BoggyP Posted July 1, 2009 Report Share Posted July 1, 2009 Hi I have a problem that I require help with. It seems that if I leave µtorrent on for an extended period of time (sometimes as low as 2 hours) while my computer is idle (and only once while it wasn't) than CPU usage gets higher than normal. The things that tend to get really CPU usage heavy (constantly fluctuating) is services.exe, DPCs and System Idle Process. I'd assume the Idle one is cool, don't know about the others. The leaving on of µtorrent causes my pc to slow down. I usually have to restart the pc for it to be usable again. Everything goes slowly. Sometimes there is lag on the mouse and keyboard as well forcing me to restart.Also I've noticed that if µtorrent is left on and isn't yet extremely slow than if I download anything in firefox or any other browser I've tried that it tends to cause the computer to slowdown immensely. That always causes keyboard and mouse lag and can also usually be fixed by restarting.Here is the hijack:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:53:35 AM, on 7/1/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)Boot mode: NormalRunning processes:E:\WINDOWS\System32\smss.exeE:\WINDOWS\system32\winlogon.exeE:\WINDOWS\system32\services.exeE:\WINDOWS\system32\lsass.exeE:\WINDOWS\system32\svchost.exeE:\WINDOWS\System32\svchost.exeE:\WINDOWS\system32\svchost.exeE:\WINDOWS\system32\spoolsv.exeC:\RECYCLER\services.exeE:\PROGRA~1\AVG\AVG8\avgwdsvc.exeE:\PROGRA~1\AVG\AVG8\avgfws8.exeE:\Program Files\Bonjour\mDNSResponder.exeE:\Program Files\Java\jre6\bin\jqs.exeE:\WINDOWS\system32\perfs.exeE:\PROGRA~1\AVG\AVG8\avgam.exeE:\PROGRA~1\AVG\AVG8\avgrsx.exeE:\PROGRA~1\AVG\AVG8\avgnsx.exeE:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exeE:\WINDOWS\system32\svchost.exeE:\PROGRA~1\AVG\AVG8\avgemc.exeE:\Program Files\AVG\AVG8\avgcsrvx.exeE:\WINDOWS\system32\wscntfy.exeE:\Program Files\uTorrent\uTorrent.exeE:\WINDOWS\system32\ctfmon.exeE:\WINDOWS\System32\svchost.exeE:\WINDOWS\system32\taskmgr.exeE:\WINDOWS\system32\winmine.exeC:\Program Files\Mozilla Firefox\firefox.exeE:\DOCUME~1\Yo\LOCALS~1\Temp\Rar$EX00.000\procexp.exeE:\Program Files\Trend Micro\HijackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.localF2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,C:\RECYCLER\services.exeO2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dllO2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - E:\Program Files\AVG\AVG8\avgssie.dllO2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - E:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLLO2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre6\bin\ssv.dllO2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dllO2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dllO2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - E:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dllO2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program Files\Java\jre6\bin\jp2ssv.dllO2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dllO2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dllO3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dllO4 - HKCU\..\Run: [DAEMON Tools Lite] "E:\Program Files\DAEMON Tools Lite\daemon.exe" -autorunO4 - HKCU\..\Run: [msnmsgr] "E:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /backgroundO4 - HKCU\..\Run: [AnyDVD] E:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exeO4 - HKCU\..\Run: [ctfmon.exe] E:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [LaCie Backup] E:\Program Files\LaCie\Backup Software\\LaCieBackup.exe /backgroundO4 - HKCU\..\Run: [AdobeUpdater] "E:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe"O4 - HKCU\..\Run: [MSMSGS] "E:\Program Files\Messenger\msmsgs.exe" /backgroundO8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.htmlO8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.htmlO8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dllO9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLLO9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exeO16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CABO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1226362051359O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1226634903718O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - E:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLLO18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - E:\Program Files\AVG\AVG8\avgpp.dllO20 - AppInit_DLLs: E:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLLO20 - Winlogon Notify: avgrsstarter - E:\WINDOWS\SYSTEM32\avgrsstx.dllO23 - Service: Adobe LM Service - Adobe Systems - E:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exeO23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - E:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exeO23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - E:\PROGRA~1\AVG\AVG8\avgemc.exeO23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - E:\PROGRA~1\AVG\AVG8\avgwdsvc.exeO23 - Service: AVG8 Firewall (avgfws8) - AVG Technologies CZ, s.r.o. - E:\PROGRA~1\AVG\AVG8\avgfws8.exeO23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - E:\Program Files\Bonjour\mDNSResponder.exeO23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - E:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exeO23 - Service: Google Desktop Manager 5.8.809.23506 (GoogleDesktopManager-092308-165331) - Google - E:\Program Files\Google\Google Desktop Search\GoogleDesktop.exeO23 - Service: Google Update Service (gupdate1c995334c7c035a) (gupdate1c995334c7c035a) - Google Inc. - E:\Program Files\Google\Update\GoogleUpdate.exeO23 - Service: Google Software Updater (gusvc) - Google - E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - E:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exeO23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exeO23 - Service: NBService - Nero AG - E:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exeO23 - Service: Network Connections Logs (Netlogs) - Unknown owner - E:\WINDOWS\system32\perfs.exeO23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - E:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exeO23 - Service: NMIndexingService - Nero AG - E:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\WINDOWS\system32\nvsvc32.exeO23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - E:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exeO23 - Service: Roxio Upnp Server 9 - Sonic Solutions - E:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exeO23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - E:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exeO23 - Service: RoxMediaDB9 - Sonic Solutions - E:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exeO23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - E:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exeO23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Professional Business XII.SP2c\RpcAgentSrv.exeO23 - Service: ServiceLayer - Nokia. - E:\Program Files\PC Connectivity Solution\ServiceLayer.exeO23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - E:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exeO23 - Service: TVersityMediaServer - Unknown owner - C:\Program Files\TVersity\Media Server\MediaServer.exe--End of file - 10172 bytesHere is the process thing:Process PID CPU Description Company NameSystem Idle Process 0 57.58 DPCs n/a 27.27 Deferred Procedure Calls procexp.exe 3784 15.15 Sysinternals Process Explorer Sysinternals - www.sysinternals.comwscntfy.exe 3744 Windows Security Center Notification App Microsoft Corporationwmiprvse.exe 1108 WMI Microsoft Corporationwinmine.exe 3564 Entertainment Pack Minesweeper Game Microsoft Corporationwinlogon.exe 940 Windows NT Logon Application Microsoft CorporationuTorrent.exe 3552 µTorrent BitTorrent, Inc.taskmgr.exe 1660 Windows TaskManager Microsoft CorporationSystem 4 svchost.exe 1276 Generic Host Process for Win32 Services Microsoft Corporationsvchost.exe 1404 Generic Host Process for Win32 Services Microsoft Corporationsvchost.exe 1668 Generic Host Process for Win32 Services Microsoft Corporationsvchost.exe 1844 Generic Host Process for Win32 Services Microsoft Corporationsvchost.exe 1584 Generic Host Process for Win32 Services Microsoft Corporationsvchost.exe 1172 Generic Host Process for Win32 Services Microsoft Corporationsvchost.exe 1440 Generic Host Process for Win32 Services Microsoft Corporationsvchost.exe 3596 Generic Host Process for Win32 Services Microsoft CorporationStarWindServiceAE.exe 1812 StarWind iSCSI Target (Alcohol Edition) Rocket Division Softwarespoolsv.exe 1948 Spooler SubSystem App Microsoft Corporationsmss.exe 820 Windows NT Session Manager Microsoft Corporationservices.exe 988 Services and Controller app Microsoft Corporationservices.exe 400 perfs.exe 912 notepad.exe 6072 Notepad Microsoft CorporationmDNSResponder.exe 660 Bonjour Service Apple Computer, Inc.lsass.exe 1000 LSA Shell (Export Version) Microsoft Corporationjqs.exe 840 Java Quick Starter Service Sun Microsystems, Inc.Interrupts n/a Hardware Interrupts HijackThis.exe 1752 HijackThis Trend Micro Inc.firefox.exe 740 Firefox Mozilla Corporationctfmon.exe 3348 CTF Loader Microsoft Corporationcsrss.exe 916 Client Server Runtime Process Microsoft Corporationavgwdsvc.exe 616 AVG Watchdog Service AVG Technologies CZ, s.r.o.avgrsx.exe 1124 AVG Resident Shield Service AVG Technologies CZ, s.r.o.avgnsx.exe 2032 AVG Network scanner Service AVG Technologies CZ, s.r.o.avgfws8.exe 632 AVG Firewall Service AVG Technologies CZ, s.r.o.avgemc.exe 2160 AVG E-Mail Scanner AVG Technologies CZ, s.r.o.avgcsrvx.exe 2316 AVG Scanning Core Module - Server Part AVG Technologies CZ, s.r.o.avgam.exe 1720 AVG Alert Manager AVG Technologies CZ, s.r.o.alg.exe 3636 Application Layer Gateway Service Microsoft CorporationHere are the DLLs:http://www.box.net/shared/2h0oip1okmI couldn't find a way to copy and paste so I took a screen shot and cropped it.If there is anyway you can help let me know Thanks,BoggyP Link to comment Share on other sites More sharing options...
DreadWingKnight Posted July 1, 2009 Report Share Posted July 1, 2009 If you had highlighted the utorrent.exe process in process explorer when you saved the list, it would have the dll list. Link to comment Share on other sites More sharing options...
BoggyP Posted July 1, 2009 Author Report Share Posted July 1, 2009 1) I did that. I assumed that's what I had to do for the first list.2) I just uninstalled AVG and my computer is now running at normal speed, I havn't restarted, so maybe it was a problem with AVG? I wouldn't say that the problem is solved because I have to leave the computer idle for a bit to know. So take a look at the log and let me know.Thanks,BoggyP Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.