I am running under Windows XP. Response time is quite slow (CPU usage consistently reported at 100% by Task Manager) until I remove a program called cisvc.exe with Task Manager. I've run Hijack This, Spybot, Adaware, and Pest Patrol, and get no indication that there's anything wrong with cisvc.exe. Below is the latest hijackthis.log file. Is cisvc.exe supposed to work like this? Please advise.

Logfile of HijackThis v1.97.7
Scan saved at 1:38:24 PM, on 3/13/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\cisvc.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\IntraPort Client\vpn5000service.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Support.com\bin\tgcmd.exe
C:\Program Files\PestPatrol\PPControl.exe
C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
C:\WINDOWS\System32\taskmgr.exe
C:\My Documents\Dad's Folder\Viruses\HijackThis.exe
C:\WINDOWS\System32\cidaemon.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.comcast.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://www.toshiba.com/taisnpd/support/productreg.html
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://comcast.net/comcast.html"); (C:\Documents and Settings\Mike\Application Data\Mozilla\Profiles\default\okcczin3.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%206%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Mike\Application Data\Mozilla\Profiles\default\okcczin3.slt\prefs.js)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [Antivirus] C:\WINDOWS\av.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [ComcastSUPPORT] C:\Program Files\Support.com\bin\tgkill.exe /cleaneahtioga /start
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [PestPatrol Control Center] C:\Program Files\PestPatrol\PPControl.exe
O4 - HKLM\..\Run: [PPMemCheck] c:\PROGRA~1\PESTPA~1\PPMemCheck.exe
O4 - HKLM\..\Run: [KeyPatrol] c:\PROGRA~1\PESTPA~1\KeyPatrol.exe
O4 - HKLM\..\Run: [CookiePatrol] c:\PROGRA~1\PESTPA~1\CookiePatrol.exe
O9 - Extra button: ICQ (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Help (HKCU)
O9 - Extra button: Support (HKCU)
O9 - Extra button: ComcastHSI (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.comcast.net
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37812.8264236111

http://www.google.com/search?q=cache:Ah3uI3PoSfcJ:www.experts-exchange.com/Operating_Systems/WinXP/Q_20585121.html+cisvc.exe&hl=en&ie=UTF-8

What is it?
Description: Microsoft Index Service Helper, a service that monitors the memory usage of Microsoft Indexing Service (cidaemon.exe) and automatically re-starts cidaemon.exe if it uses more than 40 MB of memory.

What it isn't: a security risk

It's needed if you've set up any of your drives or directories to be indexed. Without it running, you could potentially invite a memory "hole", as the indexing service would not clear its RAM usage, as it goes.

If you are not indexing anything, there's no need for it to run, so...
1. click on start -> all programs -> administrative tools -> services
2. click on the "standard" tab
3. (sorted by Name) go down to "Indexing Service" -> double click
4. note that in the properties, it's described as "CiSvc"... (you've got the right one)
5. change the "Startup type" to 'Disabled'
6. click on "Apply"
7. click on "Stop" (if available)

Now, you should notice that your cycles come back to you and in the future, this process will not automatically start up. If, in the future, you find that your memory is mysteriously disappearing on you, try stopping ALL indexing on your drives (i.e. removing this service) and rebooting your computer.

Cheers,

Rob

Thanks man! I had the same problem and searched in google how to get it away.. And I found this site and you helped me with a sirous problem, just wonder how it did that, a virus or?! Well anyway THANKS and CHEERS

I'm with smoof, found the thread on google. I'm glad that it's not a virus and just another reason to hate windows... Linux rules!

i looked in my start options, but there's no 'Services'. Where can i find it? Under C:\Windows ? Or..

thnx

Googled for CISVC.exe found this string. This is what has been happening to me also. I shut indexeing off previously bet appears to have come back. Strongly suspect as result of installing new version of Microsoft Office. Word and Outlook both make use of indexing to "help" you find relavent file. When you have large hard drive *80G plus 240g) it can be a very big ovehead.

Thanks Rob!
Helped me too.
/Hans

Yeah - I had a variation on this problem - cisvc.exe would arbitrarily inflate and consume all my RAM, effectively freezing my computer. Thanks for the info allowing me to disable it - hopefully this will solve my problem.

Thanks!! Helped me too!! Found thread on google.

Thanks, I also found this thread on google. Helped me a lot

Same problem .. it's a really bad proccess ...

I was wondering if the cidaemon.exe process was related to this problem, and if there are supposed to be 2 of them running at the same time. Because occasionally this process's memory usage spikes on me and effectively locks my workstation. please help if you have any info on my problem.

<img src=http://goo.freelogs.com/counter/index.php?u=sasacat&s=pdp>

Thanks man...!