Wyodiver33

Hi all. After a fresh boot system-memory usage is around 486 MB out of 1.25 GB. I have very little running in the background. System specs:

Athlon Barton 2500
1.25 GB RAM
MSI 9800 Pro
120 GB WD HD
80 GB WD HD
Lite-on DL DVD Burner
MSI 52X CD-Burner
Creative Audigy sound card
Asus A7N8X V2 Motherboard
Etc.

Isn't almost 500 MB for Win XP Pro SP2 like at Least 150 MB too high? I've checked startup files, killed quite a few, checked Processes, killed a few of those. I've also ran Ad-Aware, Spybot, and did a full virus-scan. Everything is working fine, I just think the RAM usage is too high. Ideas?

__________________
I like stuff.

1010011010

I'd say more like 350MB too high.

You might want to try HighjackThis.

__________________
Simple Machines in Higher Dimensions

cyrnel

That's within reason but we'd need to see a process list to be sure. Maybe a safe-boot hijackthis log.

Remember, XP uses more resources if they're available. That's why adding memory makes for a faster system. It uses bigger io buffers, and fewer cycles are burned paging things to/from disk.

__________________
There are a vast number of people who are uninformed and heavily propagandized, but fundamentally decent. The propaganda that inundates them is effective when unchallenged, but much of it goes only skin deep. If they can be brought to raise questions and apply their decent instincts and basic intelligence, many people quickly escape the confines of the doctrinal system and are willing to do something to help others who are really suffering and oppressed." -Manufacturing Consent: Noam Chomsky and the Media, p. 195

Wyodiver33

I have RAM usage after a fresh boot down to 425 MB with between zero and one % CPU usage at idle.

__________________
I like stuff.

cliche

Definitely could do with a process list - generally speaking WXP on a fresh boot goes from about 80Mb (extremely lean, nothing running, lots disabled) to 150Mb (most of the optional extras going and a few general startup progs).

__________________
I can't understand why people are frightened of new ideas. I'm frightened of the old ones. -- John Cage (1912 - 1992)

Wyodiver33

cliche, do you mind if I email you jpeg of screen-capture? I don't know how to post it here.

__________________
I like stuff.

alpha phi

post the hijack this log

__________________

Wyodiver33

alpha phi, thanks, that worked.
Now, I have to be honest here, it's been 1.5 years At least since I formatted and reinstalled. I know it's time to do it, but really, everything is running smoothely. I run AdAware at least twice a week and my virus software (ETrust EZ Antivirus) is always up to date. I have a router firewall with 128bit encryption. But the RAM usage bugs me. Thanks folks for the help. Here's the log:

Logfile of HijackThis v1.99.1
Scan saved at 7:15:57 PM, on 12/29/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
G:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe
G:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Symantec\Ghost\ngserver.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
G:\Program Files\Belkin Bulldog Plus\upsd.exe
C:\WINDOWS\system32\UAService7.exe
G:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
C:\Program Files\Symantec\Ghost\bin\dbserv.exe
C:\Program Files\Symantec\Ghost\bin\rteng6.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ASUS\Probe\AsusProb.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
G:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe
G:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\sstray.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Logitech\Profiler\lwemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
G:\Program Files\Belkin Bulldog Plus\MUPS.exe
C:\Program Files\Webshots\WebshotsTray.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopMail.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Outlook Express\msimn.exe
G:\PROGRA~1\FIREFOX.EXE
G:\Download\ds2demo2\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\PCHEALTH\HELPCTR\System\panels\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = t
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\windows\googletoolbar1.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\windows\googletoolbar1.dll
O4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exe
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [CaAvTray] "G:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: [CAVRID] "G:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [VetTray] C:\PROGRA~1\CA\ETRUST~1\ETRUST~1\VetTray.exe
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [ATIPTA] atiptaxx.exe
O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\WebshotsTray.exe
O4 - Global Startup: MUPS.lnk = G:\Program Files\Belkin Bulldog Plus\MUPS.exe
O8 - Extra context menu item: &Google Search - res://c:\windows\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\windows\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: Backward Links - res://c:\windows\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\windows\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\windows\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\windows\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.1_02\bin\npjpi141_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.1_02\bin\npjpi141_02.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\ICQ.exe
O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - http://www.shockwave.com/content/ric...GameLoader.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/...eInstaller.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1123715057015
O16 - DPF: {94837F90-A2CA-4A8A-9DA0-B5438EC563EA} - http://install.wildtangent.com/cda/i...ncherSetup.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: CacheBoost Performance Optimizer and Tuner Service (CacheBoost Service) - Unknown owner - C:\Program Files\CacheBoost\cbsrv.exe (file missing)
O23 - Service: CAISafe - Computer Associates International, Inc. - G:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe
O23 - Service: Creative Service for CDROM Access - Unknown owner - C:\WINDOWS\System32\CTsvcCDA.exe (file missing)
O23 - Service: Diskeeper - Diskeeper Corporation - G:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: dlbt_device - Dell - C:\WINDOWS\system32\dlbtcoms.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Intel PDS - Unknown owner - C:\WINDOWS\System32\cba\pds.exe (file missing)
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec Ghost Database Service (ngdbserv) - Symantec New Zealand Limited - C:\Program Files\Symantec\Ghost\bin\dbserv.exe
O23 - Service: Symantec Ghost Configuration Server (NGServer) - Symantec New Zealand Limited - C:\Program Files\Symantec\Ghost\ngserver.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
O23 - Service: UPS - UPSentry Service (UPSentry_Smart) - Delta - G:\Program Files\Belkin Bulldog Plus\upsd.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - G:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe

__________________
I like stuff.

alpha phi

C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
is an unnessary auto updater for Viewpoint Media Player

Quick time needs to be disabled at start up

Wild tangent is (debateable) spyware
at least turn off auto start and auto update to save ram

It looks like you have several tool bars
like Google Desktop
they don't appear harmful
but do take up system resources

Norton, Pestpatrol, and Trust EZ (could?) be in conflict
if anything they are redundant

There may be others I don't reconize

anyone else?

__________________

cyrnel

A quick glance says the system is well used for surfing and games. You have a few things I'd kill but that you might not mind. (wildtangent, etc.)

Cacheboost probably isn't doing anything useful.

You have both norton speeddisk and diskeeper. Pick one. DK is better. I prefer PerfectDisk over both.

If it were mine, I'd uninstall all of Norton & use alternatives. It is not resource friendly.

__________________
There are a vast number of people who are uninformed and heavily propagandized, but fundamentally decent. The propaganda that inundates them is effective when unchallenged, but much of it goes only skin deep. If they can be brought to raise questions and apply their decent instincts and basic intelligence, many people quickly escape the confines of the doctrinal system and are willing to do something to help others who are really suffering and oppressed." -Manufacturing Consent: Noam Chomsky and the Media, p. 195

Wyodiver33

Thanks for the replies, guys. I forgot about Wildtangent and it does not want to go away.

__________________
I like stuff.

alpha phi

How do I Remove WildTangent?

They have the manual removal
as well as the auto uninstallers

__________________

cyrnel

I mistook cacheboost for an older utility. If that's the Systweak util, check its settings. It could potentially use all available memory.

__________________
There are a vast number of people who are uninformed and heavily propagandized, but fundamentally decent. The propaganda that inundates them is effective when unchallenged, but much of it goes only skin deep. If they can be brought to raise questions and apply their decent instincts and basic intelligence, many people quickly escape the confines of the doctrinal system and are willing to do something to help others who are really suffering and oppressed." -Manufacturing Consent: Noam Chomsky and the Media, p. 195

Marvelous Marv

This is off-topic, but I'd be interested to know what protective and maintenance-type utilities someone like you (a professional) uses/keeps running in the background.

Right now, I've got Norton Internet Security, Trend Micro Anti-Spyware, and Microsoft Antispyware running. I never reformat and reinstall, since I don't have a spare week to reinstall all of my programs, not to mention having to re-register them. However, if I leave my computer on long enough to power down, sometimes it can run a little slow after I wake it back up.

But like I said, I would be interested to know your preferences, if that isn't too much of a threadjack.

__________________
"The problem with socialism is that you eventually run out of other people's money."
Margaret Thatcher

cyrnel

Marv, have to keep this quick. An appraiser's office just called in a panic...

Nothing magical. Things change, so do my preferences. I use things that work, that have a support path, and that people will stick with.

For home/so AV most people seem to like avast over AVG over antivir. Norton is falling way out of favor due to install and footprint issues, and support. They might be turning some of that around this year but I'm not holding my breath.

For personal firewalls, Zone Alarm is big. I like KPF better. (Sunbelt just picked it up)

For antispyware, MS's tool is just about everywhere. That's good and bad. Use at least two. (one resident plus alternate scans) I like Sunbelt counterspy or a combination of adaware & spybot. Nothing is 100% unless you're fascist about safe practices. I almost get away with nothing on my boxes, until young relatives visit. Multiuser boxes are the most popular victims for a number of reasons.

For recovery I use a custom boot cd & flash drive of tools, or for critical stuff install the drive in another box to grab an image before repairing.

Check with Bendsley et al for large sites. I'm in a small town now and am no longer current on enterprise Windows.

Have to hustle. We can carry this further later if you want. Safe practices & recovery docs are plentiful around the net.

__________________
There are a vast number of people who are uninformed and heavily propagandized, but fundamentally decent. The propaganda that inundates them is effective when unchallenged, but much of it goes only skin deep. If they can be brought to raise questions and apply their decent instincts and basic intelligence, many people quickly escape the confines of the doctrinal system and are willing to do something to help others who are really suffering and oppressed." -Manufacturing Consent: Noam Chomsky and the Media, p. 195

MikeSty

XoftSpy + Ad-Aware + Occasional cleaning of temp internet files + reg cleaners = good practice.