System restore eats up a lot of resources. Computer resource U SM. Latest Computers & Internet Tips
In order not to pour water, I will present technical characteristics Subject:
Memory size
Super PI result
The screenshots show that there is a very weak system with a very small amount of RAM, which greatly slows down the computer. Therefore, Windows 2000 SP 4 with Cumulative Service Pack 1 (SP1) was used as the OS. Basically, Windows 2000 128 MB of RAM is more or less enough, but as soon as you install a modern antivirus, the memory immediately runs out, and terrible brakes begin, leading to the impossibility of working. The most optimal would be not to install an antivirus at all, but this option is not possible. This is due to the fact that about 90% of students' flash drives are infected, and earlier I tried not to use antiviruses in that class, as a result it turned into a breeding ground for all kinds of infection, and this option is unacceptable. So I started looking for an antivirus that would provide decent protection with very little system resource consumption.
The choice fell on the following vendors:
1. DrWeb 4.44 - I have been using a time-tested product for a long time and does not consume a lot of resources;
2. DrWeb 5.0 - relatively new version;
3. DrWeb 6.0 – latest versionwhich I use;
4. Avast 5.0 - a very good free antivirus with a nice interface;
5. Avira 9 - free with good reviews, version 9 was selected, not 10, because the 10th consumes more resources, according to other people's reviews, plus version 9 is Russified.
The testing methodology was as follows:
The OS was installed with the removal of all partitions and repartitioning the hard disk again in order to get rid of possible viruses and file system bugs. All drivers were installed, the OS was configured, the necessary software was installed, after which the system was configured and cleaned up with defragmentation of the system partition.
A sector-by-sector copy of the system partition was created, with which the system was then restored in order to minimize the impact of the installation of antiviruses, thus, the system was pristine for each new antivirus.
The tests answered 3 questions at once:
1. How much the OS boot time slows down after installing the antivirus;
2. How much RAM is consumed by the system with the installed antivirus;
3. Is it possible to work on the computer after installing the antivirus.
The technique was as follows: an antivirus was installed, a reboot was performed. Then turning off the computer, then turning it on and measuring the boot time, the time was measured from the moment the power button was pressed until the system was fully loaded. It waited about a couple of minutes and the task manager opened and a screenshot was taken with resource consumption. Then there was an attempt to work, which included navigating the file system using Explorer and Total Commander, viewing pictures, starting a Word document and opening computer properties.
Let's get down to the fun part - the tests!
I'll start at boot time.
Load time table
Here I would like to highlight DrWeb 4.44, DrWeb 6.0 and Avast, which practically do not slow down the OS boot. For all those who use DrWeb version 5, I recommend switching to version 6. Avira turned out to be not as easy as advertised.
It's time to take a look and answer the main question, how much does each antivirus eat.
First, screenshots of the Task Manager:
No antivirus
DrWeb 4.44
DrWeb 5.0
DrWeb 6.0
For convenience, I will collect all the data in a table:
Memory table
The minimum amount of memory is consumed by Avast, which is extremely unusual for a modern antivirus product. This is followed by DrWeb 4.44 version, but this is not surprising, since the product is very old. Approximately the same consumption for DrWeb 6.0 and Avira. Still, I thought that Avira would eat less system resources, so once again it was overrated. Well, DrWeb 5.0 has just a huge resource consumption - this, by the way, explains the very long loading of the OS, the lack of RAM made it use the paging file.
And in conclusion, subjective feelings about the possibility of working on a computer after installing the above anti-virus products.
The fastest system works without antivirus at all, which is quite logical.
The system with DrWeb 4.44 worked very quickly, there was practically no slowdown. Installation of DrWeb 5.0 led to the complete impossibility of working at the computer. DrWeb 6.0 was more gracious, but it was still not comfortable to work after installing it. I did not notice the presence of Avast at all. And Avira was noticeable, but did not cause discomfort with its presence.
Something like an output.
According to the task at hand, antiviruses can be distributed as follows:
1. Avast 5.0 - very modest system requirements for a modern anti-virus product. Tiny memory consumption. Minimal impact on system load. Freeness combined with a very good detection made him the winner, it was he who will be installed on scrap metal in that class.
2. DrWeb 4.44 - was also not very demanding, but it is worth considering a couple of points. First, the product is very old and will not provide the required level of security. And secondly, recently, when updating the anti-virus databases, the OS began to fall into BSOD. Although updating it is quite easy, it is enough to download the latest databases, which are tiny and weigh only a hundred kilobytes, in contrast to updates for other antiviruses, which are up to hundreds of megabytes!
3. Avira 9 - to be honest, I was disappointed. Everyone presents it as a very lightweight and fast, non-loading system, antivirus product, but it turned out to be completely wrong for testing. But the third place is also not bad, after all, after installing it, you can work at the computer.
4. DrWeb 6.0 - and pleased and upset. It did not slow down the system loading, but still consumed quite a lot of resources, although compared to version 5, Danilov's laboratory did a great job of optimization, now I understand why they offered a free transition from version 5 to 6. But despite the optimization, this the action was not enough to ensure comfortable work on a weak machine. Although the manufacturer recommends it for very weak machines, in practice it will be unpleasant to work.
5. DrWeb 5.0 - complete disappointment! It consumes too many resources, which makes it completely impossible to work! I recommend everyone to urgently switch from version 5 to version 6!
All antiviruses were installed without problems. Although it is probably worth clarifying something. DrWeb 6.0 - required installation of cumulative update package 1. Avira - required installation of version 6 of IE. Avast requires a Flash player to display charts, although it works fine without it.
Thank you all for your attention.
Respectfully, StrateG aka Alexey Shestakov.
The choice of antiviruses was determined purely by my preferences. No requests or suggestions to test other antivirus applications are accepted!
The publication was carried out with the permission of the author of the article and on his behalf (nickname), the original is located on the PS of overclockers.
}
Good afternoon my dear readers
In this post, I will show you how to reduce the system's hard drive space for the recovery function.
How much do you think this "reptile" eats from the hard disk space?
As much as 12 percent of yours, this option is the default. That is, if the local disk is 100 "gigs", this option can easily survive up to 12 GB from it. This is my example. And this situation is on every disk of your hard drive.
I think not the most pleasant option. But thank goodness there is such a good thing as setting system recoverywhere we can not only reduce maximum sizebut also disable it altogether.
In fact, for system recovery 1 GB is enough, so you can easily choose the size for each disk.
What should be done to edit system recovery options?
To do this, click on the icon (not to be confused with a shortcut) " »Right-click, and select properties from the menu.
In the window that appears, select the tab “ System Restore". The following window should appear in front of you:
You can turn off recovery immediately by ticking the “ Disable System Restore on all drives", Then you do not need to configure anything, but if you do not want to do this, then I advise you to at least reduce the amount of memory consumed to one gigabyte.
How to do it?
We select any disk, you can start in order, and press the button " Options". And this window will appear in front of you:
It can be seen from the figure that at the moment this option can take up to 12 GB, now my recovery files take only half of this size - 6 gigabytes.
The Windows operating system performs a large number of "background" tasks that can adversely affect the performance of low-powered computers. One of the processes that loads RAM, disk or CPU is System.exe. In the "Task Manager" you can see that the System file loads Windows, and if you specify, it loads the computer's hardware. The computer owner can solve this problem on his own if he follows a series of simple steps.
Table of contents:System process loads hard disk and memory up to 100%
System is a process operating system Windows, which is not a virus, contrary to popular belief. He is responsible for the operation of applications in the "background", that is, without active control by the user. This process is not hidden, and it can be easily found in the "Task Manager".
The main problem with the System.exe process is that it cannot be stopped. Thus, if System loads the RAM or hard disk of the computer, it will not be possible to turn it off using simple methods. Lowering the priority of a process using standard Windows tools also does not lead to success. 
The System process is notable for the fact that it takes up a bit of RAM, and as a result, it completely loads it. At the same time, in the "Task Manager" it may be noted that System loads no more than 200-400 MB of RAM, and it will be completely full, and the computer will start to freeze when performing any tasks. Likewise, the System process can load the hard disk.
To prevent the System file from loading the computer, wasting excessive resources, you should disable some "background" tasks in the Windows operating system:
If any computer owner can turn off and uninstall DrWeb without unnecessary prompts, then the other two tasks are more difficult to cope with, and we will tell you about them in more detail.
How to disable automatic updates Windows 10 and system services
Microsoft has provided automatic software updates in Windows 10 and earlier. Unfortunately, this function on some computers leads to the fact that when checking for available updates on Microsoft services, the System file loads the RAM or hard drive. In this case, the only solution is to disable automatic updates for Windows 10. Attention: If you have disabled automatic updates for Windows 10, we recommend that you check for new assemblies of the operating system yourself every few months (or weeks).
Turning off automatic updates in Windows 10 is quite simple, for this you need to:
By following the above instructions, the operating system will disable the service that automatically checks, in the background, the relevance of the version of Windows operating on the computer.
In addition to automatically updating Windows 10, so that the System process does not load the system, it is necessary to disable some services. In the "Services" menu, which opens with the services.msc command, you must also stop and then disable the following local services:
Note: depending on the version of the Windows operating system and the number of drivers and codecs installed, some of the services listed above may not be available.
After disabling DrWeb antivirus, Windows 10 automatic update and some services, you should restart your computer. By disabling a number of tasks that took up a lot of computer resources, overall system performance should increase, and the problem with loading the hard disk and RAM will disappear in the "Task Manager".
Video instruction
In today's article, we will talk about the problem when Svchost.exe loads the processor on
Perhaps there is no such Windows user who has never encountered the phenomenon when this process loads the PC processor to a critical level of 100%.
We will try to help and give several ways to solve this problem.
Svchost virus or system process?
Svchost.exe is a process used for services that are loaded from dynamic link libraries (.DLL).
This operation is used in the MS Windows family from Windows 2000 to the latest version of Windows 10 to date.
In order to reduce the cost of processor time and memory, the developers decided to use a single process for multiple services.
We will talk about the disadvantages of this solution below.
Note! Developers of viruses and Trojans use the name of this operation to disguise their malicious applications. This can be easily explained by the fact that a process named svchost.exe launches many libraries, therefore, by launching the Task Manager in order to identify a malicious program, the user will see many processes with the same name - svchost.exe.
Since a cursory analysis reveals that the svchost.exe process is systemic, i.e. one that is initialized by the operating system and its termination may affect the stability of its work, many switch to looking for the virus elsewhere.
Important! It should be remembered that the svchost.exe system process can never be started as a user, but only from LOCAL or NETWORK SERVICE, SYSTEM. We also draw your attention to the fact that this operation is launched only through the mechanism of system services. If the svchost.exe process is initialized from the Run registry key, you are dealing with a virus.
Ways to solve the problem with svchost.exe
Method number 1. To restart a computer. In some cases, restarting the computer can lead to the desired result, which is why we put this method of solving the problem with the processor load at the beginning.
Method number 2. Checking virus activity. This check can be performed independently or using an antivirus.
Self-scanning is generally faster, but less accurate than antivirus scan.
Advice! Manual check begins with the fact that we need to go to the "Task Manager", you can do this by pressing Ctrl + Alt + Del.
Go to the "Processes" tab.
Here, for ease of perception, you can sort the processes depending on the load on the processor (or the consumed memory), for this, in the "Task Manager" window, click on the column heading with the name "CPU" (or "Memory", respectively).
As a result, the most resource-intensive processes will be at the top of the column, in our case it is svchost.exe, and although the processor load is minimal, this operation consumes almost 167 and 132 MB of memory.
In our case, everything is in order - the process is launched from SYSTEM (system) and LOCAL and NETWORK SERVICE.
If the process is launched by any other user in front of you with a high degree of probability, it is a virus and at this stage it is necessary to scan the computer with an antivirus.
In order to figure out which service is working with this or that svchost.exe process, you need to right-click on the process and select "Go to services".
In this window, we can see more detailed information about which services are using the svchost.exe we have selected. Services are highlighted in blue and have the same process ID.
Further, by alternately disabling this or that service, you can understand the cause of this problem.
The most common services that increase the consumption of system resources by the svchost.exe process are IP Helper Service and Windows Automatic Updates.
You can disable these services and check the result, but you should pay attention to the fact that as a result, the operating system will not automatically receive updates.
This problem is solved by starting the update in manual mode.
"IP Helper" This service is used for highly specialized purposes, providing tunneling capability for IP version 6.
For most users, disabling it will have absolutely no effect on the operation of the system.
Checking virus activity using an already installed anti-virus does not give the desired result in some cases. In some cases, the virus can infect the antivirus itself.
For best scanning results, we recommend downloading free version antivirus that does not require installation (for example, DrWeb Cureit, Kaspersky Security Scan, Kaspersky Virus Removal Tool).
Copy it to a USB flash drive and run it for verification, after booting in Safe Mode.
Method number 3. Check for Windows updates and if available, install them.
Method number 4. Perform a system restore from a restore point. How to do this can be found in our previous article.
Method number 5. Delete the contents of the Prefetch folder. This folder is used to speed up the loading of the operating system (and launch programs) by saving the values \u200b\u200bof previous loads.
Typically, the Prefetch directory is one of the subdirectories of the system directory.
svchost .exe loads the system! (100% solution)
Svchost.exe loads the processor on Windows 7 OS 5 ways to solve the problem
Date of publication: 20.07.2010The article was updated on 09.12.2011.
Symptoms:
Your computer suddenly began to freeze and slow down the system. Moreover, you have an antivirus with the latest antivirus databases. Click Ctrl + Alt + Delete and click on the tab Processes... You will see a list of all processes that are currently running; in this case, you will see that some of the processes consumes a lot of computer resources (although you are not using any programs at the moment). Here you will see a certain process svchost(There will be several processes with the same name, but you need exactly the one that loads the system at 100%).
Decision:
1) Try, first of all, just restart your computer.
2) If after rebooting this process continues to load the system, then right-click on the process and, in the list that opens, select Terminate the process tree... Then restart your computer.
3) If the first two methods did not help you, then go to the folder Windows and find the folder there Prefetch (C: \\ WINDOWS \\ Prefetch). Delete this folder ( delete exactly the folder Prefetch; DO NOT accidentally delete the folder itself Windows!!!)
Then follow the second point (i.e. delete the svchost process tree). Reboot your computer.
How many processes should there besvchost.exe in the Processes tab?
The number of processes with this name depends on how many services are started via svchost. The number may vary depending on the version of Windows, the properties of your computer, etc. Therefore, the number of processes named "svchost.exe" can be from 4 (absolute minimum) to infinity. I have 12 svchosts in the Processes tab on a 4-core computer with Windows 7 (including the services started).
How to determine which one is a virus?
You can see in the screenshot above that in the "User" column next to each svchost there is the name of the source that launched this very process. In normal form, next to the svchost will be written "system", or "network service", or "local service". Viruses run themselves on behalf of "user" (can be written "user" or "administrator").
What is, in general, a processsvchost.exe?
In simple terms, the svchost process is an accelerator for the launch and operation of services and services. Svchost's are launched through the services.exe system process
What happens if I accidentally terminate the system process by clicking on "End process tree"svchost and not the virus itself?
Nothing bad will happen. The system will give you an error and restart your computer. After the reboot, everything will fall into place.
What viruses are disguised assvchost.exe?
According to Kaspersky Lab, viruses are masked under svchost.exe: Virus.Win32.Hidrag.d, Trojan-Clicker.Win32.Delf.cn, Net-Worm.Win32.Welchia.a
According to unconfirmed reports, some versions of Trojan.Carberp are also disguised as svchost.exe
How do these viruses work?
These viruses, without your knowledge, enter special servers, from where they either download something else dangerous, or send information to the server (namely, your passwords, logs, etc.)
Processsvchost.exe loads the system, but in the "User" column it says "system ". What it is?
Most likely, this means that some service or service is working hard. Wait a little, and this process will stop loading the system. Or it won't stop ... There are some viruses (for example: Conficker) that use real svchosts to corrupt your system. These are very dangerous viruses, and therefore you should check your computer with an antivirus (or rather several at once). For example, you can download DrWeb CureIt - it will find such viruses and remove them.
Why end the process tree and delete a folderPrefetch?
If you terminate the process tree of your svchost, which slows down the system, the computer will reboot urgently. And at startup, when the virus tries to start again, the antivirus (which you must have installed without fail) will immediately detect and remove it. There are many modifications though. For example, the original source of such a virus might be in the Prefetch folder. This folder is needed to speed up the work of services and services. Removing it will not damage your computer.
Your advice did not help me. Processsvchost.exe continues to load the system.
First of all, check your computer with an antivirus. Better yet, check your computer with several antivirus programs.
I can also advise you to clean the System Volume Information folder. This folder contains the restore points for your computer. Viruses register themselves in this folder, since the system does not allow the antivirus to delete anything from this folder. But this is unlikely to be useful to you. I have not yet heard of such modifications of viruses that would pretend to be svchost.exe and were located in the System Volume Information folder.
If you have any more questions, I will be happy to answer them.
Latest Computers & Internet Tips:
Board comments:
Many thanks! Everything is clear and without water. All unnecessary processes have disappeared. Thank!
Windows6.1-KB3102810 x86 (x64) - for 7, for whom the updater eats a lot of operatives.
In short, I figured out why svchost was loading the percentage by 30%, the Spyware Process Detector utility helped to uncover this mysterious process (you can find it with a crack on the internet), and it turned out not to be some malware, but an ordinary system process Defrag exe, it rattled. Disk Defragmenter, svchost no longer occurs. All issue is resolved.
I tried everything, and the update center turned it off, and Prefetch deleted it, and the process tree ended, nothing helps, svchost still loads the percentage by 30%.
Ilya, thank you very much! It helped! Did everything as written. Only on my XP service is called Automatic Updates. After disabling autostart, only I had time to stop the service, as this process disappeared, and the CPU load fell asleep. Whoever has XP or updates are not important - I recommend this method.
Ivan, thank you so much for the comment) It helped. Denied access and everything returned to normal. Before that, nothing helped!
I took down the Prefetch folder, but after a reboot, it reappears just like the problem with the RAM.
on Win XP solved the problem simply - by disabling the system update. probably small soft in this way unobtrusively nudge users to leave XP and 7.
Rustam, the article clearly states that this folder is not for system files (which are in the windows folder). Here is a quote from the article "Removing it will not damage your computer." READ THE ARTICLE CAREFULLY, cykablyat!
I looked into the svchost folder, but only the root folders of all programs running on the computer were found there. when uninstalling, a catastrophe could occur, but minno: a complete shutdown of all life-supporting programs, which ultimately would lead to the fact that the computer after a reboot would stop working altogether, and I had to reinstall Windows. So, I did not risk deleting the entire host folder ... I will look for other solutions to problems. And for those who think that disabling the update solves the problem, I will say: I did this once, so the virus that got into the computer ate the entire motherboard and the hard one stopped working. in fact, it starts the laptop, but immediately freezes, and does not even respond to ctrl-alt-del. And on the start and shutdown button of the computer. you have to take out the battery ... since then the laptop is retired ... not a single workshop undertakes to repair it. some nonsense .....
demolished this folder - it helped. Thank!
anyone help with svchot? my data for communication waitsap vibe +7 999 171 60 74 skype West00073 will be grateful. tested the computer with everyone possible ways Does not help
who can help this SVSHOT just tortured, tried everything. Is there a specialist who can solve this issue?
All the methods indicated in the article did not help me, I decided to read the comments and they most often said that this was not a virus but updates and I turned off these updates and everything went
thank you !! took down the folder. corrected;)
I'm sorry, ochepyatka. other processes in Sestem32
And if the process that loads the CPU is located not like all other svchost in Win32, but in AppDataRoaming?
thanks, deleted the folder and all the rules.
I was helped by advice from the comments, from Roman 08/30/2016, it is the second (additional) method, through the Administration!
aTP everything fell into place!
Can I contact you via skype?
