100% cpu

6 Feb 2006 1:36 PM

Kev

CPU utilisation spikes to 100% for about 2 seconds every 30 seconds. This
starts immediately Windows is booting up (the mouse pointer sticking is the
most obvious symptom).

There is no obvious process using the cpu within Task Manager.

I've progressively killed evvery task and service that windows will permit
and the cpu spiking continues relentlessly.

The laptop has previously been configured previously with a full IBM s/w
stack (Websphere, MQSI, DB2 etc.). I've deinstalled all the s/w but could it
be that there is a background monitor runnig that is invisible to Windows?

I've got an uptodate Virus checker installed (Shield).

Any ideas how I find out what is using the cpu and then how to remove it?

6 Feb 2006 4:25 PM

David H. Lipman

Show quote Hide quote

From: "Kev" <K**@discussions.microsoft.com>

| CPU utilisation spikes to 100% for about 2 seconds every 30 seconds. This
| starts immediately Windows is booting up (the mouse pointer sticking is the
| most obvious symptom).
|
| There is no obvious process using the cpu within Task Manager.
|
| I've progressively killed evvery task and service that windows will permit
| and the cpu spiking continues relentlessly.
|
| The laptop has previously been configured previously with a full IBM s/w
| stack (Websphere, MQSI, DB2 etc.). I've deinstalled all the s/w but could it
| be that there is a background monitor runnig that is invisible to Windows?
|
| I've got an uptodate Virus checker installed (Shield).
|
| Any ideas how I find out what is using the cpu and then how to remove it?

Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

* * * Please report back your results * * *

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

20 Feb 2006 7:37 PM

Kev

Dave

Thanks for the suggestion. I tried Sophos and Kap in Normal and Safe modes.
No viruses found.Just a couple of corrupt files.

The spiking does not occur in Safe mode.

The rogue process is using Kernel cycles. The kernel spikes show up very
clearly in Task Manager when the virus scanners are using 100% normal cycles.
Asl owhen the 100% spike occurs and System Idle drops to zero cpu there is
nothin in Task Manager replacing. Whst ever is running sems to be invisible
to the basic Win Mgt monitors.

I still think it is some background monitor from when the full IBM sotware
stack was loaded. Are there any tools you aee aware of that look inside the
kernel.

K