High CPU usage - task manager culprit

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

OllyN

Thread Starter
Joined
Jun 13, 2016
Messages
12
Im not sure im posting this in right section so if not please move it where it belongs :)

Recently I started noticing that fan on my laptop is working more than it should, even when im not doing anything and don't have any programs running. I think its been the case even before, I just never paid enough attention unfortunately.

At first I thought it might be updates since I have had problems downloading some so system kept trying, but each time I would bring task manager up to see what's going on, all I would see is high CPU usage, ranging from 80-100% but then dropping to normal - within seconds.
Didn't think much of it at first, since it would go down to normal cpu values so fast, but started happening more often and each time same - back down to normal within a split of a second.


I searched online and found out that it might be Trojan named Igfxupdate exe but solutions provided didn't help me, since I couldn't find the files to delete (they are supposed to be in Windows\System32 or Windows\SysWOW64). In the end, not even sure that's the case so hopefully - someone here can help?

At the moment I'm keeping task managed open to keep CPU usage down, the only "solution" I have at the moment. I ran AVG's scan, Malwarebytes scan - nothing came up.


I'm on HP Pavillion,
Win10, upgraded from 8 last year,
AMD A10-5745M APU
12GB DDR3L
AMD Radeon R7 M260



 

OllyN

Thread Starter
Joined
Jun 13, 2016
Messages
12
I just did Microsofts Windows Malicius Software Removal Tool scan - nothing found either.
 

flavallee

Frank
Trusted Advisor
Joined
May 12, 2002
Messages
81,590
What's the complete model number and exact product number(P/N) on your HP Pavilion laptop?

Is it being used on a hard flat surface so it can expel hot air properly and not overheat?
Have you examined the exhaust vents to make sure they're not clogged with dust?

----------------------------------------------------------------
 

OllyN

Thread Starter
Joined
Jun 13, 2016
Messages
12
HP Pavilion 17-f019no Notebook PC
P/N J8D29EA#UUW

I use laptop on desk, either glass or wood, i do care about it and i dont let it overheat, if im running something more demanding i use extra fan thingy under it. Exhaust vents are ok, I use canned air regularly and laptop is less than 2 yrs old.
I was thinking about all that but then.... task manager's cpu usage does come down as soon as i open it and fans stop working as much so... its seems to me more like software than hardware issue but its just my opinion and obviously my knowledge is very limited :D
 

flavallee

Frank
Trusted Advisor
Joined
May 12, 2002
Messages
81,590
HP Pavilion 17-f019no Notebook PC
P/N J8D29EA#UUW
HP Pavilion 17-f019n0 Notebook PC(J8D29EA)
Add and save this site in your browser's favorites/bookmarks list so you can quickly refer to it when needed.

It came with these specs:
Windows 8.1 64-bit
AMD A10-5745M APU 2.10 GHz quad-core processor
It has a decent benchmark score of 2774.
AMD Radeon R7 M260 graphics with 2 GB of dedicated video memory
It has a decent benchmark score of 680.
12 GB(8 GB + 4 GB) DDR3-1333 RAM

If you haven't already created or purchased a factory restore disc kit for that notebook, hopefully HP customer support can provide one for you.
If you have a major issue with that notebook, or if its hard drive dies and needs to be replaced, you'll be glad to have the disc kit.

The Windows 10 upgrade hasn't played well in some notebooks and has caused overheating and battery and other issues.
Whether that's part of your issue or not, it's impossible to tell from here.

I'm not a fan of AVG and prefer to use the built-in antivirus program(Windows Defender aka Microsoft Security Essentials) that comes in Windows 10.
What else have you scanned with besides AVG and Malwarebytes Anti-Malware?

--------------------------------------------------------------
 

OllyN

Thread Starter
Joined
Jun 13, 2016
Messages
12
To be honest I regret upgrading to win10 but too late to go back now.
But I don't really have any issues with it, haven't had overheating problems, or any of those kind of problems. Only this now, with noticing fan working more than it should and upon opening task manager always seeing cpu usage high.

Haven't done any other scans, don't know which ones I should try? I thought having antivirus and Malwarebytes was enough but I've been meaning to get rid of AVG for a while now, too many popup offers. You think I should uninstall it and activate Defender and do scan? Might have better results than AVG.
 

flavallee

Frank
Trusted Advisor
Joined
May 12, 2002
Messages
81,590
Personally, I would get rid of AVG and activate Windows Defender(aka Microsoft Security Essentials).
If you do get rid of AVG, make sure to use its removal tool afterwards so it can find and remove any leftover files and registry entries.

---------------------------------------------------------------

Do the following:

Go here, then click the "Download Now @ Bleeping Computer" button to download and save AdwCleaner.exe to your desktop.
If you receive a warning that this file is unsafe to download, ignore the warning.
Close all open windows first, then double-click AdwCleaner.exe to load its main window.
Click the "Scan" button, then allow the scanning process to finish.
Several seconds may pass before the scanning process starts, so be patient.
Click the "Logfile" button.
When the log appears, save it.
Return here to your thread, then copy-and-paste the ENTIRE log here.
After you submit the log, close AdwCleaner. If a warning appears, click "Yes".

Download and save and then install the free version of SUPERAntiSpyware 6.0.1220
Make sure to uncheck and decline to install any extras, such as toolbars and homepages, it may offer.
Make sure to uncheck and decline to use the "Pro" or "Trial" version, if it's offered.
After it's installed, don't do anything with it yet.
I'll give you complete instructions for setting it up and using it.

---------------------------------------------------------------
 

flavallee

Frank
Trusted Advisor
Joined
May 12, 2002
Messages
81,590
I'm leaving here in about an hour to go to physical therapy and then to work on a computer.
I'll check back here later today, then we can go from there. (y)

--------------------------------------------------------------
 

OllyN

Thread Starter
Joined
Jun 13, 2016
Messages
12
O no hurry, no worries, I really appreciate all your help! :)
AVG un-istalled, running defender scan now so... fingers crossed. Ill do other 2 as soon as defender is done :)
 

OllyN

Thread Starter
Joined
Jun 13, 2016
Messages
12
Defender found nothing.

Here's log from Adw


# AdwCleaner v5.033 - Logfile created 08/02/2016 at 19:33:26
# Updated 07/02/2016 by Xplode
# Database : 2016-02-07.2 [Server]
# Operating system : Windows 10 Home (x64)
# Username : Olivera - 018
# Running from : C:\Users\Olivera\Desktop\adwcleaner_5.033.exe
# Option : Scan
# Support : hxxp://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

Folder Found : C:\Users\Olivera\AppData\Local\SweetLabs App Platform
Folder Found : C:\WINDOWS\SysNative\Tasks\SweetLabs App Platform

***** [ Files ] *****

File Found : C:\Users\Olivera\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk

***** [ DLL ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

Task Found : SweetLabs App Platform

***** [ Registry ] *****

Key Found : HKCU\Software\Classes\AllFileSystemObjects\shell\pokki
Key Found : HKCU\Software\Classes\Directory\shell\pokki
Key Found : HKCU\Software\Classes\Drive\shell\pokki
Key Found : HKCU\Software\Classes\lnkfile\shell\pokki
Key Found : HKCU\Software\SweetLabs App Platform
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SweetLabs_AP
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SweetLabs_Start_Menu
Key Found : HKCU\Software\Classes\pokki

***** [ Web browsers ] *****

[C:\Users\Olivera\AppData\Roaming\Mozilla\Firefox\Profiles\523w1h8i.default\prefs.js] [Preference] Found : user_pref("browser.search.defaultenginename", "Web Search");
[C:\Users\Olivera\AppData\Roaming\Mozilla\Firefox\Profiles\523w1h8i.default\prefs.js] [Preference] Found : user_pref("browser.search.selectedEngine", "Web Search");

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1674 bytes] ##########
# AdwCleaner v5.200 - Logfile created 15/06/2016 at 20:50:36
# Updated 14/06/2016 by ToolsLib
# Database : 2016-06-15.1 [Server]
# Operating system : Windows 10 Home (X64)
# Username : Olivera - 018
# Running from : C:\Users\Olivera\Desktop\AdwCleaner.exe
# Option : Scan
# Support : https://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

Folder Found : C:\Users\Olivera\AppData\Local\SweetLabs App Platform
Folder Found : C:\Users\Default User\AppData\Local\Pokki
Folder Found : C:\Users\Default\AppData\Local\Pokki

***** [ Files ] *****

File Found : C:\Users\Olivera\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
File Found : C:\Users\Olivera\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_zdnfarmarcade-a.akamaihd.net_0.localstorage
File Found : C:\Users\Olivera\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_zdnfarmarcade-a.akamaihd.net_0.localstorage-journal

***** [ DLL ] *****


***** [ WMI ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

Task Found : SweetLabs App Platform

***** [ Registry ] *****

Key Found : HKCU\Software\Classes\AllFileSystemObjects\shell\pokki
Key Found : HKCU\Software\Classes\Directory\shell\pokki
Key Found : HKCU\Software\Classes\Drive\shell\pokki
Key Found : HKCU\Software\Classes\lnkfile\shell\pokki
Key Found : HKCU\Software\Classes\pokki
Key Found : HKU\S-1-5-21-1849326311-1118242734-1081158828-1002\Software\Classes\pokki
Key Found : HKCU\Software\SweetLabs App Platform
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SweetLabs_AP
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SweetLabs_Start_Menu
Key Found : HKU\S-1-5-21-1849326311-1118242734-1081158828-1002\Software\SweetLabs App Platform
Key Found : HKU\S-1-5-21-1849326311-1118242734-1081158828-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\SweetLabs_AP
Key Found : HKU\S-1-5-21-1849326311-1118242734-1081158828-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\SweetLabs_Start_Menu
Data Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxps://startpage-home.com/?s=hp&m=start
Data Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page Redirect Cache] - hxxps://startpage-home.com/?s=hp&m=start
Data Found : HKU\S-1-5-21-1849326311-1118242734-1081158828-1002\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxps://startpage-home.com/?s=hp&m=start
Data Found : HKU\S-1-5-21-1849326311-1118242734-1081158828-1002\Software\Microsoft\Internet Explorer\Main [Start Page Redirect Cache] - hxxps://startpage-home.com/?s=hp&m=start
Value Found : HKU\S-1-5-21-1849326311-1118242734-1081158828-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [Pokki]

***** [ Web browsers ] *****

[C:\Users\Olivera\AppData\Roaming\Mozilla\Firefox\Profiles\523w1h8i.default\prefs.js] Found : user_pref("browser.search.defaultenginename", "Web Search");
[C:\Users\Olivera\AppData\Roaming\Mozilla\Firefox\Profiles\523w1h8i.default\prefs.js] Found : user_pref("browser.search.selectedEngine", "Web Search");
[C:\Users\Olivera\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Found : hxxps://startpage-home.com/?s=hp&m=home

*************************

C:\AdwCleaner\AdwCleaner[S1].txt - [5117 bytes] - [08/02/2016 20:33:26]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [5190 bytes] ##########
 

flavallee

Frank
Trusted Advisor
Joined
May 12, 2002
Messages
81,590
It looks like you ran scan with an old version 5.033 and then about an hour later with the current version 5.200.

Close all open windows first, then double-click AdwCleaner.exe to load its main window.
Click the "Scan" button, then allow the scanning process to finish.
Several seconds may pass before the scanning process starts, so be patient.
Click the "Clean" button, then click "OK".
Allow the cleaning process to finish.
When it's finished, click "OK" in each window that appears.
The computer will restart.
When the log appears during restart, save it.
Return here to your thread, then copy-and-paste the ENTIRE log here.

---------------------------------------------------------------

Have you installed SUPERAntiSpyware 6.0.1220 yet?
If you already have, here are instructions for setting it up and using it.

Start SUPERAntiSpyware.
Click "System Tools".
Click "Preferences", then uncheck "Run in the background (system tray)", then click "Done".
Click "Advanced Settings", then uncheck "Follow shortcuts (*.lnk) during scan", then click "OK - Done".
Click "Click here to check for updates".
When the definition files have updated, click "OK".
Click "Scan This Computer", then click "Quick Scan".
If problems are found during the scan, the number of them will be highlighted in red.
When the scan is finished, click "Continue".
Make sure that EVERYTHING in the list is selected, then click "Continue".
When the removal process is complete, click "Continue".
If you're prompted to restart to finish the removal process, do so.
Start SUPERAntiSpyware again.
Click "System Tools", then click "Scan Logs".
Select the most current scan log, then click on its magnifying glass icon so it can open and be viewed, then save it on the desktop.
Return here, then copy-and-paste its ENTIRE contents here.

---------------------------------------------------------------
 

OllyN

Thread Starter
Joined
Jun 13, 2016
Messages
12
Weird, no idea where that 5.033 came from :x but my fault also I only did scan and didn't do clean yesterday.
Here it is again, did scan, clean, rebooted and here's log:


# AdwCleaner v5.200 - Logfile created 16/06/2016 at 11:49:56
# Updated 14/06/2016 by ToolsLib
# Database : 2016-06-15.2 [Server]
# Operating system : Windows 10 Home (X64)
# Username : Olivera - 018
# Running from : C:\Users\Olivera\Desktop\AdwCleaner.exe
# Option : Clean
# Support : https://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Users\Olivera\AppData\Local\SweetLabs App Platform
[-] Folder Deleted : C:\Users\Default User\AppData\Local\Pokki
[#] Folder Deleted : C:\Users\Default\AppData\Local\Pokki

***** [ Files ] *****

[-] File Deleted : C:\Users\Olivera\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
[-] File Deleted : C:\Users\Olivera\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_zdnfarmarcade-a.akamaihd.net_0.localstorage
[-] File Deleted : C:\Users\Olivera\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_zdnfarmarcade-a.akamaihd.net_0.localstorage-journal


***** [ DLLs ] *****


***** [ WMI ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : SweetLabs App Platform

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Classes\AllFileSystemObjects\shell\pokki
[-] Key Deleted : HKCU\Software\Classes\Directory\shell\pokki
[-] Key Deleted : HKCU\Software\Classes\Drive\shell\pokki
[-] Key Deleted : HKCU\Software\Classes\lnkfile\shell\pokki
[-] Key Deleted : HKCU\Software\Classes\pokki
[-] Key Deleted : HKCU\Software\SweetLabs App Platform
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SweetLabs_AP
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SweetLabs_Start_Menu
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page Redirect Cache]
[-] Data Restored : HKU\S-1-5-21-1849326311-1118242734-1081158828-1002\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKU\S-1-5-21-1849326311-1118242734-1081158828-1002\Software\Microsoft\Internet Explorer\Main [Start Page Redirect Cache]
[-] Value Deleted : HKU\S-1-5-21-1849326311-1118242734-1081158828-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [Pokki]

***** [ Web browsers ] *****

[-] [C:\Users\Olivera\AppData\Roaming\Mozilla\Firefox\Profiles\523w1h8i.default\prefs.js] Deleted : user_pref("browser.search.defaultenginename", "Web Search");
[-] [C:\Users\Olivera\AppData\Roaming\Mozilla\Firefox\Profiles\523w1h8i.default\prefs.js] Deleted : user_pref("browser.search.selectedEngine", "Web Search");
[-] [C:\Users\Olivera\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Deleted : hxxps://startpage-home.com/?s=hp&m=home

*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [2974 bytes] - [16/06/2016 11:49:56]
C:\AdwCleaner\AdwCleaner[S1].txt - [5269 bytes] - [08/02/2016 20:33:26]
C:\AdwCleaner\AdwCleaner[S2].txt - [3589 bytes] - [16/06/2016 09:51:25]
C:\AdwCleaner\AdwCleaner[S3].txt - [3662 bytes] - [16/06/2016 09:54:05]
C:\AdwCleaner\AdwCleaner[S4].txt - [3735 bytes] - [16/06/2016 11:34:39]
C:\AdwCleaner\AdwCleaner[S5].txt - [3808 bytes] - [16/06/2016 11:47:59]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [3412 bytes] ##########

SUPERAntiSpyware's log coming up :)
 

flavallee

Frank
Trusted Advisor
Joined
May 12, 2002
Messages
81,590
SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 06/16/2016 at 12:16 PM

Application Version : 6.0.1220
Database Version : 12767

Scan type : Quick Scan
Total Scan Time : 00:02:57

Operating System Information
Windows 10 Home 64-bit (Build 10.00.10586)
UAC On - Limited User

Memory items scanned : 805
Memory threats detected : 0
Registry items scanned : 42882
Registry threats detected : 0
File items scanned : 8423
File threats detected : 1353
Thanks for uploading the scan log.
It shows 1353 "adware tracking cookies", but nothing more serious.
I'm going to assume you selected and deleted them all.
Just to be sure you did, run another "Quick Scan".
After it's done, submit its log here.

-------------------------------------------------------------

You already use Malwarebytes Anti-Malware, but you may not have it set up and are using it correctly, so here are instructions for doing so.

Start Malwarebytes Anti-Malware.
Click "Settings". then click "Detection and Protection".
Make sure all 3 squares in "Detection Options" are checked.
Make sure "Treat detections as malware" is selected in both boxes.
Click "Scan", then select "Threat Scan", then click "Start Scan".
If it wants to update the definition files first, allow it to do so.
If problems are found during the scan, the number of "Detected Objects" will be listed.
When the scan is finished, make sure to select and quarantine EVERYTHING in the list.
If you're prompted to restart the computer to complete the process, do so.

-------------------------------------------------------------

How is your computer running now, compared to how it was running when you started this thread?

-------------------------------------------------------------
 

OllyN

Thread Starter
Joined
Jun 13, 2016
Messages
12
Yes all checked and removed with SUPERAntiSpyware :)
My settings in Malwarebytes Anti-Malware were same as you told me, did another scan and came up with 0 threats.

I'm not sure that anything changed. I have these 2 screenshots from the other day:
not doing anything on laptop, no apps or programs running and fan working, not full speed but more than it should for newly rebooted laptop and no programs started




Few seconds later:



I'll try to monitor it tomorrow, reboot, not run anything and see if fan wakes up for no apparent reason.
And just to add, its not for a min or 2 or some limited amount of time, once it starts it doesn't stop/slower down until i open Task manager, then it does within a matter of min.
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top