NICK - CPU usage with SAS - problem

[louise]

pcbutts1 wrote:
> I reported that to him a while ago, see my comparison screen shots.
> http://www.pcbutts1.com/downloads/adaware.doc
> http://www.pcbutts1.com/downloads/defender.doc
> http://www.pcbutts1.com/downloads/ewido.doc
> http://www.pcbutts1.com/downloads/superanti.doc
>
>
>
Are these done on a portable with wireless or on a desktop?

I ask because on my desktop it goes from 0 to about 3 (wired
to the router) - on my portable it goes from about 14 to 50
- wireless to the router.

Thanks.

BTW, are you running any of the above in real time?

Louise

[Dustin Cook]

louise <louise@invalid.invalid> wrote in
news:4t778iF11o2n0U1@mid.individual.net:

> Dustin Cook wrote:
>> louise <louise@invalid.invalid> wrote in
>> news:4svfk0Frs7amU1@mid.individual.net:
>>
>>> Steve wrote:
>>>> "Far Canal" <me@privacy.net> wrote in message
>>>> news:MPG.1fd3afd4299f9be7989ed6@news.readfreenews. net...
>>>>> Rick wrote
>>>>>
>>>>>
>>>>>> One way to approach it is to look and see who they are talking
>>>>>> to. You
>>>>>> might try grabbing a copy of TCPView from Sysinternals (which has
>>>>>> since been absorbed by Microsoft at http://************/y82msb )
>>>>>> and have it set to autostart. Then watch for your svchost
>>>>>> connections and use whois to find
>>>>>> out who it is talking to.
>>>>>>
>>>>>> Off the top of my head, I suspect you will find that it is
>>>>>> Microsoft's
>>>>>> WGA
>>>>>> program module that phones home shortly after booting up a
>>>>>> Windows XP system. Try going here:
>>>>>>
>>>>>> http://en.wikipedia.org/wiki/Windows_Genuine_Advantage
>>>>>>
>>>>>> for more info.
>>>>>>
>>>>>>
>>>>>>
>>>>> XP-AntiSpy is very useful for turning off unwanted M$ crap
>>>>> http://www.xp-antispy.org/
>>>>> Makes it easy to turn parts of it back on for M$ Update.
>>>>> Allegedly. Version 3.96-4 has recently appeared and stops
>>>>> automatic install of IE7 which is causing problems for many.
>>>>>
>>>> Thank you Kurt, Rick and Far Canal.
>>>>
>>>> WGA certainly took it's toll on my resources. Decided to stick with
>>>> it rather than wind back the system to ease the pain of update.
>>>>
>>>> The IE7 install seems to have slowed down the PC as well but IE7
>>>> itself seems to run OK.
>>>>
>>>> Time to start working our what is driving SVCHOST sessions. Thanks
>>>> again,
>>>>
>>>> --
>>>> Steve
>>>>
>>>>
>>> I'm sorry to report that I have tried everything I can think
>>> of - particularly everything that is different about my
>>> portable than my desktop (where SAS doesn't drain resources).
>>>
>>> Windows update is, and has been, disabled.
>>> I turned off Windows firewall - seemed to have no effect.
>>>
>>> I just spent the last hour using Process Explorer and
>>> suspending each process to see if it reduced CPU use by SAS
>>> and the excessive fluctuations. I could not find a process
>>> that stopped the cpu jumping to 40+ usage, then to 12% and
>>> right back to 40 something % - sometimes into the 50s.
>>>
>>> Whatever this process is, it is happening literally every
>>> one or two seconds - back and forth.
>>>
>>> And, as noted before, it doesn't happen on my desktop.
>>>
>>> If anyone has any other suggestions, I'll be happy to try
>>> them as I'm really very disappointed to find SAS unusable on
>>> my portable - the machine that is, in fact, much more
>>> vulnerable because of the traveling it does and the various
>>> wireless connections I make while traveling.
>>>
>>> Is there a more thorough way to track this down?
>>>
>>> Thanks.
>>>
>>> Louise
>>
>> For amusement... Would you create a new account on the computer, and
>> see if SAS does the same?
>>
>>
>>
> What do you mean by "create a new account"?
>
> Louise
>

Goto start>control panel>user accounts.. Create a new user and logoff the
current user, login to the fresh account and see if the problem follows
it.


--
Dustin Cook
Author of BugHunter - MalWare Removal Tool -V1.9.4
web: http://bughunter.it-mate.co.uk
email: bughunter.dustin@gmail.com.removethis
Last updated: November 30th, 2006

[Dustin Cook]

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in news:Mcrbh.14204
$9e.9250@trnddc02:

> From: "Dustin Cook" <spamfilterineffect.see.sig@nowhere.com>
>
>
>| Can also be signs of a bad user profile...
>|
>
> Bad User Profile ?
>
> Do you mean NTUser.DAT, the User Registry ?

Yes.

> In what way ?

Some of the keys inside can be altered, and windows will have problems with
that user account. Everything from high cpu usage to outright failure to
login.




--
Dustin Cook
Author of BugHunter - MalWare Removal Tool -V1.9.4
web: http://bughunter.it-mate.co.uk
email: bughunter.dustin@gmail.com.removethis
Last updated: November 30th, 2006

[David H. Lipman]

From: "Dustin Cook" <spamfilterineffect.see.sig@nowhere.com>


|
| Some of the keys inside can be altered, and windows will have problems with
| that user account. Everything from high cpu usage to outright failure to
| login.
|

Can you please be MORE specific as to what keys in HKCU ?
Thanx !

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[pcbutts1]

I don't remember the version number these screenshots are from a while ago
back in March. No other programs were running at the time.

--


The best live web video on the internet http://www.seedsv.com/webdemo.htm
NEW Embedded system W/Linux. We now sell DVR cards.
See it all at http://www.seedsv.com/products.htm
Sharpvision simply the best http://www.seedsv.com



"Nick Skrepetos" <nskrepetos@yahoo.com> wrote in message
news:1164858494.618915.260500@16g2000cwy.googlegro ups.com...
>
> pcbutts1 wrote:
>> I reported that to him a while ago, see my comparison screen shots.
>> http://www.pcbutts1.com/downloads/adaware.doc
>> http://www.pcbutts1.com/downloads/defender.doc
>> http://www.pcbutts1.com/downloads/ewido.doc
>> http://www.pcbutts1.com/downloads/superanti.doc
>>
>>
>>
> When were the screen shots taken, meaning startup, sitting for a long
> time, scanning, etc. etc. What version of our software? What else was
> running on the system, you can only see a few processes.......
>
> If you are going to post "comparisons", etc. you really need to fully
> disclose the systems, etc. I know you are new at this, but it seems
> there has been enough discussion in these groups that you would know
> you need to provide some additional data here so the "results" have
> actual meaning.
>
> Nick Skrepetos
> SUPERAntiSpyware.com
> http://www.superantispyware.com
>

[pcbutts1]

Yes it was in real-time on a Gateway Laptop using wireless to a linksys
router XP MCE SP2.

--


The best live web video on the internet http://www.seedsv.com/webdemo.htm
NEW Embedded system W/Linux. We now sell DVR cards.
See it all at http://www.seedsv.com/products.htm
Sharpvision simply the best http://www.seedsv.com



"louise" <louise@invalid.invalid> wrote in message
news:4t77giF11o2n0U2@mid.individual.net...
> pcbutts1 wrote:
>> I reported that to him a while ago, see my comparison screen shots.
>> http://www.pcbutts1.com/downloads/adaware.doc
>> http://www.pcbutts1.com/downloads/defender.doc
>> http://www.pcbutts1.com/downloads/ewido.doc
>> http://www.pcbutts1.com/downloads/superanti.doc
>>
>>
>>
> Are these done on a portable with wireless or on a desktop?
>
> I ask because on my desktop it goes from 0 to about 3 (wired to the
> router) - on my portable it goes from about 14 to 50 - wireless to the
> router.
>
> Thanks.
>
> BTW, are you running any of the above in real time?
>
> Louise

[Dustin Cook]

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in
news:ZwKbh.17709$Uz.220@trnddc05:

> From: "Dustin Cook" <spamfilterineffect.see.sig@nowhere.com>
>
>
>|
>| Some of the keys inside can be altered, and windows will have
>| problems with that user account. Everything from high cpu usage to
>| outright failure to login.
>|
>
> Can you please be MORE specific as to what keys in HKCU ?
> Thanx !
>

I've seen corruption in the Appevents keys and subkeys..
Also seen bad permission settings on the software section.


--
Dustin Cook
Author of BugHunter - MalWare Removal Tool -V1.9.4
web: http://bughunter.it-mate.co.uk
email: bughunter.dustin@gmail.com.removethis
Last updated: November 30th, 2006

[louise]

pcbutts1 wrote:
> Yes it was in real-time on a Gateway Laptop using wireless to a linksys
> router XP MCE SP2.
>
And mine is on a Thinkpad.

Mine is even more telling in that it runs flawlessly on my
desktop (P4, 3.2, 2 gig of ram etc). The desktop is wired
to the router while the laptop is wireless. On the desktop,
average cpu usage is 0 to 02 unless loading a webpage or
something like that. Resource use is minimal on the desktop
and throught the roof on the laptop.

Are you running a real time spyware program now on your
laptop? What are you using?

Louise

[louise]

Dustin Cook wrote:
> louise <louise@invalid.invalid> wrote in
> news:4t778iF11o2n0U1@mid.individual.net:
>
>> Dustin Cook wrote:
>>> louise <louise@invalid.invalid> wrote in
>>> news:4svfk0Frs7amU1@mid.individual.net:
>>>
>>>> Steve wrote:
>>>>> "Far Canal" <me@privacy.net> wrote in message
>>>>> news:MPG.1fd3afd4299f9be7989ed6@news.readfreenews. net...
>>>>>> Rick wrote
>>>>>>
>>>>>>
>>>>>>> One way to approach it is to look and see who they are talking
>>>>>>> to. You
>>>>>>> might try grabbing a copy of TCPView from Sysinternals (which has
>>>>>>> since been absorbed by Microsoft at http://************/y82msb )
>>>>>>> and have it set to autostart. Then watch for your svchost
>>>>>>> connections and use whois to find
>>>>>>> out who it is talking to.
>>>>>>>
>>>>>>> Off the top of my head, I suspect you will find that it is
>>>>>>> Microsoft's
>>>>>>> WGA
>>>>>>> program module that phones home shortly after booting up a
>>>>>>> Windows XP system. Try going here:
>>>>>>>
>>>>>>> http://en.wikipedia.org/wiki/Windows_Genuine_Advantage
>>>>>>>
>>>>>>> for more info.
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>> XP-AntiSpy is very useful for turning off unwanted M$ crap
>>>>>> http://www.xp-antispy.org/
>>>>>> Makes it easy to turn parts of it back on for M$ Update.
>>>>>> Allegedly. Version 3.96-4 has recently appeared and stops
>>>>>> automatic install of IE7 which is causing problems for many.
>>>>>>
>>>>> Thank you Kurt, Rick and Far Canal.
>>>>>
>>>>> WGA certainly took it's toll on my resources. Decided to stick with
>>>>> it rather than wind back the system to ease the pain of update.
>>>>>
>>>>> The IE7 install seems to have slowed down the PC as well but IE7
>>>>> itself seems to run OK.
>>>>>
>>>>> Time to start working our what is driving SVCHOST sessions. Thanks
>>>>> again,
>>>>>
>>>>> --
>>>>> Steve
>>>>>
>>>>>
>>>> I'm sorry to report that I have tried everything I can think
>>>> of - particularly everything that is different about my
>>>> portable than my desktop (where SAS doesn't drain resources).
>>>>
>>>> Windows update is, and has been, disabled.
>>>> I turned off Windows firewall - seemed to have no effect.
>>>>
>>>> I just spent the last hour using Process Explorer and
>>>> suspending each process to see if it reduced CPU use by SAS
>>>> and the excessive fluctuations. I could not find a process
>>>> that stopped the cpu jumping to 40+ usage, then to 12% and
>>>> right back to 40 something % - sometimes into the 50s.
>>>>
>>>> Whatever this process is, it is happening literally every
>>>> one or two seconds - back and forth.
>>>>
>>>> And, as noted before, it doesn't happen on my desktop.
>>>>
>>>> If anyone has any other suggestions, I'll be happy to try
>>>> them as I'm really very disappointed to find SAS unusable on
>>>> my portable - the machine that is, in fact, much more
>>>> vulnerable because of the traveling it does and the various
>>>> wireless connections I make while traveling.
>>>>
>>>> Is there a more thorough way to track this down?
>>>>
>>>> Thanks.
>>>>
>>>> Louise
>>> For amusement... Would you create a new account on the computer, and
>>> see if SAS does the same?
>>>
>>>
>>>
>> What do you mean by "create a new account"?
>>
>> Louise
>>
>
> Goto start>control panel>user accounts.. Create a new user and logoff the
> current user, login to the fresh account and see if the problem follows
> it.
>
>
why would I want to do that? I want to have administrative
privileges and I am presently the only user.

Louise

[louise]

Dustin Cook wrote:
> "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in news:Mcrbh.14204
> $9e.9250@trnddc02:
>
>> From: "Dustin Cook" <spamfilterineffect.see.sig@nowhere.com>
>>
>>
>> | Can also be signs of a bad user profile...
>> |
>>
>> Bad User Profile ?
>>
>> Do you mean NTUser.DAT, the User Registry ?
>
> Yes.
>
>> In what way ?
>
> Some of the keys inside can be altered, and windows will have problems with
> that user account. Everything from high cpu usage to outright failure to
> login.
>
>
>
>
But I don't have high cpu usage at all - I can run
everything else on the machine normally. ONLY SAS produces
high cpu usage.

Louise