Hi, I have a problem.

Questions and Answers : Windows : Hi, I have a problem.
Message board moderation

To post messages, you must log in.

AuthorMessage
Мишель
Avatar

Send message
Joined: 26 Nov 13
Posts: 3073
Credit: 87,868
RAC: 0
Netherlands
Message 1466192 - Posted: 19 Jan 2014, 13:22:07 UTC

Well, obviously I have a problem or else I wouldn't be posting here. In any case, its kind of a unique problem, since the problem is not BOINC itself, or at least, I don't think it is. The problem is that I have one process on my laptop that since a few days now automatically starts every time I start my computer and takes up about 50% of my CPU. That means that I can't run BOINC as I want to because basically BOINC notices that my computer is busy with doing stuff so it won't start.

The thing that requires so much of my CPU is called Regsvcs.exe. For as far as I can tell its part of the Windows .NET framework stuff, which I tried to remove but that didn't help. I've also run malware and virus scans to see if it was perhaps a virus disguised as something part of windows but if thats the case non of my virus and malware scanners recognized it as such.

In any case, does any of you know how I can either safely remove this thing or at least make sure it doesn't start up automatically? Thanks!
ID: 1466192 · Report as offensive
Profile Jord
Volunteer tester
Avatar

Send message
Joined: 9 Jun 99
Posts: 15184
Credit: 4,362,181
RAC: 3
Netherlands
Message 1466212 - Posted: 19 Jan 2014, 14:04:49 UTC - in response to Message 1466192.  

Best download Process Explorer and use it to check what Regsrv is so interested in. If it's a DLL, you can use step two of http://support.microsoft.com/kb/249873 to try to unhinge it.

My latest (last Tuesday) Windows Updates had a .NET update in. Did yours as well? Tried to uninstall that update yet?
ID: 1466212 · Report as offensive
Мишель
Avatar

Send message
Joined: 26 Nov 13
Posts: 3073
Credit: 87,868
RAC: 0
Netherlands
Message 1466218 - Posted: 19 Jan 2014, 14:20:46 UTC - in response to Message 1466212.  
Last modified: 19 Jan 2014, 14:25:42 UTC

Best download Process Explorer and use it to check what Regsrv is so interested in. If it's a DLL, you can use step two of http://support.microsoft.com/kb/249873 to try to unhinge it.

My latest (last Tuesday) Windows Updates had a .NET update in. Did yours as well? Tried to uninstall that update yet?

Wait, you mean Regsvr? And how is that connected to RegSvcs? Because as far as I can see, Regsvr isn't really active.

Also, I completely uninstalled the .NET framework as far as I can tell (its no longer in my program list).

UPDATE: I just noticed that I have two processes called RegSvcs.exe running at the same time. And only one takes up a huge amount of my CPU while the other doesn't.
ID: 1466218 · Report as offensive
Profile Jord
Volunteer tester
Avatar

Send message
Joined: 9 Jun 99
Posts: 15184
Credit: 4,362,181
RAC: 3
Netherlands
Message 1466259 - Posted: 19 Jan 2014, 15:48:20 UTC - in response to Message 1466218.  

Sorry, I read the app name wrong. And then I typed faster than my eyes could follow.

My other computer had to reboot 3 times to get the .NET updates in.
It's very probable that the .NET installer service tool is now stuck on your system. What happens when you actually allow Windows Update to download and install all .NET versions (Other than that you can't use the computer for an hour... ;-))?

By the way, when the updates are in and you've done the final reboot, it is normal that the .NET installer takes a lot of CPU for minutes on end. That's because it is building the new database for .NET. It will only do this once, after every major .NET update. On my computer it takes ~15 minutes.
ID: 1466259 · Report as offensive
Мишель
Avatar

Send message
Joined: 26 Nov 13
Posts: 3073
Credit: 87,868
RAC: 0
Netherlands
Message 1466333 - Posted: 19 Jan 2014, 18:45:08 UTC
Last modified: 19 Jan 2014, 19:18:30 UTC

Ah, I see the update now. I'll try installing it and see if it changes things :)

EDIT: There is only one .NET update, is that correct? Which makes it go to 4.5.1?
ID: 1466333 · Report as offensive
Мишель
Avatar

Send message
Joined: 26 Nov 13
Posts: 3073
Credit: 87,868
RAC: 0
Netherlands
Message 1466422 - Posted: 19 Jan 2014, 22:55:34 UTC

After a restart and several hours of waiting, the thing is still running. And I don't think my laptop is THAT slow that it has to take such a long time.
ID: 1466422 · Report as offensive
mrperk
Avatar

Send message
Joined: 2 Mar 03
Posts: 825
Credit: 697,033
RAC: 0
United States
Message 1469010 - Posted: 26 Jan 2014, 6:50:51 UTC - in response to Message 1466422.  

After a restart and several hours of waiting, the thing is still running. And I don't think my laptop is THAT slow that it has to take such a long time.


If you have uninstalled Microsoft .NET Framework and the recent update, you should check the RegSvcs.exe process on your PC to see if it is a threat.

File sizes on Windows 7/XP are 32,768 bytes (60% of all occurrences) or 12,288 bytes. Check the size once you have unhidden hidden system files, e.g., changed 'properties' in Folder Options -> View -> Show hidden files, folders, drives.

I found reports of instances where this executable has been reported as malware (trojan). The program is not visible and usually resides in a subfolder of C:\Windows.

You may wish to use a utility that scans embedded hidden functions and processes. A couple that come to mind: Malwarebytes Anti-Malware, Security Task Manager, Hijack This Anti-Spyware. Hijack This is not for a novice PC user as you can crash your computer with this utility.

Hijack This and Malwarebytes both have active malware removal support forums.

Good luck with fixing your RegSvcs.exe problem.
ID: 1469010 · Report as offensive

Questions and Answers : Windows : Hi, I have a problem.


 
©2024 University of California
 
SETI@home and Astropulse are funded by grants from the National Science Foundation, NASA, and donations from SETI@home volunteers. AstroPulse is funded in part by the NSF through grant AST-0307956.