# Node20 strange cpu load \>200% in first 5 minutes after (re)boot . malware infected?
**URL:** https://discourse.nodered.org/t/node20-strange-cpu-load-200-in-first-5-minutes-after-re-boot-malware-infected/84253
**Category:** Core Development
**Tags:** security
**Created:** [3 January 2024 12:37 UTC](https://discourse.nodered.org/t/node20-strange-cpu-load-200-in-first-5-minutes-after-re-boot-malware-infected/84253 "2024-01-03T12:37:22Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@sgalke](https://discourse.nodered.org/u/sgalke)
#### Post date: [3 January 2024 12:37 UTC](https://discourse.nodered.org/t/node20-strange-cpu-load-200-in-first-5-minutes-after-re-boot-malware-infected/84253/1 "2024-01-03T12:37:22Z")
upgrading my two dozen raspberry pis to latest node-red and node20 versions, i see a mysterious increase in processor load \> 200% (using top cmd) _only_ after (re)boot of machine w/ node-red & node20 for exact 5 (!) minutes. start/stop of nod-red/node then does not excessively increase processor load.
this happens only under node20 on all raspberry pi models 2B .. 4B under buster, bullseye, bookworm even after fresh install with the initial empty flow.
how can this be??? i neither have knowledge nor resources to research what is going on.
is it "only me"? if not, how can i help?
---
### Author:  [@Colin](https://discourse.nodered.org/u/Colin)
#### Post date: [4 January 2024 15:28 UTC](https://discourse.nodered.org/t/node20-strange-cpu-load-200-in-first-5-minutes-after-re-boot-malware-infected/84253/2 "2024-01-04T15:28:03Z")
Welcome to the forum @sgalke.
What processes are hogging the processor?
Edit: I have upgraded a Pi 4 to nodejs 20 and don't see any such problem.
---
### Author:  [@sgalke](https://discourse.nodered.org/u/sgalke)
#### Post date: [4 January 2024 16:01 UTC](https://discourse.nodered.org/t/node20-strange-cpu-load-200-in-first-5-minutes-after-re-boot-malware-infected/84253/3 "2024-01-04T16:01:28Z")
initially node, then node-red. all other processes are normal ( mostly 0% or a few % processor time ). After exactly 5 minutes after the restart, the spook is over.
---
### Author:  [@Colin](https://discourse.nodered.org/u/Colin)
#### Post date: [4 January 2024 16:32 UTC](https://discourse.nodered.org/t/node20-strange-cpu-load-200-in-first-5-minutes-after-re-boot-malware-infected/84253/4 "2024-01-04T16:32:30Z")
Is node-red apparently operating normally during that time?
After the 5 minutes is up, run
`journalctl -u nodered -b 0 --no-pager`
and copy/paste the output here. Copy/paste please, not screenshot. Preferably do this on a system that does not produce a lot of output in the node-red log.
---
### Author:  [@sgalke](https://discourse.nodered.org/u/sgalke)
#### Post date: [4 January 2024 16:52 UTC](https://discourse.nodered.org/t/node20-strange-cpu-load-200-in-first-5-minutes-after-re-boot-malware-infected/84253/5 "2024-01-04T16:52:57Z")
ok. just a moment, i will reinstall node20 ...
---
### Author:  [@sgalke](https://discourse.nodered.org/u/sgalke)
#### Post date: [4 January 2024 17:25 UTC](https://discourse.nodered.org/t/node20-strange-cpu-load-200-in-first-5-minutes-after-re-boot-malware-infected/84253/6 "2024-01-04T17:25:57Z")
After reinstalling Node20, I can't reproduce the issue. Strange. Sorry for the noise. Thank you for your help.
---
### Author:  [@system](https://discourse.nodered.org/u/system)
#### Post date: [4 March 2024 17:26 UTC](https://discourse.nodered.org/t/node20-strange-cpu-load-200-in-first-5-minutes-after-re-boot-malware-infected/84253/7 "2024-03-04T17:26:31Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.