Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

CPU Usage 99%


  • Please log in to reply

#1
deepkent

deepkent

    Member

  • Member
  • PipPip
  • 16 posts
I'd be very grateful if anyone can suggest an answer to a problem that has me baffled and tearing my hair out.

For several weeks now, even when no programs are running, my CPU usage will suddenly go up to 99% according to Task Manager. As a result, everything slows to a crawl, it takes several minutes to open documents, and opening a program means going away, making a cup of coffee and hoping it will be open when I return. Sometimes programs, and my ADSL connection, won't open at all and I usually have to reset the computer because it won't shut down in the normal way. On one occasion, I laboriously saved every amendment to a 30-page Word document while editing, had to reset the computer, and found that none of my changes had been saved. Sometmes the CPU usage is up there as soon as I boot up, so I don't even get a few hours free from this problem.

I lived with it for a while, because it didn't happen all the time, and rebooting (or resetting) often cured it for a few hours. But now it's always the same. So far, I've done the following:

1. Run Ad-Aware and Spy Sweeper and removed what they found.
2. Disconnected all peripherals and run the machine as basic as possible.
3. Replaced my memory.

None of these helps.

I ran an anti-virus program with up-to-date definition files to do a deep scan. I left it running overnight, but it has stuck for the last four hours on C:\Windows\Prefetch\IMAPI.EXE-00F69F6B.pf, which is 0kb. I have tried to delete this file. which is dated a few months ago, not today, but access is denied - I'm told it's in use by another program. I have removed everything else from the Prefetch folder, with no problems - to be on the safe side (since I am not sure that I should be doing this), I saved them to a folder on an external drive, so I can replace them if necessary. But I can do nothing with IMAPI.EXE-00F69F6B.pf - if my computer is running ok, and I right-click on that file, the whole system seizes up and I have to reset. (Which suggests that this may be the root of my problem?)

I tried deleting everything in the folder from a command prompt in XP, but was again told that that file was in use. I have also run windows-xp-prefetch-clean-and-control.exe, but the program freezes, and all I can do is reset the computer. I ran WashAndGo and chose "Remove Prefetch files and MS-Setupcache", again without success - it says it's done it, but the imapi file is still there. I also chose "find 0-byte files" and selected "delete", with the same result. My next idea was to start the computer with a Win98 start-up floppy to access the command prompt without XP starting, and then delete everything in the Prefetch directory - but I'd be grateful to know whether that's a good idea.

I have tried all these methods again in safe mode, without success.

I also ran Hijack This!, but I don't want to post the log without permission, because it will take up so much space.

I've asked a computer firm to quote me for a new CPU, but that seems a bit drastic. I would rather not reinstall XP if I can avoid it.

Apart from the actual typing, it has taken me nearly an hour to upload this question, because everything responds so slooooooowly.

If anyone can help, I'll have your children!

Thanks in advance.
  • 0

Advertisements


#2
load

load

    New Member

  • Member
  • Pip
  • 4 posts
Are you running Trend Micro PC-cillin?
  • 0

#3
deepkent

deepkent

    Member

  • Topic Starter
  • Member
  • PipPip
  • 16 posts
No, I am running V-Com System Suite, which has anti-virus, firewall and the usual things. The definition files are updated aver couple of days.
  • 0

#4
load

load

    New Member

  • Member
  • Pip
  • 4 posts
There was a problem recently with a Trend Micro update that caused this same behavior. (99% CPU utilization) If you're not using Trend Micro I'm afraid I can't help. Sorry, and good luck.
  • 0

#5
deepkent

deepkent

    Member

  • Topic Starter
  • Member
  • PipPip
  • 16 posts
Thank you.
  • 0

#6
kms618kms

kms618kms

    Member

  • Member
  • PipPip
  • 10 posts
Post a HijackThis log
  • 0

#7
deepkent

deepkent

    Member

  • Topic Starter
  • Member
  • PipPip
  • 16 posts
Thank you. The log follows:

Logfile of HijackThis v1.99.1
Scan saved at 10:33:52, on 03/05/05
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\VCOM\SYSTEM~1\MXTask.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\VCOM\SYSTEM~1\mxtask.exe
C:\WINDOWS\tppaldr.exe
C:\WINDOWS\System32\dslagent.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp4.exe
P:\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\WINDOWS\System32\devldr32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
P:\GPSoftware\Directory Opus\dopus.exe
P:\Skype\Phone\Skype.exe
P:\SIERRA\CardStudio\PLNRnote.exe
P:\Webshots\webshots.scr
P:\DigiGuide TV Guide\client01.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpctr.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpHost.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
P:\Mozilla Firefox\firefox.exe
J:\DESKTOP\Programs NEW\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

http://www.national-.../p/home/home.do
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

c:\WINDOWS\PCHealth\HelpCtr\System\panels\blank.htm
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} -

C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_12_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - P:\Adobe\Acrobat

5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI

RoboForm\RoboForm.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI

RoboForm\RoboForm.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} -

C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_12_0.dll
O4 - HKLM\..\Run: [TPP Auto Loader] C:\WINDOWS\tppaldr.exe
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
O4 - HKLM\..\Run: [FinePrint Dispatcher v4] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp4.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [VirtualCloneDrive] "P:\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [DOpus] P:\GPSoftware\Directory Opus\dopus.exe
O4 - HKCU\..\Run: [Skype] "P:\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [WashAndGo - Cleanup of old Backupfiles] P:\WashAndgo\checker.exe /check
O4 - Startup: DigiGuide.lnk = P:\DigiGuide TV Guide\Client.exe
O4 - Startup: Webshots.lnk = P:\Webshots\Launcher.exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk =

C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O4 - Global Startup: Event Planner Reminders Tray Icon.lnk = P:\SIERRA\CardStudio\PLNRnote.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Customize Menu &4 - file://C:\Program Files\Siber Systems\AI

RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Fill Forms &] - file://C:\Program Files\Siber Systems\AI

RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Save Forms &[ - file://C:\Program Files\Siber Systems\AI

RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber

Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms &] - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program

Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI

RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms &[ - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program

Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program

Files\Yahoo!\Messenger\yhexbmes0527.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program

Files\Yahoo!\Messenger\yhexbmes0527.dll
O9 - Extra button: IeToolbox - {6B208C50-1E95-4BD2-8F50-02C61AB2AD0D} - P:\EzBrowser\ietoolbox.dll
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI

RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm &2 - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program

Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: ppctlcab - http://ppupdates.ca....er/ppctlcab.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) -

http://ppupdates.ca....r/axscanner.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) -

http://us.dl1.yimg.c...s/yinst0401.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) -

http://www.crucial.c.../cpcScanner.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) -

http://us.dl1.yimg.c...utocomplete.cab
O16 - DPF: {F54C1137-5E34-4B95-95A5-BA56D4D8D743} (Secure Delivery) -

http://www.gamespot....ownload/kdx.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{43FD6E69-8F54-4CC6-83BC-D4BCD2C2DE2E}: NameServer =

193.189.244.197 193.189.244.205
O18 - Protocol: asp - {8D32BA61-D15B-11D4-894B-000000000000} - C:\Program Files\Common

Files\EzTools\hsppp.dll
O18 - Protocol: hsp - {8D32BA61-D15B-11D4-894B-000000000000} - C:\Program Files\Common

Files\EzTools\hsppp.dll
O18 - Protocol: x-asp - {8D32BA61-D15B-11D4-894B-000000000000} - C:\Program Files\Common

Files\EzTools\hsppp.dll
O18 - Protocol: x-hsp - {8D32BA61-D15B-11D4-894B-000000000000} - C:\Program Files\Common

Files\EzTools\hsppp.dll
O18 - Protocol: x-zip - {8D32BA61-D15B-11D4-894B-000000000000} - C:\Program Files\Common

Files\EzTools\hsppp.dll
O18 - Protocol: zip - {8D32BA61-D15B-11D4-894B-000000000000} - C:\Program Files\Common

Files\EzTools\hsppp.dll
O20 - Winlogon Notify: WB - P:\Stardock\Object Desktop\WindowBlinds\fastload.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common

Files\Acronis\Schedule2\schedul2.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program

Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: OmniForm Printer - Unknown owner - C:\WINDOWS\System32\ofps.exe
O23 - Service: SystemSuite Task Manager - V Communications, Inc. -

C:\PROGRA~1\VCOM\SYSTEM~1\MXTask.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common

Files\Ulead Systems\DVD\ULCDRSvr.exe
  • 0

#8
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts

If anyone can help, I'll have your children!

Thanks in advance.

View Post



Like I haven't heard that one before.....

------------------------

What did you do with your hijacklog? Leave them as is...it's easier to digest.

imapi.exe......

start > run
services.msc
<enter>

Scroll down the list and search for cd-burning service. See it? Double click it, stop the service hitting STOP button (don't change the startup type), then you should be able to delete that file...it's not the cause of your problem, but if you want to delete it, or the others, no harm.

Are you running windowsblinds?

Try uninstalling that.
  • 0

#9
deepkent

deepkent

    Member

  • Topic Starter
  • Member
  • PipPip
  • 16 posts
Thanks for your response, Gerry, and my apologies for taking so long to reply, but everything is so slow, I occasionally give up trying to open my browser by the time night falls and the hourglass is still there.

1. Don't know what went wrong with the HJT log: I simply copied everything in the text file and posted it as was. Word wrap was on, but the Notepad window wasn't fully expanded - maybe that was the problem. Do you need me to post the log again?

2. The imapi file: the CD burning service was switched off (see Services_Imapi.jpg attached). But when I try to delete it, I still get the same error message (Imapi_delete_error.jpg). Also, if it is not the cause of my problem, (a) why can't I delete it? (b) why does my whole system freeze and have to be reset if I right-click on it? and © why does my virus check stop on that particular file and refuse to go any further? What do you think of my idea of rebooting with a Win98 start-up disc in the floppy drive and deleting it from there?

4. No, I don't have Windowblinds; I did, but I uninstalled it some weeks ago.

3. I also attach two screen grabs of Task Manager, showing my CPU usage and the running processes, in case that suggests something to you.

Thanks for your help and your patience, but nothing seems to work so far.

Attached Thumbnails

  • Services_Imapi.jpg
  • Imapi_delete_error.jpg
  • Task_performance.jpg
  • Task_processes.jpg

  • 0

#10
nestorey

nestorey

    Member

  • Member
  • PipPipPip
  • 150 posts
you'd save a lot of time and pregnancies if you just wiped the drive clean...you can always make your current drive a slave to a master drive running windows whatever and save any important files before you wipe it out...good luck

Edited by nestorey, 04 May 2005 - 03:48 AM.

  • 0

#11
deepkent

deepkent

    Member

  • Topic Starter
  • Member
  • PipPip
  • 16 posts
That's just what I want to avoid, because of the days I would have to spend reinstalling everything. I'd also like to know what the problem is, so that I can prevent it happening again; but thanks anyway.
  • 0

#12
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
God I LOVE SCREEN CAPTURES!!!!!!!!!!

Let's not worry about the IMAPI thing...it's a red herring. The interesting thing is the services at 97 percent.

Want you to do two things.

One, give me a hijackthis log (link in my signature)

Two, download and run ProcessExplorer from www.sysinternals.com and give me a screen capture of that running
  • 0

#13
deepkent

deepkent

    Member

  • Topic Starter
  • Member
  • PipPip
  • 16 posts
Sorry - thought they helped. You'll have to forgive my ignorance.

You are, of course, right about the Imapi file. I finally deleted it, and as you say, it makes no difference. I attach a screenshot of Process Explorer running - I compressed it to save space - I hope you can still read it.

Another apology about my ignorance, but I don't understand what "link in my signature" means. I clicked on your signature, but could see nowhere to put the HJT log.

Attached Thumbnails

  • Proc_Exp.jpg

  • 0

#14
HandicapTexan

HandicapTexan

    New Member

  • Member
  • Pip
  • 1 posts
I have ran Spysweeper with Antivirus, upon finishing the scan, I have found over 45 vunerabilities. They includes viruses, trojans, and even hooks. So I uninstalled V-com System Suite 8 pro from my computer. I find that my computer doesn;t act up or everything doesn;t take ages to open up. :)

What most people need to do is evaluate the vendors out there. I have found two vendors who are worth looking at. As matter of fact, I have made one permanently my fav, thats Webroot Spysweeper with Antivirus. Most people don;t understand and know that the main engine is Sophos®. Thats what the multi-billion dollar corporations or enterprise servers uses. I have been armed to the teeth from having Spysweeper and AvG professional. You will be astonished when you remove V-com off the computer. I can actually open pages without hanging. Right now at the moment, my cpu usage is standing at....
0% idling. I am thankful to know that the problem was the vendor named V-com System Suite. You must try out to see what is hogging your precious resources.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP