Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Is this normal? Causes CPU and disk memory overload


  • Please log in to reply
9 replies to this topic

#1 streim

streim

  • Members
  • 42 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Just passing through...
  • Local time:10:30 PM

Posted 20 May 2015 - 03:25 PM

Not sure if my topic is correct.  I am not an expert (more like 1 step above novice) when it comes to the working of my computer. 

I've noticed for some time now that my CPU is running at over 50% and disk memory (at times) has been almost 100%.  I did some checking with the task manager  and found that when these "spikes" occur-- I have 2 client server runtime process and 2 Trusted Installers using the most space, etc.

Is it normal to have 2 csrss.exe processes?

 

Any Ideas anyone?


In the world we live in "Apathy is the acceptance of the unacceptable"

 

 

 

 

 

 


BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 56,302 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:10:30 PM

Posted 20 May 2015 - 04:15 PM

2 csrss is...normal.

 

Please download MiniToolBox  , save it to your desktop and run it.
 
Checkmark the following checkboxes:
  List last 10 Event Viewer log
  List Installed Programs
  List Users, Partitions and Memory size.
 
Click Go and paste the content into your next post.
 
Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post.
 
Louis



#3 streim

streim
  • Topic Starter

  • Members
  • 42 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Just passing through...
  • Local time:10:30 PM

Posted 21 May 2015 - 01:34 PM

2 csrss is...normal.

 

Please download MiniToolBox  , save it to your desktop and run it.
 
Checkmark the following checkboxes:
  List last 10 Event Viewer log
  List Installed Programs
  List Users, Partitions and Memory size.
 
Click Go and paste the content into your next post.
 
Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post.
 
Louis

 

For some reason Avast detected the link here in your response for the Mini Tool Box as malware.  This hasn't happened before with Farbar (I have used before).  Is the link possibly infected? 


In the world we live in "Apathy is the acceptance of the unacceptable"

 

 

 

 

 

 


#4 hamluis

hamluis

    Moderator


  • Moderator
  • 56,302 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:10:30 PM

Posted 21 May 2015 - 01:44 PM

No, it's not :).

 

Avast's latest version generates a false positive on that download...I experienced it myself last week.  You can disable Avast and do the download...it will detect same item when you re-enable Avast...but the download will be done and the program will have been installed.

 

Louis



#5 streim

streim
  • Topic Starter

  • Members
  • 42 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Just passing through...
  • Local time:10:30 PM

Posted 21 May 2015 - 01:46 PM

ok..I thought so, I've used tghis program before.  Thanks for the quick response!


In the world we live in "Apathy is the acceptance of the unacceptable"

 

 

 

 

 

 


#6 hamluis

hamluis

    Moderator


  • Moderator
  • 56,302 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:10:30 PM

Posted 21 May 2015 - 01:51 PM

, :thumbup2:



#7 streim

streim
  • Topic Starter

  • Members
  • 42 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Just passing through...
  • Local time:10:30 PM

Posted 21 May 2015 - 02:34 PM

MiniToolBox by Farbar  Version: 11-05-2015 01
Ran by streim (administrator) on 21-05-2015 at 14:28:38
Running from "C:\Users\streim\Desktop"
Microsoft Windows 7 Home Premium  Service Pack 1 (X86)
Model: HP Compaq dc5800 Small Form Factor Manufacturer: Hewlett-Packard
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (05/21/2015 00:31:05 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/20/2015 02:50:54 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (05/20/2015 01:58:16 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/19/2015 03:44:08 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (05/19/2015 02:34:02 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/16/2015 02:17:44 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/15/2015 02:01:44 PM) (Source: Adobe Reader) (User: )
Description:

Error: (05/15/2015 01:56:15 PM) (Source: Adobe Reader) (User: )
Description:

Error: (05/15/2015 00:55:11 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/15/2015 00:49:55 PM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface.  hr = 0x80070005, Access is denied.
This is often caused by incorrect security settings in either the writer or requestor process.
Operation:
   Gathering Writer Data
Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer
   Writer Instance ID: {632f598a-849c-4978-8304-0fc4a2e5d423}

System errors:
=============
Error: (05/20/2015 03:09:26 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (05/14/2015 03:54:35 PM) (Source: Service Control Manager) (User: )
Description: The Windows Modules Installer service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

Error: (05/14/2015 03:54:35 PM) (Source: Service Control Manager) (User: )
Description: The Windows Search service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (05/14/2015 03:54:34 PM) (Source: Service Control Manager) (User: )
Description: The Andrea ADI Filters Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (05/14/2015 03:54:34 PM) (Source: Service Control Manager) (User: )
Description: The Adobe Acrobat Update Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (05/14/2015 03:54:34 PM) (Source: Service Control Manager) (User: )
Description: The Print Spooler service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

Error: (05/12/2015 01:08:59 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80080005: Security Update for Windows 7 (KB3046002).

Error: (05/12/2015 01:08:59 PM) (Source: DCOM) (User: )
Description: {752073A1-23F2-4396-85F0-8FDB879ED0ED}

Error: (04/28/2015 04:49:44 PM) (Source: Service Control Manager) (User: )
Description: The Software Protection service terminated with the following error:
%%2

Error: (04/28/2015 04:49:25 PM) (Source: Service Control Manager) (User: )
Description: The Software Protection service terminated with the following error:
%%2


Microsoft Office Sessions:
=========================
Error: (05/21/2015 00:31:05 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/20/2015 02:50:54 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\HP\HP Deskjet 1010 series\DriverStore\Yeti\V3\amd64\hpinkinsB511.exe

Error: (05/20/2015 01:58:16 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/19/2015 03:44:08 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\HP\HP Deskjet 1010 series\DriverStore\Yeti\V3\amd64\hpinkinsB511.exe

Error: (05/19/2015 02:34:02 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/16/2015 02:17:44 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/15/2015 02:01:44 PM) (Source: Adobe Reader)(User: )
Description:

Error: (05/15/2015 01:56:15 PM) (Source: Adobe Reader)(User: )
Description:

Error: (05/15/2015 00:55:11 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/15/2015 00:49:55 PM) (Source: VSS)(User: )
Description: 0x80070005, Access is denied.
Operation:
   Gathering Writer Data
Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer
   Writer Instance ID: {632f598a-849c-4978-8304-0fc4a2e5d423}

=========================== Installed Programs ============================
Adobe Acrobat Reader DC (HKLM\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.007.20033 - Adobe Systems Incorporated)
Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Refresh Manager (HKLM\...\{AC76BA86-0804-1033-1959-001802114130}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Amazon Music (HKCU\...\Amazon Amazon Music) (Version: 3.7.1.698 - Amazon Services LLC)
Avast Internet Security (HKLM\...\Avast) (Version: 10.2.2218 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform)
Google Update Helper (HKLM\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.169 - Google Inc.) Hidden
HP Deskjet 1010 series Basic Device Software (HKLM\...\{B3AB3A67-2BCF-4A50-9FBF-4700DCFC5C45}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.)
HP Deskjet 1010 series Help (HKLM\...\{BFB6C2B0-9643-4B59-A706-71DEB3017A99}) (Version: 30.0.0 - Hewlett Packard)
HP Photo Creations (HKLM\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Softpaq SP46137  (HKLM\...\SP46137) (Version:  - )
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (HKLM\...\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}) (Version: 1.00.0001 - Microsoft) Hidden
Intel® Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
Intel® Management Engine Interface (HKLM\...\HECI) (Version:  - Intel Corporation)
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Mozilla Firefox 38.0.1 (x86 en-US) (HKLM\...\Mozilla Firefox 38.0.1 (x86 en-US)) (Version: 38.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 37.0 - Mozilla)
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
SoundMAX (HKLM\...\{F0A37341-D692-11D4-A984-009027EC0A9C}) (Version: 6.10.1.7255 - Analog Devices)
Speccy (HKLM\...\Speccy) (Version: 1.28 - Piriform)
WinPatrol (HKLM\...\{6A206A04-6BC1-411B-AA04-4E52EDEEADF2}) (Version: 33.1.2015.0 - Ruiware)

========================= Memory info: ===================================
Percentage of memory in use: 39%
Total physical RAM: 2021.3 MB
Available physical RAM: 1218.72 MB
Total Pagefile: 4042.6 MB
Available Pagefile: 3074.71 MB
Total Virtual: 2047.88 MB
Available Virtual: 1951.21 MB

========================= Partitions: =====================================
 Drive c: (Windows) (Fixed) (Total:146.03 GB) (Free:98.33 GB) NTFS

========================= Users: ========================================
User accounts for \\STREIM-PC

Administrator            Guest                    streim                  

**** End of log ****

 

 

http://speccy.piriform.com/results/tOXIr6zArYaQ3VX3kE3I66c


Edited by hamluis, 21 May 2015 - 05:31 PM.

In the world we live in "Apathy is the acceptance of the unacceptable"

 

 

 

 

 

 


#8 hamluis

hamluis

    Moderator


  • Moderator
  • 56,302 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:10:30 PM

Posted 21 May 2015 - 05:55 PM

Running Win 7 with 2GB RAM...well, I would expect resource problems often.  I would expect these to be mainly reflected in RAM usage.  \

 

Spikes in resource usage are normal as long as they are temporary and short-lived.  There is no premium value in having a system that does not use the resources inherent in the system...that would indicate that the system is doing very little.  Programs are supposed to use resources.

 

CPU usage...a lot of users don't seem to understand that there are many programs that may indicate high CPU usage percentages when running.  I define "high" as being more than 40% as reflected in Task Manager.  If it's a known program/process, it's no problem.  If it's a process that you cannot relate to any installed program or Windows...you may want to take a closer look at what it might be, using Google and/or the tool I link to below.

 

Looking at the max usage data reflected by Speccy...I see nothing to be concerned about...1 or 2 svchost.exe processes will typically indicate excess (more than 300MB or so) RAM usage.  Anything less than 300MB...I would not even give a second look.  There is one svchost.exe process which has a max RAM value of 780MB, you can do some research on it, if you want to.

 

svchost.exe     Process ID: 1000     User: SYSTEM     Domain: NT AUTHORITY     Path: C:\Windows\system32\svchost.exe
Memory Usage: 29 MB     Peak Memory Usage: 780 MB
 
 
I don't see any process reflected that used more RAM...unless my math skills are gone, that would be about 40% RAM usage...so I don't know where/how you obtained 100% RAM usage...unless you have processes running which are not reflected...which I think is impossible.
 
Louis 


#9 streim

streim
  • Topic Starter

  • Members
  • 42 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Just passing through...
  • Local time:10:30 PM

Posted 22 May 2015 - 03:21 PM

Thank you so very much Louis for your helping me to understand this issue.  Your are a very knowledgable asset for BC.

I do have one question.  How do I ramp- up (for lack of a technical term) my RAM and still use my Windows 7?  Is it even possible?

Thank you so much and have a great weekend.

 

Streim


In the world we live in "Apathy is the acceptance of the unacceptable"

 

 

 

 

 

 


#10 hamluis

hamluis

    Moderator


  • Moderator
  • 56,302 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:10:30 PM

Posted 22 May 2015 - 03:43 PM

Motherboard Specs,, reflects 4 RAM slots, each supporting 4GB max apiece.  DDR2 is available at Amazon and other typical sites.  There is no reason to run Win 7 with less than 4GB RAM these days, IMO.

 

It's pretty easy to install RAM...it's one of the first things I learned to do :).

 

Louis






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users