Problems with CPU usage

[MataFin]

Hi all.

I have problems with cpu usage with uttorent, it always claims up almost 100% usage in short time.

I have 2.8GHz p4 with 1gig of mem, so that wont be a reason, hopefully

UT version is 1.7.5.

I have avast antivirus, and i readed from faqs and other topics about the avast, i have turned the p2p shield off.

I give you prosess explorers screenshot for addittional information, if that helps.

Any ideas you ppl why the cpu usage claims always to the almost 100%?

There is the Prosess Explorer img

http://img180.imageshack.us/img180/8972/problemcb7.jpg

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 23:22:02, on 9.1.2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16574)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Sygate\SPF\smc.exe

C:\Ohjelmat\Avast4\aswUpdSv.exe

C:\Ohjelmat\Avast4\ashServ.exe

C:\WINDOWS\Explorer.EXE

C:\Ohjelmat\Avast4\ashDisp.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\NetLimiter 2 Pro\nlsvc.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\slserv.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\NetLimiter 2 Pro\NLClient.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\Windows Live\Messenger\usnsvc.exe

C:\WINDOWS\system32\taskmgr.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\DOCUME~1\Mata\LOCALS~1\Temp\Rar$EX00.609\procexp.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

C:\Program Files\uTorrent\uTorrent.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.leeman-automatisering.nl/startpagina

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Ohjelmat\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O4 - HKLM\..\Run: [avast!] C:\Ohjelmat\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [smcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui

O4 - HKLM\..\Run: [iSUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\TextBridgePro11.0\opware32.exe

O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Ohjelmat\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Ohjelmat\SPYBOT~1\SDHelper.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Ohjelmat\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Ohjelmat\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Ohjelmat\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Ohjelmat\Avast4\ashWebSv.exe

O23 - Service: BlueSoleilCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe

O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: BsHelpCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe

O23 - Service: DirectX Service (Dyjyd) - Unknown owner - C:\WINDOWS\system32\directx.exe (file missing)

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe

O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe

O23 - Service: NetLimiter (nlsvc) - Locktime Software - C:\Program Files\NetLimiter 2 Pro\nlsvc.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

--

End of file - 6945 bytes

Process explorer

Process PID CPU Description Company Name

System Idle Process 0 0.75

Interrupts n/a Hardware Interrupts

DPCs n/a 0.75 Deferred Procedure Calls

System 4 16.42

smss.exe 760 Windows NT:n istunnonhallinta Microsoft Corporation

csrss.exe 820 Client Server Runtime Process Microsoft Corporation

winlogon.exe 844 Windows NT -kirjaus Microsoft Corporation

explorer.exe 1336 Resurssienhallinta Microsoft Corporation

ashDisp.exe 2012 avast! service GUI component ALWIL Software

rundll32.exe 572 Suorita DLL sovelluksena Microsoft Corporation

ctfmon.exe 396 CTF Loader Microsoft Corporation

msnmsgr.exe 3924 0.75 Windows Live Messenger Microsoft Corporation

firefox.exe 2800 Firefox Mozilla Corporation

uTorrent.exe 3476 35.07

notepad.exe 3348 Notepad Microsoft Corporation

procexp.exe 3160 1.49 Sysinternals Process Explorer Sysinternals

HijackThis.exe 644 HijackThis Trend Micro Inc.

notepad.exe 2936 Notepad Microsoft Corporation

Process: uTorrent.exe Pid: 3476

Name Description Company Name Version

ACTIVEDS.dll ADs Router Layer DLL Microsoft Corporation 5.01.2600.2180

adsldpc.dll ADs LDAP Provider C DLL Microsoft Corporation 5.01.2600.2180

ADVAPI32.dll Windows 32 -pohjainen lisä-API Microsoft Corporation 5.01.2600.2180

ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.05.2284.0000

CLBCATQ.DLL Microsoft Corporation 2001.12.4414.0308

COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.00.2900.2982

comdlg32.dll Yleisten valintaikkunoiden dll-tiedosto Microsoft Corporation 6.00.2900.2180

COMRes.dll Microsoft Corporation 2001.12.4414.0258

ctype.nls

DNSAPI.dll DNS Client API DLL Microsoft Corporation 5.01.2600.2938

GDI32.dll GDI Client DLL Microsoft Corporation 5.01.2600.3159

hnetcfg.dll Home Networking Configuration Manager Microsoft Corporation 5.01.2600.2180

IMM32.DLL Windows XP IMM32 API Client DLL Microsoft Corporation 5.01.2600.2180

Iphlpapi.dll IP Helper API Microsoft Corporation 5.01.2600.2912

kernel32.dll Windows NT BASE APIn asiakas-DLL Microsoft Corporation 5.01.2600.3119

locale.nls

mdnsNSP.dll Bonjour Namespace Provider Apple Computer, Inc. 1.00.0003.0001

MPRAPI.dll Windows NT MP Router Administration DLL Microsoft Corporation 5.01.2600.2180

MSCTF.dll MSCTF Server DLL Microsoft Corporation 5.01.2600.2180

msctfime.ime Microsoft Text Frame Work Service IME Microsoft Corporation 5.01.2600.2180

msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.2600.2180

mswsock.dll Microsoft Windows Sockets 2.0 -palveluntarjoaja Microsoft Corporation 5.01.2600.2180

NETAPI32.dll Net Win32 API DLL Microsoft Corporation 5.01.2600.2976

ntdll.dll NT Layer -kirjasto (DLL) Microsoft Corporation 5.01.2600.2180

ole32.dll Microsoft OLE Windowsia varten Microsoft Corporation 5.01.2600.2726

oleaut32.dll Microsoft Corporation 5.01.2600.3139

rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 5.01.2600.2938

RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 5.01.2600.3173

rtutils.dll Routing Utilities Microsoft Corporation 5.01.2600.2180

SAMLIB.dll SAM Library DLL Microsoft Corporation 5.01.2600.2180

SETUPAPI.dll Windows Setup API Microsoft Corporation 5.01.2600.2180

SHELL32.dll Windows-käyttöliittymän yleinen DLL Microsoft Corporation 6.00.2900.3241

SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.00.2900.3059

sortkey.nls

sorttbls.nls

SSSensor.dll ScreenSaver Sensor Sygate Technologies, Inc. 5.05.0000.0005

unicode.nls

USER32.dll Windows XP USER API Client DLL Microsoft Corporation 5.01.2600.3099

uTorrent.exe

UxTheme.dll Microsoft UxTheme Library Microsoft Corporation 6.00.2900.2180

VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 5.01.2600.2180

winrnr.dll LDAP RnR Provider DLL Microsoft Corporation 5.01.2600.2180

WLDAP32.dll Win32 Ldap API dll Microsoft Corporation 5.01.2600.2180

WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 5.01.2600.2180

WS2HELP.dll Windows NT:n Windows Socket 2.0 Helper Microsoft Corporation 5.01.2600.2180

wshtcpip.dll Windows Sockets Helper DLL Microsoft Corporation 5.01.2600.2180

[DreadWingKnight]

http://forum.utorrent.com/viewtopic.php?id=29748

[MataFin]

Ill give you also that, just a minute

First post edited, your welcome..

[DreadWingKnight]

Just judging from the screenshot in the first post, I'd say the firewall (sygate) is having problems with either some of its settings or some of uTorrent's settings.

Additionally, why netlimiter?

[MataFin]

The netlimiter is for ftp-server then when i use it..

And i have tried that also without the sygate.. turning off and terminating the program.. wont help

[jewelisheaven]

These are extra DLLs injected into uT's process:

mdnsNSP.dll    Bonjour Namespace Provider    Apple Computer, Inc.    1.00.0003.0001
SSSensor.dll    ScreenSaver Sensor    Sygate Technologies, Inc.    5.05.0000.0005

Actually it wouldn't make sense for either to affect CPU usage, but well... you never know.

[MataFin]

And what i should do with those DLLs? Rename / remove or something else?

[jewelisheaven]

If you search for Bonjour on the forum you can see other users' experience with it. I pointed out the other because I'm not sure what it is. Is it possible to make an exception for utorrent in that Sygate program?

[Firon]

Bonjour shouldn't cause any problems.

Try uninstalling Avast... If it doesn't help, just reinstall it. :/

[MataFin]

jewelisheaven:

Yes i can make expection for utorrent in sygate, i already tried, but it wont help at all, the sygates cpu usage stays only little bit lower. Is the utorrent how safe program, if i let the utorrent without any rules?

Firon:

I tried now to unistall of avast, same thing happend without it.. Now it is back.

This is unbeliveable problem, i cant get any point why that happens.. Could it be hardware problem?

I think it is just the xp what makes those problems, it is so easy to get messed up

But if somebody still have any ideas, just tell me.. Want to get the prog to work..

[jewelisheaven]

Well you can try keeping Sygate and Avast uninstalled at the same time (be sure to reboot after)... and see if the problem persists. If it does there's another incompatibility. Before reinstalling either Avast or Sygate would you mind posting a NEW HiJackThis and Process Explorer DLL list?

Sorry for all the work, but you're doing a very methodical process to eradicate the problem

[MataFin]

jewelisheaven

No problem about the work. Im so old user already these are not any problem for me

I'll try uninstall both, then give you new Hijackthis and Prosess Explorer logs..

But later, have to go to work..

I have already consider about reinstall of xp.. It is almost a year when i last time installed xp..

[jewelisheaven]

wellllll plllllease don't do that until you've exhausted all other running programs. you may have found a bug

I did go all of 2007 without reinstalling XP once (among 8 personal computers and 3 watchdog systems) which was amazing news at the new years lan party.

Don't work too hard, heh it is only thursday.

[MataFin]

Okey, i wont reinstall yet Let see if we can found the problem, maybe a bug

My other pc is now 3rd year with same xp installation, that is pretty good i would say

I can't do too hard at work, it is so boring.. Maybe too much coffee is only vice..

[Firon]

Are you using the latest Sygate version?

[MataFin]

Firon

I dont know. 5.5 build 2710? Is it latest?

EDIT:

I updated the sygate for 5.6 build 2808

The sygates update maybe helped for a bit, but not sure.. It is not that kind of what it should be.. Now it claims anymore for 90% of cpu.. I also uninstalled few other programs, maybe that is something to do with..