data transfer out to another pc within lan causes cpu usage to go up to 100% lately

[howdy]

hi, i recently have had a weird problem with my lan connection on a particular pc

when i transfer files (copy or move) out to another pc within the lan, cpu usage goes up big time, but incoming data transfer doesnt seem to cause that high cpu problem; data transfer among HD's within the pc is normal until it's going out of the pc (regardless of which hd is coming out)

all my pcs ar on win2k pro; this particular pc is a p4 3.2 ghz prescott, mobo is asus p4p800se with onboard gigabit nic from marvel; i have a pretty fast cable connection but i have no issue with internet speed; i'm just trying to figure out what causes the bottleneck that causes cpu usage to max out and make all other tasks temporarily frozen

i tried upgrading from the etherfast switch to a gigabit switch but no difference; i tried adding a second adapter while the onboard nic is still enabled, no difference; thinking may be it's the nic going south, i bought a netgear gigabit nic and disabled the onboard nic but still the same problem;

please advise as this is really bugging me; it used to not have this problem before; just started recently

oh, and when cpu peaks while transferring data out, i look at the processes through process explorer, these 2 processes are the main culprit (explorer.exe and DPCs) and at times system process as well

i was looking for a setting in the nic that would alleviate the load on the cpu but cant seem to find it; may be the netgear gigabit nic and the marvel onboard nic dont have that feature

thank you.

[classicsoftware]

I would think spyware. What kind of security do you have running? Have you done any scans. How aggressive is your AV scanner set for?

[pangea33]

What size/kind of files are you transferring? When sending files over a network, there is a certain amount of overhead necessary to encapsulate each of them. When transferring the files to drives internally using DMA, this doesn't really present itself as a problem. When I transfer something like websites between PCs, with tons of very small text and image files, the speeds and cpu usage are pathetic. The spike in cpu usage for explorer.exe and DPCs, is typical for this sort of thing.

When this is happening the actual LAN speed becomes almost irrelevent, because it's capability can't be fully recognized. When the impact is too great, I typically zip/rar the files, transfer the archive, then unrar on the destination computer. For large sites with thousands of files under 40k, the task takes FAR less time, even when accounting for the archiving. Also, you'll want to be sure that both PCs are using DMA mode for the drives, and not PIO mode.

These links might offer a more comprehensive explanation:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/rpc/rpc/network_latency_and_throughput.asp
http://teamapproach.ca/trouble/Processor.htm

[howdy]

hi guys for responding

to classicsoftware
i use lavasoft adaware , spybot s&d, spyware blaster, protowall, kaspersky antivirus, no firewall on this pc; the kaspersky used to be on maximum security setting but i have changed it back to recommended and still have same issue; i have also run the online test from pcpitstop.


to pangea33
the file sizes are relatively big, from 10MB to 700MB (video files); and yes, i have double checked and all the pc's have dma enabled on their ide drives (i have both ata and sata drives on all pc's); in fact, i replaced the ata drive with an sata drive to see if it mght be the hd but i havent seen any improvement at all

[classicsoftware]

As a test, I would turn the AV off and see what happens. Nest, post a hijack this log to see what is going on in there.

[howdy]

ok, i tried disabling kaspersky n start transferring and still same high cpu problem :(

here's my hjt log

Logfile of HijackThis v1.99.1
Scan saved at 7:23:22 AM, on 12/27/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Raxco\PerfectDisk\PDSched.exe
C:\WINNT\Explorer.EXE
C:\Program Files\NetLimiter\NetLimiter.exe
C:\Program Files\Dudez\ProtoWall\ProtoWall.exe
C:\Program Files\NETGEAR GA311 Adapter\GA311.exe
C:\Program Files\Aladdin Systems\DragStrip\DragStrip.exe
C:\Program Files\AnalogX\MaxMem\maxmem.exe
C:\Program Files\Motherboard Monitor 5\MBM5.exe
C:\Program Files\WinBar\WinBar.exe
C:\Program Files\Maxthon\Maxthon.exe
C:\Program Files\Adobe\Acrobat 7.0\Acrobat\Acrobat.exe
C:\DOCUME~1\paul\LOCALS~1\Temp\Adobelm_Cleanup.000 1
C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
C:\DOCUME~1\paul\LOCALS~1\Temp\Adobelm_Cleanup.000 1
C:\Program Files\Opera\Opera.exe
C:\WINNT\system32\notepad.exe
C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Ontrack\PowerDesk\PDExplo.exe
C:\WINNT\system32\spool\DRIVERS\W32X86\3\fpdisp5a. exe
C:\WINNT\system32\NOTEPAD.EXE
C:\hijackthis 1.99.1\HijackThis.exe

F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kav.exe" /minimize
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINNT\system32\spool\DRIVERS\W32X86\3\fpdisp5a. exe" /runonce
O4 - HKCU\..\Run: [ProtoWall] C:\Program Files\Dudez\ProtoWall\ProtoWall.exe
O4 - Startup: DragStrip.lnk = C:\Program Files\Aladdin Systems\DragStrip\DragStrip.exe
O4 - Startup: maxmem.lnk = C:\Program Files\AnalogX\MaxMem\maxmem.exe
O4 - Startup: motherboard monitor.lnk = C:\Program Files\Motherboard Monitor 5\MBM5.exe
O4 - Startup: WinBar.lnk = C:\Program Files\WinBar\WinBar.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = C:\Program Files\Adobe\Acrobat 7.0\Acrobat\acrobat_sl.exe
O4 - Global Startup: GA311 Smart Wizard Utility.lnk = C:\Program Files\NETGEAR GA311 Adapter\GA311.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O12 - Plugin for .bcf: C:\Program Files\Internet Explorer\Plugins\NPBelv32.dll
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - [url]http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB[/url]
O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - [url]http://www.pcpitstop.com/pestscan/pestscan.cab[/url]
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - [url]http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1122319978843[/url]
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - [url]http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1123054286484[/url]
O16 - DPF: {EFAEF0E4-F044-4D57-9900-1C3FF18524C9} (AV Class) - [url]http://www.pcpitstop.com/antivirus/PitPav.cab[/url]
O17 - HKLM\System\CCS\Services\Tcpip\..\{43043C5C-F07D-4356-82B4-B5D49B96122D}: NameServer = 24.48.208.194,24.48.208.198
O17 - HKLM\System\CCS\Services\Tcpip\..\{880CFFF9-4417-4DDD-99D2-41283D9B77AB}: NameServer = 24.48.208.194,24.48.208.198
O20 - Winlogon Notify: nwprovau - C:\WINNT\SYSTEM32\nwprovau.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINNT\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINNT\system32\ati2sgag.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: jsdaemon - JetFax, Inc. - c:\jetsuite\jsdaemon.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kavsvc.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe