Cookies help us deliver our services. By using our services, you agree to our use of cookies.

Learn more Got it

Home
Malware
Tutorials
Tools & Resources
About
Contact

Jun 18, 2015

How to fix: Svchost.exe (netsvcs) memory

leak or high CPU usage problems
Svchost.exe is a generic and legitimate Windows process that loads several other critical services
for proper Windows operation. But in several cases users are complaining that Svchost.exe is
hogging their CPU or Memory resources without obvious reasons e.g. at moments when the user
doesnt run any programs.

In many occasions, I have troubleshooted the Svchost.exe (netsvcs) problem by using different
solutions to resolve the problem depending on each situation.

From my experience, the Svchost.exe high usage problems in most cases occur on computers
that are infected by a virus or a malware program. In the rest of the cases, the Svchost.exe
(netsvcs) high CPU or Memory leak problems, can be caused by a Windows Update, or by a full
Event log file or by other programs or services that start many processes during their execution.
In this tutorial you can find detailed instructions on how to troubleshoot and resolve memory
leak or high CPU usage problems caused by svchost {Svchost.exe (netsvcs)}.

How to solve Svchost.exe (netsvcs) high memory or CPU

usage problems.
Solution 1. Scan your computer for viruses.

Solution 2. Find and Disable the service that cause the svchost high usage problem.

Solution 3: Empty Event viewer log.

Solution 4: Troubleshoot Windows Updates problems.

Solution 1. Scan your computer for viruses.

Many viruses or malicious programs can cause the svchost.exe high CPU/memory usage
problem. So, before you continue to troubleshoot the Svchost.exe high CPU usage problem, use
this Malware Scan and Removal Guide to check and remove viruses or/and malicious programs
that may be running on your computer.

Solution 2. Find and Disable the service that causes the svchost high CPU usage problem.

Svchost.exe is a process that is needed by several services or programs in order for them to run.
So, determine which service or program runs under the svchost.exe process and is hogging your
systems CPU and memory resources and then proceed to disable or totally uninstall that
program (or service).

1. Press Ctlr+Alt+Del keys simultaneously and then open Task Manager.

2. At Processes tab, check the Show processes from all users checkbox.
3. Right-click on the high usage svchost.exe process and select Go to Service(s).
4. At services tab you should see several highlighted services that run under the svchost.exe
process.
5. Now it s time to find out which process is hogging CPU resources: To do that, you have two
ways.

A) You can perform a sequentially search using Google (for all highlighted services) and see if
the searched service is critical or not for your computer.

Or

B) You can try to sequentially stop services (one by one) until CPU resources come back to
normal. To stop a service temporary:

Choose a service
Right-click on it, and choose Stop Service.
6. After you have figured out the culprit service or program, then navigate to Services in
Computer Management to disable that service (or totally remove the culprit program).

To disable a service on your computer permanently:

1. Simultaneously press Windows key + R to open run command box.

2. In run command box, type: services.msc and press Enter.

3. At Services management window, right-click at the culprit service and choose Properties.

4. Change the Startup type to Disabled, press OK and restart your computer.
Solution 3: Empty Event viewer log.

In some cases the svchost.exe high CPU (or high Memory) usage problem has to do with the
large log files in Windows event viewer. So, another solution is to clear Event Viewers log. To
do that:

1. Simultaneously press Windows key + R to open run command box.

2. In run command box, type: eventvwr and press Enter.

3. At Event Viewer: Double-click to expand Windows Logs.

4. Right-click on Application and choose Clear Log.

5. Perform the same operation and clear the Security, Setup, and System log.

6. Restart your computer.

Solution 4: Troubleshoot Windows Updates problems.

In other computers, the svchost.exe high usage problem may occur when Windows searches for
updates (in the background). In order to troubleshoot high CPU usage problems during Windows
Update, perform the following steps.

Step 1. Force Windows to re-create an empty Windows Update Store folder.

The Windows Update Store folder (commonly known as SoftwareDistribution folder), is the
location where Windows stores the downloaded updates. If this folder is corrupted, then you will
face problems during Windows Update. So, first try to force Windows to re-create a new empty
SoftwareDistribution folder. To do that:

1. Simultaneously press Windows key + R to open run command box.

2. In run command box, type: services.msc and press Enter.

3. Search for Windows Update service, then right click on it and select Stop.

3. Navigate to C:Windows folder.

4. Delete * (or rename e.g. to SoftwareDistributionOLD) the SoftwareDistribution folder.

* Note: Upon restart, the next time the Windows Update checks for available updates, a new
empty SoftwareDistribution folder will be created automatically by Windows to store updates.

5. Restart your computer and then try to check for updates.

6. If the svchost high CPU usage problem persists, continue to the next step.

Step 2. Run Windows Update Troubleshooter

1. Download Microsofts Windows Update Troubleshooter to your computer.

2. Run Windows Update Troubleshooter and press Accept at the first screen.
3. Select the Detect problems and apply the fixes for (Recommended) option.
4. Let the program to fix problems with Windows Update and then restart your computer.

5. Check for Updates again and if the svchost.exe high CPU usage problem persists continue to
the next step.

Step 3. Install the latest version of Windows Update Agent.

1. Navigate to Windows Update Agent download site and download the appropriate package for
your Windows edition and version.

2. Run WindowsUpdateAgent*.exe
3. Close all open programs and choose Next.

4. Choose Agree and press Next.

5. Let the installer finish the installation and then restart your computer.
Step 4. Install the critical Microsoft Security Bulletin MS13-097.

1. Navigate to https://technet.microsoft.com/library/security/ms13-097 and click at the

appropriate Internet Explorer Cumulative Security Update (2898785) according to your Internet
Explorer version and Windows Version.
2. At the next screen choose your IEs (menu) language and choose Download.
3. Run IE11_Windows*-KB289875*.exe and follow the on screen instruction to install the
update.

4. Restart your computer and check for updates again.

Step 5: Fix Windows Corrupted System files by using the System Update Readiness tool
(aka Deployment Image Servicing and Management DISM tool).
1. Navigate to System Update Readiness tool download site and download the DISM tool for
your Windows edition and version. *

* Note: Windows 8 already contains the DISM tool and you dont have to download anything.
Just open an elevated command prompt and type: DISM.exe /Online /Cleanup-image
/Restorehealth (Detailed instructions on how you can run DISM in Windows 8/8.1 can be found
here)

2. Double click to install the downloaded file (e.g. Windows6.1-KB947821-v34-x86.msu).

3. When the installation is completed, restart your computer.

4. Force Windows to check for updates again and see if the svchost high usage problem still
persists.

UPDATE 16/10/2015

Other solutions that I have applied in different cases (computers) and worked.

Case 1: Applied on a new Windows 7 SP1 installation.

a. Uninstall the KB2562937 from Installed Updates.

b. Restart the computer.

Case 2. Applied on a HP Notebook with Windows 7 SP1 Home.

a. Install the Security Update KB2993651 according your OS version.

 Security Update for Windows 7 for x86 based Systems (KB2993651)
Security Update for Windows 7 for x64-based Systems (KB2993651)
Security Update for Windows 8.1 for x86-based Systems (KB2993651)
Security Update for Windows 8.1 for x64-based Systems (KB2993651)

b. Reset Windows Update Components.

c. Restart the computer.

If after doing all these, you still face high CPU or Memory usage problems, then disable
Windows Update completely or re-install Windows on you computer. If you use Windows 8 or
Windows 8.1 you can perform also a system refresh.

Good Luck!

If you want to stay constantly protected from malware threats, existing and future ones, we
recommend that you install Malwarebytes Anti-Malware PRO by clicking below (we do earn a
commision from sales generated from this link, but at no additional cost to you. We have
experience with this software and we recommend it because it is helpful and useful):

Full household PC Protection - Protect up to 3 PCs with NEW Malwarebytes

Anti-Malware Premium!

If this article was useful for you, please consider supporting us by making a donation. Even $1
can a make a huge difference for us in our effort to continue fighting spam while keeping this
site free:

Remove BetterSearch.tk search hijacker How to Install Windows 10 in a Virtual Machine

(VM)

60 Comments

1. Will Elmendorf
Aug 15, 2015 @ 23:53:32

Good stuff!
I think this did the job.
The latest (8/11/15) updates for W7 have a new update client that is supposed to address
some of these issues.
It seems to have worked (along with the other stuff you mention first).
Ill be donating an unfortunately small amount.
 Reply

o lakonst
Aug 16, 2015 @ 12:58:04

@Will Elmendorf: Thanks for the info and donation

Reply

2. Paul
Aug 25, 2015 @ 12:40:34

Thank you!
It helped!

Reply

3. Dave
Aug 28, 2015 @ 09:45:31

Thanks a lot,
The problem fixed.
wauaserv which is windows update service caused the problem, so i disabled the service.

Reply

o William
Jan 08, 2016 @ 20:59:59

Dave, thats exactly what was causing one of my test boxes to freak out. Thanks
for that tip!

Reply
 o Adnan Khan
Jan 16, 2016 @ 12:38:34

yeah windows update sucks :/ thankyou very very very much this article is

amazing

Reply

4. Ryan
Sep 01, 2015 @ 12:42:31

Thumbs up, It worked out the issue. I think the actual problem lies with windows update
and you addressed it very well. Thank you so much!

Reply

5. Al Pinales
Sep 10, 2015 @ 00:16:04

Muchas gracias por este aporte, solucione mi problema!

Encontre que el servicio de Windows Update era quien estaba drenando la memoria de la
PC.

Saludos.

Reply

6. Werner Lueckel
Sep 14, 2015 @ 14:42:28

Unfortunately all these steps (including step 5) did NOT help. If I start an update for my
Windows7, the message Es wird nach Updates gesucht pops up and stays endless.
When I watch the task-manager I can see alternating the processes TrustedInstaller.exe
and svchost.exe -k netsvcs (which seems normal), but after a while only svchost
netsvcs runs with CPU-load 99% and stays there endless
SO: I have to deactivate my Windows-Update completely.
 Reply

7. Cijo Cyril
Sep 16, 2015 @ 16:36:48

Very well, thank you

Reply

8. Muhammad Fahman
Sep 16, 2015 @ 16:47:37

It really worked, I found the problem. It was windows update that caused my computers
memory full. When i stopped the service, my memory usage decreased about 1GB ! I did
not believe this, why my windows update service use so many memory ?
Thank you for the tutorial, that was really helpful

Reply

9. Steve Testerman
Sep 17, 2015 @ 20:28:18

Try installing windows update: https://support.microsoft.com/en-us/kb/3050265

It resolves the issue of the windows update service using excessive amounts of memory.

Reply

10. Iain
Sep 24, 2015 @ 04:11:43

Worked perfectly, solved so many other issues I was having.

Thanks!

Reply

11. Matej
Oct 05, 2015 @ 10:05:18
 Thank you. Windows Update issue fixed memory usage to normal level.

Reply

12. Aleksandar
Oct 08, 2015 @ 19:59:07

Thanks a lot! I didnt do any of those things, I just set the Windows Update service
startup to manual and the CPU usage dropped from 64% to 10% immediately, but your
guide definitely pointed me in the right direction. Again, thank you.

Reply

13. Nea Gicu

Oct 09, 2015 @ 00:11:49

Excellent ! It solved my problem the Windows Update service was using svchost and
driving CPU and memory usage to the sky. Thanks !

Reply

14. JZone
Oct 16, 2015 @ 02:42:57

Awesome it helped tremendously! Windows Update was effing up my memory usage.

Thanks again.

Reply

15. Diogo
Oct 25, 2015 @ 03:46:41

thankyou so much. it was windows update

Reply
16. Blaine
Oct 26, 2015 @ 02:12:19

Still having this problem. Tried all of these solutions and none work. Tried updating to
one of the windows fixes and it gives me an Error code 80080005. Tried turning off
windows defender. Tried turning off automatic update. Tried system restore. Nothing
works. And I cant do windows updates in Safe mode. Safe mode is the only time that the
computer runs normally.

Reply

o lakonst
Oct 27, 2015 @ 08:05:18

@Blaine: Download and run the System Update Readiness tool (Step 5)

Reply

o Eric
Nov 22, 2015 @ 01:00:04

Disable the Windows Update service.

Reboot.
Problem solved.
Run Windows update manually periodically if you like the latest patches.

Reply

17. Alireza
Oct 27, 2015 @ 23:56:57

Thanks alot!
I tried all steps. System Update Readiness tool fixed high memory usage. Its more
effective than others.

Reply
18. Alireza
Nov 03, 2015 @ 18:59:11

Hi and thanks a lot for this guidance.

I tried all steps except step 5 windows update standalone installer and it is ok when
windows update is stopped.
I cant install windows update standalone installer because of this error:
this update is not applicable to your computer
please help me

Reply

o Alireza
Nov 03, 2015 @ 19:46:56

excuse me, step 5 already installed.

A hotfix of microsoft for svchost problems couldnt install.
This below link:
http://support2.microsoft.com/hotfix/KBHotfix.aspx?kbnum=2889748&kbln=en-
us

Reply

19. ResonatingMakon
Nov 10, 2015 @ 23:33:33

thx dude helped a lot 8)

Reply

20. Swich
Nov 20, 2015 @ 23:06:36

Ive finally solved simply deleting SoftwareDistribution folder. Great job! I tried the
solution to this problem for some time. Thks

Reply
21. Abazek
Nov 21, 2015 @ 21:50:52

Fixed this problem on my Win7 computer by going into Computer Management then
disabling all the Tasks Scheduler Tasks under Microsoft>Windows>Application
Experience and Microsoft>Windows>Customer Experience Improvement Program.
Then going into Services and disabling the Application Experience service. My
computer hasnt ran this quickly since the day I got it. High CPU Utilization problem
completely solved!!

Reply

o Mladen
Jan 19, 2016 @ 08:53:54

yesss !!

Reply

22. Abdelhaq
Nov 26, 2015 @ 00:31:09

Hi,
very usefull informations, thank you for sharing how about windows server 2008 ?

Reply

23. Mike
Dec 06, 2015 @ 01:16:30

https://support.microsoft.com/en-us/kb/3102810

this solves it, and it warns if you install a language pack you will need to do it again, this
requires sp1 installed first.

Reply
 o gg
Dec 09, 2015 @ 14:26:55

Thanks a lot. After doing all the above, the kb-3102810 solved my issue too.

Reply

o PS
Dec 30, 2015 @ 08:05:52

This kb3102810 did it for me too. Thanks.

Reply

o Thomas
Jan 09, 2016 @ 15:45:48

This last update worked for me as well Im completely perplexed by this as I

have installed several 10s of Windows 7 PCs over the last few years and
*NEVER EVER* had this issue at all.

Reply

24. Serdar Artuc

Dec 07, 2015 @ 22:35:43

Hi! I stopped and restarted the wuauserv service and the problem appears to be
resolved. To be on the safe side I changed the Startup type of this service from
Automatic (Delayed Start) to Manual.

Reply

25. wall46
Dec 08, 2015 @ 11:45:45

Nothing worked for svchost high CPU usage, except tip #5 completely solved it.
W7 ultimate X86 German
Thanks a lot
 Reply

o Zento
Dec 09, 2015 @ 19:57:24

Hi! Sorry, but I couldnt find tip #5 in this post and nothing has worked in my
Windows. Please, could you explain what worked for you? Thanks!

Reply

26. wall46
Dec 08, 2015 @ 11:51:22

oh, not to forget: I donated 5$ as a small thank you

Reply

o lakonst
Dec 08, 2015 @ 18:29:08

@wall46: Thanks

Reply

27. Dale
Dec 11, 2015 @ 21:08:05

Awesome advice!
After trying everything on the list from the top, my fix came by deleting the Software
Distribution folder. Dont forget to reset Windows Update properties to Automatic
Updates before you restart if you changed them previously. After deleting the folder and
restarting, I went back to check and a new folder was made. Svchost.exe (netsvcs) is a
problem no more!

Reply

28. Dale
Dec 12, 2015 @ 00:00:47
 Oops! Spoke too soon. Svchost.exe (netsvcs) has returned to sucking my CPU.
But I did find the cause and solution
I opened Microsoft Security Essentials, and clicked on the Settings tab.
At the bottom there is a line : Limit CPU usage during scan to:_____
I changed my setting from 50% to 20%.
The fan stopped and CPU instantly went back to cool runnings!
Not sure why it was scanning in the middle of the day since I had it set for Sunday @
2:00 AM
Anyway, it worked for me.

Reply

29. Ry
Dec 12, 2015 @ 11:16:44

Guys! Just solved this on my machine, simple really!!!!!

Go to the task manager and click processes and then down on the bar show processes for
all users, then right-click svchost exe and select go to service, which simply directs
you to the services running the given process, then, what I did was I disabled the
windows update service . you guys!!!! not only was the cpu usage back to normal (1 to
3 per cent) I could also launch nfs rivals as I had been able before the affliction (this
background looking for updated was somehow blocking the game from launching!!!!)
and voila you guys!!! SOLVED!

Reply

30. Blair
Dec 18, 2015 @ 18:38:11

Thanks so much for this article. Turns out my issue was the Windows Update problem on
Windows 7. I tested by just disabling the update service and run-away memory problem
went away. Really appreciate your research I was pretty stymied by this until I found
your posting

Reply

31. wall46
Dec 19, 2015 @ 18:29:59

Forgive my bad English. Im talking on:

 Step 5: Fix Windows Corrupted System files by using the System Update Readiness tool
(aka Deployment Image Servicing and Management DISM tool).

Reply

32. shab
Dec 22, 2015 @ 16:55:37

its wonderful******* thank you very much.:*

Reply

33. rezai@muenster.de
Dec 23, 2015 @ 22:59:07

Its devently made by Microsoft forcing us to update on Win10!! It epears now on each
computer in my office. None of the problems can be solved without dissableing Windows
update. And this is NOT a propper solution!

Reply

34. Jo
Dec 27, 2015 @ 15:12:40

I love you. After 12 hours of fruitless troubleshooting, I found your page and now I am
bowing and prostrating. I cannot thank you enough.

Thank you. Thank you. Thank you. Thank you. Thank you.
Ad infinitum.

Reply

o Jo
Dec 27, 2015 @ 19:19:23

I also donated $5, which is sadly all I can afford at the moment. I cant really even
afford the $5, but I appreciate your time and help so much that for once I havent
thought twice about donating to my own self-charity.
 I have also kept this page link and if anyone else ever has the same problem I will

direct them here, and MAKE THEM, sorry, ask them to donate also

Reply

35. Basilio
Dec 27, 2015 @ 19:05:57

Solution 4: Troubleshoot Windows Updates problems.

Working. yeaaaaaaaaaaaaaa thaks

Reply

36. Jay Lynch

Dec 30, 2015 @ 23:58:53

For me it was the Windows Update Service, using 50% of the cpu even after my laptop
was on for hours. I had to use the third party Process Explorer program to see the list of
services used by svchost.exe (there were quite a few), as the Windows Task Manager
would not display the services being used. As soon as I disabled the Windows Update
Service the cpu went from 50% plus usage to a few percent. It was necessary to disable
the service while in Safe Mode. Ill just manually check for updates, but its Windows 7.
How did Microsoft let this happen?

Reply

o John
Jan 20, 2016 @ 06:51:22

Exact same for me, update service is using 50% CPU as well. Cant stop laughing
at Microsofts Install this update to fix updates mentality. What a scam outfit, I
totally agree with rezai@muenster.de saying Microsoft could be attempting to
force people to Windows 10. Most people with this problem simply assume they
need to upgrade because their PC is running slow. I remember years ago a similar
thing happening that forced people to upgrade windows at the perfect time a new
windows version released because a nasty virus viruse emerged that ingeniously
replicated the actual windows security center. Pretty obvious where that virus
 originated. Microsoft are complete liars, they said Windows 10 doesnt spy on its
users, pure lie. Then they said the spy features could be turned off, another lie.
Insulting Xbox One loyalists by not allowing used games and backwards
compatibility, then requiring mandatory internet connectivity. Their days are
numbered, google is catching up fast.

Reply

37. Alireza
Jan 04, 2016 @ 22:17:55

Thank you for info.

Reply

38. morteza
Jan 14, 2016 @ 22:10:54

thanks very much

excellent

Reply

39. Chales
Jan 26, 2016 @ 23:17:01

This is by far the best computer help site I have ever seen.
You guys are motherfucking awesome

Thanks

Reply

40. Neelesh
Jan 27, 2016 @ 16:58:28

This really helped me.

Non working windows update was clogging the system.
Thank you so much.
 Reply

41. Colin Walters

Jan 30, 2016 @ 13:44:52

My experience of this problem, is totally different.

Having spent weeks trying to solve the problem, and applying various fixes which did
not work. I deliberately left Windows Update checking for updates running, with
SVCHOST.EXE using 99% of the CPU. SIX HOURS later it came up with a list of 20
updates to apply. So only the problem was that the silly progress bar DOES NOT
show any progress when behind the scenes there obviously is progress, and we just need
to wait!!

Reply

42. mike
Feb 01, 2016 @ 19:00:23

bloody windows update, thought i had it disabled, does have a habit of turning itself back
on though

Reply

o Samster
Feb 08, 2016 @ 10:15:49

You need to make sure to Stop the service AND to Disable it.
If you just stop it it will will get automagically resurrected.

Reply

43. @ykut@akman
Feb 07, 2016 @ 13:53:31

After I reset my Toshiba Satellite notebook to factory settings, I had both Windows 7 64
bit update error and svchost.exe problem which works all the time at the background and
eats all the cpu and fan [ do not know why and how but Windows Update Agent
7.6.7600.320 automatically puts itself to registry immediately right after factory reset
even I did not start to update windows and no internet connection by the way ]. This
agent called 7.6.7600.320 was released in August 2014 and original factory settings goes
 back to 2013 // That quite STRANGE either !! In my opinion this agent changes itself
with older version at the registry records without your knowledge and permission as a
trusted installer mode. Till yesterday that Ive found this page and articles, Ive tried
several things but couldnt fix it.
I did all the things step by step as shown above. It worked perfectly and Windows found
and installed more than 1 GB update ( it took around 25-30 minutes to find the all
updates, so be patient and watch the routers light time to time and do not surf at that
moment.
PS: 1st. of all be sure that; your pcs time time zone & regional settings are correct.
After applying these steps told here, be sure that BITS, Windows Module Installer &
Windows update services are already started position. Keep in mind that some of the
updates only need shut down some of them need restart.
After I took all the important necessary updates I needed , I have disabled the windows
update service and I will check the updates time to time by myself. Right know I both
back up the system image and REGISTRY in an external hard drive! I hide the
(KB3035583) because dont want to upgrade my system to windows 10!
Thank you very much all you guys for precious help.

Reply

44. Zach
Feb 16, 2016 @ 00:40:39

After month and a half of figuring this out all I did is went into services.msc and changed
windows update from Automatic (DS) to Manual THEN went and installed kb-3102810
with no issues. I then went into windows update off of all programs changed settings to
check for updates but let me decide to download/install. Lastly I pressed the check for
updates button in windows update then after about ten minutes all the updates loaded
with no issues. I downloaded and installed with no problem. I recommend like many
others to turn off Automatic Updates and manually install them yourself. Much easier,
less headaches.

Reply

45. monte
Feb 17, 2016 @ 01:00:40

Hi, none of these ideas / fixes worked for me im still running at 100% CPU and my only
fix is disable windows update permanently and im sure that isnt good for laptop or PC?
thats after 3 re installs of the operating system and trying 2 different hard drives.
Regards

Reply
Leave a Reply

Your Name *

Your Email *

Your Website

Featured

Best Free Antivirus Programs for Home use.

Quick Malware Scan and Removal Guide for PCs.
How to install and clean your computer with Malwarebytes Anti-Malware Version 2.0
(FREE)
Full Malware Scan & Removal Guide to Clean Heavy Infected Computers
Protect your children and yourself while online

About
Contact
Privacy Policy
Terms of service
Malware
Tutorials

wintips.org - Windows Tips & How-tos 2016

Logo design: abimation.eu
By Konstantinos Tsoukalas