While I am thinking about it I wanted to ask about this one as well.
I have a Windows 7 pro 64bit system with single core Sempron CPU and 2GB DDR2 RAM. This is primarily used as a gateway (the sprint air card I currently use is not compatible with PFSense, and my Cradlepoint router is not working correctly).
Every so often CPU usage will spike, and after several hours drop back. The process that is hitting it is an SVCHost process, and I have been unable to track down the cause. Though this is not really a big deal for what I am using the system for, I would like to have it resolved for when I am able to get some upgrades to expand it's functionality.
I have included the handles associated with this instance of the process.
The primary programs running are
I am really just looking for ideas, so don't feel pressured into giving me a definitive answer right off the bat.
Thanks.
I have a Windows 7 pro 64bit system with single core Sempron CPU and 2GB DDR2 RAM. This is primarily used as a gateway (the sprint air card I currently use is not compatible with PFSense, and my Cradlepoint router is not working correctly).
Every so often CPU usage will spike, and after several hours drop back. The process that is hitting it is an SVCHost process, and I have been unable to track down the cause. Though this is not really a big deal for what I am using the system for, I would like to have it resolved for when I am able to get some upgrades to expand it's functionality.
I have included the handles associated with this instance of the process.
Code:
Process: svchost.exe Pid: 1468
Type Name
ALPC Port \RPC Control\LRPC-68eea12945b9373a9e
ALPC Port \RPC Control\OLE9E9831D85FF34F39BBDB0135D9F2
ALPC Port \RPC Control\wcncsvc.wcnprpc
ALPC Port \RPC Control\wcncsvc.transport
Desktop \Default
Directory \KnownDlls
Directory \BaseNamedObjects
Event \KernelObjects\MaximumCommitCondition
File C:\Windows\System32
File \Device\KsecDD
File \Device\Nsi
File \Device\Http\ReqQueue
File \Device\Http\Communication
File \Device\Http\Communication
File \Device\Http\ReqQueue
File \Device\PcwDrv
File C:\Windows\System32\en-US\KernelBase.dll.mui
File \Device\Afd
File \Device\Afd
File \Device\Afd
File \Device\Afd
File \Device\Afd
File \Device\Afd
File \Device\Afd
File \Device\Afd
File \Device\Afd
File \Device\Afd
File \Device\Http\ReqQueue
File \Device\Afd
File \Device\Afd
File \Device\Afd
File \Device\Afd
File \Device\KsecDD
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
Key HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
Key HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
Key HKU\S-1-5-19\Control Panel\International
Key HKCR
Key HKLM\SYSTEM\ControlSet001\services\WinSock2\Parameters\Protocol_Catalog9
Key HKLM\SYSTEM\ControlSet001\services\WinSock2\Parameters\NameSpace_Catalog5
Key HKLM\SYSTEM\ControlSet001\services\SharedAccess\Epoch
Key HKLM\SOFTWARE\Microsoft\Function Discovery\RegistryStore\Publication
Key HKLM\SYSTEM\ControlSet001\services\SharedAccess\Epoch2
Key HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer
Key HKLM\SYSTEM\ControlSet001\services\SharedAccess\Epoch
Key HKLM\SYSTEM\ControlSet001\services\SharedAccess\Epoch2
Section \BaseNamedObjects\__ComCatalogCache__
Section \BaseNamedObjects\__ComCatalogCache__
Section \BaseNamedObjects\windows_shell_global_counters
Thread svchost.exe(1468): 1472
Thread svchost.exe(1468): 6444
Thread svchost.exe(1468): 1476
Thread svchost.exe(1468): 1476
Thread svchost.exe(1468): 1480
Thread svchost.exe(1468): 4644
Thread svchost.exe(1468): 1704
Thread svchost.exe(1468): 4644
Thread svchost.exe(1468): 1692
Thread svchost.exe(1468): 1488
Thread svchost.exe(1468): 1696
Thread svchost.exe(1468): 1676
Thread svchost.exe(1468): 2440
Thread svchost.exe(1468): 2444
Thread svchost.exe(1468): 2672
Thread svchost.exe(1468): 4644
Thread svchost.exe(1468): 2440
Thread svchost.exe(1468): 4828
Thread svchost.exe(1468): 4832
Thread svchost.exe(1468): 2456
Thread svchost.exe(1468): 6444
Thread svchost.exe(1468): 8012
Thread svchost.exe(1468): 8268
Thread svchost.exe(1468): 4836
Thread svchost.exe(1468): 2444
Thread svchost.exe(1468): 1480
Thread svchost.exe(1468): 6444
Thread svchost.exe(1468): 4720
Thread svchost.exe(1468): 4720
Thread svchost.exe(1468): 4720
Thread svchost.exe(1468): 4644
Thread svchost.exe(1468): 4720
Thread svchost.exe(1468): 4864
Thread svchost.exe(1468): 6444
Thread svchost.exe(1468): 7820
Thread svchost.exe(1468): 7852
Thread svchost.exe(1468): 7824
Thread svchost.exe(1468): 7836
Thread svchost.exe(1468): 8012
Thread svchost.exe(1468): 7832
Thread svchost.exe(1468): 7852
Token NT AUTHORITY\LOCAL SERVICE:3e5
WindowStation \Windows\WindowStations\Service-0x0-3e5$
WindowStation \Windows\WindowStations\Service-0x0-3e5$- AMD RAIDxpert
- Norton 360
- Sprint Smart View
I am really just looking for ideas, so don't feel pressured into giving me a definitive answer right off the bat.
Thanks.