CPU Usage at 100% and Processes at 28 running

[Guest]

I am trying to find out what processes actually need to be running on Windows
XP. I don't want to stop the processes and then cause more problems with my
computer.
I do know that taskmgr.exe can not be removed.
Does any one know what exact programs need to run?
I have nothing downloaded on my Windows except for my wireless network and
Microsoft Office. Besides being able to go to the internet, I really don't
need anything else.
Any help any one can give would be great. Thank you.

 

[Ken Blake, MVP]

I am trying to find out what processes actually need to be running on
Windows XP.

That depends entirely on you and how you use your computer. The answer is
different for each of us.

If you some you're not sure about, post their names here.

If you have 28 running, that's a much lower number than most of us have.

I don't want to stop the processes and then cause more
problems with my computer.

Right. Stopping processes from running is not generally a good thing to do,
except ion very specific circumstances. It's highly unlikiely that you
should stop any of the them.

I do know that taskmgr.exe can not be removed.
Does any one know what exact programs need to run?
I have nothing downloaded on my Windows except for my wireless
network and Microsoft Office.

You have those "installed," not downloaded. Sorry for correcting your
English, but if you get technical terms wrong, people are likely to
misunderstand what you're saying.

 

[Guest]

Thank you for the correction. I want to make sure I am stating things right
in order to get the best replies.

Here are a few processes that are running and not sure what they are. Most
say Network Service and System. The rest has user name as Michelle.

ycommon.exe
CAVRid.exe
iSafe.exe
mrtstub.exe
ctfmon.exe
MRT.exe
svchost.exe

These are the processes that are using most of the mem usage. I just know
that as of today I went to 28 processes running and before I had only 24.

Any help would be great. I hope my English is better.

Michele

 

[Wesley Vogel]

ycommon.exe is a process belonging to the Yahoo Browser, Common Module for
Yahoo! Browser and Messenger.

CAVRID.exe is a process associated with eTrust EZ_Antivirus from Computer
Associates.

isafe.exe is a part of Computer Associates eTrust AntiVirus which keeps your
Internet security product up to date.

mrtstub.exe is a process belonging to an unclassified malware which can
download other malicious processes and cause unwanted behavior on your
computer. Should be terminated immediately.

ctfmon.exe....

ctfmon.exe = CTF Loader. Part of Microsoft Office. It activates
the Alternative User Input Text Input Processor (TIP) and the Microsoft
Office XP Language Bar.

When you run a Microsoft Office XP program, the file Ctfmon.exe (Ctfmon)
runs in the background, even after you quit all Office programs.

Ctfmon.exe monitors the active windows and provides text input service
support for speech recognition, handwriting recognition, keyboard,
translation, and other alternative user input technologies.

Can I Remove the Ctfmon.exe File?
http://support.microsoft.com/?kbid=282599#E0LB0ACAAA

Frequently asked questions about Ctfmon.exe
http://support.microsoft.com/kb/282599

HOW TO: Turn Off the Speech Recognition and Handwriting Recognition Features
in Office 2003
http://support.microsoft.com/kb/823586

HOW TO: Turn Off the Speech Recognition and Handwriting Recognition Features
in Office XP
http://support.microsoft.com/kb/326526

ctfmon.exe: This is your "Language Bar." Don't know what it is? I bet you do
not need it. Head to Control Panel -> Regional and Language Options ->
Languages TAB -> Details BUTTON -> Language Bar BUTTON (under
"Preferences") -> select the "Turn off advanced text services" check box.
This little detail will save you between 1.5 MB and 4 MB of RAM. If you are
using a "non-US" version, you may be required to install the English
localization to remove this "feature."
http://web.archive.org/web/20041125021602/www.blackviper.com/WinXP/strangeservice.htm

MRT.exe...

MRT.exe is normally the Microsoft Malicious Software Removal Tool. But it
should only run once and quit. Right after or during a Windows Update. The
Microsoft Malicious Software Removal Tool should NOT run all of the time.

svchost.exe...
A description of Svchost.exe in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;314056

Of course there can be malware named svchost.exe.

www.google.com is where you find the above info. ;-)

You have one baddie and one suspicious process...

Update your antivirus software and run a full system scan.

Update whatever anti-spyware applications that you have and run a full
system scan with each one.

You might want to start in Safe Mode to run your antivirus and anti-spyware
software.

Running a full system antivirus scan or anti-spyware scan in Safe Mode can
be a good idea. Some viruses and other malware like to conceal themselves
in areas Windows protects while using them. Safe mode will prevent those
applications access and therefore unprotect the viruses or other malware
allowing for easier removal.

How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Ken Blake, MVP]

Thank you for the correction. I want to make sure I am stating
things right in order to get the best replies.

Here are a few processes that are running and not sure what they are.
Most say Network Service and System. The rest has user name as
Michelle.

ycommon.exe

Part of the yahoo browser

CAVRid.exe

This is part of your eTrust AZ_Antivirus, and is a good example of what I
meant when I said " The answer is different for each of us." Because I run a
different anti-virus, I don't have that one here.

iSafe.exe

Also part of eTrust

mrtstub.exe

This is part of the Microsoft Malicious Software Removal Tool.

ctfmon.exe

Part of Microsoft Office

MRT.exe

This is also part of the Microsoft Malicious Software Removal Tool.

svchost.exe

Part of Windows.

These are the processes that are using most of the mem usage.

None of these are problems.

By the way, I didn't know all of these names offhand, but found them with
google searches. You can always do the same yourself.

I just
know that as of today I went to 28 processes running and before I had
only 24.

Both numbers are very low, as I said. Besides the number of processes you
have running isn't significant. Don't worry about it.

 

[Ron Martell]

I am trying to find out what processes actually need to be running on Windows
XP. I don't want to stop the processes and then cause more problems with my
computer.
I do know that taskmgr.exe can not be removed.
Does any one know what exact programs need to run?
I have nothing downloaded on my Windows except for my wireless network and
Microsoft Office. Besides being able to go to the internet, I really don't
need anything else.
Any help any one can give would be great. Thank you.

That is highly variable, as many of the processes are device specific
and only appear on computers that have that specific make and model of
hardware device installed.

At the moment on this computer, with 7 applications active on the
taskbar plus antivirus, antispyware etc. my Task Manager shows 72
processes. CPU usage on my machine is always 100% because I have a
shared computing application (Folding@home) installed which utilizes
any spare CPU cycles. If it were not for this my system would be
showing CPU usage in the 10 to 12% range. I do not consider any of
the running processes to be unwanted or dispensable.

To see which process is using the most CPU time go to the Processes
tab in Task Manager and click twice on the CPU column header. The
processes using the most CPU time will be at the top of the list.
Disregard the "system idle process" as that is just a placeholder to
account for the time that the CPU has nothing to do.

To control the services that run at Startup you need to run
SERVICES.MSC and reconfigure the services that you *know* (for an
absolute certainty) can be safely disabled. The checklist at
http://www.dead-eye.net/WinXP Services.htm will help you to identify
what your startup services are.

As for not having anything more installed on your Windows XP, if you
are going to *safely* access the Internet then you do need more,
especially antivirus and antispyware.

Good luck

Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2006)
On-Line Help Computer Service
http://onlinehelp.bc.ca

"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."

 

[Wesley Vogel]

Hi Ken,

<quote>
Known issues
* Typically, when you run the Windows Malicious Software Removal Tool, the
tool creates a randomly named temporary directory in the root drive of your
computer. This directory will contain several files and includes the
Mrtstub.exe file. Most of the time, this folder will be automatically
deleted after the tool has finished running or after the next restart.
Sometimes, this folder may not be deleted automatically. In these cases,
this folder can be deleted manually and has no adverse effect on the
computer.

Q35: I found the Mrtstub.exe file in a randomly named directory on my
computer. Is the Mrtstub.exe file a legitimate component of the tool?

A35: The tool does use a file that is named Mrtstub.exe for certain
operations. If you verify that the file is signed by Microsoft, the file is
a legitimate component of the tool.
<quote>
from...
The Microsoft Windows Malicious Software Removal Tool helps remove specific,
prevalent malicious software from computers that are running Windows Server
2003, Windows XP, or Windows 2000
http://support.microsoft.com/kb/890830

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Wesley Vogel]

Ah, it's the second Tuesday of the month, so Mrtstub.exe and Mrt.exe running
would not be abnormal, if one were to get that update.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Jim]

Part of the yahoo browser




This is part of your eTrust AZ_Antivirus, and is a good example of what I
meant when I said " The answer is different for each of us." Because I run
a different anti-virus, I don't have that one here.





Also part of eTrust




This is part of the Microsoft Malicious Software Removal Tool.




Part of Microsoft Office




This is also part of the Microsoft Malicious Software Removal Tool.




Part of Windows.




None of these are problems.

By the way, I didn't know all of these names offhand, but found them with
google searches. You can always do the same yourself.




Both numbers are very low, as I said. Besides the number of processes you
have running isn't significant. Don't worry about it.

Because, no matter how many there are, only one or two are executing at a
time (depending on the type of cpu that your system has). Furthermore, only
those processes which have real work to do get to run. The rest are just
hanging around waiting for some action.
Jim