How to fix IP Helper service (iphlpsvc) high CPU usage?

IP Helper (iphlpsvc) is the Windows service that runs IPv6 tunnels, IP-HTTPS and Port Proxy, and it should sit near 0% CPU. Steady load usually comes from a Teredo tunnel or Port Proxy rules, so restart the service first and check those two. Microsoft says it is OK to disable, and ipf_helper.exe is a different, Intel program.

Facts checked on 15 October 2026. Steps written for Windows 11 (25H2 and 26H2) and Windows 10 22H2, with the service description, default startup type and disabling guidance read from Microsoft Learn's system services table.

What IP Helper (iphlpsvc) is and why it should be idle

IP Helper is a built-in Windows service. Microsoft describes it like this: it "provides tunnel connectivity using IPv6 transition technologies (6to4, ISATAP, Port Proxy, and Teredo), and IP-HTTPS. If this service is stopped, the computer doesn't have the enhanced connectivity benefits that these technologies offer". Its service name is iphlpsvc, its default startup type is Automatic, and it runs inside a shared Service Host (svchost.exe) process from C:\Windows\System32.

In plain words, it lets a PC reach IPv6 addresses over an IPv4 network through a tunnel, carries IP-HTTPS for remote access such as DirectAccess, and forwards ports when a Port Proxy rule tells it to. Most home PCs use none of this most of the time, so the service should show 0% CPU nearly always.

Why IP Helper uses so much CPU, from most to least common

Most often one of the service's own jobs keeps it busy: a tunnel that keeps trying, or Port Proxy rules that carry a lot of traffic. Less often the service is stuck after sleep or a network change. Rarely the cause is damaged system files, another program, or malware hiding behind a svchost.exe name. Microsoft publishes no statistics, so this order comes from what the service does and from the reports we read.

How to fix IP Helper (iphlpsvc) high CPU usage

Fix 1 takes two minutes and tells you which process is really busy. Fix 2 to Fix 4 deal with the service's own jobs and solve most cases. Fix 5 disables the service, which Microsoft allows. Fix 6 is only for ipf_helper.exe. Fix 7 to Fix 9 are the general repairs.

Fix 1. Confirm the busy process is Service Host: IP Helper and not ipf_helper.exe

2 minutesNo riskEveryone who sees high CPU in Task Manager, before changing anything, because two processes with similar names need different fixes.

Two unrelated things have almost the same name. IP Helper is a Windows service inside svchost.exe; ipf_helper.exe is an Intel program. Each needs a different fix, and disabling one does nothing for the other.

1. Press Ctrl + Shift + Esc to open Task Manager. On Windows 10, select More details if you see a short list.
2. On the Processes tab, select the CPU column header so the busiest process is on top.
3. Read the name of the busy line. If it is ipf_helper.exe, go straight to Fix 6.
4. If it is Service Host: IP Helper, expand it and check that the service inside is IP Helper.
5. Open the Services tab, find iphlpsvc, right-click it and select Go to details.
6. Right-click the highlighted svchost.exe, select Open file location and check that File Explorer opens C:\Windows\System32.

Fix 2. Restart the IP Helper service

2 minutesLow riskService Host: IP Helper is busy and a reboot normally clears it for a while.

A restart ends a session of the service that got stuck while a tunnel or a forwarded port kept retrying, without a full reboot. Port Proxy forwarding and tunnels pause for a few seconds and come back.

1. Close apps that use a VPN or a forwarded port, such as a remote desktop session.
2. Press Win + R, type services.msc and press Enter.
3. Find IP Helper in the list.
4. Right-click it and select Restart.
5. Leave Startup type on Automatic for now.
6. Open Task Manager and watch the CPU column for two minutes.

Step by step for any service, with the startup type settings: Check and restart Windows services.

Fix 3. Check and remove leftover Port Proxy rules

5 minutesLow riskYou use WSL, Docker, a local web server or remote access tools, or you once followed a guide that ran netsh interface portproxy.

Port Proxy is one of the jobs Microsoft lists for IP Helper: every rule makes the service listen on a port and pass traffic on. Many rules, or rules pointing at an address that no longer answers, keep the service working.

1. Type cmd in Start, right-click Command Prompt and select Run as administrator. Select Yes in User Account Control.
2. Type netsh interface portproxy show all and press Enter.
3. If nothing is listed, you have no rules: go to Fix 4.
4. Write down every rule you see, with its listen address, listen port, connect address and connect port.
5. For a rule you do not recognise or no longer need, type netsh interface portproxy delete v4tov4 listenport=8080 listenaddress=0.0.0.0, using the port and address from your list. Use v4tov6, v6tov4 or v6tov6 if the rule is listed under that heading.
6. Run netsh interface portproxy show all again to check, then watch Task Manager for a few minutes.

netsh interface portproxy show all
netsh interface portproxy delete v4tov4 listenport=8080 listenaddress=0.0.0.0

Fix 4. Check Teredo and turn it off as a test

5 minutesLow riskThere are no Port Proxy rules, and the load starts on some networks or after the PC joins Wi-Fi.

Teredo is one of the IPv6 tunnels IP Helper runs. When a network blocks it, the tunnel can keep trying to qualify, and each try is work for the service. Turning Teredo off removes that work and is easy to undo.

1. Open Command Prompt as administrator, as in Fix 3.
2. Type netsh interface teredo show state and press Enter. Note the State line.
3. If the state is anything other than offline or disabled, type netsh interface teredo set state disabled and press Enter.
4. Restart IP Helper as in Fix 2 and watch Task Manager for ten minutes.
5. To undo later, type netsh interface teredo set state type=default.

netsh interface teredo show state
netsh interface teredo set state disabled
rem undo:
netsh interface teredo set state type=default

Fix 5. Disable the IP Helper service

3 minutesLow riskA home PC with no work VPN, no DirectAccess and no Port Proxy rules you need, and Fix 2 to Fix 4 did not stop the load.

Microsoft's table of system services marks IP Helper OK to disable: the PC only loses IPv6 transition tunnels, IP-HTTPS and Port Proxy. A stopped service cannot use CPU, so this ends the problem even when the cause stays unknown.

1. Press Win + R, type services.msc and press Enter.
2. Double-click IP Helper.
3. Open the Startup type list and select Disabled.
4. Select Stop, then Apply and OK.
5. Restart the PC and check that websites, games and your usual apps work.

The same from an administrator Command Prompt, in one line each. The space after start= is required.

sc stop iphlpsvc
sc config iphlpsvc start= disabled
rem undo:
sc config iphlpsvc start= auto
sc start iphlpsvc

Fix 6. If it is ipf_helper.exe: update or reinstall the Intel Innovation Platform Framework driver

15 minutesLow riskFix 1 showed that the busy process is ipf_helper.exe, or it crashes with an Application Error.

ipf_helper.exe is not a Windows service. It is installed with Intel's Innovation Platform Framework driver package (ipf_cpu.inf), which PC makers ship for power and thermal tuning. Its load or crashes go away with a newer or freshly installed copy of that driver, not with anything in services.msc.

1. Note your exact PC model from the sticker or from Settings > System > About.
2. Open the PC maker's support page for that model and look for a driver whose name contains Innovation Platform Framework or Intel IPF. Download the newest one.
3. Right-click Start, select Device Manager and expand System devices.
4. Find the entry with Innovation Platform Framework in its name. Right-click it and select Update driver, or uninstall it and run the downloaded installer.
5. Restart the PC and watch Task Manager.

1. Open Device Manager. Right-click Start and select Device Manager.
2. Open the device's Driver tab. Expand the category (for example Display adapters), right-click the device, select Properties and open the Driver tab. Driver Date and Driver Version show what is installed now.
3. Update the driver. Select Update Driver and let Windows search automatically. To use a driver you downloaded from the device maker, select Browse my computer for drivers instead and point to the unpacked folder.

These steps were written for Windows 11 24H2 and later. The full page with the other versions and what each result means: Update, roll back or reinstall a driver

Fix 7. Scan for malware with Microsoft Defender

15 to 60 minutesNo risksvchost.exe behind IP Helper opened from a folder other than C:\Windows\System32 in Fix 1, or the load stays with the service stopped.

Malware sometimes runs under the svchost.exe name to blend in with real services. A full scan, and if it finds something an offline scan, shows whether the CPU load is really IP Helper at all.

1. Open Windows Security. Select Start, type Windows Security and open the app.
2. Open Virus & threat protection. Select Virus & threat protection. Under Current threats you see when the last scan ran, how long it took and how many files it checked.
3. Run a quick scan. Select Quick scan. If Windows Security thinks a deeper scan is needed, it tells you when the quick scan is done.
4. Open Scan options. If the quick scan finds nothing and you still suspect an infection, select Scan options under Current threats.
5. Run a full scan. Select Full scan and start it. It checks every file and program on the device, so it takes much longer than a quick scan. Leave the PC on until it ends.
6. Or scan one folder. To check only a download or a USB drive, select Custom scan in Scan options and choose the folder. You can also right-click a file or folder in File Explorer and select Scan with Microsoft Defender. On Windows 11 you may have to select Show more options first.
7. Read Protection history. Go back to the first page of Windows Security and select Protection history. Select a card to expand it and see the details.

These steps were written for Windows 11 25H2 and 26H2, Windows 10 22H2. The full page with the other versions and what each result means: How to scan for malware with Microsoft Defender

Fix 8. Find a conflicting program with a clean boot

15 minutesLow riskPort Proxy is empty, Teredo is off, and IP Helper still gets busy.

VPN clients, network monitors and security suites can open tunnels or forwarded ports that end up in IP Helper. A clean boot starts Windows with only Microsoft services, so you can see whether one of them is the trigger.

1. Open System Configuration. Select Search on the taskbar, type msconfig and select System Configuration from the results.
2. Hide Microsoft services. On the Services tab, select the Hide all Microsoft services check box. Only services from other companies stay in the list.
3. Disable the remaining services. Select Disable all, then select Apply.
4. Open Task Manager. On the Startup tab of System Configuration, select Open Task Manager.
5. Disable the startup apps. On the Startup apps tab in Task Manager, select each item whose status is Enabled and select Disable. Write down or take a screenshot of the items you disable: you need the list to turn them back on.
6. Confirm the changes. Close Task Manager. On the Startup tab of System Configuration, select OK.
7. Restart and test. Restart the PC. Windows now starts in a clean boot environment: try again the thing that failed (run the app, install the update, uninstall the program).

These steps were written for Windows 11 25H2 and 26H2. The full page with the other versions and what each result means: How to perform a clean boot in Windows

Fix 9. Repair Windows system files with SFC and DISM

20 minutesNo riskNothing above helped, or other Windows services misbehave too.

IP Helper is part of Windows. If its files or the component store are damaged, the service can fail and restart in a loop, which shows as steady CPU use. SFC and DISM replace damaged system files with good copies.

1. Open an elevated command window. Right-click Start and select Terminal (Admin), or type cmd in the search box, right-click Command Prompt and select Run as administrator. Select Yes when Windows asks for permission.
2. Run DISM first. Type the command below and press Enter. DISM downloads clean copies of damaged components from Windows Update, so it can take several minutes. Wait until it says The operation completed successfully.

   DISM.exe /Online /Cleanup-Image /RestoreHealth

3. Run System File Checker. In the same window, type the command below and press Enter. Do not close the window until the verification reaches 100%.

   sfc /scannow

4. Read the result and restart. Compare the last message with the table below this guide, then restart the PC so that repaired files are loaded.

These steps were written for Windows 11 24H2 and 25H2. The full page with the other versions and what each result means: Run DISM and SFC to repair Windows system files

IP Helper still uses high CPU: what to check next

If the service is busy even after a restart, with no Port Proxy rules, Teredo off and a clean boot, collect evidence before you reinstall anything. Microsoft has not documented a log of its own for this service, so use what Windows records around it.

• Event Viewer: press Win + R, type eventvwr.msc, open Windows Logs > System and filter for Service Control Manager. A line such as "A timeout (30000 milliseconds) was reached while waiting for a transaction response from the iphlpsvc service" shows the service hanging rather than working. People also search the Russian and Spanish versions of this line; it means the same.
• Application log: for ipf_helper.exe, look under Windows Logs > Application for Application Error entries naming ipf_helper.exe and note the version shown there for the PC maker's support.
• Reliability Monitor: type reliability in Start and open View reliability history. A red cross on the day the load began often names the update or app behind it.
• Feedback Hub: press Win + F and report it under Network and Internet, with the build number from winver.
• Repair install: as a last step, reinstall Windows over itself and keep your files and apps: Reinstall Windows without losing files.

How to keep IP Helper from flaring up again

• Remove Port Proxy rules when you stop using the tool that needed them, and check netsh interface portproxy show all after following any networking guide.
• Uninstall VPN clients and remote access tools you no longer use, so they do not leave tunnels behind.
• Install Intel and chipset drivers from your PC maker's support page, which keeps ipf_helper.exe current.
• Keep Windows Update on and install the monthly update. Windows 10 left support on 14 October 2025, so only PCs in Extended Security Updates still get fixes there.
• Do not turn off neighbouring services such as Network Store Interface Service to save resources; unlike IP Helper, Windows needs them for basic networking.

Frequently asked questions

What is iphlpsvc?

iphlpsvc is the service name of IP Helper, a built-in Windows service. Microsoft describes it as the service that provides tunnel connectivity using IPv6 transition technologies (6to4, ISATAP, Port Proxy and Teredo) and IP-HTTPS. It starts automatically with Windows and runs inside a shared svchost.exe process with the NetSvcs group. On a typical home PC it has little to do, so it should show close to 0% CPU in Task Manager. It is not a virus and not a third-party program.

Is the IP Helper service needed?

On most home PCs, no. Microsoft's guidance on system services marks IP Helper as OK to disable and says only that a PC without it loses the enhanced connectivity of IPv6 transition technologies and IP-HTTPS. You need it if you connect to work through DirectAccess or another system that uses IP-HTTPS, if you use Port Proxy rules (some WSL, Docker and remote access setups do), or if a game relies on Teredo. If you are unsure, disable it as in Fix 5 and turn it back on if something stops working.

What is ipf_helper.exe?

ipf_helper.exe is a helper program of Intel's Innovation Platform Framework, a driver package that PC makers install for power and thermal management on Intel-based laptops and desktops. It runs from C:\Windows\System32\DriverStore\FileRepository in a folder starting with ipf_cpu.inf_amd64, which shows it came with a driver. It has nothing to do with the IP Helper service despite the similar name. If it uses CPU or crashes, update or reinstall that Intel driver from your PC maker as in Fix 6.

Why does Intel Innovation Platform Framework use high CPU?

We could not find an explanation from Intel. Users on Intel's community forum report ipf_helper.exe crashing with an Application Error and an access violation code, which points to a faulty or mismatched driver version rather than a setting you can change. The practical fix is the newest Innovation Platform Framework driver for your exact PC model from the PC maker, or a fresh install of it, as in Fix 6. Do not delete ipf_helper.exe by hand, because it is part of a driver package in the Windows driver store.

Is ipf_helper.exe a virus?

Normally not. The real file sits in C:\Windows\System32\DriverStore\FileRepository inside a folder whose name starts with ipf_cpu.inf_amd64, and it comes with an Intel driver. To check yours, right-click it in Task Manager and select Open file location. If it opens anywhere else, such as a user or temp folder, treat it as suspicious and run a full scan with Microsoft Defender as in Fix 7. A file in the right place that uses CPU needs a driver update, not a virus scan.

What does "Service Host: IP Helper" mean in Task Manager?

It is the Task Manager name of the svchost.exe process that runs the IP Helper service. Windows runs many services inside shared Service Host processes, and Task Manager labels each one by the service inside. Expand the line to see IP Helper listed under it. The CPU figure on that line is the load of IP Helper. Searches for service host ip helper also bring up the IP Helper API for developers and network switch settings called ip helper address; both are unrelated to this service.

IP Helper service is not running. How do I start it?

Open services.msc, double-click IP Helper, set Startup type to Automatic, select Apply, then Start. From an administrator Command Prompt you can run sc config iphlpsvc start= auto and then sc start iphlpsvc. If you disabled it earlier with Fix 5, these commands undo that. If it fails to start, look in Event Viewer under Windows Logs > System for a Service Control Manager entry about iphlpsvc, then run SFC and DISM as in Fix 9.

What does "services tuning iphlpsvc" mean?

It looks like a line from a tweaking or debloating tool that lists Windows services and suggests which to turn off. We could not confirm which tool shows the words services tuning or the value undefined next to iphlpsvc. Whatever the tool, the facts are the same: Microsoft marks IP Helper as OK to disable, so setting it to Disabled is safe on most home PCs. Keep it on if you use a work VPN with DirectAccess, Port Proxy rules or Teredo for games.

Is it safe to disable IP Helper with the registry, as some guides say?

It works, but it is not needed. The older version of this page set the Start value under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iphlpsvc to 4. The Services window or the sc config command in Fix 5 change the same setting without opening the registry, and they are easier to undo. If you edit the registry anyway, back it up first with Back up the registry before editing it.