Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Analysis of the reasons for the high utilization rate of leased server CPU and its solution

2025-01-28 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Servers >

Share

Shulou(Shulou.com)06/03 Report--

The server we rent slows down when using the operating system. When we open the "Task Manager", we find that the utilization rate of CPU is more than 80%. What's going on?

Did you encounter the virus? Is there something wrong with the hardware? Or is there something wrong with the system settings? In this article, we will introduce why the utilization of CPU resources has reached such a high level from four aspects: hardware, system process, application software and virus * *, in order to help you eliminate all kinds of doubts about the high utilization rate of server CPU.

I. hardware factors

The following are analyzed from the aspects of CPU temperature, CPU hyperthreading, hardware configuration, hardware driver and standby.

Case 1. CPU temperature is too high.

If the CPU fan does not dissipate heat well, it will cause the CPU temperature to be too high (how normal is the CPU temperature? ) to automatically reduce the frequency of CPU, thus reducing the performance of CPU. In short, CPU will automatically reduce work efficiency at high temperatures.

Case 2. Hyperthreading

Hyper-threading leads to high CPU utilization, and the common cause of such failures is the use of P4 CPU with hyperthreading. According to some netizens' summary, hyperthreading seems to conflict with Skynet firewall, which can be solved by uninstalling Skynet and installing other firewalls, or by turning off hyperthreading in BIOS.

Case 3. Unreasonable hardware configuration

For example, insufficient memory, when running some large software, most of the resources of CPU are consumed in the swap processing of virtual memory. The insufficient power of the power supply will also make the performance of the CPU difficult to play. In addition, when purchasing CPU, the insufficient frequency of the selected CPU core is the most direct reason for the high utilization of CPU.

Case 4. Imperfect driver

The driver of the hardware is not certified or illegally authenticated, which will result in a high occupancy rate of CPU resources. Due to the flooding of a large number of beta drivers on the Internet, it is difficult to find the cause of the failure. Treatment: especially the graphics card driver should pay special attention, it is recommended to use Microsoft certified or officially released driver, and strictly check the model and version.

Situation 5. Standby

Frequent use of the standby function will also cause the system to automatically turn off the hard disk DMA mode. This will not only greatly degrade the performance of the system, slow down the startup speed of the system, but also make the system have a high utilization rate of CPU when running some large-scale software.

II. System process factors

Compared with the influence of hardware factors, the abnormality of system process is also a sign of high utilization rate of CPU resources. The following is the analysis of Dllhost process and Services process to analyze the causes and solutions of the exception.

Case 1. Dllhost process

Characteristics: the normal CPU consumption of the server should be less than 75%, and the CPU consumption should fluctuate up and down. On the server with this problem, CPU will suddenly remain at 100% level and will not decrease. Looking at the task manager, you can find that it is DLLHOST.EXE that consumes all the CPU free time. In this case, the administrator has to restart the IIS service. Oddly, everything is fine after restarting the IIS service, but maybe after a period of time, the problem occurs again.

Direct cause: one or more ACCESS databases are damaged during multiple reads and writes. When Microsoft's MDAC system writes this corrupted ACCESS file, the ASP thread is in BLOCK state. As a result, other threads can only wait, IIS is deadlocked, and all CPU time is consumed in DLLHOST.

Solution: install the "first-class information surveillance interception system", use the "Chief File Checker IIS Health Checker" software, enable "find deadlock module", set:-wblock=yes monitoring directory, please specify your host file directory:-wblockdir=d:\ test, the file location of the monitoring generated log is in the log directory of the installation directory, the file name is: logblock.htm

Stop IIS, start the Chief File Inspector IIS Health Inspector, start IIS again, and the Chief document Inspector IIS Health Inspector will record the last ACCESS file written in logblock.htm.

After a period of time, when the problem comes out, such as CPU will always be at 100% level again, you can stop IIS and check the last ten files recorded by logblock.htm. Note that the most problematic are often counter-class ACCESS files, such as "COUNT.MDB" and "COUNT.ASP". You can delete the last ten files or suspected files to the Recycle Bin first, and then start IIS to see if the problem occurs again. We believe that after careful search, you will certainly find this file that you have been worrying about for some time.

When you find this file, you can delete it, or download it, fix it with ACCESS2000, and the problem is solved.

Case 2. Services process

Symptom: on Windows 2000-based computers, CPU usage in Services.exe may intermittently reach 100%, and the computer may stop responding (hang). When this problem occurs, users connected to the computer (if it is a file server or domain controller) are disconnected. You may also need to restart your computer. This symptom occurs if Esent.dll incorrectly handles the way files are flushed to disk.

Solution

Service Pack information: to resolve this issue, get the latest Microsoft Windows 2000 Service Pack. For additional information, click the article number below to view the corresponding article in the Microsoft knowledge base: 260910 how to get the latest Windows 2000 Service Pack

Fix information: Microsoft provides supported patches, but this program is only intended to solve the problems described in this article. This patch can be applied only if the computer encounters a specific problem mentioned in this article. This patch may be subject to other tests. Therefore, if this issue does not seriously affect you, Microsoft recommends that you wait for the next Windows 2000 Service Pack that includes this patch.

To resolve this issue immediately, contact Microsoft Product support Services to obtain this patch. For a complete list of Microsoft Product support Services phone numbers and support charges, visit the Microsoft Web website:

Note: in special cases, if Microsoft support professionals determine that a specific update will solve your problem, you can waive the phone support service fee normally charged. Support fees will be charged normally for other support issues and issues that cannot be resolved by a specific update.

The following table lists the file properties (or updated properties) for the global version of this patch. The dates and times of these files are listed in coordinated Universal time (UTC). When you view the file information, it is converted to local time. To understand the time difference between UTC and local time, use the time zone tab of the date and time tool in the Control Panel.

Status: Microsoft has confirmed that this is a problem with the Microsoft products listed at the beginning of this article. This issue was originally corrected in Microsoft Windows 2000 Service Pack 4.

III. Factors of application software

In general, the operation of large-scale application software will consume a lot of resources of CPU and memory, and sometimes the performance of these applications can not be brought into full play because of some improper network configuration, which leads to the phenomenon of resource consumption and ineffectiveness.

Here are some solutions from antivirus software, AVI video files, WORD files and network configuration.

Case 1. Antivirus software

As the new version of KV, Jinshan, rising have joined the random monitoring of web pages, plug-ins and emails, which undoubtedly increases the burden of the system. Treatment: there is basically no reasonable way to deal with, try to use the least monitoring services. Shutting down these corresponding monitoring services is the most direct way to solve this kind of problem.

Case 2. AVI video file

In Windows XP, system fake death may occur after clicking a large AVI video file, resulting in 100% utilization of the exploere.exe process. This is because the system has to scan the file first, check all parts of the file, and establish an index. If the file is large, it will take a long time and result in CPU occupancy of 100%. Solution: right-click the folder where the video file is saved, select Properties-> General-> Advanced, and remove the check box in front of the check box "allow indexing service to index the folder for quick search".

Case 3. WORD file

Dealing with larger Word documents when CPU usage is too high, this problem will generally cause computer fake death, these are all due to WORD's spelling and grammar check, just open WORD's "tools-options", enter the "Spelling and Grammar" tab and remove the hook from the check box of "check spelling when typing" and "check grammar when typing".

Case 4. Network configuration

When your Windows2000/xp is used as a server, when you receive a connection request from port 445, the system will allocate memory and a small amount of CPU resources to serve these connections. This will happen when the load is too heavy. To solve this problem, you can modify the registry, open the registry, find HKEY-LOCAL-MACHNE\ SYSTEM\ CurrentControlSet\ Services\ lanmanserver, and create a new DWORD value named "; maxworkitems"; on the right. Then double-click the value, and if your computer has more than 512 memory, set it to "; 1024"; if it is less than 512, set it to 256. in short, setting this value higher can improve the performance of the server.

IV. Virus factors

Failures with high CPU utilization are often caused by viruses, such as a large number of worms, which replicate rapidly within the system, resulting in high CPU resource utilization. The following introduces some corresponding solutions from shock wave worm and bride virus respectively.

Case 1. Shock wave worm virus

The LSASS buffer overflow vulnerability of Microsoft operating system is used to carry out remote active * * and contagion, resulting in system anomalies and serious network congestion, which is extremely harmful. if the virus is successful, it will occupy a lot of system resources and make the CPU occupancy rate reach 100%. The computer runs unusually slowly.

If you are infected with this virus, you can use the following four methods to remove it.

1. Patch when the network is cut off.

If you do not patch the corresponding vulnerability to the system, you will still suffer from the virus after connecting to the network. Users should first download the corresponding vulnerability patch, then disconnect the network, run the patch, and then go online after the patch is installed.

2. Clear the virus process in memory

To completely remove the virus, you should first clear the virus process in memory. Users can press CTRL+SHIFT+ ESC 3 or right-click the taskbar, select "Task Manager" from the pop-up menu to open the task manager interface, and then look in memory for a process named "avserve.exe". Find it and end it directly.

3. Delete virus files

When a virus infects the system, a virus file named avserve.exe is generated in the system installation directory (default is C:\ WINNT), and some virus files called; _ UP.exe are generated in the system directory (default is C:\ WINNT\ System32). Users can find these files, find them and delete them. If the system prompts you to delete files, you need to delete them in safe mode or DOS system.

4. Delete registry key value

The virus will be in the computer registry.

In the HKEY_LOCAL_MACHINE\ Software\ Microsoft\ Windows\ Currentversion\ Run key, a virus key named "avserve.exe" is established with the content of "% Windows%\ avserve.exe". In order to prevent the virus from running automatically the next time the system starts, the user should delete the key value by typing "REGEDIT" in the run menu and then calling up the Registry Editor to find the virus key value and delete it directly.

Case 2. Bride virus

This virus can run normally in operating systems such as Windows 2000 and Windows XP. When the virus is running, it will release a FUNLOVE virus and execute it, while the FUNLOVE virus will multiply in large numbers in the computer, causing the system to slow down and the network to be blocked. Virus removal method: this virus can be cleared with antivirus software such as trend, Norton, rising, Jinshan and Jiangmin.

In short, thoroughly clean the system memory and local hard disk with reliable antivirus software, and open the system setup software to see if there are any programs that start abnormally. Regularly update and upgrade antivirus software and firewalls, strengthen anti-virus awareness, master correct anti-virus knowledge, can effectively prevent viruses and *.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Servers

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report