Stuttering videos and high CPU usage.

owitemisermusa

Hi guys,

Been having some trouble with stuttering videos, accompanied by spikes and sustained highs in CPU usage as well. Upgraded my laptop RAM from 2 to 3GB which helped a bit but problem has recurred.

Posting my hijackthis log as a new thread as advised by alienrik (thanks).

Appreciate any help.



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:19:40, on 07/11/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Taskmgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\Krusty.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: LastClosedTab - {e15e75e9-a653-42a3-8d05-f2f7e309bdca} - mscoree.dll (file missing)
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Open Last Closed Tab - {e15e75e9-a653-42a3-8d05-f2f7e309bdca} - mscoree.dll (file missing)
O13 - Gopher Prefix:
O16 - DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab
O16 - DPF: {2EDF75C0-5ABD-49f9-BAB6-220476A32034} (System Requirements Lab) - http://intel-drv-cdn.systemrequirementslab.com/multi/bin/sysreqlab_srlx.cab
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe
--
End of file - 8309 bytes

andy2004

well you have 4 Iexplore.exe in that log, unless you have 4 Internet explorer windows something is wrong.

O9 - Extra button: Open Last Closed Tab - {e15e75e9-a653-42a3-8d05-f2f7e309bdca} - mscoree.dll (file missing)
I Would disable Zonelabs as well, known to use a lot of resources.

I would also suggest downloading Malwarebytes, and run a scan to make sure no spyware is infecting.
What codec pack have you got installed to watch movies, or are you using VLC.

owitemisermusa

andy2004 wrote: »

well you have 4 Iexplore.exe in that log, unless you have 4 Internet explorer windows something is wrong.

O9 - Extra button: Open Last Closed Tab - {e15e75e9-a653-42a3-8d05-f2f7e309bdca} - mscoree.dll (file missing)
I Would disable Zonelabs as well, known to use a lot of resources.

I would also suggest downloading Malwarebytes, and run a scan to make sure no spyware is infecting.
What codec pack have you got installed to watch movies, or are you using VLC.

Hi andy, iexplore seems to run as multiples in processes. Assumed it reflects open tabs but seems to be more than the tabs and windows open.

the last closed tabs is something i downloaded to open tabs that explorer could not re-open. IE8 seems to have removed a very useful tab opeing thingy.

I recently downloaded VLC to watch movies though I haven't used it yet. Is it showing as a running program? It shouldn't cos it's not.

I have considered removing zonealarm as it seems to hang my system during startup. Shame really, it's been good till the last year or so.

Malwarebytes eh? Is it that good? I have uninstalled spybot and now run antivir, windows security essentials (replaced Defender) and winpatrol.

Ta.

OMM

andy2004

Malwarebytes is one of the best if not the best spyware remover, and as its completely free to use, there is an option to pay for it and this does add a couple of features like the ability to update itself, and run as a service in the background, but how hard is it really to click update before running a scan. pretty much thats it.

VLC shouldnt be running unless for some reason when you installed it, there was a automatic run with windows option.
personally i use K-lite mega codec pack with media player. never had any issues.
Didnt know about IE8 and its tabs using a new IE.exe per tab.
I havent used Internet explorer since version 6, and then found AvantBrowser (freeware) which I switch to which is a ie shell aka used Internet explorer engine, added features like multi-tabbed browseing when IE6 was in use which didnt have it. 6years and then switch to Orca 1.1 which used the firefox engine, but was a bit buggy, and so switched to Firefox 3.1 when it was realised.
Its also possible to change the nvidia programs, to manual, as they're not really required, unless you change your settings on a daily basis. via services.msc, automatic to manual.
nvsvc32.exe is the Nvidia Display Driver Service. Which apparently does nothing, and you absolutley can safely set to manual or disable it completely without any side effects.
Have mine disabled, could be different under vista, i'm still running xp pro sp3

As an extra thought there is a free webpage you could visit which you could use to turn off unused services which are currently running.
http://www.blackviper.com/WinVista/servicecfg.htm

owitemisermusa

Hi Andy,
I realise that I have the Shark007 codec pack for media player and it works well so I have uninstalled VLC and GOM player (a bit of a hoarder eh?)
I'll have at a look at other ie alternatives. I already use Firefox for online banking only so want to keep it that way. Somehow I feel nervous about using google's chrome - I feel exposed cos I use their search engine a lot and have a googlemail address. probably just being silly.
Will also check out the website you mentioned.
Thanks for your help.

Anthing else I should consider changing/stopping?

sharkie

just a few random comments: vlc tends to use it own inbuilt codecs, while other players often use external codecs, but this is not always the case.

Some codecs are better and need less power than others, some give great quality and some just case the picture to stutter.

Sometimes the file is hd quality and you may need quiet a decent spec to play it. The mkv files have always caused me endless sync problems!

You wont loose out by looking for spyware and be careful as that virus checker etc may be steeling your power - download procexp from ms site to check

owitemisermusa

Thanks Sharkie. Windows media player works well with the shark codec. Tested it brieflywith downloaded videos without trouble so I uninstalled VLC and GOM.

What virus checker are you referring to?

I have the stuttering issues (and CPU spikes) with video streamed online. Wensites like youtube, BBC, ATP tennis etc cause me the most bother.

Wondering if it has anything to do with IE and possibly the Zonealarm firewall?

andy2004

as previous stately probably zonealarm, other webbrowsers well avant browser which uses IE engine, has tabbed browsing, doesnt open another process for a new tab, used it for 6years.
Ocra Browser same as Avantbrowser as written by the same people, but uses the firefox engine GECKO.

Some other browsers for you to look at
http://www.filehippo.com/software/browsers/
safe site.

[Deleted User]

Internet Explorer 8 creates a minimum of two processes when it's executed, one for the frame and one for the initial tab. If the user increases the number of tabs open, more processes will be created for them. Multiple processes minimise the disruption that can occur if a tab crashes, as it won't pull the entire program down with it, plus it introduces a significant improvement in overall security.

owitemisermusa

anewhope wrote: »

Internet Explorer 8 creates a minimum of two processes when it's executed, one for the frame and one for the initial tab. If the user increases the number of tabs open, more processes will be created for them. Multiple processes minimise the disruption that can occur if a tab crashes, as it won't pull the entire program down with it, plus it introduces a significant improvement in overall security.

Hmm.... it always seems to take everything down when it crashes!

It opens more processes as I open more tabs, but doesn't shut them down when I close the tabs.

How can you tell which process is responsible for increased CPU usage, I mean not memory but CPU use?

Thanks.

[Deleted User]

Ctrl Alt Delete then go into Task Manager. There's a column for CPU that you can click and it'll display the usage in ascending or descending order.