Over 1 million tech questions and answers.

Svchost.exe Extreme Memory Usage Crashes Computer When Computer Idle

Q: Svchost.exe Extreme Memory Usage Crashes Computer When Computer Idle

Svchost.exe Extreme Memory Usage Crashes Computer When Computer Idle
I am currently experiencing a problem that started just a few days ago where the svchost.exe process keeps taking up memory on my computer even when the computer is idle and continues to grow to taking up to 99% of memory before it crashes/freezes the computer and it has to be restarted several times a day to clear the memory back down. However sometimes when I restart the computer within an hour or a couple of hours or sometimes less the memory will get exhausted again.

One special note is that since my Windows 7 OS was preinstalled on my HP computer, I do not have access to the original Windows DVD and the DVD drive on my computer is currently broken and is unable to be used.

I downloaded the TSG SysInfo tool and the FRST tool with the following results.

I was able to download the FRST tool and I have the following results, so hopefully this will help someone to be able to help me with this problem it seems to be getting worse as time goes on eating up memory.

Thanks for your help, time and efforts it is appreciated and here is the TSG SysInfo and the following 2 logs from FRST:
Here is the TSG SysInfo

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i7-2600S CPU @ 2.80GHz, Intel64 Family 6 Model 42 Stepping 7
Processor Count: 8
RAM: 8174 Mb
Graphics Card: AMD Radeon HD 6570, 1024 Mb
Hard Drives: C: Total - 1418945 MB, Free - 1015688 MB; D: Total - 11750 MB, Free - 1437 MB;
Motherboard: PEGATRON CORPORATION, 2AC2
Antivirus: AVG Internet Security 2012, Updated and Enabled
Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-09-2014
Ran by Joellen at 2014-09-26 19:04:45
Running from C:\Users\Joellen\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: AVG Internet Security 2012 (Enabled - Up to date) {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
AS: AVG Internet Security 2012 (Enabled - Up to date) {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: AVG Internet Security 2012 (Enabled) {621CC794-9486-F902-D092-0484E8EA828B}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9130 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.3.9130 - Adobe Systems Inc.) Hidden
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader X (10.1.12) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.12 - Adobe Systems Incorporated)
Agatha Christie - Peril at End House (x32 Version: 2.2.0.95 - WildTangent) Hidden
ATI Catalyst Install Manager (HKLM\...\{9A6AD916-D45D-1D1C-E2C0-A0402F511999}) (Version: 3.0.808.0 - ATI Technologies, Inc.)
ATI Stream SDK v2 Developer (HKLM\...\{80C27FE9-C6C4-F5C8-EAD3-09E7E0102E78}) (Version: 2.2.0.0 - ATI Technologies Inc.)
AVG 2012 (HKLM\...\AVG) (Version: 2012.1.2247 - AVG Technologies)
AVG 2012 (Version: 12.0.4031 - AVG Technologies) Hidden
AVG 2012 (Version: 12.1.2247 - AVG Technologies) Hidden
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bejeweled 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bing Bar (HKLM-x32\...\{08234a0d-cf39-4dca-99f0-0c5cb496da81}) (Version: 6.0.2282.0 - Microsoft Corporation)
Bing Bar Platform (x32 Version: 6.0.2282.0 - Microsoft Corporation) Hidden
Bing Rewards Client Installer (x32 Version: 16.0.345.0 - Microsoft Corporation) Hidden
Blackhawk Striker 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Blasterball 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Blio (HKLM-x32\...\{9368DDD5-CE7F-4BD7-A83A-F00FABE338EC}) (Version: 2.2.6699 - K-NFB Reading Technology, Inc.)
Bounce Symphony (x32 Version: 2.2.0.95 - WildTangent) Hidden
Build-a-lot 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cake Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2011.0113.2337.42366 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2011.0113.2337.42366 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help Czech (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help Danish (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help Dutch (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help English (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help Finnish (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help French (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help German (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help Greek (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help Italian (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help Japanese (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help Korean (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help Polish (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help Russian (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help Spanish (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help Swedish (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
CCC Help Thai (x32 Version: 2011.0113.2336.42366 - ATI) Hidden
ccc-core-static (x32 Version: 2011.0113.2337.42366 - ATI) Hidden
ccc-utility64 (Version: 2011.0113.2337.42366 - ATI) Hidden
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.1.2615 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.1.2615 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden
Dora's World Adventure (x32 Version: 2.2.0.95 - WildTangent) Hidden
Farm Frenzy (x32 Version: 2.2.0.95 - WildTangent) Hidden
FATE - The Traitor Soul (x32 Version: 2.2.0.95 - WildTangent) Hidden
H&R Block Standard 2011 (HKLM-x32\...\{5C52EC19-3B77-4B03-BBE8-E7F58ED92D73}) (Version: 11.01.6901 - HRB Technology, LLC.)
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Auto (Version: 1.0.12935.3667 - Hewlett-Packard Company) Hidden
HP Client Services (Version: 1.1.12938.3539 - Hewlett-Packard) Hidden
HP Customer Experience Enhancements (x32 Version: 6.0.1.8 - Hewlett-Packard) Hidden
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.2.4 - WildTangent)
HP Keyboard (HKLM-x32\...\{B40D7926-AE5F-41EA-8AC6-56C0E2F00E9D}) (Version: 1.5.0.4 - Hewlett-Packard)
HP LinkUp (HKLM-x32\...\{C1AD9241-3ADD-483F-914D-071F3E50855A}) (Version: 2.01.026 - Hewlett-Packard)
HP MediaSmart/TouchSmart Netflix (HKLM-x32\...\{BB760C1D-98F4-4E38-8CC4-3B67329AA981}) (Version: 1.0.6.0 - Hewlett-Packard)
HP MovieStore (HKLM-x32\...\{9008D736-35CA-40DB-A2BE-5F32D954E5AA}) (Version: 2.0 - Hewlett-Packard)
HP MovieStore (x32 Version: 1.0.045 - Hewlett-Packard) Hidden
HP Odometer (HKLM-x32\...\{B8AC1A89-FFD1-4F97-8051-E505A160F562}) (Version: 2.10.0000 - Hewlett-Packard)
HP Officejet Pro 8500 A910 Basic Device Software (HKLM\...\{EE7C94CC-BECB-4000-B5E3-D895307B9D5E}) (Version: 22.50.231.0 - Hewlett-Packard Co.)
HP Officejet Pro 8500 A910 Help (HKLM-x32\...\{871B2A9D-0F12-44B3-88C1-E0CB10A232E4}) (Version: 140.0.2.2 - Hewlett Packard)
HP Officejet Pro 8500 A910 Product Improvement Study (HKLM\...\{0308919C-E317-4293-8D3C-97EF307BCDBC}) (Version: 22.50.231.0 - Hewlett-Packard Co.)
HP Product Detection (HKLM-x32\...\{F13FBD0E-5CE1-4A3F-A4F0-C8633CB7B4DD}) (Version: 11.10.1000 - HP)
HP Setup (HKLM-x32\...\{210A03F5-B2ED-4947-B27E-516F50CBB292}) (Version: 8.6.4530.3651 - Hewlett-Packard Company)
HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.1.13253.3682 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company)
HP Support Information (HKLM-x32\...\{7F2A11F4-EAE8-4325-83EC-E3E99F85169E}) (Version: 10.1.1000 - Hewlett-Packard)
HP Update (HKLM-x32\...\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}) (Version: 5.002.006.003 - Hewlett-Packard)
HP Vision Hardware Diagnostics (HKLM\...\{D79A02E9-6713-4335-9668-AAC7474C0C0E}) (Version: 2.5.0.0 - Hewlett-Packard)
Hulu Desktop (HKCU\...\HuluDesktop) (Version: 0.9.13 - Hulu LLC)
HydraVision (x32 Version: 4.2.184.0 - ATI Technologies Inc.) Hidden
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Java 7 Update 40 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417040FF}) (Version: 7.0.400 - Oracle)
Java Auto Updater (x32 Version: 2.1.6.0 - Sun Microsystems, Inc.) Hidden
Java™ 7 Update 5 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217005FF}) (Version: 7.0.50 - Oracle)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kobo (HKLM-x32\...\Kobo) (Version: 1.6 - Kobo Inc.)
LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.3609 - CyberLink Corp.)
LabelPrint (x32 Version: 2.5.3609 - CyberLink Corp.) Hidden
Mah Jong Medley (x32 Version: 2.2.0.95 - WildTangent) Hidden
Malwarebytes Anti-Malware version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Marketsplash Shortcuts (HKLM-x32\...\{16FCDD97-AE09-476B-88CD-261D852BD34C}) (Version: 1.0.1.7 - Hewlett-Packard)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Default Manager (x32 Version: 2.2.114.0 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Click-to-Run 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - English (HKLM-x32\...\{90140011-0066-0409-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Search Enhancement Pack (x32 Version: 3.0.131.0 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20125.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0 - Microsoft Corp.) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mystery P.I. - Stolen in San Francisco (x32 Version: 2.2.0.95 - WildTangent) Hidden
Namco All-Stars PAC-MAN (x32 Version: 2.2.0.95 - WildTangent) Hidden
PDF Complete Special Edition (HKLM-x32\...\PDF Complete) (Version: 4.0.35 - PDF Complete, Inc)
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Poker Superstars III (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Golfer (x32 Version: 2.2.0.95 - WildTangent) Hidden
Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4817 - CyberLink Corp.)
Power2Go (x32 Version: 6.1.4817 - CyberLink Corp.) Hidden
PressReader (HKLM-x32\...\{912CED74-88D3-4C5B-ACB0-132318649765}) (Version: 5.10.1217.0 - NewspaperDirect Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6387 - Realtek Semiconductor Corp.)
Recovery Manager (x32 Version: 5.5.3621 - CyberLink Corp.) Hidden
Remote Graphics Receiver (HKLM-x32\...\{16FC3056-90C0-4757-8A68-64D8DA846ADA}) (Version: 5.4.5 - Hewlett-Packard)
RoxioNow Player (HKLM-x32\...\{0EDEB615-1A60-425E-8306-0E10519C7B55}) (Version: 1.9.5.103 - RoxioNow)
Slingo Supreme (x32 Version: 2.2.0.95 - WildTangent) Hidden
SMART-ER (HKLM-x32\...\{AA3A6E2F-2A2D-43FC-9EBC-AB0FBA4B1DA7}) (Version: 2.0.0.4 - Apricorn)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2473228) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217) (Version: 1 - Microsoft Corporation)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.95 - WildTangent) Hidden
Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
Wheel of Fortune 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
WildTangent Games App (HP Games) (x32 Version: 4.0.5.21 - WildTangent) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Zinio Reader 4 (HKLM-x32\...\ZinioReader4.9310D8F796442B71068C511E15D70529A702D19D.1) (Version: 4.0.3184 - Zinio LLC)
Zinio Reader 4 (x32 Version: 4.0.3184 - Zinio LLC) Hidden
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-772605068-1663628801-3090605291-1000_Classes\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32 -> C:\$Recycle.Bin ()
==================== Restore Points =========================
25-04-2014 07:42:04 Scheduled Checkpoint
03-05-2014 07:42:09 Scheduled Checkpoint
11-05-2014 07:56:58 Scheduled Checkpoint
19-05-2014 07:14:07 Scheduled Checkpoint
27-05-2014 07:45:39 Scheduled Checkpoint
04-06-2014 07:34:40 Scheduled Checkpoint
12-06-2014 06:57:33 Scheduled Checkpoint
19-06-2014 07:35:34 Scheduled Checkpoint
26-06-2014 07:58:28 Scheduled Checkpoint
04-07-2014 06:22:02 Scheduled Checkpoint
11-07-2014 06:22:48 Scheduled Checkpoint
18-07-2014 07:06:28 Scheduled Checkpoint
26-07-2014 07:41:59 Scheduled Checkpoint
02-08-2014 12:53:27 Windows Update
10-08-2014 05:52:35 Scheduled Checkpoint
17-08-2014 08:02:49 Scheduled Checkpoint
25-08-2014 05:38:57 Scheduled Checkpoint
01-09-2014 07:42:19 Scheduled Checkpoint
09-09-2014 10:36:06 Scheduled Checkpoint
17-09-2014 07:38:27 Scheduled Checkpoint
24-09-2014 07:50:47 Scheduled Checkpoint
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {03375BF4-FD5A-48E9-9C39-B82D8181D26E} - System32\Tasks\HPCeeScheduleForJoellen => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {09050E82-910C-4ECB-BA76-E9BB0B58A81A} - System32\Tasks\HPOSIAPP64 => C:\Program Files (x86)\Hewlett-Packard\HP Keyboard\ModLEDKey.exe [2009-02-27] ()
Task: {18E22D66-7131-4A01-BDD7-EE8403E5DFE2} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{89ADA0F2-0C46-4DC7-9244-1058ADC3DA00}.exe
Task: {19DDD9B1-A1DC-42D3-9AD8-1D3CB6749946} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Warranty Opt-In(No) => c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\Detection_PostWarrantyAlert.exe [2014-01-14] (Hewlett-Packard)
Task: {2F09C407-EE2E-4D62-B0F5-88CADACC268A} - System32\Tasks\ROC_JAN2013_TB_rmv => C:\Program Files (x86)\AVG Secure Search\PostInstall\ROC.exe
Task: {3BE86E4C-F291-46E8-BBC7-F97CDA75437E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {8E3C11C4-600B-4E27-BC2C-CA64681F2956} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {8E4AAF37-6EB1-4DD7-8B55-2A85040D2723} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-09-03] (Hewlett-Packard)
Task: {98133CAC-D151-4CD9-9043-658CED114553} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-09-03] (Hewlett-Packard)
Task: {AEDD60B2-583A-467C-8B63-E030795CBBCB} - System32\Tasks\HPCustParticipation HP Officejet Pro 8500 A910 => C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\HPCustPartic.exe [2010-11-16] (Hewlett-Packard Co.)
Task: {BBB23748-2A86-4834-A050-F6C8E49237D0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: {E2CF1F4A-6FD3-4196-BBA6-E11E7594462D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Warranty Opt-In(Yes) => c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\Detection_PostWarrantyAlert.exe [2014-01-14] (Hewlett-Packard)
Task: {EFB7AA85-32A2-4E3F-9383-708FF4E1B8AF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{89ADA0F2-0C46-4DC7-9244-1058ADC3DA00}.exe
Task: C:\Windows\Tasks\HPCeeScheduleForJoellen.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\ROC_JAN2013_TB_rmv.job => C:\Program Files (x86)\AVG Secure Search\PostInstall\ROC.exe
==================== Loaded Modules (whitelisted) =============
2011-04-20 04:13 - 2009-02-27 21:13 - 00053248 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Keyboard\ModLEDKey.exe
2011-04-20 04:13 - 2009-02-19 19:22 - 00028672 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Keyboard\WMINPUT.DLL
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WDDMStatus.lnk => C:\Windows\pss\WDDMStatus.lnk.CommonStartup
MSCONFIG\startupreg: Norton Online Backup => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
MSCONFIG\startupreg: vProt => "C:\Program Files (x86)\AVG Secure Search\vprot.exe"
========================= Accounts: ==========================
Administrator (S-1-5-21-772605068-1663628801-3090605291-500 -> Administrator - Disabled - Status: Degraded)
Guest (S-1-5-21-772605068-1663628801-3090605291-501 -> Limited - Disabled - Status: Degraded)
HomeGroupUser$ (S-1-5-21-772605068-1663628801-3090605291-1002 -> Limited - Enabled - Status: OK)
Joellen (S-1-5-21-772605068-1663628801-3090605291-1000 -> Administrator - Enabled - Status: OK) => C:\Users\Joellen
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (09/26/2014 06:42:54 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program dds.com version 2012.11.20.1 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 1198
Start Time: 01cfd9e2d0750604
Termination Time: 156
Application Path: C:\Users\Joellen\Desktop\dds.com
Report Id:
Error: (09/26/2014 06:23:45 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program dds.com version 2012.11.20.1 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 2e7c
Start Time: 01cfd9e024d3af75
Termination Time: 0
Application Path: C:\Users\Joellen\Desktop\dds.com
Report Id:
Error: (09/26/2014 06:13:14 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program dds.com version 2012.11.20.1 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 2a5c
Start Time: 01cfd9dbf98f94cf
Termination Time: 0
Application Path: C:\Users\Joellen\Desktop\dds.com
Report Id:
Error: (09/26/2014 05:46:07 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program dds.com version 2012.11.20.1 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 1840
Start Time: 01cfd9da99ca8ddf
Termination Time: 0
Application Path: C:\Users\Joellen\Downloads\dds.com
Report Id:
Error: (09/26/2014 00:50:45 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/26/2014 01:05:10 AM) (Source: SideBySide) (EventID: 63) (User: )
Description: Activation context generation failed for "assemblyIdentity1".Error in manifest or policy file "assemblyIdentity2" on line assemblyIdentity3.
The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid.
Error: (09/26/2014 00:18:29 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/25/2014 10:48:53 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/25/2014 09:08:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/25/2014 07:00:11 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: The backup was not successful. The error is: Windows Backup had to skip all the drives included in backup. Make sure that the drives are plugged in and working correctly. (0x810000FF).
System errors:
=============
Error: (09/26/2014 00:49:33 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Power service terminated with the following error:
%%4203
Error: (09/26/2014 00:49:27 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 12:46:55 PM on ‎9/‎26/‎2014 was unexpected.
Error: (09/26/2014 09:48:50 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the eventlog service.
Error: (09/26/2014 08:29:20 AM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16398) (User: NT AUTHORITY)
Description: A new BITS job could not be created. The current job count for the user Joellen-HP\Joellen (60) is equal to or greater than the job limit (60) specified through group policy. To correct the problem, complete or cancel the BITS jobs that haven't made progress by looking at the error, and restart the BITS service. If this error recurs, contact your system administrator and increate the per-user and per-computer Group Policy job limits.
Error: (09/26/2014 08:29:10 AM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16398) (User: NT AUTHORITY)
Description: A new BITS job could not be created. The current job count for the user Joellen-HP\Joellen (60) is equal to or greater than the job limit (60) specified through group policy. To correct the problem, complete or cancel the BITS jobs that haven't made progress by looking at the error, and restart the BITS service. If this error recurs, contact your system administrator and increate the per-user and per-computer Group Policy job limits.
Error: (09/26/2014 08:29:00 AM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16398) (User: NT AUTHORITY)
Description: A new BITS job could not be created. The current job count for the user Joellen-HP\Joellen (60) is equal to or greater than the job limit (60) specified through group policy. To correct the problem, complete or cancel the BITS jobs that haven't made progress by looking at the error, and restart the BITS service. If this error recurs, contact your system administrator and increate the per-user and per-computer Group Policy job limits.
Error: (09/26/2014 08:28:50 AM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16398) (User: NT AUTHORITY)
Description: A new BITS job could not be created. The current job count for the user Joellen-HP\Joellen (60) is equal to or greater than the job limit (60) specified through group policy. To correct the problem, complete or cancel the BITS jobs that haven't made progress by looking at the error, and restart the BITS service. If this error recurs, contact your system administrator and increate the per-user and per-computer Group Policy job limits.
Error: (09/26/2014 00:17:05 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Power service terminated with the following error:
%%4203
Error: (09/25/2014 10:47:35 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Power service terminated with the following error:
%%4203
Error: (09/25/2014 10:47:30 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 10:45:04 PM on ‎9/‎25/‎2014 was unexpected.
Microsoft Office Sessions:
=========================
Error: (09/26/2014 06:42:54 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: dds.com2012.11.20.1119801cfd9e2d0750604156C:\Users\Joellen\Desktop\dds.com
Error: (09/26/2014 06:23:45 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: dds.com2012.11.20.12e7c01cfd9e024d3af750C:\Users\Joellen\Desktop\dds.com
Error: (09/26/2014 06:13:14 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: dds.com2012.11.20.12a5c01cfd9dbf98f94cf0C:\Users\Joellen\Desktop\dds.com
Error: (09/26/2014 05:46:07 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: dds.com2012.11.20.1184001cfd9da99ca8ddf0C:\Users\Joellen\Downloads\dds.com
Error: (09/26/2014 00:50:45 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/26/2014 01:05:10 AM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD _NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3
Error: (09/26/2014 00:18:29 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/25/2014 10:48:53 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/25/2014 09:08:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/25/2014 07:00:11 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: Windows Backup had to skip all the drives included in backup. Make sure that the drives are plugged in and working correctly. (0x810000FF)
==================== Memory info ===========================
Processor: Intel® Core™ i7-2600S CPU @ 2.80GHz
Percentage of memory in use: 66%
Total physical RAM: 8174.54 MB
Available physical RAM: 2722.32 MB
Total Pagefile: 16347.25 MB
Available Pagefile: 11352.4 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:1385.69 GB) (Free:994.66 GB) NTFS
Drive d: (HP_RECOVERY) (Fixed) (Total:11.48 GB) (Free:1.4 GB) NTFS ==>[System with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
==================== End Of Log ============================

FRST.txt

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-09-2014
Ran by Joellen (administrator) on JOELLEN-HP on 26-09-2014 19:03:44
Running from C:\Users\Joellen\Desktop
Loaded Profile: Joellen (Available profiles: Joellen)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 9
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Roxio) C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Apricorn) C:\Program Files (x86)\Apricorn\SMART-ER\SMART-ER Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\WINDOWS LIVE\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\WINDOWS LIVE\WLIDSVCM.EXE
() C:\Program Files (x86)\Hewlett-Packard\HP Keyboard\ModLEDKey.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
(Apricorn) C:\Program Files (x86)\Apricorn\SMART-ER\SMART-ER.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
(Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Keyboard\CNYHKEY.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgcfgex.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_15_0_0_152_ActiveX.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [hpsysdrv] => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-01-14] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BATINDICATOR] => C:\Program Files (x86)\Hewlett-Packard\HP Keyboard\BATINDICATOR.exe
HKLM-x32\...\Run: [LaunchHPOSIAPP] => C:\Program Files (x86)\Hewlett-Packard\HP Keyboard\LaunchApp.exe [385024 2009-04-03] (Hewlett-Packard)
HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [656920 2011-02-01] (PDF Complete Inc)
HKLM-x32\...\Run: [Microsoft Default Manager] => C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [439568 2010-05-10] (Microsoft Corporation)
HKLM-x32\...\Run: [AVG_TRAY] => C:\Program Files (x86)\AVG\AVG2012\avgtray.exe [2598520 2012-11-19] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-09-26] (Hewlett-Packard)
HKU\S-1-5-21-772605068-1663628801-3090605291-1000\...\MountPoints2: {da0afe8d-b1dd-11e0-b87e-e069958d31c5} - J:\unlock.exe autoplay=true
HKU\S-1-5-21-772605068-1663628801-3090605291-1000\...409d6c4515e9\InprocServer32: [Default-shell32] C:\$Recycle.Bin\S-1-5-21-772605068-1663628801-3090605291-1000\$ac4e1da0b1b31fd6d68092d262c633d8\n. ATTENTION! ====> ZeroAccess?
HKU\S-1-5-18\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\system32\Macromed\Flash\FlashUtil64_14_0_0_145_ActiveX.exe -update activex
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SMART-ER.lnk
ShortcutTarget: SMART-ER.lnk -> C:\Program Files (x86)\Apricorn\SMART-ER\SMART-ER.exe (Apricorn)
BootExecute: autocheck autochk * C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ebay.com/sch/ebayadvsearch/?rt=nc
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK/1" target="_blank" class="wLink">http://g.msn.com/HPDSK/1" target="_blank" class="wLink">http://g.msn.com/HPDSK/1" target="_blank" class="wLink">http://g.msn.com/HPDSK/1" target="_blank" class="wLink">http://g.msn.com/HPDSK/1
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK/1
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPDSK/1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK/1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPDSK/1
URLSearchHook: HKCU - (No Name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {26528B36-1695-4908-84F2-6E570AAAAB86} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}" target="_blank" class="wLink">http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}" target="_blank" class="wLink">http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM-x32 - {26528B36-1695-4908-84F2-6E570AAAAB86} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - DefaultScope {EC2F27A6-B3A7-44D4-843C-9815A218BEF9} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={ outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {26528B36-1695-4908-84F2-6E570AAAAB86} URL = http://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=http://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKCU - {EC2F27A6-B3A7-44D4-843C-9815A218BEF9} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={ outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: AVG Do Not Track -> {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} -> C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.)
BHO: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
BHO-x32: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Bing Bar BHO -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM-x32 - @C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKCU - No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect114a.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
Tcpip\Parameters: [DhcpNameServer] 209.18.47.61 209.18.47.62
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.5.1 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.5.1 -> C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpWinExt,version=5.0 -> C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @hulu.com/Hulu Desktop -> C:\Windows\..\Users\Default\AppData\Local\HuluDesktop\instances\0.9.13.1\np HDPlg.dll (Hulu LLC)
FF HKLM-x32\...\Firefox\Extensions: [[email protected] ] - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\Firefox
FF Extension: Bing Bar - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\Firefox [2011-04-20]
FF HKLM-x32\...\Firefox\Extensions: [{27182e60-b5f3-411c-b545-b44205977502}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension
FF Extension: Search Helper Extension - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension [2011-04-20]
FF HKLM-x32\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension
FF Extension: Default Manager - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension [2011-04-20]
FF HKLM-x32\...\Firefox\Extensions: [{1E73965B-8B48-48be-9C8D-68B920ABC1C4}] - C:\Program Files (x86)\AVG\AVG2012\Firefox4
FF Extension: AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\Firefox4 [2012-05-17]
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [jmfkcklnlgedgbglfkkgedjfmejoahla] - C:\Program Files (x86)\AVG\AVG2012\Chrome\safesearch.crx [2012-07-26]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 AVG Security Toolbar Service; C:\Program Files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe [167264 2011-11-10] ()
R2 avgfws; C:\Program Files (x86)\AVG\AVG2012\avgfws.exe [2321560 2012-12-05] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe [5175856 2013-10-16] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [193288 2012-02-14] (AVG Technologies CZ, s.r.o.)
S2 CLKMSVC10_38F51D56; c:\Program Files (x86)\Cyberlink\PowerDVD10\NavFilter\kmsvc.exe [241648 2011-01-25] (CyberLink)
R2 DcomLaunch; C:\Windows\system32\rpcss.dll [528384 2010-11-20] (Microsoft Corporation) [File not signed]
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1127448 2011-02-01] (PDF Complete Inc)
R2 RpcSs; C:\Windows\system32\rpcss.dll [528384 2010-11-20] (Microsoft Corporation) [File not signed]
R2 SMART-ERService; C:\Program Files (x86)\Apricorn\SMART-ER\SMART-ER Service.exe [69632 2007-06-04] (Apricorn) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [48992 2011-05-23] (AVG Technologies CZ, s.r.o.)
R3 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [127328 2012-12-10] (AVG Technologies CZ, s.r.o. )
R3 AVGIDSFilter; C:\Windows\System32\DRIVERS\avgidsfiltera.sys [29776 2011-12-23] (AVG Technologies CZ, s.r.o. )
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [28480 2012-04-19] (AVG Technologies CZ, s.r.o. )
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [307040 2012-11-08] (AVG Technologies CZ, s.r.o.)
R1 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [47696 2011-12-23] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [36944 2012-01-31] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [384800 2013-04-11] (AVG Technologies CZ, s.r.o.)
S3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam64.sys [14464 2009-02-13] (Western Digital Technologies) [File not signed]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-26 19:03 - 2014-09-26 19:04 - 00019078 _____ () C:\Users\Joellen\Desktop\FRST.txt
2014-09-26 19:02 - 2014-09-26 19:03 - 00000000 ____D () C:\FRST
2014-09-26 18:57 - 2014-09-26 18:57 - 02108928 _____ (Farbar) C:\Users\Joellen\Desktop\FRST64.exe
2014-09-26 18:35 - 2014-09-26 18:35 - 00688992 ____R (Swearware) C:\Users\Joellen\Desktop\dds.com
2014-09-26 08:28 - 2014-09-26 08:28 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{938A3FFE-B0DD-4F38-81F4-4FF1B2AA9598}
2014-09-25 18:45 - 2014-09-25 18:45 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{A5D48C46-4F55-47A7-B079-A5F2E597E483}
2014-09-24 22:54 - 2014-09-24 22:55 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{2861F21E-3B2E-4730-BFB6-37F6D042F764}
2014-09-24 10:23 - 2014-09-24 10:24 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{93311B44-BA5F-446A-B882-DE11A3194EE1}
2014-09-23 14:55 - 2014-09-23 14:55 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{516377B2-3447-469B-88DD-2E277B0BB91D}
2014-09-23 12:29 - 2014-09-23 12:29 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{E3721974-C993-49D7-98D6-27BC43AEDE79}
2014-09-22 22:43 - 2014-09-22 22:43 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{61D59652-81C1-4FE5-8703-0DAA8E77C0B6}
2014-09-22 08:22 - 2014-09-22 08:22 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{0BD8F765-E9E6-4069-AE15-8E951928250E}
2014-09-21 14:11 - 2014-09-21 14:12 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{7DEFDDCA-C5B9-4491-B71C-11E2C56EC4CD}
2014-09-20 23:52 - 2014-09-20 23:52 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{6D1B23E6-04B4-4F2F-8BC6-0211419FC484}
2014-09-20 10:35 - 2014-09-20 10:35 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{D14E23A3-CE45-46F0-9256-4CF965CF2F05}
2014-09-19 16:14 - 2014-09-19 16:14 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{D018C90B-C84B-4F18-9E82-B86CE47818FF}
2014-09-19 01:15 - 2014-09-19 01:15 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{4961141D-9D1B-4F70-8F9D-FB4ACBE25656}
2014-09-18 09:03 - 2014-09-18 09:03 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{F8FD7AC9-6F6E-4375-A0FD-EA82025F68CB}
2014-09-17 12:15 - 2014-09-17 12:15 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{FAECF297-B5FA-4068-8A6C-8CB483F33B1F}
2014-09-16 23:53 - 2014-09-16 23:53 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{AC3938CA-003A-4C82-9EE0-A605188ECBA5}
2014-09-16 11:52 - 2014-09-16 11:52 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{9D069F99-5C67-4DFF-B793-88F419F8757E}
2014-09-15 23:10 - 2014-09-15 23:10 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{060DF96C-335B-4F0C-A610-21757EC3260C}
2014-09-15 22:54 - 2014-09-18 18:06 - 00000000 ____D () C:\Users\Joellen\AppData\Roaming\{90140011-0066-0409-0000-0000000FF1CE}
2014-09-15 09:02 - 2014-09-15 09:02 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{CCA23A61-2B75-4D81-AB14-7DE539CFEB11}
2014-09-15 00:41 - 2014-09-15 00:41 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{FC5E7974-9D71-4667-9C54-3E65D473EF34}
2014-09-14 12:10 - 2014-09-14 12:10 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{659865E8-2CEB-43E9-BC91-135741087D89}
2014-09-13 23:33 - 2014-09-13 23:33 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{4D9EFA65-C7A5-4FAC-9064-780B9FC010B2}
2014-09-13 11:04 - 2014-09-13 11:04 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{D85BD238-6C71-4E8F-8238-B30ED4CA7A3B}
2014-09-12 16:48 - 2014-09-12 16:48 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{A8FDF811-EE0D-4D5B-967F-DEDEE4A3CB8B}
2014-09-12 13:58 - 2014-09-12 13:58 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{64AE8A54-5093-4D9A-8795-86694164E997}
2014-09-12 00:55 - 2014-09-12 00:55 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{15E05FA6-B470-4ED4-A1B6-EB305EE2B2E9}
2014-09-11 12:26 - 2014-09-11 12:26 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{482D0531-55F9-4E4C-BBD1-91D8FBBBCF99}
2014-09-10 12:07 - 2014-09-10 12:07 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{DACE4988-710E-47B8-85C5-628A71A9672A}
2014-09-09 21:05 - 2014-09-09 21:05 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{6F8D5060-3D96-498D-AF1A-4B4363523260}
2014-09-09 08:59 - 2014-09-09 08:59 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{CD27989C-7F4D-452F-9F82-1354E404819D}
2014-09-08 18:46 - 2014-09-08 18:46 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{1EF3D394-B38C-4E39-B8A2-D453D0DD13EA}
2014-09-08 06:19 - 2014-09-08 06:19 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{A2D4605C-9307-43DA-83AD-FA1342B69E02}
2014-09-07 12:48 - 2014-09-07 12:48 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{DF96D145-9703-456D-B4D0-725C35FEB5F1}
2014-09-06 13:09 - 2014-09-06 13:10 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{EC61BF4C-DC4B-41D7-9C35-8621144FB58B}
2014-09-06 00:42 - 2014-09-06 00:42 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{3A4DDB6E-43E5-4718-9E6F-8328571A7294}
2014-09-05 12:15 - 2014-09-05 12:16 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{99567531-1F71-4CD2-A617-475409684C6B}
2014-09-04 15:40 - 2014-09-04 15:41 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{50A8CF66-B483-4E00-9BB8-BBE6E2A2C7CA}
2014-09-04 03:31 - 2014-09-04 03:31 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{48F749EC-6C39-44C6-A299-CA50DBBA3999}
2014-09-03 13:02 - 2014-09-03 13:02 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{F83E54D3-4E1A-4170-A51B-3532891E0B65}
2014-09-02 20:40 - 2014-09-02 20:40 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{55C1C7CA-DCD9-4EBD-B1E1-7CF95EE44615}
2014-09-02 08:06 - 2014-09-02 08:07 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{7A4779D4-7890-4D20-A416-E7F54F660327}
2014-09-01 13:33 - 2014-09-01 13:33 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{65FA8911-BAE6-4077-941B-8BB6BF6586B7}
2014-09-01 00:16 - 2014-09-01 00:16 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{84863774-9BC2-4B32-BDDC-7294BDFA0720}
2014-08-31 04:06 - 2014-08-31 04:06 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{A51DAF75-38D9-4F5F-A0B4-F499F1F3AE61}
2014-08-30 13:18 - 2014-08-30 13:18 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{2EDF0D1B-8D1B-4844-86A1-A7251DEB005D}
2014-08-29 21:55 - 2014-08-29 21:55 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{BA4F9CE5-33D8-4576-9E99-09561B8F9C8F}
2014-08-29 09:22 - 2014-08-29 09:22 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{66E167A5-7DF6-41F6-B5A9-9177F3914BC8}
2014-08-28 21:09 - 2014-08-28 21:10 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{3F8BB77E-579F-4E40-8E2C-B985BE0EFC87}
2014-08-27 12:14 - 2014-08-27 12:14 - 00000000 ____D () C:\Users\Joellen\AppData\Local\{9C416E17-B15F-49C7-9A19-70060F2EA137}
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-26 12:57 - 2009-07-13 23:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-26 12:57 - 2009-07-13 23:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-26 12:53 - 2011-07-14 23:06 - 01902097 _____ () C:\Windows\WindowsUpdate.log
2014-09-26 12:49 - 2013-06-02 23:01 - 00000350 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2014-09-26 12:49 - 2013-01-22 02:52 - 00000354 _____ () C:\Windows\Tasks\ROC_JAN2013_TB_rmv.job
2014-09-26 12:49 - 2011-04-20 04:20 - 00000000 ____D () C:\ProgramData\PDFC
2014-09-26 12:49 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-26 12:49 - 2009-07-13 23:51 - 00058447 _____ () C:\Windows\setupact.log
2014-09-26 11:25 - 2011-07-14 23:07 - 00000000 ____D () C:\Windows\system32\Drivers\AVG
2014-09-26 02:11 - 2011-10-28 20:04 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-09-26 02:11 - 2011-07-15 13:00 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-09-25 21:05 - 2011-07-19 01:17 - 00000000 ____D () C:\Users\Joellen\AppData\Roaming\SoftGrid Client
2014-09-25 00:33 - 2011-07-17 23:32 - 00000000 ____D () C:\Users\Joellen\AppData\Local\CrashDumps
2014-09-23 21:16 - 2012-02-05 19:09 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-09-23 02:04 - 2014-05-30 02:06 - 00003198 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForJoellen
2014-09-23 02:04 - 2014-05-30 02:06 - 00000340 _____ () C:\Windows\Tasks\HPCeeScheduleForJoellen.job
2014-09-22 00:08 - 2009-07-14 00:13 - 00780156 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-19 10:52 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-09-18 18:06 - 2014-07-17 07:46 - 00000000 ____D () C:\ProgramData\Virtualized Applications
2014-09-15 23:09 - 2011-07-19 05:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (English)
2014-09-15 23:02 - 2012-04-22 15:51 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-15 23:02 - 2011-07-24 19:05 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-08-28 18:19 - 2011-07-19 01:17 - 00000000 ____D () C:\Users\Joellen\AppData\Roaming\TP
ZeroAccess:
C:\$Recycle.Bin\S-1-5-21-772605068-1663628801-3090605291-1000\$ac4e1da0b1b31fd6d68092d262c633d8
Some content of TEMP:
====================
C:\Users\Joellen\AppData\Local\Temp\avguidx.dll
C:\Users\Joellen\AppData\L

RELEVANCY SCORE 200
Preferred Solution: Svchost.exe Extreme Memory Usage Crashes Computer When Computer Idle

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Svchost.exe Extreme Memory Usage Crashes Computer When Computer Idle

Read other 16 answers
RELEVANCY SCORE 162.8

Hi,
 
I am currently experiencing a problem that started just a few days ago where the svchost.exe process keeps taking up memory on my computer even when there isn't anything active and continues to grow to taking up to 99% of memory before it crashes/freezes the computer and it has to be restarted then several times a day to clear the memory back down but within a few hours or sometimes less the memory will get exhausted.
I was able to download the FRST tool and I have the following results, so hopefully this will help someone to be able to help me with the following problem:
 
Thanks for your help, time and efforts it is appreciated and here are the following 2 logs from FRST:
 
 
 
 
Addition.txt
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-09-2014
Ran by Joellen at 2014-09-26 19:04:45
Running from C:\Users\Joellen\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: AVG Internet Security 2012 (Enabled - Up to date) {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
AS: AVG Internet Security 2012 (Enabled - Up to date) {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: AVG Internet Security 2012 (Enabled) {621CC794-9486-F902-D092-0484E8EA828B}
==================== Installed Programs =======... Read more

A:Svchost.exe Extreme Memory Usage Crashes Computer When Computer Idle

Hi there,please run Combofix:Please download Combofix (by sUBs) and save it to your Desktop.Disable the realtime-protection of your antivirus and anti-malware programs because they might interfere with the scan.Start Combofix.exe and follow its instructions.Do not use the computer while the scan is running. This may cause the program to stall.When finished, a log file will be displayed (that can also be found at C:\Combofix.txt).Please copy and paste the contents of this file into your next post.Note: If you receive an error "Illegal operation attempted on a registry key that has been marked for deletion." after the scan, just restart the computer.(You can find more detailed instructions in this guide on using Combofix.)

Read other 13 answers
RELEVANCY SCORE 92.8

I have an EEEPC netbook model 1025c which has 1Gb memory and came installed with Windows 7 starter. From the start it ran poorly until I disabled Aero and basic themes - it is now on "classic" I believe and looks ugly but is now actually functional!

One remaining problem is that it consumes 90% of the 1Gb just sitting there. Actually it's more like 99% of the memory on Task Manager. Firefox keeps stalling and completely freezes for 1-2 minutes on heavy pages (e.g. bbc news).

I disabled superfetch and prefetch but this had ZERO effect on the memory usage, despite what I've read in many places.

The ony thing that "works" - in the sense that memory usage is lower and Firefox runs smoothly - is using Wise Memory Optimizer to free memory when it gets above 50%. It's annoying to run an extra process to counter other processes that are killing this little computer. I would rather disable whatever Windows7 is doing to fill up the memory.

Clearly Windows7 can run fine using only 500Mb (because that's what I set it to on Wise Memory Optimizer). So what is using all the extra memory? How can I run a minimal version? Superfetch doesn't seem to be the culprit.

A:90% memory usage at idle - computer freezes

Post a screenshot of Task Manager - Performance tab, without Wise Memory optimizer running.

Read other 2 answers
RELEVANCY SCORE 92.8

Hello,
 
This computer has started showing symptoms similar to what happened to our other computer. (see thread here: http://www.bleepingcomputer.com/forums/t/553407/multiple-dllhostexe-com-surrogate-instances/)  I am seeing CPU usage of between 20% to 70% when the computer is not being used.  I also see multiple dllhost.exe *32 and dllhst3g.exe *32 processes running.  This computer runs Windows 7, and has the free version of AVG.
 
Please advise as to next steps.
 
Thank you -

A:Suspicious CPU and memory usage when computer is "idle"

You may be infected with Poweliks which typically affects the ability to browse or download files using Internet Explorer and causes PowerShell error alerts. Task Manager typically shows numerous occurrences of (COM Surrogate) dllhost.exe or dllhst3g.exe. If using a 64-bit version of Windows, then these entries will be listed as dllhost.exe *32 or dllhst3g.exe *32. These processes are known to spawn and consume a large amount of system resources as described here.If you are having trouble downloading files with Internet Explorer, follow these instructions to re-enable downloads/reset all Security zones to default.Please download ESETPoweliksCleaner and save it to your Desktop Double-click on ESETPoweliksCleaner.exe to start the tool.Read the terms of the End-user license agreement and click Agree if you agree to them.The tool will run automatically. If the cleaner finds a Poweliks infection, press the Y key on your keyboard to remove it...If Poweliks was detected "Win32/Poweliks was successfully removed from your system" will be displayed.Press any key to exit the tool and reboot your computer...The tool will produce a log in the same directory the tool was run from.Copy and paste the contents of that log in your next reply.Note: If the log is too long...you may need to split it and use multiple replies in order to post all the information.

Read other 7 answers
RELEVANCY SCORE 92.4

Svchost netsvcs is maxing out my memory for up to 1 hour every day, sometimes more than once a day, this has been going on for half a year i have tried to solve this on my own by reading other resolved threads such as disabling superfetch, but none of them have helped.

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: AMD C-50 Processor, AMD64 Family 20 Model 1 Stepping 0
Processor Count: 2
RAM: 1642 Mb
Graphics Card: AMD Radeon HD 6250 Graphics, 384 Mb
Hard Drives: C: Total - 219243 MB, Free - 117567 MB; D: Total - 14966 MB, Free - 1662 MB; E: Total - 4055 MB, Free - 1108 MB;
Motherboard: Hewlett-Packard, 3577
Antivirus: Microsoft Security Essentials, Updated and Enabled
 

A:Solved: svchost netsvcs extreme memory usage

Read other 12 answers
RELEVANCY SCORE 85.6

Hello. Something is wrong with svchost.exe. It slowly increases in memory usage until it eventually crashes and restarts the process. Nothing seems to be effected by it crashing, but my memory usage stays high. A virus scan comes up clean, however I do get something from RogueKiller.
 
RogueKiller V9.2.12.0 (x64) [Sep 23 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com
 
Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Sean [Admin rights]
Mode : Scan -- Date : 09/24/2014  12:18:03
 
¤¤¤ Bad processes : 3 ¤¤¤
[Proc.Svchost] svchost.exe -- C:\Windows\system32\svchost.exe[x] -> [NoKill]
[Proc.Svchost] svchost.exe -- C:\Windows\SysWow64\svchost.exe[x] -> [NoKill]
[Proc.Svchost] svchost.exe -- C:\Windows\System32\svchost.exe[x] -> [NoKill]
 
¤¤¤ Registry Entries : 0 ¤¤¤
 
¤¤¤ Scheduled tasks : 0 ¤¤¤
 
¤¤¤ Files : 0 ¤¤¤
 
¤¤¤ HOSTS File : 0 ¤¤¤
 
¤¤¤ Antirootkit : 0 (Driver: LOADED) ¤¤¤
 
¤¤¤ Web browsers : 0 ¤¤¤
 
¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0:  +++++
--- User ---
[MBR] 50a50bb6... Read more

A:svchost.exe memory usage climbing and then crashes.

Just crashed again. Here's what it looks like

 
Here's what it says
 
Problem signature:
  Problem Event Name: APPCRASH
  Application Name: svchost.exe
  Application Version: 6.1.7600.16385
  Application Timestamp: 4a5bc3c1
  Fault Module Name: ieframe.dll
  Fault Module Version: 11.0.9600.17280
  Fault Module Timestamp: 53f26cbd
  Exception Code: c0000005
  Exception Offset: 0000000000003fdf
  OS Version: 6.1.7601.2.1.0.256.1
  Locale ID: 1033
  Additional Information 1: df1c
  Additional Information 2: df1c3767f71a3d3480d9ae412afe513f
  Additional Information 3: 8cf4
  Additional Information 4: 8cf48c95428503ec510caa714a5e1ae1
 
Read our privacy statement online:
  http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409
 
If the online privacy statement is not available, please read our privacy statement offline:
  C:\Windows\system32\en-US\erofflps.txt

Read other 11 answers
RELEVANCY SCORE 80

Windows 7 Enterprise 64bit
Clean installation to windows 7 from Windows XP professional
Hardware 18 months old
OS installed 2 weeks ago

I am currently facing the lovely BSOD error. The computer was recently upgraded from windows XP to Windows 7 enterprise 64bit , this was a fresh installation from XP. The computer originally came with pre installed with Windows 7 installed but was downgraded to XP to meet company IT requirements. We have now been given the go ahead to trial windows 7. However after installation we are now facing issues of very random BSOD moments. Sometimes while using access or excel. At other times the computer could be totally idle. I would like to mention that our IT team upgraded the RAM in the computer from 4gb to 8gb prior to the Windows 7 installation. I do have a feeling that there is an issue with the memory which is causing this issue. I have attached my BSOD zip pack and would be very appreciative if one of the guru's could assist me on the matter.

Thanks

Wrigh2uk

A:BSOD - Crashes while computer idle/not idle (Unpredictable)

perfmon /report shows that these critical chipset drivers aren't installed:





Quote:
Symptom:[IMG]res://wdc.dll/error.gif[/IMG]
Device drivers are not installed.Cause:A driver has not been installed for this device preventing it from working properly.Details:The device driver for PCI Simple Communications Controller has not been installed. This device will not be available until the correct device driver is installed.Resolution:1. Try installing the drivers using Windows Update.
2. Install the drivers that are on the installation media that came with the device.
3. Check with the manufacturer for an updated driver.Related:Explanation of Error Codes Generated by Device Manager

Symptom:[IMG]res://wdc.dll/error.gif[/IMG]
Device drivers are not installed.Cause:A driver has not been installed for this device preventing it from working properly.Details:The device driver for PCI Serial Port has not been installed. This device will not be available until the correct device driver is installed.Resolution:1. Try installing the drivers using Windows Update.
2. Install the drivers that are on the installation media that came with the device.
3. Check with the manufacturer for an updated driver.Related:Explanation of Error Codes Generated by Device Manager


If needed the PnP ID's for these devices are:
Win32_PnPEntity.DeviceID="PCI\\VEN_8086&DEV_3B64&SUBSYS_304B103C&REV_06\\3&21436425&0&B0"
Win32_PnPEntity.DeviceID="P... Read more

Read other 3 answers
RELEVANCY SCORE 79.2

My computer crashes every so often when I leave it idle and says this and reboots. Its been doing it ever since I reformatted my computer.
 
http://postimg.org/image/euxq6llfp/
 

Read other answers
RELEVANCY SCORE 75.6

I don't have much running in my processes, but I just noticed a few days ago I can hear my RAM squeaking away like when the computer is really trying to work hard like when I'm processing video or something, but now it's doing it all time. Under the task manager it says my CPU Usage is 50% constantly. I ran a full scan with Kaspersky and it didn't find anything, I have a hijack this log if it helps. Any ideas?

Thanks!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:18:30 PM, on 9/5/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\nvraidservice.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE
C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
C:\PROGRA~1\MICROS~3\rapimgr.exe
C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe
C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\W... Read more

Read other answers
RELEVANCY SCORE 74.8

I'm not sure if it's a virus or not, but my computer, after (and I timed it) exactly 1 minute of idle time, my CPU usage skyrockets to 99-100%, videos get choppy, my fans go full blast, and every time I try this with task manager open, programs with names like "fdkljgs.exe" start up. Upon any use of the computer, even a slight movement of the mouse, the programs disappear, videos run smoothly, the fans slow down, and everything seems to go back to normal. I can't watch movies without moving the mouse constantly, and it's awful!

None of my virus protection has been able to deal with it, nor has Combofix. I'm at a loss for what to do!

Please help!
 

Read other answers
RELEVANCY SCORE 74

I have 2 problems anyway.. one is a little minor so i'll start with that.. Sometimes I am unable to turn up and down my volume control on my laptop i cant use the keyboard and if i try to access the menu from the control panel It just freezes.
I get some error dll message or something it's been like that for a while.
Yes I am using classic view as well and I have to reboot to make it work again.

my second pronlem is my computer seems to crash if i leave it idle and dont touch it for about 10 minutes and come back to it..
I used to think it was the screensaver so i increased the time to 30 minutes but after about 10 minutes same problem.. computer goes dead silent and notihng happens.. I got a disk check one of the times I turned it back on.

any idea how to solve any of these? thanks

A:Computer crashes if idle for a while

the problem persists constantly and there seems to be nothing on the computer that will help..

a disc problem? i dont even get a blue it just stops.

Read other 8 answers
RELEVANCY SCORE 74

Hey everyone. So my computer has been crashing sporadically whenever I leave the computer alone (sometimes it happens within a few minutes, other times a few hours). It has never done so while I was actually using it. Whenever I do come back after a crash, I turn on my monitor and move my mouse but nothing happens and there is no signal going from the computer to the monitor. The fans are still spinning and I can open the optical drive etc., but I can't get my computer to send a signal. A fraction of the time, I can get the computer to reboot and get an error log but most of the time I have to manually restart to get my comp working again. I have attached the .dmp files I have managed to get. Temps seem fine and I can't figure out what's going on...

Info:
Windows 7 Ultimate Retail
Hardware about 1 month old

A:Computer crashes while idle

Problematic Software:
Code:
Start Menu\Programs\ASUS\AI Suite II Public:Start Menu\Programs\ASUS\AI Suite II Public
Recommend removing your ASUS utilities through Start Menu -> Control Panel -> Uninstall a program. They can provide software interfaces with the hardware for overclocking, and even when the overclock is not enabled, that interface can cause instability.
You have an EnTech softEngine x64 driver that is out of date. If you do not need the software, remove it. If you do need the software, update it, or contact the support company for help.
Please remove any CD/DVD virtualization software, such as Daemon Tools/Alcohol 120%, as they use a driver called sptd.sys that is known to cause BSODs. Use add/remove programs to remove the software. After removing the software, use the sptd.sys uninstaller to remove sptd.sys from the system.

I prefer TotalMounter as my CD/DVD virtualization software as it allows me to burn images to a virtual CD/DVD if I just want an ISO file instead of a disc, and it is free.

Many use MagicISO - Convert BIN to ISO, Create, Edit, Burn, Extract ISO file, ISO/BIN converter/extractor/editor as well, which is also free.
Crashes are pointing to your Razer DeathAdder USB Optical Mouse Driver or your graphics card/graphics card drivers.
You have a 0x124 hardware bugcheck. If the system is still under warranty, I would recommend sending it in to have diagnostic tests done and any bad hardware replaced.



   Warning ... Read more

Read other 7 answers
RELEVANCY SCORE 73.6

Hi,
 
I am helping my parents troubleshoot their computers.  My feeling is that they are both infected with the same virus/trojan but I can find it or figure out what is going on.  
 
The each have identical laptops and both are experience identical problems.  Both are running Avast! and both systems are not turning up any discovered viruses or trojans during scans.  I am on the verge of completely refronting both of their laptops and am really hoping I can avoid having to do that.  I suspected that maybe they were both infected with "poweliks" but the below FRST shows (at least I think so) that neither are infected with that trojan.  I am now thinking its a memory leak on some recent driver/app update - but either trojan or memory leak, I am not finding it.
 
Symptoms:
After a clean reboot, within 24 to 48 hours both systems begin to get very sluggish, both audio and video starts to skip and lag, both mice bounce around like crazy when trying to move the pointer.  After about 72 hours the laptops simply freeze to the point that they have to pull the batteries to get them to shut off.  
 
I had my Dad run FRST on his computer, below are the results:
 
FRST Scan results: FRST.txt
=================================================
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2015
Ran by Preston (administrator) on PRESTON-HP on 13-05-2015 10:01:44
Running from C:\Users\Preston\Favorites\D... Read more

A:Memory leak or trojan causing extreme system slowness and high memory usage.

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below. 
start

CreateRestorePoint:
CloseProcesses:

HKLM-x32\...\Run: [] => [X]
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File
CHR HKU\S-1-5-21-3416613266-1144362595-631789162-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.yahoo.com?fr=hp-avast&type=avastbcl
HKU\S-1-5-21-3416613266-1144362595-631789162-1000\Software\Microsoft\Internet Explorer\Main,Start Page =https://www.yahoo.com?fr=hp-avast&type=avastbcl
HKU\S-1-5-21-3416613266-1144362595-631789162-1000\Software\Microsoft\Internet Explorer\Main,Search Page =http://us.yhs4.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
... Read more

Read other 14 answers
RELEVANCY SCORE 73.6

After a few days of being on and resuming a session by opening the lid, Windows Hello seems to crash my system. I open the lid, get logged in, at which point the IR camera remains active, telling me something's wrong. The Taksbar no longer responds properly, either, and the internet no longer functions. I then ctrl+alt+delete and reboot, which takes a lot longer than normal. Here's the log for the most recent event: Faulting application name: svchost.exe_WbioSrvc, version: 10.0.17763.1, time stamp: 0xb900eeffFaulting module name: wbiosrvc.dll, version: 10.0.17763.348, time stamp: 0x3ff8f909Exception code: 0xc0000409Fault offset: 0x0000000000020e5dFaulting process id: 0x1038Faulting application start time: 0x01d51e4261864aacFaulting application path: C:\WINDOWS\system32\svchost.exeFaulting module path: c:\windows\system32\wbiosrvc.dllReport Id: 2866497f-caf3-4607-9a19-b1a0bcc40fceFaulting package full name:Faulting package-relative application ID:  Any help would be apprecitated.

Read other answers
RELEVANCY SCORE 72.8

Hello,
first of all sorry if this article is in the wrong section i thought that i would get better support about my problem here. So let me begin, i just changed my graphics card from a problematic 6870 to a gtx 760. I love it so far, also i clean installed Windows 8.1 Pro instead of my old Win7 Ultimate. As for my problem, i was downloading something with uTorrent around 18gigs, i left the PC for about 2 hours or more and when i got back i had no signal and the PC was not responding to anything, it had crashed...i thought that this happened because of the (Disable monitor after some time setting in the power profile of Win8.1) so i changed it to no disabling at all. But today i left it again to download the rest of the gigs and when i got back it had crashed. I am really frustrated. (extra info: i recently changed my rams to slots 2-4 in order for my cooler to fit properly, i searched the web and i saw a recommendation about removing Asus Utilites i use Asus gpu tool do not know if i should remove it)
Thank you

A:Computer crashes on Idle state.

Anyone, maybe @Arc ? Someone?

Read other 5 answers
RELEVANCY SCORE 72.8

Hi,

OK i'm going to try and be as detailed as possible with my problem...

When I leave my computer idle it blue screens after about 10-20 minutes. It only does this when there are no full-screen programs open e.g. if I leave Dragon Age running it doesn't crash. I'm ruling out an oveheating problem because of this.

The error message I get when the computer reboots is always slightly different but the BCCode is always 50.

If it is a background program the only things I can think of are Skype (unlikely I think I've had that on longer than I've had this problem) or the Impulse Dock (again think I've had it longer than the problem).

There is one possible driver problem. There is an exclamation mark next to 6TO4 Adapter but I don't think this is the problem because I found a Microsoft report that said that this isn't actually an issue.

Thanks

A:[SOLVED] Computer Crashes when Idle

Here's a link to more info on the STOP 0x50 error: http://www.carrona.org/bsodindx.html#0x00000050

For the 6to4 adapter - right click on it and select "Uninstall".
Then reboot the system - most likely it won't even come back (it's for converting stuff that uses IPv6 to IPv4 when it moves out onto the network).

Please provide this information for us to work with:
http://www.techsupportforum.com/1871981-post2.html

Read other 12 answers
RELEVANCY SCORE 72.8

my mini computer is a funny one, i can be sitting working on it for hours on end without any hick ups but always whenever i leave it for a while to go do something else, when i come back it has crashed, automatically rebooted so no bluescreen. but it only crashes like this if i leave it idle, turned on.

What processes does windows start when the computer is not engaged by a user? because it has to be something like that which makes it fault and reboot right?

A:Idle computer mysterious crashes

Do you have error reporting enabled? If so you can check their for the reason for shut down. and post a screen shot of the report. Also even though you built your own system we still need you to fll out your system spec fully in user cp.Thanks

Read other 6 answers
RELEVANCY SCORE 72.4

Hello, Currently one of my svchosts goes to 90-100% computer usage when ever there is some sort of sound played. Iv looked all of the other posts on here and nothing seems to help, but iv tried to windows restore/virus scan/ malwarescan and nothing =/. So if you guys could help it would be greatly appreciated. I have SP2 xp proAMD Athlon 64 processor 3800+2.0gb ramnvidia geforce 9800gtThanks~ Kman

A:90-100% computer usage svchost.exe

Search your hard drive for this file:wscntfy.exePost back what you find.

Read other 15 answers
RELEVANCY SCORE 72

Windows 7 Enterprise
-32bit
-age of system: 2 month old
-age of OS: 2 month old (never reinstalled)

So I just had basically 3 crashes in an hour just a while ago. The first one happened while watching a youtube video and the whole computer froze leaving a sound loop had to make a forced restart. The second one was a BSOD, while the computer was in idle. I was able to use the .exe file here to create the zip file. But about 10-15 seconds after it finished the computer froze again, and I had to force a restart.

3 crashes in 1 hour, that's the most crashes I've ever seen for my computer.

A:BSOD while computer in idle + 2 crashes in 1 hour

**Bump**

Read other 8 answers
RELEVANCY SCORE 72

Hoping someone can help.

Please excuse me if I use incorrect terms or don't quickly understand as I am a Mac person who uses PCs at work.

I have a MacPro Early 2009 running Windows 7 Pro 64bit via BootCamp.

Things were going fine until my work changed software in office. While creating a partition on the SSD and installing the image on to the partition, I now have constant crashes either when computer goes idle after the screen shuts off per power savings settings or if using the computer occurs between 35-40 minutes after the computer restarts. In fact it occurred writing this post.

I have never been able to see the BSOD, but either the screen does not wake with the keyboard, or if I do not allow the computer monitor to go off, clicking on the cursor either does not work or the cursor is not visible. Only a power button restart recovers.

Recently I have now begun getting error dialog boxes saying different things. One more repeated message is "Desktop Window Manager has stopped working and was closed" but when I look it is running. I have also begun receiving messages like "javaw.exe - Bad Image" from Explorer.exe or some other program - Bad Image.

I have tried a fresh install of Windows 7 Pro 64bit on a reformatted drive but the crash still occurs.

Any insight would be appreciated.

Thanks.

A:Minidump ntoskrnl.exe crashes w/ idle computer or at 35-40 min w/ use

Code:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

WHEA_UNCORRECTABLE_ERROR (124)
A fatal hardware error has occurred. Parameter 1 identifies the type of error
source that reported the error. Parameter 2 holds the address of the
WHEA_ERROR_RECORD structure that describes the error conditon.
Arguments:
Arg1: 0000000000000000, Machine Check Exception
Arg2: fffffa8015759038, Address of the WHEA_ERROR_RECORD structure.
Arg3: 0000000000000000, High order 32-bits of the MCi_STATUS value.
Arg4: 0000000000000000, Low order 32-bits of the MCi_STATUS value.

Debugging Details:
------------------
BUGCHECK_STR: 0x124_GenuineIntel

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT

PROCESS_NAME: System

CURRENT_IRQL: 0

ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) amd64fre

STACK_TEXT:
fffff880`035f56f0 fffff800`044c2cb9 : fffffa80`15759010 fffffa80`13bbcb50 00000000`00000000 00000000`00000000 : nt!WheapCreateLiveTriageDump+0x6c
fffff880`035f5c10 fffff800`043a3ea7 : fffffa80`15759010 fffff800`0441d2d8 fffffa80`13bbcb50 00000000`00000000 : nt!WheapCreateTriageDumpFromPreviousSession+0x49
fffff880`035f... Read more

Read other 1 answers
RELEVANCY SCORE 72

This is a weird problem that showed up in my laptop over the past few months, but I'm just now heading here to try to get some insight on the problem.

So when I first got this computer about two and a half years ago, it could edit/render/encode HD videos with little sweat. Now, it can sorta still do that. The only quaint problem is that it tends to crash if I go AFK for about 10 minutes or so while it is doing so. I can sit while rendering a video and browse the internet with no problem--I don't even really feel the laptop getting very warm, let alone crashing. However if I am to leave it alone while I go to do something else, I always come back to it turned off.

When I reboot, I get the typical "Windows did not shut down correctly" spiel.

It's just weird.. I mean I can work around it, but I wouldn't mind knowing what's causing this and if it's fixable. I even set my computer to where it never dims/blanks the screen, thinking that was causing it, but to no avail.

Thanks in advance.

EDIT:

It should be noted that the computer is perfectly fine if left idle while not doing something strenuous like rendering.

A:Computer Crashes When Left Idle if Being Used Extensively

You may be getting a blue screen crash without knowing it, but that should leave it in the login screen, not turned off. Even if you are not getting a blue screen, the event logs may help determine the problem. Follow the http://www.sevenforums.com/crashes-d...tructions.html to provide us with any .dmp files and any event logs.

Read other 7 answers
RELEVANCY SCORE 72

okay. I'm running a windows 7 64 machine with an Intel Core i5 [email protected] 4 gigs of memory, ACPI x64, NVIDIA GeForce GTS 250...
ASnd the thing is my rig is sucking up 50-60% physical memory, doing nothing. I've turned off as many services as i can that I don't need, I've run MBAM and MBAR and MSRT and avast! and AVG scans to find nothing. I've changed from Zone Alarm and Avast!, to Comodo and AVG.

I still can't find this thing. I need help. I got Hijack this, and then I realized I don't even know what I'm looking at. 26 instances of missing or lost files. And now it looks like there's a new drive (E) on my rig that I didn't put there with 99mb of space on it...

Sooo. What should I do? I can usually stumble my way through this kind of thing, but I'm at a loss. OH! an instance of svchost.exe is currently at 175,812k and I just restarted. I dunno what that means.

A:57% physical memory usage at idle, no cpu usage.

Please do the following:Download the appropriate version for your system of the Farbar Recovery Scan Tool and save it to a flash drive. (Choose the correct version depending on which architecture operating system you are using, 32bit (x86) or 64 (x64) bit)Plug the flashdrive into the infected PC.Enter System Recovery Options. To enter System Recovery Options from the Advanced Boot Options:Restart the computer.As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.Use the arrow keys to select the Repair your computer menu item.Choose your language settings, and then click Next.Select the operating system you want to repair, and then click Next.Select your user account and click Next.To enter System Recovery Options by using Windows installation disc:Insert the installation disc.Restart your computer.If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.Click Repair your computer.Choose your language settings, and then click Next.Select the operating system you want to repair, and then click Next.Select your user account an click Next.On the System Recovery Options menu you will get the following options:Startup RepairSystem RestoreWindows Complete PC RestoreWindows Memory Diagnostic ToolCommand Prompt[*]Select Command Prompt[*]In the command window type in notepad and press Enter.[*]The notepad opens. Under File menu select Open.[*]Select... Read more

Read other 12 answers
RELEVANCY SCORE 72

Hi all, hope you can help.

Every so often, when listening to online radio streams/playing games etc my computer just goes crazy. I get a lot of hard drive 'chatter' and lots of fan noise and everything slows to a crawl. My music will start jumping and skipping and there is a long delay between me clicking the mouse and the action happening. It happens when no other programs (for example, my AV/AS) are due to scan. When I look at my Task Manager the two biggest eaters of memory usage are fm.exe (game, it normally eats a load but makes no substantial difference to the comp speed) and ekrn.exe (something to do with my AV, not quite sure what it actually does though)

I am running Windows MCE SP3 and am using NOD32 anti-virus and Sunbelt CounterSpy anti-spyware. The definitions on both are updated daily and both scan daily. I have also defragged the comp and do so weekly. The other programs I use are CCleaner and Glary Utilities, both fairly regularly to clean up my comp when I was working as an internet researcher, but less often now.

I do not get any error messages/BSOD's or actual freezes. Everything just slows right down. Could I have picked up a form of malware/virus that my AV/AS isn't picking up? Could one of my previous spring cleans have been too aggressive? Or is it simply too much load for my comp (2 year old Dell)? It is 3MHz, 1G RAM, kinda your bog standard media comp from 2007.

Your thoughts and advice are greatly appreciated as it's starting ... Read more

A:Computer is apparently being scanned - high CPU usage/memory usage

When you experience or encounter strange behavior, always check for new, unknown or suspicious processes in Task Manager.Most of the processes in Task Manager will be legitimate as shown in these links.List of common system processes found in XP's Task ManagerCommon system processes found in XP's Task ManagerTop System ProcessesAnytime you come across a suspicious file or one that you do not recognize, search the name using Google or the following databases:BC's Startup Programs DatabaseSystemLookup StartupList IndexFile Research CenterProcessLibrary.comDetermining whether a file is malware or a legitimate process sometimes depends on the location (path) it is running from. One of the ways that malware tries to hide is to give itself the same name as a critical system file. However, it then places itself in a different location on your computer. Another techinique is for the process to alter the registry and add itself as a Startup program so that it can run automatically each time the computer is booted. A file's properties may give a clue to identifying it. Right-click on the file, choose Properties and examine the General and Version tabs.Tools to investigate running processes and gather additional information to identify them and resolve problems:AnVir TaskManager FreeProcess ExplorerSystem ExplorerProcessHackerProcess MonitorsvchostViewerThese tools will provide information about each process, CPU usage, file description and its path location If you right... Read more

Read other 1 answers
RELEVANCY SCORE 71.6

I'm at a loss to what's happening, I keep getting BSOD while doing various activities. All BSOD seeem to be associated with this exe, ntosknl.exe. I have already done a complete install win7 pro X'3 on different hard drives same error, I have run memtest86 on my memory, I have used a dianostic program from Western Digital to check my hard drives. I had several dump files but for some reason the where deleted.

Nost that were listed had to do with IRQ_NOT_LESS_OR_EQUAL. Could really use help. Attached is the file from windows seven forum diagnosstics tool, hope it helps

A:Idle computer crashes to BSOD, also happens randomly while surfing web

Please post the following report before we proceed:Windows Genuine and Activation Issue Posting Instructions

Read other 9 answers
RELEVANCY SCORE 71.2

My computer has gotten horribly slow and I'm going through the 39-step optimization checklist on this site.

In the meantime I would like to know if my memory usage is too high: 1 Gb with no programs running and the computer just sitting there; 1.59 Gb with these running:

Firefox, Opera, Spotify, Xlporer2 (3rd-party file manager/explorer)

I'm attaching lists of the processes from these two cases.

Thanks

A:Is 1 Gb memory use at idle OK? (slow computer)

  
Quote: Originally Posted by catalogue


My computer has gotten horribly slow and I'm going through the 39-step optimization checklist on this site.

In the meantime I would like to know if my memory usage is too high: 1 Gb with no programs running and the computer just sitting there; 1.59 Gb with these running:

Firefox, Opera, Spotify, Xlporer2 (3rd-party file manager/explorer)

I'm attaching lists of the processes from these two cases.

Thanks


Firefox seems to be using around 312mb of ram. Try closing it when you don't need it. Have you gone into msconfig and disabled startup programs you don't need? If not, go to start, type in msconfig and press enter. Then, go to the startup tab and disable everything you don't need. If you have a question on an item to disable, please feel free to post it.

Read other 9 answers
RELEVANCY SCORE 71.2

Hi everyone,

I have an Asus laptop (N55SL) with Windows 7 Home Premium (64 bit) that I upgraded from 4Gb of RAM to 12 Gb about a year ago. I reinstalled the OS three months ago, and I tried to keep the system as free from cluttering programs as I could.

Since the last couple of days, my laptop started to act strange after a moderately long uptime : programs were incredibly slow to start up, and sometimes they didn't even start up at all. In some cases, Windows would even display an error message stating that there was not enough available memory and the OS became so unstable that I had to reboot it.

I checked the Resource Monitor for the RAM consumption and saw that it slowly made its way to 12 Gb, slowing everything down in the process and eventually forcing me to reboot. Of course, my computer has never acted this way before, and, while I understand that empty RAM is unused RAM, this is definitely an issue since it slows everything down to the point of my computer being unusable without a reboot.

As far as my knowledge goes, it seems to be a case of memory leak, but I lack the skills to pinpoint the offending program : how should I proceed to sort this thing out ?

Thanks in advance, let me know if I should provide you with other information about this issue.

A:Possible memory leak on an idle computer

Post a screenshot of Task Manager - Performance tab when the problem occurs. This contains important information not seen elsewhere.

Read other 1 answers
RELEVANCY SCORE 70.8

Hi there,
as the titles says, i am having an unusually high usage of cpu from those 2 processes (25-80%) on my quad core 4.3 Ghz processor,which i highly doubt is normal. another weird thing i noticed is that it's periodic, meaning it would be very high during the day, but during the night it's fine! i am afraid my device has been infected with a bitcoin miner or something!
I am using Bitdefender free antivirus, and i also scanned with malewarebytes antimaleware to no avail, so i went ahead and did a FRST scan, here are the results
any input is highly appreciated, thanks a lot.
 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2016
Ran by Scalpel (administrator) on SCALPEL-PC (03-09-2016 17:34:48)
Running from C:\Users\Scalpel\Desktop
Loaded Profiles: Scalpel (Available Profiles: Scalpel & FL2-MAN)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Bitdefender) C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vis... Read more

Read other answers
RELEVANCY SCORE 70.8

Svchost.exe is making my comuter run at nearly full usage. I have tried searching the net for information, and I mostly come up with stuff about the blaster worm. But I have run Norton, Spybot, and Adaware, and they are all saying nothing. So I dont think it is a virus, though I may be wrong. Can someone tell me what is wrong? Thanks!

A:I am having problems with my computer running at 100% usage...it is svchost.exe

http://ask-leo.com/svchost_and_svcho..._and_more.html

http://support.microsoft.com/?kbid=314056

Is the username for the program...system, network service, or local service?

Read other 9 answers
RELEVANCY SCORE 70.8

Everytime i open My Computer, theres a 3-5 seconds lag.
Would appreciate it if someone can help me
Pc specs
Windows 7 Home Premium
Service Pack 1

Ran ComboFix. Here's the log
ComboFix 16-01-07.01 - Owner 13/01/2016 21:04:06.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.60.1033.18.4095.1157 [GMT 8:00]
Running from: c:\users\Owner\Desktop\ComboFix.exe
AV: AVG AntiVirus Free Edition *Disabled/Updated* {4D41356F-32AD-7C42-C820-63775EE4F413}
AV: Microsoft Security Essentials *Disabled/Updated* {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
SP: AVG AntiVirus Free Edition *Disabled/Updated* {F620D48B-1497-73CC-F290-58052563BEAE}
SP: Microsoft Security Essentials *Disabled/Updated* {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2015-12-13 to 2016-01-13 )))))))))))))))))))))))))))))))
.
.
2016-01-13 13:08 . 2016-01-13 13:08 -------- d-----w- c:\users\Default\AppData\Local\temp
2016-01-13 08:27 . 2016-01-13 08:27 -------- d-----w- c:\program files (x86)\ESET
2016-01-13 08:25 . 2015-11-25 11:02 11154520 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{4A73714F-0620-417A-AABE-5AD018D51CCA}\mpengine.dll
2016-01-12 09:09 . 2016-01-12 15:21 -------- d-----w- c:\users\Owner\AppData\Local\CrashDumps
2016-01-12 09:04 . 2016-01-12 09:04 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2016-01-11 05:58 . 2015-11-25 11:02 11154520 --... Read more

Read other answers
RELEVANCY SCORE 70.8

Alrighty, I've got a bit of a perplexing problem. My Four(ish) month old laptop has taken on a new, annoying bad habit. Occasionally, when left to idle for longer than about 30 minutes, it'll quietly blue screen, restart itself, to the user selection screen and then be completely fine. However, it isn't consistently BSoDing. Often, I can leave it set for hours and hours while I do chores or work on something else, and it will happily sit still and wait for my return.

On the flip side, it never BSoDs when I'm using it. On days when I have to do a lot of work, or even extended WoW sessions with friends, it runs like clockwork for hours on end.

I've never had any major errors, I frequently scan for spyware (adaware), viruses (avast!), and nothing other than a few cookies (in adaware) ever comes up. My computer's temperature consistently runs between 110F-128F, and if idling, usually between 100-110. I can't recall downloading or installing anything that would cause this.

While it isn't a major concern, it is annoying, and BSoDs are actually kind of serious. I checked to see if it was that silly screensaver that a few people on here had talked about, and unfortunately it isn't. Apparently I'm actually BSoDing.

Any tips, tricks, questions, and/or advice would be greatly appreciated.
PS: I figured due to the peculiar nature of this crashing, that it is probably a security issue, rather than something hardware related. If anyo... Read more

Read other answers
RELEVANCY SCORE 70

I'm new to tech forums because I can usually solve my problems from other peoples' posts but I have not been able to figure out this problem, so bear with me.

I noticed a couple days ago that my computer became extremely slow, so I opened up task manager and saw under Processes that one process called "svchost.exe" was taking up all the cpu. The cpu usuage was at a constant 100%. Now, Its my understanding that svchost.exe is a application that windows uses to execute .dll files. What I could not figure out how to do was see which .dll's this particular svchost was running. I tried right clicking on the process and going to "go to service(s)" but nothing is highlighted when it switched to the services tab (this goes for any process, though, any process i click "go to service" it does not highlight the service for some reason). However, it works the other way around, when I go to services and right click "go to process" it does work and show me the corresponding process.

So, I sorted all the services and went through every single running service and right-clicked on "go to process" for each one but none of the services corresponded with the specific svchost.exe that was using all the cpu. Is it possible for svchost.exe to run without a visible service?

I'm thinking it is a virus, or somekind of spyware because its become extremely diffuicult to fix and I can't even figure out what it is. My AVG Antivirus found nothing. Wh... Read more

A:SVCHOST.EXE making cpu usage at 100% and slowing computer to a crawl

Hi, run the following .zip file then right click on the returned .Bat file select "run as administrator" Restart computer. Have you installed all windows updates?

Attachment 84424

Read other 18 answers
RELEVANCY SCORE 70

Hi i hadnt installed anything new and attempted to get on my computer. there is a svchost.exe that even without anything running the computer is just sitting idle the svc memory usage is sitting at 150k... this is super extreme... it seems when i try and do anything it just locks the computer up and i cant do anything... the usage doesnt increase but the programs are very slow to respond. i saw another thread on this forum where it was said disabling auto updates may help but in my case it has not =( the services that it is affecting are as listed:
-AudioEndpointBuilder
-hidserv
-Netman
-PcaSvc
-SysMain
-TrkWks
-UxSms
-WlanSrvc
-wudfsvc

I havent installed anything new since it has started doing this it just started recently.. i noticed that i had lots of updates and i have attempted to go to service pack 1 for windows but it gives me an error. i tried to follow microsofts advice and downloaded the system update readiness tool but it didnt seem to help at all.. any tips at all would be GREATLY appreciated as i need to use this computer for both uni and personal tasks.

edit: Virus scan showed no infections.
 

A:Solved: SVCHOST.exe high usage and slow computer

Read other 16 answers
RELEVANCY SCORE 69.6

My memory usage is at 50% when no programs are running. I just downloaded several updates and I'm not sure if that has to do with it, but restarting after the updates was unusual and restarting generally now seems to take longer as if there's a delay in the process of getting to the sign-in screen.

I don't tend to look at my memory usage but I did a month ago in checking my virus scan. During that scan my memory usage was essentially flat at 500 MB or 25%.

Thanks

Added a shot of processes of all users while idle.

About 2.5 hours after posting I closed the installed programs window I was looking at and saw the desktop icons kind of flicker. I checked my memory usage at idle and it was down to 38%.

Restarted, back to 50%.

A:Memory Usage 50% at Idle

Sorry that you are having problem, but its easy to check
With system restore go back to pre update times. If memory is usage is back to normal that is the problem.
Now restore the updates one at a time, to find the culprit. Report back and lets see what we can do.
If uninstalling the upadates does not work, report back and we will test the memory and check for other possiblities.

Read other 27 answers
RELEVANCY SCORE 69.6

I have Windows 8 on an Asus laptop with 4 GB of RAM. I play the occasional game that isn't too hardware intensive.

Yesterday memory usage started becoming extreme. I'm looking at the task manager while it's idling with absolutely nothing opened and it will swing from anywhere from 40% to 50%. That's not normal, as far as i remember. If I crack open a browser like Google chrome that number will jump into the 80's.

In addition, upon startup absurd amounts of touchpad/touchscreen related processes will open. I had 50 duplicates of Asus SmartGesture running last time.

Do I have a virus or something? I've run a few different tools and they picked up and removed a few files, but it's still doing this.
 

Read other answers
RELEVANCY SCORE 69.2

Hello I have multiple svchost running in task manager one which causes high cpu and memory usage that start increasing when I connect to the internet. Also when I connect to the internet i get redirected to other sites. Sometimes when I reboot my computer I get a generic host process for win32 message. When I run my anti-virus program it says 0 threats detected but sometimes say PDF Malware: Pidief detected and quarantined but the problem still continue. I am new to the site and have little computer knowledge any help would be greatly appreciated. Thanks!

A:Svchost high cpu usage and memory usage

Hello breal,do these please,post the logs and update me.Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!Be sure to download TDSSKiller.exe (v2.4.0.0) from Kaspersky's website and not TDSSKiller.zip which appears to be an older version 2.3.2.2 of the tool.Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
Vista/Windows 7 users right-click and select Run As Administrator.If TDSSKiller does not run, try renaming it. To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.Click the Start Scan button.Do not use the computer during the scanIf the scan completes with nothing found, click Close to exit.If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.2.4.0.0_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C:).Copy and paste the contents of that file in your next reply.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to you... Read more

Read other 11 answers
RELEVANCY SCORE 69.2

In either IE or chrome, google crashes frequently. When it reopens it redirects to unwanted pages. My CPU usage is around 70% even when no processes are open.
Thanks in advance for your help!

DDS file:
.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.7601.17514
Run by Fred at 18:04:13 on 2011-12-15
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3067.1723 [GMT -6:00]
.
AV: CA Anti-Virus Plus *Enabled/Updated* {57B5C44D-AAB5-DBC9-741B-542BE5A132EA}
SP: CA Anti-Virus Plus *Enabled/Updated* {ECD425A9-8C8F-D447-4EAB-6F599E267857}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: CA Personal Firewall *Enabled* {6F8E4568-E0DA-DA91-5F44-FD1E1B727591}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_5f120bca41bba11b\STacSV.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\... Read more

A:Google redirects, crashes and high CPU usage when idle

Hi,* Please download Malwarebytes' Anti-Malware from HereDouble Click mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.In case you already used MBAM previously, please update it before proceeding with the scan. To do this, click the "Update" tab and click the "Check For updates" button.Once the program has loaded and updates were downloaded, select "Perform Quick Scan", then click Scan.The scan may take some time to finish,so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy&Paste the entire report in your next reply along with a fresh HijackThis log.Extra Note:If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.

Read other 12 answers
RELEVANCY SCORE 69.2

Windows 7 Ultimate computer is idle as everything is closed and I click on the Task Manager to check on
Performance and I note Memory been used is 1.22GB CPU usage fluctuating between 0 - 1%

Total Physical memory is 3GB
Cached 1378
Available 1831
Free 507

I clicked on the Resource Monitor and its showing 38% Used physical Memory

Is this how its supposed to be? Why so much being used up while I'm not using the computer?
How Can I minimize memory usage

Thanking you all in advance
 

A:Computer is idle but Task Manager shows huge memory used up

Read other 6 answers
RELEVANCY SCORE 69.2

Ram usage is about 13% when idlem at desktop.
Here is a copy of HijackThis Logfile:

Logfile of HijackThis v1.99.1
Scan saved at 2:33:36 PM, on 10/13/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
F:\Programs\Norton Ghost\Agent\VProSvc.exe
F:\Programs\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINNT\srvany.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
F:\Programs\Norton Ghost\Agent\GhostTray.exe
C:\Program Files\ASUS\Probe\AsusProb.exe
F:\Programs\Logitech\G-series Software\LGDCore.exe
F:\Programs\Logitech\G-series Software\LCDMon.exe
C:\WINDOWS\system32\ctfmon.exe
F:\Programs\Logitech\G-series Software\Applets\LCDClock.exe
F:\Programs\Logitech\G-series Software\Applets\LCDMedia.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\msiexec.exe
C:\Documents and Settings\Mike\Desktop\HijackThis.exe

R0 - HKCU\Sof... Read more

A:High Idle Memory usage...

Read other 14 answers
RELEVANCY SCORE 69.2

my computer uses 29 percent on idle my phsical memory is at i have a 32 bit
system 3GB RAM and 5 GB page file but why is the usage so high
and it climb to 35 percent if i have it on for a couple of hours
but it used to stay at 17 percent on idle i use cleanmem
they all start when i changed my account to a different one i delete the my previous account
all i want is to get the memory usage down to normal
 

A:high memory usage on idle

Read other 6 answers
RELEVANCY SCORE 69.2

Amount of information provided you can have a understanding of the system. Cannot figure out why using 2.08 Gb of memory at idle? Checking under Task Manager Performance. OS installed thru Elevated Command prompt at Language Option F-10. Hard Drives Clean All. H.D checked and verified.

Example: Tap/Start/Documents/Right Tap Favorites/Tap Location/Moved To Drive I: Moved the following folders: Down Loads, Favorites, My Documents, My Music, My Videos, My Pictures,

A.V. Norton Internet Security 2015 Running a Trial version looking for a good A.V. Turned off every possible option under advanced settings.

All software installed Auto Up-Dates disabled.

All of the hardware recently tested including memory with MemTest86_V5.00 10 Pass on each memory module then 10 Pass all modules installed.

System Specifications:

O.S. windows 7 Ultimate 64 Bit. Full administrator use. Tweaked the OS following NickN Guide for Flight Simulator X. All of the bells and whistles for the O.S. are disabled.

THE FSX COMPUTER SYSTEM: THE BIBLE - BY: NickN - SimForums.com Discussion

Computer Case CaseLabs Magnum 8 Double Wide

Case Fans x 11 Noctua NFS-12A 4 Pin connected to 7 Fan Headers on the M/Board controlled thru BIOS. Could take off the M/Board and connect to a Power Distribution Blocks. The 2 x fans on the NH-D14 connect to CPU fan header and AUX CPU Fan Header. Could this be using more memory resources? Fan Controller software none. Fan RPM is controlled thru the BIOS Only Advan... Read more

A:High memory Usage @ Idle

I don't see this usage as either unusual or abnormal.

Memory usage is always under the control of the system memory manager, the primary goal being to maximize overall system performance. It usually works very well.The system will always try to find some use for as much memory as possible, even if it is only of trivial use. Within reasonable limits the more memory you have, the more it will use. This memory usage is of course higher than necessary, and that is a good thing. The memory manager is using the large amount of memory available to improve performance. But if a large application needs more memory this usage will automatically be trimmed back, drastically if necessary. With 12 GB RAM that isn't likely to happen very often.

Don't be concerned over the low value for "Free" memory that may occasionally show. This number is of little importance and is often misunderstood. The value of importance is "Available" and that is very high. And that is good.

Don't be concerned that adding up the memory usage in the process list doesn't add up to total usage. It was never intended that it would. The default configuration doesn't show all process usage and there are major users of memory that are not processes, not all of which are shown in Task Manager.

Read other 9 answers
RELEVANCY SCORE 69.2

Just curious, my installation uses about 1,5GB of ram with only the microsoft security essentials and ATI catalyst open. If i kill every possible process the use drop to 1,2GB.
Is that normal in the 64 bits version? My another computer, a old sempron with 1GB of ram and using the x86 version, uses 500MB of ram.

A:7 x64 idle memory usage around 1.5Gb, normal?

It will use as much as it can and pre-fetches a lot of things it thinks you will use... that makes it faster and takes advantage of more memory. Don't worry, if you open some heavy software it will throw out some things it doesn't need. with other words, it actually takes advantage of the memory as opposed to XP. vista did the same thing, but did it less efficiently and used even more RAM. Out of my 8 GB vista consistently used 8 GB. Now W7 uses 2.5 GB with Word, Firefox and some little things open. It looks wasteful, but actually is more efficient and you paid for the RAM anyway. Not using it doesn't get you any money back :-)

Read other 9 answers
RELEVANCY SCORE 69.2

Hey guys, just installed a new Samsung 850 EVO SSD Dual Booting with Linux. Used what I believe is called a Retail Version of Windows 7 to avoid all the junk that was included with the Toshiba Disks. Seems recently Windows 7 is running at 50+% CPU and 30+% at Idle right after boot, is this normal for an SSD? And, I left it like this for like an hour just to see if it would calm down.

Right now running 82% CPU and 51% Memory with only Three Tabs open and nothing else...using Chrome. One my Yahoo Mail, Youtube music, This site and my Bookmarks Tab. I've looked around at what is running but nothing seems abnormal, any suggestions?

Nasty7

A:High CPU and Memory Usage at Idle

Hi,
This is windows updates time
Micro... has been playing cat and mouse on these download links so if they do not exist yet you might have to use the catalog to get them if the links don't work,
When manually installing updates you need to switch your update settings to Never check for updates and restart the machine first.

Make sure KB3020369 is installed
Win-7 32 bit
https://www.microsoft.com/en-us/down....aspx?id=46827
Win-7 64 bit
https://www.microsoft.com/en-us/down....aspx?id=46817

Then manually install KB3172605
Win-7 32 bit,
https://www.microsoft.com/en-us/down....aspx?id=53335
Win-7 64 bit,
https://www.microsoft.com/en-us/down....aspx?id=53332

After switch your windows update settings back to what you had prior and manually check for updates and the rest should show up shortly.

You must use Internet explorer to download from the catalog
Microsoft Update Catalog
You also have to right click ie and use run as administrator don't ask me why but the 2 recommended browser add-ons won't install unless you do,

Read other 9 answers
RELEVANCY SCORE 68.8

ill start from the beggining.
i was online, and i believe my computer got infected.
the next time i turned on my computer everything was working fine, but in the middle of startup the computer seemed to slow down considerably (when i dragged an open window there was a trail), and this would eventually lead to its freezing. i would have to shut down my computer manually. i tried this a few more times and the same thing happened. i opened task manager on startup and noticed that one process of svchost.exe would start taking up more memory. It would peak at around 50,000 K. My cpu usage would stall at 100% and my mem usage would be at about 450M/1129M. I booted up in safe mode and everything worked fine. i have tried numerous things including a few online virus scans along with a spy sweeper, eset nod 32, and ad aware scan, all coming up with nothing. i downloaded a trial of bit defender but it found nothing.i also got a boot cd which found nothing when i booted with it.
My comp. info:
Windows XP
Home edition
version 2002
service pack 2

toshiba
satellite
1.6 ghz, 504 mb of ram


thank you for reading this, any help is appreciated.
(i am doing all of this on safe mode)


Deckard's System Scanner v20071014.68
Run by Dave on 2007-10-25 20:29:00
Computer is in Safe Mode with Networking.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Failed to... Read more

A:[SOLVED] Computer crashes, svchost.exe problem

nvm not 72 hrs yet how do u delete a post

Read other 19 answers
RELEVANCY SCORE 68.8

As of late I've been experiencing slowdowns and latency when playing games like League of Legends. I got curious and opened Task Manager to see what's going on. There I saw fluctuations from 100% to 30% Disk and CPU usage. I don't know whether that's a normal occurrence or something else entirely.
 
OS
Windows 8.1
 
Thanks for indulging me.
                   

A:Disk and Memory Usage Fluctuates From Normal to Extreme

I've solved the problem. All I had to do was disable some programs and change my ram settings. Thanks for reading.

Read other 2 answers
RELEVANCY SCORE 68.4

Ive looked all over for the cure, but nothing works.
When this first started, comp usage was 100% , SVCHOST.exe pops up in the task manager, so I d/l process explorer and looked what was going on.
Ill show you what I have ran across


I havent installed anything, it was just a sudden problem.
It seems to be explorer.exe related.

Hijack log:
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system\csrss.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Elston\My Documents\HiJackThis_v2.exe
C:\WINDOWS\winservicehost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?Li... Read more

A:svchost.exe - explorer.exe computer usage spiking, hourglass constantly flashing.

Read other 15 answers
RELEVANCY SCORE 68.4

HiAll,I am not too big of a techie, but i am sure that on my Vaio (Win 7, i3, 4GB) even when my system is idle the memory usage shoots upto 40% right from the word go.tried going from pillar to post reading different forums but no help.Ran a spybot check, Avast antivirus (no threats), Finally heard of Hijackthis and attaching a log file of the same.All i have noticed that its not a specific process that takes up the memory, its any available process.e.g if its iexplorer that takes upto 45000+K Mem (evene with just 2 tabs) if i end the process, it shifts the load to Svchost.exe and it starts shooting up.I dont understand what is happening! and would really appreciate any help on this one.ThanksArifHijackthin Log File:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 7:40:18 PM, on 10/6/2010Platform: Unknown Windows (WinNT 6.01.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16385)Boot mode: NormalRunning processes:C:\Program Files (x86)\MoRUN.net\Secure Reminder\reminder.exeC:\Program Files (x86)\Sony\Media Gallery\ElbServer.exeC:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exeC:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exeC:\Program Files (x86)\NetWorx\networx.exeC:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exeC:\Program Files (x86)\Intel\Intel? Rapid Storage Technology\IAStorIcon.exeC:\Program Files\... Read more

A:High Memory usage even with Idle system

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.Thanks and again sorry for the delay.Download OTL to your desktop.Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.When the window appears, underneath Output at the top change it to Minimal Output.Under the Standard Registry box change it to All.Check the boxes beside LOP Check and Purity Check.Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as ... Read more

Read other 2 answers