Help - Search - Members - Calendar
Full Version: CPU at 100% Win XP
Skype Community > English > Windows
pdub
I have been researching the 100% CPU usage problem on the forum and have tried to adjust my settings to no avail. Here is a list of the things I have done
1. Remove speech recognition.
2. Installed the latest direct x
3. Booted clean i.e. no av or firewall

CPU still runs at 100% at sign in. Program will not perform at all.

Can anyone help
Thanks…Peter


OS Name Microsoft Windows XP Home Edition
Version 5.1.2600 Service Pack 2 Build 2600
System Manufacturer AVERATEC
Processor x86 Family 15 Model 28 Stepping 0 AuthenticAMD ~1603 Mhz
BIOS Version/Date American Megatrends Inc. 080011, 12/15/2004
SMBIOS Version 2.3
Hardware Abstraction Layer Version = "5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)"
Total Physical Memory 512.00 MB
Available Physical Memory 117.28 MB
Total Virtual Memory 2.00 GB
Available Virtual Memory 1.96 GB
Page File Space 1.09 GB
Audio: Vinyl AC'97 Codec Combo Driver (WDM)

Logfile of HijackThis v1.99.1
Scan saved at 3:19:27 AM, on 11/6/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Documents and Settings\Peter Welk\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.averatec.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.averatec.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.averatec.com/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [HPLJ Config] C:\Program Files\Hewlett-Packard\hp LaserJet 3015_3020_3030_3380\SetConfig.exe -c Direct -p DOT4_001 -pn "" -n 1 -l 1049 -sl 120000
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Mail.Ru Agent - {7558B7E5-7B26-4201-BEDB-00D5FF534523} - C:\Program Files\Mail.Ru\Agent\MAgent.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.averatec.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/m...83/mcinsctl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1102414635562
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/...tiveXPlugin.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/m...,20/mcgdmgr.cab
O18 - Protocol: widimg - {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} - C:\WINDOWS\system32\btxppanel.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

rocketman
Strange you should make this comment I to have noticed the my CPU is running at 100% when I first boot up and looking in Task Manager I have found the a program called svchost.exe in System is using all this CPU usage for about 5 to 8 minutes, also the peek memore will go up as high as 93Meg.

I have no idea what this file does but once it has done what it is doing it will the go back to using about 2% CPU on the odd occasion and my total CPU usage the varied between 1% and 45% when I use Skype and 1% to 10% sitting doing nothing.
nafcom
Look here so you can read what it is good for:
http://support.microsoft.com/kb/314056
GLADIATOR
svchost - svchost.exe - Process Information
Process File: svchost or svchost.exe
Process Name: Microsoft Service Host Process
Run a Free System Scan for svchost.exe Related Errors :
http://www.liutilities.com/products/wintas...ibrary/svchost/

Description:
svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. This program is important for the stable and secure running of your computer and should not be terminated.

Note: svchost.exe is a process registered as a backdoor vulnerability which may be installed for malicious purposes by an attacker allowing access to your computer from remote locations, stealing passwords, Internet banking and personal data. If unaccounted for, this process should be removed immediately.

Note: svchost.exe is a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.

Note: svchost.exe is a process belonging to Microsoft Service Host Process. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.

Determining whether this process is a virus or a legitimate Windows process depends on the directory location it executes or runs from in WinTasks.
For More Information About svchost.exe - Get WinTasks 5 Pro Now!
Recommendation for svchost.exe:
Should not be disabled, required for essential applications to work properly.


http://www.liutilities.com/products/wintas...ibrary/svchost/
nafcom
QUOTE(GLADIATOR @ Mon Nov 6 2006, 16:55) [snapback]316413[/snapback]

svchost - svchost.exe - Process Information
Process File: svchost or svchost.exe
Process Name: Microsoft Service Host Process
Run a Free System Scan for svchost.exe Related Errors :
http://www.liutilities.com/products/wintas...ibrary/svchost/

Description:
svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. This program is important for the stable and secure running of your computer and should not be terminated.

Note: svchost.exe is a process registered as a backdoor vulnerability which may be installed for malicious purposes by an attacker allowing access to your computer from remote locations, stealing passwords, Internet banking and personal data. If unaccounted for, this process should be removed immediately.

Note: svchost.exe is a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.

Note: svchost.exe is a process belonging to Microsoft Service Host Process. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.

Determining whether this process is a virus or a legitimate Windows process depends on the directory location it executes or runs from in WinTasks.
For More Information About svchost.exe - Get WinTasks 5 Pro Now!
Recommendation for svchost.exe:
Should not be disabled, required for essential applications to work properly.
http://www.liutilities.com/products/wintas...ibrary/svchost/


Yes, some viruses hide as it (usually similar names) but the process itself by Windows is no harm and has a use,.
rocketman
Thanks for the info Guys that was quick.

I have 6 copies of this file on my PC and they are placed here

4 in System
1 in Local service
1 in Network service

And can be found in the following folders.
C:\WINDOWS\$NtservicepackUninstall$
C:\WINDOWS\Prefetch
C:\WINDOWS\SYSTEM32
C:\WINDOWS\ServicePackFiles\i386

Are they in the right place and can I safely leave the there bearing in mind there comments
QUOTE
Description:
svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. This program is important for the stable and secure running of your computer and should not be terminated.

Note: svchost.exe is a process registered as a backdoor vulnerability which may be installed for malicious purposes by an attacker allowing access to your computer from remote locations, stealing passwords, Internet banking and personal data. If unaccounted for, this process should be removed immediately.

Note: svchost.exe is a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.


I would like to add that these files do not slow down my Skype operation unless I try to use it straight after the PC has booted and before this svchost.exe file has finshed what it is doing.
nafcom

Read my above statement.



Leave them. I have seen them on any XP I checked, too.

I have also provided a Microsoft Knowledge Base link in my earlier post(s).

QUOTE(rocketman @ Mon Nov 6 2006, 17:20) [snapback]316432[/snapback]

Thanks for the info Guys that was quick.

I have 6 copies of this file on my PC and they are placed here

4 in System
1 in Local service
1 in Network service

And can be found in the following folders.
C:\WINDOWS\$NtservicepackUninstall$
C:\WINDOWS\Prefetch
C:\WINDOWS\SYSTEM32
C:\WINDOWS\ServicePackFiles\i386

Are they in the right place and can I safely leave the there bearing in mind there comments

I would like to add that these files do not slow down my Skype operation unless I try to use it straight after the PC has booted and before this svchost.exe file has finshed what it is doing.


rocketman
QUOTE(nafcom @ Mon Nov 6 2006, 17:31) [snapback]316437[/snapback]

Read my above statement.
Leave them. I have seen them on any XP I checked, too.

I have also provided a Microsoft Knowledge Base link in my earlier post(s).

Thanks sorry missed you last statement was doing something else at the same time.

On a slightly different note I wounder if some of the people who complain that Skype uses 100% of my CPU are realy having the same action taks place as myself and pdub but do not realise it they just jump of the fact that Skype is running and assume that that is there problem.
nafcom
QUOTE(rocketman @ Mon Nov 6 2006, 17:43) [snapback]316446[/snapback]

Thanks sorry missed you last statement was doing something else at the same time.

On a slightly different note I wounder if some of the people who complain that Skype uses 100% of my CPU are realy having the same action taks place as myself and pdub but do not realise it they just jump of the fact that Skype is running and assume that that is there problem.

No worries smile.png

If those users have a trojan/virus (which are really named very similar), then scanning with SpyBot should detect them.

Regarding your other statement. It should be clear for most people that not leaving Windows booting completely before starting an application, will cause problems.
rocketman
QUOTE
Regarding your other statement. It should be clear for most people that not leaving Windows booting completely before starting an application, will cause problems.
May be to you and I but I bet not to the average guy/girl.
GLADIATOR
did you follow this:
Determining whether this process is a virus or a legitimate Windows process depends on the directory location it executes or runs from in WinTasks.
For More Information About svchost.exe - Get WinTasks 5 Pro Now!
Recommendation for svchost.exe:
Should not be disabled, required for essential applications to work properly.


http://www.liutilities.com/products/wintas...ibrary/svchost/


nafcom
QUOTE(GLADIATOR @ Mon Nov 6 2006, 20:30) [snapback]316548[/snapback]

did you follow this:
Determining whether this process is a virus or a legitimate Windows process depends on the directory location it executes or runs from in WinTasks.
For More Information About svchost.exe - Get WinTasks 5 Pro Now!
Recommendation for svchost.exe:
Should not be disabled, required for essential applications to work properly.
http://www.liutilities.com/products/wintas...ibrary/svchost/

This is basicly what I said, too - just different words and link
rocketman
QUOTE(GLADIATOR @ Mon Nov 6 2006, 20:30) [snapback]316548[/snapback]

did you follow this:
Determining whether this process is a virus or a legitimate Windows process depends on the directory location it executes or runs from in WinTasks.
For More Information About svchost.exe - Get WinTasks 5 Pro Now!
Recommendation for svchost.exe:
Should not be disabled, required for essential applications to work properly.
http://www.liutilities.com/products/wintas...ibrary/svchost/

Yes I did thanks and having a look via the programs now.
pdub
Dear All,
In my case the culprit in the 100 % CPU usage is Skype.exe. The program svchost.exe is not doing anything. I install Skype ver. 2 and solved my problem but ver 2.5 does not work.
Thanks…Peter

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.