Services.exe running at 100% CPU and using 100s of MB of memory – Windows XP SP3



I came across an interesting one in the last few days. This system was a Windows XP system with current updates – SP3, IE 8…. and among other things there was a complaint of very sluggish behavior. I updated the antimalware software installed and ran scans. Malware Bytes antimalware actually found and removed two suspect files, but that didn’t seem to sole the sluggishness. The web browser (internet explorer) would take what seemed like a minute or so to respond to any action. One thing I discovered is that Internet explorer 8 can behave VERY slowly if there are a lot of sites in the restricted zone. (Spybot S&D immunization puts lot’s of sites in restricted zones.) So, I found a way to remove them all and retry and things seemed quicker, but… after running for 15-20 minutes the system really started to become unresponsive and so I had to start looking for another cause…. services.exe was running at 99% cpu or 100% cpu from time to time and the memory footprint was growing – the high mark I saw was 350MB of memory in use for it (!)


The first hint I had was a site claiming that if the event logs get to be too large it could cause services.exe to respond this way – taking up 98% or 99% cpu and more and more memory. So, after attempting to skim the logfiles for any helpfull info, I cleared them and restarted to wait and see what would happen next. It wasn’t long before the same behavior came back.

So, I searched quite a bit online (the even log items didn’t seem to give ANY clues) and found many discussions about the same issue. Most were a bit old (2-3 years), but in one discussion someone mentioned that they disabled the windows firewall and internet connection sharing service and their problem went away. So, I gave this a try and waited….. services.exe remained well behaved for a couple hours.

Not wanting to leave the system without the firewall, I tried resetting the windows firewall to it’s default settings and restarted it as a service. I let the system reboot and sit for a couple hours without the issue recurring. So, hopefully this reset of the windows firewall settings has solved the problem on this machine!

Side notes: Internet Explorer really shouldn’t respond differently if there is 1 site in restricted zones or 5000 – I mean really – Microsoft should address this problem. I do read that apparently there are features in IE 8 that should make spybot’s immunization unnecessary. Also, re: the firewall being the culprit here, it’s not wise to run a windows machine connected directly to the internet without a firewall of some sort. If this problem seems to affect you and resetting the firewall to it’s defaults doesn’t resolve it, you might consider looking at the free software firewalls that are available, or consider a hardware firewall (router) between your machine and the internet.

Utility to remove all sites from restricted zone is available here.

Related Posts

Blog Traffic Exchange Related Posts
  • Internet Explorer zero-day This time around, the zero day is related to Internet Explorer and activex... (directanimation specifically). Incidents has a good update on the issue. This is a second exploit, there was another at the end of August, MS has an advisory on the issue. I think a safe bet would be......
  • Vista software compatibility concerns and license restrictions... I should say that George Ou has been trying to put to rest some of the concerns people have about "will xyz program run on vista". The All About Microsoft blogpost on virtual PC seems to have started all this. I should say that virtual machines seem to be a......
  • Two new Windows exploits in the Wild | Wordpad Text Converter | Internet Explorer 7 XML Parser In the wake of a huge patch Tuesday, Microsoft has two new fires to be fighting. There are apparently "limited and targeted" attacks against a flaw with the Text converter component of Wordpad. Affected systems include Windows 2000 SP4, XP up to SP2, Server 2003 SP1 and 2. Vista is......
Blog Traffic Exchange Related Websites
  • Social Bookmarking - How it Can Support Your Internet Marketing and advertising Business I am confident that if you are visiting this web page, you will be interested in bookmarking demon strategy. In this present day day and age, the importance of Social bookmarking has turn out to be paramount in the online marketing and advertising planet and is a huge portion of......
  • Increasing Website Traffic With The Help Of Seo The procedures utilized on a website to help it get good quality site visitors within the internet is known as Search Engine Optimization or SEO. Serving to a web site get huge quantity of good quality visitors is the first goal of any search engine optimisation company. However, they cannot......
  • Choosing Out A Web Hosting Support That Delivers Selecting the best internet host can make or break your web site. That is because the net host need to be regarded as to be the foundation of the web site. In order to possess a longer term web site and make sure you present a good knowledge for your......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site