Abnormal CPU Usage %

Hello-

I've 'graduated' to this forum after the generous Chaslang assisted in ridding me of my malware problems. Now that my system is clean again, I've developed a new issue which is that my CPU Usage now runs constantly over 50%, sometimes as high as 100% even with no applications open in the Task Manager. This extreme 'performance' is causing my fan remain in overdrive as well.

Please see this link which will provide an overview of my experience thus far and hopefully prepare one of you kind folks to direct me further. It describes a potential culprit with my computer thinking I have Windows XP Professional when, in fact, I have Media Center.

What additional details can I give? Thank you in advance for the assistance!

 

If ye do bring up the taskmanager, what is the highest cpu usage do you have, within the processes tab?

 

I had a very minimal machine with little ram. If it had an unfinished print job, even on a printer not currently selected as default it would churn and churn trying to resolve that print job.

But then again I come here for help not to give advise. So I doubt that is it.
There are some better task manager tools though.
Like: ProcessExplorerNt which allow you to click and google unknow processes.

 

Thanks for taking my case!

The highest usage in the Processes tab comes from:
1.) 'System Idle Process' - which hovers around 50.
2.) 'explorer.exe' - which is typically around 40.
3.) 'System' - which is between 9 and 14.

 

System Idle Process should be around 90% to 99% ... this basically is what is available.

Explorer is your issue.

Three things to try:

1. Boot into safe mode. Does your idle process go up? Does explorer still take up quite a bit?

2. Try running msconfig. Click START, then RUN, then type in: Msconfig (press enter).
2a. Click the radial button "Selective Startup".
2b. Uncheck "load startup items".
2c. Click OK, yes to reboot.
2d. Once you log in, ignore the msconfig box that will appear. Check taskmanager. Does it still show explorer taking alot of resources?

If not, then it is an app that is running in the background that is taking all those resources.

On the startup tab you can check each item you wish to startup on boot. I'd go down each item seperately to check which one is causing explorer to take all those resources. Rebooting between each checkbox. Yes, it is a pain, but it is something to try.

3. Download Process explorer:
http://www.majorgeeks.com/Process_Explorer_d4566.html

Use this to pin point what is taking those resources.

I'd probably do 1, then 3, then 2.

 

Thanks again.

I have checked the usage in Safe Mode and found that it happens there, too.

I downloaded Process Explorer, found 'explorer.exe' listed, right clicked, selected 'Properties' and found this on the 'Threads' tab:

wsil32.dll+0x1000 (found under 'Start Address' column) is fluctuating between 48-50 in the 'CPU' column.

Would seem to my amateur eye that this is the problem with my 'explorer.exe'. I did a search on the wsil32.dll as well as 'wsil32.dll+0x1000' and found a couple of interesting tidbits:

1.) Someone else is having the same issue and posted on a message board but has yet to receive a reply to this finding.
2.) Another site mentioned that this file is related to Sun Java - which I just installed during my Malware cleanup. This was almost exactly the same time the CPU Usage issue began.

Any thoughts on the relation to Sun Java and this issue?

 

No gaurantee, but this may be malware.


http://forum.aumha.org/viewtopic.ph...start=15&sid=1ebb6d084f459c91197938cfe0cb9e6b <---- this looks very similar to what you are dealing with.

Perhaps chaslang should reconfirm. I.E., repost in that thread you created.

Or, uninstall Java. Though, this can't be the answer.

 

I think it could be as well. I'll run this past my friend Chaslang.

The wsil32.dll file is in the 'C:\Windows\System32\AppCert' directory which contains just 4 files and was created the night I developed all my Malware issues - BEFORE I installed Sun Java.

Thanks for your help!!

 

Interesting. So, it happened before installing java. Yes, double check with chaslang.