[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 729
  • Last Modified:

HP Laptop CPU Utilization

I have a laptop with the CPU Utilization holding at 100%.  I have run multiple scans with Symantec AV, Malwarebytes, and ComboFix and nothing is coming up.  I read somewhere that it could be a corrupt video driver so I replaced that but nothing changed.  Does anybosy have any ideas?

I checked the task manager and it is divided up:
mqsvc.exe 46%
DoScan 22%
csrss.exe 14%
taskmgr.exe 11%
winlogon.exe 5%
lsass.exe 1%
svchost.exe 1%
System 1%
0
LightwaveMgmt
Asked:
LightwaveMgmt
  • 16
  • 9
  • 8
  • +3
3 Solutions
 
speshalystCommented:
when does this happen ? Is there a pattern ? or is does this happen sporadically..
0
 
pjamCommented:
Is this your post regardin doscan.exe?:
http://www.edugeek.net/forums/windows/8728-doscan-exe.html
If not, they seem to blame it on an older version of Symantec
0
 
pjamCommented:
PS, do you use messaging?  I believe mqsvc.exe is the messaging que server process.  If yo don''t use IM I would remove it in Widows Setup in the Add Remove control panel
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LightwaveMgmtAuthor Commented:
The CUP running at 100% happens constantly.  I know the DoScan happens after the definitions update in older versions of Symantec which they have so I am not worried about that one so much.  I removed messaging from the computer and restarted.  It is still at 100%
0
 
BCipolloneCommented:
Use this: http://technet.microsoft.com/en-us/sysinternals/bb896653

Process explorer will help you see exactly what is causing the problem.
0
 
nobusCommented:
did you disable symantec at startup for a test yet?
mqsvc  is not needed :  http://www.processlibrary.com/directory/files/mqsvc/20246/
so i suggest to turn it off..
0
 
pjamCommented:
Even if symantec is paid uptodate I would remove Symantec AV (whatever version) and install Microsoft Security Essentials if you are positive you don't have a virus or Malware.

http://www.microsoft.com/security_essentials/support.aspx?mkt=en-us#mainNav
0
 
Netman66Commented:
Stop the Automatic Update service - does it go to normal?

0
 
LightwaveMgmtAuthor Commented:
disabled Symantec at Startup and turned off Automatic updates.  Restarted after both.  No change.
0
 
Netman66Commented:
In Task Manager, check the box to show processes from all users.

Expand the window so all your processes are visible without scrolling.
Click on the CPU header twice to sort by percentage (highest at the top).
Press ALT+PRT SC and paste the clipboard into MSPAINT then save it as a JPG.
Post that here.

0
 
nobusCommented:
did you stop mqsvc??
0
 
LightwaveMgmtAuthor Commented:
Here is the task manager screen shot

Task Manager
0
 
Netman66Commented:
The Windows Update client is running - I suspect this may be the culprit.

Is this domain-joined and do you use WSUS if so?
0
 
LightwaveMgmtAuthor Commented:
It is not domain joined.  I already turned off Windows Updates in Control Panel.  Do I need to kill it somewhere else?
0
 
Netman66Commented:
Yes, in Services.msc.

Stop and Disable (temporarily) Automatic Updates and Background Intelligent Transfer.  You just want to do this to confirm we have the right culprits before looking at a fix.

Let us know.
0
 
LightwaveMgmtAuthor Commented:
disabled both services.  no change.
0
 
Netman66Commented:
Did you restart?

0
 
LightwaveMgmtAuthor Commented:
yes the system was restarted afterwards
0
 
Netman66Commented:
Interesting...

Is your HP All-in-one connected and powered on?

I wonder if it has to do with the HP Imaging software?

0
 
LightwaveMgmtAuthor Commented:
i went into msconfig and disabled everything labeled HP and rebooted.  still having the issue.
0
 
Netman66Commented:
Wow, that's weird.

I wonder if you have some kind of rootkit that isn't showing up?

Do you have insurance on it?  Maybe it could disappear?  LOL Just kidding...


Does this expose anything?  http://technet.microsoft.com/en-us/sysinternals/bb897445
0
 
LightwaveMgmtAuthor Commented:
It hung the machine twice.  I am going to let it sit overnight and see if it finishes.
0
 
LightwaveMgmtAuthor Commented:
One constant through all of this has been that csrss always holds at ~15%  When I look that up, i see some people talking about drivers, specifically Nvidia and Synaptec Tocuh Pad.  I updated the drivers for both but it has made no difference.  Im not sure if the csrss has anything to do with the problem, but I thought it was worth pointing out.
0
 
LightwaveMgmtAuthor Commented:
The root kit revealer tool crashed twice when trying to export the results.  Here is a screen shot of the results.
 Root Kit Revealer
0
 
nobusCommented:
you could also try a bios update
0
 
LightwaveMgmtAuthor Commented:
we tried that already.  it took 2 hours and made no difference.
0
 
nobusCommented:
a bios update took 2 hours????  normally it is more like 2 minutes
you can test if it uses that much when running froml a live cd  : ftp://ftp.kernel.org/pub/dist/knoppix/KNOPPIX_V6.4.4CD-2011-01-30-EN.iso

or test by installing xp on another disk
0
 
Netman66Commented:
Yes, something odd is going on for sure.  A BIOS update is a minute or two at most.

I think you may have a motherboard going bad.  Is there warranty on this?

0
 
nobusCommented:
the knoppix cd is a good way to see if the problem is hardware or not
0
 
pjamCommented:
Have you ran a "SFC /scannow" yet?  It may be as simple as a missing or corrupt DLL
0
 
LightwaveMgmtAuthor Commented:
the motherboard has been replaced twice and the processor once.  The built-in diagnostics pass for the hard drive and memory.  I ran the seagate hard drive tool against the drive (not a seagate drive) and it failed but I dont know if that means anything.  I do not have an extra 2.5" SATA drive.

I ran SFC /scannow but no difference.
0
 
nobusCommented:
>>   I ran the seagate hard drive tool against the drive (not a seagate drive) and it failed but I dont know if that means anything.    <<  no??  what do you think the diagnostic is for?

it means the drive should be replaced; but i managed to recover several drives with HDDRegenerator :  http://www.dposoft.net/
0
 
LightwaveMgmtAuthor Commented:
the HP diagnostic has passed twice.  Once before the Seagate and once after.  To clarify what I said earlier, I dont know if it failed because the drive is bad or if it failed because its not a seagate drive.
0
 
nobusCommented:
you have to run the manufacturer's tool for the drive -  here hey are  :  http://www.tacktech.com/display.cfm?ttid=287      
0
 
LightwaveMgmtAuthor Commented:
Hitachi drive test passed both times.  I am running out of ideas.
0
 
nobusCommented:
some notes :
-did you run the knoppix cd?
-did you test with another disk (and a fresh install?)
-did you try a system restore to a date it worked?
0
 
nobusCommented:
and was the disk replaced yet, or not?
0
 
LightwaveMgmtAuthor Commented:
Customer decided not to fix and purchase new instead.  Splitting points between nobus and Netman66 for trying.
0
 
LightwaveMgmtAuthor Commented:
Customer decided not to fix laptop.  split points.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 16
  • 9
  • 8
  • +3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now