High CPU usage caused by cmd.exe

[Guest]

A process 'cmd.exe' appears in the task manager after a few minutes i start
up my computer and uses the most cpu usage which caused my cpu usage to 100%
and made my computer very lag...

So, everytime i start up my computer, i will wait for it to appear in the
task manager and end it before i open any other applications and im getting
bored of doing so.

And im suspicious the 'cmd.exe' which uses a lot of cpu usage isn't the
original 'cmd.exe' because last time i opened task manager and the 'cmd.exe'
is in the 'processes' tab with a lot of cpu usage.. then, before i end it, i
went to start > run > cmd, then another process called 'cmd.exe' appeared and
did not use any cpu usage.. means totally have 2 'cmd.exe' processes in my
task manager which one of them used the most cpu usage and the other one did
not use any.

So..i hope someone can help me with the problem.. thanks.

 

[Jon]

A process 'cmd.exe' appears in the task manager after a few minutes i
start
up my computer and uses the most cpu usage which caused my cpu usage to
100%
and made my computer very lag...

So, everytime i start up my computer, i will wait for it to appear in the
task manager and end it before i open any other applications and im
getting
bored of doing so.

And im suspicious the 'cmd.exe' which uses a lot of cpu usage isn't the
original 'cmd.exe' because last time i opened task manager and the
'cmd.exe'
is in the 'processes' tab with a lot of cpu usage.. then, before i end it,
i
went to start > run > cmd, then another process called 'cmd.exe' appeared
and
did not use any cpu usage.. means totally have 2 'cmd.exe' processes in my
task manager which one of them used the most cpu usage and the other one
did
not use any.

So..i hope someone can help me with the problem.. thanks.

Any links to (buggy) batch files in your startup folders?

Start > Run > msconfig > Startup

You will always get an extra instance of cmd.exe in Task Manager doing what
you describe. That is normal.

 

[Guest]

Any links to (buggy) batch files in your startup folders?

Start > Run > msconfig > Startup

You will always get an extra instance of cmd.exe in Task Manager doing what
you describe. That is normal.

In the startup tab, there are
-svhost32
-realsched
-raid_tool
-rundll32
-CMGrdian
-avgcc
-ypager
-Skype
-rund1132
-Microsoft Office

well my task manager did not show any 'cmd.exe' process which uses a lot of
cpu usage before this..

 

[Ayush]

Replied to [Carbonated]s message :
-----------------------------------------------------------

In the startup tab, there are

-rundll32

Uncheck this

-rund1132

If this is really rund1132 then it can be a virus. Uncheck it immediately.

 

[Jon]

Latest reports suggest that it was "Carbonated"
<[email protected]> in message
who said something
like...

In the startup tab, there are
-svhost32
-realsched
-raid_tool
-rundll32
-CMGrdian
-avgcc
-ypager
-Skype
-rund1132
-Microsoft Office

If you've spelt those correctlly then 'svhost32' and 'rund1132' stick out
like a sore thumb as probably malware related.

So I would suggest some virus / malware scans.

 

[Guest]

Replied to [Carbonated]s message :
-----------------------------------------------------------

In the startup tab, there are

-rundll32

Uncheck this

-rund1132

If this is really rund1132 then it can be a virus. Uncheck it immediately.

Unchecked.. should i delete the file also?

 

[Guest]

some screenshots of cmd.exe causing cpu usage to 100%

i opened cmd.exe and there are 2 cmd.exe processes now..1 is using a lot of
cpu usage and the other one isnt..

 

[Jon]

It may well be worth recalling that "Carbonated"

some screenshots of cmd.exe causing cpu usage to 100%

i opened cmd.exe and there are 2 cmd.exe processes now..1 is using a lot
of
cpu usage and the other one isnt..

Once you've unchecked the 3 entries mentioned (as you appear to have done)

ie

svhost32
rund1132
rundll32 (this one may well be legitimate)

then reboot your system.

But you'll probably need to do a more thorough examination of your system,
for which it would be simplest to run a virus or malware scanner. There are
plenty of free ones available online, alongside the ones you appear to have
already. Let them clear up your system.

Don't delete 'rundll32.exe' though (although by all means uncheck it). It is
probably a legitimate Windows file, although the file it references (usually
a dll) may not be.

 

[Guest]

Once you've unchecked the 3 entries mentioned (as you appear to have done)

ie

svhost32
rund1132
rundll32 (this one may well be legitimate)

then reboot your system.

Do they related to the 'cmd.exe' process which caused 100% cpu usage?

 

[Jon]

I have it on good authority that "Carbonated"

Do they related to the 'cmd.exe' process which caused 100% cpu usage?

They could easily start a cmd.exe process (perhaps invisibly) yes, and then
themselves exit.

But there are countless other possibilities, (such as a Scheduled Task set
to run at boot time). So your best bet is to run a scan.

 

[Malke]

Do they related to the 'cmd.exe' process which caused 100% cpu usage?

As you've been told numerous times, they relate to the fact that your
computer is infected. You need to clean it up, not just uncheck entries
in Startup.

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with either Sysclean or Multi_AV, plus AVG Anti-Spyware
(formerly Ewido - http://www.ewido.net/en/). Do all prep/finishing work
and follow instructions to do all scans in Safe Mode.

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the link above (not here, please).

If the procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a professional
computer repair shop (not your local version of BigStoreUSA). Please be
aware that not all local shops are skilled at removing malware and even
if they are, your computer may be so infested that Windows will need to
be clean-installed. Have all your data backed up before you take the
machine into a shop.

Malke

 

[Guest]

i followed the instructions at
http://www.elephantboycomputers.com/page2.html#Removing_Malware

and run system scans and i think my computer is clean now because the
'cmd.exe' process does not show up anymore.. ^^

thanks a lot, Jon and Malke. =)

Cheers.

 

[Jon]

I have it on good authority that "Carbonated"

i followed the instructions at
http://www.elephantboycomputers.com/page2.html#Removing_Malware

and run system scans and i think my computer is clean now because the
'cmd.exe' process does not show up anymore.. ^^

thanks a lot, Jon and Malke. =)

Cheers.

Glad to hear that Carbonated. Sounds like you probably cleared up alot more
than just the 'cmd.exe' problem in the process.