Svchost.exe takes up too much CPU resources solution

Symptom Description:

After a few minutes of machine startup, svchost.exe will account for 100% of the system's cpu resources. Unplug the network cable, reconnect to the Internet for a while: svchost.exe and cpu 99% of resources;

Workaround:

Assuming you have used free anti-virus software to rule out viruses and have already used anti-spyware to rule out the effects of malware: think of ways to empty C:\\ Restart all machines in the WINDOWS\\SoftwareDistribution directory. (C:\\WINDOWS\\SoftwareDistribution is the temporary file storage directory of the Windows update service)

If the machine prompt file is being used ("Automatic Updates" service is running), the corresponding directory cannot be deleted:

Then find a way to open the Control Panel ==>Administrative Tools==>Services, find "Automatic Updates", set to manual startup, and then delete C:\\WINDOWS\\SoftwareDistribution after reboot. The problem is solved. Then open Control Panel ==>Administrative Tools==>Services, find "Automatic Updates", and revert to automatic startup restart. Note: After rebooting, it is best to let the system successfully complete an automatic system update in a place with good Internet access.

Cause analysis:

First talk about what is svchost.exe: simply said that without this RPC service, the machine can hardly get on the network. Many application services rely on this RPC interface. If you find that this process occupies too much CPU resources, it is a disaster to disable the system's RPC service directly: because the system service setting interface that restores this interface cannot be used. used. The recovery method needs to use the Registry Editor, find HKEY_LOCAL_MACHINE >> SYSTEM >> CurrentControlSet >> Services >> RpcSs, find the Start property on the right, change its value to 2 and restart.

The reason why svchost accounts for 100% of the system CPU is not the svchost service itself: the above situation is caused by the repeated retry of the update service due to the download/installation failure of the Windows Update service. The automatic update of Windows is also dependent on the background application of the svchost service, which shows that the load of svchost.exe is extremely high. Machines that often have such problems are generally unstable machines on the Internet (especially on foreign websites), such as the machines of parents at home, which often occur irregularly after several months of installation, the second week of each month. It is a high-risk period: because in recent years, MS has regularly released patches in the second week of each month). The above solution does not guarantee that it will not be a serious attack, but it is a waste of time to reinstall the operating system every few months for the svchost file.

Lesson: The problems of spoolsv.exe and svchost.exe are caused by automatic retry after the application encounters failure/exception. I want to save time for the user, but the frequency of retry is too high. Instead, it has the same effect as a virus.