Had a problem return recently with SVCHOST.exe

Getting fedup I ran:

tasklist /svc

in a command prompt which gave me:


svchost.exe                  976 DcomLaunch
svchost.exe                 1056 RpcSs
svchost.exe                 1152 AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
                                 ERSvc, EventSystem, helpsvc, lanmanserver,
                                 lanmanworkstation, Netman, Nla, RasMan,
                                 Schedule, SENS, SharedAccess,
                                 ShellHWDetection, TapiSrv, Themes, TrkWks,
                                 W32Time, winmgmt, wscsvc, wuauserv
svchost.exe                 1188 WudfSvc
ati2evxx.exe                1252 N/A
svchost.exe                 1372 Dnscache
svchost.exe                 1436 Alerter, LmHosts, RemoteRegistry, WebClient
spoolsv.exe                 1500 Spooler


Process 1152 was at fault according to taskmanager. So I started disabling services 1 by 1.

Turns out the "network connections" (aka netman in the above list) service was at fault. Stopped it... no connections dropped or anything, and then restarted it. voila... no more 100% load.

Any ideas why on earth such a thing might be happening? Also is network connections service necessary, what on earth does it do?

im looking into this for someone.  It appears something in the last series of MS Updates screws the pooch for the netmanager.  At the moment we have ~500PCs that have been rolled back due to this

I heard this as well, as well as dwin, that doctor windows thing, messing about peoples computers, the 64 bit pro xp lucky for me is avoid of this problem and the other issues I just get dwin failing to shut down properly now and again if i shut down the pc with programs running as it closes them before so.


Rumour mill and conspiracy posts on web say its MS trying to cause issues into windows xp to try and make it less attractive to users so they move to vista.

Keep posting what you guys found out about, would be interesting to read what goes on

At the moment we think we have tracked it back to KB930916.  Its a compatability update for 3rd party drivers.  Ive just set it up to push the update out to 50 machines, well leave it a week and monitor the call logs for it.  

I shouldbe getting paid for this, im not the one that is MSCE certified!

yeah happened with that ms update - caused chaos at work last week. There is a hotfix for it on the ms site that does the job.

couldnt find the hotfix, but its almost definately this update.  Ive done 3 calls this morning with this fault from the 50 machines we rolled it out on.  Only 14 machines withthe update on are being used.  Imjust going to withdraw them from the update and roll them back for now.  Im not getting paid enough to work out what else needs updating.  

Thinking of removing the update myself too :| Bloody thing is back and my "start restart" of netman has had no effect.

Weve seen this on an number of machines, any time Ive recently updated one has ended up with 100% svchost and starts performing like a british eurovision entry.

Knocking out automatic updates and restarting seems to be the quick fix.

"This is a reliability update. Install this update to resolve an issue where a third-party driver installed on a computer that is running Windows XP may prevent you from opening files successfully on a NTFS file system volume."


File Name: WindowsXP-KB930916-x86-ENU.exe
Version: 930916
Knowledge Base (KB) Articles: KB930916  
Date Published: 4/24/2007