lg6wb5hamf.exe takes all memory with powershell. what is it?

goskypeit 1 Reputation point
2021-06-23T04:41:00.88+00:00

I have a 2012R2 server at my work place. It runs extremely slow because almost always its CPU at 100% and memory at 96%. I found it is because a lot of powershell processes, dozens of them, running at the same time. I can kill them one by one without any negative consequences. Then CPU usage can go as low as 5% and memory at 25%,

In fact, it is something called lg6wb5hamf.exe running these powershell processes. Have no idea what it is. Can anybody help?

Windows Server 2012
Windows Server 2012
A Microsoft server operating system that supports enterprise-level management, data storage, applications, and communications.
1,526 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Eleven Yu (Shanghai Wicresoft Co,.Ltd.) 10,671 Reputation points Microsoft Vendor
    2021-06-23T07:21:56.887+00:00

    Hi,

    lg6wb5hamf.exe should be a third party program or application. You might need to identify what application is running the powershell processes.

    Please try few of the troubleshooting methods below to further narrow down the root cause of the issue.

    Method 1: Check Startup items.

    Open Task Manger, and check if you have any unknown script that starts when Windows starts, from the Startup tab.
    You can disable the startup items from task manager.
    Right click on the item, click on Open file location and delete the file.

    Method 2: Start your computer in Safe Mode and check.

    If the issue is caused by any third party script or application, you can start your computer in safe mode and check if you still face the issue, if the issue doesn’t persists in safe mode, you can then boot the computer in clean boot, check How to determine what is causing the problem after you do a clean boot from the clean boot article and once you find the problem and fix it, look for the topic Reset the computer to start normally after clean boot troubleshooting.

    Method 3: Run Process Monitor.

    If the issue still persist, I suggest you to download and run Process Monitor this will give better view of what process are running on the system.

    Thanks,

    ----------

    If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.

    0 comments No comments