Page 2 of 3 FirstFirst 123 LastLast
Results 11 to 20 of 21

Thread: Memory Resource Hog

  1. 12-19-2006, 10:50 PM #11
    4play
    4play is offline
    4play's Avatar knob jockey
    Join Date
    Jan 2003
    Location
    London
    Age
    41
    Posts
    3,824
    Send a message via MSN to 4play
    Quote Originally Posted by Chewie UK View Post
    I was clarifying the purpose of svchost for LilAA.
    The directions I gave will show which services are controlled by which instance of svchost.
    Given the process ID (add the column in Task Manager to see it) from the instance of svchost that runs at 100%, one can narrow it down to only those services it controls
    thats a pretty useful tip. cheers for that.

    Bad Software
    Reply With Quote Reply With Quote
  3. 12-19-2006, 10:53 PM Software & Hardware   -   #12
    LilAznAccommodator
    LilAznAccommodator is offline
    LilAznAccommodator's Avatar Celestial Seraph
    Join Date
    Oct 2003
    Location
    California
    Age
    36
    Posts
    471
    Send a message via AIM to LilAznAccommodator Send a message via MSN to LilAznAccommodator
    Here is the HiJackThis Log:

    Logfile of HijackThis v1.99.1
    Scan saved at 2:54:16 PM, on 12/19/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5730.0011)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Logitech\iTouch\iTouch.exe
    C:\Program Files\Eset\nod32kui.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\SpywareGuard\sgmain.exe
    C:\Program Files\WallMaster\wallmast.exe
    C:\Program Files\SpywareGuard\sgbhp.exe
    C:\Program Files\Eset\nod32krn.exe
    C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Stacey\Desktop\hijackthis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkId=54843
    O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O4 - HKLM\..\Run: [DeadAIM] rundll32.exe "C:\PROGRA~1\AIM\\DeadAIM.ocm",ExportedCheckODLs
    O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
    O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
    O4 - Startup: WallMaster Pro.lnk = C:\Program Files\WallMaster\wallmast.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm (file missing)
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm (file missing)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary...o.cab47946.cab
    O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
    O16 - DPF: {DA758BB1-5F89-4465-975F-8D7179A4BCF3} (WheelofFortune Object) - http://messenger.zone.msn.com/binary/WoF.cab31267.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
    O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
    Reply With Quote Reply With Quote
  5. 12-19-2006, 11:15 PM Software & Hardware   -   #13
    4play
    4play is offline
    4play's Avatar knob jockey
    Join Date
    Jan 2003
    Location
    London
    Age
    41
    Posts
    3,824
    Send a message via MSN to 4play
    copy and paste your log file here. it comes up all clean apart from that wallmast program.

    what did chewies tip turn up.

    Bad Software
    Reply With Quote Reply With Quote
  7. 12-19-2006, 11:22 PM Software & Hardware   -   #14
    Chewie
    Chewie is offline
    Chewie's Avatar Chew E. Bakke
    Join Date
    Feb 2004
    Posts
    4,008
    Please uninstall Spysweeper; you'll notice that logon-time hard drive activity is vastly improved.
    O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
    Ask clocker for a second opinion.
    Last edited by Chewie; 12-19-2006 at 11:28 PM.
    There isn't a bargepole long enough for me to work on [a Sony Viao] - clocker 2008
    Reply With Quote Reply With Quote
  9. 12-19-2006, 11:27 PM Software & Hardware   -   #15
    LilAznAccommodator
    LilAznAccommodator is offline
    LilAznAccommodator's Avatar Celestial Seraph
    Join Date
    Oct 2003
    Location
    California
    Age
    36
    Posts
    471
    Send a message via AIM to LilAznAccommodator Send a message via MSN to LilAznAccommodator
    Hmm uninstall spysweeper.. wouldn't know what to replace it with as I don't use it actively, as I use only as OnDemand..

    @4play: Thanks for that link.
    Last edited by LilAznAccommodator; 12-19-2006 at 11:33 PM.
    Reply With Quote Reply With Quote
  11. 12-19-2006, 11:45 PM Software & Hardware   -   #16
    Chewie
    Chewie is offline
    Chewie's Avatar Chew E. Bakke
    Join Date
    Feb 2004
    Posts
    4,008
    I have Kaspersky Internet Security, XoftSpy, Spybot and AdAware on here for malware protection.
    XoftSpy and AdAware are purely 'on demand' tools (although very good) while Spybot also has an Immunize feature and background IE protection.

    Spysweeper is renowned for its logon resource unfriendliness.

    Happy birthday, by the way.
    There isn't a bargepole long enough for me to work on [a Sony Viao] - clocker 2008
    Reply With Quote Reply With Quote
  13. 12-20-2006, 12:15 AM Software & Hardware   -   #17
    LilAznAccommodator
    LilAznAccommodator is offline
    LilAznAccommodator's Avatar Celestial Seraph
    Join Date
    Oct 2003
    Location
    California
    Age
    36
    Posts
    471
    Send a message via AIM to LilAznAccommodator Send a message via MSN to LilAznAccommodator
    Haha thank you, and ehhh yeah as sis is on computer at the moment I shall try fixing it later and than report the status update.
    Reply With Quote Reply With Quote
  15. 12-20-2006, 01:31 AM Software & Hardware   -   #18
    Chewie
    Chewie is offline
    Chewie's Avatar Chew E. Bakke
    Join Date
    Feb 2004
    Posts
    4,008
    Ha!
    Found it:

    clocker on spysweeper
    There isn't a bargepole long enough for me to work on [a Sony Viao] - clocker 2008
    Reply With Quote Reply With Quote
  17. 12-20-2006, 04:57 AM Software & Hardware   -   #19
    LilAznAccommodator
    LilAznAccommodator is offline
    LilAznAccommodator's Avatar Celestial Seraph
    Join Date
    Oct 2003
    Location
    California
    Age
    36
    Posts
    471
    Send a message via AIM to LilAznAccommodator Send a message via MSN to LilAznAccommodator
    Hahha well my problem isn't necessarily slow boot-up more or less just the svchost.. and I don't have spysweeper run on startup.. at least it shouldn't..
    Reply With Quote Reply With Quote
  19. 12-20-2006, 04:32 PM Software & Hardware   -   #20
    Chewie
    Chewie is offline
    Chewie's Avatar Chew E. Bakke
    Join Date
    Feb 2004
    Posts
    4,008
    According to your HJT log, it's starting as a service.
    There isn't a bargepole long enough for me to work on [a Sony Viao] - clocker 2008
    Reply With Quote Reply With Quote
Page 2 of 3 FirstFirst 123 LastLast
« Previous Thread | Next Thread »

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules

Page Generation Time
0.07
Number of Queries
13
Links: Talkgold Forum | AdServices