Go Back   PCMech Forums > Windows Support > Windows Legacy Support (XP and earlier)

Need Some Help? Type Your Keywords Here:

Reply
 
LinkBack Thread Tools Search this Thread Rate Thread Display Modes
Old 11-27-2003, 04:19 PM   #1
Member (10 bit)
 
Join Date: Jul 2002
Location: tampa,fl
Posts: 762
Send a message via AIM to sam21
CPU usage extremely high even when no apps is running

Hello,for the past couple of weeks I have been noticing major lags in my computer's performance.Then I decided to look at the Task Manager and look at the CPU performance,I was surprised to see that the CPU Usage was at 100% when no applications was even running,the scary thing is that it stays there for a very long time and only very small amount of memory is being used.Can someone please help?
a pic of the CPU performance attached

Last edited by sam21; 11-27-2003 at 04:26 PM.
sam21 is offline   Reply With Quote
Old 11-27-2003, 04:27 PM   #2
Member (10 bit)
 
Join Date: Jul 2002
Location: tampa,fl
Posts: 762
Send a message via AIM to sam21
..
Attached Images
File Type: jpg cpuperf.jpg (63.8 KB, 158 views)
sam21 is offline   Reply With Quote
Old 11-27-2003, 04:28 PM   #3
Member (10 bit)
 
Join Date: Jul 2002
Location: tampa,fl
Posts: 762
Send a message via AIM to sam21
I've also noticed that svchost.exe in the Processes tab is what seems to be eating up the CPU,what is svchost.exe for?and why is it using up so much resource?
Attached Images
File Type: jpg svchost.jpg (51.4 KB, 109 views)
sam21 is offline   Reply With Quote
Old 11-27-2003, 04:30 PM   #4
Member (9 bit)
 
Join Date: Oct 2003
Location: CFB Greenwood, NS
Posts: 392
Send a message via AIM to cdnref Send a message via MSN to cdnref
Have a look at the processes, maybe something was downloaded and installed on your machine with u noticing. Run Spybot S&D and Ad-aware.
cdnref is offline   Reply With Quote
Old 11-27-2003, 04:35 PM   #5
Member (9 bit)
 
Join Date: Oct 2003
Location: CFB Greenwood, NS
Posts: 392
Send a message via AIM to cdnref Send a message via MSN to cdnref
Maximize the process screen and post that so we can see it all.
cdnref is offline   Reply With Quote
Old 11-27-2003, 04:40 PM   #6
Member (10 bit)
 
Join Date: Jul 2002
Location: tampa,fl
Posts: 762
Send a message via AIM to sam21
here we go
Attached Images
File Type: jpg taskman.jpg (79.4 KB, 140 views)
sam21 is offline   Reply With Quote
Old 11-27-2003, 04:43 PM   #7
Member (12 bit)
 
Markoman01027's Avatar
 
Join Date: Jul 2002
Location: Easthampton, Massachusetts
Posts: 2,633
1. Run Spybot and Adaware to remove any spyware found.
2. Go to http://www.trendmicro.com and run their free virus. scanner, so you can remove any viruses found.
3. Run MSCONFIG and remove any unwanted program from starting up. Looks like you have a program that is somehow using more of the CPU than it really needs, and that is usually caused by a virus and spyware.

Here is a link that explains about SVCHOST.EXE: http://www.grtg.org/stuff/computers/...vchost_exe.php
Hope that helps!

Last edited by Markoman01027; 11-27-2003 at 04:45 PM.
Markoman01027 is offline   Reply With Quote
Old 11-27-2003, 05:32 PM   #8
Member (10 bit)
 
Join Date: Jul 2002
Location: tampa,fl
Posts: 762
Send a message via AIM to sam21
Ok,i ran ad-aware and it only founded some tracking cookies,ran spybot and just found some tracking cookies,ran trend micro nithing was found,ran AVG 6.0 and found nothing.Tried to run MSCONFIG but it won't let me
Attached Images
File Type: jpg config.jpg (17.0 KB, 84 views)
sam21 is offline   Reply With Quote
Old 11-27-2003, 05:53 PM   #9
Member (12 bit)
 
Redo40's Avatar
 
Join Date: Jan 2002
Location: Central Arkansas
Posts: 2,170
Go to Start/Run/type "regedit" without the quotation marks, the click enter.
Hkey_Local_machine/software/microsoft/windows/current version/Run. Highligh Run and tell us what is listed in the window to the right.
__________________
Roger

"Our greatest glory is not in never falling, but in rising every time we fall."
-Confucius
Redo40 is offline   Reply With Quote
Old 11-27-2003, 06:03 PM   #10
Member (10 bit)
 
Join Date: Jul 2002
Location: tampa,fl
Posts: 762
Send a message via AIM to sam21
here it is
Attached Images
File Type: jpg regedit.jpg (93.3 KB, 151 views)
sam21 is offline   Reply With Quote
Old 11-27-2003, 06:19 PM   #11
Member (12 bit)
 
Redo40's Avatar
 
Join Date: Jan 2002
Location: Central Arkansas
Posts: 2,170
Download The Cleaner , it's free for 30 days, run it just to be sure. I didn't see anything out of the ordinary under Run.

Did you install any new software about the time this all started?

Last edited by Redo40; 11-27-2003 at 06:22 PM.
Redo40 is offline   Reply With Quote
Old 11-27-2003, 07:31 PM   #12
Member (10 bit)
 
Join Date: Jul 2002
Location: tampa,fl
Posts: 762
Send a message via AIM to sam21
Ok,I downloaded THe Cleaner but everytime I try to run it,it shuts it self off.Is that supposed to happen?
sam21 is offline   Reply With Quote
Old 11-27-2003, 07:54 PM   #13
Member (12 bit)
 
Redo40's Avatar
 
Join Date: Jan 2002
Location: Central Arkansas
Posts: 2,170
Nope, that's not normal.
Redo40 is offline   Reply With Quote
Old 11-27-2003, 09:52 PM   #14
Member (10 bit)
 
Join Date: Jul 2002
Location: tampa,fl
Posts: 762
Send a message via AIM to sam21
It keeps doing that,I donn't know why. even uninstalled and installed it again.There's seriously something wrong with my computer,please help someone
sam21 is offline   Reply With Quote
Old 11-27-2003, 10:52 PM   #15
Member (7 bit)
 
mark70's Avatar
 
Join Date: Jul 1999
Location: slum just south of Lake Erie
Posts: 125
sychost.exe

W32/Agobot-S worm. Try to find info on this worm, it may be causing your problems. Will try to find more info on it in the meantime.Also you can use a program called active ports which will allow you to moniter outgoing programs on your puter. Can help you detect trojens and worms. http://www.protect-me.com/freeware.html
mark70 is offline   Reply With Quote
Old 11-27-2003, 11:02 PM   #16
Member (7 bit)
 
mark70's Avatar
 
Join Date: Jul 1999
Location: slum just south of Lake Erie
Posts: 125
svchost.exe

Look here http://www.sophos.com/virusinfo/anal...32agobots.html
Hope this helps, Mark
mark70 is offline   Reply With Quote
Old 11-28-2003, 09:02 AM   #17
Member (10 bit)
 
Join Date: Jul 2002
Location: tampa,fl
Posts: 762
Send a message via AIM to sam21
ok,I even tried the Sophos evaluation program and followed the guide to remove the worm but the program detected none present in my system.
sam21 is offline   Reply With Quote
Old 11-28-2003, 11:32 PM   #18
Member (10 bit)
 
Join Date: Jul 2002
Location: tampa,fl
Posts: 762
Send a message via AIM to sam21
bump?
sam21 is offline   Reply With Quote
Old 11-29-2003, 04:48 PM   #19
Member (10 bit)
 
Join Date: Jul 2002
Location: tampa,fl
Posts: 762
Send a message via AIM to sam21
Ok,I just scanned for any viruses through Symantec's online scan,they've found two but didn't remove it(thanks symantec! )anyways the virus/worm is W32.HLLW.Gaobot.AO and it has infected C:\WINNT\system32\EXPLORE.EXE and C:\WINNT\system32\winhlpp32.exe the question is,how do I get rid of it??

Last edited by sam21; 11-30-2003 at 12:42 AM.
sam21 is offline   Reply With Quote
Old 11-30-2003, 12:41 AM   #20
Member (10 bit)
 
Join Date: Jul 2002
Location: tampa,fl
Posts: 762
Send a message via AIM to sam21
bump?
sam21 is offline   Reply With Quote
Old 11-30-2003, 03:21 AM   #21
Member (12 bit)
 
andyms18a's Avatar
 
Join Date: Dec 2002
Location: essex
Posts: 2,252
the instrutions to remove the virus are at the end of this web page http://securityresponse.symantec.com...gaobot.ao.html
__________________
Join the PcMech.com Folding@Home Team and Help Save Lives! Click Here!
Life only looks greener on the other side of the fence
andyms18a is offline   Reply With Quote
Old 11-30-2003, 01:55 PM   #22
Member (10 bit)
 
Join Date: Jul 2002
Location: tampa,fl
Posts: 762
Send a message via AIM to sam21
HELP!!OMG the virus keeps closing The Cleaner,and I've just dl-ed the trial version of Norton Pro and the virus closes the program too
sam21 is offline   Reply With Quote
Old 11-30-2003, 02:18 PM   #23
Member (12 bit)
 
Redo40's Avatar
 
Join Date: Jan 2002
Location: Central Arkansas
Posts: 2,170
Have you followed the instructions for stopping the virus on link that andyms18 posted?

You will need to follow all the instructions including stopping system restore.
Redo40 is offline   Reply With Quote
Old 11-30-2003, 02:21 PM   #24
Member (4 bit)
 
Join Date: Nov 2003
Location: Christchurch, New Zealand
Posts: 9
SAMS virus

Sam ... here is what I'd do.... before u delete those files that online virus check found... go get a copy of them from another computer with the same system. Or if u have the CD you can find them in the cab files using either a zip viewr/extractor or a RAR decompressor. However that is time consuming to find them. Anyway.... get a copy of them on floopy from a friend or whatever... next in DOS mode (using windows startup disk) go and delete the bad files ... then replace them from the floppy into thier original folder. If your not familiar with DOS... do a google seach for DOS commands or something.

Hepcat is offline   Reply With Quote
Old 11-30-2003, 02:27 PM   #25
Member (4 bit)
 
Join Date: Nov 2003
Location: Christchurch, New Zealand
Posts: 9
SAM .... if you are running win98 SE I can email u the files before u delete them. Just tell me what they are. and I'll tell u how to use dos to replace them from floppy. If you are not familiar with dos

joebama40@hotmail.com
Hepcat is offline   Reply With Quote
Old 11-30-2003, 02:31 PM   #26
Member (4 bit)
 
Join Date: Nov 2003
Location: Christchurch, New Zealand
Posts: 9
SAM ... one more quick note... If u do not have a windows startup disk ... got to control panel... select add/remove programs... on the top is a tab that says startup disk ... click that and follow instructions
Hepcat is offline   Reply With Quote
Old 11-30-2003, 03:14 PM   #27
Member (4 bit)
 
Join Date: Nov 2003
Location: Christchurch, New Zealand
Posts: 9
Boom

oh yeah one more quick note SAM21... when u run virus checkers in XP ... you have to disable some darn thing in your control panel. forgot what it was .... check into it.... stupid Microsoft
Hepcat is offline   Reply With Quote
Old 11-30-2003, 04:16 PM   #28
Member (10 bit)
 
Join Date: Jul 2002
Location: tampa,fl
Posts: 762
Send a message via AIM to sam21
Ok guys,problem solved.I had to manually update the Symantec virus database and finally got it running.It found the two viruses and problem's solved.CPU usage seems normal and all is happy in my computer

Just wanna thank all you guys that helped,thanks a lot fellas!
sam21 is offline   Reply With Quote
Old 11-30-2003, 05:31 PM   #29
Member (12 bit)
 
andyms18a's Avatar
 
Join Date: Dec 2002
Location: essex
Posts: 2,252
good work SAM glad its fixed
andyms18a is offline   Reply With Quote
Old 12-01-2003, 01:04 AM   #30
Member (4 bit)
 
Join Date: Nov 2003
Location: Christchurch, New Zealand
Posts: 9
Good for you SAM1...

I learned the hard way once to... updates are a good thing.
Hepcat is offline   Reply With Quote
Reply

Bookmarks

Still Need Help? Type Your Keywords Here:


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -5. The time now is 11:17 AM.
Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2012, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 PL2