problema all'hd? cpu usage sopra il 50%!

[Nico156]

vi metto qualche screen ditemi per favore se è normale..

[Nico156]

ho provato a caricare foto sotto i 24 kb ma sono illeggibili! cosa fare?

[Danilo Cecconi]

Usa la pagina "Healt" di HD Tune per controllare i valori SMART del disco.
Per postarla prova ad usare Clip2net (strumento di cattura e hosting, gratuito)
Con HD Tune puoi fare anche un "error scan" alla ricerca di settori corrotti.

[Nico156]

ok per adesso da health non segnala nessun problema!

ho provato a usarlo come secondario cioè a non usare il suo os ma quello di un maxtor 80 gb.
bene ora il cpu usage si è ridotto al 5-6%

quindi è un problema di un processo attivo? anche se su task manager non ho trovato niente di nuovo o strano..

[Danilo Cecconi]

Prova a fare un benchmark (sempre con hdtune) per vedere il Transfer Rate medio e l'utilizzo CPU.

Per vedere se c'è qualche virus o rootckit che rompe le scatole usa Hijackthis o Gmer. Vedi qui:
http://www.dduniverse.net/ita/viewtopic.php?f=273&t=3485340#p6850190

Oppure anche una scansione con Malwarebytes.

PS: lascia perdere l'antivirus che hai, tante applicazioni nocive riescono a nascondersi agli AV.

[Nico156]

malwarebytes non ha trovato niente

hijackthis.log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20.20.36, on 12/04/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Programmi\Bonjour\mDNSResponder.exe
C:\Programmi\Java\jre6\bin\jqs.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\iTunes\iTunesHelper.exe
C:\Programmi\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Programmi\iPod\bin\iPodService.exe
C:\Programmi\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Documents and Settings\Nad\Documenti\Download\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmi\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Programmi\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmi\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmi\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Programmi\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Programmi\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - http://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0443959A-60BF-40FD-A786-02ADA4187656}: NameServer = 85.37.17.43,85.38.28.96
O17 - HKLM\System\CS1\Services\Tcpip\..\{0443959A-60BF-40FD-A786-02ADA4187656}: NameServer = 85.37.17.43,85.38.28.96
O17 - HKLM\System\CS2\Services\Tcpip\..\{0443959A-60BF-40FD-A786-02ADA4187656}: NameServer = 85.37.17.43,85.38.28.96
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Programmi\Bonjour\mDNSResponder.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe
O23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Programmi\SiSoftware\SiSoftware Sandra Lite 2010.SP1a\RpcAgentSrv.exe

--
End of file - 4752 bytes

[Nico156]

risultato gmer

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-04-12 21:03:39
Windows 5.1.2600 Service Pack 2
Running: sk5twrd3.exe; Driver: C:\DOCUME~1\Nad\IMPOST~1\Temp\pxtdqpob.sys


---- System - GMER 1.0.15 ----

SSDT speo.sys ZwCreateKey [0xF72860E0]
SSDT speo.sys ZwEnumerateKey [0xF72A4CA4]
SSDT speo.sys ZwEnumerateValueKey [0xF72A5032]
SSDT speo.sys ZwOpenKey [0xF72860C0]
SSDT speo.sys ZwQueryKey [0xF72A510A]
SSDT speo.sys ZwQueryValueKey [0xF72A4F8A]
SSDT speo.sys ZwSetValueKey [0xF72A519C]

INT 0x63 ? 86242BF8
INT 0x73 ? 865DFBF8
INT 0x83 ? 865DFBF8
INT 0xB4 ? 86242BF8

---- Kernel code sections - GMER 1.0.15 ----

? speo.sys Impossibile trovare il file specificato. !
.text USBPORT.SYS!DllUnload F5E3462C 5 Bytes JMP 862421D8
.text C:\WINDOWS\system32\DRIVERS\ati2mtag.sys section is writeable [0xED8D6000, 0x1C5D58, 0xE8000020]
.text acvzmxif.SYS ED889386 35 Bytes [00, 00, 00, 00, 00, 00, 20, ...]
.text acvzmxif.SYS ED8893AA 24 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text acvzmxif.SYS ED8893C4 3 Bytes [00, 70, 02] {ADD [EAX+0x2], DH}
.text acvzmxif.SYS ED8893C9 1 Byte [30]
.text acvzmxif.SYS ED8893C9 11 Bytes [30, 00, 00, 00, 5C, 02, 00, ...] {XOR [EAX], AL; ADD [EAX], AL; POP ESP; ADD AL, [EAX]; ADD [EAX], AL; ADD [EAX], AL}
.text ...

---- Kernel IAT/EAT - GMER 1.0.15 ----

IAT atapi.sys[HAL.dll!READ_PORT_UCHAR] [F7287042] speo.sys
IAT atapi.sys[HAL.dll!READ_PORT_BUFFER_USHORT] [F728713E] speo.sys
IAT atapi.sys[HAL.dll!READ_PORT_USHORT] [F72870C0] speo.sys
IAT atapi.sys[HAL.dll!WRITE_PORT_BUFFER_USHORT] [F7287800] speo.sys
IAT atapi.sys[HAL.dll!WRITE_PORT_UCHAR] [F72876D6] speo.sys
IAT \SystemRoot\System32\Drivers\acvzmxif.SYS[HAL.dll!KfAcquireSpinLock] 0C8D1C46
IAT \SystemRoot\System32\Drivers\acvzmxif.SYS[HAL.dll!READ_PORT_UCHAR] B08B8932
IAT \SystemRoot\System32\Drivers\acvzmxif.SYS[HAL.dll!KeGetCurrentIrql] 89000001
IAT \SystemRoot\System32\Drivers\acvzmxif.SYS[HAL.dll!KfRaiseIrql] 0001BC83
IAT \SystemRoot\System32\Drivers\acvzmxif.SYS[HAL.dll!KfLowerIrql] 24468B00
IAT \SystemRoot\System32\Drivers\acvzmxif.SYS[HAL.dll!HalGetInterruptVector] 89820C8D
IAT \SystemRoot\System32\Drivers\acvzmxif.SYS[HAL.dll!HalTranslateBusAddress] D18BF84D
IAT \SystemRoot\System32\Drivers\acvzmxif.SYS[HAL.dll!KeStallExecutionProcessor] 860F1639
IAT \SystemRoot\System32\Drivers\acvzmxif.SYS[HAL.dll!KfReleaseSpinLock] 000000BD
IAT \SystemRoot\System32\Drivers\acvzmxif.SYS[HAL.dll!READ_PORT_BUFFER_USHORT] 0208B389
IAT \SystemRoot\System32\Drivers\acvzmxif.SYS[HAL.dll!READ_PORT_USHORT] 83660000
IAT \SystemRoot\System32\Drivers\acvzmxif.SYS[HAL.dll!WRITE_PORT_BUFFER_USHORT] 7400067E
IAT \SystemRoot\System32\Drivers\acvzmxif.SYS[HAL.dll!WRITE_PORT_UCHAR] 89D60320
IAT \SystemRoot\System32\Drivers\acvzmxif.SYS[WMILIB.SYS!WmiSystemControl] 8D168B00
IAT \SystemRoot\System32\Drivers\acvzmxif.SYS[WMILIB.SYS!WmiCompleteRequest] F0003284

---- Devices - GMER 1.0.15 ----

Device \FileSystem\Ntfs \Ntfs 865DE1F8
Device \Driver\sptd \Device\3166112106 speo.sys
Device \Driver\PCI_PNP7106 \Device\00000043 speo.sys
Device \Driver\usbohci \Device\USBPDO-0 862411F8
Device \Driver\dmio \Device\DmControl\DmIoDaemon 865731F8
Device \Driver\dmio \Device\DmControl\DmConfig 865731F8
Device \Driver\dmio \Device\DmControl\DmPnP 865731F8
Device \Driver\dmio \Device\DmControl\DmInfo 865731F8
Device \Driver\usbehci \Device\USBPDO-1 8623F3F8
Device \Driver\Ftdisk \Device\HarddiskVolume1 865E11F8
Device \Driver\nvata \Device\00000064 865DF1F8
Device \Driver\Cdrom \Device\CdRom0 8587A1F8
Device \Driver\Ftdisk \Device\HarddiskVolume2 865E11F8
Device \Driver\nvata \Device\00000065 865DF1F8
Device \Driver\atapi \Device\Ide\IdePort0 865E01F8
Device \Driver\atapi \Device\Ide\IdePort1 865E01F8
Device \Driver\NetBT \Device\NetBt_Wins_Export 858641F8
Device \Driver\NetBT \Device\NetBT_Tcpip_{0443959A-60BF-40FD-A786-02ADA4187656} 858641F8
Device \Driver\NetBT \Device\NetbiosSmb 858641F8
Device \Driver\usbohci \Device\USBFDO-0 862411F8
Device \Driver\usbehci \Device\USBFDO-1 8623F3F8
Device \Driver\nvata \Device\NvAta0 865DF1F8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver 858441F8
Device \Driver\nvata \Device\NvAta1 865DF1F8
Device \FileSystem\MRxSmb \Device\LanmanRedirector 858441F8
Device \Driver\Ftdisk \Device\FtControl 865E11F8
Device \Driver\acvzmxif \Device\Scsi\acvzmxif1Port4Path0Target0Lun0 861C3368
Device \Driver\acvzmxif \Device\Scsi\acvzmxif1 861C3368
Device \FileSystem\Cdfs \Cdfs 861BC500

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 771343423
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 285507792
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Programmi\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0xBB 0x3C 0xFD 0x1A ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x7E 0xFB 0xF7 0x97 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x98 0x8E 0x7F 0xB9 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Programmi\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0xBB 0x3C 0xFD 0x1A ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x7E 0xFB 0xF7 0x97 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x98 0x8E 0x7F 0xB9 ...

---- EOF - GMER 1.0.15 ----

[Danilo Cecconi]

Sembra non ci sia nulla di strano, comunque queste 2 voci trovate da Hijackthis le puoi eliminare tranquillamente:
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file).

Mi sa che l'unico indiziato resta l'hd.
Fatto il benchmark?
Perchè non posti le schermate (healt e bench)?

[Nico156]

finalmente ce l'ho fatta!

http://clip2net.com/page/m41377/5232004

http://clip2net.com/page/m41377/5232006

http://clip2net.com/page/m41377/5232009

http://clip2net.com/page/m41377/5232012

[Nico156]

per la cronaca anche il mio maxtor ha cpu usage alto..

http://clip2net.com/page/m41377/5240558

http://clip2net.com/page/m41377/5240561

[Danilo Cecconi]

CPU Usage alto al 4/5%...??
No va bene così, sono nella norma entrambi.
Anche i test con HD Tune dicono che entrambi gli hd sono a posto, non ho visto nulla di anormale.

[Nico156]

Meglio così!! :D

però usando il raptor come principale mi segnava cpu usage sopra il 50 % per questo ho aperto la discussione.. allora significa che c'è qualche processo attivo in quel os quindi cercherò li il problema!

il raptor è veloce quanto deve? pensavo corresse di più sinceramente.. il tempo medio di accesso pensavo fosse sui 5 ms e il transfer rate sopra i 100 mb.. forse chiedo troppo eh? :D

comunque ancora grazie per l'aiuto!