"97% of CPU used"

Win10

Suddenly I get a message indicating 97% CPU usage. After rebooting
the same thing happens.
Peter
https://postimg.org/image/a0cmnyb1d/

"Peter Jason" wrote

| Suddenly I get a message indicating 97% CPU usage. After rebooting
| the same thing happens.
| Peter
| https://postimg.org/image/a0cmnyb1d/

If you don't know what that gear icon is, try
Process Explorer from Sysinternals. It's better
than Task Manager.

Mayayana wrote:
"Peter Jason" wrote

| Suddenly I get a message indicating 97% CPU usage. After rebooting
| the same thing happens.
| Peter
| https://postimg.org/image/a0cmnyb1d/

If you don't know what that gear icon is, try
Process Explorer from Sysinternals. It's better
than Task Manager.



In lieu of that right-click Properties can be revealing

--
Take care,

Jonathan
-------------------
LITTLE WORKS STUDIO
http://www.LittleWorksStudio.com

On Wed, 25 Jan 2017 00:05:13 -0500, "Jonathan N. Little"
wrote:

Mayayana wrote:
"Peter Jason" wrote

| Suddenly I get a message indicating 97% CPU usage. After rebooting
| the same thing happens.
| Peter
| https://postimg.org/image/a0cmnyb1d/

If you don't know what that gear icon is, try
Process Explorer from Sysinternals. It's better
than Task Manager.



In lieu of that right-click Properties can be revealing

It seems to be coming from the networked CCTV system.

Win10

Suddenly I get a message indicating 97% CPU usage. After rebooting
the same thing happens.
Peter
https://postimg.org/image/a0cmnyb1d/

That happened to me just yesterday. I'd been playing with RAM modules. I put
the goods ones back in reverse order. You show no useful information in your
very readable picture. In my case CPU went up to 99%. I used Resource
Monitor to understand it. 97+% of CPU cycles were due to virus scan. One
conjecture is that when Win10 thinks it a new machine it scans the whole
file system, a lengthy process. Second conjecture, Win10 had just downloaded
that single run program the searches for new viruses (MRT?). Conjecture
three, Windows Defender had not run in the hours or days my PC was just
sitting there on the floor, powered down and needed to catch up.

Today my Win10 desktop CPU is ~4% even through I access it by Remote Desktop
from a separate PC.

(my) Conclusion, I can only guess what it happening on your machine, but my
experience is that the problem will go away sometime.

If your experience happened suddenly and still so after reboot, you could
study your router log for more information.

Conclusion #2, Microsoft does not consider high CPU % any kind of a big
deal, unless it goes on for such a long time that it is annoying.

Recommendation #1: If you need a lot of available CPU cycles always on, get
another PC. My network is 1 Win10Pro desktop, 1 Win10Pro notebook and 1
WinXP netbook, this email machine. Linux works too.

Recommendation #2: use more SSDs

Recommendation #3: find processes and services that consume a lot of CPU
power and turn them off. But that might not protect you from Vladimir Putin

"Mayayana" wrote

| Suddenly I get a message indicating 97% CPU usage. After rebooting
| the same thing happens.
| Peter
| https://postimg.org/image/a0cmnyb1d/

If you don't know what that gear icon is, try
Process Explorer from Sysinternals. It's better
than Task Manager.

Process Explorer is a great program on any version of Windows, 32 or 64
bit. But it gives more information than useful and that information is
mostly valuable to a programmer. For a management problem, Win10 Resource
Monitor is better.

On Wed, 25 Jan 2017 01:03:34 -0800, "Norm X"
wrote:

"Mayayana" wrote

| Suddenly I get a message indicating 97% CPU usage. After rebooting
| the same thing happens.
| Peter
| https://postimg.org/image/a0cmnyb1d/

If you don't know what that gear icon is, try
Process Explorer from Sysinternals. It's better
than Task Manager.

Process Explorer is a great program on any version of Windows, 32 or 64
bit. But it gives more information than useful and that information is
mostly valuable to a programmer. For a management problem, Win10 Resource
Monitor is better.


This keeps appearing:
https://postimg.org/image/rpcoy502h/

and the following seems involved

C:\AppCache\x86\svchost.exe -a cryptonight

If this is a virus, how is it removed?

On Wed, 25 Jan 2017 15:31:05 -0700, Ken1943 wrote:

On Thu, 26 Jan 2017 08:52:22 +1100, Peter Jason wrote:

On Wed, 25 Jan 2017 01:03:34 -0800, "Norm X"
wrote:

"Mayayana" wrote

| Suddenly I get a message indicating 97% CPU usage. After rebooting
| the same thing happens.
| Peter
| https://postimg.org/image/a0cmnyb1d/

If you don't know what that gear icon is, try
Process Explorer from Sysinternals. It's better
than Task Manager.

Process Explorer is a great program on any version of Windows, 32 or 64
bit. But it gives more information than useful and that information is
mostly valuable to a programmer. For a management problem, Win10 Resource
Monitor is better.


This keeps appearing:
https://postimg.org/image/rpcoy502h/

and the following seems involved

C:\AppCache\x86\svchost.exe -a cryptonight

If this is a virus, how is it removed?

Google cryptonight and it has something to do with bitcoins.

If it is something you tried, you deserve that crap for your actions.


Ken1943

I can't find any care and compassion in your reply.

Peter Jason wrote:

C:\AppCache\x86\svchost.exe -a cryptonight
If this is a virus, how is it removed?

Bitcoin miner?

Peter Jason wrote:
On Wed, 25 Jan 2017 15:31:05 -0700, Ken1943 wrote:

On Thu, 26 Jan 2017 08:52:22 +1100, Peter Jason wrote:

On Wed, 25 Jan 2017 01:03:34 -0800, "Norm X"
wrote:

"Mayayana" wrote
| Suddenly I get a message indicating 97% CPU usage. After rebooting
| the same thing happens.
| Peter
| https://postimg.org/image/a0cmnyb1d/

If you don't know what that gear icon is, try
Process Explorer from Sysinternals. It's better
than Task Manager.
Process Explorer is a great program on any version of Windows, 32 or 64
bit. But it gives more information than useful and that information is
mostly valuable to a programmer. For a management problem, Win10 Resource
Monitor is better.

This keeps appearing:
https://postimg.org/image/rpcoy502h/

and the following seems involved

C:\AppCache\x86\svchost.exe -a cryptonight

If this is a virus, how is it removed?
Google cryptonight and it has something to do with bitcoins.

If it is something you tried, you deserve that crap for your actions.


Ken1943

I can't find any care and compassion in your reply.


https://en.wikipedia.org/wiki/CryptoNote

"CryptoNight is a proof-of-work algorithm that mixes
graphics processing unit (GPU) and central processing unit
(CPU) mining to create a system resistant to both
application-specific integrated circuits (ASICs) and
fast memory-on-chip devices. This is designed to create
a more uniform distribution of coins through the currency's
life. However, there are some questions about its
susceptibility to botnets --- "

Maybe you are a member now, of that botnet.

The above article has a list of crypto-currencies that
use such a method. The thing is not Bitcoin. Bitcoin being
dominated by Chinese investors running ASIC boxes. People
doing Bitcoin with CPU or GPU, don't stand a chance of
earning coins. (However, if you own a botnet, and put a
bitcoin miner on each machine, you're going to be in the
same league as one of the ASIC miners.) As the 300W ASICs
are more capable (the ASIC contained many many dedicated
circuits working out SHA256).

As for the chance of "picking up something", scanning with
virustotal.com is no protection at all against new malwares
or delivery vehicles. The best advice is to try to avoid
dodgy sources for content of any sort.

If you didn't put that there on purpose, that could
just as easily be ransomware. For which you *pay* in
Bitcoins. So in some sense, if you didn't put that there
on purpose, you should feel a sense of relief. Finding ransomware
would be bad news indeed. Now you have to figure out what
software put that there, and stop it from starting
on the next boot.

Paul

On Thu, 26 Jan 2017 15:09:07 +1100, Peter Jason wrote in message:
:

On Wed, 25 Jan 2017 15:31:05 -0700, Ken1943 wrote in message:
:

On Thu, 26 Jan 2017 08:52:22 +1100, Peter Jason wrote in message:
:

This keeps appearing:
https://postimg.org/image/rpcoy502h/

and the following seems involved
C:\AppCache\x86\svchost.exe -a cryptonight
If this is a virus, how is it removed?


Google cryptonight and it has something to do with bitcoins.
If it is something you tried, you deserve that crap for your actions.


I can't find any care and compassion in your reply.

Miserable comforters are you all!
--Job 16:2 NKJV

In article
Peter Jason wrote:

On Wed, 25 Jan 2017 15:31:05 -0700, Ken1943 wrote:


Google cryptonight and it has something to do with bitcoins.

If it is something you tried, you deserve that crap for your actions.


Ken1943

I can't find any care and compassion in your reply.


Kenny boy is an old codger whose mental well-being is elusive at
times. You'll have to ignore his contemptuous snarling. The white
coats aren't far from his door.

Peter Jason wrote:
C:\AppCache\x86\svchost.exe -a cryptonight


Whoa! "C:\AppCache\x86\svchost.exe"? That's not where svchost.exe should
be. You're infected.

--
Take care,

Jonathan
-------------------
LITTLE WORKS STUDIO
http://www.LittleWorksStudio.com

On Thu, 26 Jan 2017 18:37:24 -0500, "Jonathan N. Little"
wrote:

Peter Jason wrote:
C:\AppCache\x86\svchost.exe -a cryptonight


Whoa! "C:\AppCache\x86\svchost.exe"? That's not where svchost.exe should
be. You're infected.


Would a System Restore fix it?

On Fri, 27 Jan 2017 11:50:22 +1100, Peter Jason wrote:

On Thu, 26 Jan 2017 18:37:24 -0500, "Jonathan N. Little"
wrote:

Peter Jason wrote:
C:\AppCache\x86\svchost.exe -a cryptonight


Whoa! "C:\AppCache\x86\svchost.exe"? That's not where svchost.exe should
be. You're infected.


Would a System Restore fix it?

Do you have a method for comparing the 'infected' file in your current
system against a collection of backups to see when "svchost.exe" might
have changed in size and hash value?

I use AOMEI Backupper for my backups. This program includes a utility
which can mount an image to a virtual partition for subsequent
browsing with a file manager.

The image file that I am viewing right now is a backup of Windows 10
and is dated 2016-12-14. The virtual partition is listed in my file
manager as drive K:\.

Looking at this backup with Agent Ransack for files named
"svchost.exe" (without quotes) I see four instances dated 2016-07-16
and one dated 2016-03-10. These compares with the files installed on
my PC as of today, comparing file size and hash value.

Checking three other backups all showed the same results for
"svchost.exe". So I know that svchost.exe hasn't changed in the past
six weeks (and I would guess not since I last installed Windows 10).

Are you able to initiate a similar scheme to check your PC?