svchost.exe using all my bandwidth

P

Pooky

Garfield's Teddy
Joined
Dec 16, 2007
Messages
24,504
Reaction score
21
Location
Neverland
When I switched my computer on this morning I noticed in NetLimiter that svchost was using my full linne speed.

When I expand the group there are a whole lot of IP addresses it is connected to. I have checked and no program etc. is updating or connecting to something....

What could it be?
 
Do you have ICS enabled? svchost is an umbrella process for Services, you can go into admin tools and stop likely suspects one at a time to narrow it down. I don't think command prompt with netstat -b will be any help, but you can try that also there's a switch for PID.
 
As rorz0r pointed out, process explorer is the best way to go. Also, check out the below article:

http://www.watchingthenet.com/how-to-identify-what-programs-started-svchostexe-in-windows.html

Once you've identified what apps are running svchost, you can check on Netlimiter to see which one is using up the most bandwidth. Also, I'd suggest setting up the firewall that comes with Netlimiter for the time being. It'll give you a better understanding of what's trying to access the internet. Once it's enabled you can allow apps you known to connect and deny the rest. If you start running into problems you can always stop the firewall.

Hopefully this help you narrow down the suspects.
 
There are a whole bunch of svchost processes in process explorer.

How do I know which on is using the bandwidth?
 
Can't you get a PID or something in netlimiter?
 
@Pooky You should be able to check the PID on NetLimiter. If you expand svchost.exe on NetLimiter you can see the different processes. Check the number next to the process that using up your bandwidth and then match it to the PID on Process explorer.
 
I checked the PID and it said it was svchost.exe and then in brackets it says Akamai...

There isn't anything I am aware of open that is using Akamai servers.
 
NetLimiter is buggy. Try uninstalling it.

Also, do you perhaps have ZoneAlarm installed? Get rid of that too. Windows Firewall works fine.
 
Last edited:
On my normally operating XP I have 8 instances of svchost.exe, so it's quite normal. Easiest way to find out which belongs to what is to install Prio (www.prnwatch.com). Then open Task Manager, TCP/IP tab. Make the window nice and wide. Click the "Process" heading to sort alphabetically, scroll to svchost.exe and find the one that uses data. Right click it and select Go To Process, then right click that and Go To Service.
 
Last edited:
I kicked windows off my personal netbook myself, and also from my work's laptop due to an infection which I've picked whilst connected to the internet without a firewall. :o

Said infection attacked our servers, causing them to go offline :mad:

And no, I wasn't watching porn or was visiting any warez website, was just connected directly to the internet without any firewall turned on.

So now I'm running Ubuntu without any worries.

Windows sucks for that reason - svchost.exe is used by too many processes, and is a major Achilles heel in the system.
 
Nope! The latency issue has been going on before svchost was using my bandwidth.

I don't think it's malware either.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X