Troubleshoot High CPU usage

[JB007]

Briefly explain your current issue(s)

High CPU usage because of BACKGROUND TASKS OF MICROSOFT WINDOWS SYSTEM PROTECTION

Steps taken to resolve, but have been unsuccessful

Nothing because I did not know what I can do...

Hello,
Since 3 weeks I hear my PC fan running very fast, only Saturday morning. It is my work PC, so I'm doing the same tasks every day.
When I go to the task manager I can see that the problem is "BACKGROUND TASKS OF MICROSOFT WINDOWS SYSTEM PROTECTION".
These "Background tasks" are using the processor between 35 and 40%
This issue persists about 4 hours and then my PC works again normally.
Can you help me to solve this issue ?
Thanks

 

[Venustus]

Could you post a screenshot of all the processes running in task manager!

 

[TairikuOkami]

Can you use something like Download Process Hacker 2.39.124 / 3.0.1542 Nightly

It provides more details, like it can show, which tasks is the process related to.

Or open Task Scheduler and click on "Display all Running tasks."

 

[JB007]

Thanks @venustus and @TairikuOkami for your help.
I'm out of office, without access to my work PC. I will post the screenshots Monday.

 

[JB007]

Could you post a screenshot of all the processes running in task manager!

Hello @venustus
Today "Background tasks of Microsoft Windows system protection" are not running.
That's a screenshot of the processes currently running on my PC:

Hello @TairikuOkami
And after downloading "Download Process Hacker 2.39.124 / 3.0.1542 Nightly " what should I do ?

 

[yitworths]

Can you recall which process was causing this problem?

 

[Venustus]

Okay!Would like to see what is happening when it is running.
It will automatically trigger when it needs to check authenticity of Windows or Office.Do you have Office installed?

And after downloading "Download Process Hacker 2.39.124 / 3.0.1542 Nightly " what should I do ?

When that process is running again open up Process hacker and post a screenshot

 

[JB007]

Can you recall which process was causing this problem?

Hello @yitworths
"Background tasks of Microsoft Windows system protection"

Okay!Would like to see what is happening when it is running.
It will automatically trigger when it needs to check authenticity of Windows or Office.Do you have Office installed?

When that process is running again open up Process hacker and post a screenshot

Yes @venustus , I have Office 2007 installed on this PC.
Kaspersky detects "Process hacker" as malware

and also DrWeb, Sophos, Panda and ZoneAlarm...

 

[harlan4096]

Yes, Kaspersky detects PH as riskware, but You may add exclusions

 

[Venustus]

I get the same warning but as @harlan4096 it is safe!

 

[Aerdian]

Hello @yitworths
"Background tasks of Microsoft Windows system protection"

Yes @venustus , I have Office 2007 installed on this PC.
Kaspersky detects "Process hacker" as malware
and also DrWeb, Sophos, Panda and ZoneAlarm...

Process Hacker acts in "suspicious" ways, according to some AV programs. It is entirely okay and is sometimes called "goodware" for that reason

 

[harlan4096]

I think it's becasue in the past PH had a vulnerability: DLL hijacking vulnerability... but don't know if in current version is fixed...

 

[Venustus]

And yet the .exe itself is clean!
Antivirus scan for d6c4846591e2237cd2fef931b4b23d287f0740f54eeb7e58c6a070200036f66f at 2018-06-09 15:36:14 UTC - VirusTotal

 

[JB007]

Is it possible to use another program to replace "Process hacker" ?

 

[Venustus]

Is it possible to use another program to replace "Process hacker" ?

You can use Process explorer:
Process Explorer - Windows Sysinternals
And System Explorer:
Download System Explorer - MajorGeeks

 

[yitworths]

May be kaspersky was scanning every step of srtask during that time. I can't ensure it as you said this continued to happen for 4 long hours. If high cpu usage problem limited to srtask, then you may try to disable it's scheduled task (obviously if you don't need it).
More info would be helpful. Are you facing this problem every now & then or was that the first time?

 

[JB007]

Can you use something like Download Process Hacker 2.39.124 / 3.0.1542 Nightly

It provides more details, like it can show, which tasks is the process related to.

Or open Task Scheduler and click on "Display all Running tasks."

Hello @TairikuOkami
I take a look at task scheduler, I hope it will help:emoji_fingers_crossed:

 

[TairikuOkami]

Select this to display running tasks.

 

[ForgottenSeer 69673]

Autoruns will show scheduled tasks also

 

[harlan4096]

Agree, but sometimes there are some scheduled tasks not shown in AutoRuns, I've found this cases many times testing malware at MWHub, and I had to use Comodo AutoRuns, and even that, sometimes also neither in Comodo AutoRuns are shown, so finally I had to use and find the malicious task with Nirsoft TaskSchedulerView tool...