CPU usage fluctuating up to 100%

[SilentSal]

My Win2k PC has just started having a problem whereby the CPU usage fluctuates for no apparent reason and sometimes goes up to 100%. It becomes unresponsive and unusable. This happens when no applications are running. It is very difficult to tell from Task Manager exactly which process is tying up the CPU - it doesn't seem to be any of them! Sometimes, the CPU usage looks as though it is low, but the system is still very very very slow - we're talking a minute or two before the mouse will move (maybe it's so slow that the Task Manager display is not keeping up?). I have run AVG and Trend Micro antivirus, which found nothing. Adaware and Spybot find nothing significant. The system seems to be ok in Safe mode. I ran HijackThis and this is the logfile:

Logfile of HijackThis v1.98.2
Scan saved at 15:00:09, on 16/11/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\SYSTEM32\Ati2evxx.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\devldr32.exe
C:\Program Files\Creative\SBLive2k\AudioHQ\AHQTB.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\Program Files\Spam Inspector Outlook Express\Spam Inspector Outlook Express Edition\piiserviceOE.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINNT\system32\taskmgr.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\NETGEAR\WG121 Configuration Utility\wlancfg8.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Multipass\My Documents\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINNT\Updreg.exe
O4 - HKLM\..\Run: [AudioHQ] C:\Program Files\Creative\SBLive2k\AudioHQ\AHQTB.EXE
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb09. exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [piiserviceOE] "C:\Program Files\Spam Inspector Outlook Express\Spam Inspector Outlook Express Edition\piiserviceOE.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINNT\system32\spool\drivers\w32x86\3\E_SRCV02. EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: CAMEDIA Master.lnk = C:\Program Files\OLYMPUS\CAMEDIA Master 4.1\CM_camera.exe
O4 - Global Startup: Smart Wizard Wireless Settings.lnk = C:\Program Files\NETGEAR\WG121 Configuration Utility\wlancfg8.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\msjava.dll
O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/game...s/y/pote_x.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab30149.cab
O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zonelabs.com/bin/free/cm/ICSCM.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab28578.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/acti..._v1-0-3-12.cab
O16 - DPF: {4E888414-DB8F-11D1-9CD9-00C04F98436A} (Microsoft.WinRep) - https://webresponse.one.microsoft.co...veX/winrep.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/178cd9fb...p/RdxIE601.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/...eInstaller.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://activex.microsoft.com/objects/ocget.dll
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.4.2) -
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab28578.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://www.warwick.ac.uk/newwebcam/AxisCamControl.ocx
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_02) -
O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll
O20 - AppInit_DLLs: PAVWAIT.DLL

Any help would be very much appreciated as this is driving me nuts!

Thanks!

SilentSal

[Booter]

There's nothing in your log that looks nasty. There are a couple entries I've not seen before, might be something new, might be OK. Try this:

In an idle system (no windows open):

Press cntl/alt/del to bring up task manager
Select Processes tab
Set View/Update speed to low

When the system is busy, try to identify the process name that is showing the most CPU usage. If you find one, give us the name.


Bruce

[Dfyant]

The log looks fine to me. How much Virtual Memory do you have? Does this happen only when you are connected to the net? Do you have AVG and Trend Micro running at the same time?

Hopefully we'll nail this...

Regards,

Chris

..if it ain't broke, I'm determined to fix it..

[SilentSal]

Thanks. I didn't realise you could set the update speed to lower - duh! I will try that when the system starts going slow again... seems to be behaving itself at the moment...

SilentSal

[SilentSal]

There's 768MB virtual memory. The problem does seem to start when I'm connected to the net, but disconnecting doesn't always seem to fix it. And it will go for long periods without a problem - it didn't happen at all yesterday and only once today (so far!)

There is possibly some connection with my Netgear WG121 wireless usb adapter. I have noticed that if the Netgear randomly "dies", then the system becomes very slow. However, earlier today I ejected the Netgear hardware and the CPU usage continued to fluctuate wildly until after a reboot.

I do wonder if it has anything to do with a windows security update - MS Security Bulletin MS04-011. It says here http://support.microsoft.com/kb/841382 that there is a problem with this update which "causes Microsoft Windows 2000 to try repeatedly to load drivers that do not load successfully". But I installed this update back in May and have only just started experiencing problems. Why would it suddenly start causing problems?

I have AVG installed and ran the Trend Micro online scanner just to be sure - but not at the same time as AVG was scanning.

SilentSal

[Dfyant]

One other thing to remember is with your paging file, make sure that it kicks off where your RAM finishes. If you have 512MB RAM start the paging file size at 512 up to whatever you want. If there is a hold from the end of the RAM to the beginning of the pagefile, you will reduce performance substantially...

Regards,
Chris

..if it ain't broke, I'm determined to fix it..

[SilentSal]

Never played with virtual memory before... I assume you mean that the "Initial size" of the virtual memory should be set to the amount of physical RAM that I have - ie 512MB?

If it is that causing the slow system, then why has it suddenly become a problem when wasn't before?

Thanks

SilentSal

[Dfyant]

Yep, you got it..the starting size needs to be where your RAM finishes.
It may not fix the problem, but hey..it's a little fine tuning that may eleviate it

...gotta run
Chris

..if it ain't broke, I'm determined to fix it..

[BertImmenschuh]

A tip, if you look in Win2000 Help [and WinXP Help and Support] and a Search for paging file you'll note the recommendation that it be 1.5 times the physical RAM. 1GB RAM x 1.5 = 1.5GB paging file size.

<font color=blue>Good judgement comes from experience, and experience comes from bad judgement.</font color=blue> <font color=green>Experience is a wonderful thing. It enables you to recognize a mistake when you make it again.</font color=green>

[cmon]

Fastest option for virtual ram is using a fixed size. Meaning initial and max size set as the same. In order to dump the memory into the pagefile for hibernation it needs to be atleast the size of the ram. Like mentioned 1.5 times is recommended.

As for your problem with the cpu fluctuating you will have to figure out which process is causing this. Use iether the taskmanager or download taskman from here http://www.geocities.com/arcanewood/.

Maybe to much to mention but have you tried defragging your drive ? you also mention not being able to move your mouse. I' ve had this same problem after updating my video card driver .
http://members.home.nl/marf/Infinite%20Loop.html
Going back to the old driver fixed it.

Keyboard error or no keyboard present


press F1 to continue ; Del to enter setup <P ID="edit"><FONT class="small">Edited by cmon on 11/22/04 18:28.</FONT></P>