why svchost always read/write the same registry item? RRS feed

  • Question

  • Hi, My windows 7 x64 home premium always read/write disk. I have turned off all possible server process. Such as antivirsus, super fetch, and windows search. But it doesn't stop. I use 'procmon' tool find that it's svhost.exe:


    12:41:29.8677386 PM        svchost.exe        804        RegQueryKey        HKLM\System\CurrentControlSet\Control\DeviceClasses        SUCCESS        Query: HandleTags, HandleTags: 0x0

    12:41:29.8677660 PM        svchost.exe        804        RegOpenKey        HKLM\System\CurrentControlSet\Control\DeviceClasses\{e2d1ff34-3458-49a9-88da-8e6915ce9be5}        SUCCESS        Desired Access: Query Value

    12:41:29.8677934 PM        svchost.exe        804        RegQueryKey        HKLM\System\CurrentControlSet\Control\DeviceClasses\{e2d1ff34-3458-49a9-88da-8e6915ce9be5}        SUCCESS        Query: HandleTags, HandleTags: 0x0


    The registry item stored is:



    Do you have any idea about how to solve it? Thank you!

    Saturday, September 4, 2010 4:56 PM


  • Hi,


    As my understanding, you want to block svchost.exe, right? You want to turn off all possible services, but the svchost.exe is necessary. Svchost.exe is a process on your computer that hosts, or contains, other individual services that Windows uses to perform various functions. For example, Windows Defender uses a service that is hosted by a svchost.exe process. It is a necessary application to help your computer function properly.


    Though you cannot stop svchost.exe, you can disable all third party software and services to see if the performance is improved. Check this article: How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7


    Hope it helps.




    Alex zhao



    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Proposed as answer by Cloud_TS Friday, September 24, 2010 8:07 AM
    • Marked as answer by Linda Yan Friday, September 24, 2010 8:27 AM
    Thursday, September 9, 2010 8:46 AM