windows Vista 100% Cpu load problem

flash_mz

Distinguished
Feb 15, 2007
72
0
18,630
hey guys. i hope anyone one can help me on this one.

i don't know why but my cpu is reaching 100% load while im not doing nothing... im using vista ultimate edition and i use a gadget to monitor the cpu usage, and it fills out 100% on every core. im using a Intel Q6600 @ 2.4GHz.
but when i open the task manager, the cpu usage drops down to normal again... but when i close the Task manager, it goes up to 100%.

i don't know why it does this, is it because of a windows update? cuz yesterday i wanst having this problem. i was planning on instaling CRYSIS, and the windows recommended an update (before i could play the game i must download the update) so i did, i left the computer doing the update.. and today when i instal CRYSIS, i see that i have a problem with the CPU usage...

can anyone help me plz? i just don't know what to do :(..

tks in advance:)

i don't know if it help but here you have the applications that are instaled on my pc:

-Adobe Flash Player ActiveX
-Adobe Flash Player Plugin
-Ava Find
-Crysis(R)
-Intel(R) Graphics Media Accelerator Driver
-Intle(R) PRO Network Connections 12.1.12.0
-Internet Download Manager
-Java(TM)6 Update 2
-Java(TM)6 Update 3
-Kaspersky Anti-Virus 6.0
-LimeWire PRO 4.15.0
-Messenger Plus! Live
-Microsoft Office Professional Plus 2007
-Microsoft Visual C + + 2005 redistributable
-Mozilla Firefox (2.0.0.11)
-NVIDIA Drivers
-Pro Evolution Soccer 2008
-Punkbuster Services
-Realtek High Definition Audio Driver
-Spybot - Search & Destroy 1.4
-Virtua Tennis 3
-Vista Codec Package
-Windows Live Installer
-Windows Live Messenger
-Windows Live Sign-in Assistant
-WinRAR archiver
 

MrsBytch

Distinguished
Jul 31, 2006
95
0
18,630
Did you format the drive when you installed vista? I didnt the first time either and I had the same problem.
I ended up re-installing vista (did a complete format this time) and the problem went away.
 

flash_mz

Distinguished
Feb 15, 2007
72
0
18,630
this is not the first time that this has happened to me... its the second time.. the first time i formated the system partition and instaled windows again.
my dad had the same problem. and he did something to make it go away but he doesnt remember.. do you have any other suggestions besides formatting?

tks :)
 

flash_mz

Distinguished
Feb 15, 2007
72
0
18,630
nope.. i tryed ctrl+alt+del but when i do that ... the cpu load goes down so i can't see if it's a program that's consuming it...

and i un-installed the last update before this problem and it still persists =(..

anymore suggestions?
 
Try shutting down any suspect programs, such as that AVA search for example. Maybe it's stuck in some sort of indexing loop. Shut down all running programs one by one until you hit the right one.

I'd also scan for spyware. Try another free one such as adaware if spybot doesn't see anyhthing.
Also try shutting down Kaspesrsky.

If all else fails try a system restore.
 
Not sure. Hard to say until you narrow it down. Something is running. Either a program or some windows process. Could be virus or spyware or it could be something simply malfunctioning, either hardware or software.
Try booting into safe mode (press f8 after startup, just before windows starts to load) and see if it is happening there.
 
Another idea: start task manager, highlight 'explorer.exe' and then 'end process'. Now, still in task manager, go to file 'new task (run) and type 'explorer' and hit enter. See if you still have problem.

Does the PC seem slow and unresponsive during these 100% episodes? Is it happening all the time and after every boot?
 

MrsBytch

Distinguished
Jul 31, 2006
95
0
18,630
Do you still have the windows old folder? If you do, then that means you didnt format. It caused me problems even when I deleted the folder. There was some kind of conflict, even loading a webpage was 100% cpu usage and dog slow. I couldnt deal with it anymore. I formatted and the problem is now gone.
 


Great point. I should have told him to look into this at the outset. I think he's gone now though.
 

flash_mz

Distinguished
Feb 15, 2007
72
0
18,630
my UAC is disabled and i downloaded a probram to see the cpu usage and it still tells me that im using 100%.
when im on safe mode the cpu usage is normal.
the strange thing is that when i use the task manager, the cpu usage goes down to normal.

the pc seams a bit slower with the 100% usage...

i have no ideas now =(
 

flash_mz

Distinguished
Feb 15, 2007
72
0
18,630
the program i used to see the pc usage is called ''cpu usage viewer'' its a freeware.

what are your suggestions on programs for catching spyware or viruses... i always thought that KASPERSKY could chatch any virus =S... hmmm...
 


Have you tried the above suggestion?

Try turning off the sidebar.

Try turning off aero.

Kaspesky is very good but in these cases it's always best to try several anti-malware programs. Try the free online versions. Adaware and spybot and AVG all have free versions.

You also might try running 'hijack this' and then post your log.

I'd also update all my device drivers if that has been awhile. Particularly your video and audio drivers.

Also, in task manager turn off ALL running processes and programs which will allow you to turn them off. Try to get your system running with almost nothing running in the background. You can't hurt anything turning them off. Even your anti-virus, just unplug from the internet/network when you do.
 

flash_mz

Distinguished
Feb 15, 2007
72
0
18,630
how can i catch the rogue usage? i didn't understand this part =S,
and whats ''aero''?
and can you help me by telling me how can i safelly update all my drivers? i think that there is a program which i can see if the driver is up do date right?

thanks for you support, hope to hear from you soon =)
 

flash_mz

Distinguished
Feb 15, 2007
72
0
18,630
hey.. i just found out something. i tryed that ctrl+shift+esc and it worked =)=)=)

its a system program called ''dnetc.exe'', heres the image:

cpu100zl2.jpg


now... how can i get rid of this thing?

tks:)
 

flash_mz

Distinguished
Feb 15, 2007
72
0
18,630
you can go to the link to see the image better: Free Image Hosting

heres the HIJACKTHIS log:


Logfile of HijackThis v1.99.1
Scan saved at 20:21:40, on 06/01/2008
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\vsnpstd.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\AvaFind\AvaFind.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Windows\system32\Taskmgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [snpstd] C:\Windows\vsnpstd.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [AvaFind] "C:\Program Files\AvaFind\AvaFind.exe" /minimized
O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\idmmbc.dll
O11 - Options group: [INTERNATIONAL] International*
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{BB92759E-15DB-4926-8FE1-7307FA3F8347}: NameServer = 83.229.32.1,83.229.32.2
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\r3hook.dll
O20 - Winlogon Notify: igfxcui - C:\Windows\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: klogon - C:\Windows\system32\klogon.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
O23 - Service: distributed.net client (dnetc) - Distributed Computing Technologies, Inc. - C:\Windows\dnetc.exe
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)



 
So it is clear dnetc.exe is the problem. I also see it in the hijack log as : O23 - Service: distributed.net client (dnetc) - Distributed Computing Technologies, Inc. - C:\Windows\dnetc.exe

I am not familiar with it myself but a quick Google seems to indicate it can be part of windows update, part of legitimate distributed computing projects like folding at home, AND part of illegitimate distributed computing viruses and worms!

On my Vista ultimate 64 I have no dnetc.exe anywhere on my c drive! Hmmm..

Have you installed any distributed computing projects like folding or seti? Assuming you have not:

1. Try turning it off from within the window that pops up when you ctrl+shift+sec. Just highlight it and select 'end process'. Does it then stop? Does it stop and them come back on? Or what?

2. Click the windows button/orb in lower left desktop and in the box type: "msconfig" and then hit enter.

3. Click the 'startup' tab and see if dnetc is in the list of programs set to start up automatically. If it is then deselect it and reboot and see if you still have problem

4. If dnetc is NOT in your startup list then something else is starting up and then running dnetc.exe. So list all of the things in this startup list and perhaps we can figure out which one is the bad guy.

5. If none of this helps you may have a deeper sort of virus and we can cross that bridge if we get to it.
 

flash_mz

Distinguished
Feb 15, 2007
72
0
18,630
well.. i when i ended the process it never came back again..
but when i restart it comes back again... i deleted the program and all seems fine now:D:D:D

tks for all of your support:D:D:D i really appreciate it =)

cheers