Explorer.exe CPU usage

  • Thread starter Thread starter Bob Onysko
  • Start date Start date
B

Bob Onysko

It would be most helpful if some of you would tell me what percent of
your CPU is being used by Explorer. Mine is about 20% (1 GHz
processor).

Thanks.........
 
From: "Bob Onysko" <[email protected]>

| It would be most helpful if some of you would tell me what percent of
| your CPU is being used by Explorer. Mine is about 20% (1 GHz
| processor).
|
| Thanks.........

0 ~ 1% PIII .7Ghz Win2K
 
Bob said:
It would be most helpful if some of you would tell me what percent of
your CPU is being used by Explorer. Mine is about 20% (1 GHz
processor).
Click to expand...

Bob,

Mine is insignificant (WinXP HE, 3 GHz P4). You need more info to
troubleshoot your problem.

Sysinternals Process Explorer - free for personal use, read the EULA
(http://www.sysinternals.com/Utilities/ProcessExplorer.html)

You can also set it up to replace the Windows Task Manager with a
three-fingered salute (CTRL+ALT+DEL). Play with it, and post back if
you don't understand something. Perhaps one of the experts (not me)
can help you get a handle on your problem.

BTW,

1) Which OS? WinXP?
2) Which XP services do you still have enabled?
3) Which AV are you using? Only one, I hope.
4) Which PFW?
5) Windows Indexing disabled?

I have seen reports of security apps causing problems with things like
indexing, defragging, etc., and other Windows processes. Your AV/PFW
re-writes/creates a temp file, Windows re-writes its temp file/cache,
and the process goes on and on.

Ron :)
 
[email protected] said:
From: "Bob Onysko" <[email protected]>

| It would be most helpful if some of you would tell me what percent of
| your CPU is being used by Explorer. Mine is about 20% (1 GHz
| processor).
|
| Thanks.........

0 ~ 1% PIII .7Ghz Win2K
Click to expand...
Hello David - This is Nisko....and thanks. I may have solved the
svchost problem hogging my CPU - but I'll wait to post the solution
until I'm sure. Meanwhile, it seems that explorer.exe is using a lot of
CPU time. It would help if I understood the components of explorer.exe.
I recently modified my Quick Launch area with a neat set of tools from
www.truelaunchbar.com. It uses plugins and skins. I was wondering if
that added to the drain on explorer.

BTW, I'm sending this post using "Gravity." I also downloaded "Agent."
Figured I'd try them both to see which I liked better. So far, Agent
has the edge. Where can I go to get help that isn't adequately
explained in the Help files. Thanks...........
 
From: "Bob Onysko" <[email protected]>


| Hello David - This is Nisko....and thanks. I may have solved the
| svchost problem hogging my CPU - but I'll wait to post the solution
| until I'm sure. Meanwhile, it seems that explorer.exe is using a lot of
| CPU time. It would help if I understood the components of explorer.exe.
| I recently modified my Quick Launch area with a neat set of tools from
| www.truelaunchbar.com. It uses plugins and skins. I was wondering if
| that added to the drain on explorer.
|
| BTW, I'm sending this post using "Gravity." I also downloaded "Agent."
| Figured I'd try them both to see which I liked better. So far, Agent
| has the edge. Where can I go to get help that isn't adequately
| explained in the Help files. Thanks...........

Yep. I saw you changed your posting handle Yesterday.

Many things add on to EXPLORER.EXE both legitimate and malware.

Did 'ya ever post a HiJack This log in one of the forums I suggested ?
If you didn't...


Download and execute HiJack This! (HJT)
http://www.spywareinfo.com/~merijn/files/HijackThis.exe

Create a HJT log file and post it in one of the below locations...

{ Please - Do NOT post the HJT Log here ! }

Forums where you can get expert advice for HiJack This! (HJT) logs.
NOTE: Registration is REQUIRED before posting a log
NOTE: Web sites NOT listed in any particular order

http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://www.malwarebytes.org/forums/index.php?showforum=7
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13
http://castlecops.com/forum67.html
http://aumha.net/viewforum.php?f=30
 
Bob,

Mine is insignificant (WinXP HE, 3 GHz P4). You need more info to
troubleshoot your problem.

Sysinternals Process Explorer - free for personal use, read the EULA
(http://www.sysinternals.com/Utilities/ProcessExplorer.html)

You can also set it up to replace the Windows Task Manager with a
three-fingered salute (CTRL+ALT+DEL). Play with it, and post back if
you don't understand something. Perhaps one of the experts (not me)
can help you get a handle on your problem.

BTW,

1) Which OS? WinXP?
2) Which XP services do you still have enabled?
3) Which AV are you using? Only one, I hope.
4) Which PFW?
5) Windows Indexing disabled?

I have seen reports of security apps causing problems with things like
indexing, defragging, etc., and other Windows processes. Your AV/PFW
re-writes/creates a temp file, Windows re-writes its temp file/cache,
and the process goes on and on.
Click to expand...

1. WinXP Pro
2. All the Defaults
3. McAfee (I'll have to check if any others are enabled)
4. What does PFW mean?
5. Where do I find if Windows Indexing is enabled?
6. I just installed Google Desktop Indexing.
7. I have Sysinternals PE and am in the process of learning how to use
it.
8. I do have some other security apps running (Spyware Doctor comes to
mind).
9. I have Diskeeper running in the background - continuously
defragging.
 
Bob said:
1. WinXP Pro
2. All the Defaults
3. McAfee (I'll have to check if any others are enabled)
4. What does PFW mean?
5. Where do I find if Windows Indexing is enabled?
6. I just installed Google Desktop Indexing.
7. I have Sysinternals PE and am in the process of learning how to use
it.
8. I do have some other security apps running (Spyware Doctor comes to
mind).
9. I have Diskeeper running in the background - continuously
defragging.
Click to expand...

1) PFW - Personal Firewall, including the XP SP2 firewall. You only
want one of these enabled, and only one third-party PFW installed.

2) If you have more than one resident AV installed, I can almost
guarantee conflicts. And this includes not completely uninstalling a
previous AV app.

3) I don't know about Google's indexing service. What is it indexing?
If it is continually writing to your HD, it, together with your AV
monitoring it, can eat up cycles like popcorn.

4) Windows Indexing service. Set it to manual, or disable it, and see
what happens to your CPU. You can always turn it back on if it turns
out not to be the culprit. I personally see no need for it. You can
get to any WinXP service from

My Computer -> Right-click -> Manage -> Services

(http://www.theeldergeek.com/indexing_service.htm)

5) If you are using Spyware Doctor for real-time monitoring, it will
eat up some of your CPU cycles. This should not be a problem, unless
there is a conflict with something else.

6) I think that you have found the culprit. Constant defragging can
cause a problem if your AV is monitoring HD activity. You can toggle
one or the other off to investigate. (Don't disable your AV while you
are doing anything risky on the internet.) Also, read the Diskeeper
help pages on using it with a real-time AV app.

7) Two general rules for using a WinXP box.

I. If you use it, keep it (OS, software) up-to-date.
II. If you don't use it, uninstall it (software), disable it
(services), or close it (ports).

You can Google for lots of sites that deal with securing a WinXP box,
particularly as it relates to XP services and ports.

Ron :)
 
Bob Onysko said:
1. WinXP Pro
2. All the Defaults
3. McAfee (I'll have to check if any others are enabled)
4. What does PFW mean?
5. Where do I find if Windows Indexing is enabled?
6. I just installed Google Desktop Indexing.
7. I have Sysinternals PE and am in the process of learning how to use
it.
8. I do have some other security apps running (Spyware Doctor comes to
mind).
9. I have Diskeeper running in the background - continuously
defragging.
Click to expand...
Comments on the list above:
3... Do not use more than one anti virus program. Supplement with Ad-Aware
and Spybot. These products only run when you choose.
5. If you are talking about the indexing servc\ice, it is
enabled/disabled in the properties tag for each disk. Frankly, I believe
that this services does not make enough of a difference to be worth running.
8. What does Spyware Doctor do?
9. Continuous defragging is a waste of resources.

Jim
 
Bob said:
1. WinXP Pro
2. All the Defaults
3. McAfee (I'll have to check if any others are enabled)
4. What does PFW mean?
5. Where do I find if Windows Indexing is enabled?
6. I just installed Google Desktop Indexing.
7. I have Sysinternals PE and am in the process of learning how to use
it.
8. I do have some other security apps running (Spyware Doctor comes to
mind).
9. I have Diskeeper running in the background - continuously
defragging.
Click to expand...

PFW is "personal firewall"
 
From: "Jim" <[email protected]>

|
| Comments on the list above:
| 3... Do not use more than one anti virus program. Supplement with Ad-Aware
| and Spybot. These products only run when you choose.
| 5. If you are talking about the indexing servc\ice, it is
| enabled/disabled in the properties tag for each disk. Frankly, I believe
| that this services does not make enough of a difference to be worth running.
| 8. What does Spyware Doctor do?
| 9. Continuous defragging is a waste of resources.
|
| Jim
|

In Reference to #9

Not true. A periodic defragmentation improves disk read performance. It consumes resources
only when in-process.
 
David H. Lipman said:
From: "Jim" <[email protected]>

|

| Comments on the list above:
| 3... Do not use more than one anti virus program. Supplement with
Ad-Aware
| and Spybot. These products only run when you choose.
| 5. If you are talking about the indexing servc\ice, it is
| enabled/disabled in the properties tag for each disk. Frankly, I
believe
| that this services does not make enough of a difference to be worth
running.
| 8. What does Spyware Doctor do?
| 9. Continuous defragging is a waste of resources.
|
| Jim
|

In Reference to #9

Not true. A periodic defragmentation improves disk read performance. It
consumes resources
only when in-process.
Click to expand...
I meant that running a process that periodically defrags is hardly ever
useful.

I really haven't been a fan of defragmenting routinely since my days as a
VMS system manager. I can always cite examples where defragmenting makes a
lot of difference as well as examples where it makes no difference at all.
So, I defragment every now and then, but only when defrag tells me to.
Usually, I see some change after defragging the data disk, but I can't
really see any change after defragging the system disk.

However, I doubt that there is anything on the OP's list that contributes to
his problem (which my systems do not show).

Jim
 
From: "Jim" <[email protected]>


| I meant that running a process that periodically defrags is hardly ever
| useful.
|
| I really haven't been a fan of defragmenting routinely since my days as a
| VMS system manager. I can always cite examples where defragmenting makes a
| lot of difference as well as examples where it makes no difference at all.
| So, I defragment every now and then, but only when defrag tells me to.
| Usually, I see some change after defragging the data disk, but I can't
| really see any change after defragging the system disk.
|
| However, I doubt that there is anything on the OP's list that contributes to
| his problem (which my systems do not show).
|
| Jim
|

Fragmentation can be high and can dramatically slow down the computer. This can happen with
something like Outlook Express. It databases all the messages in folders and the process of
using it makes framented data storage. Internet Explorer can also. When IE takes a
percentage of the hard disk space like 1GB or more the IE cache gets data storage gets
fragmented.

When I say periodically I don't mean a weekly but a monthly or so defragmentation. When the
Windows hole folder get fragmentaed the OS is slowed down and bots take a little longer.

In Windows memory gets fragmented as well. If you leave a system on 24x7 and it does many
routines in the background, the memory gets fragmented over time and you can allieviate that
by an occasional reboot.

In context to this thread, a defragmentation of the hard disk is not warranted and will have
no affect on the CPU, SVCHOST.EXE or EXPLORER.EXE utilization.

I had a Dell Latitude D610 and many Dell Latitude D620s.
I had a Ghost Image of the D620 but not of the earlier model. I tried to restore the D620
image on the D610. They were close in hardware and chipsets. However they were different
enough to cause SVCHOST.EXE to have at 97 ~ 99% utilization and the system was an unusable
Dog. I eventually installed WinXP SP2 and the office suite if software on it from scratch
and the PC worked extremely well. There was no malware in the equation but a piece of
hardware associated with some driver that was causing a particular module of the OS to work
much harder and spike its utilization to where the PC overall was slow, sluggish and
unusable.
 
Download and execute HiJack This! (HJT)
http://www.spywareinfo.com/~merijn/files/HijackThis.exe

Create a HJT log file and post it in one of the below locations...

{ Please - Do NOT post the HJT Log here ! }

Forums where you can get expert advice for HiJack This! (HJT) logs.
NOTE: Registration is REQUIRED before posting a log
NOTE: Web sites NOT listed in any particular order

http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://www.malwarebytes.org/forums/index.php?showforum=7
Click to expand...

Thanks for the additional information, Dave. I downloaded HijackThis
this morning but haven't had the time to get into it yet. Will keep you
posted when something new happens. Thanks....
 
rmo555 said:
I recently modified my Quick Launch area with a neat set of tools from
www.truelaunchbar.com. It uses plugins and skins. I was wondering if
that added to the drain on explorer.
Click to expand...

A quick launch application doesn't mean it's running all the time. :)
How many programs do you have running beside your clock?
BTW, I'm sending this post using "Gravity." I also downloaded "Agent."
Figured I'd try them both to see which I liked better. So far, Agent
has the edge. Where can I go to get help that isn't adequately
explained in the Help files. Thanks...........
Click to expand...

I'm a fan of gravity myself, but I have noticed it's a little more crash
prone since becoming freeware. :(

--
Dustin Cook
Author of BugHunter - MalWare Removal Tool
Version 1.9.2 Released August 15th, 2006
Last Pattern Update: September 1st, 2006
http://bughunter.it-mate.co.uk
 
rmo555 said:
1. WinXP Pro
Click to expand...

A legal copy, right? :)
2. All the Defaults
3. McAfee (I'll have to check if any others are enabled)
Yuck..

4. What does PFW mean?
Click to expand...
Personal firewall...
5. Where do I find if Windows Indexing is enabled?
Click to expand...

Goto my computer, right click drive C:, you should see an indexing tab,
by default it's on. Go ahead and turn it off, you don't need it.
6. I just installed Google Desktop Indexing.
Click to expand...

This will result in a sluggish computer until it completes the majority
of it's indexing work. It'll also open you to some forms of malware
which look for googles indexing files and take advantage of the
information they contain.
8. I do have some other security apps running (Spyware Doctor comes to
mind).
Click to expand...

Just remember, the more you have running, the slower she's going to get.
9. I have Diskeeper running in the background - continuously
defragging.
Click to expand...

I'm a big fan of diskeeper. Mine is set to defrag in the early morning
hours, when I'm not likely to be using the computer. You really don't
need a continuous defrag going.

--
Dustin Cook
Author of BugHunter - MalWare Removal Tool
Version 1.9.2 Released August 15th, 2006
Last Pattern Update: September 1st, 2006
http://bughunter.it-mate.co.uk
 
[email protected] said:
From: "Jim" <[email protected]>

|

| Comments on the list above:
| 3... Do not use more than one anti virus program. Supplement with Ad-Aware
| and Spybot. These products only run when you choose.
| 5. If you are talking about the indexing servc\ice, it is
| enabled/disabled in the properties tag for each disk. Frankly, I believe
| that this services does not make enough of a difference to be worth running.
| 8. What does Spyware Doctor do?
| 9. Continuous defragging is a waste of resources.
|
| Jim
|

In Reference to #9

Not true. A periodic defragmentation improves disk read performance. It consumes resources
only when in-process.
Click to expand...

Periodic isn't continuous. And sadly, diskeeper can be told to always
defrag... :( This is a waste of cpu cycles and unnecessary wear and tear
on the hard disk. Besides, diskeeper isn't going to be able to defrag
files that you have open at the time, it'll make a note of them and go
back when it sees them close, wasting more time/resources. Better to set
it to run at a pre-specified time, do it's thing and idle.

--
Dustin Cook
Author of BugHunter - MalWare Removal Tool
Version 1.9.2 Released August 15th, 2006
Last Pattern Update: September 1st, 2006
http://bughunter.it-mate.co.uk
 
[email protected] said:
From: "Jim" <[email protected]>


| I meant that running a process that periodically defrags is hardly ever
| useful.
|
| I really haven't been a fan of defragmenting routinely since my days as a
| VMS system manager. I can always cite examples where defragmenting makes a
| lot of difference as well as examples where it makes no difference at all.
| So, I defragment every now and then, but only when defrag tells me to.
| Usually, I see some change after defragging the data disk, but I can't
| really see any change after defragging the system disk.
|
| However, I doubt that there is anything on the OP's list that contributes to
| his problem (which my systems do not show).
|
| Jim
|

Fragmentation can be high and can dramatically slow down the computer. This can happen with
something like Outlook Express. It databases all the messages in folders and the process of
using it makes framented data storage. Internet Explorer can also. When IE takes a
percentage of the hard disk space like 1GB or more the IE cache gets data storage gets
fragmented.

When I say periodically I don't mean a weekly but a monthly or so defragmentation. When the
Windows hole folder get fragmentaed the OS is slowed down and bots take a little longer.

In Windows memory gets fragmented as well. If you leave a system on 24x7 and it does many
routines in the background, the memory gets fragmented over time and you can allieviate that
by an occasional reboot.

In context to this thread, a defragmentation of the hard disk is not warranted and will have
no affect on the CPU, SVCHOST.EXE or EXPLORER.EXE utilization.

I had a Dell Latitude D610 and many Dell Latitude D620s.
I had a Ghost Image of the D620 but not of the earlier model. I tried to restore the D620
image on the D610. They were close in hardware and chipsets. However they were different
enough to cause SVCHOST.EXE to have at 97 ~ 99% utilization and the system was an unusable
Dog. I eventually installed WinXP SP2 and the office suite if software on it from scratch
and the PC worked extremely well. There was no malware in the equation but a piece of
hardware associated with some driver that was causing a particular module of the OS to work
much harder and spike its utilization to where the PC overall was slow, sluggish and
unusable.
Click to expand...

Fragment the hard disk well enough, Windows won't be able to
create/maintain the pagefile. Seriously. :( You wouldn't like to see the
results of a machine unable to create one. It can be very annoying.

--
Dustin Cook
Author of BugHunter - MalWare Removal Tool
Version 1.9.2 Released August 15th, 2006
Last Pattern Update: September 1st, 2006
http://bughunter.it-mate.co.uk
 
From: "Dustin" <[email protected]>


|
| I'm a fan of gravity myself, but I have noticed it's a little more crash
| prone since becoming freeware. :(
|

I have always been a phan of gravity. It keeps me well grounded :-)
 
Bob,

Mine is insignificant (WinXP HE, 3 GHz P4). You need more info to
troubleshoot your problem.

Sysinternals Process Explorer - free for personal use, read the EULA
(http://www.sysinternals.com/Utilities/ProcessExplorer.html)
Click to expand...

In case anybody here didn't know yet, the guys who set up
sysinternals now have jobs with MicroSoft, and have said that
the stuff on the sysinternals site will continue to be free for
the time being, but they're not promising forever.
Download everything you think you might ever need soon, guys.
 
Back
Top