Troubleshoot sustained high CPU usage

What you will achieve

Find which process is causing sustained high CPU usage and fix it without killing random services or disabling Windows Update permanently.

1) Identify the culprit in Task Manager

1. Press Ctrl + Shift + Esc to open Task Manager.
2. Click the CPU column header to sort by usage.
3. Note the process name — common offenders: MsMpEng.exe (Defender scan), SearchIndexer.exe, browser tabs, or a runaway app.
4. Right-click → Go to details for the exact executable path.

2) Use Resource Monitor for deeper view

1. Task Manager → Performance tab → Open Resource Monitor.
2. On the CPU tab, expand the high-usage process and see associated handles and modules.
3. Check if disk or network columns spike alongside CPU — sometimes "100% CPU" is really disk thrashing.

3) Fix common causes

1. Windows Update: let it finish or pause and retry during off-hours.
2. Defender full scan: schedule scans for idle times in Windows Security → Virus & threat protection → Manage settings → Scan options.
3. Startup bloat: Settings → Apps → Startup — disable unnecessary items.
4. Driver issue: update or roll back the GPU/chipset driver in Device Manager.

4) Generate a Performance Monitor log (persistent issues)

logman create trace HighCPU -o C:\Temp\HighCPU.etl -p "Microsoft-Windows-Kernel-Processor-Power" 0xffffffffffffffff
logman start HighCPU
timeout /t 60
logman stop HighCPU

5) Power throttling check

1. Settings → System → Power & battery → Energy recommendations (Windows 11) lists background hogs.
2. Task Manager → Details → right-click column → Select columns → add Power throttling.

6) When to suspect malware

1. Unknown process from C:\Users\<user>\AppData\Random at high CPU — run Windows Security full scan offline if needed.

7) System Interrupts high CPU

1. Often driver or hardware IRQ issue — update BIOS, disable unused devices, check DPC latency with LatencyMon tool if audio/video stutters.

8) Svchost grouping

1. Task Manager → expand Service Host: Local Service — identifies which service inside svchost hogs CPU.
2. Resource Monitor → CPU tab → Services column sorts by hosted service name.

Verification checklist

Log top process name and CPU percent when issue occurs — if same process weekly, permanent fix (driver, config) beats repeated kills.

1. Reboot once after changes that affect services, drivers, or firmware.
2. Confirm the original problem is resolved under normal daily use, not only immediately after the fix.
3. Note date, Windows version (Settings → System → About), and what changed in your personal runbook for next time.

Quick reference paths

• Task Manager → Performance
• resmon.exe
• perfmon.exe
• Admin tools: press Win + X for Terminal (Admin), Device Manager, and Computer Management.

Related guides

• Power plans for laptops vs desktops
• Debloat Windows without breaking updates