depends on many factors). And that is why they can be launched from 4 to infinity (each is responsible for some service).

By the way, pay attention to which user this process is running from (on the same "Processes" tab). In the normal case, this should be "system" (system), or "network service", or "local service". If there is the name of your account or "Administrator", then I can "congratulate" you - you have a virus.

Well, now let's move on to the elimination of the brakes.

1) Of course, the simplest and most common is to reboot. As they say, "Seven troubles - one reset." Often, just a reboot is enough and many problems can be fixed (although sometimes even temporarily).

2) Our favorite viruses... We check the computer for their presence. Even if you already have an antivirus installed, then you should not forget that there are viruses that cannot be detected by one antivirus, but another can easily find them. The bases are different and the algorithm is the same. Therefore, check for free versions of products from the most popular developers, for example, and.
They are one-day / one-time and after checking you can delete them.
You can also try the program. She found 8 "malware" in me

3) Check for Windows updates and install them if available

4) On the contrary, disable Automatic Windows Update ( , ).

Only then do not forget to check and search for updates at least once a week.

5) Right-click on the busiest process and select "Go to Services"

6) Right-click on the process and select "End Process Tree"

7) On the system drive, in the Windows folder, there is one interesting folder called Prefetch. It is needed to speed up the work of services and services. Delete it =) Then end the process tree.

8) If there is a wuauclt.exe process, then in the Windows folder, delete all folders from the SoftwareDistribution folder, and then kill this process.

9) Try or roll it back a few days (if possible)

10) Alternatively, delete everything in the *:\WINDOWS\system32\Tasks folder, and then end the process tree.

11) And finally, the most radical and tough way is to reinstall the system. That is, if you don't mind...

After each method, it is highly desirable to reboot.

There may also be problems in that it fails and does not cope. You can try to take out the bar and look at the behavior of the system, and then another.

It may also be that some program wants to update, but for some reason cannot (for example, even an antivirus). Therefore, it loads both this process and the entire computer as a whole. Observe how the system reacts to the launch of programs. Maybe she starts to "stupid" just when some program is loaded after autorun. At this point, either help her update, or remove and reinstall.

Finally, I will write that the 7th method helped me, but it is likely that the 1st will be enough for you. Write comments if there are any other ways or how you solved the problem with the "brakes" of the system due to the svchost process

The Windows operating system performs a large number of "background" tasks that can adversely affect the performance of low-powered computers. One of the processes that loads RAM, disk or CPU is System.exe. In the "Task Manager" you can see that the System file loads Windows, and to be more precise, it loads the hardware of the computer. The owner of the computer can solve this problem on his own if he performs a number of simple steps.

The System process loads the hard drive and memory to 100%

System is a Windows operating system process that is not a virus, contrary to popular belief. It is responsible for the operation of applications in the "background" mode, that is, without active control by the user. This process is not hidden, and it can be easily found in the Task Manager.

The main problem with the System.exe process is that it cannot be stopped. Thus, if System loads the RAM or hard drive of the computer, it will not be possible to turn it off using simple methods. Lowering the process priority using standard Windows tools also does not lead to success.

The System process is notable for the fact that it takes up RAM little by little, and eventually loads it completely. At the same time, in the "Task Manager" it may be noted that the System loads no more than 200-400 MB of RAM, and it will be completely filled, and the computer will begin to freeze heavily when performing any tasks. Similarly, the System process can load the hard drive.

To prevent the System file from loading the computer, consuming exorbitant resources, some “background” tasks should be disabled in the Windows operating system:

If any computer owner can turn off and remove DrWeb without unnecessary prompts, then the other two tasks are more difficult to handle, and we will talk about them in a little more detail.

How to disable automatic Windows 10 updates and system services

Microsoft in the operating system Windows 10, and earlier versions, has provided the ability to automatically update the software. Unfortunately, this function on some computers leads to the fact that when checking for available updates on Microsoft services, the System file loads the RAM or hard drive. In this case, the only solution is to disable Windows 10 Automatic Updates. Note: If you have disabled Windows 10 Automatic Updates, we recommend that you check for new operating system builds every few months (or weeks).

Disabling automatic updates in Windows 10 is quite simple, for this you need:

After following the instructions above, the operating system will disable the service that automatically checks, in the "background", the relevance of the version of Windows operating on the computer.

In addition to automatically updating Windows 10, so that the System process does not load the system, it is necessary to disable some services. In the "Services" menu, which is opened by the services.msc command, you also need to stop, and then disable, the following local services:

Note: Depending on the version of the Windows operating system, as well as the number of drivers and codecs installed, some of the services listed above may not be available.

After disabling DrWeb antivirus, Windows 10 automatic updates and some services, you should restart your computer. By disabling a number of tasks that took up a lot of computer resources, the overall performance of the system should increase, and the problem with loading the hard drive and RAM will disappear in the Task Manager.

Video instruction

In order not to pour water, I will present the technical characteristics of the experimental:

Memory

Super PI result

From the screenshots it can be seen that there is a very weak system with a very small amount of RAM, which greatly slows down the computer. Therefore, Windows 2000 SP 4 with Cumulative Service Pack 1 (SP1) was used as the OS. In principle, Windows 2000 128 MB of RAM is more or less enough, but as soon as you install a modern antivirus, the memory immediately runs out, and terrible brakes begin, leading to the impossibility of working. The most optimal would be not to install an antivirus at all, but this option is not possible. This is due to the fact that about 90% of student flash drives are infected and earlier I tried not to use antiviruses in that class, as a result it turned into a hotbed of all kinds of infection, and this option is unacceptable. So I started looking for an antivirus that would provide decent protection with very little system resource consumption.

The choice fell on the following vendors:

1.DrWeb 4.44- I have been using it for a long time, a product that has been tested, so to speak, by time and does not consume many resources at all;

2.DrWeb 5.0- relatively new version;

3.DrWeb 6.0- the latest version that I use;

4.Avast 5.0- a very good free antivirus with a nice interface;

5.Avira 9- free with good reviews, version 9 was chosen, not 10, because the 10th consumes more resources, according to other people, plus version 9 is Russified.

The testing methodology was as follows:

The OS was installed with the removal of all partitions and re-partitioning the hard disk again in order to get rid of possible viruses and file system bugs. All drivers were installed, the OS was configured, the necessary software was installed, after that it was configured and the system was cleaned with defragmentation of the system partition.

A sector-by-sector copy of the system partition was created, from which the system was then restored in order to minimize the impact of installing antiviruses, so the system was pristine for each new antivirus.

The tests answered 3 questions at once:

1. How much the OS boot time slows down after installing the antivirus;
2. How much RAM is consumed by the system with installed antivirus;
3. Is it possible to work on the computer after installing the antivirus.

The technique was as follows: an antivirus was installed, a reboot was performed. Then turning off the computer, then turning it on and measuring the boot time, the time was measured from the moment the power button was pressed until the system was fully loaded. It waited about a couple of minutes and the task manager opened and a screenshot was taken with resource consumption. After that, there was an attempt to work, which included navigating the file system using Explorer and Total Commander, viewing pictures, launching a Word document, and opening computer properties.

Let's get down to the fun part - the tests!

I'll start with the download time.

Table with loading times

Here I would like to highlight DrWeb 4.44, DrWeb 6.0 and Avast, which practically do not slow down OS loading. For all those who use version 5 of DrWeb, I recommend switching to version 6. Avira was not as easy as advertised.

It's time to take a look and answer the main question, how much does each antivirus eat.

First, screenshots of the task manager:

Without antivirus

DrWeb 4.44

DrWeb 5.0

DrWeb 6.0

For convenience, I will collect all the data in a table:

Table with the amount of memory consumed

Avast consumes the minimum amount of memory, which is extremely unusual for a modern antivirus product. This is followed by DrWeb 4.44 version, but this is not surprising, because. product is very old. Approximately the same consumption of DrWeb 6.0 and Avira. Still, I thought that Avira would eat less system resources, so once again it was over-praised. Well, it's just that DrWeb 5.0 has a huge resource consumption - this, by the way, explains the very long loading of the OS, the lack of RAM forced it to use the swap file.

And in conclusion, subjective feelings about the possibility of working on a computer after installing the above anti-virus products.

The fastest system works without antivirus at all, which is quite logical.
The system with DrWeb 4.44 worked very fast, there was practically no slowdown. The installation of DrWeb 5.0 made it completely impossible to work at the computer. DrWeb 6.0 was more merciful, but it was still not comfortable to work after installing it. Avast I didn't notice at all. And Avira was noticeable, but did not cause discomfort with its presence.

Kind of like a conclusion.

According to the task, antiviruses can be distributed as follows:

1. Avast 5.0- very modest system requirements for a modern antivirus product. Tiny memory consumption. Minimal impact on system boot. Freeness in combination with a very good detection made it the winner, it will be installed for scrap metal in that class.

2. DrWeb 4.44- turned out to be also very undemanding, but it is worth considering a couple of points. Firstly, the product is very old and will not be able to provide the proper level of security. And secondly, recently, when updating anti-virus databases, OS crashes into BSODs have been observed. Although updating it is quite easy, it is enough to download the latest databases, which are tiny and weigh only a hundred kilobytes, unlike updates for other antiviruses that pull up to hundreds of megabytes!

3. Avira 9- To be honest, I was disappointed. Everyone presents it as a very light and fast anti-virus product that does not load the system, but on testing it turned out to be completely different. But the third place is also not bad, after all, after installing it, you can work at the computer.

4. DrWeb 6.0- both pleased and upset. It did not slow down the system boot, but it still consumed quite a lot of resources, although compared to version 5, Danilov's laboratory did a great job of optimizing, now I understand why they offered a free upgrade from version 5 to version 6. But despite the optimization, this action was not enough to ensure comfortable work on a weak machine. Although the manufacturer recommends it for very weak machines, it will be unpleasant to work in practice.

5. DrWeb 5.0– a complete disappointment! It consumes too many resources, which makes it completely impossible to work! I recommend everyone urgently switch from version 5 to version 6!
All antiviruses installed without problems. Although it is probably worth clarifying something. DrWeb 6.0 - required installation of cumulative update package 1. Avira - required installation of version 6 of IE. And Avast requires a Flash player to display graphs, although it works fine without it.

Thank you all for your attention.

Sincerely, StrateG aka Alexey Shestakov.

The choice of antiviruses was due purely to my preferences. No requests or offers to test other antivirus applications are accepted!

The publication was carried out with the permission of the author of the article and on his behalf (nickname), the original is located on the PS of overclockers.

Good afternoon my dear readers

In this post, I will tell you how to reduce the hard disk space occupied by the system for the recovery function.

How much do you think this "reptile" eats from hard drive space?

As much as 12 percent of your , this option is the default. That is, if the local disk is 100 gigabytes in size, this option can easily eat up to 12 GB from it. This is my example. And this is the situation on every disk of your hard drive.

I don't think it's the most pleasant option. But, thank God, there is such a good thing as setting system recovery, where we can not only reduce the maximum size, but also turn it off altogether.

Actually, for system recovery 1 GB is enough, so you can safely choose the size for each disk.

What should be done to edit system recovery options?

To do this, click on the icon (not to be confused with the shortcut) " Right-click and select properties from the menu.

In the window that appears, select the tab " System Restore". You should see a window like this:

You can immediately disable recovery by ticking the " Disable System Restore on all drives”, then you don’t need to configure anything, but if you don’t want to do this, then I advise you to at least reduce the amount of memory consumed to one gigabyte.

How to do it?

We select any disk, you can start in order, and press the button " Options". And this window will appear in front of you:

The figure shows that at the moment this option can take up to 12 GB, now my recovery files take up only half of this size - 6 gigabytes.