Forum Home
Press F1
 
Thread ID: 90659 2008-06-11 13:21:00 Unusually high CPU usage! Plz help! Kilobyte70 (13859) Press F1
Post ID Timestamp Content User
677596 2008-06-11 13:21:00 Hi I have had an unusually high cpu usage for the past 2 days. Especially when using firefox or safari or similar programs. I have over 300GB of hard disk space and almost 3gb of ram. I have never had over 80% cpu usage even even using high-end games but now the cpu usage is over 95% at times with just firefox open. I have ran multiple scans using norton, spybot, avg, ccleaner, super anti-spyware and still the problem presists. I even dismantled my system and cleaned out both the fans to no avail. I am a bit hesitant about reformatting as I have abt 200gb of data on my drives. Now as a last resort I am asking for outside help. I am posting the hijackthis log below:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:58:47, on 11/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Mozilla Firefox 3 Beta 5\firefox.exe
C:\WINDOWS\system32\taskmgr.exe
D:\Program Files\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.windowstreams.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = local
O1 - Hosts: 66.98.148.65 auto.search.msn.com
O1 - Hosts: 66.98.148.65 auto.search.msn.es
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - D:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.ex e"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\RunOnce: [] C:\Program Files\Internet Explorer\iexplore.exe www.symantec.com
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O4 - Startup: Yahoo! Widgets.lnk = C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
O8 - Extra context menu item: &Search - ?p=ZKfox000
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 4.00\AMVConverter\grab.html
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.05\AMVConverter\grab.html
O8 - Extra context menu item: Download all links with IDM - D:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - D:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - D:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.05\MediaManager\grab.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Encarta Search Bar - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O14 - IERESET.INF: START_PAGE_URL=http://dial.blueyonder.co.uk
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - www-secure.symantec.com
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - messenger.zone.msn.com
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - messenger.zone.msn.com
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: !SASWinLogon - D:\Program Files\SASWINLO.dll
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe

--
End of file - 7601 bytes

Any help will be much appreciated. Thanks.
Kilobyte70 (13859)
677597 2008-06-11 13:40:00 Tick these then tick fix checked

Close browsers, did you add these, if you didnt tick them

O1 - Hosts: 66.98.148.65 auto.search.msn.com

O1 - Hosts: 66.98.148.65 auto.search.msn.es

O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE

O8 - Extra context menu item: &Search - ?p=ZKfox000

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)

Could be Super antispyware thats causing it

Uninstall all versions of Java yours is out of date. Link is in my sig

Then reboot

I dont know if this HAS to be in startup

O4 - HKCU\..\RunOnce: [] C:\Program Files\Internet Explorer\iexplore.exe www.symantec.com
Speedy Gonzales (78)
677598 2008-06-11 14:08:00 Thx 4 the reply. Oh btw I have uninstalled Norton so the symentec at startup shouldn't probably be there. About the super spyware I installed it after the problem started so it could not be it. I will post the results asap.(after I get back home) Kilobyte70 (13859)
677599 2008-06-11 16:56:00 When usage goes that high, you need to note down the exact process(es) that are taking up the most usage other than Firefox just so we can track down the source of your problem better. beeswax34 (63)
677600 2008-06-11 21:03:00 Kilobyte70

Firefox has problems with Flash images on "certain" web sites, very high CPU usage. This is widely reported all over the net but no one seems to have a good solution.

Wait till the problem occurs again, shut down tabs to determine which web site causes it. Go back and when it happens again right click on the moving flash image and select "image quality" select "low". This is not a fix as it only sets it for that image and is lost when you revisit the page, but it will confirm my suspicion. You can disable flash but not overly desirable.

I don't know about safari, and I am pretty certain it is NOT spyware.

I have recently switched to Firefox 3 and have not seen this problem pop up 'yet'. I see this issue at home and work. Home is far less of a prob as I run a C2D at 3.3 gig that doesn't max, but this issue cause big probs on some soon to be replaced older P4 3.2 gig in house machines at work.
Battleneter2 (9361)
677601 2008-06-11 22:40:00 Here's list of the top 5 services running. firefox has at time gone upto 250mb when it was usually not over 75mb.
Firefox - 175,512
avgrsx - 47,392
svchost - 22,464
iexplorer.exe - 21,696
explorer.exe - 21,344

Here is the data from the performance monitor:
Totals
Handles - 11229
Threads - 510
Processes - 40

Commit Charge (K)
Total - 453628
Limit - 3908356
Peak - 456888

Physical Memory (K)
Total - 2030956
Available - 1368840
System Cache - 581484

Kernel Memory (K)
Total - 60580
Paged - 43736
Nonpaged - 13844

Processes - 40
CPU Usage - 89%
Commit Charge (PF Usage) - 442M/3816M)

Windows open - Mozilla Firefox & Task Manager.

Here is the list of add-ons on firefox:
Avg safesearch
Avg security toobar
Fast dial
IDM CC 5.3
Stumble Upon
RealPlayer Browser Plugin

Btw I am not sure that this problem is confined to firefox. I have had the same results in safari and IE. I should tell you that i had norton when the problem first appeared. It was only after norton failed to fix it that I uninstalled and installed AVG.

System Specs:
Windows XP Media Center Edition
Version 2002, Service Pack 2
Pentium(R) 4 CPU 3.06 GHz
2.63 GB Ram
Master Hard Drive - 80GB
Slave Hard Drive - 300 GB
Video Diver - ATI Radeon (256MB)
Audio Driver- Realtek HD Audio
Kilobyte70 (13859)
677602 2008-06-11 22:43:00 Some users of AVG8 have reported high CPU use.
How long has yours been installed.
Slim (4633)
677603 2008-06-11 22:50:00 As I said in the previous post and I quote:
"I should tell you that i had norton when the problem first appeared. It was only after norton failed to fix it that I uninstalled and installed AVG." :)
Kilobyte70 (13859)
677604 2008-06-12 02:58:00 OK, try this. Disable AVG and any other AV you might have.

Launch Firefox and go to a few sites like Youtube, nzherald.co.nz and any media rich sites. See if usage rockets up again.

Close Firefox and do the same with IE. This is just to see if its a browser problem or AVG is causing it somehow.
beeswax34 (63)
677605 2008-06-12 10:13:00 I have uninstalled AVG completely, Here is the cpu usage while watching video on youtube:
System Idle Usage - 50 -70
firefox.exe - 20-40

IE7
System Idle Usage: 60-80
iexplorer.exe - 20 - 30

Rest all processes fluctuating btw 0-3
Kilobyte70 (13859)
1 2