Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

trustedinstaller SLOW


  • Please log in to reply
7 replies to this topic

#1 millipede

millipede

  • Members
  • 617 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:outer space
  • Local time:11:59 AM

Posted 26 January 2013 - 09:56 PM

I'm working on a laptop that if it were a dog or horse would have been put down by now. ha. I haven't figured out what I'm doing with the display and all yet. It was pretty much torn off at one point. The cable somewhere is damaged I believe but the screen does work... half the time.
lots of things going on but, the owner has no money and no other means of keeping in contact with family and such. You know how it is. technology :/
Anyway... I did happen to have an extra hdd laying around not really being used and their was failing. This thing had been going SOOOOOOOO slow I wanted to throw it out the window.
I assumed 99.9% of the sluggishness was a result of the failing hard drive. I had cleaned it up, updated it, etc... wasn't much on it, and still slow.
So, in goes replacement hdd(which passes gsmart tests) and reinstall vista from the original discs... I have to figure out which drivers I'm missing still but got things installed and running.
I THINK it's running better. I still have to test it out in various ways. But, it is STILL snail slow when it comes to updates. I don't know if it's the computer, perhaps something else is in bad shape... I'll have to try testing those things out at some point.
What I DO know is that trustedinstaller.exe is slowing it down. (I googled, saw it has to do with updates) It's fairly consistently hanging at at least 40 or 50%cpu.
I've done a bit of updating but it's taking a LOT longer than it should. Fresh install, I boosted it to 3gb of ram. I'm talking SLOW.
More than 10 minutes ago I opened up windows update. It listed a couple but I told it to check again... it's STILL checking. 10 minutes ago is a conservative estimate. Downloads for windows update are SLOW and then once downloaded, it hangs on "preparing to install" for a LONG time... and even installing, takes a LOT longer than I know it should.
Every time, trustedinstaller is using up a lot of cpu.
So, I'm trying to figure out if it is simply this trustedinstaller thing slowing things down or if maybe something else is going on with the computer that I need to worry about, as far as hardware goes. Processor? Something else?
I'll attempt some more hardware diagnosis at some point, right not it's stuck trying to update. Hopefully that will point me in the right direction as far as hardware goes but, I wanted to ask about that trusted installer and see if it was common for it to bog a system down THAT much. It's driving me nuts.
While googling, I saw a lot of other people complaining about it eating up resources. So I was wondering if there was anyway to help or fix that somehow.
Anyway.. Just curios about it. Going to keep on messing with it but figured while I'm waiting it wouldn't hurt to ask about it some. :)

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,730 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:11:59 AM

Posted 01 February 2013 - 11:28 AM

Please download MiniToolBox , save it to your desktop and run it.

Checkmark the following checkboxes:
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size.

Click Go and paste the content into your next post.

Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 .

Louis

#3 millipede

millipede
  • Topic Starter

  • Members
  • 617 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:outer space
  • Local time:11:59 AM

Posted 23 February 2013 - 02:30 PM

That minitoolbox program says it detects connection problems.  I don't believe that computer has any, it accesses the internet fine.  It just seems some things seem to bog down the cpu sometimes.  The trustedinstaller is one of those things that REALLY bogs it down.  Googling, I found a lot of people complaining about it.
BUT...  I'll download those programs and report back in just a bit.  Sure doens't hurt to look at anything you can.
(It's a fresh install of vista, I just got SP 1 and 2 on it yesterday as it wasn't showing me those updates at first...)

Will post back in just a bit.



#4 millipede

millipede
  • Topic Starter

  • Members
  • 617 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:outer space
  • Local time:11:59 AM

Posted 23 February 2013 - 03:15 PM

speccy link:
http://speccy.piriform.com/results/Qcn8Yez7oMIGwv5xOfEcm4c

 

minitoolbox report:

MiniToolBox by Farbar  Version:10-01-2013
Ran by Princess (administrator) on 23-02-2013 at 13:48:18
Running from "C:\Users\Princess\Downloads"
Windows Vista ™ Home Premium Service Pack 2 (X86)
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (02/23/2013 10:08:09 AM) (Source: Perflib) (User: )
Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4

Error: (02/23/2013 10:08:07 AM) (Source: Perflib) (User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll4

Error: (02/22/2013 11:19:43 PM) (Source: EventSystem) (User: )
Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}

Error: (02/22/2013 11:02:47 PM) (Source: Application Hang) (User: )
Description: The program iexplore.exe version 9.0.8112.16464 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Problem Reports and Solutions control panel.
Process ID: b88
Start Time: 01ce1182b6d78f5c
Termination Time: 93

Error: (02/22/2013 08:50:21 PM) (Source: EventSystem) (User: )
Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}

Error: (02/22/2013 06:52:44 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to compile: UIAutomationProvider, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 . Error code = 0x80070005

Error: (02/22/2013 03:06:08 PM) (Source: ESENT) (User: )
Description: WinMail (2732) WindowsMail0: The backup has been stopped because it was halted by the client or the connection with the client failed.

Error: (02/21/2013 10:55:07 PM) (Source: EventSystem) (User: )
Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}

Error: (02/21/2013 07:34:27 PM) (Source: ESENT) (User: )
Description: WinMail (2412) WindowsMail0: The backup has been stopped because it was halted by the client or the connection with the client failed.

Error: (02/21/2013 06:44:14 PM) (Source: WerSvc) (User: )
Description: The target file for the Windows Feedback Platform (a DLL file containing the list of problems on this computer that require additional data collection for diagnosis) could not be parsed. The error code was 8014FFF9.


System errors:
=============
Error: (02/23/2013 10:03:29 AM) (Source: Microsoft Antimalware) (User: )
Description: %Princess-PC60 has encountered an error trying to update signatures.

	New Signature Version: 

	Previous Signature Version: 0.0.0.0

	Update Source: %Princess-PC51

	Update Stage: 4.2.0223.00

	Source Path: 4.2.0223.01

	Signature Type: %Princess-PC602

	Update Type: %Princess-PC604

	User: Princess-PC\Princess

	Current Engine Version: %Princess-PC605

	Previous Engine Version: %Princess-PC606

	Error code: %Princess-PC607

	Error description: %Princess-PC608

Error: (02/23/2013 10:03:26 AM) (Source: Microsoft Antimalware) (User: )
Description: %Princess-PC60 has encountered an error trying to update the engine.

	New Engine Version: 

	Previous Engine Version: 

	Engine Type: %Princess-PC604

	User: Princess-PC\Princess

	Error Code: %Princess-PC601

	Error description: %Princess-PC602

Error: (02/23/2013 10:03:26 AM) (Source: Microsoft Antimalware) (User: )
Description: %Princess-PC60 has encountered an error trying to update signatures.

	New Signature Version: 

	Previous Signature Version: 

	Update Source: %Princess-PC15

	Update Stage: 4.2.0223.00

	Source Path: 4.2.0223.01

	Signature Type: %Princess-PC602

	Update Type: %Princess-PC604

	User: Princess-PC\Princess

	Current Engine Version: %Princess-PC605

	Previous Engine Version: %Princess-PC606

	Error code: %Princess-PC607

	Error description: %Princess-PC608

Error: (02/23/2013 09:59:06 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)
Description: 0x80070643Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.145.366.0){0209CE02-D580-4ED6-B4F7-5F871097FA67}201

Error: (02/23/2013 09:58:44 AM) (Source: Microsoft Antimalware) (User: )
Description: %Princess-PC60 has encountered an error trying to update signatures.

	New Signature Version: 

	Previous Signature Version: 0.0.0.0

	Update Source: %Princess-PC51

	Update Stage: 4.2.0223.00

	Source Path: 4.2.0223.01

	Signature Type: %Princess-PC602

	Update Type: %Princess-PC604

	User: Princess-PC\Princess

	Current Engine Version: %Princess-PC605

	Previous Engine Version: %Princess-PC606

	Error code: %Princess-PC607

	Error description: %Princess-PC608

Error: (02/23/2013 09:58:42 AM) (Source: Microsoft Antimalware) (User: )
Description: %Princess-PC60 has encountered an error trying to update the engine.

	New Engine Version: 

	Previous Engine Version: 

	Engine Type: %Princess-PC604

	User: Princess-PC\Princess

	Error Code: %Princess-PC601

	Error description: %Princess-PC602

Error: (02/23/2013 09:58:42 AM) (Source: Microsoft Antimalware) (User: )
Description: %Princess-PC60 has encountered an error trying to update signatures.

	New Signature Version: 

	Previous Signature Version: 

	Update Source: %Princess-PC15

	Update Stage: 4.2.0223.00

	Source Path: 4.2.0223.01

	Signature Type: %Princess-PC602

	Update Type: %Princess-PC604

	User: Princess-PC\Princess

	Current Engine Version: %Princess-PC605

	Previous Engine Version: %Princess-PC606

	Error code: %Princess-PC607

	Error description: %Princess-PC608

Error: (02/23/2013 09:58:12 AM) (Source: Microsoft Antimalware) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

	New Signature Version: 

	Previous Signature Version: 1.145.366.0

	Update Source: %NT AUTHORITY59

	Update Stage: 4.2.0223.00

	Source Path: 4.2.0223.01

	Signature Type: %NT AUTHORITY602

	Update Type: %NT AUTHORITY604

	User: NT AUTHORITY\SYSTEM

	Current Engine Version: %NT AUTHORITY605

	Previous Engine Version: %NT AUTHORITY606

	Error code: %NT AUTHORITY607

	Error description: %NT AUTHORITY608

Error: (02/23/2013 09:58:11 AM) (Source: Microsoft Antimalware) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update the engine.

	New Engine Version: 

	Previous Engine Version: 

	Engine Type: %NT AUTHORITY604

	User: NT AUTHORITY\SYSTEM

	Error Code: %NT AUTHORITY601

	Error description: %NT AUTHORITY602

Error: (02/23/2013 09:58:10 AM) (Source: Microsoft Antimalware) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

	New Signature Version: 

	Previous Signature Version: 

	Update Source: %NT AUTHORITY15

	Update Stage: 4.2.0223.00

	Source Path: 4.2.0223.01

	Signature Type: %NT AUTHORITY602

	Update Type: %NT AUTHORITY604

	User: NT AUTHORITY\SYSTEM

	Current Engine Version: %NT AUTHORITY605

	Previous Engine Version: %NT AUTHORITY606

	Error code: %NT AUTHORITY607

	Error description: %NT AUTHORITY608


Microsoft Office Sessions:
=========================
Error: (02/23/2013 10:08:09 AM) (Source: Perflib)(User: )
Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4

Error: (02/23/2013 10:08:07 AM) (Source: Perflib)(User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll4

Error: (02/22/2013 11:19:43 PM) (Source: EventSystem)(User: )
Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}

Error: (02/22/2013 11:02:47 PM) (Source: Application Hang)(User: )
Description: iexplore.exe9.0.8112.16464b8801ce1182b6d78f5c93

Error: (02/22/2013 08:50:21 PM) (Source: EventSystem)(User: )
Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}

Error: (02/22/2013 06:52:44 PM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to compile: UIAutomationProvider, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 . Error code = 0x80070005 
UIAutomationProvider, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35

Error: (02/22/2013 03:06:08 PM) (Source: ESENT)(User: )
Description: WinMail2732WindowsMail0:

Error: (02/21/2013 10:55:07 PM) (Source: EventSystem)(User: )
Description: 80070005EventSystem.EventSubscription{CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}

Error: (02/21/2013 07:34:27 PM) (Source: ESENT)(User: )
Description: WinMail2412WindowsMail0:

Error: (02/21/2013 06:44:14 PM) (Source: WerSvc)(User: )
Description: 8014FFF9


CodeIntegrity Errors:
===================================
  Date: 2013-02-22 13:13:53.112
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system.

  Date: 2013-02-22 13:13:52.394
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system.

  Date: 2013-02-22 13:13:51.677
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system.

  Date: 2013-02-22 13:13:50.959
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system.

  Date: 2013-02-22 13:13:50.257
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system.

  Date: 2013-02-22 13:13:46.154
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.

  Date: 2013-02-22 13:13:45.421
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.

  Date: 2013-02-22 13:13:44.719
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.

  Date: 2013-02-22 13:13:43.924
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.

  Date: 2013-02-22 13:13:43.175
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.


=========================== Installed Programs ============================

Adobe Flash Player 11 ActiveX (Version: 11.5.502.149)
Belarc Advisor 8.3 (Version: 8.3.0.0)
Dell Resource CD (Version: 1.00.0000)
Dell Support Center (Version: 3.2.6032.125)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Security Client (Version: 4.2.0223.1)
Microsoft Security Essentials (Version: 4.2.223.1)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)

========================= Memory info: ===================================

Percentage of memory in use: 34%
Total physical RAM: 2941.42 MB
Available physical RAM: 1929.86 MB
Total Pagefile: 6115.39 MB
Available Pagefile: 5219.57 MB
Total Virtual: 2047.88 MB
Available Virtual: 1962.95 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:111.79 GB) (Free:71.35 GB) NTFS
2 Drive d: (RTMSP2.0_DVD) (CDROM) (Total:1.34 GB) (Free:0 GB) UDF

========================= Users: ========================================

User accounts for \\PRINCESS-PC

Administrator            Guest                    Princess                 


**** End of log ****


#5 hamluis

hamluis

    Moderator


  • Moderator
  • 55,730 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:11:59 AM

Posted 23 February 2013 - 04:03 PM

From http://msdn.microsoft.com/en-us/library/windows/hardware/ff539911(v=vs.85).aspx:

 

"The Code Integrity operational log includes warning events that indicate that a kernel-mode driver failed to load because the driver signature could not be verified. Signature verification can fail for the following reasons:

     ◦An administrator preinstalled an unsigned driver, but Code Integrity subsequently blocked loading the unsigned driver.
     ◦The driver is signed, but the signature is invalid because the driver file has been altered.
     ◦The system disk device might have device errors when reading the file for the driver from bad disk sectors

 

When I see code integrity errors, I usually think it's a hard drive problem possibly indicated...because I don't ever recall seeing a code-integrity error on any of my systems over the years...and I use unsigned drivers, preferring to not be as concerned with such as Microsoft is.

 

The second possibility that I consider is malware, as indicated by the second instance mentioned  at the link provided.

 

You seem to have many errors relating to Microsoft Security Essentials, I suggest uninstalling it, then reinstalling it.  If those errors and the TCP/IP errors continued, I'd certainly think it worthwhile to initiate a  post or move this one to the Am I Infected forum.

 

Some info re TrustedInstaller can be found at http://answers.microsoft.com/en-us/windows/forum/windows_other-windows_update/service-trustedinstallerexe-permanently-active/32f87e95-1afa-4478-90a3-61fa6537c44c .

 

Louis


Edited by hamluis, 23 February 2013 - 04:08 PM.


#6 millipede

millipede
  • Topic Starter

  • Members
  • 617 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:outer space
  • Local time:11:59 AM

Posted 23 February 2013 - 04:37 PM

A little background...  When I first looked at this, it was REALLY slow...  driving me nuts slow.  I ran some tests, discovered the hdd was going bad.  It still worked, but was failing.
So, I put in a used hdd I had laying around that is working.  Recently had it in another machine with ubuntu on it and it worked fine. 
After this fresh install of the vista dvd that came with it, this issue with cpu usage and that process continued.  I've run the dell diagnostics, which includes hdd tests, and everything comes back as passing.  I can run further tests if I need to though.

I'm not liking that MSE, I only installed it because that's what she was using before.  I prefer Avast(except that MSE is nice how it does ALL updating and such without me worrying about accidentally clicking on a button for a free trial )
But, on top of it...  At the moment, it's had some trouble with some updates... I've also read on CNET that the website that tests AVs didn't pass MSE this time around.  So, I may just uninstall and try Avast. 

Being such a fresh install, and not visiting anything I shouldn't, malware is very low on my personal list of possibilities but I will run some more checks on it to be certain.



#7 millipede

millipede
  • Topic Starter

  • Members
  • 617 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:outer space
  • Local time:11:59 AM

Posted 24 February 2013 - 04:10 PM

Well, I ran more tests.  The Dell Diangostics tested everything... hdd, mb, ram, and a lot more.  I later booted the thing to parted magic and ran the short and the extended tests on the hdd.  No issues found.  Everything passes.
I ran scans... there's no malware.  I uninstalled MSE and put in Avast... we'll see if there's any difference.
Avast and windows defender are the only startup items.  This thing is clean and should be unhindered. 
I just tried to check for updates and couldn't get trustedinstaller to run again.  So, I can't say for sure if it's running better.  The cpu usage seems irradic, higher than it should be for some things but only a little here and there.  Just bounced up to 25% or so for avast, then 50% for firefox, even though I had nothing running. 
 I kind of think the overall system might be suffering from old age... ha.  Seriously though, I think it's running about as good as it's going to. 
I just started a Full scan with Avast, and it went right to scanning.  No hanging.  I think it might be running a little smoother.  It is possible that uninstalling MSE helped some.  I'll keep looking and see if trustedinstaller pops up again... and see how it behaves if it does.



#8 hamluis

hamluis

    Moderator


  • Moderator
  • 55,730 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:11:59 AM

Posted 24 February 2013 - 04:20 PM

icon_thumb.gif , happy computing :).

 

Louis






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users