Over 1 million tech questions and answers.

Memory leak or trojan causing extreme system slowness and high memory usage.

Q: Memory leak or trojan causing extreme system slowness and high memory usage.

Hi,
 
I am helping my parents troubleshoot their computers.  My feeling is that they are both infected with the same virus/trojan but I can find it or figure out what is going on.  
 
The each have identical laptops and both are experience identical problems.  Both are running Avast! and both systems are not turning up any discovered viruses or trojans during scans.  I am on the verge of completely refronting both of their laptops and am really hoping I can avoid having to do that.  I suspected that maybe they were both infected with "poweliks" but the below FRST shows (at least I think so) that neither are infected with that trojan.  I am now thinking its a memory leak on some recent driver/app update - but either trojan or memory leak, I am not finding it.
 
Symptoms:
After a clean reboot, within 24 to 48 hours both systems begin to get very sluggish, both audio and video starts to skip and lag, both mice bounce around like crazy when trying to move the pointer.  After about 72 hours the laptops simply freeze to the point that they have to pull the batteries to get them to shut off.  
 
I had my Dad run FRST on his computer, below are the results:
 
FRST Scan results: FRST.txt
=================================================
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2015
Ran by Preston (administrator) on PRESTON-HP on 13-05-2015 10:01:44
Running from C:\Users\Preston\Favorites\Downloads
Loaded Profiles: Preston (Available profiles: Preston)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
() C:\Windows\agent_x64.exe
(HP) C:\Program Files (x86)\HP SimplePass 2012\TrueSuiteService.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Carbonite, Inc. (www.carbonite.com)) C:\Program Files\Carbonite\Carbonite Backup\CarboniteService.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\HP\Common\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(HP) C:\Program Files (x86)\HP SimplePass 2012\TouchControl.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe
(HP) C:\Program Files (x86)\HP SimplePass 2012\BioMonitor.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
(4Team Corporation) C:\Program Files (x86)\4Team Corporation\Sync2\Sync2.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Carbonite, Inc.) C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteUI.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
(Microsoft) C:\Program Files (x86)\Microsoft Streets & Trips 2010\StreetsOlkShim.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1424896 2011-09-08] (IDT, Inc.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [SetDefault] => C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe [43320 2011-10-31] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-08-18] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HPQuickWebProxy] => C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe [169528 2011-10-07] (Hewlett-Packard Company)
HKLM-x32\...\Run: [HPOSD] => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [577408 2012-02-15] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-11] (Avast Software s.r.o.)
HKLM-x32\...\Run: [Carbonite Backup] => C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteUI.exe [1056976 2014-06-27] (Carbonite, Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3416613266-1144362595-631789162-1000\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [688984 2014-12-31] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-3416613266-1144362595-631789162-1000\...\Run: [Sync2] => C:\Program Files (x86)\4Team Corporation\Sync2\Sync2.exe [4594352 2012-04-10] (4Team Corporation)
HKU\S-1-5-21-3416613266-1144362595-631789162-1000\...\MountPoints2: G - G:\LaunchU3.exe -a
HKU\S-1-5-21-3416613266-1144362595-631789162-1000\...\MountPoints2: {086e73e6-0cee-11e3-84d6-101f74cecebc} - G:\LaunchU3.exe -a
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [688984 2014-12-31] (Garmin Ltd or its subsidiaries)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-05-04] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [Carbonite.Green] -> {95A27763-F62A-4114-9072-E81D87DE3B68} => C:\Program Files\Carbonite\Carbonite Backup\CarboniteNSE.dll [2014-06-27] (Carbonite, Inc.)
ShellIconOverlayIdentifiers: [Carbonite.Partial] -> {E300CD91-100F-4E67-9AF3-1384A6124015} => C:\Program Files\Carbonite\Carbonite Backup\CarboniteNSE.dll [2014-06-27] (Carbonite, Inc.)
ShellIconOverlayIdentifiers: [Carbonite.Yellow] -> {5E529433-B50E-4bef-A63B-16A6B71B071A} => C:\Program Files\Carbonite\Carbonite Backup\CarboniteNSE.dll [2014-06-27] (Carbonite, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers-x32: [Carbonite.Green] -> {95A27763-F62A-4114-9072-E81D87DE3B68} => C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteNSE.dll [2014-06-27] (Carbonite, Inc.)
ShellIconOverlayIdentifiers-x32: [Carbonite.Partial] -> {E300CD91-100F-4E67-9AF3-1384A6124015} => C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteNSE.dll [2014-06-27] (Carbonite, Inc.)
ShellIconOverlayIdentifiers-x32: [Carbonite.Yellow] -> {5E529433-B50E-4bef-A63B-16A6B71B071A} => C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteNSE.dll [2014-06-27] (Carbonite, Inc.)
CHR HKU\S-1-5-21-3416613266-1144362595-631789162-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.yahoo.com?fr=hp-avast&type=avastbcl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-3416613266-1144362595-631789162-1000\Software\Microsoft\Internet Explorer\Main,Start Page =https://www.yahoo.com?fr=hp-avast&type=avastbcl
HKU\S-1-5-21-3416613266-1144362595-631789162-1000\Software\Microsoft\Internet Explorer\Main,Search Page =http://us.yhs4.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-3416613266-1144362595-631789162-1000\Software\Microsoft\Internet Explorer\Main,Search Bar =https://www.yahoo.com?fr=hp-avast&type=avastbcl
URLSearchHook: HKU\S-1-5-21-3416613266-1144362595-631789162-1000 - (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM -> {C01EBF7A-B169-4A04-A8FE-E0F7B5BC6E03} URL =http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}" target="_blank" class="wLink">http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}" target="_blank" class="wLink">http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://www.ebay.com/sch/i.html?_nkw={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL =http://us.yhs4.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL =http://us.yhs4.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 -> {C01EBF7A-B169-4A04-A8FE-E0F7B5BC6E03} URL =http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL =http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://www.ebay.com/sch/i.html?_nkw={searchTerms}
SearchScopes: HKU\S-1-5-21-3416613266-1144362595-631789162-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-3416613266-1144362595-631789162-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-3416613266-1144362595-631789162-1000 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKU\S-1-5-21-3416613266-1144362595-631789162-1000 -> {5B9BE58A-18FA-42E0-AE99-3A195251151F} URL = http://asksearch.ask.com/redirect?client=ie&src=kw&tb=WBV6&itbv=11.8.1.739&o=APN10787&locale=en_US&apn_uid=8A1A7B7D-8047-4141-B4B5-C82410EDB840&apn_ptnrs=^AVT&apn_dtid=^YYYYYY^YY^US&apn_dbr=ff_21.0&doi=2013-06-07&q={searchTerms}&
SearchScopes: HKU\S-1-5-21-3416613266-1144362595-631789162-1000 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = http://us.yhs4.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3416613266-1144362595-631789162-1000 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKU\S-1-5-21-3416613266-1144362595-631789162-1000 -> {C01EBF7A-B169-4A04-A8FE-E0F7B5BC6E03} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-3416613266-1144362595-631789162-1000 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKU\S-1-5-21-3416613266-1144362595-631789162-1000 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-2/4?mpre=http://www.ebay.com/sch/i.html?_nkw={searchTerms}
BHO: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2012\x64\IEBHO.dll [2011-08-26] (HP)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-10] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} ->  No File
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22] (Hewlett-Packard Co.)
BHO-x32: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2012\IEBHO.dll [2011-08-26] (HP)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-10] (Avast Software s.r.o.)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22] (Hewlett-Packard Co.)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKU\S-1-5-21-3416613266-1144362595-631789162-1000 -> No Name - {57425636-0076-A76A-76A7-7A786E7484D7} -  No File
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203}http://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect1263.cab
Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\Advisor\System\BAVoilaX.dll [2012-02-16] (Belarc, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 
FireFox:
========
FF ProfilePath: C:\Users\Preston\AppData\Roaming\Mozilla\Firefox\Profiles\rjwjze9n.default
FF DefaultSearchUrl: hxxp://us.yhs4.search.yahoo.com/yhs/search
FF SearchEngineOrder.1: Yahoo! (Avast)
FF Homepage: https://www.google.com
FF Keyword.URL: hxxp://us.yhs4.search.yahoo.com/yhs/search
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2012-01-05] (GARMIN Corp.)
FF Plugin-x32: @logitech.com/HarmonyRemote,version=1.0.0 -> C:\Program Files (x86)\Logitech\Harmony Remote Driver\NprtHarmonyPlugin.dll [2010-01-04] (Logitech Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2010-12-07] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Preston\AppData\Roaming\Mozilla\Firefox\Profiles\rjwjze9n.default\searchplugins\ask-search.xml [2013-06-07]
FF SearchPlugin: C:\Users\Preston\AppData\Roaming\Mozilla\Firefox\Profiles\rjwjze9n.default\searchplugins\yahoo-avast.xml [2014-06-02]
FF Extension: Adblock Plus - C:\Users\Preston\AppData\Roaming\Mozilla\Firefox\Profiles\rjwjze9n.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-02-21]
FF Extension: TrueSuite Website Logon - C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected] [2015-04-23]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-04-06]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-02-21]
FF HKU\S-1-5-21-3416613266-1144362595-631789162-1000\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
 
Chrome: 
=======
CHR HomePage: Default -> https://www.yahoo.com?fr=hp-avast&type=avastbcl
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Garmin Communicator Plug-In) - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Harmony Firefox Plugin) - C:\Program Files (x86)\Logitech\Harmony Remote Driver\NprtHarmonyPlugin.dll (Logitech Inc.)
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Profile: C:\Users\Preston\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Preston\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-05-29]
CHR Extension: (Google Drive) - C:\Users\Preston\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-05-29]
CHR Extension: (YouTube) - C:\Users\Preston\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-05-29]
CHR Extension: (Google Search) - C:\Users\Preston\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-05-29]
CHR Extension: (Bookmark Manager) - C:\Users\Preston\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-29]
CHR Extension: (Avast Online Security) - C:\Users\Preston\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-11-22]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Preston\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-23]
CHR Extension: (Google Wallet) - C:\Users\Preston\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-23]
CHR Extension: (Gmail) - C:\Users\Preston\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-05-29]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx [2014-08-04]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-10]
 
==================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 Agent; C:\Windows\agent_x64.exe [102912 2011-08-24] () [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-04] (Avast Software s.r.o.)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [107448 2015-05-04] (Avast Software s.r.o.)
R2 DiagTrack; C:\Windows\system32\diagtrack.dll [1254400 2015-04-27] (Microsoft Corporation)
R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [8998800 2013-05-09] (DisplayLink Corp.)
R2 FPLService; C:\Program Files (x86)\HP SimplePass 2012\TrueSuiteService.exe [260424 2011-08-26] (HP)
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [451416 2014-12-31] (Garmin Ltd or its subsidiaries)
S4 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [File not signed]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company)
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
S4 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 SPOCJS; C:\Windows\SysWOW64\SPOCJS64.DLL [19072 2011-01-05] (Conexant Systems, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [X]
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-05-04] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-05-04] (Avast Software s.r.o.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-05-04] (Avast Software s.r.o.)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449896 2015-05-04] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-05-04] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-05-04] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-05-04] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-05-04] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-05-04] (Avast Software s.r.o.)
S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [44640 2013-10-22] (The OpenVPN Project)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-05-04] ()
R3 DisplayLinkUsbIo_x64; C:\Windows\System32\DRIVERS\DisplayLinkUsbIo_x64_7.2.47873.0.sys [44944 2013-05-13] ()
S3 HPEWSFXBULK; C:\Windows\System32\drivers\hpfx64bulk.sys [20504 2009-02-26] (Hewlett Packard)
R3 LAN9500; C:\Windows\System32\DRIVERS\lan9500-x64-n51f.sys [72192 2011-05-04] (SMSC)
R3 usbaud; C:\Windows\System32\DRIVERS\usbaud64.sys [232064 2011-11-16] (Conexant Systems, Inc.)
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S3 DisplayLinkUsbPort; system32\DRIVERS\DisplayLinkUsbPort_6.0.34621.0.sys [X]
U4 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 
==================== One Month Created Files and Folders ========
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-05-13 10:01 - 2015-05-13 10:01 - 00000000 ____D () C:\FRST
2015-05-13 03:03 - 2015-05-01 09:17 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 03:03 - 2015-05-01 09:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-12 21:41 - 2015-05-04 21:29 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-12 21:41 - 2015-05-04 21:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-05-12 21:41 - 2015-04-27 15:28 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-05-12 21:41 - 2015-04-27 15:26 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-05-12 21:41 - 2015-04-27 15:23 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-12 21:41 - 2015-04-27 15:23 - 01254400 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-05-12 21:41 - 2015-04-27 15:23 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-05-12 21:41 - 2015-04-27 15:23 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-05-12 21:41 - 2015-04-27 15:23 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-05-12 21:41 - 2015-04-27 15:23 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-05-12 21:41 - 2015-04-27 15:11 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-05-12 21:41 - 2015-04-27 15:11 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-05-12 21:41 - 2015-04-27 15:08 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-05-12 21:41 - 2015-04-27 15:05 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-05-12 21:41 - 2015-04-27 15:04 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-05-12 21:41 - 2015-04-27 14:06 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-05-12 21:41 - 2015-04-21 22:28 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-12 21:41 - 2015-04-21 21:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-05-12 21:41 - 2015-04-21 13:14 - 24971776 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-12 21:41 - 2015-04-21 13:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-05-12 21:41 - 2015-04-21 13:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-05-12 21:41 - 2015-04-21 12:51 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-05-12 21:41 - 2015-04-21 12:50 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-12 21:41 - 2015-04-21 12:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-12 21:41 - 2015-04-21 12:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-05-12 21:41 - 2015-04-21 12:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-12 21:41 - 2015-04-21 12:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-05-12 21:41 - 2015-04-21 12:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-05-12 21:41 - 2015-04-21 12:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-05-12 21:41 - 2015-04-21 12:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-12 21:41 - 2015-04-21 12:35 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-12 21:41 - 2015-04-21 12:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-05-12 21:41 - 2015-04-21 12:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-05-12 21:41 - 2015-04-21 12:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-05-12 21:41 - 2015-04-21 12:31 - 06025728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-12 21:41 - 2015-04-21 12:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-12 21:41 - 2015-04-21 12:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-05-12 21:41 - 2015-04-21 12:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-05-12 21:41 - 2015-04-21 12:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-05-12 21:41 - 2015-04-21 12:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-12 21:41 - 2015-04-21 12:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-05-12 21:41 - 2015-04-21 12:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-05-12 21:41 - 2015-04-21 12:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-05-12 21:41 - 2015-04-21 12:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-05-12 21:41 - 2015-04-21 12:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-05-12 21:41 - 2015-04-21 12:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-12 21:41 - 2015-04-21 12:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-05-12 21:41 - 2015-04-21 12:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-12 21:41 - 2015-04-21 12:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-05-12 21:41 - 2015-04-21 12:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-05-12 21:41 - 2015-04-21 12:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-05-12 21:41 - 2015-04-21 12:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-05-12 21:41 - 2015-04-21 11:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-05-12 21:41 - 2015-04-21 11:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-05-12 21:41 - 2015-04-21 11:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-05-12 21:41 - 2015-04-21 11:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-12 21:41 - 2015-04-21 11:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-05-12 21:41 - 2015-04-21 11:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-05-12 21:41 - 2015-04-21 11:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-05-12 21:41 - 2015-04-21 11:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-12 21:41 - 2015-04-21 11:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-05-12 21:41 - 2015-04-21 11:40 - 14401536 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-12 21:41 - 2015-04-21 11:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-05-12 21:41 - 2015-04-21 11:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-05-12 21:41 - 2015-04-21 11:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-05-12 21:41 - 2015-04-21 11:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-05-12 21:41 - 2015-04-21 11:27 - 02352128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-12 21:41 - 2015-04-21 11:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-05-12 21:41 - 2015-04-21 11:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-05-12 21:41 - 2015-04-21 11:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-05-12 21:41 - 2015-04-21 11:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-05-12 21:41 - 2015-04-21 11:15 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-12 21:41 - 2015-04-21 11:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-05-12 21:41 - 2015-04-21 11:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-05-12 21:41 - 2015-04-21 10:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-05-12 21:41 - 2015-04-21 10:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-05-12 21:41 - 2015-04-17 23:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-12 21:41 - 2015-04-17 22:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-05-12 21:41 - 2015-04-12 23:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-12 21:40 - 2015-04-27 15:28 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-05-12 21:40 - 2015-04-27 15:28 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-05-12 21:40 - 2015-04-27 15:23 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-05-12 21:40 - 2015-04-27 15:23 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-05-12 21:40 - 2015-04-27 15:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-05-12 21:40 - 2015-04-27 15:23 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-05-12 21:40 - 2015-04-27 15:23 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-05-12 21:40 - 2015-04-27 15:23 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-05-12 21:40 - 2015-04-27 15:23 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-05-12 21:40 - 2015-04-27 15:23 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-05-12 21:40 - 2015-04-27 15:23 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-05-12 21:40 - 2015-04-27 15:23 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-05-12 21:40 - 2015-04-27 15:23 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-05-12 21:40 - 2015-04-27 15:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-05-12 21:40 - 2015-04-27 15:23 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-05-12 21:40 - 2015-04-27 15:23 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-05-12 21:40 - 2015-04-27 15:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-05-12 21:40 - 2015-04-27 15:23 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-05-12 21:40 - 2015-04-27 15:23 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-05-12 21:40 - 2015-04-27 15:23 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-05-12 21:40 - 2015-04-27 15:22 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-05-12 21:40 - 2015-04-27 15:22 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-05-12 21:40 - 2015-04-27 15:22 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-05-12 21:40 - 2015-04-27 15:22 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-05-12 21:40 - 2015-04-27 15:22 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-05-12 21:40 - 2015-04-27 15:22 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-05-12 21:40 - 2015-04-27 15:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-05-12 21:40 - 2015-04-27 15:22 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-05-12 21:40 - 2015-04-27 15:22 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-05-12 21:40 - 2015-04-27 15:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-05-12 21:40 - 2015-04-27 15:18 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-05-12 21:40 - 2015-04-27 15:18 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 15:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-05-12 21:40 - 2015-04-27 15:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-05-12 21:40 - 2015-04-27 15:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-05-12 21:40 - 2015-04-27 15:05 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-05-12 21:40 - 2015-04-27 15:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-05-12 21:40 - 2015-04-27 15:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-05-12 21:40 - 2015-04-27 15:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-05-12 21:40 - 2015-04-27 15:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-05-12 21:40 - 2015-04-27 15:04 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-05-12 21:40 - 2015-04-27 15:04 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-05-12 21:40 - 2015-04-27 15:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-05-12 21:40 - 2015-04-27 15:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-05-12 21:40 - 2015-04-27 15:04 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-05-12 21:40 - 2015-04-27 15:04 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-05-12 21:40 - 2015-04-27 15:04 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-05-12 21:40 - 2015-04-27 15:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-05-12 21:40 - 2015-04-27 15:03 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-05-12 21:40 - 2015-04-27 15:03 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-05-12 21:40 - 2015-04-27 15:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-05-12 21:40 - 2015-04-27 15:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-05-12 21:40 - 2015-04-27 15:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-05-12 21:40 - 2015-04-27 15:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-05-12 21:40 - 2015-04-27 15:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 14:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 13:57 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-05-12 21:40 - 2015-04-27 13:57 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-05-12 21:40 - 2015-04-27 13:55 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 13:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 13:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-05-12 21:40 - 2015-04-27 13:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-05-12 21:40 - 2015-04-19 23:17 - 01647104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-12 21:40 - 2015-04-19 23:17 - 01179136 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-12 21:40 - 2015-04-19 22:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-05-12 21:40 - 2015-04-19 22:11 - 03204608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-12 21:40 - 2015-03-04 00:41 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-05-12 21:40 - 2015-03-04 00:41 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-05-12 21:40 - 2015-03-04 00:41 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-12 21:40 - 2015-03-04 00:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-05-12 21:40 - 2015-03-04 00:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2015-05-12 21:40 - 2015-03-04 00:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2015-05-12 21:40 - 2015-03-04 00:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-05-12 21:40 - 2015-02-18 03:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-05-12 21:40 - 2015-02-18 03:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-05-12 21:40 - 2015-01-28 23:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-05-12 21:40 - 2015-01-28 23:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-05-11 11:33 - 2015-05-11 11:33 - 00001330 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2015-05-11 11:32 - 2015-05-11 11:33 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2015-05-06 15:16 - 2015-05-13 03:26 - 00000616 _____ () C:\Windows\setupact.log
2015-05-06 15:16 - 2015-05-06 15:16 - 00000000 _____ () C:\Windows\setuperr.log
2015-05-06 15:03 - 2015-05-06 15:04 - 00244202 _____ () C:\Users\Preston\Documents\cc_20150506_150341.reg
2015-05-06 14:10 - 2015-05-06 14:10 - 00007629 _____ () C:\Users\Preston\AppData\Local\Resmon.ResmonCfg
2015-05-06 13:38 - 2015-05-06 13:38 - 00000000 ____D () C:\Users\Preston\AppData\Roaming\Symantec
2015-05-06 13:12 - 2015-05-06 13:13 - 00000000 ____D () C:\Users\Preston\AppData\Roaming\Blio
2015-05-06 13:12 - 2015-05-06 13:12 - 00000000 ____D () C:\Users\Preston\Documents\Blio
2015-05-06 13:12 - 2015-05-06 13:12 - 00000000 ____D () C:\ProgramData\Blio
2015-05-04 16:56 - 2015-05-04 16:56 - 00449896 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswNdisFlt.sys
2015-05-04 16:56 - 2015-05-04 16:56 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-05-04 16:56 - 2015-05-04 16:56 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-04-29 12:22 - 2015-05-12 16:30 - 00011975 _____ () C:\Users\Preston\Desktop\finance actions.xlsx
2015-04-23 15:39 - 2015-04-23 15:39 - 00001152 _____ () C:\Users\Public\Desktop\Install Microsoft LifeCam.lnk
2015-04-23 10:49 - 2015-04-23 10:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-20 14:45 - 2015-04-20 14:45 - 00000000 ____D () C:\Users\Preston\AppData\Local\Proxure
2015-04-20 14:45 - 2015-04-20 14:45 - 00000000 ____D () C:\ProgramData\ClubSanDisk
2015-04-14 14:36 - 2015-03-24 23:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-14 14:36 - 2015-03-24 23:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-14 14:36 - 2015-03-24 23:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-14 14:36 - 2015-03-24 23:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-14 14:36 - 2015-03-24 23:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-14 14:36 - 2015-03-24 23:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-14 14:36 - 2015-03-24 23:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-14 14:36 - 2015-03-24 23:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-14 14:36 - 2015-03-24 23:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-14 14:36 - 2015-03-24 23:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-14 14:36 - 2015-03-24 23:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-14 14:36 - 2015-03-24 23:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-14 14:36 - 2015-03-24 23:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-14 14:36 - 2015-03-24 23:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-14 14:36 - 2015-03-24 23:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-14 14:36 - 2015-03-24 23:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-14 14:36 - 2015-03-22 23:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-14 14:36 - 2015-03-22 23:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-14 14:36 - 2015-03-22 23:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-14 14:36 - 2015-03-22 23:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-14 14:36 - 2015-03-22 23:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-14 14:36 - 2015-03-22 23:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-14 14:36 - 2015-03-22 23:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-14 14:36 - 2015-03-22 23:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-14 14:36 - 2015-03-09 23:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-14 14:36 - 2015-03-09 23:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-14 14:36 - 2015-03-09 23:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-14 14:36 - 2015-03-09 23:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-04-14 14:36 - 2015-03-05 01:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-14 14:36 - 2015-03-05 00:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-14 14:36 - 2015-02-24 23:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-14 14:34 - 2015-03-04 00:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-14 14:34 - 2015-03-04 00:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-14 14:34 - 2015-03-04 00:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-14 03:38 - 2015-04-14 03:38 - 01217192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FM20.DLL
2015-04-13 10:37 - 2015-04-20 14:07 - 00009284 _____ () C:\Users\Preston\Desktop\Funeral Expenses.xlsx
 
==================== One Month Modified Files and Folders =======
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-05-13 09:52 - 2012-05-01 20:45 - 00000000 ____D () C:\Users\Preston\Documents\Outlook Files
2015-05-13 09:52 - 2012-02-21 13:03 - 00000000 ____D () C:\Users\Preston\Documents\Outlook
2015-05-13 09:42 - 2013-03-19 23:10 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-13 09:34 - 2012-01-29 05:40 - 02038274 _____ () C:\Windows\WindowsUpdate.log
2015-05-13 09:33 - 2009-07-14 01:13 - 00786578 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-13 09:30 - 2013-03-19 23:10 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-13 09:30 - 2012-07-11 13:09 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-13 03:38 - 2009-07-14 00:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-13 03:38 - 2009-07-14 00:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-13 03:25 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-13 03:25 - 2009-07-14 00:45 - 00352408 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-13 03:24 - 2013-03-14 10:43 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-05-13 03:24 - 2013-03-14 10:43 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-05-13 03:20 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-05-13 03:17 - 2012-02-21 12:38 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-05-13 03:14 - 2013-08-14 11:33 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-13 03:09 - 2012-02-23 17:15 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-13 03:03 - 2013-03-14 10:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-05-12 20:14 - 2012-02-21 14:57 - 00000000 ____D () C:\Users\Preston\Documents\Quicken
2015-05-12 18:46 - 2012-02-19 17:17 - 00003942 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{5041001B-6E8D-4161-807A-D7EEF7D94BC7}
2015-05-12 10:21 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\rescache
2015-05-12 08:39 - 2014-01-11 12:22 - 00014561 _____ () C:\Users\Preston\Desktop\List of 2015 Monthly Expenses.xlsx
2015-05-11 11:33 - 2009-07-14 01:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2015-05-06 22:13 - 2014-05-10 10:01 - 00010327 _____ () C:\Users\Preston\Desktop\Repair list.xlsx
2015-05-06 15:08 - 2013-02-20 00:11 - 00000000 ____D () C:\Windows\Minidump
2015-05-06 15:08 - 2012-04-15 18:13 - 00000000 ____D () C:\Users\Preston\AppData\Local\CrashDumps
2015-05-06 15:08 - 2007-01-01 21:25 - 00000000 ____D () C:\Windows\Panther
2015-05-06 13:45 - 2012-07-11 12:59 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-05-06 13:35 - 2012-02-21 13:15 - 00000000 ____D () C:\Program Files (x86)\Yahoo!
2015-05-06 13:35 - 2011-10-15 22:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2015-05-06 13:11 - 2013-05-27 16:36 - 00000000 ____D () C:\Users\Preston\AppData\Roaming\Dropbox
2015-05-06 13:10 - 2011-10-15 22:55 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-05-06 13:10 - 2011-10-15 22:47 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication and Chat
2015-05-05 11:52 - 2012-02-21 12:59 - 00000000 ___RD () C:\Users\Preston\Dropbox
2015-05-04 16:56 - 2014-05-07 09:18 - 00029168 _____ () C:\Windows\system32\Drivers\aswHwi

RELEVANCY SCORE 200
Preferred Solution: Memory leak or trojan causing extreme system slowness and high memory usage.

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Memory leak or trojan causing extreme system slowness and high memory usage.

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below. 
start

CreateRestorePoint:
CloseProcesses:

HKLM-x32\...\Run: [] => [X]
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File
CHR HKU\S-1-5-21-3416613266-1144362595-631789162-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.yahoo.com?fr=hp-avast&type=avastbcl
HKU\S-1-5-21-3416613266-1144362595-631789162-1000\Software\Microsoft\Internet Explorer\Main,Start Page =https://www.yahoo.com?fr=hp-avast&type=avastbcl
HKU\S-1-5-21-3416613266-1144362595-631789162-1000\Software\Microsoft\Internet Explorer\Main,Search Page =http://us.yhs4.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-3416613266-1144362595-631789162-1000\Software\Microsoft\Internet Explorer\Main,Search Bar =https://www.yahoo.com?fr=hp-avast&type=avastbcl
URLSearchHook: HKU\S-1-5-21-3416613266-1144362595-631789162-1000 - (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File
SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL =http://us.yhs4.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM-x32 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL =http://us.yhs4.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL =http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKU\S-1-5-21-3416613266-1144362595-631789162-1000 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKU\S-1-5-21-3416613266-1144362595-631789162-1000 -> {5B9BE58A-18FA-42E0-AE99-3A195251151F} URL = http://asksearch.ask.com/redirect?client=ie&src=kw&tb=WBV6&itbv=11.8.1.739&o=APN10787&locale=en_US&apn_uid=8A1A7B7D-8047-4141-B4B5-C82410EDB840&apn_ptnrs=^AVT&apn_dtid=^YYYYYY^YY^US&apn_dbr=ff_21.0&doi=2013-06-07&q={searchTerms}&
SearchScopes: HKU\S-1-5-21-3416613266-1144362595-631789162-1000 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = http://us.yhs4.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3416613266-1144362595-631789162-1000 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKU\S-1-5-21-3416613266-1144362595-631789162-1000 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKU\S-1-5-21-3416613266-1144362595-631789162-1000 -> No Name - {57425636-0076-A76A-76A7-7A786E7484D7} - No File
FF SearchEngineOrder.1: Yahoo! (Avast)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF SearchPlugin: C:\Users\Preston\AppData\Roaming\Mozilla\Firefox\Profiles\rjwjze9n.default\searchplugins\ask-search.xml [2013-06-07]
FF SearchPlugin: C:\Users\Preston\AppData\Roaming\Mozilla\Firefox\Profiles\rjwjze9n.default\searchplugins\yahoo-avast.xml [2014-06-02]
CHR HomePage: Default -> https://www.yahoo.com?fr=hp-avast&type=avastbcl
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (Avast Online Security) - C:\Users\Preston\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-11-22]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx [2014-08-04]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-10]
S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [X]
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S3 DisplayLinkUsbPort; system32\DRIVERS\DisplayLinkUsbPort_6.0.34621.0.sys [X]
U4 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]
C:\Users\Preston\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpohbyxa.dll

End
Save the files as fixlist.txt in the same folder where the Farbar tool is running from.The location is listed in the 3rd line of the Farbar log you have submitted.Run FRST and click Fix only once and wait.Restart the computer normally to reset the registry.The tool will create a log (Fixlog.txt) please post it to your reply.===Download Malwarebytes' Anti-Malware from HereDouble-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).The scan may take some time to finish,so please be patient.If potential threats are detected, ensure that Quarantine is selected as the Action for all the listed items, and click the Apply Actions button.While still on the Scan tab, click the link for View detailed log, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.The log is automatically saved by MBAM and can also be viewed by clicking the History tab and then selecting Application Logs.POST THE LOG FOR MY REVIEW.Note:If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.Click OK to either and let MBAM proceed with the disinfection process.If asked to restart the computer, please do so immediately.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the Report button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).===How is the computer running now?

Read other 14 answers
RELEVANCY SCORE 126.8

Hello, I'm running a 64 bit Windows 10 laptop. On idle, the System process is showing a high memory usage of more than 150 MB, usually more than 200 MB. Using poolmon the pooltag SpDN showed up with a memory leak. It leads to the Intel Matrix Storage Manager driver, iaStorV.sys. How should I go about fixing the problem?

A:High memory usage / Memory leak caused by Intel driver

Hi,

Since this is a Intel driver I doubt the WDK can fix it.
You may try to see if there's a more current version of Intel's RST available for download and see if that fixes the leakage issue.

Cheers,

Read other 0 answers
RELEVANCY SCORE 126.8

Hello, I'm running a 64 bit Windows 10 laptop. On idle, the System process is showing a high memory usage of more than 150 MB, usually more than 200 MB. Using poolmon the pooltag SpDN showed up with a memory leak. It leads to the Intel Matrix Storage Manager driver, iaStorV.sys. How should I go about fixing the problem?

A:High memory usage / Memory leak caused by Intel driver

Hi,

Since this is a Intel driver I doubt the WDK can fix it.
You may try to see if there's a more current version of Intel's RST available for download and see if that fixes the leakage issue.

Cheers,

Read other 0 answers
RELEVANCY SCORE 124.8

Has anyone else noticed that chkdsk uses all available physical memory (if you let it run long enough)?

I find that if I run chkdsk and watch the memory usage in task manager it jumps by about 50MB every 2 seconds or so until it either finishes or hits around 3.2GB at which point my physical memory shows 99% used (I'm running 4GB), and the system of course slows to a crawl.

If you just run a quick chkdsk on your boot drive you may not notice it, but try running something longer like chkdsk /r on a flash drive or chkdsk /f on a bigger internal drive (but not your OS drive as this would require a reboot) and watch the memory usage climb. I have duplicated this on both systems I have running win7. My XP machine (checking the same USB flash drive) uses a much more normal amount of memory for chkdsk (20 - 30 MB).

Anyway, just looking for suggestions, as I have 5 old hard drives that I would like to check. Normally I would run all 5 at once, but with this system it's just not possible as they each use about 700MB of memory and once all the system RAM is used up the disk checking process slows down a lot.

A:chkdsk high memory usage / memory leak

chkdsk /r is implys /f if you only doing NTFS format then try /I or /D or /C

/I NTFS only: Performs a less vigorous check of index entries.
/C NTFS only: Skips checking of cycles within the folder
structure.
/B NTFS only: Re-evaluates bad clusters on the volume
(implies /R)

Read other 9 answers
RELEVANCY SCORE 116

I've noticed a bit of computer slowness recently.  I installed FRST and ran the diagnostic and noticed I had Poweliks.  I ran the symantec fix and that seems to be resolved. Below is my current FRST.txt file.  I'm not certain how to fix the two ATTENTION items.  Any advice? Thanks,Steve Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-12-2014 03Ran by Laura (administrator) on PC-HP-01 on 11-12-2014 21:50:51Running from C:\Data\Shared\Adware Virus Cleaning ToolsLoaded Profile: Laura (Available profiles: Steve & Laura)Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)Internet Explorer Version 11Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d15ed671de43d681\stacsv64.exe(Hewlett-Packard) C:\Windows\System32\hpservice.exe(Microsoft Corporation) C:\Windows\System32\wlanext.exe(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d15ed671de43d681\AESTSr64.exe(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe(Microsoft Corporation) C:\Windows\Sy... Read more

A:Computer slowness - memory/CPU usage high

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/559497 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 15 answers
RELEVANCY SCORE 110.4

Okay, so basically, I've been having this problem for about a month now. My computer is set up with about 500 mbs DDR, PC3200 I think, and my pc has been shutting down for apparently no explicit reason. I was told to check the event viewer and look at the system logs for any error messages, and I've gotten plenty. Here is the last one I got.

Error code 000000d1, parameter1 0202219d, parameter2 00000002, parameter3 00000001, parameter4 f7ea446b.

The error messages leading up to these are usually the same thing:

An error was detected on device \Device\Harddisk1\D during a paging operation.

I tried changing the page file to my second drive, then back, and vice versa. Nothing has worked.

I have no idea what any of this means, and I am at the end of my rope. I have tried using software to defrag the memory (as instructed through a friend), I have tried installing windows (TWICE in fact), and nothing to avail. I've even stopped using certain applications that could have been causing the problem, but nothing.

My system specs are an Athlon 2800 (2.1 processor...) and 500 mb of pc3200 ddr ram like I said. I am running a storage HD through a SCSI card, and the master is normal.

All of the sollutions I've been given are by friends in a chatroom, and they've not been able to help me so far unfortunately. Help me Obi-Wan, you're my only hope.
 

A:Memory leak causing system crashes.

Are you running Windows XP Professional?

If so Windows XP now includes a utility called Shutdown Event Tracker, which provides a simple and standard mechanism you can use to consistently document the reasons for shutting down or restarting your computer. You can then use this information to analyze the root causes of shutdowns and develop a more complete understanding of your system environment.

Which may help to get to the real root cause of the problem, for deatails see: http://www.microsoft.com/technet/prodtechnol/winxppro/plan/rlbwinxp.mspx
 

Read other 2 answers
RELEVANCY SCORE 109.2

Hello there,
I am here today as I have had a problem with System and Compressed Memory since I installed Windows 10 back in December of 2015.
Now keep in mind, this isn't a normal issue, as I have yet to actually find anything in regards to what to do to fix this.
(I have also posted on Microsoft's official forum, and had zero luck, due to the fact that everyone who started posting had a different issue/misunderstood what my issue was, and distracted the attention from the opening post.)
When downloading anything at all, be it games, music, videos, etc, System and Compressed Memory starts to use up more and more memory, which obviously sounds normal, and might seem fine.
However, if I have not restarted my computer at all, around the 10gb download mark, my computer starts running extremely slow, while System and Compressed Memory starts maxing out Memory usage on Task Manager.
Any help is appreciated, as I obviously have not found anything in regards to this myself. It is possible I just haven't looked hard enough, but regardless!
If there is any information you'd like to ask of me, I'll do my best to check this post as often as possible. Thanks!

PC Specs :
Intel i7 6700k
Gigabyte GeForce GTX 970
Gigabyte Z170X-Gaming 3
8 GB (Two 4 GB Modules) of DDR4 G Skill 2800Mhz

(If there is anything I need to post that I missed, such as a system analysis, please let me know. Thanks!)

A:System and Compressed Memory (High memory usage)

Originally Posted by EinnUlfur


Hello there,
I am here today as I have had a problem with System and Compressed Memory since I installed Windows 10 back in December of 2015.
Now keep in mind, this isn't a normal issue, as I have yet to actually find anything in regards to what to do to fix this.
(I have also posted on Microsoft's official forum, and had zero luck, due to the fact that everyone who started posting had a different issue/misunderstood what my issue was, and distracted the attention from the opening post.)
When downloading anything at all, be it games, music, videos, etc, System and Compressed Memory starts to use up more and more memory, which obviously sounds normal, and might seem fine.
However, if I have not restarted my computer at all, around the 10gb download mark, my computer starts running extremely slow, while System and Compressed Memory starts maxing out Memory usage on Task Manager.
Any help is appreciated, as I obviously have not found anything in regards to this myself. It is possible I just haven't looked hard enough, but regardless!
If there is any information you'd like to ask of me, I'll do my best to check this post as often as possible. Thanks!

PC Specs :
Intel i7 6700k
Gigabyte GeForce GTX 970
Gigabyte Z170X-Gaming 3
8 GB (Two 4 GB Modules) of DDR4 G Skill 2800Mhz

(If there is anything I need to post that I missed, such as a system analysis, please let me know. Thanks!)



Have u tried refreshing/formatting ur co... Read more

Read other 2 answers
RELEVANCY SCORE 105.6

So I've had this problem for a few months with my thinkpad x220, win7 home premium 64 bit. I used ccleaner, run memtest86 multiple times, chkdsk multiple times, sfc scan multiple times, none that helped. Sfc always detects errors but always cannot fix some of them. I have mse, avast, and malwarebytes and scanned them with absolutely no results. I've run rootkit scanners with no results.

Basically after a few hours the memory use rises up to ~95% out of my 8gb, with absolutely no intensive processes running. I'll attach rammap and processexplorer screenshots. I know this is not "normal" behavior because once my ram goes over 85% the system slows down to where I can't end tasks, open new programs, even things like deleting a file take minutes. Once it reaches 90 or 95, my screen starts flashing black(kind of like if you blink fast). I have to hard restart every time this happens. This is not normal, I've had "experts" on other forums tell me its win7 using the ram to its greatest. Its not, As soon as I restart and open my usual programs(browser, steam, openoffice, winamp, utorrent) my ram is at around 30 or 40 percent. If I leave the same programs open, and just leave it on for ~4 hours the ram gets to 90% and my screen starts flashing and I have to reboot.

If you look at the rammap and process explorer shots, the most ram intensive programs are chrome and firefox, but they only use ~500mb each. Everything else is only 50-100mb and do not add up to the 7... Read more

A:General Win7 memory leak and Unknown memory usage?

Hi mesohamster welcome to SevenForums

First I recommend uninstalling Avast then we could go from there . Using Revo Uninstaller

Click on the app inside RevoUnistaller and choose uninstall
Click on Yes to agree you want to uninstall
If you get the builtin Uninstaller for the app use that and once you're done click Finish
Back inside RevoUninstaller click on Next
Let RevoUninstaller scan for left over registry keys . Click on Select All and choose Delete .
Once done click on Next.
Let the left over files and folders be locates then Click on Select All then click Delete then Next and you should be done .

Restart PC

Read other 7 answers
RELEVANCY SCORE 104.8

Now i'm using windows 10 but I had this problem also when using windows 8.1pro.
The windows 81.pro I have the original dvd here and I tried few times to make clean install.
Also windows 10 I got it free online and the same problem.

For example now i'm using Edge I have two windows opened in one I have 10 tabs open and in the other I have like 20 tabs open. But the problem happen also with two windows and 6 tabs open in each one.

The problem is that once I start Edge or Chrome on windows 81.pro or windows 10 I see in Task Manager that the memory usage is about 60%. Then after some times without doing anything special the memory usage raise to 80-85% then ine many cases also to 96-97-98%.

Now and in most of the times I have in the background a game running in this case battlefield bad company 2 that take about 600-800MB of memory.
But it happen even if I close the game.

The only way to push the memory usage down is in the task manager to shut down the Edge/Chrome and all it's tabs.
Then to start the browser again.
I tested my pc with memtest I don't have any memory errors.
I don't have any blue screens. Can't figure out where is the problem.
My brother have like 10-15 years old pc then my one with 4GB ram and he can open like 20 tabs of chrome without a problem.

While the memory usage raise to 85-98% everything is running slow all the pc is slow almost freezing.

Before finding a fix I was wondering if there is a way to dig and find what cause the proble... Read more

A:Edge and Chrome memory leak ? Memory usage 80-97%

Originally Posted by Chocolade


My brother have like 10-15 years old pc then my one with 4GB ram and he can open like 20 tabs of chrome without a problem.



It also depends, what kind of and how many extensions you have.
Some of them might be causing it, try to temporarily disable all.
Finding a cause can be difficult, you can try CleanMem Free.

Read other 2 answers
RELEVANCY SCORE 102.8

Memory Usage Goes Up Gradually (Memory Leak)

When I starting the Windows (in the first few hours) everything is normal But after 1 day or 2 (sooner or later) the amount of available memory gradually goes down and the physical memory usage increasing. This increasing, continues until the memory usage reaches near the 88% and at that point , there isn't any memory available to operate any software . Also when memory reaches that point, I can't access any drive in the HDD; because everytime I want to open any folder, the following error appears :

c:\ is not accessible.
Insufficient system resources exist to complete the requested service

At this point, I even can't shutdown or restart Windows normally; I must restart windows manually by pressing the restart button. after restart, everything goes to normal again; but this problem appears again and again ... (I had to restart Windows every 1 or 2 days)

here is the screenshots of processes and performance tabs in the Task Manager (at 88% memory usage)
You can see that there is no software(application) that uses this amount of memory :









my system :
------------------------
OS : Windows 7 Ultimate x86
Cpu : Intel P4 3.0GHz
Vga : nVidia 6600
MB : Gigabyte GA-8I915G Duo
PSU : Corsair 750W
RAM : 2GB DDR-400 Transcend
(I have these memories for 2 years)

Physical Memory: 2000 mb
Paging File: 2000 mb
Virtual Memory: 6000 mb


I already did the following actions but unfortunately none of them... Read more

A:Memory Usage Goes Up Gradually (Memory Leak)

Hi, in cases like this I like to look to the most obvious cause and one very often ignored. One of the major problems in Vista XP and 7 is a corrupt pagefile . Can return all sorts of problems and is simple to fix and perfectly safe. Is the paging file on the C drive? Or have you moved it somewhere else, if on the same drive as the OS then:-

Go to control panel, system and security system
Click on advanced tab
In the performance section click on settings
Again click on Advanced

Select the Virtual memory custom tab and set max and min to 00, 00 click on set then apply and ok out. Reboot computer.

Now go back to VM settings and select "system managed size" again press set and apply and ok out Reboot to take effect.

This has created a new pagefile and set the VM to the preferred settings.

Let us know how you get on.

Read other 4 answers
RELEVANCY SCORE 102.8

Memory Usage Goes Up Gradually (Memory Leak)

When I starting the Windows (in the first few hours) everything is normal But after 1 day or 2 (sooner or later) the amount of available memory gradually goes down and the physical memory usage increasing. This increasing, continues until the memory usage reaches near the 88% and at that point , there isn't any memory available to operate any software . Also when memory reaches that point, I can't access any drive in the HDD; because everytime I want to open any folder, the following error appears :

c:\ is not accessible.
Insufficient system resources exist to complete the requested service

At this point, I even can't shutdown or restart Windows normally; I must restart windows manually by pressing the restart button. after restart, everything goes to normal again; but this problem appears again and again ... (I had to restart Windows every 1 or 2 days)

here is the screenshots of processes and performance tabs in the Task Manager (at 88% memory usage)
You can see that there is no software(application) that uses this amount of memory :



my system :
------------------------
OS : Windows 7 Ultimate x86
Cpu : Intel P4 3.0GHz
Vga : nVidia 6600
MB : Gigabyte GA-8I915G Duo
PSU : Corsair 750W
RAM : 2GB DDR-400 Transcend
(I have these memories for 2 years)

Physical Memory: 2000 mb
Paging File: 2000 mb
Virtual Memory: 6000 mb
I already did the following actions but unfortunately none of them helped me :

0- usi... Read more

A:Memory Usage Goes Up Gradually (Memory Leak)

Read other 10 answers
RELEVANCY SCORE 99.2

My computer has been very noisy and working hard recently after I removed the viruses/malware following the support's instructions on this forum.

I open the task manager and I find out System taking up to 60k-80k memory usage but only aorund 0-3 CPU. Image name is System. There's no .exe after. Username is System. I'm thinking these two maybe are the cause and effect. I try ending System process but nothing happens and I get an access denied warning when I try to set it to a lower priority. So I'm really wondering whats the problem here.

I'll be glad if someone could help me out here.
Thanks a lot.

A:High memory usage from System

Check the start up list of this forum, and check all the processes with the start-up list to see if any of them should or should not be there. Start-up ListHope that helps

Read other 3 answers
RELEVANCY SCORE 98.4

Hello all. New member here. I have had an issue with my PC since I "upgraded" to windows 8.1 earlier this year that is driving me batty. Unfortunately, I upgraded the hardware (motherboard, CPU, and RAM) at the same time, so I can't rule out a hardware issue completely. The issue stuck around despite a total hard disk wipe and reinstall from scratch.

I'm a relative noob as far as this sort of troubleshooting, and I'm really not sure how to proceed. My normal modus operandi has been to simply wipe and start over if I ran into serious enough issues, but that did not work this time. Months of google searches have not really yielded any progress, so I thought it could not hurt to ask here.

So the problem. Basically, the longer the system runs, the more memory it uses. Eventually it freezes up, and itf you let it alone long enough after this starts, it will finally reboot itself. Doing anything intensive hastens the process of memory drain, basically the harder it works, the faster it happens. If I am using the PC hard, it only takes a couple hours to burn through all 1 GB. If I am away for days with nothing but background processes running, it takes a few days, but it eventually crashes and reboots.

The only thing that might be slightly out of the ordinary for most users is the fact that I use the PC as my TV and DVR through Windows Media Center and the use of a Silicondust HD Homerun Prime cablecard tuner. Other than that, it's pretty basic stuff on my... Read more

A:Probable Memory Leak. System always runs out of memory

Post a screenshot of Task Manager - Performance tab showing memory information.
This shows important information not found anywhere else.

Read other 9 answers
RELEVANCY SCORE 98

Hi All,

So far as I can remember I've not made any system changes to my PC, i've been on Windows 10 since it's rollout and have not made any hardware changes and have just recently started to experience issues with 'System and Compressed Memory' taking up around 20-30% CPU usage, predominantly when i'm downloading something big (Files over FTP / latest NVIDIA driver).

I've looked through a few other posts over the internet of people experiencing the same issue, i've disabled onedrive and I don't hibernate my PC, any advice?

[Edit] I forgot to mention that even though it only uses 20-30% it pretty much brings my PC to a stand still

PC Spec below:

A:System & Compressed Memory - High CPU Usage (20-30%)

Welcome to the forum. Can you open a cmd prompt type winver post results

Read other 0 answers
RELEVANCY SCORE 98

Every three to five minutes the computer bogs down, task manager shows the System process at over 95 CPU, the other 5 CPU swapping between the other processes running, but the amount of free RAM stays at around 60%, about 300MB. The PF Usage barely goes above 200MB even when it's bogging down. This happens even when nothing is going on, all programs are shut down, and the busy light on the front of the tower won't even flicker, nor do I hear the usual 'thinking' sounds a computer makes when it given to much to compute. Then occasionally I get a stroke of good luck and the computer runs perfectly for awhile. A friend told me it might be inadequate RAM for XP so I have minimized XP appearances to basic, everything geared for the best performance, I have restored my HDD, erased my HDD, defragged my HDD, and am about to blow up my HDD. I use Advanced System Care, SmartRAM, HijackThis, CCleaner, and TrendMicro Online Scan religiously, but other than some tracking cookies, nothing comes up. I really need a fully working computer in a very short amount of time so any help would be greatly appreciated. Thank you.
Computer Stats:

Windows XP Home Edition Service Pack 3
Compaq Presario
2.6GHz Intel Celeron Processor
512MB Ram, 120GB HDD
HijackThis Log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:18:42 AM, on 4/25/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C:... Read more

A:System Process with High CPU, Low Memory Usage

Read other 16 answers
RELEVANCY SCORE 98

Hello everyone , well, for a while I 'm having problems with locking while I surf the internet after five minutes browsing the facebook the browser begins to catch and is impossible to do anything , I noticed that this occurs when the system and compressed memory reaches 15% use the CPU when closing facebook use immediately falls to less than 1 % and the browser back to normal.Is there any solution to this problem ? I never had it before and started to happen with these recent updates.

before:
after:

I'm sorry for my bad english.

A:High CPU usage - System and Compressed Memory

Make some AV scans. It could be a virus.

Read other 1 answers
RELEVANCY SCORE 98

Hi, recently the process called System and compressed memory started acting up, when I'm browsing demanding sites CPU usage spikes to 20%-40% causing my sounds to get crackles and freeze for a split second. It's extremely annoying and was not happening before. It started this week when I came back after a few weeks and my PC updated many programs and the system too I guess. It happens when I'm using Chrome, Vivaldi, Steam, even when Gefore Experience is downloading new drivers... I don't know what this thing does and where it came from but I want it gone obviously it's not working the way it's supposed to. I haven't found much useful information on how to get rid of it and what I found either didn't apply or didn't work. Any help is much appreciated.

Read other answers
RELEVANCY SCORE 98

hEI TEAM,

I SEE A HIGH USAGE OF MEMORY BY PROCESS "SYSTEM". I SEE THAT IT HAPPENED FOR A FRESHLY INSTALLED OS WHEN AVG WAS INSTALLED. AFTER A WHILE THE MEMORY WAS FREE AND 'SYSTEM' PROCESS WAS USING 400K ONLY. pLEASE LET ME KNOW WHAT NEEDS TO BE DONE TO FREE THE SYSTEM PROCESS MEMORY ?

tHANKS IN ADVANCE !!

A:hIGH USAGE OF MEMORY FOR SYSTEM PROCESS !

I would try to remove some of those programs, and can you list your system specs especially the amount of RAM you have and Hard Drive space.

Read other 13 answers
RELEVANCY SCORE 98

HiAll,I am not too big of a techie, but i am sure that on my Vaio (Win 7, i3, 4GB) even when my system is idle the memory usage shoots upto 40% right from the word go.tried going from pillar to post reading different forums but no help.Ran a spybot check, Avast antivirus (no threats), Finally heard of Hijackthis and attaching a log file of the same.All i have noticed that its not a specific process that takes up the memory, its any available process.e.g if its iexplorer that takes upto 45000+K Mem (evene with just 2 tabs) if i end the process, it shifts the load to Svchost.exe and it starts shooting up.I dont understand what is happening! and would really appreciate any help on this one.ThanksArifHijackthin Log File:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 7:40:18 PM, on 10/6/2010Platform: Unknown Windows (WinNT 6.01.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16385)Boot mode: NormalRunning processes:C:\Program Files (x86)\MoRUN.net\Secure Reminder\reminder.exeC:\Program Files (x86)\Sony\Media Gallery\ElbServer.exeC:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exeC:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exeC:\Program Files (x86)\NetWorx\networx.exeC:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exeC:\Program Files (x86)\Intel\Intel? Rapid Storage Technology\IAStorIcon.exeC:\Program Files\... Read more

A:High Memory usage even with Idle system

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.Thanks and again sorry for the delay.Download OTL to your desktop.Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.When the window appears, underneath Output at the top change it to Minimal Output.Under the Standard Registry box change it to All.Check the boxes beside LOP Check and Purity Check.Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as ... Read more

Read other 2 answers
RELEVANCY SCORE 97.6

   Maybe someone can direct me regarding what I might be able to do with regards to my having a sluggish browser (FF). Please don't say try Chrome because FF is indeed still better (Faster & much more customizable) !! That said...I seem to have  a problem with FF constantly getting "hung up" not responding) particularly after the memory usage from the browser rises above 600,000 k.I ALWAYS have anywhere between 50 to 125 tabs "loaded" but,not necessarily "loaded". Bookmarking all these tabs pretty much kind of sucks (Although,I do it).Hell..I don't even use the browsers actually bookmarking ....
 
   .I have actually made two different folders on the book mark bar....one entitled  A-M and the other entitled N-Z !Not really thrilled with this either,though.I guess at this point I'm just kind of wondering  why someone hasn't maybe come up with an extension that maybe tells you when you reach a certain point of cpu usage within your browser so that you can at least then shut down & reload the browser.Or,maybe there's an even better solution ?????
 
   At this point,I'd at least love to see that extension.It sure would help.As I've said...i generally have anywhere between 50 - 150 (sometimes more.Ive even had upwards of 225 tabs + open (Not all loaded though) at a time.I really would love to see an extension though (which I've never seen) that informs me when My memory usage reaches a certain point ! WHY hasn't someo... Read more

A:High memory usage/Notifications for certain amounts of memory usage

   At this point,I'd at least love to see that extension.It sure would help.As I've said...i generally have anywhere between 50 - 150 (sometimes more.Ive even had upwards of 225 tabs + open (Not all loaded though) at a time.I really would love to see an extension though (which I've never seen) that informs me when My memory usage reaches a certain point ! WHY hasn't someone invented this extension yet ???
Whaaat!!  225 tabs??   Methinks therein lies your problem.  Maybe you are expecting too much from an extension too.  It's not the job of an extension to monitor system resources.

Read other 7 answers
RELEVANCY SCORE 97.2

Hi Everyone from Bleepingcomputer.com,
 
I am facing some issues with my laptop.
 
I always noticed my CPU, Memory, Physical Memory usage are running quite high.
 
Wonder is it normal for my computer?
 
I always feel the temperature is quite high and my fan keep running fast all the time even with just running some lite program. Sometimes my computer also turned to Blue Screen.
 
Please find the attachments to see my Task Manager. 

A:High CPU, Memory, Physical Memory Usage turn Bluescreen Problems

Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post. 
Louis

Read other 3 answers
RELEVANCY SCORE 96.8

Hi everyone. I am currently having issues trying to diagnose the system and compressed memory bug that causes slow disk operations. I am running a computer that I have built myself. i5 6600k, 16 GB of RAM, 2 SSD and 1 HDD. The slow operations only happen on the HDD. I can notice this when folders start to become slow and playing saved videos start to lag and drop frames. I can copy these videos and watch them just fine on the SSDs without any lag at all. I have tried multiple fixes such as disabling the notifications from windows and One Drive does not seem to be installed on my computer. I have also tried all of the solutions here BEST FIX: 100% Disk Usage by ?System and Compressed Memory? in Windows 10 - Appuals.com I just tried the second one now so I'm not sure if that's going to work. I'm just a little worried that disabling the second one will have some kind of negative impact on my computer. I also have the same symptoms as the user suggested fix as mentioned in that link, but I am not sure how to go about changing the settings like they did.

It is also worth noting that this hard drive is from a previous laptop that I put into my desktop. The system boots off of one of the SSDs and the HDD that is slow is side drive. I have tried repairing and checking the integrity of the system files, defragging the drive which I thought would help, but did not. None of the services I ran reported any problems including chkdsk. Lastly, I am still running on the 1511 version of ... Read more

A:System and compressed memory high disk usage

Hi, if you search the forum for
system and compressed memory

you will find useful information in several threads. It may not be easy or quick to resolve. Solutions are different for different users. This was much discussed about a year ago- hardly any reports recently.

Given that, I would suggest you manually update to the AU build from1511.
Windows 10 ISO Download - Windows 10 Forums
Take due precautions, and create full disk images before you do so e.g. using Macrium Reflect (free) 0 disk images are strongly recommended here.

Why? People sometimes find the upgrade fails and their PC is unbootable, or they experience widely reported new issues with the AU esp. on older hardware. So your disk images (which you can then use routinely as good practice) can save you.

Could you please add your Win 10 build and Pro/Home to your specs.

Thanks!

Read other 4 answers
RELEVANCY SCORE 96.8

Hi

I'm a new member in this forum and i need some help with my windows vista operating system.
I' m experiencing a very high memory usage and too many processes. So I thought maybe someone who knows better than me can look in my hijackthis log and tell me what is going on.
Thank you

A:slow operating system, high memory usage

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructio... Read more

Read other 2 answers
RELEVANCY SCORE 96.8

It seems that I've been getting low memory issues ever since upgrading to Win10, but I'm not 100% certain if thats the issue. I thought about uprading to 16gb ram, but I'd like to know if theres some other fix for this. I can't multitask as I used to be able to. Sometimes problems occur just running 8 tabs on chrome and a game(Blade and Soul). The numbers just don't seem to add up.

Specs:
http://imgur.com/RYhyDYa

Task Manager:
http://imgur.com/bnvV0EP
http://imgur.com/TIwSYfw
http://imgur.com/HOMvI1J

A:High Memory Usage/ Low Memory Popup on Win10 8gb Laptop

Hello svader55 Welcome to the Ten Forums!

On the first impression I would have to suspect the problem is with the upgrade itself where you might end needing to see a Clean Install of 10. First however you can try a few things out to see if this is only a minor glitch. On an older 7 model by HP the upgrade seen last summer was a disaster waiting to happen which I had enticipated and saw an immediate clean install to follow! Of after going from the 32bit 7 Home Premium to 10 Home x86 I subsequently changed that with a second fresh install the 64bit Windows.

The initial tool would be the System File Checker you would run from the Command prompt(admin) option when right clicking on the Start button. You simply scroll down to that option to see the new window open up. At the dos like prompt you then simply type in "sfc /scannow" and press enter to get the tool underway.

The tool will then scan all the important system files and if finding one or more corrupt or missing will often be able to replace them but not all unfortunately from cab files tucked away on the local drive. With previous versions the rec for having the Windows dvd in the driver was made in case the SFC had to extract something from the Windows media there if the problem was more involved. This is why the suggestion for the possible need to see a fresh clean install of 10 is being made here.

Unfortunately buggy upgrades are all too common regardless of which version is being upgraded over. But you li... Read more

Read other 0 answers
RELEVANCY SCORE 96

please can anyone help, i keep getting this message
 

A:Ram memory usage is critically high. Ram memory failure

probably this http://www.pcthreat.com/parasitebyid-12832en.html

so click report and ask to move to spyware forum

but COULD be something else if you installed it or recognise it then as i say click report
 

Read other 2 answers
RELEVANCY SCORE 94

Hi,

Installed windows 10 recently, computer has been very slow even when idling.

I've looked at the resource monitor and the system.exe is going crazy.

I used poolmon.exe to pinpoint a driver called iaStorV.sys file version 8.6.2.1019.

I'm kinda at a loss right now because windows says the driver is uptodate and I don't where I can get a windows 10 compativle one?

I wanted to attach my system information.nfo information but it keep crashing when it got to IRQs????

So I've tried to provide the relevant info below but if there's anything missing, lemme know.

I've attached a image of the driver from system information. Dunno if that'll help.

------------------------------------

Basic info
OS Name Microsoft Windows 10 Home
Version 10.0.10240 Build 10240
Other OS Description Not Available
OS Manufacturer Microsoft Corporation
System Name PARAM-PC
System Manufacturer Dell Inc.
System Model Dell System XPS L502X
System Type x64-based PC
System SKU System SKUNumber
Processor Intel(R) Core(TM) i7-2670QM CPU @ 2.20GHz, 2201 Mhz, 4 Core(s), 8 Logical Processor(s)
BIOS Version/Date Dell Inc. A07, 20/10/2011
SMBIOS Version 2.6
Embedded Controller Version 255.255
BIOS Mode Legacy
BaseBoard Manufacturer Dell Inc.
BaseBoard Model Not Available
BaseBoard Name Base Board
Platform Role Mobile
Secure Boot State Unsupported
PCR7 Configuration Binding Not Possible
Windows Directory C:\WINDOWS
System Directory C:\WINDOWS\system32
Boot Device \Device\Hard... Read more

A:Disk usage at 100% - possible memory leak?

Read other 16 answers
RELEVANCY SCORE 94

Hello,

I am experiencing a strange memory leak or CPU flaw where my CPU usage randomly shoots up to 90-100% even when no applications or programs are open. This can happen anytime from immediately after a fresh restart or after several hours of the computer running. I have read some threads about people having similar issues, however what they described was quite different from what I am experiencing because it does not appear as if a process under Task Manager is causing it. I also tried many of the solutions that users on the forum have posted such as disabling indexing within my hard drive, but unfortunately, it has not helped the issue to become resolved at all. I just recently purchased my computer, which is a Dell laptop, in September 2009. When I bought it, it came with Vista and later I upgraded to 7.

Specs:
Processor - Intel Core 2 Duo T9900 @ 3.06 GHz
RAM - 4.00 GB
System type - Windows 7 64 bit
Display - ATI Mobility Radeon HD 4670

I would appreciate any help on this matter. Thank you.

A:CPU Usage Flaw or Memory Leak

Does the usage stay at 90-100% for long periods? Several minutes?

Read other 9 answers
RELEVANCY SCORE 94

My system slows down and down and down until it starts to lock up.

The reason I know is because the task manager shows the pf usage go up and up and up at the the same time the system slows down and down and down, it gets so bad the pf usage gets up to 3g !

This happens with next not a lot open.

I have run adaware and spybot but it still happens.

Thanks for any help

Running xp pro

Todays leak got the pf usage in the task bar up to 3g ! I re booted and it is working at good speed again

A:Memory Leak And Huge Pf Usage ?

Try go this site http://safety.live.com/site/en-us/default.htm to run a full scan system.

Read other 2 answers
RELEVANCY SCORE 94

So I have been experiencing this problem for awhile now and cannot for the life of me figure out what the culprit is. Whenever I tend to watch videos (on any browser) I occasionally encounter an issue in which I would close my browser and I would still see 2 instances of iexplore.exe appearing in my task manager. One of these always uses a set amount of cpu usage of 13% and usually using up the same amount of memory as when I closed the browser. Iexplore.exe continues to sit there using CPU and RAM until I manually end task. This tends to happen frequently when viewing multiple videos back to back, youtube especially, and I have tried several things to try and fix it. I've uninstalled adobe flash thinking it was the culprit, it was not. I tried disabling all add-ons, the problem still persists. I've used 3 different kinds of virus scanners thinking it was a virus, they didn't detect any virus. I'm very stumped and would appreciate any advice for a solution to this problem.

A:iexplore.exe possible memory leak/cpu usage

Do you use feeds or slices?
Go to Tools >IE Options >Bottom of Content Tab >Click on Settings >Remove check mark, if checked at Automatically check feeds or slices. Then test.

Also go to Control Panel\All Control Panel Items\Programs and Features\ Turn Windows Features on or off in left pane. Let it populate and check if any Internet Information Services are selected or anything you think would do a call to the internet, then unselect them, and test.

These first two need a process running in order to call out on intervals to check on what they were set to check for. Ergo, the process you're seeing in task manager.

There is a possible hotfix, but I hesitate to mention it because you need to:




Quote:
analyze the call stack of the process when this issue occurs, you notice that a thread is blocked in the ntdll!NtReleaseKeyedEvent() function.

Source: https://support.microsoft.com/en-us/kb/2582203/en-us


For that you would need a utility like Process Explorer or PsTools.

Read other 3 answers
RELEVANCY SCORE 93.2

I encountered this problem once before in Windows XP Home edition SP3.
I looked it up and found some suggestions. According to the sites, it usually occurs when you leave the auto update on.
Now I have moved to Windows 7 Ultimate, and encounter this problem again.
The sites from before said that those solutions will only work for XP. How am supposed to fix this problem on 7?

A:svchost CPU Usage and Memory Leak Problem

sorry, but there's a more pressing matter now.
I kept end process to the svchost but it keep reappearing. I was fed up and decided to move the file svchost.exe out of system 32.
Things were back to normal for some time (for around 2 hours probably), and then my laptop went to bluescreen.
Now I can't turn it on. There's only blackscreen with my pointer there and can be moved around but do nothing.
Should I just reinstall the OS?

Read other 3 answers
RELEVANCY SCORE 93.2

For about the past week now, my RAM usage has been gradually increasing overtime. Basically after an hour another GB will be in use by apparently nothing and that will keep repeating and I can't clear it unless I restart my PC. I've tried scanning for virus' with Malwarebytes and tried refreshing the paging file and neither worked. I've looked through task manager (with all processes shown) and resource manager and neither of them add up to what the current amount of RAM that is being used.
 
Any help would be appreciated as this is starting to get annoying.
 
Cheers,

A:RAM usage increases overtime (Memory leak?)

- Did you install a program about one week ago ? Some programs simply have lousy memory management, they claim more and more memory without releasing any of it.
- The file cache could be growing & growing and the (size of the) cache doesn't show up in Task Manager. The file cache isn't part of the "Standby" memory but part of the "In Use" memory. (See Resource Monitor)
- Install PcWinTech's Cleanmem. It reduces memory usage every 15 minutes (or any other user defined interval) and let it also collapse the file cache. (Google's Chrome & Firefox are very stubborn and won't release too much memory).
http://www.pcwintech.com/cleanmem
http://www.pcwintech.com/about-cleanmem
Cleanmem pushes data from "In Use" to "Standby" and NOT to the pagefile. And the larger the "Standby" is, the better.
 
Keep me posted.

Read other 0 answers
RELEVANCY SCORE 92

Hello everyone, I've been having a very weird problem recently, in which I BELIEVE is involving high physical memory usage. Sometimes I will be doing things such as playing a game, or watching a stream, and my computer will run fine for a little while. But at random times, my computer will majorly slow down and sometimes even crash. If it doesn't crash, sometimes it will get so slow to the point where I have to hold down the power button and manually shut it down. Every time my computer slows down I notice it is using a TON of physical memory. It's actually happening right now. My computer is going very slow and it's using 6.22 GB memory out of 8. There are no big programs running right now, so I don't understand why it's being slow. I hope someone is able to help. Thank you for taking the time to read this!

Update: I just tried to open chrome, and the computer froze completely. It would not unfreeze. After leaving it frozen for a minute or two, the screen went black. This is becoming very frustrating.

A:Very high physical memory usage, no high usage programs running

Post a screenshot of Task Manager - Performance tab when the problem occurs.

Read other 9 answers
RELEVANCY SCORE 89.6

Several problems are happening. I don?t know if the extent to which they are related but here they are:
Earlier today, I attempted, but failed, to install the latest update for the AMD Catalyst Control Center (CCC). In one place, a message said that it had installed correctly. Another message said that it had failed to install correctly. In the Control Panel, AMD Install Manager and AMD Quick Stream are shown as installed today while the CCC shows an earlier date.After the failure to update the CCC, the System and Compressed Memory process is consistently using around 50% of CPU but little memory (in the range of 25 MB).Sometimes , but not always, there is a startup error: ?CLIStart.exe. There?s no disk in the drive. Please insert disk into drive\device\harddisk\volume Volume8?This error has appeared less frequently: ?MOM.exe No disk in F.? I have not changed any USB devices recently. It looks like MOM.exe is a replacement for CLI.exe in the CCC. Should I uninstall and reinstall the CCC?When I try to uninstall some programs (but not others), the Windows Installer freezes.The Event Viewer shows many warnings and errors. I know that I can safely ignore some of them but it is quite challenging to figure out which, if any, I should pay attention to. I would love to share them with someone willing to take a look.
Scannow has shown no problems. Webroot is the AV.
I apologize if not all of these issues should be in the same thread. If I understood the relationshi... Read more

Read other answers
RELEVANCY SCORE 89.2

Just a while ago i visited the Diablo 3 site, http://eu.blizzard.com/diablo3/.
When just on the site and not playing any of the videos, firefox takes up 40-50% CPU usage and about 120,000K memory. This hasnt really happened before. When i play the gameplay video, the CPU usage ranges up to 60% and the memory consumption reaches 300,000K. The video occastionally stutters. I tried it in Internet Explorer, which also took up almost 40% CPU usage while on the site, but not as much memory.

So i think it may be due to my flash player or something like that. Could someone help me out, tell me what i could do, because this could also be lagging up other sites with not as much flash as the Diablo one.

Read other answers
RELEVANCY SCORE 88.8

I have Windows 8 on an Asus laptop with 4 GB of RAM. I play the occasional game that isn't too hardware intensive.

Yesterday memory usage started becoming extreme. I'm looking at the task manager while it's idling with absolutely nothing opened and it will swing from anywhere from 40% to 50%. That's not normal, as far as i remember. If I crack open a browser like Google chrome that number will jump into the 80's.

In addition, upon startup absurd amounts of touchpad/touchscreen related processes will open. I had 50 duplicates of Asus SmartGesture running last time.

Do I have a virus or something? I've run a few different tools and they picked up and removed a few files, but it's still doing this.
 

Read other answers
RELEVANCY SCORE 88

As of late I've been experiencing slowdowns and latency when playing games like League of Legends. I got curious and opened Task Manager to see what's going on. There I saw fluctuations from 100% to 30% Disk and CPU usage. I don't know whether that's a normal occurrence or something else entirely.
 
OS
Windows 8.1
 
Thanks for indulging me.
                   

A:Disk and Memory Usage Fluctuates From Normal to Extreme

I've solved the problem. All I had to do was disable some programs and change my ram settings. Thanks for reading.

Read other 2 answers
RELEVANCY SCORE 88

Svchost netsvcs is maxing out my memory for up to 1 hour every day, sometimes more than once a day, this has been going on for half a year i have tried to solve this on my own by reading other resolved threads such as disabling superfetch, but none of them have helped.

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: AMD C-50 Processor, AMD64 Family 20 Model 1 Stepping 0
Processor Count: 2
RAM: 1642 Mb
Graphics Card: AMD Radeon HD 6250 Graphics, 384 Mb
Hard Drives: C: Total - 219243 MB, Free - 117567 MB; D: Total - 14966 MB, Free - 1662 MB; E: Total - 4055 MB, Free - 1108 MB;
Motherboard: Hewlett-Packard, 3577
Antivirus: Microsoft Security Essentials, Updated and Enabled
 

A:Solved: svchost netsvcs extreme memory usage

Read other 12 answers
RELEVANCY SCORE 87.6

Hijack log below

Two weeks ago my Quark 7 stopped working - it will start and come up with the splash screen, but then will not go any further - a list of processes shows it's running at 50 cpu usage and 78944 memory usage. I have tried uninstalling reinstalling and have ran Norton's Antivirus, Spybot Search and Destroy and CCleaner to no avail. I have attached my HiJack log below.

The main programs that I use daily (and yes Quark is one of them) are the following

Adobe Photoshop CS3, ACDSee 9, Outlook express, Quark 7.0, Internet Explorer, Dreamweaver 8

Thank you for taking the time - I'm pretty frustrated!
Logfile of HijackThis v1.99.1
Scan saved at 10:16:07 AM, on 10/21/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20900)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Maxtor\Sync\SyncServi... Read more

A:Quark 7 stopped working - high cpu usage-memory usage ? Virus??

Read other 6 answers
RELEVANCY SCORE 87.2

Hi,
 
Just yesterday I realized that my computer was acting super slowly and I even received a blue screen of death out of nowhere. Upon checking my processes list,I found many suspicious processes that continued to multiply when I tried to end them. These included: PresentationHost.exe, msdtc.exe, dllhost.exe, prevhost.exe, cmd.exe, msiexec.exe, conhost.exe, and even a notepad.exe that seems to be invisible. A malware is most likely behind this, and is causing my computer to perform very slowly and be almost unusable, I have managed to run FRST, but Malwarebytes Anti-Malware is not even opening for me. In addition, this multiplying issue seems to only occur when I am connected to the internet. I would highly appreciate some help!
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:25-10-2015 02
Ran by Christopher (administrator) on CHRIS (27-10-2015 16:51:11)
Running from D:\Downloads
Loaded Profiles: Christopher (Available Profiles: Christopher & Guest)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Safe Mode (minimal)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(SUPERAntiSp... Read more

A:CPU Usage in Task Manager Very High - PresentationHost.exe memory usage

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Press the windows key + r on your keyboard at the same time. This will open the RUN BOX.Type Notepad and and click the OK key.Please copy the entire contents of the code box below to the a new file.

start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

HKLM\...\Run: [New Value #1] => ctfmon = CTFMON.EXE
HKLM\...\Run: [hTew6txG55AD] => regsvr32.exe /s "C:\PROGRA~3\hTew6txG55AD.dll"
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Chrome] => [5120 2015-10-27] ()
HKU\S-1-5-18\...\Run: [Chrome] => C:\ProgramData\taskhost.exe [5120 2015-10-27] ()
AppInit_DLLs: prio.dll => No File
AppInit_DLLs-x32: prio32.dll => No File
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
SearchScopes: HKLM -> DefaultScope value is missing
SearchScopes: HKLM-x32 -> DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-3839431373-621308647-2831785862-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @nexon.net/NxGame -> C:\ProgramData\NexonUS\NGM\npNxGameUS.dll [No File]
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86... Read more

Read other 2 answers
RELEVANCY SCORE 87.2

My friend, who has a very low income was given a Dell Optiplex GX240 running Win2K Pro. 512MB RAM

To help her out, I got rid of porn, viruses, and spyware using:

Ad-Aware, AVG spyware and AV free versions, Trend Micro House Call, Spybot

I checked the task manager, and has constant 100% CPU usage, avg memory usage

The system runs, but apps open slow, so I tried some freeware reg cleaners:

CCleaner, Eusing Free Registry Cleaner, Wise Registry cleaner

After hours of searching on web, the fixes I found don't work, so I give up. Can someone help. My friend doesn't have the money to pay someone to fix this, and she was so happy to get a new computer.

Can anyonre help???

I have a HijackThis log file:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:33:15 PM, on 11/1/2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINNT\system32\hidserv.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files... Read more

A:MY PC is slow, High CPU usage, moderate memory usage , I'm stuck

Read other 13 answers
RELEVANCY SCORE 87.2

Ok, I am literally KILLING myself over this!

I installed Windows 7 64Bit over XP around a month ago and it was so good that I recommended it to my brother who was previously on XP too. We got him a copy of the 32bit version as he has only 2gb of memory, and he installed it on his machine. However, he constantly had high CPU and RAM usage (Even though no programs were obviously taking it all up in his task manager) and it was making his computer sluggish and slow. Everything was freezing and hanging and it was a nightmare.

I spent a day looking all over the net to find out the problem, but could not fix it at all, no matter what the hell I tried. So he reverted back to Windows XP. (A nice waste of money on Windows 7.) His Windows XP now runs smoothly and is all as it was.

Suddenly today, after my brother connected to my Windows 7 homegroup (or workgroup rather) through his Windows XP machine, my computer got the EXACT same problem as he had ages ago! I have been browsing Google all day downloading s**t, changing things in my computer, trying EVERY possible fix that people have suggested and that sound legit. Nothing works!

So now all of a sudden, my computer is sluggish, games are jumpy and jittery, video rendering times are slooooooow.

Here is a picture of my resource monitor:
You can see the physical memory usage being at 45%. I've ordered the memory usage of each service in highest to lowest.
I just CANT see where the problem is!
(I've tried leaving my homegroup to see... Read more

A:Windows 7 random CPU usage and high physical memory usage!!!

I can tell you what is probably causing your problems. AVG.
When you are looking at memory, do not sort by Working set, sort by Hard faults.
Hard faults is what causes things to slow down. Plus you have plenty of memory not to worry about usage.

Read other 8 answers
RELEVANCY SCORE 87.2

Hi all, hope you can help.

Every so often, when listening to online radio streams/playing games etc my computer just goes crazy. I get a lot of hard drive 'chatter' and lots of fan noise and everything slows to a crawl. My music will start jumping and skipping and there is a long delay between me clicking the mouse and the action happening. It happens when no other programs (for example, my AV/AS) are due to scan. When I look at my Task Manager the two biggest eaters of memory usage are fm.exe (game, it normally eats a load but makes no substantial difference to the comp speed) and ekrn.exe (something to do with my AV, not quite sure what it actually does though)

I am running Windows MCE SP3 and am using NOD32 anti-virus and Sunbelt CounterSpy anti-spyware. The definitions on both are updated daily and both scan daily. I have also defragged the comp and do so weekly. The other programs I use are CCleaner and Glary Utilities, both fairly regularly to clean up my comp when I was working as an internet researcher, but less often now.

I do not get any error messages/BSOD's or actual freezes. Everything just slows right down. Could I have picked up a form of malware/virus that my AV/AS isn't picking up? Could one of my previous spring cleans have been too aggressive? Or is it simply too much load for my comp (2 year old Dell)? It is 3MHz, 1G RAM, kinda your bog standard media comp from 2007.

Your thoughts and advice are greatly appreciated as it's starting ... Read more

A:Computer is apparently being scanned - high CPU usage/memory usage

When you experience or encounter strange behavior, always check for new, unknown or suspicious processes in Task Manager.Most of the processes in Task Manager will be legitimate as shown in these links.List of common system processes found in XP's Task ManagerCommon system processes found in XP's Task ManagerTop System ProcessesAnytime you come across a suspicious file or one that you do not recognize, search the name using Google or the following databases:BC's Startup Programs DatabaseSystemLookup StartupList IndexFile Research CenterProcessLibrary.comDetermining whether a file is malware or a legitimate process sometimes depends on the location (path) it is running from. One of the ways that malware tries to hide is to give itself the same name as a critical system file. However, it then places itself in a different location on your computer. Another techinique is for the process to alter the registry and add itself as a Startup program so that it can run automatically each time the computer is booted. A file's properties may give a clue to identifying it. Right-click on the file, choose Properties and examine the General and Version tabs.Tools to investigate running processes and gather additional information to identify them and resolve problems:AnVir TaskManager FreeProcess ExplorerSystem ExplorerProcessHackerProcess MonitorsvchostViewerThese tools will provide information about each process, CPU usage, file description and its path location If you right... Read more

Read other 1 answers
RELEVANCY SCORE 87.2

Greetings,
 
I formatted my computer, and after installing windows 7 again, my physical memory in task manager is very high, and cpu keeps jumping up and down.
 
I looked at the processes tab, but noticed absolutely nothing taking abnormal memory (private working set.) Then moved on to performance tab> resource monitor, and found svchost (I think it was netsvcs in parenthesis,) hogging all the memory. After ending the process, I still have had high memory usage, and surprisingly, do not see a process anywhere in task manager with high numbers next to it, so I have no idea what's happening.
 
I have noticed that my windows 7 folder keeps increasing in size, currently about 26 gigs, and a helper told me that it's normal because the updates in windows 7 have a different compression method than windows 8 and after, however when I had previously installed windows 7, fully updated... my folder size was normal, so I assume it can be done?
 
I originally posted in the Virus, Trojan, Spyware, and Malware Removal Logs section, however I did not find malware on my computer, so unless it's very new malware, I am certain windows 7 is causing this problem.
 
For antivirus, I am currently using a free trial of Norton.
 
Advice?
 
P.S. This is probably better for the hardware section, but can constant high physical memory, and cpu usage ruin my hardware? I am avoiding using things that take up high cpu and memory right now, and it's currently about 1.2 g... Read more

A:Windows 7 Jumping Cpu Usage, High Physical Memory Usage

1.  Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 
2.  Please download and install Speccy to provide us with information about your computer.  Clicking on this link will automatically initiate the download.  

 
When Speccy opens you will see a screen similar to the one below.
 

 
Click on File which is outlined in red in the screen above, and then click on Publish Snapshot.
 
The following screen will appear, click on Yes.
 

 
The following screen will appear, click on Copy to Clipboard.
 

 
In your next post right click inside the Reply to Topic box, then click on Paste.  This will load a link to the Speccy log.
 
Louis

Read other 8 answers
RELEVANCY SCORE 87.2

Hi so system and compressed memory uses 100% disk space when i start my computer and continues to do so for 10 minutes at least and it will also do this randomly when i'm gaming or just on the internet. I've checked all of my drives to see if they were updated (I just clicked search online for newest update idk if that's the best way to do it) and i ran a virus scan in safe mode and did some other things like disable prefetch and windows search and i even disabled "show me tips for windows 10" So please help me out if any of you can!
 

Read other answers
RELEVANCY SCORE 86.8

I receive the same alert from AVG whether I am using IExplorer, Firefox or Chrome. Also, in the task manager the CPU usage is sometimes almost 50% and it's always the internet browser I have open. Computer seems a bit sluggish. I have also been having trouble viewing videos on surfline.com (but not anywhere else). I am more than happy to delete any programs you think would be adding to the problem. Any help would be appreciated.

Here is my logfile from HijackThis:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:46:07 PM, on 7/6/2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16446)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVG\AVG2012\avgtray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Users\Lisa\AppData\Local\Akamai\netsession_win.exe
C:\Program Files\Common Files\Apple\Internet Services\ubd.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Prog... Read more

Read other answers
RELEVANCY SCORE 86

Hi,
 
After a search online for the extentsion names of "BrowswerProtect" and "cuonutuiinuetyosaavee". I was directed here by a thread on Norton website regardings similar issue that I've been having. My problem/issue has been going for some months now so any assistance is greatly appriecated. I am performing a System Backup and copying all documents and photo's 1 - 2 per week
 
First signs was HD noise increasing over time; system freezing when only IE and Outlook running; constant crashing on Facebook and FB game; Windows Update issues of downloading and installing updates - however still showed as needing to update/install; Blue screen "crash dump"?
 
Multiple sweeps with AV Trend Micro Titanium; online 'House Call' - some minor issues found and deleted. Contacted Microsoft Help Desk who assisted in the Windows Update issue.
 
I have word documents with  screendumps of 'Task Manager' and other systems - however was unable to upload to here 'not permitted this kind of file'?
 
Kind Regards
Garry

A:Extreme High CPU usage - System freezing, crashing, blue screen

Any feedback is every much appreciated - even the smallest detail may lead me to a final solution

Read other 5 answers