Resource hogging process - AeLookupSvc

Discussion in 'Windows 10' started by Mutoid, Sep 24, 2015.

  1. Mutoid

    Mutoid MDL Member

    Sep 23, 2015
    182
    24
    10
    Even after carefully avoiding all GWX updates , I notice that a resource hogging process runs as an svchost.exe
    for the first 5 minutes after booting .
    Process Explorer shows it to be a service called "AeLookupSvc" .
    Has anybody else seen this ?

    It appears to run only once per day and NOT once per boot and it starts a few minutes after booting , and runs
    for about 5 minutes , using up to 25% cpu and 1.5 GB RAM at it's peak !!!

    Killing the process causes a second windows update icon to appear in the notification area .... Weird !

    I've done a fair bit of searching but I can only find conflicting information and advice , particularly in regard
    to removing or blocking this process.
    Some say blocking it will cause no ill-effects , others say the opposite.

    As a new member I don't think I can post links , but I could name the websites if that's any help.

    Have any other MDL members had this problem ?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. Mutoid

    Mutoid MDL Member

    Sep 23, 2015
    182
    24
    10
    Thanks cocachris89 , I hadn't seen that one before .

    On a quick first read-through , two points stand out .

    1] Disabling the service is easy , but re-enabling looks awkward

    2] It should only be running if a compatibility check is needed for newly installed software

    So either I am misunderstanding something , or it shouldn't be running every day.
    I've had this laptop for over five years and I have never seen this , or any other resource hogs running before ...
    .... and it begs the question .... " Why now ? "

    I have made some observations on it's behavior and I'm sure there is no internet / network traffic associated with it.

    .... still baffled !
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. Mutoid

    Mutoid MDL Member

    Sep 23, 2015
    182
    24
    10
    #4 Mutoid, Dec 14, 2015
    Last edited: Dec 14, 2015
    (OP)
    Using Task Manager shows the AeLookupSvc as the resource pig , then going to services shows these :-

    IKE and AuthIP IPsec Keying Modules
    Background Intelligent transfer service
    Computer Browser ( ntsvcs)
    Extensible Authentication Protocol
    LanmanServer
    ProfSvc User profile service
    Task scheduler
    SENS system Event Notification
    Shell Hardware detection
    Themes
    Winmgmt Windows management instrumentation
    wuauserv Windows Update

    under the "group" heading , all are labelled as ntsvcs

    Some additional info.

    1] There doesn't appear to be any network traffic when the process is running.

    2] I have refused all Win Updates associated with W10 upgrade for the past year
    I have disabled telemetry ( eg CEIP ) in Task scheduler

    3] Manually killing the problem service when the Win Update logo is in the toolbar
    sometimes causes a second icon to appear next to the first ....

    .... just a thought !

    I was going to add screen shots from Process Explorer / services but I can't see how to
    It looks like I can only add images from a URL

    I've spent months , on and off , trying to resolve this problem without success so
    I've posted some recent tests , just in case anyone has any tips.

    Thanks for reading !
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. oldsh_t

    oldsh_t MDL Expert

    Dec 23, 2009
    1,010
    477
    60
    To add attachments> Reply to Thread or edit your post> Go to Advanced> In advanced, select "Attachment"

    There you can upload a pic
     
  5. Mutoid

    Mutoid MDL Member

    Sep 23, 2015
    182
    24
    10
    Thanks for that oldsh t

    Update

    Changed Win Update settings to " Never " .... problem disappears

    Switch back ... problem returns.


    Looks like the OS is trying to " phone home " because I constantly refuse GWX related updates.
    It can't , because I have disabled all telemetry related processes in Task Scheduler.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...