Warning

 

Close

Confirm Action

Are you sure you wish to do this?

Confirm Cancel
Member Login
Site Notices
10/20/2017 1:01:18 AM
9/22/2017 12:11:25 AM
Posted: 9/9/2005 9:16:23 AM EDT
Link Posted: 9/9/2005 9:34:58 AM EDT
Look at the Task Manager, click the CPU column until the process with the most utilization is listed on top, and tell me what is is.
Link Posted: 9/9/2005 9:36:23 AM EDT
Link Posted: 9/9/2005 9:37:30 AM EDT

Originally Posted By TheRedGoat:
I have run AVG anti-virus, and it removed 3 downloaders.

The system is windows XP, 128 megs of ram, and it is staying at 100% CPU usage.

23 process runnning, none of them look suspicious, I have googled most of them and id not find anyting out of the ordinary.

TRG




128mb ram is the first problem, add another stick 128 is the minimum req amount. Get a good spyware sweeper like ad-aware and run it after updating it.
Link Posted: 9/9/2005 9:38:01 AM EDT
Link Posted: 9/9/2005 9:38:34 AM EDT
Link Posted: 9/9/2005 9:43:18 AM EDT
well without knowing much about that windows file, i would say try to run a scandisk and a defrag as well...but you do need more ram anyway.
Link Posted: 9/9/2005 9:47:41 AM EDT

Originally Posted By TheRedGoat:
SVCHOST.exe is running at 99-98 CPU

TRG



Cool.

1. Note the process ID (PID) in Task Manager.
2. From a command prompt, type 'tasklist /svc'.
3. Paste the services that match up with the svchost.exe instance who's PID patches the one you noted in step 1.

Link Posted: 9/9/2005 9:50:22 AM EDT
Link Posted: 9/9/2005 9:50:37 AM EDT
[Last Edit: 9/9/2005 9:52:08 AM EDT by azdave2]
This could be caused by spyware or other programs that are loading up and taking control of you CPU. What version of windows are you using?

EDIT: XP....I saw that above... Try cliking on start -> Run and type in MSCONFIG

This is a utility that will show you what programs are being run at startup.

I usually disable the software that I dont recognize and restart and see if that will help you.
Link Posted: 9/9/2005 9:52:24 AM EDT
Oops! I forgot to add something to my previous post. To see the process ID column in Task Manager, you'll need to click View->Select Columns... and check "PID".

Link Posted: 9/9/2005 9:52:31 AM EDT
Link Posted: 9/9/2005 9:54:59 AM EDT
tag for good info thanks
Link Posted: 9/9/2005 10:09:07 AM EDT
Link Posted: 9/9/2005 10:11:48 AM EDT
BTW - I also forget that not everybody runs XP Pro. Tasklist.exe isn't available in XP home, but it can be downloaded if need be.

Also: If you find copying and pasting from a cmd prompt to be a pain in the ass, you could always type something like:

tasklist /svc > C:\TheRedGoat.txt

and post the contents of the text file you just created in the root of drive C.
Link Posted: 9/9/2005 10:15:20 AM EDT
Link Posted: 9/9/2005 10:20:02 AM EDT
Link Posted: 9/9/2005 10:21:41 AM EDT
Link Posted: 9/9/2005 10:23:58 AM EDT
Link Posted: 9/9/2005 10:29:25 AM EDT
Which instance of svchost is the one that's hogging your processor? I need the PID (from Task Manager) of the problem instance of svchost.exe
Link Posted: 9/9/2005 10:35:08 AM EDT
Link Posted: 9/9/2005 11:51:48 AM EDT
[Last Edit: 9/9/2005 12:18:32 PM EDT by TheRedGoat]
Link Posted: 9/9/2005 12:17:40 PM EDT
Link Posted: 9/9/2005 12:21:30 PM EDT
Link Posted: 9/9/2005 12:49:01 PM EDT
tagged for my own education....
Link Posted: 9/9/2005 1:34:50 PM EDT
Link Posted: 9/9/2005 1:42:44 PM EDT
[Last Edit: 9/9/2005 1:45:47 PM EDT by cruze5]
install ccleaner

run xblock scroll down a little


install ewid don't install background support if you only have 128 mb of ram


see what happens then
Link Posted: 9/9/2005 2:16:25 PM EDT
[Last Edit: 9/9/2005 2:16:44 PM EDT by TheRedGoat]
Link Posted: 9/9/2005 2:48:02 PM EDT
get your windows xp cd and put it in the drive.

(if you can't go to start then run) then using windows explorer open to c:\windows\system32\ double click the cmd icon. it will be a black icon with a c:\ picture. you'll have the command prompt then type sfc /scannow

otherwise click start then run type sfc /scannow


and it will scan for altered files.

it doubt it will fix the problem but its worth a try. you will either have to go back to a previous restore point or do a fresh install
Link Posted: 9/9/2005 2:59:54 PM EDT
Link Posted: 9/9/2005 3:02:16 PM EDT
Link Posted: 9/9/2005 5:50:41 PM EDT

Originally Posted By TheRedGoat:

Originally Posted By cruze5:
get your windows xp cd and put it in the drive.

(if you can't go to start then run) then using windows explorer open to c:\windows\system32\ double click the cmd icon. it will be a black icon with a c:\ picture. you'll have the command prompt then type sfc /scannow

otherwise click start then run type sfc /scannow


and it will scan for altered files.

it doubt it will fix the problem but its worth a try. you will either have to go back to a previous restore point or do a fresh install



I am running the sfc /scannow right now.

FWIW, you can use Windows Task Manager's menus... File --> Run to get a run dialog box.

That is about the only thing that works on the machine at present. LOL

TRG



thanks I forgot about that one. I usualy remember you can do that when i am working in safe mode with command prompt only. good luck
Link Posted: 9/10/2005 1:01:33 AM EDT
Link Posted: 9/10/2005 6:21:24 AM EDT

Originally Posted By TheRedGoat:
Bingo!

Processor usage just dropped to 10%.

Here are the instructions I follwed after identifying the virus entry.

securityresponse.symantec.com/avcenter/venc/data/backdoor.ripgof.html

Had to edit the entries from Safe Mode.

Could NOT have done it without your help SubNetMask. I really appreciate your tips n listing the SVCHOST information.

TRG



You're welcome. BTW - I lost my internet access until about 10 minutes ago (wireless provider)

What I wanted to write earlier, was that one of the services controlled by svchost (PID 1104) was the culprit, but that it's difficult to pin down which one it is. There is no way to see how much processor time each is taking individually.

Your technique of booting in safe mode and comparing the differences was a very good idea. Hell, I didn't even think of that. I was going to start googling each one of those services and seeing if any didn't belong.
Link Posted: 9/11/2005 9:43:54 AM EDT
Link Posted: 9/11/2005 9:57:41 AM EDT
On a similar vane, what would cause a systems clock speed to slow down? When I first boot my laptop and left click on My computer it says its running at 1.8 after an hour or so it says its running at 540. Does it mean there is something wrong with the chip?
Top Top