Issue php-cgi.exe used high CPU usage

[Khairul]

We are running plesk on windows. We found that php-cgi.exe was used almost 100% cpu usage. We have installed antivirus on the server and when we run the scanning, it will quarantine php-cgi.exe files. We are suspect that php-cgi.exe has been compromise. Is there any other way to revert back with clean php-cgi.exe because we have a few domain that running on this server. Once antivirus quarantine that files, pages will showed 500 ERROR.

Hope somebody can guide me to a fix it.

Thanks..

 

[IgorG]

For example, file C:\Program Files (x86)\Plesk\Additional\PleskPHP72\php-cgi.exe is a part of Plesk PHP7.2 component. That's mean that you can just reinstall this component through Plesk installer.

 

[PavelV]

you should open Task Manager in Windows, go to details tab, and then take a look at column "User name" for php-cgi.exe process that consumes 100% CPU.
Based on this user you can find then subscription which consumes most CPU time. php-cgi.exe is just PHP worker, it will eat 100% of CPU if PHP script on domain is written this way. Most probably, the problem is not with php-cgi.exe itself but with bad scripts located on some of domains.

you can then limit this IIS pool to have limited amount of CPU and thus heal your server.

 

[PavelV]

One more thing:
If you are using Plesk 17.8, you can try to do the following. Install "Repair kit" extension for Plesk. Then in Tools&Settings-> Assistanceand troubleshooting section you can see Process list screen, where you can see the same information already splitted by domains. You can check which domain consumes most CPU time.

 

[Khairul]

you should open Task Manager in Windows, go to details tab, and then take a look at column "User name" for php-cgi.exe process that consumes 100% CPU.
Based on this user you can find then subscription which consumes most CPU time. php-cgi.exe is just PHP worker, it will eat 100% of CPU if PHP script on domain is written this way. Most probably, the problem is not with php-cgi.exe itself but with bad scripts located on some of domains.

you can then limit this IIS pool to have limited amount of CPU and thus heal your server.

Yes, we found one of the domain used php-cgi.exe with high cpu. Once we disable it, CPU usage totally reduce. Probably bad script. Still looking on this..thanks a lot.