Re: Does a Repair Install Affect Performance?
OK I downloaded and ran Process Explorer. There are 24 processes running and
CPU is at the moment 8-12%. I started Paint Shop just to see what would
happen. CPU shot up to 80%+ for about 12 seconds while it started. Once
started but not being used, CPU drops back to 8-12%. Processes using CPU are
IE, iTunes, Microsoft Antispyware and Process Explorer itself. (BTW I can’t
find the “dependencies” tab).
I have McAfee VirusScan and Personal Firewall Plus running permanently. My
perception is that the system is generally more responsive if I switch the
McAfee programs off. For example: Start WORD for the first time after boot,
McAfee enabled: 30 seconds. Start WORD again in same session, McAfee
enabled: 12 seconds. Start WORD again in same session, McAfee disabled: 7
seconds.
There have been no error reports since the last boot (this morning). But
looking at the log, there are typically 4-8 Application errors per week.
System errors are heavily grouped into a few short periods of a few seconds
which show many instances (20-30) of the same error. Is this typical?
Many thanks again.
"Gerry Cornell" wrote:
> Jeff
>
> When the performance is poor check on CPU for unexplained activity.
>
> Task Manager is useful but you could look at another freeware utility
> Process Explorer, which provides similar information but adds that
> little bit extra towards seeing what the running processes represent.
>
> For further information about Process Explorer see here:
>
> http://www.sysinternals.com/ntw2k/freeware/procexp.shtml
>
> To ascertain which service is causing the problem select the
> image name producing the high CPU usage, right click,
> select Properties, Services. Note there are the full names and some
> explanation of what each service does.
>
> You will find further information on Services here:
> http://www.blackviper.com/WinXP/servicecfg.htm
>
> To trace the particular Service involved you need to turn off each
> service in turn and then restore it noting what effect it has on CPU
> usage. However, you need to take care and watch what other Services are
> dependent on that service. When you click on the Dependencies tab allow
> it a little time to display the information.
>
> What McAfee programmes are running in the background. If you turn them
> off is there a noticeable change in system performance?
>
> What Error Reports have appeared since the last boot?
>
> --
>
> Hope this helps.
>
> Gerry
> ~~~~
> FCA
> Stourport, England
>
> Enquire, plan and execute
> ~~~~~~~~~~~~~~~~~~~
>
>
>
>
> "Effjayuk" <Effjayuk@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:255F81B4-946E-4EF8-AFC1-7A5779EA976C@xxxxxxxxxxxxxxxx
> > Any further ideas anyone? I realise that diagnosing a complex problem
> > remotely by newsgroup is pretty hard! However I'd be grateful if anyone
> > can
> > suggest something I might have overlooked. Thanks (to Gerry especially).
> >
> > "Effjayuk" wrote:
> >
> >> Gerry - Just ran the page file monitor again. Page File usage is at 14MB
> >> (peak 19MB). Much less running this morning. Yesterday Flight
> >> Simulator
> >> had been running, though it was closed down when the monitor ran. I had
> >> heard FS doesn't always free up its storage?
> >>
> >> Sometimes CPU usage spikes when lots of apps open, but not often.
> >>
> >> Yes it is a Dell - a Dimension 4600 installed December 2004.
> >>
> >> Omci.sys: It is 17K in size, Version 7.0.323.0. In properties it is
> >> called
> >> "OMCI Device Driver" supplied by Dell Corp. I haven't run a diagnostic
> >> tool
> >> - The only one I can see is a Dell "Driver Reset Tool". Is that what
> >> you
> >> mean?
> >>
> >> Wg111nds.sys: Sorry, my typo. It is in fact wg111nd5.sys. Location
> >> windows\system32\drivers. 370KB in size, version 3.0.18.201. Description
> >> "wg111 Wireless NDIS 5.1 Driver". From Netgear. I have a Netgear
> >> Wireless
> >> Router which was installed on this computer in December 2004 when I
> >> installed
> >> the Dell. Probably OK?
> >>
> >> I have downloaded and run HiJackThis. Neither omci or wg111nd5 appear in
> >> the log.
> >>
> >> I've run the User Profile Hive Cleanup Service as you suggested (it
> >> seemed
> >> to run OK but didn't do anything visible!). I will check all connections
> >> between network card and router.
> >>
> >> Many thanks again for you help - any other ideas gratefully received!.
> >> -Jeff.
> >>
> >>
> >> "Gerry Cornell" wrote:
> >>
> >> > The page file usage is more than one would typically expect. Were you
> >> > carrying out video or photo editing or the like at the time? Otherwise
> >> > one might expect usage of 30 / 50 mb usage.
> >> >
> >> > Is there any unexpected CPU usage?
> >> >
> >> > One file suggests you have a Dell computer. What model? When was
> >> > it new?
> >> >
> >> > Omci.sys is a Dell driver but it can be malware masquerading as a Dell
> >> > file. What is the file version and size of file? I believe Dell provide
> >> > a
> >> > diagnostic tool. Have you run this tool?
> >> >
> >> > Wg111nds.sys. Please check you have posted the correct file name
> >> > as there is no trace of this file using Google. What does the
> >> > properties
> >> > of this file say about it's source and purpose.
> >> >
> >> > In checking for viruses and spyware did you produce a HijackThis log?
> >> > Do either Omci.sys or Wg111nds.sys feature in the log?
> >> >
> >> > Event Type: Error
> >> > Event Source: Service Control Manager
> >> > Event Category: None
> >> > Event ID: 7023
> >> > Date: 25/01/2006
> >> > Time: 17:40:53
> >> > User: N/A
> >> > Computer: OFFICEDELL
> >> > Description:
> >> > The Application Management service terminated with the following error:
> >> > The specified module could not be found.
> >> >
> >> > For more information, see Help and Support Center at
> >> > http://go.microsoft.com/fwlink/events.asp.
> >> >
> >> > This error refers to a specified module but does not name it! Click on
> >> > this link: http://go.microsoft.com/fwlink/events.asp. in the log and
> >> > post a
> >> > copy.
> >> >
> >> > Event ID:4. Please check the cabling and connections either end from
> >> > the Network Card to the Router?
> >> >
> >> > Event ID: 1002 is a symptom not indicator of cause.
> >> >
> >> > For Event ID: 1517 download and install the User
> >> > Profile Hive Cleanup Service
> >> > Download details: User Profile Hive Cleanup Service
> >> > http://snipurl.com/5b61
> >> >
> >> > UPHClean v1.5e readme.txt
> >> > http://snipurl.com/ko8m
> >> >
> >> >
> >> > --
> >> >
> >> > Hope this helps.
> >> >
> >> > Gerry
> >> > ~~~~
> >> > FCA
> >> > Stourport, England
> >> >
> >> > Enquire, plan and execute
> >> > ~~~~~~~~~~~~~~~~~~~
> >> >
> >> > "Effjayuk" <Effjayuk@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> >> > news:7A28654C-CFC7-433F-8FC5-63CF136B43CE@xxxxxxxxxxxxxxxx
> >> > > Gerry - Many thanks for all your suggestions. I have deleted your
> >> > > message
> >> > > text to save space. Here is the information you asked for. Here
> >> > > goes:
> >> > >
> >> > > On the Task Manager, the Commit Charge Total varies from 418K to
> >> > > 452K.
> >> > > The
> >> > > Limit is 1277K and the Peak is 710K.
> >> > >
> >> > > I ran the Page File Monitor and it showed:
> >> > >
> >> > > 26/01/2006 17:56:36
> >> > > Pagefile Physical Location: C:\pagefile.sys
> >> > > Current Pagefile Usage: 235 MB
> >> > > Session Peak Usage: 272 MB
> >> > > Current Pagefile Size: 768 MB
> >> > >
> >> > >
> >> > > There are no yellow question marks anywhere in device manager.
> >> > >
> >> > > Sigverif showed the following unsigned drivers:
> >> > >
> >> > > Omci.sys
> >> > > Wg111nds.sys
> >> > > Mdigraph.dll
> >> > > Mdiui.dll
> >> > >
> >> > > Event Viewer System Error showed a ton of errors on 25.1.06 (nearly
> >> > > 200)
> >> > > as
> >> > > below:
> >> > >
> >> > > Event Type: Error
> >> > > Event Source: Service Control Manager
> >> > > Event Category: None
> >> > > Event ID: 7023
> >> > > Date: 25/01/2006
> >> > > Time: 17:40:53
> >> > > User: N/A
> >> > > Computer: OFFICEDELL
> >> > > Description:
> >> > > The Application Management service terminated with the following
> >> > > error:
> >> > > The specified module could not be found.
> >> > >
> >> > > For more information, see Help and Support Center at
> >> > > http://go.microsoft.com/fwlink/events.asp.
> >> > >
> >> > > Most recent system warning:
> >> > >
> >> > > Event Type: Warning
> >> > > Event Source: E100B
> >> > > Event Category: None
> >> > > Event ID: 4
> >> > > Date: 26/01/2006
> >> > > Time: 07:55:17
> >> > > User: N/A
> >> > > Computer: OFFICEDELL
> >> > > Description:
> >> > > Adapter Intel(R) PRO/100 VE Network Connection: Adapter Link Down
> >> > > Data:
> >> > > 0000: 00 00 04 00 02 00 58 00 ......X.
> >> > > 0008: 00 00 00 00 04 00 04 80 .......?
> >> > > 0010: 00 00 00 00 00 00 00 00 ........
> >> > > 0018: 00 00 00 00 00 00 00 00 ........
> >> > > 0020: 00 00 00 00 00 00 00 00 ........
> >> > > 0028: 04 00 04 80 ...?
> >> > >
> >> > > Most recent Application Error was:
> >> > >
> >> > > Event Type: Error
> >> > > Event Source: Application Hang
> >> > > Event Category: (101)
> >> > > Event ID: 1002
> >> > > Date: 23/01/2006
> >> > > Time: 20:57:06
> >> > > User: N/A
> >> > > Computer: OFFICEDELL
> >> > > Description:
> >> > > Hanging application IEXPLORE.EXE, version 6.0.2900.2180, hang module
> >> > > hungapp, version 0.0.0.0, hang address 0x00000000.
> >> > >
> >> > > For more information, see Help and Support Center at
> >> > > http://go.microsoft.com/fwlink/events.asp.
> >> > > Data:
> >> > > 0000: 41 70 70 6c 69 63 61 74 Applicat
> >> > > 0008: 69 6f 6e 20 48 61 6e 67 ion Hang
> >> > > 0010: 20 20 49 45 58 50 4c 4f IEXPLO
> >> > > 0018: 52 45 2e 45 58 45 20 36 RE.EXE 6
> >> > > 0020: 2e 30 2e 32 39 30 30 2e .0.2900.
> >> > > 0028: 32 31 38 30 20 69 6e 20 2180 in
> >> > > 0030: 68 75 6e 67 61 70 70 20 hungapp
> >> > > 0038: 30 2e 30 2e 30 2e 30 20 0.0.0.0
> >> > > 0040: 61 74 20 6f 66 66 73 65 at offse
> >> > > 0048: 74 20 30 30 30 30 30 30 t 000000
> >> > > 0050: 30 30 00
> >> > >
> >> > > Most recent Application Warning was:
> >> > >
> >> > > Event Type: Warning
> >> > > Event Source: Userenv
> >> > > Event Category: None
> >> > > Event ID: 1517
> >> > > Date: 25/01/2006
> >> > > Time: 20:59:26
> >> > > User: NT AUTHORITY\SYSTEM
> >> > > Computer: OFFICEDELL
> >> > > Description:
> >> > > Windows saved user OFFICEDELL\Chalkers registry while an application
> >> > > or
> >> > > service was still using the registry during log off. The memory used
> >> > > by
> >> > > the
> >> > > user's registry has not been freed. The registry will be unloaded
> >> > > when it
> >> > > is
> >> > > no longer in use.
> >> > >
> >> > > This is often caused by services running as a user account, try
> >> > > configuring
> >> > > the services to run in either the LocalService or NetworkService
> >> > > account.
> >> > >
> >> > > For more information, see Help and Support Center at
> >> > > http://go.microsoft.com/fwlink/events.asp.
> >> > >
> >> > > I hope all this means more to you than it does to me! Any ideas on
> >> > > where
> >> > > to
> >> > > look next? Many thanks.
> >> > >
> >> > >
> >> > >
> >> >
.
Relevant Pages
- Re: Does a Repair Install Affect Performance?
... When the performance is poor check on CPU for unexplained activity. ... For further information about Process Explorer see here: ... >> Sometimes CPU usage spikes when lots of apps open, ... >>> One file suggests you have a Dell computer. ...
(microsoft.public.windowsxp.perform_maintain) - Re: Yet another SVCHOST.EXE posting (my workaround)
... SVCHOST.EXE is an important part of Windows. ... Process Explorer you can see which and that is why I asked about the Command ... about the Windows Automatic Update service -a common cause of excessive CPU ... First off I killed PID 1302 and noticed that CPU usage fell down ...
(microsoft.public.windowsxp.general) - Re: Computer too slow
... It happened over night and the startup takes about 20 minutes (Even when I just turn on my computer and the Windows XP logo is shown with the progression bar running, ... When previously I went to the service center for the same problem, the engineer mentioned to me that this is caused by one of the registry entries corrupted and the coordination between the drives, cd drives and all other internal components are not running properly thats why things are so slow and he also mentioned that fixing it is pretty easy and that all we have to do is delete the registry entry and restart the computer and Windows XP will automatically reinstall the registry entry by itself and all would be fine - he did it and proved to me that it worked and well, it DID work. ... To find and display what could be the problem try Process Explorer: ... In the column on the left named 'CPU', look for any high CPU usage. ...
(microsoft.public.windowsxp.perform_maintain) - Re: Does a Repair Install Affect Performance?
... I suggest you try cCleaner. ... CPU shot up to 80%+ for about 12 seconds while it started. ... > IE, iTunes, Microsoft Antispyware and Process Explorer itself. ... >>>> Sometimes CPU usage spikes when lots of apps open, ...
(microsoft.public.windowsxp.perform_maintain) - Re: svchst.exe
... Though I do now think that it is the updates that are causing the CPU ... Process Explorer provides more information than Task ... The First Question Of Troubleshooting: ...
(microsoft.public.windowsxp.basics) |
|
