Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows 7 rund.dll32 excessive use of cpu freezing


  • This topic is locked This topic is locked
17 replies to this topic

#1 douglas350

douglas350

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:05:22 PM

Posted 18 June 2010 - 06:33 PM

I am running windows 7 on a dell studio 17 laptop. Originally it was supplied with xp but I upgraded it to windows 7. It ran problem free for about two months The computer slows down and stops responding. I have to switch it off and reboot.
I notice that when it starts to slow down if I look on taskmaster I find up to four instances of rund.dll running and up to 100% of the cpu being used. If I am in time I can end all of the rund.dll32 processes running. The computer then starts to respond normally and it does not freeze up. I have looked on vartious forums including this one. I do run AVG free and malwarebytes which have both been suggested as causing this. Disabling the AVG link scanner improved things for a couple of days but it then started again. Disabling malwarebytes made no difference.

BC AdBot (Login to Remove)

 


#2 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,735 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:09:22 AM

Posted 19 June 2010 - 12:35 AM

Please, post some computer info:
- processor type, amount of RAM (hold Windows logo key, hit Pause/Break key)
- hard drive size/free space (open "My Computer", right click on hard drive letter, click "Properties")



Download Process Explorer: http://technet.microsoft.com/en-us/sysinte...s/bb896653.aspx
Unzip ProcessExplorer.zip, and double click on procexp.exe to run the program.
Click on View > Select Colunms.
In addition to already pre-selected options, make sure, the Command Line is selected, and press OK.
Go File>Save As, and save the report as Procexp.txt.
Attach the file to your next reply.

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#3 douglas350

douglas350
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:05:22 PM

Posted 20 June 2010 - 09:46 AM

Hi Broni

Thanks for the help.

CPU Intel Mobile Duo 2.13 GHz
RAM DDR2 4 GB

Process PID CPU Private Bytes Working Set Description Company Name
System Idle Process 0 97.69 0 K 24 K
Interrupts n/a 0.77 0 K 0 K Hardware Interrupts
DPCs n/a 0 K 0 K Deferred Procedure Calls
System 4 312 K 100,060 K
smss.exe 280 456 K 1,028 K
csrss.exe 368 2,004 K 4,056 K
wininit.exe 440 1,452 K 4,284 K
services.exe 496 5,824 K 9,564 K
svchost.exe 632 4,508 K 9,532 K Host Process for Windows Services Microsoft Corporation
unsecapp.exe 2140 1,556 K 4,940 K
WmiPrvSE.exe 2240 2,684 K 6,392 K
svchost.exe 692 3,796 K 7,768 K Host Process for Windows Services Microsoft Corporation
atiesrxx.exe 740 1,412 K 3,972 K AMD External Events Service Module AMD
atieclxx.exe 980 1,896 K 5,172 K
svchost.exe 848 21,248 K 18,372 K Host Process for Windows Services Microsoft Corporation
audiodg.exe 4528 17,368 K 18,460 K
svchost.exe 888 189,692 K 196,792 K Host Process for Windows Services Microsoft Corporation
WUDFHost.exe 2640 1,948 K 5,932 K
dwm.exe 968 1.52 33,120 K 22,980 K Desktop Window Manager Microsoft Corporation
svchost.exe 928 19,616 K 36,428 K Host Process for Windows Services Microsoft Corporation
svchost.exe 308 7,040 K 11,580 K Host Process for Windows Services Microsoft Corporation
svchost.exe 1060 11,408 K 16,512 K Host Process for Windows Services Microsoft Corporation
AAWService.exe 1200 46,264 K 29,436 K Ad-Aware Service Application Lavasoft
AAWTray.exe 3472 2,280 K 508 K Ad-Aware Tray Application Lavasoft
spoolsv.exe 1272 6,944 K 13,636 K Spooler SubSystem App Microsoft Corporation
svchost.exe 1304 10,252 K 14,524 K Host Process for Windows Services Microsoft Corporation
avgwdsvc.exe 1384 7,032 K 2,928 K AVG Watchdog Service AVG Technologies CZ, s.r.o.
avgnsa.exe 2004 2,212 K 2,416 K
avgchsva.exe 2800 3.03 28,852 K 23,780 K
avgrsa.exe 2808 2,844 K 648 K
avgcsrva.exe 2900 11,944 K 404 K
btwdins.exe 1416 1,960 K 5,560 K Bluetooth Support Server Broadcom Corporation.
MDM.EXE 1516 2,104 K 23,716 K
SeaPort.exe 1568 4,000 K 29,564 K Microsoft SeaPort Search Enhancement Broker Microsoft Corporation
TaskAdmin.exe 1912 1,000 K 7,788 K
WLIDSVC.EXE 1964 4,180 K 12,160 K
WLIDSVCM.EXE 2772 1,160 K 3,076 K
avgemc.exe 1600 6,228 K 1,816 K AVG E-Mail Scanner AVG Technologies CZ, s.r.o.
avgcsrvx.exe 2108 4,872 K 14,188 K
SearchIndexer.exe 2376 28,980 K 13,068 K Microsoft Windows Search Indexer Microsoft Corporation
svchost.exe 2560 2,100 K 5,384 K Host Process for Windows Services Microsoft Corporation
svchost.exe 2728 1,632 K 4,532 K Host Process for Windows Services Microsoft Corporation
taskhost.exe 3068 8,196 K 5,356 K Host Process for Windows Tasks Microsoft Corporation
AOLacsd.exe 2200 6,660 K 3,888 K AOL Connectivity Service AOL LLC
lsass.exe 516 4,176 K 10,960 K Local Security Authority Process Microsoft Corporation
lsm.exe 524 2,496 K 4,160 K
csrss.exe 452 2,436 K 12,048 K
conhost.exe 4016 1,424 K 424 K Console Window Host Microsoft Corporation
winlogon.exe 800 2,744 K 6,956 K
explorer.exe 3164 40,532 K 45,740 K Windows Explorer Microsoft Corporation
Apoint.exe 3448 2,524 K 1,308 K Alps Pointing-device Driver Alps Electric Co., Ltd.
ApMsgFwd.exe 3936 1,460 K 4,264 K
hidfind.exe 3988 1,392 K 412 K Alps Pointing-device Driver Alps Electric Co., Ltd.
sttray64.exe 3456 7,132 K 1,000 K IDT PC Audio IDT, Inc.
SSScheduler.exe 3484 1,532 K 5,296 K McAfee Security Scanner Scheduler McAfee, Inc.
mcuicnt.exe 4324 6,224 K 19,180 K McAfee HTML UI Container McAfee, Inc.
avgtray.exe 3632 6,916 K 1,996 K AVG Tray Monitor AVG Technologies CZ, s.r.o.
ApntEx.exe 4000 1,884 K 776 K Alps Pointing-device Driver for Windows NT/2000/XP/Vista Alps Electric Co., Ltd.
aolsoftware.exe 3328 7,792 K 5,892 K AOL AOL Inc.
waol.exe 4036 137,652 K 95,648 K AOL Software AOL Inc.
shellmon.exe 4620 2,772 K 6,080 K waolmon AOL Inc.
aoltpsd3.exe 4152 3,592 K 7,820 K AOL TopSpeed AOL LLC
procexp[1].exe 3088 1,780 K 28,960 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com
procexp[1]64.exe 4180 0.76 18,164 K 36,548 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com


In order to keep the comp responding well I have used taskmaster to close 2 instances of rundll32 before taking this snapshpot.

#4 bwest0703

bwest0703

  • Members
  • 164 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:22 PM

Posted 20 June 2010 - 10:01 AM

Hello douglas,


Broni is not on atm, and I normally wouldn't jump into a thread he's working on, but could you check something for me?

Go to task manager, right click on the rundll32 application that is shown. Go to properties, and type the entire location of that file for me. Ex. C:\Program Files (x86)\ Adobe\ ....\rundll32.exe

Not saying that should be the right location, it's just an example.
Posted Image

#5 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,735 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:09:22 AM

Posted 20 June 2010 - 01:22 PM

On the other hand, System Idle Process (CPU not used) stays at perfect 97.69%

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#6 Jacee

Jacee

    Bleeping around


  • Malware Response Team
  • 3,716 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:09:22 AM

Posted 20 June 2010 - 02:04 PM

You said you're running AVG ... are you running McAfee too?

SSScheduler.exe 3484 1,532 K 5,296 K McAfee Security Scanner Scheduler McAfee, Inc.
mcuicnt.exe 4324 6,224 K 19,180 K McAfee HTML UI Container McAfee, Inc.

MS_MVP.gif
MS MVP Windows-Security 2006-2016
Member of UNITE, the Unified Network of Instructors and Trusted Eliminators

Admin PC Pitstop


#7 douglas350

douglas350
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:05:22 PM

Posted 20 June 2010 - 02:30 PM

Hello douglas,


Broni is not on atm, and I normally wouldn't jump into a thread he's working on, but could you check something for me?

Go to task manager, right click on the rundll32 application that is shown. Go to properties, and type the entire location of that file for me. Ex. C:\Program Files (x86)\ Adobe\ ....\rundll32.exe

Not saying that should be the right location, it's just an example.


Hi bwest
Thank you for your assistance

Taskmaster shows two rundll32 running both show C:\Windows\SysWOW64 as location.

#8 douglas350

douglas350
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:05:22 PM

Posted 20 June 2010 - 02:40 PM

You said you're running AVG ... are you running McAfee too?

SSScheduler.exe 3484 1,532 K 5,296 K McAfee Security Scanner Scheduler McAfee, Inc.
mcuicnt.exe 4324 6,224 K 19,180 K McAfee HTML UI Container McAfee, Inc.


Hi Jacee

Thank you for helping.

I wasn't deliberately running MacAfee but I have found I had 8.3MB of MacAffee security scan plus installed. I think it may have been inadvertantly downloaded while updating another program.

I have used the control panel to remove it. I will run the comp for a couple of hours using the internet and I'll report back if this rundll32 still occurs or if the comp fails to respond.

#9 douglas350

douglas350
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:05:22 PM

Posted 20 June 2010 - 02:51 PM

On the other hand, System Idle Process (CPU not used) stays at perfect 97.69%


Hi Broni

I have noticed the comp was slowing again and cpu usage was up to 90%. This was after removing the macafee scan. The two instances of rundll32 running were each showing about 750000 kb on taskmaster process page. I ended the process for the 2 x rundll32 and usage dropped to 2 to 6%.

#10 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,735 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:09:22 AM

Posted 20 June 2010 - 07:45 PM

Please, post another log from Process Explorer, but when you apparently see 90% of CPU usage.

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#11 douglas350

douglas350
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:05:22 PM

Posted 22 June 2010 - 08:24 AM

Please, post another log from Process Explorer, but when you apparently see 90% of CPU usage.


Hi Broni

the plot thickens . . . . .

After ending the rundll32 processes I stopped getting the problem. I shut down deveral times and rebooted and rundll32 no longer appeared on the process list in task manager and the cpu usage was < 25%.
The only actual change I have made that possible could have cured it was the removal of the MacAffee scan. I am not sure when that was downloaded but I believe in the last week AFTER the temporary improvement produced by disabling the AVG link scanner.

So, possibly this 8.3MB worth of MacAffee scan may do the same as the AVG link scanner?

Since the problem seemed to be cured I enabled the AVG link scanner again and the problem reoccured. 2 x rundll32 running and cpu at 100%. I tried to run the process explorer but could not do it because of the very slow response.

I have again ended the rundll.32 processes and I now have proc exp in the background running ready for when (and if) rundll.exp starts up again and the cpu usage goes up I will send the report in. I have continued to let the AVG link scanner run since it looks as if that seems to be one of the things that may trigger it.

So at present
AVG link scanner enabled
Process explorer running in background
Taskmaster running
CPU <10%
Now just waiting for the problem to reoccur and I expect I will be able to run process explorer then.

Thank you again for your help

#12 douglas350

douglas350
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:05:22 PM

Posted 22 June 2010 - 11:31 AM

After ending the rundll32 processes the computer ran normally, responded normally and these processes did not restart.

I then switched off and rebooted the computer and after a short time rundll32 showed as running oin taskmaster. I contyinued using the comoputer until it slowed and rechecked the taskmaster. I already had process explorer running so when the cpu showed over 90% on taskmaster I copied process explorer and copied and pasted it below. While I was doinfg this the task master performance showed 70 to 100%.



Process PID CPU Private Bytes Working Set Description Company Name
System Idle Process 0 50.00 0 K 24 K
Interrupts n/a 2.41 0 K 0 K Hardware Interrupts
DPCs n/a 2.07 0 K 0 K Deferred Procedure Calls
System 4 1.72 320 K 103,016 K
smss.exe 280 456 K 1,024 K Windows Session Manager Microsoft Corporation
csrss.exe 368 2,092 K 3,972 K Client Server Runtime Process Microsoft Corporation
wininit.exe 440 1,464 K 4,244 K Windows Start-Up Application Microsoft Corporation
services.exe 500 6,012 K 9,920 K Services and Controller app Microsoft Corporation
svchost.exe 632 4,396 K 9,440 K Host Process for Windows Services Microsoft Corporation
unsecapp.exe 2500 1,524 K 4,460 K Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation
WmiPrvSE.exe 2592 2,592 K 6,212 K WMI Provider Host Microsoft Corporation
svchost.exe 692 3,916 K 7,808 K Host Process for Windows Services Microsoft Corporation
atiesrxx.exe 740 1,408 K 3,968 K AMD External Events Service Module AMD
atieclxx.exe 1036 1,932 K 5,180 K AMD External Events Client Module AMD
svchost.exe 852 22,580 K 19,280 K Host Process for Windows Services Microsoft Corporation
audiodg.exe 340 18,680 K 19,032 K Windows Audio Device Graph Isolation Microsoft Corporation
svchost.exe 892 0.69 172,116 K 178,816 K Host Process for Windows Services Microsoft Corporation
dwm.exe 2212 0.69 32,900 K 24,584 K Desktop Window Manager Microsoft Corporation
svchost.exe 940 18,288 K 31,856 K Host Process for Windows Services Microsoft Corporation
svchost.exe 332 7,772 K 12,088 K Host Process for Windows Services Microsoft Corporation
svchost.exe 1084 13,312 K 15,664 K Host Process for Windows Services Microsoft Corporation
AAWService.exe 1212 46,116 K 27,708 K Ad-Aware Service Application Lavasoft
AAWTray.exe 3316 2,280 K 22,188 K Ad-Aware Tray Application Lavasoft
spoolsv.exe 1296 6,948 K 13,124 K Spooler SubSystem App Microsoft Corporation
svchost.exe 1328 10,576 K 13,552 K Host Process for Windows Services Microsoft Corporation
avgwdsvc.exe 1404 6,400 K 2,944 K AVG Watchdog Service AVG Technologies CZ, s.r.o.
avgnsa.exe 912 10,744 K 948 K AVG Network scanner Service AVG Technologies CZ, s.r.o.
avgrsa.exe 2724 2,788 K 672 K AVG Resident Shield Service AVG Technologies CZ, s.r.o.
avgcsrva.exe 2944 12,040 K 432 K AVG Scanning Core Module - Server Part AVG Technologies CZ, s.r.o.
avgchsva.exe 2732 27,836 K 360 K AVG Cache Server AVG Technologies CZ, s.r.o.
btwdins.exe 1436 1,876 K 5,408 K Bluetooth Support Server Broadcom Corporation.
MDM.EXE 1536 2,168 K 23,752 K Machine Debug Manager Microsoft Corporation
SeaPort.exe 1820 4,016 K 29,668 K Microsoft SeaPort Search Enhancement Broker Microsoft Corporation
svchost.exe 1860 1,752 K 5,144 K Host Process for Windows Services Microsoft Corporation
TaskAdmin.exe 1920 1,004 K 7,812 K
WLIDSVC.EXE 1952 4,160 K 12,148 K Microsoft® Windows Live ID Service Microsoft Corporation
WLIDSVCM.EXE 3480 1,156 K 3,068 K Microsoft® Windows Live ID Service Monitor Microsoft Corporation
avgemc.exe 908 6,016 K 1,772 K AVG E-Mail Scanner AVG Technologies CZ, s.r.o.
avgcsrvx.exe 2444 4,880 K 14,208 K AVG Scanning Core Module - Server Part AVG Technologies CZ, s.r.o.
taskhost.exe 2144 3,300 K 2,836 K Host Process for Windows Tasks Microsoft Corporation
SearchIndexer.exe 3224 37,492 K 21,880 K Microsoft Windows Search Indexer Microsoft Corporation
svchost.exe 3384 1,848 K 5,204 K Host Process for Windows Services Microsoft Corporation
svchost.exe 3532 1,640 K 4,636 K Host Process for Windows Services Microsoft Corporation
AOLacsd.exe 3876 6,500 K 4,008 K AOL Connectivity Service AOL LLC
lsass.exe 516 4,100 K 10,648 K Local Security Authority Process Microsoft Corporation
lsm.exe 524 2,404 K 4,064 K Local Session Manager Service Microsoft Corporation
csrss.exe 468 1.03 2,392 K 12,032 K Client Server Runtime Process Microsoft Corporation
conhost.exe 3732 1,432 K 780 K Console Window Host Microsoft Corporation
winlogon.exe 804 2,908 K 6,856 K Windows Logon Application Microsoft Corporation
taskmgr.exe 3608 0.34 2,940 K 10,320 K Windows Task Manager Microsoft Corporation
explorer.exe 2392 36,160 K 49,736 K Windows Explorer Microsoft Corporation
Apoint.exe 2812 2,548 K 2,332 K Alps Pointing-device Driver Alps Electric Co., Ltd.
ApMsgFwd.exe 3672 1.03 1,460 K 4,336 K ApMsgFwd Alps Electric Co., Ltd.
hidfind.exe 3724 1,432 K 1,236 K Alps Pointing-device Driver Alps Electric Co., Ltd.
sttray64.exe 2820 7,112 K 2,060 K IDT PC Audio IDT, Inc.
waol.exe 2912 121,812 K 86,608 K AOL Software AOL Inc.
shellmon.exe 3956 2,772 K 10,500 K waolmon AOL Inc.
aolsoftware.exe 1512 7,232 K 5,568 K AOL AOL Inc.
aoltpsd3.exe 3664 2,968 K 7,232 K AOL TopSpeed AOL LLC
avgtray.exe 2648 6,556 K 1,840 K AVG Tray Monitor AVG Technologies CZ, s.r.o.
ApntEx.exe 3700 1,888 K 1,348 K Alps Pointing-device Driver for Windows NT/2000/XP/Vista Alps Electric Co., Ltd.
rundll32.exe 1704 22.07 161,548 K 154,868 K Windows host process (Rundll32) Microsoft Corporation
rundll32.exe 3668 17.59 161,552 K 167,176 K Windows host process (Rundll32) Microsoft Corporation
procexp[1]64.exe 4060 0.34 16,840 K 34,040 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com


waiting with my fingers, legs and eyes crossed :-)

#13 douglas350

douglas350
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:05:22 PM

Posted 22 June 2010 - 03:46 PM

And another with task master showing 80 to 100% for the cpu

Process PID CPU Private Bytes Working Set Description Company Name
System Idle Process 0 9.09 0 K 24 K
Interrupts n/a 3.03 0 K 0 K Hardware Interrupts
DPCs n/a 0.76 0 K 0 K Deferred Procedure Calls
System 4 3.03 320 K 103,020 K
smss.exe 280 456 K 1,032 K
csrss.exe 368 2,164 K 4,228 K
wininit.exe 440 1,464 K 4,292 K
services.exe 500 6,036 K 9,960 K
svchost.exe 632 4,412 K 9,500 K Host Process for Windows Services Microsoft Corporation
unsecapp.exe 2500 1,580 K 4,524 K
WmiPrvSE.exe 2592 2,592 K 6,236 K
svchost.exe 692 4,004 K 7,952 K Host Process for Windows Services Microsoft Corporation
atiesrxx.exe 740 1,408 K 4,008 K AMD External Events Service Module AMD
atieclxx.exe 1036 1,932 K 5,180 K
svchost.exe 852 22,572 K 19,572 K Host Process for Windows Services Microsoft Corporation
audiodg.exe 2248 18,492 K 19,216 K
svchost.exe 892 1.52 167,448 K 177,024 K Host Process for Windows Services Microsoft Corporation
dwm.exe 2212 33,932 K 19,564 K Desktop Window Manager Microsoft Corporation
svchost.exe 940 19,432 K 33,284 K Host Process for Windows Services Microsoft Corporation
svchost.exe 332 31,016 K 14,036 K Host Process for Windows Services Microsoft Corporation
svchost.exe 1084 14,556 K 18,548 K Host Process for Windows Services Microsoft Corporation
AAWService.exe 1212 46,752 K 30,984 K Ad-Aware Service Application Lavasoft
AAWTray.exe 3316 2,008 K 544 K Ad-Aware Tray Application Lavasoft
spoolsv.exe 1296 6,948 K 13,836 K Spooler SubSystem App Microsoft Corporation
svchost.exe 1328 10,328 K 13,908 K Host Process for Windows Services Microsoft Corporation
avgwdsvc.exe 1404 6,496 K 2,844 K AVG Watchdog Service AVG Technologies CZ, s.r.o.
avgnsa.exe 912 10,824 K 748 K
avgrsa.exe 2724 2,872 K 636 K
avgcsrva.exe 2944 10,864 K 400 K
avgchsva.exe 2732 39,224 K 460 K
btwdins.exe 1436 1,876 K 5,408 K Bluetooth Support Server Broadcom Corporation.
MDM.EXE 1536 2,164 K 23,768 K
SeaPort.exe 1820 4,016 K 30,404 K Microsoft SeaPort Search Enhancement Broker Microsoft Corporation
svchost.exe 1860 1,752 K 5,184 K Host Process for Windows Services Microsoft Corporation
TaskAdmin.exe 1920 1,004 K 7,852 K
WLIDSVC.EXE 1952 4,164 K 12,832 K
WLIDSVCM.EXE 3480 1,156 K 3,104 K
avgemc.exe 908 6,016 K 1,084 K AVG E-Mail Scanner AVG Technologies CZ, s.r.o.
avgcsrvx.exe 2444 4,880 K 14,228 K
taskhost.exe 2144 8,080 K 3,956 K Host Process for Windows Tasks Microsoft Corporation
SearchIndexer.exe 3224 38,904 K 25,936 K Microsoft Windows Search Indexer Microsoft Corporation
svchost.exe 3384 1,848 K 5,252 K Host Process for Windows Services Microsoft Corporation
svchost.exe 3532 1,640 K 4,664 K Host Process for Windows Services Microsoft Corporation
AOLacsd.exe 3876 6,776 K 4,044 K AOL Connectivity Service AOL LLC
lsass.exe 516 4,324 K 10,972 K Local Security Authority Process Microsoft Corporation
lsm.exe 524 2,424 K 4,116 K
csrss.exe 468 2,528 K 12,056 K
conhost.exe 3732 1,432 K 420 K Console Window Host Microsoft Corporation
winlogon.exe 804 2,756 K 6,888 K
taskmgr.exe 3608 4,008 K 7,444 K Windows Task Manager Microsoft Corporation
explorer.exe 2392 64,664 K 73,512 K Windows Explorer Microsoft Corporation
Apoint.exe 2812 2,548 K 1,284 K Alps Pointing-device Driver Alps Electric Co., Ltd.
ApMsgFwd.exe 3672 1,464 K 4,340 K
hidfind.exe 3724 1,432 K 384 K Alps Pointing-device Driver Alps Electric Co., Ltd.
sttray64.exe 2820 7,112 K 972 K IDT PC Audio IDT, Inc.
7zFM.exe 3320 5,096 K 46,960 K 7-Zip File Manager Igor Pavlov
procexp.exe 4688 1,756 K 6,132 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com
procexp64.exe 4028 0.76 17,488 K 35,328 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com
avgtray.exe 2648 6,824 K 2,008 K AVG Tray Monitor AVG Technologies CZ, s.r.o.
ApntEx.exe 3700 1,888 K 748 K Alps Pointing-device Driver for Windows NT/2000/XP/Vista Alps Electric Co., Ltd.
aolsoftware.exe 1512 7,800 K 5,840 K AOL AOL Inc.
waol.exe 3104 103,612 K 93,976 K AOL Software AOL Inc.
shellmon.exe 3748 2,800 K 6,060 K waolmon AOL Inc.
aoltpsd3.exe 3312 3,096 K 7,316 K AOL TopSpeed AOL LLC
rundll32.exe 4280 21.97 5,452 K 11,140 K Windows host process (Rundll32) Microsoft Corporation
rundll32.exe 4344 31.82 15,972 K 16,968 K Windows host process (Rundll32) Microsoft Corporation
rundll32.exe 4740 28.03 16,296 K 19,892 K Windows host process (Rundll32) Microsoft Corporation

#14 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,735 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:09:22 AM

Posted 22 June 2010 - 08:38 PM

I have a slight suspicion, your computer may be infected, but let's try something else first.

Uninstall AVG, using AVG Remover: http://www.avg.com/us-en/download-tools

Download and install ONE of these:
- Avast! free antivirus: http://www.avast.com/eng/download-avast-home.html
- Avira free antivirus: http://www.free-av.com/en/download/1/avira..._antivirus.html

Let me know, how things are with CPU usage.

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#15 douglas350

douglas350
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:05:22 PM

Posted 23 June 2010 - 06:16 AM

Thanks Bronti

I have uninstalled AVG free and installed Avast. I have run a scan with avast and found 2 infections on my 2GB memory stick. (2 x Win32:trojan-gen. These were not found by AVG. I have removed them and scanned the whole computer. No other infecxctions were found.

I have run procexp again. task master is varying between 50 and 100%.






Process PID CPU Private Bytes Working Set Description Company Name
System Idle Process 0 33.85 0 K 24 K
Interrupts n/a 2.31 0 K 0 K Hardware Interrupts
DPCs n/a 0 K 0 K Deferred Procedure Calls
System 4 2.31 136 K 10,920 K
smss.exe 272 468 K 1,040 K
csrss.exe 360 1,984 K 4,064 K
wininit.exe 432 1,452 K 4,208 K
services.exe 492 5,952 K 9,444 K
svchost.exe 620 4,568 K 9,472 K Host Process for Windows Services Microsoft Corporation
unsecapp.exe 2020 1,632 K 4,928 K
WmiPrvSE.exe 1512 2,688 K 6,392 K
svchost.exe 684 4,300 K 8,296 K Host Process for Windows Services Microsoft Corporation
atiesrxx.exe 732 1,404 K 3,976 K AMD External Events Service Module AMD
atieclxx.exe 636 1,952 K 5,264 K
svchost.exe 836 21,444 K 18,136 K Host Process for Windows Services Microsoft Corporation
svchost.exe 868 2.31 227,600 K 236,768 K Host Process for Windows Services Microsoft Corporation
dwm.exe 2532 0.77 33,864 K 20,704 K Desktop Window Manager Microsoft Corporation
WUDFHost.exe 1016 2,004 K 5,900 K
svchost.exe 928 27,588 K 44,340 K Host Process for Windows Services Microsoft Corporation
svchost.exe 356 6,928 K 11,448 K Host Process for Windows Services Microsoft Corporation
svchost.exe 1060 26,740 K 29,656 K Host Process for Windows Services Microsoft Corporation
AAWService.exe 1192 46,384 K 29,676 K Ad-Aware Service Application Lavasoft
AAWTray.exe 3704 2,204 K 2,280 K Ad-Aware Tray Application Lavasoft
spoolsv.exe 1272 6,980 K 13,248 K Spooler SubSystem App Microsoft Corporation
svchost.exe 1300 11,456 K 14,596 K Host Process for Windows Services Microsoft Corporation
btwdins.exe 1392 1,952 K 5,492 K Bluetooth Support Server Broadcom Corporation.
MDM.EXE 1496 2,144 K 23,652 K
SeaPort.exe 1588 3,992 K 29,816 K Microsoft SeaPort Search Enhancement Broker Microsoft Corporation
svchost.exe 1748 1,892 K 5,456 K Host Process for Windows Services Microsoft Corporation
TaskAdmin.exe 1792 1,004 K 7,800 K
WLIDSVC.EXE 1852 4,144 K 12,124 K
WLIDSVCM.EXE 2308 1,196 K 3,120 K
svchost.exe 2064 1,644 K 4,552 K Host Process for Windows Services Microsoft Corporation
svchost.exe 2164 2,084 K 5,376 K Host Process for Windows Services Microsoft Corporation
SearchIndexer.exe 2204 41,604 K 25,976 K Microsoft Windows Search Indexer Microsoft Corporation
SearchProtocolHost.exe 4000 3,076 K 8,236 K
SearchFilterHost.exe 3404 2,660 K 6,436 K
taskhost.exe 2488 3,180 K 2,648 K Host Process for Windows Tasks Microsoft Corporation
AOLacsd.exe 2856 6,480 K 4,932 K AOL Connectivity Service AOL LLC
svchost.exe 4064 0.77 76,764 K 44,504 K Host Process for Windows Services Microsoft Corporation
AvastSvc.exe 2788 23,604 K 63,620 K avast! Service ALWIL Software
lsass.exe 508 4,748 K 11,152 K Local Security Authority Process Microsoft Corporation
lsm.exe 516 2,540 K 4,204 K
csrss.exe 460 2,340 K 19,120 K
conhost.exe 3112 1,440 K 528 K Console Window Host Microsoft Corporation
winlogon.exe 788 2,632 K 6,856 K
taskmgr.exe 1284 3,976 K 5,584 K Windows Task Manager Microsoft Corporation
explorer.exe 2560 62,640 K 62,500 K Windows Explorer Microsoft Corporation
Apoint.exe 2392 2,556 K 2,428 K Alps Pointing-device Driver Alps Electric Co., Ltd.
ApMsgFwd.exe 2052 1,464 K 4,356 K
hidfind.exe 3088 1,532 K 1,236 K Alps Pointing-device Driver Alps Electric Co., Ltd.
sttray64.exe 2396 7,136 K 2,012 K IDT PC Audio IDT, Inc.
ApntEx.exe 3096 1,896 K 1,636 K Alps Pointing-device Driver for Windows NT/2000/XP/Vista Alps Electric Co., Ltd.
aolsoftware.exe 3420 7,900 K 6,224 K AOL AOL Inc.
AvastUI.exe 1876 15,552 K 5,472 K
waol.exe 3300 159,512 K 158,248 K AOL Software AOL Inc.
shellmon.exe 3824 3,508 K 4,448 K waolmon AOL Inc.
aoltpsd3.exe 3484 3,568 K 7,540 K AOL TopSpeed AOL LLC
rundll32.exe 2984 28.46 17,332 K 22,836 K Windows host process (Rundll32) Microsoft Corporation
rundll32.exe 296 28.46 17,396 K 22,936 K Windows host process (Rundll32) Microsoft Corporation
procexp.exe 336 2,072 K 5,584 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com
procexp64.exe 1844 0.77 20,500 K 36,524 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users