Utorrent using a lot of Virtual Memory - slowing computer down

sim21 · January 13, 2008

Hi - I am using utorrent 1.7.5, it is using a lot of Virtual memory - it uses 33040k memory and 1,671,360K VM, way higher than any other program i run and slows everything else down. I am running a CA firewall but have added utorrent to the exceptions.

I have run a process explorer:

Process PID CPU Description Company Name

System Idle Process 0

Interrupts n/a Hardware Interrupts

DPCs n/a Deferred Procedure Calls

System 4

smss.exe 380 Windows NT Session Manager Microsoft Corporation

csrss.exe 696 Client Server Runtime Process Microsoft Corporation

winlogon.exe 860 Windows NT Logon Application Microsoft Corporation

services.exe 996 1.52 Services and Controller app Microsoft Corporation

svchost.exe 1580 Generic Host Process for Win32 Services Microsoft Corporation

mdmcls32.exe 2224 mdmcls32.exe

mdmcls32.exe 304 mdmcls32.exe

msmsgs.exe 1212 Windows Messenger Microsoft Corporation

WLLoginProxy.exe 2932 WLLoginProxy.exe Microsoft Corporation

CAGlobal.exe 1872 CallingID Ltd.

CAGlobalLight.exe 3508 CallingID Ltd.

svchost.exe 1776 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 412 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 704 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 1140 Generic Host Process for Win32 Services Microsoft Corporation

spoolsv.exe 1812 Spooler SubSystem App Microsoft Corporation

UmxCfg.exe 1952 HIPS Configuration Engine CA

UmxFwHlp.exe 1968 HIPS Firewall Helper Service CA

UmxPol.exe 300 HIPS Policy Manager Service CA

UmxAgent.exe 464 HIPS Event Manager CA

capfsem.exe 2160 CA Personal Firewall Application CA, Inc.

AppleMobileDeviceService.exe 1168 Apple Mobile Device Service Apple, Inc.

isafe.exe 1272 CA ISafe Service Computer Associates International, Inc.

ITMRTSVC.exe 1448 eTrust PestPatrol Real-time service CA, Inc.

svchost.exe 596 Generic Host Process for Win32 Services Microsoft Corporation

vetmsg.exe 1308 CA Anti-Virus Realtime Messaging Service CA, Inc.

svcprs32.exe 1444 svcprs32.exe

alg.exe 460 Application Layer Gateway Service Microsoft Corporation

ccprovsp.exe 1080 CCProvSP CA, Inc.

ppctlpriv.exe 1344 CA Anti-Spyware Elevation service CA, Inc.

iPodService.exe 3852 iPodService Module Apple Inc.

lsass.exe 1056 LSA Shell (Export Version) Microsoft Corporation

explorer.exe 2212 Windows Explorer Microsoft Corporation

SOUNDMAN.EXE 2820 Realtek Sound Manager Realtek Semiconductor Corp.

iTunesHelper.exe 2944 iTunesHelper Module Apple Inc.

cctray.exe 3156 CA Common Tray CA, Inc.

cappactiveprotection.exe 4028 CAPPActiveProtection Application CA, Inc.

cfgmng32.exe 3276 cfgmng32.exe

capfasem.exe 3388 92.42 CA Personal Firewall capfasem Module CA, Inc.

QOELoader.exe 3680 QOELoader Application CA

cavrid.exe 3760 CA Anti-Virus Realtime Infection Report CA, Inc.

apdproxy.exe 3868 Adobe Photoshop Album Starter Edition 3.2 component Adobe Systems Incorporated

prevxcsi.exe 4064 Prevx Computer Security Investigator Prevx

ctfmon.exe 872 CTF Loader Microsoft Corporation

GoogleToolbarNotifier.exe 1112 GoogleToolbarNotifier Google Inc.

msnmsgr.exe 1832 Messenger Microsoft Corporation

NMBgMonitor.exe 2104 Nero Home Nero AG

msimn.exe 3132 Outlook Express Microsoft Corporation

QOEApp.exe 264 QOEApp Application CA

IEXPLORE.EXE 2912 Internet Explorer Microsoft Corporation

procexp.exe 3084 4.55 Sysinternals Process Explorer Sysinternals

utorrent.exe 3952 1.52

Process: utorrent.exe Pid: 3952

Name Description Company Name Version

ACTIVEDS.dll ADs Router Layer DLL Microsoft Corporation 5.01.2600.2180

adsldpc.dll ADs LDAP Provider C DLL Microsoft Corporation 5.01.2600.2180

ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 5.01.2600.2180

appHelp.dll Application Compatibility Client Library Microsoft Corporation 5.01.2600.2180

ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.05.2284.0000

browseui.dll Shell Browser UI Library Microsoft Corporation 6.00.2900.3231

CIDLinkAdvisor.dll CallingID Ltd. 1.01.0000.0064

CLBCATQ.DLL Microsoft Corporation 2001.12.4414.0308

COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.00.2900.2982

comdlg32.dll Common Dialogs DLL Microsoft Corporation 6.00.2900.2180

COMRes.dll Microsoft Corporation 2001.12.4414.0258

CRYPT32.dll Crypto API32 Microsoft Corporation 5.131.2600.2180

CRYPTUI.dll Microsoft Trust UI Provider Microsoft Corporation 5.131.2600.2180

CSCDLL.dll Offline Network Agent Microsoft Corporation 5.01.2600.2180

cscui.dll Client Side Caching UI Microsoft Corporation 5.01.2600.2180

ctype.nls

DNSAPI.dll DNS Client API DLL Microsoft Corporation 5.01.2600.2938

GDI32.dll GDI Client DLL Microsoft Corporation 5.01.2600.3159

hnetcfg.dll Home Networking Configuration Manager Microsoft Corporation 5.01.2600.2180

IMAGEHLP.dll Windows NT Image Helper Microsoft Corporation 5.01.2600.2180

index.dat

Iphlpapi.dll IP Helper API Microsoft Corporation 5.01.2600.2912

ISafeIf.dll CA ISafe Interface DLL Computer Associates International, Inc. 8.00.0008.0000

kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 5.01.2600.3119

LINKINFO.dll Windows Volume Tracking Microsoft Corporation 5.01.2600.2751

locale.nls

MPRAPI.dll Windows NT MP Router Administration DLL Microsoft Corporation 5.01.2600.2180

MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 5.01.2600.2180

MSCTF.dll MSCTF Server DLL Microsoft Corporation 5.01.2600.2180

msi.dll Windows Installer Microsoft Corporation 3.01.4000.4039

MSVCP60.dll Microsoft ® C++ Runtime Library Microsoft Corporation 6.02.3104.0000

msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.2600.2180

mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 5.01.2600.2180

NETAPI32.dll Net Win32 API DLL Microsoft Corporation 5.01.2600.2976

ntdll.dll NT Layer DLL Microsoft Corporation 5.01.2600.2180

ntshrui.dll Shell extensions for sharing Microsoft Corporation 5.01.2600.2180

ole32.dll Microsoft OLE for Windows Microsoft Corporation 5.01.2600.2726

OLEACC.dll Active Accessibility Core Component Microsoft Corporation 4.02.5406.0000

oleaccrc.dll Active Accessibility Resource DLL Microsoft Corporation 4.02.5406.0000

OLEAUT32.dll Microsoft Corporation 5.01.2600.3139

QOEHook.dll QOEHook Dynamic Link Library CA 6.00.0001.0028

rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 5.01.2600.2938

rnapxs.dat

RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 5.01.2600.3173

rtutils.dll Routing Utilities Microsoft Corporation 5.01.2600.2180

SAMLIB.dll SAM Library DLL Microsoft Corporation 5.01.2600.2180

Secur32.dll Security Support Provider Interface Microsoft Corporation 5.01.2600.2180

SETUPAPI.dll Windows Setup API Microsoft Corporation 5.01.2600.2180

shdocvw.dll Shell Doc Object and Control Library Microsoft Corporation 6.00.2900.3231

SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.00.2900.3241

SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.00.2900.3231

sortkey.nls

sorttbls.nls

SXS.DLL Fusion 2.5 Microsoft Corporation 5.01.2600.3019

unicode.nls

USER32.dll Windows XP USER API Client DLL Microsoft Corporation 5.01.2600.3099

USERENV.dll Userenv Microsoft Corporation 5.01.2600.2180

utorrent.exe

uxtheme.dll Microsoft UxTheme Library Microsoft Corporation 6.00.2900.2180

VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 5.01.2600.2180

VetRedir.dll CA ISafe LSP DLL Computer Associates International, Inc. 8.00.0008.0000

WININET.dll Internet Extensions for Win32 Microsoft Corporation 6.00.2900.3231

winrnr.dll LDAP RnR Provider DLL Microsoft Corporation 5.01.2600.2180

winsflt.dll winsflt.dll 5.00.0038.0000

WINTRUST.dll Microsoft Trust Verification APIs Microsoft Corporation 5.131.2600.2180

WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 5.01.2600.2180

WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 5.01.2600.2180

WS2HELP.dll Windows Socket 2.0 Helper for Windows NT Microsoft Corporation 5.01.2600.2180

wshtcpip.dll Windows Sockets Helper DLL Microsoft Corporation 5.01.2600.2180

xpsp2res.dll Service Pack 2 Messages Microsoft Corporation 5.01.2600.2180

and a Hijack this:

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe

C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe

C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe

C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe

C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe

C:\WINDOWS\system32\svcprs32.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfsem.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe

C:\WINDOWS\cfgmng32.exe

C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-6.0.1.28\QOELoader.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe

C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe

C:\Program Files\PrevxCSI\prevxcsi.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\MSN Messenger\MsnMsgr.Exe

C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe

C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAPPActiveProtection.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe

C:\WINDOWS\system32\mdmcls32.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\WebsiteInspector\Toolbar\CAGlobal.exe

C:\Program Files\utorrent\utorrent.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe

C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\WebsiteInspector\Toolbar\CAGlobal.exe

C:\Program Files\Outlook Express\msimn.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-6.0.1.28\qoeapp.exe

C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\WebsiteInspector\Light\CAGlobalLight.exe

C:\WINDOWS\system32\taskmgr.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll

O2 - BHO: CA Toolbar Helper - {FBF2401B-7447-4727-BE5D-C19B2075CA84} - C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\WebsiteInspector\Toolbar\CallingIDIE.dll

O3 - Toolbar: CA Toolbar - {10134636-E7AF-4AC5-A1DC-C7C44BB97D81} - C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\WebsiteInspector\Toolbar\CallingIDIE.dll

O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [cctray] "C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe"

O4 - HKLM\..\Run: [dvHighMem] C:\WINDOWS\cfgmng32.exe

O4 - HKLM\..\Run: [cafw] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\cafw.exe -cl

O4 - HKLM\..\Run: [capfasem] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe

O4 - HKLM\..\Run: [capfupgrade] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfupgrade.exe

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-6.0.1.28\QOELoader.exe"

O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe"

O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [PrevxCSI] "C:\Program Files\PrevxCSI\prevxcsi.exe" -boot

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000

O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html

O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html

O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html

O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/MyFunCardsFWBInitialSetup1.0.0.15-3.cab

O16 - DPF: {68A2C3BD-7809-11D3-8ACF-0050046F2F9A} (AXELPlayer Class) - http://www.mindavenue.com/Downloads/AXELPlayerAX_Win32.cab

O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: CaCCProvSP - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe

O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PPCtlPriv - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe

O23 - Service: HIPS Event Manager (UmxAgent) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe

O23 - Service: HIPS Configuration Interpreter (UmxCfg) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe

O23 - Service: HIPS Firewall Helper (UmxFwHlp) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe

O23 - Service: HIPS Policy Manager (UmxPol) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe

O23 - Service: VET Message Service (VETMSGNT) - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe

O23 - Service: WinSock Svchost Manager (WinSvchostManager) - Unknown owner - C:\WINDOWS\system32\svcprs32.exe

--

End of file - 9410 bytes

Can anyone help as to what I can change to fix this. Thankyou

jewelisheaven · January 13, 2008

bad firewall / av ?

CIDLinkAdvisor.dll        CallingID Ltd.    1.01.0000.0064
ISafeIf.dll    CA ISafe Interface DLL    Computer Associates International, Inc.    8.00.0008.0000
QOEHook.dll    QOEHook Dynamic Link Library    CA    6.00.0001.0028
rnapxs.dat           
VetRedir.dll    CA ISafe LSP DLL    Computer Associates International, Inc.    8.00.0008.0000
winsflt.dll    winsflt.dll        5.00.0038.0000

Generally speaking any DLLs outside of \system32 or Microsoft Corp. are seen as possible sources of this problem. If disabling / removing the applications OR FEATURES to which these DLLs belongs eliminates the leak in uT it is confirmed the problem is with the other program not uT.

I see prevx A proactive user intent on stamping out mal/ad/crapware you are I see Then I presume you know what O4 - HKLM\..\Run: [dvHighMem] C:\WINDOWS\cfgmng32.exe does and that it's not harmful. In that case you are clean except for th possible incompatibility with your AV suite.

Could you try disabling those features so they no longer run injected into uT and see if the problem persists and report back?

sim21 · January 13, 2008

It seems that the longer utorrent is open the more VM it uses - is this normal?

I disable the firewall and after a few minute the memory usage dropped from app 16000k down to 6000k(although this is rising again, but the VM remained around 72000k (also rising).

I have got prevx and also in my security suite a spyware program which i run regularly.

Still with the firewall disable taking up a minute or so just to open a web page.

Is this of any help?

jewelisheaven · January 13, 2008

Separate issues which I will elaborate on below:

uT uses Virtual Memory which grows as you use it for more things. I can tell you this much, that uT by itself does NOT use the amount you say when there are no conflicting programs installed/injected: (source URL with my production uT stats = http://forum.utorrent.com/viewtopic.php?pid=289574#p289574 ). Increasing without bound is CERTAINLY a sign of an incompatible/broken program injecting into uT and causing the behaviour.

Have you changed your disk cache from the default of 32 MiB usage (helps with a bottlenecked mainbus or harddrive)? I have seen where in ADDITION to the broken program making uT unuseable it also b0rkes multi-cpu computers. Do you ahve a P4 with HT? Or a multi(dual/quad) core CPU? If setting the affinity of uT to one core fixes the freezing then definitely a program is conflicting. Also uploading a picture of your Speed Guide settings while knowing your speedtest results will help troubleshoot if your connection is being overloaded as well as the program incompatibility issue.

Firon · January 13, 2008

Uninstall, not disable.

sim21 · January 13, 2008

OK - my computer is an AMD XP 2800+, so its a few years old, The disk cache - I have not touched and dont really know how to, I dont like to touch things unless I know what I am doing - if it will help and you can help me do so I will give it a try.

The picure of the speed guide - where do I get that from?? I will do and upload, I know my max upload is 128kb/s and download 512.

I can uninstal my firewall - if i do so should i activate the windows xp firewall or should I get another one that is compatible and if so which one??

Thanks for your help - as you have probably guessed I am not to technically minded!

Firon · January 13, 2008

What spyware application is it anyway?

Your best bet is to post a HijackThis log.

And yes, just re-enable the Windows firewall in the meantime. It may not be Prevx, we're just trying to find out what is.

sim21 · January 13, 2008

The spyware application is part of the whole security suite - CA security suite - by VET, which comprises of antivirus, spyware, firewall and parental controls.

I posted a Hijack this log above - done this morning, is that sufficient or do you need another one.?

jewelisheaven · January 13, 2008

He means post a new one after you've uninstalled that (possibly) problem software. What I would like to see is no injected DLLs in the new Process Explorer log. I'm not sure what Firon is looking for.

sim21 · January 13, 2008

Ok - I have uninstalled my firewall and have run a hijack this:

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe

C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\iTunes\iTunesHelper.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe

C:\WINDOWS\cfgmng32.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-6.0.1.28\QOELoader.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe

C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe

C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe

C:\Program Files\PrevxCSI\prevxcsi.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\MSN Messenger\MsnMsgr.Exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe

C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe

C:\WINDOWS\system32\svcprs32.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAPPActiveProtection.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe

C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe

C:\WINDOWS\system32\mdmcls32.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\Program Files\MSN Messenger\usnsvc.exe