Look up Process Explorer to see what the svchost's are. Hard to say really what it is. Perhaps it is writing the event log? Something else routine?
On Thu, Feb 10, 2011 at 4:31 PM, DSinc <[email protected]> wrote: > Have old PC. It runs Windows XP pro sp3. It is an Intel Pentium Pro266/200 > w/512MB ram, Adaptec 29160-64, Intel GBit NIC card, Matrox G200 video card. > Yes, 1990's vintage. > The only major app on this pile is MSSE v2.0. Full scan is ~2hrs (some 20760 > objects). Finds nothing. > > Last night I removed WMP11 and the FireFox Browser. The remaining apps > loaded are 7-zip beta v918, CCleaner v3011327, eraser v587, Foxit Reader > v4301110, Java v6upd23, RAIDAR v4.30 (for my NAS). All else is MS > default/added stuff (Visual C++2008, IE8, .Net 3.5 sp1). One of my very > Light-Weight clients! LOL! > > Been watching Task Manager and the CP/AdminTools/Performance Meter most of > the day. > > Both show "some" activity cpu/pagefile/disk drive that happens every 33 > seconds. I timed it with a stop watch. Can set clocks to this activity > burst. > > I am not good with stopping/killing active processes. Don't know how to > determine WHO might be using any listed "svchost" in the Processes Stack of > TM. > > I have disabled AutoPlay. I have disabled AutoRun. Don't think this is DVD > Polling again. > > Looking for ideas; or, an app like WireShark that gives a window into > what/who is doing this every 33sec burst. Do NOT suspect a Baddie yet. It > does not seem to be "phone home" either. The network map of TM is dead > flat-not even a ripple. > Thank you for reading/listening. > Duncan > >
