svchost.exe CPU Spike!

[Schwim3x6]

I have four Dell Latitidue D610s that are all exhibiting the same problem. At startup a svchost.exe is spiking the CPU at 100% for 10+ minutes. Occassionally, it will spike the CPU at random intervals. I've used Process Explorer to determine the following services are running under this svchost.exe:


Automatic Updates
Background Intelligent Transfer Service
COM+ Event System
Computer Browser
Cryptographic Services
DHCP Client
Distributed Link Tracking Client
Help and Support
Logical Disk Manager
Network Connections
Network Location Awareness (NLA)
Remote Access Connection Manager
Secondary Logon
Seucurity Center
Server
Shell Hardware Detection
System Event Notification
System Restore Service
Task Scheduler
Telephony
Themes
Windows Audio
Windows Firewall/Internet Connection Sharing (ICS)
Windos Management Instrumentation
Windows Time
Wireless Zero Configuration
Workstation

Any help to solve this problem would be greatly appreciated! Thanks.

[Schwim3x6]

By the way, I have run virus software and spy ware detection software already to no avail. I even defragged the hard drive with no luck.

- Schwim3x6

[1101doc]

As you seem to be aware, you are seeing the multitude of Services running under scvhost.
On my Latitude I get multiple instances of svchost each running a few services.  If you've
played with Services (a great temptation, I know) you may wish to reset them to XP default:  
   http://www.tweakhound.com/xp/xptweaks/supertweaks6.htm

After that, begin by stopping them one at a time to discover what changes (if any) result.
For openers it is unlikely that you need the Indexing Service, for example.  If you are not using
a wireless system, that one can go too.  Some of these Services with relatively arcane names ARE
necessary to proper function of XP as we know it, so just go step by step.
When in doubt, set the Service to "Manual."  That way XP can start it if it needs it, but it won't
start automatically at boot.

Search out "Black Viper"  for indepth Services information.

Sysinternals offers a very useful Process Explorer that will display the running services of each svchost with a mouse over.  

Good Luck--1101doc

[patio]

The Black Viper reference list for services is hosted at majorgeeks site if you need it...

[Rob Pomeroy]

...

Fantastic post from a newb.  Thumbs up!

[Fed]

It certainly shows that a Poster's designation (newbie) is no reflection of his knowledge.

Black Viper has almost disappeared from the net so Patio's advice should be heeded, Googling may be disappointing for this one.

[Schwim3x6]

Problem solved!!!

I was using Process Explorer and was able to edit the Difference Highlight Duration which allowed me to see the file names that were highlighting in red. I noticed a particular file that was repeatedly red. It was corp_sdis.pbk located in

\Profiles\All Users\Application Data\Microsoft\Network\Connections\Pbk

I have no idea what this file was for so I deleted the entire Pbk folder (I backed it up first). After restart, the Pbk folder is back, but the file is gone and so is my problem!

My situation may be very unique, but perhaps someone else may find my solution useful. Thanks for everyone's 2¢.

- Schwim3x6   8-)