BleepingComputer.com: cpu usage 100 percent

Jump to content

  • 3 Pages +
  • 1
  • 2
  • 3
  • You cannot start a new topic
  • You cannot reply to this topic

cpu usage 100 percent

#1 User is offline   gvl2669 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 19
  • Joined: 19-February 10

Posted 19 February 2010 - 09:47 AM

Hello-

Newbie here that needs some help please after tearing my hair out for the last week.
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16981)

I noticed on Monday that my Mozilla Firefox icon was missing and went an installed the latest 3.6v. My computer became extremely slow and the Task Manager showed that there was a svchost.exe (SYSTEM) that was running at 99% constantly (or a little under that). I removed that version and rolled back to the 3.5.8v and still the same.

After Googling.. I did the following: defrag, registry cleanup, Malywarebytes, CCleaner, disk cleanup, Spybot and still nothing. I ran HiJackthis and don't really understand it. I posted it to a couple of sites but they didn't really help.

I ran Process Explorer and it showed that one svchost.exe as "kernel32.dll!CreateThread+0x22" and the stack for the thread reads:

"ntkrnlpa.exe!NtBuildNumber+0xe
ntkrnlpa.exe!RtlUpcaseUnicodeString+0xbe
ntkrnlpa.exe!ZwYieldExecution+0x4f3
hal.dll+0x2ef2
ntdll.dll!NtDeviceIoControlFile+0xc
WS2_32.dll!recv+0x6f"

I've done more research on this and I still can't figure it out. What am I doing wrong please? Help!

Thank you! Sorry if I sound stupid, but I'm trying..

#2 User is offline   hamluis 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Moderator
  • Posts: 31,436
  • Joined: 03-September 05
  • Gender:Male
  • Location:Killeen, TX

Posted 19 February 2010 - 10:06 AM


#3 User is offline   gvl2669 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 19
  • Joined: 19-February 10

Posted 19 February 2010 - 10:21 AM

Thank you Louis for posting a reply.. I guess I posted the wrong information..

After reading the tutorial.. it says:

DcomLaunch DCOM Server Process Launcher C:\\WINDOWS\system32\rpcss.dll
TermService Terminal Services C:\\WINDOWS\System32\termsrv.dll

Does that help any?

Thanks..
-Grace

#4 User is offline   hamluis 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Moderator
  • Posts: 31,436
  • Joined: 03-September 05
  • Gender:Male
  • Location:Killeen, TX

Posted 19 February 2010 - 10:35 AM

Well...that DCOM Launcher Service seems to have been prominent in a number of recent suspected malware instances posted in this forum.

You might take a look at Possibly Related Threads.

Louis

#5 User is offline   gvl2669 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 19
  • Joined: 19-February 10

Posted 19 February 2010 - 10:40 AM

sigh.. yeah I already went through all of those and then some.. they did nothing... :thumbsup:

#6 User is offline   techextreme 

  • Bleepin Tech
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 2,097
  • Joined: 09-June 09
  • Gender:Male
  • Location:Pittsburgh, PA

Posted 19 February 2010 - 10:51 AM

Can you give us a little information about your system please:

Motherboard
Processor
Memory
Techextreme

"Admire those who attempt great things, even though they fail."

-- Seneca

Member of the Bleeping Computer A.I.I. early response team!

#7 User is offline   gvl2669 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 19
  • Joined: 19-February 10

Posted 19 February 2010 - 11:25 AM

:thumbsup: Thank you!

Motherboard says: ASUSTek Computer INC/Model: Amberine M 1.03/Chipset: ATI Xpress 200(RS480) Rev 10/Southbridge ATI SB400/LPCIO SMSC/Bios Brand Phoenix Tech LTD/version 3.14

Memory: Type DDR/Channels # Dual/Size: 1024 MBytes

Processor: AM Athlon 64 3400+

I hope that's right.. :flowers:

-Grace

#8 User is offline   techextreme 

  • Bleepin Tech
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 2,097
  • Joined: 09-June 09
  • Gender:Male
  • Location:Pittsburgh, PA

Posted 19 February 2010 - 11:31 AM

What did Malwarebytes find ( if anything ) when you ran a scan with it?

Would this computer happen to be a Compaq Presario SR... Model?
Techextreme

"Admire those who attempt great things, even though they fail."

-- Seneca

Member of the Bleeping Computer A.I.I. early response team!

#9 User is offline   gvl2669 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 19
  • Joined: 19-February 10

Posted 19 February 2010 - 11:45 AM

Malwarebytes found nothing.. and I ran the FULL scan too...

Actually it's an HP Pavilion a1330e

#10 User is offline   techextreme 

  • Bleepin Tech
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 2,097
  • Joined: 09-June 09
  • Gender:Male
  • Location:Pittsburgh, PA

Posted 19 February 2010 - 11:53 AM

Have you updated any drivers on your computer lately?

Have you run Windows Update or installed Updates lately?

Did you recently install Service pack 3?
Techextreme

"Admire those who attempt great things, even though they fail."

-- Seneca

Member of the Bleeping Computer A.I.I. early response team!

#11 User is offline   gvl2669 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 19
  • Joined: 19-February 10

Posted 19 February 2010 - 12:09 PM

none of them actually.. I even ignore the add-ons for Firefox cause I'm so paranoid.. the only things was that Mozilla because it had mysteriously disappeared from my desktop..

#12 User is offline   gvl2669 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 19
  • Joined: 19-February 10

Posted 19 February 2010 - 01:05 PM

oh and every once in a while I can hit CTRL ALT DEL and it unfreezes the computer for a few minutes..

#13 User is online   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,356
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 19 February 2010 - 01:07 PM

Delete your Firefox Profile, and then remove Firefox then reinstall. Something in your firefox profile is causing this.

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

#14 User is offline   gvl2669 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 19
  • Joined: 19-February 10

Posted 19 February 2010 - 01:11 PM

ok this is going to sound REALLY stupid.. but forgive me OK? :thumbsup:

Is that the same thing as deleting the entire Firefox Program and reinstalling.. or no?


Thanks!

#15 User is online   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,356
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 19 February 2010 - 01:13 PM

When you remove/uninstall firefox your profile remains to keep bookmarks and other things. It doesn't get removed.

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

Share this topic:


  • 3 Pages +
  • 1
  • 2
  • 3
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users