Curse

MrTickle · Mar 03, 2007, 12:32 PM // 12:32

After suffering terrible lag type pauses etc and I've found out gw.exe is constantly using 99% cpu and teamspeak is using what is left.

Is it normal for gw.exe to be using all that cpu? The ram usage is around 77% also.

The problem I have is 10-20 second long pauses and during this time the sound keeps looping as tho the pc has crashed but after the pause it returns to normal. This can happen many times during a game but it seems random and not in certain places.

System specs:-
Athlon 64 3500+, 1G Giel ram (2 x 512m), Geforce 7900 GTO 512M, DFI Infinity NF4 SLI, SB Live 5.1

Log from HijackThis :-

Code:

Logfile of HijackThis v1.99.1
Scan saved at 12:14:05, on 03/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Creative\SBLive2k\AudioHQ\AHQTB.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Common Files\Ulead Systems\DVD\USISrv.exe
C:\WINDOWS\system32\WinSys.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDCountdown\LCDCountdown.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\G15_TeamSpeak\G15_TeamSpeak.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
D:\Games\Guild Wars\Gw.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
H:\Backup\Temp\HijackThis.exe
C:\WINDOWS\system32\taskmgr.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [EPSON Stylus Photo R300 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0F2.EXE /P30 "EPSON Stylus Photo R300 Series" /O6 "USB001" /M "Stylus Photo R300"
O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\\nTune.exe" clear
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [USIUDF_Eject_Monitor] C:\Program Files\Common Files\Ulead Systems\DVD\USISrv.exe
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "C:\Program Files\RivaTuner v2.0 RC 16.2\RivaTuner.exe" /S
O4 - HKLM\..\Run: [WinSys] C:\WINDOWS\system32\WinSys.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [AudioHQ] C:\Program Files\Creative\SBLive2k\AudioHQ\AHQTB.EXE
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

Any help would be appreciated so I can get back to enjoying GW again.

CPU Temp = 39C, System Temp = 43C, GPU Temp = 50C

jimmy_logic · Mar 03, 2007, 01:41 PM // 13:41

My old computer with a P4 1.7GHz CPU hovered around the 80% mark when it was minimised. On my Core Duo notebook its 50% minimised now.

I don't know what could be causing your problem but normally high load are caused by sub optimal programs that hog the process. Have you also checked the priority given to GW.EXE make sure its set to normal.

Hockster · Mar 03, 2007, 02:16 PM // 14:16

Virtually every game will max a CPU at 100%. That's normal. Most lag is actually caused by network issues. While not entirely accurate, check the network/FPS graph in the bottom right of the screen next time.

Try defragging your .dat file:
http://www.guildwarsguru.com/forum/s...php?t=10037429

@jimmy_logic: It uses 50% on your Core 2 because that's a dual core processor and Guild Wars is not multithreaded yet. It only maxes one core which appears as 50% usage in Windows task manager.

Master Sword Keeper · Mar 03, 2007, 02:24 PM // 14:24

Gw's will heat up your HDD try internal cooling fans or circulated liquid systems. using 100% of the CPU is normal I get it all the time.. Most other issues depend on the speed of your graphics hardware and or CPU Clock speed.
Try decreasing graphics quality or doing auto-detecting by pressing F11 during ingame.

tijo · Mar 03, 2007, 03:03 PM // 15:03

First thing, this should go in the technician's corner and not the Q&A. Once this gets moved to the right subsection, you'll get much more answers. If i were you, i would check my soundcard. Try tunning GW with the -nosound command and see what happens.

SkowroN · Mar 03, 2007, 11:32 PM // 23:32

100% of the CPU in games is standard, games need performance and if you want the best of your hardware you should expect 100% load from your CPU when gaming.

Second thing is: you really need all this quicktime/nero/other stuff running all the time? Really most of this are just junk processes which do nothing but take your memory.

Third thing is: Spec you provided will run gw at max graphics, with FSAA and with 40+ FPS so i believe this is not a problem

And what i just found about Winsys.exe:

Description: winsys.exe is a part of a surveillance software from bc-technologies. It is used to monitor and store a record of all user activities. This process should be removed to ensure your personal privacy.

Note: winsys.exe is a process which is also registered as the WORM_FALSU.A Trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.

Recommendation for winsys.exe:
DISABLE AND REMOVE winsys.exe IMMEDIATELY. This process is most likely an adware or spyware.

So if I would be on your place I would start from complete antivirus and atnispyware check.

Tsunami Rain · Mar 04, 2007, 01:37 AM // 01:37

moved to technician's corner.

MrTickle · Mar 04, 2007, 11:18 AM // 11:18

Thanks guys especially SkowroN. A guild mate also alerted me to that. I don't know how the heck it got there. I run symantec av, adaware and spybot s & d regularly and neither picked it up.

As for the other processes they're as is from when I installed nero/quicktime etc. If I remove them will the apps still work correctly?

thanks again

Hockster · Mar 04, 2007, 02:05 PM // 14:05

Symantec is one of the worst AV scanners. Ad Aware hasn't been that great for a while either. I'd recommend losing Symantec and getting AVG. The free version works great. AVG also has a decent antispyware app, but the free version doesn't run or update automatically.

jimmy_logic · Mar 04, 2007, 02:32 PM // 14:32

Syamantec hasn't let me down yet. I do run a secondary AV scanner which I use to scan the drive as a system scan not a memory resident scanner. Two opinions are better than the one. Spyware Doctor is very good, I use that in conjunction with Spybot.

Enko · Mar 04, 2007, 05:55 PM // 17:55

Quote:

Originally Posted by jimmy_logic

My old computer with a P4 1.7GHz CPU hovered around the 80% mark when it was minimised. On my Core Duo notebook its 50% minimised now.

I don't know what could be causing your problem but normally high load are caused by sub optimal programs that hog the process. Have you also checked the priority given to GW.EXE make sure its set to normal.

btw, your core duo is only reading 50% because its maxing out one of the cores. so its still using up 100% of one of the cores. don't think GW has been changed to support multithreading yet.

GODh · Mar 04, 2007, 06:40 PM // 18:40

I dont understand why people saying that using 100% of the cpu time is normal, as my gw was just taking up 30-40% some months ago... not 100% sure about this, but i think the breakpoint was on/near the halloween 2006 event.

]SK[ · Mar 04, 2007, 06:56 PM // 18:56

Mines using 90~100% on average. It is normal. Even then GW by default runs at low cpu priority.

Dex · Mar 04, 2007, 08:32 PM // 20:32

Yes yes. As has been said many times in this thread already, 100% CPU utilization is totally normal. Most applications like games will throttle the CPU even if it's not actually using all that power.

To the OP: if you're experiencing looping sound issues you're not dealing with network lag...there's some other problem with your configuration. Make sure all of your drivers are up to date. Also, running a test with the -nosound switch as tijo suggested is worth a try. It's also possible that one of your background applications is doing something strange as well. A good way to check for this is performing a clean boot and seeing if it remedies the issue. How to perform a clean boot:

http://support.microsoft.com/kb/310353

On a side note...I can almost guarantee you that Guild Wars will never be multi-threaded. It's not as simple as making a few little changes to the application. It would require some serious re-engineering of the game engine to make it split tasks into separate threads for symmetric multiprocessing. Not only is Guild Wars not resource intensive enough to really warrant such a change, but I doubt ANet is interested in putting that much engineering time into something that's not really needed. If you're running a dual-core processor you already have plenty of power in one core to run GW.

Tarun · Mar 04, 2007, 09:36 PM // 21:36

You're infected with malware. Trash Symantec/Norton and get Avast.

Software that is monitoring your every keystroke:
O4 - HKLM\..\Run: [WinSys] C:\WINDOWS\system32\WinSys.exe
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe

Refer to Lunarsoft.net and download the Anti-Malware Professional package and read the PC Maintenance guide to clean your computer. Should you have questions, feel free to ask me. After your cleaning process has been completed you should also post a new HijackThis log.

]SK[ · Mar 05, 2007, 06:57 AM // 06:57

Trash Avast and get NOD32. I tried Avast but switched back to AVG Free Edition when I found this to be a resource hog. I still recommend AVG but prefer NOD32.

I always find the last graph on this page funny.

I'll use Symantec, but only their Corporate Edition. The home one is bloated and cuts your system performance by half. Well according to that graph its a heck of a lot more. How they are managing to sell this to the public I will never know.

MrTickle · Mar 05, 2007, 11:11 AM // 11:11

Quote:

Originally Posted by Tarun

You're infected with malware. Trash Symantec/Norton and get Avast.

Software that is monitoring your every keystroke:
O4 - HKLM\..\Run: [WinSys] C:\WINDOWS\system32\WinSys.exe
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe

Refer to Lunarsoft.net and download the Anti-Malware Professional package and read the PC Maintenance guide to clean your computer. Should you have questions, feel free to ask me. After your cleaning process has been completed you should also post a new HijackThis log.

Well it seems these files got installed when I installed my new graphics card an MSI Geforce 7900 GTO 512M. They are to do with the dynamic overclocking. Just to be on the safe side I've removed them

Tarun · Mar 05, 2007, 03:41 PM // 15:41

To be safe I would advise you scan your system once with each scanner (Spybot, Ad-Aware, Spyware Terminator and avast) to be sure your system is clean. Often malware will allow many other kinds of malware to flood in.