Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows 7 Professional CPU Spikes/System Hang


  • Please log in to reply
9 replies to this topic

#1 hike2climb

hike2climb

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:04:40 AM

Posted 28 December 2015 - 06:01 PM

Bleeping Computer Members,

 

I have a Windows 7 Professional 32-bit computer (4 GB of RAM, Core i3 2.93 GHz, 750 GB HDD) I had built a couple of years ago that has recently started having issues. I will be operating my computer such as browsing the web and listening to music when all of the sudden the active application (one currently on) tries to refresh constantly. I can switch between applications and the issue then jumps to that application where it starts to refresh constantly.  When I open Task Manager, I see the CPU usage constantly jumping from 0% to 90% and the Memory seems to be unaffected.  Interestingly, the CPU Usage History window will scroll through very quickly.  Sometimes the computer will resolve itself; oftentimes, however, I need to reboot the computer.

 

I'll leave bullet points of what I've tried in troubleshooting this issue.

 

  • I don't recall installing any new software since this has started
  • It's not limited to any web browser or application that I'm aware of
  • I haven't noticed any "triggers" but I'm mostly browsing the web when the issue happens
  • I have scanned with Avira and Malwarebytes in Safe Mode with results always clean
  • It affects all user accounts
  • When viewing the Task Manager, Processes tab, the application that I'm currently active on is the one that jumps to the top
  • I don't see any activity in the Networking tab of the Task Manager

I would very much appreciate assistance on this. Thank you!


Edited by hike2climb, 28 December 2015 - 06:02 PM.


BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:05:40 AM

Posted 29 December 2015 - 03:19 PM

Have you tried another keyboard?

Is your cat sitting on the keyboard (just kidding, I remember similar issues the one time that my cat climbed onto my keyboard)?

 

Beyond that, let's try looking at these reports:

1)  Please provide this information (even though you may not be reporting BSOD's) so we can provide a complete analysis (from the Pinned Topic at the top of the forum):  http://www.bleepingcomputer.com/forums/t/576314/blue-screen-of-death-bsod-posting-instructions-windows-10-81-8-7-vista/

2)  Please do the following:
- open Event Viewer (run eventvwr.msc from the "Run" dialog)
- expand the Custom Views category (left click on the > next to the words "Custom Views")
- right click on Administrative Events
- select "Save all Events in Custom View as..."
- save the file as Admin.evtx
- zip up the file (right click on it, select "Send to", select "Compressed (zipped) folder")
- upload it with your next post (if it's too big, then upload it to a free file-hosting service and post a link here).

FYI - If we're looking for Event ID 41 errors (unexplained shutdowns), there's more info on that here:  http://support.microsoft.com/kb/2028504

While waiting for a reply, please monitor your temps with this free utility:  http://www.cpuid.com/softwares/hwmonitor.html


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 hike2climb

hike2climb
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:04:40 AM

Posted 29 December 2015 - 03:46 PM

Thanks for your assistance, usasma!

 

I don't have animals so I don't think that's the problem. :lol:

 

Although you do mention replacing the keyboard, I have noticed that (it's not consistent) when I press the left CTRL key, it'll close whatever browser I'm currently on.  I could do it 20 times without issue; but as I'm sure you may know, when you least expect it, it'll close the window.

 

Please see attached reports.

 

I installed the monitor you had suggested.

Attached Files



#4 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:05:40 AM

Posted 30 December 2015 - 06:16 AM

I see errors releasing registry keys by Windows Live, AVG and Avira.

Please uninstall all of them.  And enable Windows Defender and the Windows firewall while testing

Do not use more than one antivirus - as they can conflict and can even let virus' onto your system.  I also see that Online Armor was running when the memory dump was captured - please uninstall it also.

If Avira has already been uninstalled, please follow the instructions at this link for a manual removal in order to remove any remnants left on your system.:  http://www.avira.com/en/support-for-home-knowledgebase-detail?kbid=88

 

These devices have problems in Device Manager:

 

Photosmart C4700 series    ROOT\MULTIFUNCTION\0000    This device is disabled.
Photosmart C4700 series    ROOT\MULTIFUNCTION\0001    This device is disabled.
Photosmart C4700 series    ROOT\MULTIFUNCTION\0002    The drivers for this device are not installed.
Photosmart C4700 series    ROOT\MULTIFUNCTION\0003    This device is disabled.
Teredo Tunneling Pseudo-Interface    ROOT\*TEREDO\0000    This device cannot start.

Uninstall the Photosmart software from Control Panel...Programs and Features.  Then go back and ensure that these devices have been removed from Device Manager.  If they haven't , right click on them and select "Uninstall"

As for the Teredo Tunning thing - right click on it and uninstall it.  Then reboot the system and see that the error is no longer there.  If the error remains, post back and we'll try other stuff.

 

Although you appear to have a reasonable number of Windows Update hotfixes for this version of your OS, please double check for any new Windows Updates.  It only takes one update to cause a problem, so it's essential that you have all of them.

The lone memory dump blames AVG - so if you've uninstalled it the problem should be solved.
Please monitor the system to ensure that removing AVG did indeed solve the problem.

FYI - while waiting, please don't use disk cleaning utilities (such as CCleaner) as they delete valuable diagnostic information at times.

 

Please uninstall SpeedFan while we're troubleshooting.  It's drivers date from 1996 and 2006

 

NEC Electronics USB 3.0 Host Controller Driver (previous BSOD issues with 2010 and earlier versions.  You have the 2010 version

Please update from the system/motherboard manufacturer's website

 

Analysis:
The following is for informational purposes only.
**************************Wed Dec 23 14:12:03.764 2015 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\122315-18891-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x86 compatible
Built by: 7601.19045.x86fre.win7sp1_gdr.151019-1254
System Uptime: 0 days 1:14:22.919
*** WARNING: Unable to verify timestamp for avgntflt.sys
*** ERROR: Module load completed but symbols could not be loaded for avgntflt.sys
Probably caused by : avgntflt.sys ( avgntflt+696b )
BugCheck 10000050, {aca849b0, 0, 9885696b, 0}
BugCheck Info: PAGE_FAULT_IN_NONPAGED_AREA (50)
Arguments:
Arg1: aca849b0, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 9885696b, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 00000000, (reserved)
BUGCHECK_STR:  0x50
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  0x50_avgntflt+696b
CPUID:        "Intel® Core™ i3 CPU         530  @ 2.93GHz"
MaxSpeed:     2930
CurrentSpeed: 2931
  BIOS Version                  F4
  BIOS Release Date             02/11/2010
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  P55-USB3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``


3rd Party Drivers:
The following is for information purposes only.
Any drivers in RED should be updated or removed from your system. And should have been discussed in the body of my post.
**************************Wed Dec 23 14:12:03.764 2015 (UTC - 5:00)**************************
giveio.sys         Wed Apr  3 22:33:25 1996 (316334F5)
speedfan.sys       Sun Sep 24 09:28:47 2006 (4516880F)
Rt86win7.sys       Thu Feb 26 04:04:22 2009 (49A65B16)
ssmdrv.sys         Tue May  5 06:05:18 2009 (4A000F5E)
oanet.sys          Tue Jun 30 09:33:02 2009 (4A4A140E)
intelppm.sys       Mon Jul 13 19:11:03 2009 (4A5BBF07)
OAmon.sys          Tue Sep  1 10:57:44 2009 (4A9D3668)
amdxata.sys        Fri Mar 19 12:19:01 2010 (4BA3A3F5)
OADriver.sys       Mon Apr 19 12:51:46 2010 (4BCC8A22)
iaStorV.sys        Thu Jun 10 20:45:02 2010 (4C11870E)
nusb3hub.sys       Thu Nov 18 20:34:11 2010 (4CE5D413)
nusb3xhc.sys       Thu Nov 18 20:34:12 2010 (4CE5D414)
AVGIDSEH.Sys       Tue Feb 22 00:22:33 2011 (4D634819)
LEqdUsb.Sys        Fri Sep  2 02:21:49 2011 (4E6075FD)
LHidEqd.Sys        Fri Sep  2 02:21:52 2011 (4E607600)
LHidFilt.Sys       Fri Sep  2 02:22:16 2011 (4E607618)
LMouFilt.Sys       Fri Sep  2 02:22:22 2011 (4E60761E)
GEARAspiWDM.sys    Thu May  3 15:55:59 2012 (4FA2E2CF)
AtihdW73.sys       Fri May 11 04:24:52 2012 (4FACCCD4)
atikmdag.sys       Mon Apr 29 22:02:54 2013 (517F264E)
atikmpag.sys       Mon Apr 29 22:47:51 2013 (517F30D7)
mbam.sys           Wed Sep  3 13:50:19 2014 (540754DB)
avgtdix.sys        Mon Nov  3 21:44:39 2014 (54583D97)
avkmgr.sys         Mon Mar  9 11:13:56 2015 (54FDB8B4)
avgntflt.sys       Fri Oct 30 05:56:58 2015 (56333EEA)
avnetflt.sys       Mon Nov  2 10:33:54 2015 (56378262)
avipbb.sys         Tue Nov  3 08:37:58 2015 (5638B8B6)
http://www.carrona.org/drivers/driver.php?id=giveio.sys
http://www.carrona.org/drivers/driver.php?id=speedfan.sys
http://www.carrona.org/drivers/driver.php?id=Rt86win7.sys
http://www.carrona.org/drivers/driver.php?id=ssmdrv.sys
http://www.carrona.org/drivers/driver.php?id=oanet.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=OAmon.sys
http://www.carrona.org/drivers/driver.php?id=amdxata.sys
http://www.carrona.org/drivers/driver.php?id=OADriver.sys
http://www.carrona.org/drivers/driver.php?id=iaStorV.sys
http://www.carrona.org/drivers/driver.php?id=nusb3hub.sys
http://www.carrona.org/drivers/driver.php?id=nusb3xhc.sys
http://www.carrona.org/drivers/driver.php?id=AVGIDSEH.Sys
http://www.carrona.org/drivers/driver.php?id=LEqdUsb.Sys
http://www.carrona.org/drivers/driver.php?id=LHidEqd.Sys
http://www.carrona.org/drivers/driver.php?id=LHidFilt.Sys
http://www.carrona.org/drivers/driver.php?id=LMouFilt.Sys
http://www.carrona.org/drivers/driver.php?id=GEARAspiWDM.sys
http://www.carrona.org/drivers/driver.php?id=AtihdW73.sys
http://www.carrona.org/drivers/driver.php?id=atikmdag.sys
http://www.carrona.org/drivers/driver.php?id=atikmpag.sys
http://www.carrona.org/drivers/driver.php?id=mbam.sys
http://www.carrona.org/drivers/driver.php?id=avgtdix.sys
http://www.carrona.org/drivers/driver.php?id=avkmgr.sys
http://www.carrona.org/drivers/driver.php?id=avgntflt.sys
http://www.carrona.org/drivers/driver.php?id=avnetflt.sys
http://www.carrona.org/drivers/driver.php?id=avipbb.sys
 


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#5 hike2climb

hike2climb
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:04:40 AM

Posted 30 December 2015 - 05:44 PM

I removed Windows Live, AVG and Avira had already been removed. I typically only have a single antivirus, I had removed Avira and put on AVG.  Windows Live had products like Writer, Messenger etc, but I had removed it anyway.  I'm not sure what Online Armor was? I searched on my system and didn't see anything with that name.

 

I have removed the Photosmart software and uninstalled the Teredo Tunneling and confirmed Device Manager is clean.

 

I updated Windows again; although, as I'm sure you're aware, I'm receiving the Windows 10 upgrade alert.

 

10/4 on the Ccleaner while monitoring the issue.

 

SpeedFan has been uninstalled.

 

I reviewed the motherboard and chipset drivers from the manufacturer website and confirmed I have the latest driver installed on my machine.

 

I'll reply back with results after a couple of days to see if the issue returns.  Thanks for your assistance!



#6 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:05:40 AM

Posted 01 January 2016 - 05:24 AM

Online Armor used to be a personal firewall.

I believe it was bought out (and is now used by) Emsisoft

More info on it here:  http://blog.emsisoft.com/2015/03/31/emsisoft-online-armor-support-roadmap/


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#7 hike2climb

hike2climb
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:04:40 AM

Posted 09 January 2016 - 01:28 PM

While playing iTunes and surfing the web with about 7 or 8 tabs open with Google Chrome, it started back again. Luckily, I didn't have to reboot the computer to get back to normal as it eventually corrected itself. It seems like something is triggering this but still can't pinpoint it.

 

Any other ideas?



#8 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:05:40 AM

Posted 10 January 2016 - 07:13 AM

It's awfully hard to pinpoint problems of this sort

Especially when they correct themselves.

 

In this case it appears related to internet activity - which throws a whole 'nother wrench into the works.
What if the network is slowing down/speeding up on it's own? (we have this problem at work - and haven't been able to fix it for years!)

 

I'd wait until it happens again, then generate a new set of reports.

We'll look at them and see what seems to be out of the ordinary.


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#9 hike2climb

hike2climb
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:04:40 AM

Posted 18 January 2016 - 12:48 PM

I had Internet Explorer open with two tabs and one Google Chrome tab open when it happened again.  See attached for reports.

 

Unfortunately, I'm unable to run the report WHILE it's happening because it causes whatever application I'm on to refresh at a high rate. It eventually, again, corrected itself, so I ran the report.

 

 

Attached Files



#10 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:05:40 AM

Posted 19 January 2016 - 05:19 AM

I understand that you can't run reports while it's happening - but the reports that we do gather will have information of the events that happened previously.

The reason for doing them just after the problem occurs is that the problems will be near the beginning of the reports - and that may make them a bit easier to see.

 

The first issue is that there's only 1 item from 18 January in the Admin logfile.  The next entry is from 16 January.  I'd expect to see more entries if it was a problem within Windows.

As such, please start with these free hardware diagnostics:  http://www.carrona.org/hwdiag.html

Please start with the hard drive diagnostics.

 

The next issue that I note is problems with the Bonjour service and it's task scheduling.

I'd suggest uninstalling the Bonjour and the Bonjour Print Services from Control Panel...Programs and Features (if needed, iTunes will let you know to download a new copy)

 

I also noticed a problem with AVG Secure Search.  If it's not already uninstalled, please uninstall it now.

 

There are very few entries from 18 January in the System Event Log, and only 1 from 18 January in the Application Event Log.
Was the system used in between 16 and 18 January?  It's unusual for errors not to show up on a system that's being used.

Again, the most likely cause of this is a hardware problem.  And the most likely hardware problem is a dying hard drive.

 

I would strongly suggest backing up your data immediately.

If this is a dying hard drive, you don't know when it will die completely.

So it's imperative that you back it up ASAP to avoid data loss.


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users