Major lag spikes with svchost

Cl0ttERS · May 29, 2012

Problems with BSODs have stopped completely now thanks

But still major problems with lag spikes with svchost- I managed to track down services like

IP Helper
Network Location Awareness

basically all crucial network related services that can't be disabled - therefore I thought it has gotta be a driver, so I tried using modded drivers:

http://forums.mydigitallife.info/th...-SETTINGS-8-0-279-x86-amp-x64-IMPROVES-PERFOR

but sadly no difference

Its a TP-LINK branded PCI-E card with an atheros chip.

Might move to a usb adapter, any suggestions on how to fix the lag spikes?
Or will I have to try changing hardware?

jcgriff2 · May 29, 2012

Referenced BSOD thread- https://www.sysnative.com/forums/showthread.php/365-Various-BSODs

jcgriff2 · May 29, 2012

Are the lag spikes networking related; CPU, etc...?

Vir Gnarus · May 29, 2012

A couple things:

Make sure your hosts file (\Windows\System32\drivers\etc\hosts) is not filled with entries. If there are a lot of entries, it can cause lag spikes for various applications. Often it can fill up due to AV and antispyware solutions.
Speaking of AV stuff, try temporarily disabling your AV engine to see if that fixes things up. Also, make sure you don't have more than one AV software running.
Try turning off the Indexing Service and/or Windows Search service and see if the problem is resolved. If it does, inform us, as it's a solid clue on what's causing this. Obviously if it works that's still not a viable solution since these two services offer features for Windows, but we will be able to narrow it down from here.
If you are connected to a router via hardwire, change the port you're connected too and test connection. If that doesn't work, replace the cable.

Cl0ttERS · May 29, 2012

The lag spikes (100% CPU utilization) happen after a network change has occured - eg. when I connect to a wifi network/disconnect - I tried moving my router to my room and connecting it via ethernet and the lag spike is still there - I'm pretty sure its a driver issue

As for indexing service, waay ahead of you. I turned that off cause its a fairly useless service that wastes resources and makes you impatient

I have one AV/Spyware solution and that has and will always be Microsoft Security essentials, great AV for free

satrow · May 29, 2012

Vir Gnarus said:
Make sure your hosts file (\Windows\System32\drivers\etc\hosts) is not filled with entries. If there are a lot of entries, it can cause lag spikes for various applications. Often it can fill up due to AV and antispyware solutions.

I think that element can be minimised by turning off the DNS Client service manually (my hosts file was a little over 7MB last time I looked, no notable spikes/lags here)

Editors Note: in most cases a large HOSTS file (over 135 kb) tends to slow down the machine.

To resolve this issue (manually) open the "Services Editor"

Start | Run (type) "services.msc" (no quotes)
Scroll down to "DNS Client", Right-click and select: Properties - click Stop
Click the drop-down arrow for "Startup type"
Select: Manual (recommended) or Disabled click Apply/Ok and restart. [more info]

When set to Manual you can see that the above "Service" is not needed (after a little browsing - when set to Manual) by opening the Services Editor again, scroll down to DNS Client and check the "Status" column. It should be blank, if it was needed it would show "Started" in that column. There are several Utilities that can reset the DNS Client for you ... [more info]

Editors Note: The above instructions are intended for a single (home-user) PC. If your machine is part of a "Domain", check with your IT Dept. before applying this work-around. This especially applies to Laptop users who travel or bring their work machines home. Make sure to reset the Service (if needed) prior to connecting (reboot required) to your work Domain ...

Important! If you are using Network Discovery then the DNS Client service is required and should not be set to either Manual or Disabled.

Possible Workaround for using the MVPS HOSTS file and leaving the DNS Client service enabled (set to: Automatic)

If you find after a period of time that your browser seems sluggish with the DNS Client service enabled you can manually flush the DNS cache
Close all browser windows ... open a "Command Prompt" from the Start Menu > All Programs > Accessories > Command Prompt
(type) ipconfig /flushdns (press Enter) Then close the Command Prompt ...

A better Win7/Vista/XP workaround would be to add two Registry entries to control the amount of time the DNS cache is saved. (KB318803)

Flush the existing DNS cache (see above)
Start > Run (type) regedit
Navigate to the following location:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters
Click Edit > New > DWORD Value (type) MaxCacheTtl
Click Edit > New > DWORD Value (type) MaxNegativeCacheTtl
Next right-click on the MaxCacheTtl entry (right pane) and select: Modify and change the value to 1
The MaxNegativeCacheTtl entry should already have a value of 0 (leave it that way - see screenshot)
Close Regedit and reboot ...
As usual you should always backup your Registry before editing ... see Regedit Help under "Exporting Registry files"

http://winhelp2002.mvps.org/hosts.htm

Cl0ttERS · May 29, 2012

The host file only has the standard localhost entry and a few other ones that direct to localhost, only 2kb in size, so nope thats not it

Cl0ttERS · May 29, 2012

Services that spike under svchost:

Wlansvc
UxSms
PcaSvc
Netman
HomeGroupListener
hidserv
AudioEndPointBuilder

satrow · May 29, 2012

Wireless drivers would be my favourite there.

It may be a sharing setting used by HomeGroupListener that's buggy too, possibly triggered by something on another PC on the LAN.

Check that you don't have any audio effects like stadium or tunnel, etc. loaded, there were problems for some with those back in the W7 Betas.

usasma · May 29, 2012

We often see issues after stopping BSOD's. My suspicion is that these BSOD's were caused by a combination of issues. The "fix" removed the cause of the BSOD, but didn't fix the other problem(s).

In this case it's networking - so the research has to be focused on programs/functions that use networking.
I'd first check any network aware apps - particularly Internet Security programs and internet aware gaming programs (like Steam, etc). Steam has a fix it thing that my son told me about - it clears out the old settings somehow.

Maybe a Process Monitor trace during an episode?
Maybe a CPU usage trace (if the CPU usage is spiking?
How about looking at the Event Viewer logs for that time?

jcgriff2 · May 30, 2012

Does the system spike in Safemode w/Networking?

Tap F8 key repeatedly during boot-up.

TheCyberMan · Jun 8, 2012

You should consider updating the wired and wireless network card adapter drivers to the latest from the manufacturer's website and re-enable DNS client.

Cl0ttERS · Jun 8, 2012

I decided to switch to a USB WiFi device, but the lag spikes are not as frequent or as bad. With the PCI card, I was experiencing random peaks/lag spikes (but I'm fairly certain they were connection drop-outs). They occur when/after connecting and disconnecting to a network (both W/LAN !)

using http://www.thesycon.de/deu/latency_check.shtml I can still see a massive peak in DPC latency (23106 micro-seconds)

I will look for updates for the realtek MB onboard LAN card. As for DNS client (I'm assuming you mean the service) it was never disabled.

TheCyberMan · Jun 8, 2012

Yes DNS service should not be disabled.

Update the drivers first.

Cl0ttERS · Jun 8, 2012

Drivers were current (At least according to my MB's downloads site)

Cl0ttERS · Jun 8, 2012

satrow said:
Check that you don't have any audio effects like stadium or tunnel, etc. loaded, there were problems for some with those back in the W7 Betas.

whoops didn't read that last part-

I had a program installed called DFX Audio Enhancer that was very clearly affecting performance - no doubt it sounded great, but when I swapped to speakers from a headset, I couldn't really hear a massive improvement so I uninstalled it, plus I had heard that DPC latency issues affected Audio/Video playback, and that effects (DSPs I think they are called - eg W7 sound effects / DFX Audio Enchancer) can cause these issues.

So yeah I would have totally agreed with you there, but when I swapped to a USB wireless stick, I still get a small(er) lag spike when connecting/disconnecting from the internet, plus the DFX program was long since removed. So I'm not so sure about it being wireless drivers. There is a possibility that MorphVOX is to blame.. it uses voice effects (great fun

) so I'm sure it uses DSPs as well.. I'll try disabling it and see if the lag spikes occur.

Jenae · Jun 9, 2012

Hi, open a elevated cmd prompt and copy paste:-

Code:

echo > 0 & tasklist /svc /fi "imagename eq svchost.exe" >> 0 & tasklist /v >> 0 & tasklist /m >> 0 & echo  >> 0 & notepad 0

press enter

Will give you information to help track this down.

Cl0ttERS · Jun 9, 2012

View attachment svchost debug.txt

thanks

TheCyberMan · Jun 9, 2012

If you have any overclocking or change to timimngs in bios etc. i would try and remove them return bios to optimised defaults.

It may help.

Also i notice your computer is in a DMZ is that correct the client security software will be being on overtime as you are directly exposed to the internet without the protection of NAT and perimeter firewall which filters out a lot of potential threats getting to your internal network.

I advise you to remove any devices from the DMZ and return them to behind the router.

The port forwadiing we may be able to help after this issue is resolved.

Cl0ttERS · Jun 9, 2012

I am not in DMZ. I am not overclocked, and I do not need help port forwarding

Major lag spikes with svchost

Well-known member

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

BSOD Kernel Dump Expert

Well-known member

Moderator, BSOD Kernel Dump Senior Analyst

Well-known member

Well-known member

Moderator, BSOD Kernel Dump Senior Analyst

Retired Admin

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Networking Expert

Well-known member

Networking Expert

Well-known member

Well-known member

Sysnative Staff

Well-known member

Networking Expert

Well-known member

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)