BleepingComputer.com: cpu usage 100 percent

Jump to content

  • 3 Pages +
  • 1
  • 2
  • 3
  • You cannot start a new topic
  • You cannot reply to this topic

cpu usage 100 percent

#31 User is offline   deva fever 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 2
  • Joined: 21-February 10

Posted 21 February 2010 - 08:54 AM

Sorted !!

A short scan on malwarebytes seems to have fixed things,

the problem seems to have been

\Start Menu\Programs\Startup\monnid32.exe (Trojan.Bredolab)


Now following a reboot my laptop is operating in blissful silence with 90% or so cpu as system idle process as it should be,
Previously it was whirring away at 100% cpu usage on SVCHOST.EXE as if it were about to take off.


Anyway, I've learnt quite a lot about computers in the last 24 hours whilst trying to sort this out.
So, now that it is working at a proper speed again - I will do a full scan of the malwarebytes and then the AVG just to be sure.

#32 User is online   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,356
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 21 February 2010 - 03:17 PM

View Postpetewills, on Feb 21 2010, 12:48 PM, said:

Cryptodan

Avast reported your link in Post #27 as a 'Trojan Horse' and blocked it.
May be FP, thought you should know.


Below is what the page said. I would suspect Avast detected a possible malicious link via an advertisement.

Quote

High CPU Usage by SVCHOST.exe Problem
High CPU Usage by SVCHOST.exe Problem

High CPU Usage by SVCHOST.exe Problem

Recently I have noticed that my laptop has been crawling and when I looked at the processes via Task Manager, I see that SVCHOST.exe is eating around 50% of CPU power even when the computer is idle. Something is wrong!

Are you in the same boat as me?

The first thing I did (just out of curiosity) is to kill that process using end task and I got a prompt.The prompt lead me to the real program behind SVCHOST.exe running. Do note that there are a lot of these jobs running simultaneously on your computer. They are just aliases for many different programs in Windows and are not the same.

I killed the “DCOM Server Process Launcher” windows service and XP recommends that I restart my computer (it even had a shutdown prompt in 1 minute). I canceled that warning and searched in Google to some solutions to this problems.

As I read in forums, and other blog posts, I learned that many people are experiencing this too.

Turn off or reinstall Windows Update

This is the most common solution I got but I crossed this one out because they are talking about a different windows service behind the svchost.exe.

As I browsed further, I got another solution that possibly, my computer is infected and they recommended that I use two programs.

* MalwareBytes
* ComboFix

I have experienced both of these programs and I really would suggest that you use MalwareBytes first before using ComboFix. MalwareBytes has an easy interface (click to scan, and click to fix) while Combofix requires some additional input via notepad (you have to create that file with the correct inputs) before it can help you. Basically, Malwarebytes is for the average user and Combofix is for the more advanced user. [Click here for a sample post that shows you how to use ComboFix]

MalwareBytes Detects Malware in my Laptop

When I did a scan from Malware Bytes, it detected that I have malware. I was surprised because I thought it already got cleaned of Trojans and Viruses.

Here is what has been found by MalwareBytes

Files Infected:
C:\WINDOWS\system32\drivers\lvqll.sys (Rootkit.Agent) -> Delete on reboot.
C:\Documents and Settings\gurreaa\Start Menu\Programs\Startup\siszyd32.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\gurreaa\Application Data\avdrn.dat (Malware.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\Application Data\fvgqad.dat (Malware.Trace) -> Quarantined and deleted successfully.

I had them removed and poof, my svchost.exe high usage problem was gone.

I was really impressed by MalwareByte’s performance. I would suggest that everyone download this program and scan your computer. You will not know what could be hiding in your computers. :thumbsup:


It was about svchost being infected, and the end result is it was.

Glad they got it fixed.

This post has been edited by cryptodan: 21 February 2010 - 03:18 PM


My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

#33 User is offline   petewills  

  • Retired
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 1,123
  • Joined: 15-October 07
  • Gender:Male

  Posted 22 February 2010 - 06:30 AM

Thanks, that's very informative.

#34 User is offline   gvl2669 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 19
  • Joined: 19-February 10

Posted 22 February 2010 - 09:05 AM

good for you deva fever.. unfortunately.. I'm still stuck..

Share this topic:


  • 3 Pages +
  • 1
  • 2
  • 3
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users