TechSpot

Memory Problem

By lee1612k2
Jan 3, 2007
  1. For some reason when I open the task manager the memory is always jumping up and down constantly. Lets say I open up the task manager and there are 25 processes running on the cpu section they all "jump around" from 0-any number. And I dont know if this causes me to lose the ability to double click to open up anything. The only way to get my double clikc back is to restart my pc. But the memory jumping always happens 24/7. I put up this hijack report just incase it helps. Please help me guys I never seen this problem before.



    Logfile of HijackThis v1.99.1
    Scan saved at 5:34:05 AM, on 1/3/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5730.0011)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Winamp\winamp.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\WinRAR\WinRAR.exe
    C:\DOCUME~1\MARCOS~1.MAR\LOCALS~1\Temp\Rar$EX00.312\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by121fd.bay121.hotmail.msn.com/resources/MsnPUpld.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe
    O23 - Service: DirectX multi version - Unknown owner - C:\WINDOWS\system32\dxcombin.exe (file missing)
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: IWin service - Unknown owner - C:\WINDOWS\system32\iwinapp.exe (file missing)
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: ODBC service - Unknown owner - C:\WINDOWS\system32\odbc.exe (file missing)
    O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    O23 - Service: WinTrust32 - Unknown owner - C:\WINDOWS\system32\wintrust32.exe (file missing)
     
  2. nismo91

    nismo91 TS Evangelist Posts: 900   +15

    Hello and welcome to techspot:)

    Do you mean the mem. usage in the task manager?
    I suggest you update your windows xp, and run a complete virusscan
    or even doing a ram test. Sorry, i forgot the download link but it should appear in the download tabs above.

    Good luck.
     
  3. N3051M

    N3051M TS Evangelist Posts: 2,115

    Hi. If you suspect a malware causing the trouble on your system, please read this first: http://www.techspot.com/vb/topic65943.html before deciding if you want to start the cleaning process. If you do, read this to help you: http://www.techspot.com/vb/topic58138.html

    Few pointers:
    * Place your HiJackThis.exe Program in the folder C:\Program Files\HiJackThis (create a folder if it doesn't exist)
    * Rename the HiJackThis.exe file to something else like HiJackThis1991.exe, since some malware hides from the original file name
    * Post the HJT log accompanied with an AVG Antispyware Log as a .txt or .log attachments in the Security and Web section of the forum.


    Open up task manager, either by right clicking the start bar and going to Task Manager or pressing CTRL + ALT + Del keys simultainiously and go to the processes tab and see what is taking up your CPU time. Note that System Idle Process should read ~100% if no processes are using the PC.
     
  4. Goalie

    Goalie TS Booster Posts: 616

    Hi.. well, first off looking at your HJT log things look MOSTLY clean, however, I see evidence that you've had spyware or viruses in the past. I'm not seeing any services loading at login that look like a virus scanner- do you have one loading currently?

    I see that NAVLogon DLL called, which is Norton/Symantec Anti-Virus, but I don't see the other corresponding services that you would expect with that.

    Memory useage fluctuating is not uncommon, unless it's large numbers by a single process. That in and of itself doesn't worry me. You say you lose your ability to double click- is there any other symptoms that come when this happens? What happens when you try to double click?

    If you go into the control panel and under mouse properties, you can change the mouse sensitivity. After you've lost the double click ability, does changing these settings help bring it back or not?

    I hope this helps some.. can you describe more exactly what problem you're wanting our help with? Your initial post isn't too clear what the problem is and what symptoms you have. Hope I can help some...
     
  5. lee1612k2

    lee1612k2 TS Rookie Topic Starter

  6. Goalie

    Goalie TS Booster Posts: 616

    system idle is nothing to be afraid of- system idle means your machine is doing NOTHING!

    I see nothing in that video of concern to me in performance measures or in terms of processes that worry me, honestly.
     
  7. lee1612k2

    lee1612k2 TS Rookie Topic Starter

    why

    but why would it jump around like dat???
     
  8. Goalie

    Goalie TS Booster Posts: 616

    System Idle is the percentage of your processor time that is not currently in use.

    So, if processes that run in the background such as system services, drivers, anti-virus, communications software, and the such need a little bit of CPU time for "housekeeping" or whatever purposes they need, they'll take the time they need. System Idle will then go down accordingly.

    If system idle shows 99%, that means your machine is doing nothing. If your SnagIt software needs 25% of the CPU to do its stuff, though, the MAX that system idle will be is 75%.

    Random jumps are of no real concern. It's major trends that I'd worry about, for example if system idle were 50% or less on average when you had no other major programs running, and that's over a minute period.

    Does that make sense?
     
  9. lee1612k2

    lee1612k2 TS Rookie Topic Starter

    about me loosing the double click its usually when i'm messing around with winamp and fl studio but ithink it comes from the winamp. I tried recording it but since i lost the double click i couldn't save it. it seems to come from no where. and when it happens everything goes fast like the winamp when u go to credits it seems speed up and the bar that is vertically when ur typing it blinks faster than normal too. I'm going to try and record and see if i can catch this.

    yea it does thanks i just thought it was the other way around.
     
  10. Goalie

    Goalie TS Booster Posts: 616

    Be sure you don't have any keys or buttons that are sticking when this happens. Also, you shouldn't need to double click something to save a file- menus work with single clicks almost always.

    Also, check the mouse settings like I said to see if you can adjust to bring back the double click somehow. Also, does it affect your typing at all? IE does holding down a key repeat faster or slower?
     
  11. lee1612k2

    lee1612k2 TS Rookie Topic Starter

    yea i know but the video program i used i needed to double click on the icon to stop the video then save dats wat i ment. And the typing thing i havent tried it but i'm going to try and record it with another program hopefully i'll cath it.

    I Captured the damn thing as u can see how the things went very fast. its 62mb and i'm sorry if it a big file but the video is no more then 2 minutes long i will post as soon i'm done uploading ohh sorry thanks for the heads up...still uploading...
     
  12. Goalie

    Goalie TS Booster Posts: 616

    Please don't double post- if you have more info to add, just edit your original post. Saves quite a bit of real estate on the screen, and avoids making the mods angry!

    You can always single click on an icon and then hit enter to open up whatever program- just remember, anything you can do with a mouse, you technically can do with a keyboard. Just sometimes it's not as friendly. (Many times, it's actually more friendly once you get used to it...)
     
  13. lee1612k2

    lee1612k2 TS Rookie Topic Starter

    sorry about the posting

    This will be the last post and i will just edit it from now on to prevent getting people angry here's the video of this crazy cpu stuff http://www.filefactory.com/file/3a7c14/
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...