Welcome to our peer-to-peer forums, where owners help owners. Need help now? Visit eSupport here.

English Community

ThinkPad NotebooksThinkPad; T61 and prior T series plus Other Legacy ThinkPads
All Forum Topics
Options

7 Posts

04-11-2010

USA

21 Signins

532 Page Views

  • Posts: 7
  • Registered: ‎04-11-2010
  • Location: USA
  • Views: 532
  • Message 1 of 12

T41---process rundll32.exe occupied 100% cpu usage and caused slow performance.

2010-04-16, 20:12 PM

Hi, guys:

I've got a problem as what I stated in the subject that have plagued me for a while,
recently this issue got really intense and I even got a BSOD that said as follows:
STOP: 0x000000c5 (0x002932E0, 0x00000002, 0x00000000, 0x8054BF0F)

This problem occured especially when I surfed multiple tabs in firefox with a instant translating program opened. Does it have anything to do with the cause of the problems.

I've tried to reimage my Thinkpad and reinstall XP using IBM recovery CD.

I also did a cleanup of my system and did a disk error checking and used Microsoft Windows Resource Checker-a.k.a sfc.exe-to have a check.

Not to mention I also used PC doctor coming with the system to check possible hardware problems.

Non of them returned any negative result.

So I tried to search my problem on the Internet to see if there's any other possible solution.

I found out a lot similar cases and did whatever the solutions suggested.

I did a thourough spyware check by using Malewarebyte, ESET online scanner, windows ONEcare&malicious software removal tool. Again, non of them retured any negative results except some minor adware issues.

Finally I dicided to give a try on windows Driver Verifier. First I checked all the drivers except Microsoft's, and no issues found.
Then I tested all of the drivers including Microsoft's, this time a blue screen occured again, with the following error report:
STOP: 0x000000c4 (0x00000060, 0x00000074, 0x00000000, 0x00000001)

so I think certain drivers are corrupted, but I'm not sure which drivers and if it has anything to do with the Rundll32 problem.

Since all previous attempts of troubleshooting failed. I have to rely on the expert's opinions of you now.

Here's the list of modules loaded on Rundll32 when it occupied major cpu usage:

Image Name                   PID Modules                                      
========================= ====== =============================================
rundll32.exe                1652 ntdll.dll, kernel32.dll, msvcrt.dll,         
                                 GDI32.dll, USER32.dll, IMAGEHLP.dll,         
                                 ShimEng.dll, AcGenral.DLL, ADVAPI32.dll,     
                                 RPCRT4.dll, Secur32.dll, WINMM.dll,          
                                 ole32.dll, OLEAUT32.dll, MSACM32.dll,        
                                 VERSION.dll, SHELL32.dll, SHLWAPI.dll,       
                                 USERENV.dll, UxTheme.dll, IMM32.DLL,         
                                 LPK.DLL, USP10.dll, comctl32.dll,            
                                 comctl32.dll, pwrmonit.dll, MFC42.DLL,       
                                 setupapi.dll, powrprof.dll, tppwrw32.dll,    
                                 msctfime.ime, TINTLGNT.IME, MSCTF.dll  


And the Hijackthis report:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:47:46 PM, on 4/13/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\360\360safe\safemon\360tray.exe
C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
C:\Program Files\Support.com\bin\tgcmd.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
C:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\Program Files\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\360\360sd\360sd.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\NETGEAR\WNDA3100\WNDA3100.exe
C:\Program Files\360\360sd\360rp.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
C:\WINDOWS\system32\TpKmpSVC.exe
C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
C:\WINDOWS\system32\SearchIndexer.exe
c:\program files\lenovo\system update\suservice.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe
C:\Program Files\Inventec\Dreye\Dreye.exe
C:\Program Files\Inventec\Dreye\PeaDict\RtDict.exe
C:\Program Files\InterVideo\WinDVD\WinDVD.exe
C:\Documents and Settings\Administrator\My Documents\Downloads\HKJ\hijackthis.exe
C:\Program Files\Skype\Toolbars\Shared\SkypeNames2.exe
C:\Program Files\Inventec\Dreye\Peadict\Dict.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SafeMon Class - {B69F34DD-F0F9-42DC-9EDD-957187DA688D} - C:\Program Files\360\360safe\safemon\safemon.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: ShopAtHomeIEHelper - {E8DAAA30-6CAA-4b58-9603-8E54238219E2} - C:\Program Files\SelectRebates\Toolbar\ShopAtHomeToolbar.dll
O3 - Toolbar: Dr.eye WebPage Translation - {92B255FE-94E2-4BCA-958D-3926CE38913F} - C:\Program Files\Inventec\Dreye\DreyeMT\DreyeIEBar.dll
O3 - Toolbar: ShopAtHome Toolbar - {98279C38-DE4B-4bcf-93C9-8EC26069D6F4} - C:\Program Files\SelectRebates\Toolbar\ShopAtHomeToolbar.dll
O4 - HKLM\..\Run: [360Safetray] "C:\Program Files\360\360safe\safemon\360tray.exe" /start
O4 - HKLM\..\Run: [TVT Scheduler Proxy] C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper
O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\Support.com\bin\tgcmd.exe" /server
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [S3TRAY2] S3Tray2.exe
O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [BMMLREF] C:\Program Files\ThinkPad\Utilities\BMMLREF.EXE
O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [360sd] "C:\Program Files\360\360sd\360sd.exe" /autorun
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'Default user')
O4 - Global Startup: NETGEAR WNDA3100 Smart Wizard.lnk = C:\Program Files\NETGEAR\WNDA3100\WNDA3100.exe
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [JAVA_IBM] Java (IBM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - ESC Trusted Zone: http://*.update.microsoft.com
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) - https://wimpro.cce.hp.com/ChatEntry/downloads/sysinfo.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8942.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1254684984876
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {A9F8D9EC-3D0A-4A60-BD82-FBD64BAD370D} (DDRevision Class) - http://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsxp2k.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: 360 é±??êμê±·à?¤·t?? (360rp) - 360.cn - C:\Program Files\360\360sd\360rp.exe
O23 - Service: Atheros Configuration Service (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Jumpstart Wifi Protected Setup (jswpsapi) - Atheros Communications, Inc. - C:\Program Files\NETGEAR\WNDA3100\jswpsapi.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: System Update (SUService) - Lenovo Group Limited - c:\program files\lenovo\system update\suservice.exe
O23 - Service: ThinkVantage Registry Monitor Service - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\WINDOWS\System32\TPHDEXLG.exe
O23 - Service: IBM KCU Service (TpKmpSVC) - Unknown owner - C:\WINDOWS\system32\TpKmpSVC.exe
O23 - Service: TVT Scheduler - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
O23 - Service: ?÷?ˉ·àóù (ZhuDongFangYu) - 360.cn - C:\Program Files\360\360safe\deepscan\zhudongfangyu.exe

--
End of file - 9247 bytes


Thanks for taking time in reviewing this. I appreciate all of your helps.


Reply
Answer
Options

7 Posts

04-11-2010

USA

21 Signins

532 Page Views

  • Posts: 7
  • Registered: ‎04-11-2010
  • Location: USA
  • Views: 532

Re: T41---process rundll32.exe occupied 100% cpu usage and caused slow performance.

2010-04-21, 22:42 PM

Hello,

 

Thanks for the instructions on backing up. I found 2 built-in back-up program from both Microsoft in the "System Tools" Folder&IBM in its "Access IBM" folder. I decided to give Microsoft's a try first. After I opened up the Back Up Wizard, it listed a lot of options that let you choose which documents&folders you're planning to back up. Cause I can't decide what specific files I really value, I basically chose everything including system information. I guess you can count it as a type of "cloning", right? After it started to back up, every copy of system information is sent into a ".bkf" type of file. This utility do offer an option of copying everything into a disk tape, but not a CD/DVD. I guess in order to do "imaging", I have to make this bkf into a ISO or any similar image file, or can I just make a Data DVD&send the bkf file directly into it? BTW, why I didn't choose to buy an external drive is because I already have 2 which I bought in Taiwan a few years ago, and they didn't have a back up program coming with it(or maybe I don't know its location). Probably because they're old ones&they don't have attaching program back then. Still, your advice is much appreciated.

 

After I've virtually upgraded every possible drivers on my computer, the Rundll32 still refused to back up. So, I decided to venture a little & deleted the only item that has any trace associated with Rundll32 I found in Hijackthis report, which is "O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor". At first, I didn't assume it would work since it's a IBM-related process, but amazingly, it's the medicine needed. My computer now works fast&fine. Although I'm a little worried about possible bad consequences following this deletion, I still have the back-up option. When I'm wishing this recovery would last, I also question why a power monitor process of IBM would cause this kind of chaos. Is it because I have an old worn-out battery? I'm wondering now if I need to replace it.

 

After all the troubles, things finally get back to normal again. I'm so grateful of your patience in solving my problem step by step, and the useful instructions you provided me.

 

P.S.. I should have replied earlier yesterday, but I was really busy. Hope you still trace back this thread anyway.

 

Best regards,

 

Verlandi

Reply

Replies(11)
Options

4272 Posts

12-02-2007

United States of America

9151 Signins

198453 Page Views

  • Posts: 4272
  • Registered: ‎12-02-2007
  • Location: United States of America
  • Views: 198453
  • Message 2 of 12

Re: T41---process rundll32.exe occupied 100% cpu usage and caused slow performance.

2010-04-17, 9:58 AM

Hello,

 

RunDLL is a program which allows Microsoft Windows to load and execute code from within Dynamically Linked Library (DLL) files. A DLL is a special kind of file that can easily be loaded and unloaded from memory.  By itself, RUNDLL is not malicious, however, both good and malicious programs use DLLs.

 

I looked through your Hijack This log file, and while I am not an expert in interpreting them, I did note you had a security program called "360Safe" installed.  I am personally not familiar with this program, and there seems to be some question about how effective it is.  I also noticed Symantec LiveUpdate running on the computer as well.  Symantec makes a lot of programs besides security software, but if there are leftover drivers or services from Symantec's security software still on the computer, then perhaps the issue is due to a conflict between the two programs.

 

Of course, the problem could be from something completely unrelated to security software.  I noticed that software for network cards from Atheros, Intel and Netgear is also installed, so perhaps a conflict between some of those? 

 

Another possibility is an issue with older device drivers for the notebook's chipset or video.  You might want to try updating all of the device drivers for the T41's hardware, one at a time, and then see if the behavior of the system changes.  If you just recovered the operating system then it is possible there are some older device drivers loaded on there that may not be fully compatible with Service Pack 3 for Microsoft Windows XP.

 

Regards,

 

Aryeh Goretsky

 

 

 



I am a volunteer and neither a Lenovo nor a Microsoft employee.

L380 YogaP50 (20EN-*)P51sP72 (20MB-*)P43sS230u (3347-4HU)T23 (2648-LU7)T42 (2378-R4U)T43p (2678-H7U)T61p (6459-CTO)W510 (4318-CTO)W530 (2441-4R3)X100e (3508-CTO)X120e (0596-CTO)X220 (4286-CTO)X250 (20CM-*)X1e gen3X1 Yoga gen 5X12 gen1X13 gen1Yoga 370

Communities: English Deutsche Español Português Русскоязычное Česká Slovenská Українська Język Polski Moto English


Need an answer, fast? Try using Browser Search to find it in the Lenovo and Moto Community
Reply
Options

7 Posts

04-11-2010

USA

21 Signins

532 Page Views

  • Posts: 7
  • Registered: ‎04-11-2010
  • Location: USA
  • Views: 532
  • Message 3 of 12

Re: T41---process rundll32.exe occupied 100% cpu usage and caused slow performance.

2010-04-17, 20:40 PM

   Hi, Aryeh:

Thx so much for taking time looking through all this. I will try to get through your points one at a time.
To quote what you said:


"......I did note you had a security program called "360Safe" installed......" 

About this, it is a security program my brother recommended me from China (Cause it's rated high & free :D ), I just found an English website talking about it. If you're by any chance interested, please check: http://www.wilderssecurity.com/showthread.php?t=261312

and news about its release:

ChinaTechWeb


"......noticed Symantec LiveUpdate running on the computer as well......but if there are leftover drivers......still on the computer, then perhaps the issue is due to a conflict between the two programs"

It's kind of frustrated, but I did try really hard to remove Symantec. It came in default with IBM recovery CD and offered a 3-month trial period. After this, I downloaded an uninstaller program from Symantec and uninstalled it. I couldn't believe it's still there. What a tough one! Do you have any suggestion about how to get rid of the remnants?

 

"I noticed that software for network cards from Atheros, Intel and Netgear is also installed, so perhaps a conflict between some of those"

I looked into the Device Manager, and found out there're two Intel's & one Netgear's under <Network Adater> column. The intel's are respectively named <Intel pro/1000 MT mobile connection>& <Inter pro/wireless LAN 2100 3B mini PCI adapter>. For both of them I've disable already before. The Netgear's one is "RangeMax Dual Band Wireless-N USB adapter", which is what I'm using now. I don't know where that Atheros come from. I did a search in my computer and found a folder named Atheros under <Programs Files>, inside contained an exe program called Atheros Client Utility, and I don't know what's it use. I don't know anything beside disabling the unused drivers. Do I need to go further?

 

"Another possibility is an issue with older device drivers for the notebook's chipset or video.  You might want to try updating all of the device drivers for the T41's hardware......" 

I've installed the ThinkVantage package and used the System Update inside, cause the Update Utility in Access IBM folder couldn't connect with the web. I thought it would be enough updates. I also updated the BIOS. I found there's a webpage in Lenove that offered all up-to-date versions of drivers for T41:

http://www-307.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-46258

Is it what you're refering to? Do I still to update all on the lists after I've already updated through ThinkVantage? or are they actually dealing different issues? Do I also need to update all the drivers from other company's? Is there a program or a scan that can catch all the updates at once?

 

Thx again for taking on my questions bombing, wishing I've explained clearly enough. If you came up any new solutions, please let me know.

 

 

Reply
Options

4272 Posts

12-02-2007

United States of America

9151 Signins

198453 Page Views

  • Posts: 4272
  • Registered: ‎12-02-2007
  • Location: United States of America
  • Views: 198453
  • Message 4 of 12

Re: T41---process rundll32.exe occupied 100% cpu usage and caused slow performance.

2010-04-18, 10:34 AM

Hello,

 

Interesting reading from Wilders Security Forum.

 

Symantec offers a program called the Norton Removal Tool which uninstalls their consumer products.  You could try running that and see if it helps.  The latest version can always be found at www.symantec.com/symnrt

 

I would recommend backing up any valuable data before running it, just in case some sort of a problem occurs due to the presence of the other anti-malware software.  There probably won't be one, of course, but better safe than sorry.

 

Atheros manufactures various network chipsets, so perhaps one of their chips is inside the Netgear RangeMax Dual Band Wireless-N USB adapter.  That could explain why it is present on your T41.  Netgear's technical support department can probably confirm this.

 

I believe the T41 uses the Intel 855 chipset.  There might be newer device drivers available from Intel that have not yet been released by Lenovo for the T41.  You could try installing those and see if it makes any difference.  Again, the warning about backing up any valuable data applies.

 

Regards,

 

Aryeh Goretsky

 

 

 



I am a volunteer and neither a Lenovo nor a Microsoft employee.

L380 YogaP50 (20EN-*)P51sP72 (20MB-*)P43sS230u (3347-4HU)T23 (2648-LU7)T42 (2378-R4U)T43p (2678-H7U)T61p (6459-CTO)W510 (4318-CTO)W530 (2441-4R3)X100e (3508-CTO)X120e (0596-CTO)X220 (4286-CTO)X250 (20CM-*)X1e gen3X1 Yoga gen 5X12 gen1X13 gen1Yoga 370

Communities: English Deutsche Español Português Русскоязычное Česká Slovenská Українська Język Polski Moto English


Need an answer, fast? Try using Browser Search to find it in the Lenovo and Moto Community
Reply
Options

7 Posts

04-11-2010

USA

21 Signins

532 Page Views

  • Posts: 7
  • Registered: ‎04-11-2010
  • Location: USA
  • Views: 532
  • Message 5 of 12

Re: T41---process rundll32.exe occupied 100% cpu usage and caused slow performance.

2010-04-20, 4:48 AM

Hello,

 

Glad to see you back. I'm happy you found the linking information interesting.

 

About the Norton Removal Tool......Actually, I just found out I have the same thing in my downloading directory which I've saved&executed 2 weels ago. It seems some unwelcomed remnants still remained on my computer despite using this uninstaller. Looks like my only choice is to check the item in Hijackthis. Is it going to work?

 

You told me to back up my computer. Does it mean to create a restore point? or something else?

 

I just googled the Netgear WNDA3100 Adapter. Looks like it's also named Atheros AR9001U-2NX. So, obviously, Atheros is the manufacturer of the Adapter. Thanks for your advice.

 

I checked the Intel website. It's amazing they offer a lot of useful updates and tools. I've downloaded the one related to my computer. I will install it after I comfirmed on how to back up data properly.

 

Once again, I appreciate all your sincere advice, but my remaining question is: Do I need to update all kinds of  drivers from IBM and other manufacturers? Cause it seems to be a big task if I have to update them one by one. I wonder if there's any more convenient way, you know, I kind of get lazy after dealing with this cpu crisis ;).

 

Best regards,

 

Verlandi

 

 

Reply
Options

4272 Posts

12-02-2007

United States of America

9151 Signins

198453 Page Views

  • Posts: 4272
  • Registered: ‎12-02-2007
  • Location: United States of America
  • Views: 198453
  • Message 6 of 12

Re: T41---process rundll32.exe occupied 100% cpu usage and caused slow performance.

2010-04-20, 6:37 AM

Hello,

 

Unfortunately, I'm not certain what will happen if you try to remove the leftover Symantec files using Hijack This.  It could work cleanly and solve the problem, or there could be complications of varying degrees, ranging from no change to the computer no longer being usable.  That is why I made a recommendation to back it up before proceeding.

 

There are several kinds of backups one can make:   One can copy the entire contents of the hard disk drive to another hard disk drive (what is often refered to as 'cloning'), or split it up cloned disk into sections which can be backed up to CD, DVD or even a tape drive (which is often refered to as 'imaging').  You can also just copy files to an external USB hard disk drive or a flash drive.  It really depends on what data you consider important enough/valuable enough to make a copy of in case a problem occurs.  If you are not certain what needs to be backed up, I would suggest visiting your local computer or office supply superstore and see what sort of external hard disk drive kits they have.  Many come with backup software, and probably even the smallest capacity one they sell these days is likely to be larger than the hard disk drive installed in your T41.

 

System Restore does not back up your data, but saves the state of your operating system and installed software, so that in the event of a problem with either, you can revert back to an instance of them that was made while the system was still operating normally.

 

I always like to have the current versions of device driver software installed on my computers, because device drivers are just another kind of computer program and newer versions tend to contain fixes for problems in older versions.  Of course, sometimes newer versions of software introduce problems as well.

 

Since the goal is to get your T41 usable once more without RunDLL consuming 100% of the processor's time, I would suggest the next step in troubleshooting the problem is to get the system backed up.  After backing up the system, you can verify the backup was successful by restoring some of the files to another computer and opening them.  Once you have done that, it should be safe to make changes to the T41, since in the event of  a catastrophic problem (no matter how unlikely that seems) you will still have all your data intact and be able to restore the computer to its state from when the backup was made.

 

Regards,

 

Aryeh Goretsky

 

 



I am a volunteer and neither a Lenovo nor a Microsoft employee.

L380 YogaP50 (20EN-*)P51sP72 (20MB-*)P43sS230u (3347-4HU)T23 (2648-LU7)T42 (2378-R4U)T43p (2678-H7U)T61p (6459-CTO)W510 (4318-CTO)W530 (2441-4R3)X100e (3508-CTO)X120e (0596-CTO)X220 (4286-CTO)X250 (20CM-*)X1e gen3X1 Yoga gen 5X12 gen1X13 gen1Yoga 370

Communities: English Deutsche Español Português Русскоязычное Česká Slovenská Українська Język Polski Moto English


Need an answer, fast? Try using Browser Search to find it in the Lenovo and Moto Community
Reply
Answer
Options

7 Posts

04-11-2010

USA

21 Signins

532 Page Views

  • Posts: 7
  • Registered: ‎04-11-2010
  • Location: USA
  • Views: 532
  • Message 7 of 12

Re: T41---process rundll32.exe occupied 100% cpu usage and caused slow performance.

2010-04-21, 22:42 PM

Hello,

 

Thanks for the instructions on backing up. I found 2 built-in back-up program from both Microsoft in the "System Tools" Folder&IBM in its "Access IBM" folder. I decided to give Microsoft's a try first. After I opened up the Back Up Wizard, it listed a lot of options that let you choose which documents&folders you're planning to back up. Cause I can't decide what specific files I really value, I basically chose everything including system information. I guess you can count it as a type of "cloning", right? After it started to back up, every copy of system information is sent into a ".bkf" type of file. This utility do offer an option of copying everything into a disk tape, but not a CD/DVD. I guess in order to do "imaging", I have to make this bkf into a ISO or any similar image file, or can I just make a Data DVD&send the bkf file directly into it? BTW, why I didn't choose to buy an external drive is because I already have 2 which I bought in Taiwan a few years ago, and they didn't have a back up program coming with it(or maybe I don't know its location). Probably because they're old ones&they don't have attaching program back then. Still, your advice is much appreciated.

 

After I've virtually upgraded every possible drivers on my computer, the Rundll32 still refused to back up. So, I decided to venture a little & deleted the only item that has any trace associated with Rundll32 I found in Hijackthis report, which is "O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor". At first, I didn't assume it would work since it's a IBM-related process, but amazingly, it's the medicine needed. My computer now works fast&fine. Although I'm a little worried about possible bad consequences following this deletion, I still have the back-up option. When I'm wishing this recovery would last, I also question why a power monitor process of IBM would cause this kind of chaos. Is it because I have an old worn-out battery? I'm wondering now if I need to replace it.

 

After all the troubles, things finally get back to normal again. I'm so grateful of your patience in solving my problem step by step, and the useful instructions you provided me.

 

P.S.. I should have replied earlier yesterday, but I was really busy. Hope you still trace back this thread anyway.

 

Best regards,

 

Verlandi

0 person found this solution to be helpful.

This helped me too

Reply
Options

4272 Posts

12-02-2007

United States of America

9151 Signins

198453 Page Views

  • Posts: 4272
  • Registered: ‎12-02-2007
  • Location: United States of America
  • Views: 198453
  • Message 8 of 12

Re: T41---process rundll32.exe occupied 100% cpu usage and caused slow performance.

2010-04-22, 9:06 AM

Hello,

 

I have always used third-party backup software, but from what I have heard, Microsoft's backup software works well and you should have no trouble using it with an external hard disk drive.  There should be no issue connecting an external hard disk drive to your ThinkPad T41 via its USB port, and no special software should be required, either, as all modern devices are recognized automatically by the operating system.


I am not sure why the ThinkPad Power Monitor software would cause your CPU to spike to 100%, but am glad to hear you were able to resolve the issue.  As far as I know, this is not a critical program to run, and your system should be fine without it.  It is curious that your T41 had this problem, though; I cannot recall seeing similar reports here in the forum or elsewhere. 

 

If you are feeling adventuresome and would like to investigate this further, you could try installing the latest ThinkPad Power Management Driver and Battery MaxiMiser and Power Management features for Windows from Lenovo's support web site to see if the problem persists with them.  On the other hand, since your ThinkPad T41 is now working the way you want it to, you might want to leave it alone, unless you need to update the power management software for some other reason.

 

Regards,

 

Aryeh Goretsky

 



I am a volunteer and neither a Lenovo nor a Microsoft employee.

L380 YogaP50 (20EN-*)P51sP72 (20MB-*)P43sS230u (3347-4HU)T23 (2648-LU7)T42 (2378-R4U)T43p (2678-H7U)T61p (6459-CTO)W510 (4318-CTO)W530 (2441-4R3)X100e (3508-CTO)X120e (0596-CTO)X220 (4286-CTO)X250 (20CM-*)X1e gen3X1 Yoga gen 5X12 gen1X13 gen1Yoga 370

Communities: English Deutsche Español Português Русскоязычное Česká Slovenská Українська Język Polski Moto English


Need an answer, fast? Try using Browser Search to find it in the Lenovo and Moto Community
Reply
Options

7 Posts

04-11-2010

USA

21 Signins

532 Page Views

  • Posts: 7
  • Registered: ‎04-11-2010
  • Location: USA
  • Views: 532
  • Message 9 of 12

Re: T41---process rundll32.exe occupied 100% cpu usage and caused slow performance.

2010-04-23, 22:33 PM

Hello,

 

Nice to see you again, I'm relieved to hear Microsoft's Back Up is a trustful program. But instead of HDD, I'd like to try burning it into a DVD Media (My HDD is full now,sadly). Do you know if I need to make the original back up file "system.bkf" into a image file first or I can just put this kind of file format into a Data DVD? This is really my last question, no more. I think you've already have enough of them ;)

 

I'm also amazed by the root of the 100% CPU occupation problem. My best guess is the old worn-out battery I never changed since the birth of this laptop. Most ppl might have changed their battery before it caused any similar problem.

 

Thankfully this power monitor program is not a critical one. I'd be happy to try your links anytime I find it necessary. As of now, I will just follow your advice and leave it alone.

 

Best regards,

 

Verlandi

 

Reply
Options

4272 Posts

12-02-2007

United States of America

9151 Signins

198453 Page Views

  • Posts: 4272
  • Registered: ‎12-02-2007
  • Location: United States of America
  • Views: 198453
  • Message 10 of 12

Re: T41---process rundll32.exe occupied 100% cpu usage and caused slow performance.

2010-04-26, 4:58 AM

Hello,

 

I would think that it would be okay to copy the SYSTEM.BKF file to DVD±R discs, but I would recommend making sure they can be read on another computer (or two) before deleting the files from your hard disk drive. Depending upon the amount of data you have, it may be easier to back up to an external hard disk drive than to burn the backup to DVDs, though.

 

Regards,

 

Aryeh Goretsky

 



I am a volunteer and neither a Lenovo nor a Microsoft employee.

L380 YogaP50 (20EN-*)P51sP72 (20MB-*)P43sS230u (3347-4HU)T23 (2648-LU7)T42 (2378-R4U)T43p (2678-H7U)T61p (6459-CTO)W510 (4318-CTO)W530 (2441-4R3)X100e (3508-CTO)X120e (0596-CTO)X220 (4286-CTO)X250 (20CM-*)X1e gen3X1 Yoga gen 5X12 gen1X13 gen1Yoga 370

Communities: English Deutsche Español Português Русскоязычное Česká Slovenská Українська Język Polski Moto English


Need an answer, fast? Try using Browser Search to find it in the Lenovo and Moto Community
Reply
Forum Home

Community Guidelines

Please review our Guidelines before posting.

Learn More

Check out current deals!

Go Shop
X

Save

X

Delete

X

No, I don’t want to share ideas Yes, I agree to these terms