WUFDhost.exe constant 50% cpu usage

My son has a laptop running windoze 7 and he was complaining that its slowed down recently. I found a thing called WUFDhost.exe is using up 40-50% cpu all the time, so I guess that could be it.

Any ideas what I can do to sort this? I did a lot of googling already and I'm none the wiser.

C:\Windows\System32 is where it should be if it is the Win7/Vista OS.
If it is somewhere else it probably is a nasty.

Possible
http://support.microsoft.com/search/...host.exe&lsc=1

how would I know where the one that's running started up from?

I ran a full mbam scan already and deleted all found.

Download and run this nice utility, which will hopefully shed some light on why that particular process is using so much CPU:

Process Explorer

Actually, I did find and run that. It told me pretty much the same thing, which is that WUFDhost is hogging. But it didn't tell me anything more than that - probably because I didn't really know what to do. You got any advise on how to use that tool to learn more?

Does it disappear if you unplug all USB devices and reboot?

No its there all the time. There are no usb devices connected

What happens if you rename "wufdhost.exe", (to something like "wufdhost.exe.renamed")?

If WUFDhost.exe is running as it's own process, you should be able to find the origin path it's running from by right clicking the entry, choosing Properties and then looking at the Image Tab. The path is listed there.

If it's not running as it's own process, the above procedure will at least tell you what it is a subprocess of (the Parent listing.)

Quote:

---

Originally Posted by SpywareDr

What happens if you rename "wufdhost.exe", (to something like "wufdhost.exe.renamed")?

---

It won't let me rename a running app. If I go to task manager and end process it restarts immediately

Quote:

---

Originally Posted by HAN

If WUFDhost.exe is running as it's own process, you should be able to find the origin path it's running from by right clicking the entry, choosing Properties and then looking at the Image Tab. The path is listed there.

If it's not running as it's own process, the above procedure will at least tell you what it is a subprocess of (the Parent listing.)

---

It runs from windows system 32.

I tried booting to safe mode and renaming it - apparantly 'I need permission from trusted installer' to do this

Try running the System File Checker. Go to Start and type "cmd" without the quotes, then right-click cmd.exe and choose "Run as Administrator". Once at the Command Prompt, type "sfc /scannow" without the quotes. You may need your Windows 7 disc, though most of the time you don't.

I ran that and as you say it sure took a while. The result was a bit dissapointing though;

Windows Resource Protection did not find any integrity violations

any further ideas?

Have you tried searching the Registry for "wufdhost.exe"?

Attach the hard drive to another computer and then rename the file? (PITA I know, but ...).