Uzycie CPU 100%, svchost.exe

Dla specjalistów Bezpieczeństwo
#1

Witam, mam ostatnio problem z laptopem. Mianowicie po uruchomieniu go, zużycie CPU wzrasta momentalnie do

#2

Wyłącz aktualizacje automatyczne(Windows Update) -sprawdzaj co tydzień,zobacz  po ponownym uruchomieniu systemu

#3

Nie pomogło. Miałem już wcześniej wyłączone

#4

Odinstaluj McAfee Security Scan Plus.

Wklej do systemowego notatnika i zapisz jako plik tekstowy o nazwie fixlist :

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1546775624-3434668011-179793275-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=pl&pid=NIS&pvid=20.4.0.40
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=pl&pid=NIS&pvid=20.4.0.40
HKU\S-1-5-21-1546775624-3434668011-179793275-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://us.yhs4.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_ir_15_26&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dpl%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutBtDyCzzzy0D0C0A0D0AyDtBzz0D0EyEtN0D0Tzu0StCtByCzytN1L2XzutAtFtCtDtFtCtDtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyByC0CtC0B0EyD0FtGtA0B0BtCtG0E0F0BtCtGtC0B0F0FtG0Azz0BzyyByE0C0EtAtA0AtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0CyB0CzzzztAtCtGyE0F0E0CtGyEyC0C0FtGzz0Azz0FtGyCyC0CyD0C0BzzzyyEtA0DtD2QtN0A0LzutBtN1B2Z1V1T1S1NzuzztDtD%26cr%3D227364924%26a%3Dwncy_ir_15_26%26os%3DWindows 7 Ultimate
HKU\S-1-5-21-1546775624-3434668011-179793275-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=pl&pid=NIS&pvid=20.4.0.40
HKU\S-1-5-21-1546775624-3434668011-179793275-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.22apple.com/?utm_source=b&ch=sof&uid=ST1000LM024XHN-M101MBB_S2U5J9FCA56768&reg=1359133195
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://us.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_ir_15_26&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dpl%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutBtDyCzzzy0D0C0A0D0AyDtBzz0D0EyEtN0D0Tzu0StCtByCzytN1L2XzutAtFtCtDtFtCtDtFtCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyBtC0CtCyD0CtAyEtGyB0FtCtAtG0BzztDyDtGtDtDyC0EtGyCtB0D0AyD0B0Fzz0D0AyEyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0CyB0CzzzztAtCtGyE0F0E0CtGyEyC0C0FtGzz0Azz0FtGyCyC0CyD0C0BzzzyyEtA0DtD2QtN0A0LzutBtN1B2Z1V1T1S1NzuyBzyyD%26cr%3D1980253189%26a%3Dwncy_ir_15_26%26os%3DWindows 7 Ultimate&p={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://us.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_ir_15_26&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dpl%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutBtDyCzzzy0D0C0A0D0AyDtBzz0D0EyEtN0D0Tzu0StCtByCzytN1L2XzutAtFtCtDtFtCtDtFtCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyBtC0CtCyD0CtAyEtGyB0FtCtAtG0BzztDyDtGtDtDyC0EtGyCtB0D0AyD0B0Fzz0D0AyEyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0CyB0CzzzztAtCtGyE0F0E0CtGyEyC0C0FtGzz0Azz0FtGyCyC0CyD0C0BzzzyyEtA0DtD2QtN0A0LzutBtN1B2Z1V1T1S1NzuyBzyyD%26cr%3D1980253189%26a%3Dwncy_ir_15_26%26os%3DWindows 7 Ultimate&p={searchTerms}
SearchScopes: HKLM -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = http://us.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_ir_15_26&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dpl%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutBtDyCzzzy0D0C0A0D0AyDtBzz0D0EyEtN0D0Tzu0StCtByCzytN1L2XzutAtFtCtDtFtCtDtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyByC0CtC0B0EyD0FtGtA0B0BtCtG0E0F0BtCtGtC0B0F0FtG0Azz0BzyyByE0C0EtAtA0AtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0CyB0CzzzztAtCtGyE0F0E0CtGyEyC0C0FtGzz0Azz0FtGyCyC0CyD0C0BzzzyyEtA0DtD2QtN0A0LzutBtN1B2Z1V1T1S1NzuzztDtD%26cr%3D227364924%26a%3Dwncy_ir_15_26%26os%3DWindows 7 Ultimate&p={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1546775624-3434668011-179793275-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://us.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_ir_15_26&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dpl%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutBtDyCzzzy0D0C0A0D0AyDtBzz0D0EyEtN0D0Tzu0StCtByCzytN1L2XzutAtFtCtDtFtCtDtFtCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyBtC0CtCyD0CtAyEtGyB0FtCtAtG0BzztDyDtGtDtDyC0EtGyCtB0D0AyD0B0Fzz0D0AyEyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0CyB0CzzzztAtCtGyE0F0E0CtGyEyC0C0FtGzz0Azz0FtGyCyC0CyD0C0BzzzyyEtA0DtD2QtN0A0LzutBtN1B2Z1V1T1S1NzuyBzyyD%26cr%3D1980253189%26a%3Dwncy_ir_15_26%26os%3DWindows 7 Ultimate&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1546775624-3434668011-179793275-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://us.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_ir_15_26&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dpl%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutBtDyCzzzy0D0C0A0D0AyDtBzz0D0EyEtN0D0Tzu0StCtByCzytN1L2XzutAtFtCtDtFtCtDtFtCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyBtC0CtCyD0CtAyEtGyB0FtCtAtG0BzztDyDtGtDtDyC0EtGyCtB0D0AyD0B0Fzz0D0AyEyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0CyB0CzzzztAtCtGyE0F0E0CtGyEyC0C0FtGzz0Azz0FtGyCyC0CyD0C0BzzzyyEtA0DtD2QtN0A0LzutBtN1B2Z1V1T1S1NzuyBzyyD%26cr%3D1980253189%26a%3Dwncy_ir_15_26%26os%3DWindows 7 Ultimate&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1546775624-3434668011-179793275-1000 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = http://us.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_ir_15_26&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dpl%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutBtDyCzzzy0D0C0A0D0AyDtBzz0D0EyEtN0D0Tzu0StCtByCzytN1L2XzutAtFtCtDtFtCtDtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyByC0CtC0B0EyD0FtGtA0B0BtCtG0E0F0BtCtGtC0B0F0FtG0Azz0BzyyByE0C0EtAtA0AtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0CyB0CzzzztAtCtGyE0F0E0CtGyEyC0C0FtGzz0Azz0FtGyCyC0CyD0C0BzzzyyEtA0DtD2QtN0A0LzutBtN1B2Z1V1T1S1NzuzztDtD%26cr%3D227364924%26a%3Dwncy_ir_15_26%26os%3DWindows 7 Ultimate&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1546775624-3434668011-179793275-1001 -> DefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://mystart.incredibar.com/mb201/?search={searchTerms}&loc=IB_DS&a=6Oz1nv4ppx&i=26
SearchScopes: HKU\S-1-5-21-1546775624-3434668011-179793275-1001 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.yd.delta-search.com/?q={searchTerms}&affID=119535&tt=030213_yd&babsrc=SP_ss&mntrId=e07d8de400000000000020689dcab07c
SearchScopes: HKU\S-1-5-21-1546775624-3434668011-179793275-1001 -> {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://mystart.incredibar.com/mb201/?search={searchTerms}&loc=IB_DS&a=6Oz1nv4ppx&i=26
Toolbar: HKU\S-1-5-21-1546775624-3434668011-179793275-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKU\S-1-5-21-1546775624-3434668011-179793275-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
S2 Update Mega Browse; "C:\Program Files (x86)\Mega Browse\updateMegaBrowse.exe" [X] <==== ATTENTION
S2 Util Mega Browse; "C:\Program Files (x86)\Mega Browse\bin\utilMegaBrowse.exe" [X] <==== ATTENTION
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S1 SMR430; \SystemRoot\System32\drivers\SMR430.SYS [X]
2015-07-24 15:33 - 2015-07-24 15:33 - 00000000 ____ D C:\Users\Lenovo\Downloads\FRST-OlderVersion
RemoveDirectory: C:\Qoobox
2015-07-24 15:14 - 2013-03-29 23:08 - 00000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-07-24 15:14 - 2013-03-29 22:35 - 00000000 ____ D C:\ProgramData\McAfee Security Scan
2015-07-24 15:14 - 2013-03-29 22:35 - 00000000 ____ D C:\Program Files (x86)\McAfee Security Scan
2015-07-24 15:14 - 2013-01-25 19:00 - 00000000 ____ D C:\ProgramData\Norton
2015-07-24 09:07 - 2014-05-07 08:04 - 00000000 ____ D C:\sh4ldr
2015-07-24 09:18 - 2014-04-11 11:01 - 00000000 ____ D C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-07-24 07:55 - 2014-04-11 11:01 - 00000000 ____ D C:\ProgramData\Spybot - Search & Destroy
2015-07-03 12:53 - 2015-05-22 14:58 - 00000157 _____ C:\error.txt
Task: {2976F3EB-6904-4E05-A14C-3EA21958AB03} - System32\Tasks\{C5FD9013-40FB-4663-9894-5D1EBB55C430} => pcalua.exe -a C:\Users\Lenovo\Downloads\0mch07ww.exe -d C:\Users\Lenovo\Downloads
Task: {2FAB6AF3-7C7F-4D34-ADD5-7125B99F64C3} - System32\Tasks\{4013EFC0-31DF-4E57-AE18-DC02A4C30B10} => pcalua.exe -a C:\Users\Lenovo\Downloads\Norton_Removal_Tool.exe -d C:\Users\Lenovo\Downloads
Task: {38B59C8C-0048-417F-A0B7-77D64A998A74} - System32\Tasks\{79769B3A-E044-4007-8A98-C18C72FA2C80} => pcalua.exe -a C:\Users\Lenovo\Downloads\multibit-0.5.18-windows-setup.exe -d C:\Users\Lenovo\Downloads
Task: {8AECB41E-D2DF-4AF6-A815-0EA9F90A8B0C} - System32\Tasks\{9C91A064-B57B-4908-BEEA-806C5D4DA050} => pcalua.exe -a C:\Users\Lenovo\Downloads\0mch07ww(1).exe -d C:\Users\Lenovo\Downloads
Task: {A1E84CE1-B36F-4C7E-85B3-3D8CB1F00F81} - System32\Tasks\{A70A8D05-541E-49A5-9D40-BAD98E37F2C6} => pcalua.exe -a D:\Setup.exe -d D:\
Task: {B8EA06FF-098D-4860-93D2-0F0C88CDA1B3} - System32\Tasks\Chromium => C:\Users\Lenovo\AppData\Local\Chromium\Application\45.0.2420.0\Installer\uninstall.exe [2015-06-23] ()
Task: {DCDED3E4-879D-4ED3-9846-1BB67D1A31D5} - System32\Tasks\{8958076A-D8CE-4FC7-9834-55D8D2CCAC85} => pcalua.exe -a "D:\Windows 7\12. Wifi\Setup.exe" -d "D:\Windows 7\12. Wifi"
Task: {E332D69F-B104-4021-ADD9-41A903D2C60E} - System32\Tasks\{237BC9B5-9AC3-42E1-857E-6A7411AF19CB} => pcalua.exe -a "C:\Program Files (x86)\KONAMI\Pro Evolution Soccer 6\dat\kitserver\setup.exe" -d "C:\Program Files (x86)\KONAMI\Pro Evolution Soccer 6\dat\kitserver"
Task: {E4F41974-0DF4-4CC7-9DAE-53E39EB9697D} - System32\Tasks\{9CA9F6A3-3D35-479A-BF49-F32AA1F243C8} => pcalua.exe -a "D:\Windows 7\11. Bluetooth\Setup.exe" -d "D:\Windows 7\11. Bluetooth"
Task: C:\Windows\Tasks\Chromium.job => C:\Users\Lenovo\AppData\Local\Chromium\APPLIC~1\450242~1.0\INSTAL~1\UNINST~1.EXE
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SMR430 => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SMR430.SYS => ""="Driver"
EmptyTemp:

Uruchom FRST i kliknij Fix. Pokaż raport z usuwania Fixlog.

Kliknij Scan i pokaż nowy raport z FRST bez Addition i Shortcut.

#5

Zrobiłem tak jak w instrukcji.

Fixlog: http://wklej.org/id/1762727/

Natomiast Scan FRST zatrzymuje mi sie na Firefox: Extensions, zamula komputer, czekałem z pół godziny, ale nie skanowało dalej.

Wklejam to co się udało utworzyć do tego momentu:

FRST: http://wklej.org/id/1762731/

#6

 wyłącz-http://www.benchmark…trona/9301.html

 

wyłącz-http://www.benchmark…trona/9306.html

 

wyłącz-http://www.benchmark.pl/testy_i_recenzje/jak-przyspieszyc-dysk-ssd-w-windows-7-3230/strona/10921.html

#7

Zrobiłem. Komputer trochę przyspieszył, natomiast ciągle jest problem z tym svchost.exe

#8

Za pomocą Process Explorer sprawdź jakie usługi (Services) korzystają z tego procesu:

http://www.online-tech-tips.com/computer-tips/how-to-fix-svchostexe-errors-and-problems-with-high-cpu-usage/

http://www.howtogeek.com/howto/windows-vista/what-is-svchostexe-and-why-is-it-running/

Spróbuj odczytać szczegółowe dane:

Kliknij prawym na proces obciążający CPU -> Properties -> Threads -> CPU

#9

Screen z Process Explorer:

http://zapodaj.net/c0ad5ad1d5ab9.png.html

 

#10

fontcache.exe obciąża  procesor-http://www.fixitpc.pl/topic/6805-presentationfontcacheexe-wysokie-uzycie-cpu/

#11

pomogło. Dziękuję