Re: CPU at 100%

Thank you, Glen. I am now on my wife's computer. Virus software is run
daily and is regularly updated. We ran Spyware and found only 13 tracking
cookies, but the problem precedes the last time she ran it.

After leaving it for an hour or so I came back to find the computer running
normally. I unplugged the Ethernet cord so I could launch Outlook without
it trying to download messages. It opened fine but gave me the message
about the personal and archive folders not closely properly. I ran the
Inbox repair tool successfully.

I then left Outlook opened and plugged in the Ethernet cord so I could
launch IE and try to update Windows, all the while keeping the task manager
open so I could monitor CPU usage. To this point everything was normal.

Checking for update took several minutes, but while it was checking, CPU
usage shot up to 100% almost constantly. I think it coincided with Outlook
trying to download messages, which it did Afterwards, CPU usage returned to
normal.

But again I wasn't able to update Windows. Getting the same message about a
Genuine Validation Tool, message KB892130. I'm not given the option to
proceed further with the update, even though an article about this tool says
it's not necessary for automatic updates. However, the Automatic Updates
have failed for perhaps months.

If this is helpful, here are the most recent lines from the windows update
log:

2006-07-13 18:23:44 2288 e84 COMAPI <<-- SUBMITTED -- COMAPI: Download
[ClientId = MicrosoftUpdate]
2006-07-13 18:23:44 1016 f8c DnldMgr *************
2006-07-13 18:23:44 1016 f8c DnldMgr ** START ** DnldMgr: Downloading
updates [CallerId = MicrosoftUpdate]
2006-07-13 18:23:44 1016 f8c DnldMgr *********
2006-07-13 18:23:44 1016 f8c DnldMgr * Priority = 3, ServiceId =
{7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:44 1016 f8c DnldMgr * Updates to download = 1
2006-07-13 18:23:44 1016 f8c Agent * Title = Windows Genuine Advantage
Validation Tool (KB892130)
2006-07-13 18:23:44 1016 f8c Agent * UpdateId =
{F2597149-61CE-42B0-8A00-AF17ED61C94C}.101
2006-07-13 18:23:44 1016 f8c Agent * Bundles 1 updates:
2006-07-13 18:23:44 1016 f8c Agent *
{43C7710E-6A36-4B60-A857-67496599512F}.101
2006-07-13 18:23:44 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:44 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:44 1016 f8c DnldMgr *********** DnldMgr: New download job
[UpdateId = {43C7710E-6A36-4B60-A857-67496599512F}.101] ***********
2006-07-13 18:23:44 1016 f8c DnldMgr * Queueing update for download
handler request generation.
2006-07-13 18:23:44 1016 f8c DnldMgr Generating download request for update
{43C7710E-6A36-4B60-A857-67496599512F}.101
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL: BITS service was not fixed up
and thus CCI was not reattempted. (hr = 80040154)
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL: Failed to connect to the BITS
service; unable to start new downloads or interact with existing download
jobs. (hr = 80040154)
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL:
DM:CAgentDownloadManager::GetDownloadDataAndHandler: GetBitsManager failed
with 0x80246008.
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL:
DM:CAgentDownloadManager::GenerateAllDownloadRequests:
GetDownloadDataAndHandler failed with 0x80246008.
2006-07-13 18:23:44 1016 f8c DnldMgr Error 0x80246008 occurred while
downloading update; notifying dependent calls.
2006-07-13 18:23:50 1016 f8c DnldMgr WARNING: Extended error for reported
error 80246008 = 80040154
2006-07-13 18:23:50 1016 f8c DnldMgr WARNING: Extended error for reported
error 80246008 = 80040154
2006-07-13 18:23:50 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:50 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:50 1016 f8c Agent *********
2006-07-13 18:23:50 1016 f8c Agent ** END ** Agent: Downloading updates
[CallerId = MicrosoftUpdate]
2006-07-13 18:23:50 1016 f8c Agent *************
2006-07-13 18:23:50 2288 d7c COMAPI >>-- RESUMED -- COMAPI: Download
[ClientId = MicrosoftUpdate]
2006-07-13 18:23:50 2288 d7c COMAPI - Download call complete (succeeded =
0, succeeded with errors = 0, failed = 1, unaccounted = 0)
2006-07-13 18:23:50 2288 d7c COMAPI - WARNING: Exit code = 0x00000000;
Call error code = 0x80240022
2006-07-13 18:23:50 2288 d7c COMAPI ---------
2006-07-13 18:23:50 2288 d7c COMAPI -- END -- COMAPI: Download [ClientId
= MicrosoftUpdate]
2006-07-13 18:23:50 2288 d7c COMAPI -------------
2006-07-13 18:23:55 1016 f8c Report REPORT EVENT:
{61166338-A266-472A-8AD9-01B94848D486} 2006-07-13 18:23:50-0400 1 161 101
{F2597149-61CE-42B0-8A00-AF17ED61C94C} 101 80246008 MicrosoftUpdate Failure
Content Download Error: Download failed.


I re-opened Outlook and it seemed to be fine, quickly checking for email
with CPU usage low.

For the record, this is a valid Windows install; it came iwth the computer,
which is several years old but has plenty of disk space and we installed
Service Pack 2 about a year or two ago.

While Outlook is running OK now, it has done so before in the last month
only to return to it sluggish state. While everything is normal, I'd like
to update Windows if I can. Thanks again.

Bob Griendling


"Glen" <gp2002hwREMOVEME@xxxxxxxxxxx> wrote in message
news:%23GIZUqspGHA.3600@xxxxxxxxxxxxxxxxxxxxxxx
ctrl alt del will bring up task manager. The process tab will show which
process is using the cpu cycles. Run antivirus and antispyware scans with
updated definitions. Malware infection is high on the list of possable
causes. When you've run multiple scans and cleaned it. Repost if you still
need help.

Antispyware

Microsoft Antispyware
http://www.microsoft.com/athome/security/spyware/software/default.mspx

Adaware
http://www.lavasoftusa.com/software/adaware/

Spybot S&E
http://www.safer-networking.org/en/index.html

Hijackthis
http://www.spywareinfo.com/~merijn/

Hijackthis Tutorial
http://www.bleepingcomputer.com/tutorials/tutorial42.html

Spyware forums
http://www.merijn.org/forums.html

http://forums.spywareinfo.com/

AntiVirus

AVG Antivirus
http://free.grisoft.com/doc/1

Avast
http://www.avast.com/

Online Anti Virus
http://housecall.trendmicro.com/


MULTI_AV.EXE
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

--
Please repost if you find the fault

Glen P
~~~~~~~~~~~~~~~~~~~~~
"Bob Griendling" <bob@xxxxxxxxxxxxxx> wrote in message
news:ekt2kOspGHA.5104@xxxxxxxxxxxxxxxxxxxxxxx
I am writing this for someone else you can't because her computer is
virtually useless. It has slowed to a crawl. There may be several
problems. She has Win XP w/ service pack 2; AVG virus protection and the
windows Firewall.

1. The CPU seems to be running at 100%. I tried to see if a printer
spool was the problem but apparently not, as the fix I found didn't work.
AVG virus scan has been fine for weeks and she uses AdAware on a fairly
regular basis.

2. The slowness seems to begin with opening Outlook, which will run fine
for a short while -- a day or two -- and then gives us messages that
Personal folders and archive folders were not closed properly. Sometimes
we can get to inbox repair tool, which seems to fix it, but then it
happens again within hours or a day or two. She has not been able to
confirm for me whether the two problems happen simultaneously.

3. After looking at her processes to see if I could find a virus or worm,
I tried to install all Windows updates, but I'm not able to do so,
getting a message that "Windows Genuine Advantage Validation Tool did not
load." I was able to go through the update history and it's apparent that
automatic updates have not been happening for a long while, so she may
have security risks that are contributing to this problem.

Is there any additional information I can provide to help anyone
troubleshoot this for me? If I could find out what's hogging all her CPU
resources, I might be able to provide additional information, but as it
stand now, it can take 10-15 minutes just for one operation.

Thanks in advance,

Bob







.

Relevant Pages

  • Re: CTF Loader
    ... can cause data corruption that can stop windows in it's tracks. ... If it were a virus that you had done this to - it could theoretically, ... Finally, I would recommend that you download, install and run the program - ... After becoming confident the file is not infected - Make DEP (Data Execution ...
    (microsoft.public.windowsxp.general)
  • Re: How I fixed my Update problem
    ... A couple of months ago I had my system cleaned of a virus and did ... Download, install, run, update and perform a full scan with the ... Download/Install the latest Windows Installer: ...
    (microsoft.public.windowsupdate)
  • Re: svchost.exe is a virus! HELP!
    ... I was being sarcastic when I said that svchost.exe is itself becoming a virus ... I have updates all the recomended Windows Update fixes, patches, windows ... AV & A-S scan in safe mode. ... Download David H. Lipman's MULTI_AV.EXE from the URL ...
    (microsoft.public.windowsxp.general)
  • Re: How I fixed my Update problem
    ... A couple of months ago I had my system cleaned of a virus and did ... Download, install, run, update and perform a full scan with the ... Download/Install the latest Windows Installer: ...
    (microsoft.public.windowsupdate)
  • Re: How do I recover?
    ... >infected with the msblast virus, ... there is a Windows 2000 version ... >7) Download and install. ... >security patches and updates that Microsoft bugs you ...
    (microsoft.public.security)
Loading