Share via

SVChost.exe (LocalServiceNetworkRestricted) PID 1164, High Memory usage after 7-10 days

Anonymous
2014-03-11T15:24:32+00:00

Long time reader, first time poster...

I am having the following issues that I believe I have narrowed down the service host process mention above.  Server 2008 x86 that was migrated form server 2003 about 3 months ago.  I issue takes about 7-10 days to develop and a reboot seems to resolve the issue temporarily.

1.  Can not view event logs - "Event Viewer cannot open the event log or custom view.  Verify that Event log service is running.  No more threads can be created in the system (164) -- I verified the service is in fact running

2.  Server can not get out to the internet - Cannot ping outside the network.  Can ping the gateway and IP stack.  Cannot not retrieve the arp table.  Results form ipconfig

C:\Users\administrator.PARKSFW>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : WS........

   Primary Dns Suffix  . . . . . . . : P.......LOCAL

   Node Type . . . . . . . . . . . . : Hybrid

   IP Routing Enabled. . . . . . . . : No

   WINS Proxy Enabled. . . . . . . . : No

C:\Users\administrator.PARKSFW>ipconfig

Windows IP Configuration

C:\Users\administrator.PARKSFW>

3.  Cannot restart the DNS service:  "Windows could not start the DNS service on Local Computer.  Error 8:  Not enough storage is available to process this command".

4.  Output from the task list and startup programs.

C:\Users\administrator.PARKSFW>tasklist /svc

Image Name                     PID Services

========================= ======== ============================================

System Idle Process              0 N/A

System                           4 N/A

smss.exe                       444 N/A

csrss.exe                      532 N/A

csrss.exe                      576 N/A

wininit.exe                    584 N/A

winlogon.exe                   620 N/A

services.exe                   656 N/A

lsass.exe                      668 kdc, Netlogon, NTDS, SamSs

lsm.exe                        676 N/A

svchost.exe                    940 DcomLaunch, PlugPlay

svchost.exe                   1076 RpcSs

svchost.exe                   1164 Dhcp, EventLog, lmhosts

svchost.exe                   1200 gpsvc

svchost.exe                   1224 AeLookupSvc, BITS, CertPropSvc, IKEEXT,

                                   iphlpsvc, LanmanServer, ProfSvc, RasMan,

                                   Schedule, seclogon, SENS, SessionEnv,

                                   ShellHWDetection, Winmgmt, wuauserv

SLsvc.exe                     1244 slsvc

svchost.exe                   1292 EventSystem, FDResPub, LanmanWorkstation,

                                   netprofm, nsi, SstpSvc, W32Time

svchost.exe                   1352 Netman, UmRdpService, UxSms, WdiSystemHost

svchost.exe                   1384 CryptSvc, Dnscache, KtmRm, NlaSvc,

                                   TermService, WinRM

svchost.exe                   1536 BFE, DPS, MpsSvc

taskeng.exe                   1708 N/A

spoolsv.exe                    724 Spooler

pbeagent.exe                   652 APCPBEAgent

svchost.exe                    672 AppHostSvc

BackupSC.exe                  1704 Backup Service Controller

crmssecs.exe                  2020 crmssecs

dsm_sa_eventmgr32.exe         2112 dcevt32

dsm_sa_datamgr32.exe          2136 dcstor32

dfsrs.exe                     2156 DFSR

svchost.exe                   2172 DHCPServer

dns.exe                       2192 DNS

g2svc.exe                     2216 GoToMyPC

inetinfo.exe                  2432 IISADMIN

g2comm.exe                    2460 N/A

SOFTDMN.EXE                   2468 N/A

g2pre.exe                     2596 N/A

ismserv.exe                   2684 IsmServ

LMIGuardianSvc.exe            2796 LMIGuardianSvc

BackupFP.exe                  3008 N/A

ramaint.exe                   3024 LMIMaint

mr2kserv.exe                  3060 mr2kserv

sqlservr.exe                  3076 MSSQL$MICROSOFT##SSEE

svchost.exe                   3164 Net Driver HPZ12

ntfrs.exe                     3188 NtFrs

dsm_om_shrsvc32.exe           3284 omsad

svchost.exe                   3496 Pml Driver HPZ12

svchost.exe                   3508 PolicyAgent

svchost.exe                   3524 RemoteRegistry

sqlwriter.exe                 3556 SQLWriter

TeamViewer_Service.exe        3668 TeamViewer8

svchost.exe                   3824 W3SVC, WAS

svchost.exe                   3844 WerSvc

dfssvc.exe                    3872 Dfs

CCCScheduler.exe              2860 CCCScheduler

LogMeIn.exe                   3476 LogMeIn

dwm.exe                       4564 N/A

WmiPrvSE.exe                  4588 N/A

explorer.exe                  4640 N/A

LogMeInSystray.exe            4768 N/A

WmiPrvSE.exe                  4780 N/A

taskeng.exe                   5100 N/A

TeamViewer.exe                5328 N/A

MtxHotPlugService.exe         5448 N/A

CCC Toaster Application.e     5480 N/A

CRMSFax.exe                   5536 N/A

tv_w32.exe                    5568 N/A

CRMSQUE.exe                   5580 N/A

dsm_om_connsvc32.exe          3256 Server Administrator

SBAMSvc.exe                   5356 SBAMSvc

svchost.exe                   5512 TapiSrv

SBAMTray.exe                   368 N/A

svchost.exe                   5676 FontCache

msdtc.exe                     5212 MSDTC

wsusservice.exe               4700 WsusService

agent.exe                      632 N/A

TrustedInstaller.exe          8084 TrustedInstaller

FXSSVC.exe                    5380 Fax

g2tray.exe                    5796 N/A

taskmgr.exe                   5720 N/A

perfmon.exe                   5976 N/A

w3wp.exe                      7652 N/A

w3wp.exe                      2332 N/A

winagent.exe                  4180 Advanced Monitoring Agent

TeamViewer_Desktop.exe        6080 N/A

cmd.exe                       6396 N/A

agent.exe                     4400 N/A

tasklist.exe                  7032 N/A

C:\Users\administrator.PARKSFW>wmic startup get caption,command

Caption            Command

BackupManager      "C:\Program Files\Backup Manager\BackupManager.exe" minimized

CRMS Fax           CRMS Fax.lnk

CRMS Printing      CRMS Printing.lnk

BackupManager      "C:\Program Files\Backup Manager\BackupManager.exe" minimized

MtxHotPlugService  C:\Windows\system32\MtxHotPlugService.exe v

Seagull Drivers    ssdal_nc.exe startup

LogMeIn GUI        "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"

CCC Toaster        C:\Program Files\CCC\CCC ONE Update Manager\CCC Toaster Appli

cation.exe

SBAMTray           "C:\PROGRA~1\ADVANC~1\managedav\SBAMTray.exe"

Any help would be greatly appreciated.

Windows for home | Other | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

6 answers

Sort by: Most helpful
  1. Anonymous
    2014-03-27T16:01:25+00:00

    Bump!

    Having the same issue with Windows Server 2008 Standard SP2. Didn't start having problem until we virtualized it.

    Nslookup defaults to itself, so no external DNS resolution. We can however ping outside.

    A reboot will fix this but the problem resurfaces quickly.

    3 people found this answer helpful.
    0 comments No comments
  2. Anonymous
    2014-05-20T15:33:19+00:00

    I too have similar issue with Windows 7 SP1.. What I see is leaving the auto update on makes the CPU goes high in that SVCHost, where as simply turning off the auto update solves the issue for me..

    What I do is, I manually update the system.. :(

    0 comments No comments
  3. Anonymous
    2014-05-20T15:30:45+00:00

    I have opened a ticket with MS, after 30 days still no solution.  It has been escalated twice since then.  I will update as soon as they figure out a solution.

    0 comments No comments
  4. Anonymous
    2014-05-19T15:01:09+00:00

    We still have this issue.

    0 comments No comments
  5. Anonymous
    2014-05-19T08:41:39+00:00

    So did you get a solution for this problem ?

    I have the exact same scenario. Host is server 2012.

    0 comments No comments