Deferred Procedure Calls killing my system

Bouchehog

Junior Member
Aug 14, 2006
5
0
0
My entire system is oftern slowed down to a crawl. I think it's a deferred procedure call thing. If I open Process Explorer at start up I can tell how my machine is going to behave. Sometimes it starts up with 40-60% DPCs in which case I need to restart (doing anything else reduced the machine to a crawl as above and makes the DPCs leap to 90% such that WMP only gets <0.5% of CPU time). The machine is fine for browsing, word processing, etc but whenever I try to load something more complex like WMP or a game, the whole machine slows right down to a crawl. By this I mean that floating windows leave a trail, the mouse pointer jumps centimters at a time, etc. WMP plays files at two or three frames every few seconds (the sound is fine) and games get all of 1 FPS.

Once the program is terminated (usually I'll have to do this via task manager, which also runs at an enourmously slow rate) the system still only runs at a crawl to the extent that if I move a window whilst I type this it will leave an impression on the screen for a few seconds.

In Task Manager, or process explorer my cpu cycles are at 85% to 93% at all times with 'System Idle Process' taking up most of the cycles (services.exe, firefox.exe and a couple of others periodically stick in 7-20%). Process Explorer lists the same, with 80-100% deferred procedure calls, 1-5% idle and the same smattering of everything else. I can only assume from this that Task Manager lumps DPCs in with System Idle.

At other times as now it starts as normal, with 0-3% DPCs and a mostly unused/idle CPU. I can open programs and watch films in WMP without issue for a while, but the longer I keep the machine on, the higher the percentage of DPCs are used each cycle and the slower the machine becomes.

I'm running on a A64 3000+, 1gb, 6800GS, XP SP2 rig which normally runs as smooth as silk. This problem only developed yesterday.

I've not been downloading anything suspicious recently; I've run adaware and norton AV (both using the latest definitions), which find nothing. I just can't see anything that's causing this.

I can't for the life of me figure out why my machine is so unwell. It seems like a trojan, but I can't find anything. The only other thing I can think of would be a hardware conflict as I've recently installed a new sound card and monitor. I can't see anything obviouis in the hardware manager though. I'm thinking of resorting to a clean re-install, but I'm working on a new unattended installation and I'd like to do it with that when I finish it (which I can't really do with the system as it is).

Anyone ever seen this before? Where do I go from here?

Hijack this log:
Logfile of HijackThis v1.99.1
Scan saved at 15:20:44, on 12/08/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ccs.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\taskswitch.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\Cisco Aironet\ADU.exe
C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
C:\Program Files\VIA\RAID\raid_tool.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\MICROS~4\wcescomm.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\WINDOWS\system32\taskmgr.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Aware.exe
C:\Documents and Settings\Administrator\Desktop\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bbc.co.uk/radio1/listen/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [ADU] "C:\Program Files\Cisco Aironet\ADU.exe" -nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MICROS~4\wcescomm.exe"
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.google.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windows...b?1150585217328
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O23 - Service: Cisco Configuration Service (CCS) - Cisco Systems, Inc. - C:\WINDOWS\system32\ccs.exe
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
 

Atheus

Diamond Member
Jun 7, 2005
7,313
2
0
It's definately going to be spyware and viruses. Norton is terrible stuff and should be uninstalled immediately, it slows down your machine and detects next to nothing. Unfortunately they make it hard to uninstall all of the program - I have had to reformat machines just because of Norton.

Try Microsoft Antispyware, Spyware Doctor, the online antivirus scans like Panda, CCleaner, eveything you can think of. I would probably reinstall though if it's as bad as you say.


 

V00D00

Golden Member
May 25, 2003
1,834
0
0
Sounds like a driver or hardware issue. The DPC is for IRQ's, which mainly deal with your hardware. Try updating your drivers.

How long has this been going on? Is it a sudden problem.
 

Bouchehog

Junior Member
Aug 14, 2006
5
0
0
Originally posted by: V00D00
Sounds like a driver or hardware issue. The DPC is for IRQ's, which mainly deal with your hardware. Try updating your drivers.

How long has this been going on? Is it a sudden problem.

Yes, it's a sudden thing. I assume it was as a result of my installing new graphics card and/or wireless keyboard, but I can't find any hardware conflicts in the hardware manager and I've tried various different drivers for both (and updating my VIA drivers). I'm not sure what to try next.

Thanks for the various links. I've downloaded trials of several anti-malware programs to replace ad-aware. They've picked up varioius things that the latter did not.

Can anyone recommend a good free or cheap anti-virus solution and/or firewall if Norton is no good (my subscription is about to end and I won't renew if it's considered to be crap).

Thanks.
 

PsYcHoCoW

Member
Mar 29, 2005
133
0
0
I had a problem similar to this... I would be using my computer normally and after a few minutes of browsing the internet all of a sudden it would get VERY jerky. I couldn't tell from the task manager what process was taking up CPU, so I just killed everything that wasn't necessary and it would remain jerky until rebooting. The CPU usage graph would show spikes.

I ran antivirus and antispyware, but they didn't find anything. So I started debugging hardware ; was planning on removing parts one by one to see if it would make the problem go away. First thing I unplugged was my LG DVD-RW drive. Surprisingly (and fortunately), the problem stopped. I plugged the DVDRW back in and the problem hasn't resurfaced... The cable was by no means "loose", but I'm guessing a few "false contacts" may cause weird problems to the controller and to Windows...

That's my story, you can try unplugging everything that's not necessary to isolate the problem, if you haven't already done so...
 

Sforsyth

Golden Member
Mar 3, 2005
1,294
0
0
Make sure your pc didn't go into PIO mode in dievce manager IDE controller mine did this a few times and it really slowed my computer down alot.
 

Bouchehog

Junior Member
Aug 14, 2006
5
0
0
What do people recommend for anti-spyware, virus and firewall. Cheap or free would be preferably. I currently use Norton AV (licence soon to expire), XP's own firewall and Ad-aware.
 

R Nilla

Diamond Member
Jul 26, 2006
3,835
1
0
I like the free version of AVG Anti-Virus from Grisoft. Small program, doesn't hog resources, and it's free!
 

gramboh

Platinum Member
May 3, 2003
2,207
0
0
I was using Norton until it failed to detect a trojan/virus even with a Liveupdate subscription. Uninstalled that awful POS and am now using Kaspersky anti-virus and Spypot S&D (free) for spyware. No problems since, I HIGHLY recommend Kaspersky, uses little resources even with on-access scan.
 

Bouchehog

Junior Member
Aug 14, 2006
5
0
0
I can't now complete a AV scan with a lot of these tools - AVG 7.1 for instance will start the scan with 5% DPCs the as the scan continues you see the percentage rise. It takes 5 mins 30 seconds to reach about 90% DPCs when AVG is reduced to 1% CPU time and the scan is effectively ground to a halt. I can only assume that this isn't related to my new graphics card (at least directly) because it seems to be a pure CPU usage thing that leads to the problem.
 

Bouchehog

Junior Member
Aug 14, 2006
5
0
0
Just for anyone who has the same problem and find this thread, I solved the problem simply by unstalling my 3D card and drivers, installing another card, uninstalling that and re-installing the new card. I've no idea why that helped - everything was bedded down fine, but who the hell can tell with computers. ;)

Cheers for the help!