Why does svchost load a laptop?

Question

Microsoft

On a netbook with 2 GB of RAM, there is a seven x64. I notice this oddity: from time to time (usually once after each reboot, but not immediately) svchost.exe starts eating 600-900 MB of RAM and loading the hard drive wildly. At the same time, it either refers to some C: / Windows / Logs / CBS / ... or, the last time the picture was like this:

At the same time, the system hangs very seriously, because the RAM is almost completely clogged. This garbage continues for several minutes, then the memory is freed.
What could it be? The probability of a virus is practically excluded - pure Windows, it is only a week old, antiviruses are everywhere (both here and on the PC), everyone is silent.
How can I find out which service a given svchost belongs to? Maybe then it would be enough just to turn it off. I observe a similar situation when checking for Windows updates, but I have it disabled.

Answer 1

windows.microsoft.com/ru-ru/windows7/open-resource... - this program shows where the legs grow from this or that svchost and not only

Answer 2

Quite often this question arises in my own words.
svchost itself does not load anything, it starts the windows system services
. Several svchost processes are launched in the system, each of which, in turn, starts from 1 to 10 services.
Direct freezes are associated with the operation of these same services.
The service of archiving, indexing, the service of the built-in defender (antivirus) naturally loads the processor.
Another option is service errors associated with read-write errors, old libraries, the growth of log files to gigantic sizes, at which brakes begin, etc.
Actually, what to do, take process haker, look in the properties of svchost (RMB - services) AND (property> threats> cyclesdata-services) what services it starts and which service gives an error. Here is a similar (inaccurate) picture, if you "scroll" to the right, you will see a service that loads the processor;
if the service is not needed, then in the same PH you can turn it off. If it is necessary, and work is impossible without it, then fix the errors, update the libraries, reading along the way the solutions to problems with this service on the forums.
On your question, in the search they write about the suspicion of the update service
sys-admin.kz/systadm/366-esent-474-datastore.html
answers.microsoft.com/ru-ru/windows/forum/windows_...
Which can be suspended, running in manual mode or clean up bad files.
UPD PH naturally runs under admin

Answer 3

No antivirus?
PS Turn off the Windows update and you will be happy, if it doesn’t help, then this indexing service is playing tricks on it.

Answer 4

On a netbook with 2 GB of RAM, there is a seven x64

Why use Win x64 with so much RAM?