CPU at 100%

B

Bob Griendling

I am writing this for someone else you can't because her computer is
virtually useless. It has slowed to a crawl. There may be several
problems. She has Win XP w/ service pack 2; AVG virus protection and the
windows Firewall.

1. The CPU seems to be running at 100%. I tried to see if a printer spool
was the problem but apparently not, as the fix I found didn't work. AVG
virus scan has been fine for weeks and she uses AdAware on a fairly regular
basis.

2. The slowness seems to begin with opening Outlook, which will run fine for
a short while -- a day or two -- and then gives us messages that Personal
folders and archive folders were not closed properly. Sometimes we can get
to inbox repair tool, which seems to fix it, but then it happens again
within hours or a day or two. She has not been able to confirm for me
whether the two problems happen simultaneously.

3. After looking at her processes to see if I could find a virus or worm, I
tried to install all Windows updates, but I'm not able to do so, getting a
message that "Windows Genuine Advantage Validation Tool did not load." I
was able to go through the update history and it's apparent that automatic
updates have not been happening for a long while, so she may have security
risks that are contributing to this problem.

Is there any additional information I can provide to help anyone
troubleshoot this for me? If I could find out what's hogging all her CPU
resources, I might be able to provide additional information, but as it
stand now, it can take 10-15 minutes just for one operation.

Thanks in advance,

Bob
 
G

Glen

ctrl alt del will bring up task manager. The process tab will show which
process is using the cpu cycles. Run antivirus and antispyware scans with
updated definitions. Malware infection is high on the list of possable
causes. When you've run multiple scans and cleaned it. Repost if you still
need help.

Antispyware

Microsoft Antispyware
http://www.microsoft.com/athome/security/spyware/software/default.mspx

Adaware
http://www.lavasoftusa.com/software/adaware/

Spybot S&E
http://www.safer-networking.org/en/index.html

Hijackthis
http://www.spywareinfo.com/~merijn/

Hijackthis Tutorial
http://www.bleepingcomputer.com/tutorials/tutorial42.html

Spyware forums
http://www.merijn.org/forums.html

http://forums.spywareinfo.com/

AntiVirus

AVG Antivirus
http://free.grisoft.com/doc/1

Avast
http://www.avast.com/

Online Anti Virus
http://housecall.trendmicro.com/


MULTI_AV.EXE
http://www.ik-cs.com/programs/virtools/Multi_AV.exe
 
K

Karla Leavelle

Thank you, Glen. I am now on my wife's computer. Virus software is run
daily and is regularly updated. We ran Spyware and found only 13 tracking
cookies, but the problem precedes the last time she ran it.

After leaving it for an hour or so I came back to find the computer running
normally. I unplugged the Ethernet cord so I could launch Outlook without
it trying to download messages. It opened fine but gave me the message
about the personal and archive folders not closely properly. I ran the
Inbox repair tool successfully.

I then left Outlook opened and plugged in the Ethernet cord so I could
launch IE and try to update Windows, all the while keeping the task manager
open so I could monitor CPU usage. To this point everything was normal.

Checking for update took several minutes, but while it was checking, CPU
usage shot up to 100% almost constantly. I think it coincided with Outlook
trying to download messages, which it did Afterwards, CPU usage returned to
normal.

But again I wasn't able to update Windows. Getting the same message about a
Genuine Validation Tool, message KB892130. I'm not given the option to
proceed further with the update, even though an article about this tool says
it's not necessary for automatic updates. However, the Automatic Updates
have failed for perhaps months.

If this is helpful, here are the most recent lines from the windows update
log:

2006-07-13 18:23:44 2288 e84 COMAPI <<-- SUBMITTED -- COMAPI: Download
[ClientId = MicrosoftUpdate]
2006-07-13 18:23:44 1016 f8c DnldMgr *************
2006-07-13 18:23:44 1016 f8c DnldMgr ** START ** DnldMgr: Downloading
updates [CallerId = MicrosoftUpdate]
2006-07-13 18:23:44 1016 f8c DnldMgr *********
2006-07-13 18:23:44 1016 f8c DnldMgr * Priority = 3, ServiceId =
{7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:44 1016 f8c DnldMgr * Updates to download = 1
2006-07-13 18:23:44 1016 f8c Agent * Title = Windows Genuine Advantage
Validation Tool (KB892130)
2006-07-13 18:23:44 1016 f8c Agent * UpdateId =
{F2597149-61CE-42B0-8A00-AF17ED61C94C}.101
2006-07-13 18:23:44 1016 f8c Agent * Bundles 1 updates:
2006-07-13 18:23:44 1016 f8c Agent *
{43C7710E-6A36-4B60-A857-67496599512F}.101
2006-07-13 18:23:44 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:44 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:44 1016 f8c DnldMgr *********** DnldMgr: New download job
[UpdateId = {43C7710E-6A36-4B60-A857-67496599512F}.101] ***********
2006-07-13 18:23:44 1016 f8c DnldMgr * Queueing update for download
handler request generation.
2006-07-13 18:23:44 1016 f8c DnldMgr Generating download request for update
{43C7710E-6A36-4B60-A857-67496599512F}.101
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL: BITS service was not fixed up
and thus CCI was not reattempted. (hr = 80040154)
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL: Failed to connect to the BITS
service; unable to start new downloads or interact with existing download
jobs. (hr = 80040154)
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL:
DM:CAgentDownloadManager::GetDownloadDataAndHandler: GetBitsManager failed
with 0x80246008.
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL:
DM:CAgentDownloadManager::GenerateAllDownloadRequests:
GetDownloadDataAndHandler failed with 0x80246008.
2006-07-13 18:23:44 1016 f8c DnldMgr Error 0x80246008 occurred while
downloading update; notifying dependent calls.
2006-07-13 18:23:50 1016 f8c DnldMgr WARNING: Extended error for reported
error 80246008 = 80040154
2006-07-13 18:23:50 1016 f8c DnldMgr WARNING: Extended error for reported
error 80246008 = 80040154
2006-07-13 18:23:50 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:50 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:50 1016 f8c Agent *********
2006-07-13 18:23:50 1016 f8c Agent ** END ** Agent: Downloading updates
[CallerId = MicrosoftUpdate]
2006-07-13 18:23:50 1016 f8c Agent *************
2006-07-13 18:23:50 2288 d7c COMAPI >>-- RESUMED -- COMAPI: Download
[ClientId = MicrosoftUpdate]
2006-07-13 18:23:50 2288 d7c COMAPI - Download call complete (succeeded =
0, succeeded with errors = 0, failed = 1, unaccounted = 0)
2006-07-13 18:23:50 2288 d7c COMAPI - WARNING: Exit code = 0x00000000;
Call error code = 0x80240022
2006-07-13 18:23:50 2288 d7c COMAPI ---------
2006-07-13 18:23:50 2288 d7c COMAPI -- END -- COMAPI: Download [ClientId
= MicrosoftUpdate]
2006-07-13 18:23:50 2288 d7c COMAPI -------------
2006-07-13 18:23:55 1016 f8c Report REPORT EVENT:
{61166338-A266-472A-8AD9-01B94848D486} 2006-07-13 18:23:50-0400 1 161 101
{F2597149-61CE-42B0-8A00-AF17ED61C94C} 101 80246008 MicrosoftUpdate Failure
Content Download Error: Download failed.


I re-opened Outlook and it seemed to be fine, quickly checking for email
with CPU usage low.

For the record, this is a valid Windows install; it came iwth the computer,
which is several years old but has plenty of disk space and we installed
Service Pack 2 about a year or two ago.

While Outlook is running OK now, it has done so before in the last month
only to return to it sluggish state. While everything is normal, I'd like
to update Windows if I can. Thanks again.

Bob Griendling
 
G

Glen

Open computer management | services. Look for automatic updates and set it
to automatic also background inteligent transfer service, set it to
automatic. Reboot and try updates. Keep Outlook closed. What happens?

Go to Windows Update and select only one update (not the Genuine Validation
Tool). What happens?

Are you using Outlook (which version) or Outlook Express.

I'm unsure if you have two seperate faults, Windows update not working and
Outlook (Express????) not working properly. See if the faults are seperate
by doing what I wrote above. Repost with reults.
--
Please repost if you find the fault

Glen P
~~~~~~~~~~~~~~~~~~~~~
Karla Leavelle said:
Thank you, Glen. I am now on my wife's computer. Virus software is run
daily and is regularly updated. We ran Spyware and found only 13 tracking
cookies, but the problem precedes the last time she ran it.

After leaving it for an hour or so I came back to find the computer
running normally. I unplugged the Ethernet cord so I could launch Outlook
without it trying to download messages. It opened fine but gave me the
message about the personal and archive folders not closely properly. I
ran the Inbox repair tool successfully.

I then left Outlook opened and plugged in the Ethernet cord so I could
launch IE and try to update Windows, all the while keeping the task
manager open so I could monitor CPU usage. To this point everything was
normal.

Checking for update took several minutes, but while it was checking, CPU
usage shot up to 100% almost constantly. I think it coincided with
Outlook trying to download messages, which it did Afterwards, CPU usage
returned to normal.

But again I wasn't able to update Windows. Getting the same message about
a Genuine Validation Tool, message KB892130. I'm not given the option to
proceed further with the update, even though an article about this tool
says it's not necessary for automatic updates. However, the Automatic
Updates have failed for perhaps months.

If this is helpful, here are the most recent lines from the windows update
log:

2006-07-13 18:23:44 2288 e84 COMAPI <<-- SUBMITTED -- COMAPI: Download
[ClientId = MicrosoftUpdate]
2006-07-13 18:23:44 1016 f8c DnldMgr *************
2006-07-13 18:23:44 1016 f8c DnldMgr ** START ** DnldMgr: Downloading
updates [CallerId = MicrosoftUpdate]
2006-07-13 18:23:44 1016 f8c DnldMgr *********
2006-07-13 18:23:44 1016 f8c DnldMgr * Priority = 3, ServiceId =
{7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:44 1016 f8c DnldMgr * Updates to download = 1
2006-07-13 18:23:44 1016 f8c Agent * Title = Windows Genuine Advantage
Validation Tool (KB892130)
2006-07-13 18:23:44 1016 f8c Agent * UpdateId =
{F2597149-61CE-42B0-8A00-AF17ED61C94C}.101
2006-07-13 18:23:44 1016 f8c Agent * Bundles 1 updates:
2006-07-13 18:23:44 1016 f8c Agent *
{43C7710E-6A36-4B60-A857-67496599512F}.101
2006-07-13 18:23:44 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:44 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:44 1016 f8c DnldMgr *********** DnldMgr: New download
job [UpdateId = {43C7710E-6A36-4B60-A857-67496599512F}.101] ***********
2006-07-13 18:23:44 1016 f8c DnldMgr * Queueing update for download
handler request generation.
2006-07-13 18:23:44 1016 f8c DnldMgr Generating download request for
update {43C7710E-6A36-4B60-A857-67496599512F}.101
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL: BITS service was not fixed up
and thus CCI was not reattempted. (hr = 80040154)
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL: Failed to connect to the BITS
service; unable to start new downloads or interact with existing download
jobs. (hr = 80040154)
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL:
DM:CAgentDownloadManager::GetDownloadDataAndHandler: GetBitsManager failed
with 0x80246008.
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL:
DM:CAgentDownloadManager::GenerateAllDownloadRequests:
GetDownloadDataAndHandler failed with 0x80246008.
2006-07-13 18:23:44 1016 f8c DnldMgr Error 0x80246008 occurred while
downloading update; notifying dependent calls.
2006-07-13 18:23:50 1016 f8c DnldMgr WARNING: Extended error for reported
error 80246008 = 80040154
2006-07-13 18:23:50 1016 f8c DnldMgr WARNING: Extended error for reported
error 80246008 = 80040154
2006-07-13 18:23:50 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:50 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:50 1016 f8c Agent *********
2006-07-13 18:23:50 1016 f8c Agent ** END ** Agent: Downloading updates
[CallerId = MicrosoftUpdate]
2006-07-13 18:23:50 1016 f8c Agent *************
2006-07-13 18:23:50 2288 d7c COMAPI >>-- RESUMED -- COMAPI: Download
[ClientId = MicrosoftUpdate]
2006-07-13 18:23:50 2288 d7c COMAPI - Download call complete (succeeded
= 0, succeeded with errors = 0, failed = 1, unaccounted = 0)
2006-07-13 18:23:50 2288 d7c COMAPI - WARNING: Exit code = 0x00000000;
Call error code = 0x80240022
2006-07-13 18:23:50 2288 d7c COMAPI ---------
2006-07-13 18:23:50 2288 d7c COMAPI -- END -- COMAPI: Download
[ClientId = MicrosoftUpdate]
2006-07-13 18:23:50 2288 d7c COMAPI -------------
2006-07-13 18:23:55 1016 f8c Report REPORT EVENT:
{61166338-A266-472A-8AD9-01B94848D486} 2006-07-13 18:23:50-0400 1 161 101
{F2597149-61CE-42B0-8A00-AF17ED61C94C} 101 80246008 MicrosoftUpdate
Failure Content Download Error: Download failed.


I re-opened Outlook and it seemed to be fine, quickly checking for email
with CPU usage low.

For the record, this is a valid Windows install; it came iwth the
computer, which is several years old but has plenty of disk space and we
installed Service Pack 2 about a year or two ago.

While Outlook is running OK now, it has done so before in the last month
only to return to it sluggish state. While everything is normal, I'd like
to update Windows if I can. Thanks again.

Bob Griendling


Glen said:
ctrl alt del will bring up task manager. The process tab will show which
process is using the cpu cycles. Run antivirus and antispyware scans with
updated definitions. Malware infection is high on the list of possable
causes. When you've run multiple scans and cleaned it. Repost if you
still need help.

Antispyware

Microsoft Antispyware
http://www.microsoft.com/athome/security/spyware/software/default.mspx

Adaware
http://www.lavasoftusa.com/software/adaware/

Spybot S&E
http://www.safer-networking.org/en/index.html

Hijackthis
http://www.spywareinfo.com/~merijn/

Hijackthis Tutorial
http://www.bleepingcomputer.com/tutorials/tutorial42.html

Spyware forums
http://www.merijn.org/forums.html

http://forums.spywareinfo.com/

AntiVirus

AVG Antivirus
http://free.grisoft.com/doc/1

Avast
http://www.avast.com/

Online Anti Virus
http://housecall.trendmicro.com/


MULTI_AV.EXE
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

--
Please repost if you find the fault

Glen P
~~~~~~~~~~~~~~~~~~~~~
Click to expand...
Click to expand...
 
K

Karla Leavelle

Glen, I started the BITS, but I wasn't able to choose anything but the GVT
to update. That seemed to be the only choice that I had to do first. It
did load, and then it gave me only the option of loading all 41 updates.
Which is odd because I remember when I used to update manually that it would
always give me options of choosing what I wanted.

But all 41 updates loaded. Thanks.

The bad news is that still, as I write this with only the task manager, IE
and the Outlook Express newsreader open, CPU usage is 100%. The usage
wildly fluctuated during the update process.

My wife uses OE ONLY as a news reader; it's Outlook 2003 that seems to give
her the problem. The folders not closing properly may be a separate issue
from what causes this computer to use all of the CPU resources.

As I watch the processes tab in task manager, I notice that three processes
seem to add up to 100 in the CPU column. At first it may have been SVCHost
processes, but now it's mostly the HOTSYNC process for my wife's Palm.
Which, by the way, she hasn't used for months because she hasn't been able
to sync her Palm to Outlook. Could this be related? I stopped the
HOT SYNC Process and now the CPU use is normal. In the CPU column in the
task manager, the System Idle process is registering 95-99.

You're on a roll. Could this be the problem both with the CPU time and the
Outlook folders problem?

Bob

Glen said:
Open computer management | services. Look for automatic updates and set it
to automatic also background intelligent transfer service, set it to
automatic. Reboot and try updates. Keep Outlook closed. What happens?

Go to Windows Update and select only one update (not the Genuine
Validation
Tool). What happens?

Are you using Outlook (which version) or Outlook Express.

I'm unsure if you have two separate faults, Windows update not working and
Outlook (Express????) not working properly. See if the faults are separate
by doing what I wrote above. Repost with results.
--
Please repost if you find the fault

Glen P
~~~~~~~~~~~~~~~~~~~~~
Karla Leavelle said:
Thank you, Glen. I am now on my wife's computer. Virus software is run
daily and is regularly updated. We ran Spyware and found only 13
tracking
cookies, but the problem precedes the last time she ran it.

After leaving it for an hour or so I came back to find the computer
running normally. I unplugged the Ethernet cord so I could launch
Outlook
without it trying to download messages. It opened fine but gave me the
message about the personal and archive folders not closely properly. I
ran the Inbox repair tool successfully.

I then left Outlook opened and plugged in the Ethernet cord so I could
launch IE and try to update Windows, all the while keeping the task
manager open so I could monitor CPU usage. To this point everything was
normal.

Checking for update took several minutes, but while it was checking, CPU
usage shot up to 100% almost constantly. I think it coincided with
Outlook trying to download messages, which it did Afterwards, CPU usage
returned to normal.

But again I wasn't able to update Windows. Getting the same message
about
a Genuine Validation Tool, message KB892130. I'm not given the option to
proceed further with the update, even though an article about this tool
says it's not necessary for automatic updates. However, the Automatic
Updates have failed for perhaps months.

If this is helpful, here are the most recent lines from the windows
update
log:

2006-07-13 18:23:44 2288 e84 COMAPI <<-- SUBMITTED -- COMAPI: Download
[ClientId = MicrosoftUpdate]
2006-07-13 18:23:44 1016 f8c DnldMgr *************
2006-07-13 18:23:44 1016 f8c DnldMgr ** START ** DnldMgr: Downloading
updates [CallerId = MicrosoftUpdate]
2006-07-13 18:23:44 1016 f8c DnldMgr *********
2006-07-13 18:23:44 1016 f8c DnldMgr * Priority = 3, ServiceId =
{7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:44 1016 f8c DnldMgr * Updates to download = 1
2006-07-13 18:23:44 1016 f8c Agent * Title = Windows Genuine
Advantage
Validation Tool (KB892130)
2006-07-13 18:23:44 1016 f8c Agent * UpdateId =
{F2597149-61CE-42B0-8A00-AF17ED61C94C}.101
2006-07-13 18:23:44 1016 f8c Agent * Bundles 1 updates:
2006-07-13 18:23:44 1016 f8c Agent *
{43C7710E-6A36-4B60-A857-67496599512F}.101
2006-07-13 18:23:44 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:44 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:44 1016 f8c DnldMgr *********** DnldMgr: New download
job [UpdateId = {43C7710E-6A36-4B60-A857-67496599512F}.101] ***********
2006-07-13 18:23:44 1016 f8c DnldMgr * Queueing update for download
handler request generation.
2006-07-13 18:23:44 1016 f8c DnldMgr Generating download request for
update {43C7710E-6A36-4B60-A857-67496599512F}.101
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL: BITS service was not fixed up
and thus CCI was not reattempted. (hr = 80040154)
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL: Failed to connect to the BITS
service; unable to start new downloads or interact with existing download
jobs. (hr = 80040154)
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL:
DM:CAgentDownloadManager::GetDownloadDataAndHandler: GetBitsManager
failed
with 0x80246008.
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL:
DM:CAgentDownloadManager::GenerateAllDownloadRequests:
GetDownloadDataAndHandler failed with 0x80246008.
2006-07-13 18:23:44 1016 f8c DnldMgr Error 0x80246008 occurred while
downloading update; notifying dependent calls.
2006-07-13 18:23:50 1016 f8c DnldMgr WARNING: Extended error for reported
error 80246008 = 80040154
2006-07-13 18:23:50 1016 f8c DnldMgr WARNING: Extended error for reported
error 80246008 = 80040154
2006-07-13 18:23:50 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:50 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:50 1016 f8c Agent *********
2006-07-13 18:23:50 1016 f8c Agent ** END ** Agent: Downloading
updates
[CallerId = MicrosoftUpdate]
2006-07-13 18:23:50 1016 f8c Agent *************
2006-07-13 18:23:50 2288 d7c COMAPI >>-- RESUMED -- COMAPI: Download
[ClientId = MicrosoftUpdate]
2006-07-13 18:23:50 2288 d7c COMAPI - Download call complete (succeeded
= 0, succeeded with errors = 0, failed = 1, unaccounted = 0)
2006-07-13 18:23:50 2288 d7c COMAPI - WARNING: Exit code = 0x00000000;
Call error code = 0x80240022
2006-07-13 18:23:50 2288 d7c COMAPI ---------
2006-07-13 18:23:50 2288 d7c COMAPI -- END -- COMAPI: Download
[ClientId = MicrosoftUpdate]
2006-07-13 18:23:50 2288 d7c COMAPI -------------
2006-07-13 18:23:55 1016 f8c Report REPORT EVENT:
{61166338-A266-472A-8AD9-01B94848D486} 2006-07-13 18:23:50-0400 1 161 101
{F2597149-61CE-42B0-8A00-AF17ED61C94C} 101 80246008 MicrosoftUpdate
Failure Content Download Error: Download failed.


I re-opened Outlook and it seemed to be fine, quickly checking for email
with CPU usage low.

For the record, this is a valid Windows install; it came iwth the
computer, which is several years old but has plenty of disk space and we
installed Service Pack 2 about a year or two ago.

While Outlook is running OK now, it has done so before in the last month
only to return to it sluggish state. While everything is normal, I'd
like
to update Windows if I can. Thanks again.

Bob Griendling


Glen said:
ctrl alt del will bring up task manager. The process tab will show which
process is using the cpu cycles. Run antivirus and antispyware scans
with
updated definitions. Malware infection is high on the list of possable
causes. When you've run multiple scans and cleaned it. Repost if you
still need help.

Antispyware

Microsoft Antispyware
http://www.microsoft.com/athome/security/spyware/software/default.mspx

Adaware
http://www.lavasoftusa.com/software/adaware/

Spybot S&E
http://www.safer-networking.org/en/index.html

Hijackthis
http://www.spywareinfo.com/~merijn/

Hijackthis Tutorial
http://www.bleepingcomputer.com/tutorials/tutorial42.html

Spyware forums
http://www.merijn.org/forums.html

http://forums.spywareinfo.com/

AntiVirus

AVG Antivirus
http://free.grisoft.com/doc/1

Avast
http://www.avast.com/

Online Anti Virus
http://housecall.trendmicro.com/


MULTI_AV.EXE
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

--
Please repost if you find the fault

Glen P
~~~~~~~~~~~~~~~~~~~~~
I am writing this for someone else you can't because her computer is
virtually useless. It has slowed to a crawl. There may be several
problems. She has Win XP w/ service pack 2; AVG virus protection and
the
windows Firewall.

1. The CPU seems to be running at 100%. I tried to see if a printer
spool was the problem but apparently not, as the fix I found didn't
work. AVG virus scan has been fine for weeks and she uses AdAware on a
fairly regular basis.

2. The slowness seems to begin with opening Outlook, which will run
fine
for a short while -- a day or two -- and then gives us messages that
Personal folders and archive folders were not closed properly.
Sometimes we can get to inbox repair tool, which seems to fix it, but
then it happens again within hours or a day or two. She has not been
able to confirm for me whether the two problems happen simultaneously.

3. After looking at her processes to see if I could find a virus or
worm, I tried to install all Windows updates, but I'm not able to do
so,
getting a message that "Windows Genuine Advantage Validation Tool did
not load." I was able to go through the update history and it's
apparent
that automatic updates have not been happening for a long while, so she
may have security risks that are contributing to this problem.

Is there any additional information I can provide to help anyone
troubleshoot this for me? If I could find out what's hogging all her
CPU resources, I might be able to provide additional information, but
as
it stand now, it can take 10-15 minutes just for one operation.

Thanks in advance,

Bob
Click to expand...
Click to expand...
Click to expand...
 
G

Glen

It looks like the hotsync program might be the cause of the problem. I would
uninstall it (you can always reinstall it later) and see if you can use
outlook without a problem. You might find that because of the problem with
hotsync the Outlook (and outlook express) folders might be corrupt and
that's why the problems.

Get the hotsync program out the way then I would delete the dbx files which
are the outlook express mail folders. Show all files and folders in control
panel | folder options. Either search for dbx files and move them all into a
folder rather than deleting them in case you need something from them or
look to the default path which is C:\Documents and Settings\user name\Local
Settings\Application
Data\Identities\{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}\Microsoft\Outlook
Express where xxx is a string of numbers.

Outlook express will recreate them when you open it next. See if it works.

Search for .pst files which are the mail folders for Outlook. Rename the
..pst file to .old then open Outlook and see if it has been recreated. I
don't use Outlook and have no experience of dealing with it, but I assume
the principle is the same as OE, deleted mail folders are recreated on first
use.
--
Please repost if you find the fault

Glen P
~~~~~~~~~~~~~~~~~~~~~
Karla Leavelle said:
Glen, I started the BITS, but I wasn't able to choose anything but the GVT
to update. That seemed to be the only choice that I had to do first. It
did load, and then it gave me only the option of loading all 41 updates.
Which is odd because I remember when I used to update manually that it
would
always give me options of choosing what I wanted.

But all 41 updates loaded. Thanks.

The bad news is that still, as I write this with only the task manager, IE
and the Outlook Express newsreader open, CPU usage is 100%. The usage
wildly fluctuated during the update process.

My wife uses OE ONLY as a news reader; it's Outlook 2003 that seems to
give
her the problem. The folders not closing properly may be a separate issue
from what causes this computer to use all of the CPU resources.

As I watch the processes tab in task manager, I notice that three
processes
seem to add up to 100 in the CPU column. At first it may have been
SVCHost
processes, but now it's mostly the HOTSYNC process for my wife's Palm.
Which, by the way, she hasn't used for months because she hasn't been able
to sync her Palm to Outlook. Could this be related? I stopped the
HOT SYNC Process and now the CPU use is normal. In the CPU column in the
task manager, the System Idle process is registering 95-99.

You're on a roll. Could this be the problem both with the CPU time and
the Outlook folders problem?

Bob

Glen said:
Open computer management | services. Look for automatic updates and set
it
to automatic also background intelligent transfer service, set it to
automatic. Reboot and try updates. Keep Outlook closed. What happens?

Go to Windows Update and select only one update (not the Genuine
Validation
Tool). What happens?

Are you using Outlook (which version) or Outlook Express.

I'm unsure if you have two separate faults, Windows update not working
and
Outlook (Express????) not working properly. See if the faults are
separate
by doing what I wrote above. Repost with results.
--
Please repost if you find the fault

Glen P
~~~~~~~~~~~~~~~~~~~~~
Karla Leavelle said:
Thank you, Glen. I am now on my wife's computer. Virus software is run
daily and is regularly updated. We ran Spyware and found only 13
tracking
cookies, but the problem precedes the last time she ran it.

After leaving it for an hour or so I came back to find the computer
running normally. I unplugged the Ethernet cord so I could launch
Outlook
without it trying to download messages. It opened fine but gave me the
message about the personal and archive folders not closely properly. I
ran the Inbox repair tool successfully.

I then left Outlook opened and plugged in the Ethernet cord so I could
launch IE and try to update Windows, all the while keeping the task
manager open so I could monitor CPU usage. To this point everything was
normal.

Checking for update took several minutes, but while it was checking, CPU
usage shot up to 100% almost constantly. I think it coincided with
Outlook trying to download messages, which it did Afterwards, CPU usage
returned to normal.

But again I wasn't able to update Windows. Getting the same message
about
a Genuine Validation Tool, message KB892130. I'm not given the option
to
proceed further with the update, even though an article about this tool
says it's not necessary for automatic updates. However, the Automatic
Updates have failed for perhaps months.

If this is helpful, here are the most recent lines from the windows
update
log:

2006-07-13 18:23:44 2288 e84 COMAPI <<-- SUBMITTED -- COMAPI: Download
[ClientId = MicrosoftUpdate]
2006-07-13 18:23:44 1016 f8c DnldMgr *************
2006-07-13 18:23:44 1016 f8c DnldMgr ** START ** DnldMgr: Downloading
updates [CallerId = MicrosoftUpdate]
2006-07-13 18:23:44 1016 f8c DnldMgr *********
2006-07-13 18:23:44 1016 f8c DnldMgr * Priority = 3, ServiceId =
{7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:44 1016 f8c DnldMgr * Updates to download = 1
2006-07-13 18:23:44 1016 f8c Agent * Title = Windows Genuine
Advantage
Validation Tool (KB892130)
2006-07-13 18:23:44 1016 f8c Agent * UpdateId =
{F2597149-61CE-42B0-8A00-AF17ED61C94C}.101
2006-07-13 18:23:44 1016 f8c Agent * Bundles 1 updates:
2006-07-13 18:23:44 1016 f8c Agent *
{43C7710E-6A36-4B60-A857-67496599512F}.101
2006-07-13 18:23:44 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:44 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:44 1016 f8c DnldMgr *********** DnldMgr: New download
job [UpdateId = {43C7710E-6A36-4B60-A857-67496599512F}.101] ***********
2006-07-13 18:23:44 1016 f8c DnldMgr * Queueing update for download
handler request generation.
2006-07-13 18:23:44 1016 f8c DnldMgr Generating download request for
update {43C7710E-6A36-4B60-A857-67496599512F}.101
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL: BITS service was not fixed
up
and thus CCI was not reattempted. (hr = 80040154)
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL: Failed to connect to the
BITS
service; unable to start new downloads or interact with existing
download
jobs. (hr = 80040154)
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL:
DM:CAgentDownloadManager::GetDownloadDataAndHandler: GetBitsManager
failed
with 0x80246008.
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL:
DM:CAgentDownloadManager::GenerateAllDownloadRequests:
GetDownloadDataAndHandler failed with 0x80246008.
2006-07-13 18:23:44 1016 f8c DnldMgr Error 0x80246008 occurred while
downloading update; notifying dependent calls.
2006-07-13 18:23:50 1016 f8c DnldMgr WARNING: Extended error for
reported
error 80246008 = 80040154
2006-07-13 18:23:50 1016 f8c DnldMgr WARNING: Extended error for
reported
error 80246008 = 80040154
2006-07-13 18:23:50 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:50 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:50 1016 f8c Agent *********
2006-07-13 18:23:50 1016 f8c Agent ** END ** Agent: Downloading
updates
[CallerId = MicrosoftUpdate]
2006-07-13 18:23:50 1016 f8c Agent *************
2006-07-13 18:23:50 2288 d7c COMAPI >>-- RESUMED -- COMAPI: Download
[ClientId = MicrosoftUpdate]
2006-07-13 18:23:50 2288 d7c COMAPI - Download call complete
(succeeded
= 0, succeeded with errors = 0, failed = 1, unaccounted = 0)
2006-07-13 18:23:50 2288 d7c COMAPI - WARNING: Exit code = 0x00000000;
Call error code = 0x80240022
2006-07-13 18:23:50 2288 d7c COMAPI ---------
2006-07-13 18:23:50 2288 d7c COMAPI -- END -- COMAPI: Download
[ClientId = MicrosoftUpdate]
2006-07-13 18:23:50 2288 d7c COMAPI -------------
2006-07-13 18:23:55 1016 f8c Report REPORT EVENT:
{61166338-A266-472A-8AD9-01B94848D486} 2006-07-13 18:23:50-0400 1 161
101
{F2597149-61CE-42B0-8A00-AF17ED61C94C} 101 80246008 MicrosoftUpdate
Failure Content Download Error: Download failed.


I re-opened Outlook and it seemed to be fine, quickly checking for email
with CPU usage low.

For the record, this is a valid Windows install; it came iwth the
computer, which is several years old but has plenty of disk space and we
installed Service Pack 2 about a year or two ago.

While Outlook is running OK now, it has done so before in the last month
only to return to it sluggish state. While everything is normal, I'd
like
to update Windows if I can. Thanks again.

Bob Griendling


ctrl alt del will bring up task manager. The process tab will show
which
process is using the cpu cycles. Run antivirus and antispyware scans
with
updated definitions. Malware infection is high on the list of possable
causes. When you've run multiple scans and cleaned it. Repost if you
still need help.

Antispyware

Microsoft Antispyware
http://www.microsoft.com/athome/security/spyware/software/default.mspx

Adaware
http://www.lavasoftusa.com/software/adaware/

Spybot S&E
http://www.safer-networking.org/en/index.html

Hijackthis
http://www.spywareinfo.com/~merijn/

Hijackthis Tutorial
http://www.bleepingcomputer.com/tutorials/tutorial42.html

Spyware forums
http://www.merijn.org/forums.html

http://forums.spywareinfo.com/

AntiVirus

AVG Antivirus
http://free.grisoft.com/doc/1

Avast
http://www.avast.com/

Online Anti Virus
http://housecall.trendmicro.com/


MULTI_AV.EXE
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

--
Please repost if you find the fault

Glen P
~~~~~~~~~~~~~~~~~~~~~
I am writing this for someone else you can't because her computer is
virtually useless. It has slowed to a crawl. There may be several
problems. She has Win XP w/ service pack 2; AVG virus protection and
the
windows Firewall.

1. The CPU seems to be running at 100%. I tried to see if a printer
spool was the problem but apparently not, as the fix I found didn't
work. AVG virus scan has been fine for weeks and she uses AdAware on a
fairly regular basis.

2. The slowness seems to begin with opening Outlook, which will run
fine
for a short while -- a day or two -- and then gives us messages that
Personal folders and archive folders were not closed properly.
Sometimes we can get to inbox repair tool, which seems to fix it, but
then it happens again within hours or a day or two. She has not been
able to confirm for me whether the two problems happen simultaneously.

3. After looking at her processes to see if I could find a virus or
worm, I tried to install all Windows updates, but I'm not able to do
so,
getting a message that "Windows Genuine Advantage Validation Tool did
not load." I was able to go through the update history and it's
apparent
that automatic updates have not been happening for a long while, so
she
may have security risks that are contributing to this problem.

Is there any additional information I can provide to help anyone
troubleshoot this for me? If I could find out what's hogging all her
CPU resources, I might be able to provide additional information, but
as
it stand now, it can take 10-15 minutes just for one operation.

Thanks in advance,

Bob
Click to expand...
Click to expand...
Click to expand...
 
T

Thomas Wendell

On the first page (after checking that the installer/update tool is the
latest) did you choose 1st choice "Fast setup (preferred)" or 2nd choice
"Custom setup"?

I suppose the first choice doesn't let you choose which updates to get,
whereas the 2nd does (also give the additional choices of additional
upgrades and HW driver upgrades (NEVER get them from here!!!!!!)

...



--
Tumppi
=================================
Most learned on these newsgroups
Helsinki, FINLAND
(translations from/to FI not always accurate
=================================




Karla Leavelle said:
Glen, I started the BITS, but I wasn't able to choose anything but the GVT
to update. That seemed to be the only choice that I had to do first. It
did load, and then it gave me only the option of loading all 41 updates.
Which is odd because I remember when I used to update manually that it
would
always give me options of choosing what I wanted.

But all 41 updates loaded. Thanks.

The bad news is that still, as I write this with only the task manager, IE
and the Outlook Express newsreader open, CPU usage is 100%. The usage
wildly fluctuated during the update process.

My wife uses OE ONLY as a news reader; it's Outlook 2003 that seems to
give
her the problem. The folders not closing properly may be a separate issue
from what causes this computer to use all of the CPU resources.

As I watch the processes tab in task manager, I notice that three
processes
seem to add up to 100 in the CPU column. At first it may have been
SVCHost
processes, but now it's mostly the HOTSYNC process for my wife's Palm.
Which, by the way, she hasn't used for months because she hasn't been able
to sync her Palm to Outlook. Could this be related? I stopped the
HOT SYNC Process and now the CPU use is normal. In the CPU column in the
task manager, the System Idle process is registering 95-99.

You're on a roll. Could this be the problem both with the CPU time and
the Outlook folders problem?

Bob

Glen said:
Open computer management | services. Look for automatic updates and set
it
to automatic also background intelligent transfer service, set it to
automatic. Reboot and try updates. Keep Outlook closed. What happens?

Go to Windows Update and select only one update (not the Genuine
Validation
Tool). What happens?

Are you using Outlook (which version) or Outlook Express.

I'm unsure if you have two separate faults, Windows update not working
and
Outlook (Express????) not working properly. See if the faults are
separate
by doing what I wrote above. Repost with results.
--
Please repost if you find the fault

Glen P
~~~~~~~~~~~~~~~~~~~~~
Karla Leavelle said:
Thank you, Glen. I am now on my wife's computer. Virus software is run
daily and is regularly updated. We ran Spyware and found only 13
tracking
cookies, but the problem precedes the last time she ran it.

After leaving it for an hour or so I came back to find the computer
running normally. I unplugged the Ethernet cord so I could launch
Outlook
without it trying to download messages. It opened fine but gave me the
message about the personal and archive folders not closely properly. I
ran the Inbox repair tool successfully.

I then left Outlook opened and plugged in the Ethernet cord so I could
launch IE and try to update Windows, all the while keeping the task
manager open so I could monitor CPU usage. To this point everything was
normal.

Checking for update took several minutes, but while it was checking, CPU
usage shot up to 100% almost constantly. I think it coincided with
Outlook trying to download messages, which it did Afterwards, CPU usage
returned to normal.

But again I wasn't able to update Windows. Getting the same message
about
a Genuine Validation Tool, message KB892130. I'm not given the option
to
proceed further with the update, even though an article about this tool
says it's not necessary for automatic updates. However, the Automatic
Updates have failed for perhaps months.

If this is helpful, here are the most recent lines from the windows
update
log:

2006-07-13 18:23:44 2288 e84 COMAPI <<-- SUBMITTED -- COMAPI: Download
[ClientId = MicrosoftUpdate]
2006-07-13 18:23:44 1016 f8c DnldMgr *************
2006-07-13 18:23:44 1016 f8c DnldMgr ** START ** DnldMgr: Downloading
updates [CallerId = MicrosoftUpdate]
2006-07-13 18:23:44 1016 f8c DnldMgr *********
2006-07-13 18:23:44 1016 f8c DnldMgr * Priority = 3, ServiceId =
{7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:44 1016 f8c DnldMgr * Updates to download = 1
2006-07-13 18:23:44 1016 f8c Agent * Title = Windows Genuine
Advantage
Validation Tool (KB892130)
2006-07-13 18:23:44 1016 f8c Agent * UpdateId =
{F2597149-61CE-42B0-8A00-AF17ED61C94C}.101
2006-07-13 18:23:44 1016 f8c Agent * Bundles 1 updates:
2006-07-13 18:23:44 1016 f8c Agent *
{43C7710E-6A36-4B60-A857-67496599512F}.101
2006-07-13 18:23:44 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:44 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:44 1016 f8c DnldMgr *********** DnldMgr: New download
job [UpdateId = {43C7710E-6A36-4B60-A857-67496599512F}.101] ***********
2006-07-13 18:23:44 1016 f8c DnldMgr * Queueing update for download
handler request generation.
2006-07-13 18:23:44 1016 f8c DnldMgr Generating download request for
update {43C7710E-6A36-4B60-A857-67496599512F}.101
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL: BITS service was not fixed
up
and thus CCI was not reattempted. (hr = 80040154)
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL: Failed to connect to the
BITS
service; unable to start new downloads or interact with existing
download
jobs. (hr = 80040154)
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL:
DM:CAgentDownloadManager::GetDownloadDataAndHandler: GetBitsManager
failed
with 0x80246008.
2006-07-13 18:23:44 1016 f8c DnldMgr FATAL:
DM:CAgentDownloadManager::GenerateAllDownloadRequests:
GetDownloadDataAndHandler failed with 0x80246008.
2006-07-13 18:23:44 1016 f8c DnldMgr Error 0x80246008 occurred while
downloading update; notifying dependent calls.
2006-07-13 18:23:50 1016 f8c DnldMgr WARNING: Extended error for
reported
error 80246008 = 80040154
2006-07-13 18:23:50 1016 f8c DnldMgr WARNING: Extended error for
reported
error 80246008 = 80040154
2006-07-13 18:23:50 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:50 3224 4a4 DtaStor Update service properties: service
registered with AU is {7971F918-A847-4430-9279-4A52D1EFE18D}
2006-07-13 18:23:50 1016 f8c Agent *********
2006-07-13 18:23:50 1016 f8c Agent ** END ** Agent: Downloading
updates
[CallerId = MicrosoftUpdate]
2006-07-13 18:23:50 1016 f8c Agent *************
2006-07-13 18:23:50 2288 d7c COMAPI >>-- RESUMED -- COMAPI: Download
[ClientId = MicrosoftUpdate]
2006-07-13 18:23:50 2288 d7c COMAPI - Download call complete
(succeeded
= 0, succeeded with errors = 0, failed = 1, unaccounted = 0)
2006-07-13 18:23:50 2288 d7c COMAPI - WARNING: Exit code = 0x00000000;
Call error code = 0x80240022
2006-07-13 18:23:50 2288 d7c COMAPI ---------
2006-07-13 18:23:50 2288 d7c COMAPI -- END -- COMAPI: Download
[ClientId = MicrosoftUpdate]
2006-07-13 18:23:50 2288 d7c COMAPI -------------
2006-07-13 18:23:55 1016 f8c Report REPORT EVENT:
{61166338-A266-472A-8AD9-01B94848D486} 2006-07-13 18:23:50-0400 1 161
101
{F2597149-61CE-42B0-8A00-AF17ED61C94C} 101 80246008 MicrosoftUpdate
Failure Content Download Error: Download failed.


I re-opened Outlook and it seemed to be fine, quickly checking for email
with CPU usage low.

For the record, this is a valid Windows install; it came iwth the
computer, which is several years old but has plenty of disk space and we
installed Service Pack 2 about a year or two ago.

While Outlook is running OK now, it has done so before in the last month
only to return to it sluggish state. While everything is normal, I'd
like
to update Windows if I can. Thanks again.

Bob Griendling


ctrl alt del will bring up task manager. The process tab will show
which
process is using the cpu cycles. Run antivirus and antispyware scans
with
updated definitions. Malware infection is high on the list of possable
causes. When you've run multiple scans and cleaned it. Repost if you
still need help.

Antispyware

Microsoft Antispyware
http://www.microsoft.com/athome/security/spyware/software/default.mspx

Adaware
http://www.lavasoftusa.com/software/adaware/

Spybot S&E
http://www.safer-networking.org/en/index.html

Hijackthis
http://www.spywareinfo.com/~merijn/

Hijackthis Tutorial
http://www.bleepingcomputer.com/tutorials/tutorial42.html

Spyware forums
http://www.merijn.org/forums.html

http://forums.spywareinfo.com/

AntiVirus

AVG Antivirus
http://free.grisoft.com/doc/1

Avast
http://www.avast.com/

Online Anti Virus
http://housecall.trendmicro.com/


MULTI_AV.EXE
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

--
Please repost if you find the fault

Glen P
~~~~~~~~~~~~~~~~~~~~~
I am writing this for someone else you can't because her computer is
virtually useless. It has slowed to a crawl. There may be several
problems. She has Win XP w/ service pack 2; AVG virus protection and
the
windows Firewall.

1. The CPU seems to be running at 100%. I tried to see if a printer
spool was the problem but apparently not, as the fix I found didn't
work. AVG virus scan has been fine for weeks and she uses AdAware on a
fairly regular basis.

2. The slowness seems to begin with opening Outlook, which will run
fine
for a short while -- a day or two -- and then gives us messages that
Personal folders and archive folders were not closed properly.
Sometimes we can get to inbox repair tool, which seems to fix it, but
then it happens again within hours or a day or two. She has not been
able to confirm for me whether the two problems happen simultaneously.

3. After looking at her processes to see if I could find a virus or
worm, I tried to install all Windows updates, but I'm not able to do
so,
getting a message that "Windows Genuine Advantage Validation Tool did
not load." I was able to go through the update history and it's
apparent
that automatic updates have not been happening for a long while, so
she
may have security risks that are contributing to this problem.

Is there any additional information I can provide to help anyone
troubleshoot this for me? If I could find out what's hogging all her
CPU resources, I might be able to provide additional information, but
as
it stand now, it can take 10-15 minutes just for one operation.

Thanks in advance,

Bob
Click to expand...
Click to expand...
Click to expand...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

IPad remote 10
Epson XP-3150 not printing 2
Unsolicited Emails 12
CPU running @ 100% 4
Any link between malware and scam calls? 2
Password Protected Computers 4
Need help! Cpu usage at 100% after startup 8
Sorry I have not been on the site for ages 15

Top