Utorrent грузит процессор windows 10

---

---

---

---

---

---

---

---

---

---

---

---

I’ve been using uTorrent for many years but have never experienced this problem before.

If I open up my windows task manager and watch the CPU usage history there is a continuous pattern of random spikes every 7-10 seconds. During each spike if I switch over to the process window in T.M. and sort by CPU, uTorrent.exe always jumps up top and displays 100 for a split second under the CPU column then 55 for a second, after which it returns back to normal (CPU between 5-10) and the spike disappears.

I’ve read through forum posts but none really address my issue. All 3 of my HDDs are set to Ultra DMA mode (not PIO of course). The only thing I have changed on my windows XPSP3 machine recently is that I removed Zonealarm and installed Outpost Pro instead. I have a feeling this could be a factor but when the spikes occur acs.exe (Outpost’s process) does not move so it does not seem active thus not playing an influence. I haven’t made any adjustments to my a/v Nod32 so doubt that is the problem; IMON is even disabled and uT has an exclusion as well. I should say that these spikes do not seem to cause any harm on my torrent downloads/uploads, the only downside is the cpu usage and fans increasing every 10 seconds which is annoying.

I’ve tried the last three versions of uT and the problem is still the same. I’ve documented some screenshots during the spikes below. Sorry for the long post but I thought the more info/evidence the better. Hope you can help me out guys!

***EDIT: I forgot to say that no spikes occur when uT is closed and only Firefox, Nod32, Outpost and windows processes are running.***

Here’s task manager’s graph:

Here’s Process Explorer’s uTorrent graph:

Here’s Process Explorer’s uTorrent performance:

Here’s Process Explorer’s uTorrent threads:

Here’s Process Explorer’s list for uTorrent’s DLLs:

Process PID CPU Description Company Name

System Idle Process 0 5.41

Interrupts n/a Hardware Interrupts

DPCs n/a Deferred Procedure Calls

System 4

explorer.exe 1772 Windows Explorer Microsoft Corporation

nod32kui.exe 436 NOD32 Control Center GUI Eset

op_mon.exe 448 Outpost User Interface Agnitum Ltd.

uTorrent.exe 792 81.98 µTorrent BitTorrent, Inc.

procexp.exe 2916 3.60 Sysinternals Process Explorer Sysinternals — www.sysinternals.com

taskmgr.exe 2716 2.70 Windows TaskManager Microsoft Corporation

notepad.exe 2464 Notepad Microsoft Corporation

Process: uTorrent.exe Pid: 792

Name Description Company Name Version

ACTIVEDS.dll ADs Router Layer DLL Microsoft Corporation 5.1.2600.5512

adsldpc.dll ADs LDAP Provider C DLL Microsoft Corporation 5.1.2600.5512

ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 5.1.2600.5512

ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.5.2284.1

COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.0.2900.5512

comdlg32.dll Common Dialogs DLL Microsoft Corporation 6.0.2900.5512

CRYPT32.dll Crypto API32 Microsoft Corporation 5.131.2600.5512

ctype.nls

DnsApi.dll DNS Client API DLL Microsoft Corporation 5.1.2600.5625

GDI32.dll GDI Client DLL Microsoft Corporation 5.1.2600.5698

hnetcfg.dll Home Networking Configuration Manager Microsoft Corporation 5.1.2600.5512

IMM32.DLL Windows XP IMM32 API Client DLL Microsoft Corporation 5.1.2600.5512

imon.dll NOD32 IMON — Internet scanning support Eset 2.70.39.0

Iphlpapi.dll IP Helper API Microsoft Corporation 5.1.2600.5512

kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 5.1.2600.5512

locale.nls

MPRAPI.dll Windows NT MP Router Administration DLL Microsoft Corporation 5.1.2600.5512

MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 5.1.2600.5512

msctfime.ime Microsoft Text Frame Work Service IME Microsoft Corporation 5.1.2600.5512

msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.0.2600.5512

mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 5.1.2600.5625

netapi32.dll Net Win32 API DLL Microsoft Corporation 5.1.2600.5694

ntdll.dll NT Layer DLL Microsoft Corporation 5.1.2600.5512

ole32.dll Microsoft OLE for Windows Microsoft Corporation 5.1.2600.5512

oleaut32.dll Microsoft Corporation 5.1.2600.5512

rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 5.1.2600.5512

RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 5.1.2600.5512

rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 5.1.2600.5507

rtutils.dll Routing Utilities Microsoft Corporation 5.1.2600.5512

SAMLIB.dll SAM Library DLL Microsoft Corporation 5.1.2600.5512

Secur32.dll Security Support Provider Interface Microsoft Corporation 5.1.2600.5512

SETUPAPI.dll Windows Setup API Microsoft Corporation 5.1.2600.5512

SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.0.2900.5512

shfolder.dll Shell Folder Service Microsoft Corporation 6.0.2900.5512

SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.0.2900.5512

sortkey.nls

sorttbls.nls

unicode.nls

USER32.dll Windows XP USER API Client DLL Microsoft Corporation 5.1.2600.5512

USERENV.dll Userenv Microsoft Corporation 5.1.2600.5512

uTorrent.exe µTorrent BitTorrent, Inc. 1.8.4.16381

uxtheme.dll Microsoft UxTheme Library Microsoft Corporation 6.0.2900.5512

wl_hook.dll Outpost Hooking Module Agnitum Ltd. 6.73.3063.11009

WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 5.1.2600.5512

WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 5.1.2600.5512

WS2HELP.dll Windows Socket 2.0 Helper for Windows NT Microsoft Corporation 5.1.2600.5512

wshtcpip.dll Windows Sockets Helper DLL Microsoft Corporation 5.1.2600.5512

WSOCK32.dll Windows Socket 32-Bit DLL Microsoft Corporation 5.1.2600.5512

uTorrent’s handles:

Process PID CPU Description Company Name

System Idle Process 0

Interrupts n/a Hardware Interrupts

DPCs n/a Deferred Procedure Calls

System 4

explorer.exe 1772 0.77 Windows Explorer Microsoft Corporation

nod32kui.exe 436 NOD32 Control Center GUI Eset

op_mon.exe 448 0.77 Outpost User Interface Agnitum Ltd.

uTorrent.exe 792 71.54 µTorrent BitTorrent, Inc.

procexp.exe 2916 16.15 Sysinternals Process Explorer Sysinternals — www.sysinternals.com

taskmgr.exe 2716 5.38 Windows TaskManager Microsoft Corporation

notepad.exe 2464 Notepad Microsoft Corporation

Process: uTorrent.exe Pid: 792

Type Name

Desktop \Default

Directory \KnownDlls

Directory \Windows

Directory \BaseNamedObjects

Event \BaseNamedObjects\userenv: User Profile setup event

Event \BaseNamedObjects\crypt32LogoffEvent

File C:\Documents and Settings\Username

File C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83

File C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83

File \Device\KsecDD

File \Device\Afd

File \Device\Tcp

File \Device\Tcp

File \Device\Tcp

File \Device\Ip

File \Device\Ip

File \Device\Ip

File \Device\Tcp

File \Device\Afd

File \Device\Udp

File \Device\RawIp

File \Device\Afd

File \Device\Tcp

File D:\TORRENT SEED FILE [***name replaced***]

File \Device\Tcp

File \Device\Afd

File \Device\Afd

File \Device\Tcp

File \Device\Afd

File \Device\Afd

File \Device\Afd

File \Device\Tcp

File \Device\Tcp

File \Device\Tcp

File \Device\Tcp

File \Device\Tcp

File D:\TORRENT SEED FILE [***name replaced***]

File \Device\Tcp

File \Device\Afd

File \Device\Tcp

File \Device\Tcp

File \Device\Tcp

File \Device\Afd

File \Device\Tcp

File \Device\Afd

File \Device\Tcp

File \Device\Tcp

File D:\TORRENT SEED FILE [***name replaced***]

File \Device\Tcp

File \Device\Tcp

File \Device\Tcp

File \Device\Afd

File \Device\Afd

File \Device\Afd

File \Device\Tcp

File D:\TORRENT SEED FILE [***name replaced***]

File \Device\Afd

File \Device\Tcp

File \Device\Afd

File \Device\Tcp

File \Device\Tcp

File \Device\Tcp

File \Device\Tcp

File \Device\Tcp

File \Device\Tcp

File D:\TORRENT SEED FILE [***name replaced***]

File \Device\Afd

File \Device\Tcp

File \Device\Afd

File \Device\Tcp

File \Device\Tcp

File \Device\Tcp

File \Device\Afd

File \Device\Afd

File \Device\Afd

File \Device\Tcp

File \Device\Afd

File \Device\Tcp

File \Device\Afd

File \Device\Tcp

File \Device\Udp

File \Device\Afd

File \Device\Tcp

File \Device\Tcp

File \Device\Tcp

File \Device\Afd

File \Device\Afd

File \Device\Afd

File D:\TORRENT SEED FILE [***name replaced***]

File \Device\Afd

File \Device\Afd

File \Device\Afd

File \Device\Tcp

File \Device\Tcp

File D:\TORRENT SEED FILE [***name replaced***]

File \Device\Afd

File H:\TORRENT SEED FILE [***name replaced***]

File \Device\Tcp

File \Device\Tcp

File \Device\Afd

File \Device\Afd

File \Device\Afd

File \Device\Tcp

File \Device\Afd

File \Device\Tcp

File \Device\Tcp

Key HKLM

Key HKCU

Key HKU

Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9

Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5

Key HKLM\SYSTEM\ControlSet001\Services\Tcpip\Linkage

Key HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters

Key HKLM\SYSTEM\ControlSet001\Services\NetBT\Parameters\Interfaces

Key HKLM\SYSTEM\ControlSet001\Services\NetBT\Parameters

KeyedEvent \KernelObjects\CritSecOutOfMemoryEvent

Mutant \BaseNamedObjects\µTorrent4823DF041B09

Mutant \BaseNamedObjects\ShimCacheMutex

Mutant \BaseNamedObjects\DBWinMutex

Section \BaseNamedObjects\ShimSharedMemory

Semaphore \BaseNamedObjects\shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}

Semaphore \BaseNamedObjects\shell.{210A4BA0-3AEA-1069-A2D9-08002B30309D}

Thread uTorrent.exe(792): 864

Thread uTorrent.exe(792): 864

Thread uTorrent.exe(792): 1028

Thread uTorrent.exe(792): 1092

Thread uTorrent.exe(792): 1788

Thread uTorrent.exe(792): 1788

Thread uTorrent.exe(792): 1028

Thread uTorrent.exe(792): 1028

Thread uTorrent.exe(792): 1092

Thread uTorrent.exe(792): 1788

WindowStation \Windows\WindowStations\WinSta0

WindowStation \Windows\WindowStations\WinSta0

Последнее время стал замечать, что Utorrent начал очень сильно грузить ЦП. Возможно это как то связанно с тем, что в закладке «все» у меня
133 раздачи, но раньше при таком же количестве ничего подобного не наблюдалось. Есть подозрение, что происходящее как то связанно с подключением внешнего IP адреса, где то через день после этого я познакомился с этой проблемой.

Как это проявляется:

— сильные скачки на графике в диспетчере задач (вкладка — Быстродействие)
— дергается звук (одна и так же фраза произносится несколько раз)
— дергается курсор
— лагают игры
— компьютер не переставая что то грузит, всегда мигает красная лампочка

Если отключить Utorrent, то все сразу же приходит в норму и загрузка ЦП опускается до 0-3%.

Железо моего компа:

AMD Athlon 64 X2 Dual Core Processor 6000+ 3.10 Гц
Geforce 9800 GT
4 гигабайта оперативная память
блок питания 600 ВТ
1 террабайт жесткий диск

Для серфинга Интернета и торрентов такой компьютер как минимум неплох, дело точно не в нем. Стоит отметить, что при жестких лагах оба ядра процессора нагреваются до 65-70 градусов (смотрел в Эвересте). Поочередно проверял компьютер на вирусы разными лечилками — все чисто. За компанию оптимизировал систему через Advanced SystemCare (дефрагментация, чистка реестра, удаление шпионов, удаление лишних файлов, очистка Windows и тд.). При выключенном торрент клиенте все стало просто идеально, а вот при включеном проблема все еще осталась но уже не на столько серьезная. Если до оптимизации загрузка ЦП скакала 8-60, то теперь стабильно 8-20. Надеюсь на вашу помощь, наверняка кто то уже мучался над этим вопросом.

Скриншот графика:
[IMG]http://s49.***********/i124/0911/89/434829463d01.jpg[/IMG]

Добрый день! Через RDP на наш сервер проник вирус-шифровальщик,  появился новый том А на диске, там 2 файла: bootsect.bak и scream.txt. В scream.txt содержание такое: 

              ~~~ Scream V1.1~~~            
>>> What happened?
    We encrypted and stolen all of your files.
    We use AES and ECC algorithms.
    Nobody can recover your files without our decryption service.

>>> How to recover?
    We are not a politically motivated group and we want nothing more than money.
    If you pay, we will provide you with decryption software and destroy the stolen data.

>>> What guarantees?
    You can send us an unimportant file less than 1 MG, We decrypt it as guarantee.
    If we do not send you the decryption software or delete stolen data, no one will pay us in future so we will keep our promise.

>>> How to contact us?
   Our email address: Scream_@tutanota.com
   In case of no answer within 24 hours, contact to this email: De_Scream@tutanota.com
   Write your personal ID in the subject of the email.

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
                        >>>>> SCREAM 1.1 <<<<<
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

>>> Warnings!
  — Do not go to recovery companies, they are just middlemen who will make money off you and cheat you.
   They secretly negotiate with us, buy decryption software and will sell it to you many times more expensive or they will simply scam you.
  — Do not hesitate for a long time. The faster you pay, the lower the price.
  — Do not delete or modify encrypted files, it will lead to problems with decryption of files.

Подскажите, пожалуйста, что делать?

Данных как-будто нет. 
Заранее спасибо!