• High Cpu Usage Windows 7

Hardly any CPU usage – sucks up all the RAM. TASK Manager shows that mscorsvw.exe is consuming most of the RAM: 5-7 GB of the 7.9 usable. I've checked for viruses with Security Essentials and Malware bites – non found. All updates have been completed. Aug 06, 2013  Hardly any CPU usage – sucks up all the RAM. TASK Manager shows that mscorsvw.exe is consuming most of the RAM: 5-7 GB of the 7.9 usable. I've checked for viruses with Security Essentials and Malware bites – non found. All updates have been completed.

High Cpu Usage Windows 7

Hi there,

Dec 30, 2014  mscorsvw.exe taking up a lot of CPU - posted in Am I infected? What do I do?: Oh no! After receiving a windows update that took forever to load and install, I.

This is my first post here, I hope it helps me
Okay I've mscorsvw.exe process which has been running all the times from past 2 days, and it eats 80-99% of my CPU making it slow.
I have taken following steps in vain:
1)Did executequeueditems on both 2.0.5077 and 4.0.30319 under Framework and Framework64 (of Microsoft.Net) which gave me :
All Compilation Target are uptodate
2)Installed Process Lasso and marked this process under 'Terminate Always(Disallowed Process)' but then it would try again and again to run while being terminated by Lasso. So I removed it from 'Terminate Always'.
3) A day back, Another file sbs_wminet_utils.dat was eating my CPU- nealry 100%, I searched about this file on internet and found 1 user telling that it was a new virus. As instructed there

http://social.technet.microsoft.com/Forums/pl/w7itproperf/thread/82e493bb-5e30-4886-a7fb-a70e7621acf3

, I deleted this file and it never ate my cpu again, but after doing this step again came 'mscorsvw.exe', which started eating my CPU.
4) Right now, When I checked security History under Norton Internet Security, I am really amazed to see 'sbs_wminet_utils.dat' again, It says at 6:30, this ate at least 100% of my CPU
5) All these problems started after I installed Call of Duty: Black Ops 2 (It was Skidrow crack(Trusted Provider)), I have uninstalled this game with its setup files now from my PC
6) Hence now summarizing :
This is by Norton Internet Security
Category: Performance Alert
Date & Time,Risk,Activity,Status,Recommended Action
17-12-2012 06:36,Info,High CPU usage by: mscorsvw.exe ,Detected,No Action Required
17-12-2012 06:30,Info,High CPU usage by: .NET Runtime Optimization Service ,Detected,No Action Required - (sbs_wminet_utils.dat)
16-12-2012 17:31,Info,High CPU usage by: .NET Runtime Optimization Service ,Detected,No Action Required - (sbs_wminet_utils.dat)
16-12-2012 16:59,Info,High CPU usage by: .NET Runtime Optimization Service ,Detected,No Action Required - (sbs_wminet_utils.dat)
16-12-2012 10:30,Info,High CPU usage by: mscorsvw.exe ,Detected,No Action Required
16-12-2012 10:25,Info,High CPU usage by: mscorsvw.exe ,Detected,No Action Required
16-12-2012 09:52,Info,High CPU usage by: .NET Runtime Optimization Service ,Detected,No Action Required - (sbs_wminet_utils.dat)
13-12-2012 14:04,Info,High Disk Read usage by: Windows Start-Up Application ,Detected,No Action Required
13-12-2012 10:49,Info,High Memory usage by: Call of Duty®: Black Ops II ,Detected,No Action Required
13-12-2012 08:38,Info,'High Disk Read, Disk Write usage by: Setup/Uninstall ',Detected,No Action Required
All these reasons are making me believe this a very very suspicious activity.
My System Config is:
Intel core i7-2630QM CPU
Memory 4GB, DirectX11
Windows 7 Home Premium x64
EDITED: 1) WOW! IT'll EAT CPU but not when TASK MANAGER IS ON.
2) Virustotal.com is giving 6/45 detection ration for sbs_wminet_utils.dat, SUPERAntiSpyware saying there: Trojan.Agent/Gen-MSFake[Gen]
Here is the detection page:

https://www.virustotal.com/file/9ca0a70e18766b9d80634329cf1bf249c4cc380003574208e778fb12552ae3eb/analysis/1355724296/

3) Used SuperAntiSpyware Professional Trial Version and scanned custom for : Memory, Registry, Startup Locations and Folders: system32 and syswow64. It detected and cleaned three threats, including sbs_wminet_utils.dat, SBS_MSCORSEC.dat and a tracking cookie.
4) After restarts, The CPU is not being eaten but it is working very very slow. I click something which will happen probably after 2 minutes.
5) After System Restore at a clean day and again using SUperAntiSpyware, everything is clean and working now.
Thanks.

Edited by Bineet, 17 December 2012 - 07:39 AM.

Today I came across a virtual machine (VM) with a CPU usage of 100%, logging onto the box Task Manager informed me the culprit was the ‘svchost.exe’ process.

Unfortunately if you look in Task Manager you will see many instances of svchost.exe therefore we have to drill down a little bit further to understand exactly what thread within this process is causing the high CPU usage. The VM is running Microsoft Server 2008 R2.

Troubleshooting Steps

Here we see Task Managers ‘Process’ view, svchost.exe is running at 97% CPU usage.

If we right-click on the process and select ‘Go to service(s)’, Task Manager will jump to the ‘Services’ tab and highlight the services with threads running under this instance of svchost.exe.

We now have a list of possible culprits however at this point we don’t know which of the various services are causing the high CPU usage. We could right-click on each service one at a time and stop them to see if this affects the CPU usage however this is a poor way of identifying the rogue service.

At this point I decided to use the great Sysinternals tool ‘Process Explorer’. I found the svchost.exe process with high CPU usage and opened the properties for it. I then selected the ‘Threads’ tab and found that the service ‘wuauserv’ was using 92.31% of the CPU for this svchost.exe process.

Clicking on the ‘Module’ button opens a new window providing details for the selected thread.

We now have what looks to be our culprit – I clicked on the ‘Suspend’ button to pause the thread, gave the system a few seconds then clicked to resume the thread again.

We can see the point where I suspended the thread, CPU usage drops dramatically – when I resume the thread CPU usage immediately returns to 100% utilisation.

At this point I could have terminated the thread, rebooted the server or taken some other form of remediation to resolve the high CPU usage.

The VM actually required a number of Windows updates to be installed so I went ahead with those – as this particular VM isn’t critical I decided I would reboot it after installing updates. Interestingly once the updates had installed (but before the reboot) the thread CPU usage dropped to essentially zero and CPU usage as a whole returned to less than 10%.

It looks like for whatever reason the ‘Windows Update Agent’ module went a bit crazy but then corrected itself once the updates had installed.

Sysinternals provide a great set of tools to help quickly troubleshoot issues like this – newer versions of Task Manager are adding more of the ‘Process Explorer’ functionality but I still turn to Mark Russinovich’s tools on a regular basis. There are many ways of troubleshooting issues like this and I have chosen to present once such method today – of course other tools are available as are command line options.