Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

High CPU svchost.exe PID 1092 Networking and DNS


  • Please log in to reply
13 replies to this topic

#1 QuiltFinger

QuiltFinger

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:06:37 AM

Posted 24 January 2016 - 09:48 AM

Hello,

 

I've been having a problem with ridiculous CPU usage. It's been happening for ages, and I'm finally fed up with it. The draw makes the fan go crazy, so I can hear my computer from two rooms away. Oy!

 

I've narrowed the problem down to svchost.exe (NetworkService) PID 1092 with CPUs regularly over 50. The usage within the process comes from one of 6 services that are also labeled 1092. LanmanWorkstation is a big offender. There's also MsMpSvc, NlaSvc, dnscache and Cryptsvc. Telephony and remote desktop, don't seem to do much.

 

I'm not sure if this is weird or not, but there aren't any svchost entries in the process or application tabs of my Task Manager. But the 1092 entries are running in the services tab.

 

Here's what I have done

 

I have suspended the Network Service svchost. The CPU dropped quickly to less than 5%, but I couldn't open some programs or surf the web.
 

I flushed the DNS using ipconfig /flushDNS. It helped for 5 minutes or so, but it's back.

 

There are times when the computer is quiet, but it revs up for no reason, for example in the middle of the night or while I'm watching TV and haven't opened any new programs or windows.

 

Also, I had been blaming this problem on Firefox, but it happens when Windows Live Mail and Firefox are closed.

 

I have a few other issues that have popped up recently, but I don't t think they aren't related.

 

Oh, it might not matter, but my internet is now running through Network 14, from moving and switching plans a few times.

 

Thanks so much for your help in advance. Kindly let me know if there's any more information that I can provide.

 

P.S. I'm attaching a screen shot of the CPU usage graph. Attached File  CPU.jpg   218.06KB   0 downloads Hope that works.



BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,896 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:37 AM

Posted 24 January 2016 - 11:27 AM

Please download MiniToolBox  , save it to your desktop and run it.
 
Checkmark the following checkboxes:
  List last 10 Event Viewer log
  List Installed Programs
  List Users, Partitions and Memory size.
 
Click Go and paste the content into your next post.
 
Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post.
 
Louis



#3 QuiltFinger

QuiltFinger
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:06:37 AM

Posted 24 January 2016 - 12:08 PM

Hi Louis,

 

Thank you SO MUCH for your reply. I'm working on downloading speccy now. Here's the tool box log.

 

 

 

MiniToolBox by Farbar  Version: 02-11-2015
Ran by Lzy (administrator) on 24-01-2016 at 11:03:47
Running from "C:\Users\Lzy\Downloads"
Microsoft Windows 7 Professional  Service Pack 1 (X64)
Model: OptiPlex 745 Manufacturer: Dell Inc.

Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (01/24/2016 09:03:43 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/23/2016 08:58:51 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80004005

Error: (01/23/2016 12:24:46 PM) (Source: System Restore) (User: )
Description: Failed to create restore point (Process = C:\windows\system32\svchost.exe -k netsvcs; Description = Windows Update; Error = 0x80070422).

Error: (01/23/2016 12:14:00 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/23/2016 11:22:54 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/23/2016 10:20:35 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/23/2016 08:54:20 AM) (Source: System Restore) (User: )
Description: Failed to create restore point (Process = C:\windows\system32\msiexec.exe /V; Description = Installed Python 2.6 (64-bit); Error = 0x80070422).

Error: (01/23/2016 08:54:19 AM) (Source: System Restore) (User: )
Description: Failed to create restore point (Process = C:\windows\system32\msiexec.exe /V; Description = Installed Python 2.6 (64-bit); Error = 0x80070422).

Error: (01/23/2016 07:18:58 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/23/2016 07:17:53 AM) (Source: Windows Search Service) (User: )
Description: The index cannot be initialized.
Details:      The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)

System errors:
=============
Error: (01/24/2016 10:44:49 AM) (Source: ipnathlp) (User: )
Description: 0

Error: (01/24/2016 10:06:48 AM) (Source: ipnathlp) (User: )
Description: 0

Error: (01/24/2016 07:24:42 AM) (Source: Service Control Manager) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Dnscache service.

Error: (01/24/2016 07:24:12 AM) (Source: Service Control Manager) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the LanmanWorkstation service.

Error: (01/24/2016 03:48:31 AM) (Source: ipnathlp) (User: )
Description: 0

Error: (01/23/2016 11:34:05 AM) (Source: Microsoft Antimalware) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.
    New Signature Version:
    Previous Signature Version: 1.213.3796.0
    Update Source: %NT AUTHORITY59
    Update Stage: 4.7.0205.00
    Source Path: 4.7.0205.01
    Signature Type: %NT AUTHORITY602
    Update Type: %NT AUTHORITY604
    User: NT AUTHORITY\SYSTEM
    Current Engine Version: %NT AUTHORITY605
    Previous Engine Version: %NT AUTHORITY606
    Error code: %NT AUTHORITY607
    Error description: %NT AUTHORITY608

Error: (01/23/2016 11:34:05 AM) (Source: Microsoft Antimalware) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.
    New Signature Version:
    Previous Signature Version: 1.213.3796.0
    Update Source: %NT AUTHORITY59
    Update Stage: 4.7.0205.00
    Source Path: 4.7.0205.01
    Signature Type: %NT AUTHORITY602
    Update Type: %NT AUTHORITY604
    User: NT AUTHORITY\SYSTEM
    Current Engine Version: %NT AUTHORITY605
    Previous Engine Version: %NT AUTHORITY606
    Error code: %NT AUTHORITY607
    Error description: %NT AUTHORITY608

Error: (01/23/2016 11:21:11 AM) (Source: EventLog) (User: )
Description: The previous system shutdown at 11:18:41 AM on ‎1/‎23/‎2016 was unexpected.

Error: (01/23/2016 11:17:57 AM) (Source: NetBT) (User: )
Description: The name "LZY-PC         :0" could not be registered on the interface with IP address 10.0.0.8.  The computer with the IP address 169.254.148.240 did not allow the name to be claimed by this computer.

Error: (01/23/2016 11:17:57 AM) (Source: NetBT) (User: )
Description: The name "LZY-PC         :20" could not be registered on the interface with IP address 10.0.0.8.  The computer with the IP address 169.254.148.240 did not allow the name to be claimed by this computer.

Microsoft Office Sessions:
=========================
Error: (01/24/2016 09:03:43 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/23/2016 08:58:51 PM) (Source: Customer Experience Improvement Program)(User: )
Description: 80004005

Error: (01/23/2016 12:24:46 PM) (Source: System Restore)(User: )
Description: C:\windows\system32\svchost.exe -k netsvcsWindows Update0x80070422

Error: (01/23/2016 12:14:00 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/23/2016 11:22:54 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/23/2016 10:20:35 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/23/2016 08:54:20 AM) (Source: System Restore)(User: )
Description: C:\windows\system32\msiexec.exe /VInstalled Python 2.6 (64-bit)0x80070422

Error: (01/23/2016 08:54:19 AM) (Source: System Restore)(User: )
Description: C:\windows\system32\msiexec.exe /VInstalled Python 2.6 (64-bit)0x80070422

Error: (01/23/2016 07:18:58 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/23/2016 07:17:53 AM) (Source: Windows Search Service)(User: )
Description:
Details:     The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)

CodeIntegrity Errors:
===================================
  Date: 2015-09-06 08:47:16.638
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\BufferZone\RlHook64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-09-06 08:27:44.458
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\BufferZone\RlHook64.dll because the set of per-page image hashes could not be found on the system.

=========================== Installed Programs ============================
Adblock Plus for IE (32-bit and 64-bit) (HKLM\...\{77588F59-3C58-4675-8EEE-998E5BC33CF4}) (Version: 1.4 - Eyeo GmbH)
Adobe Acrobat 8 Professional (HKLM-x32\...\Adobe Acrobat 8 Professional) (Version: 8.0.0 - Adobe Systems)
Adobe Digital Editions 4.0 (HKLM-x32\...\Adobe Digital Editions 4.0) (Version: 4.0.3 - Adobe Systems Incorporated)
Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.228 - Adobe Systems Incorporated)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version:  - ‪Canon Inc.‬)
Canon MG2200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG2200_series) (Version: 1.00 - Canon Inc.)
Canon MG2200 series On-screen Manual (HKLM-x32\...\Canon MG2200 series On-screen Manual) (Version: 7.5.0 - Canon Inc.)
Canon MG2200 series User Registration (HKLM-x32\...\Canon MG2200 series User Registration) (Version:  - Canon Inc.‎)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.0.0 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.0 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.12 - Piriform)
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Corel Painter Lite - IPM (HKLM\...\{F5DD1EE4-9015-4180-89A0-DC7B00F1DD04}) (Version: 1.01 - Corel Corporation) Hidden
Corel Painter Lite (HKLM\...\_{16E336F3-CA33-4D5C-B3E7-042C5873E69E}) (Version: 1.0.1010.0 - Corel Corporation)
Coupon Printer for Windows (HKLM-x32\...\Coupon Printer for Windows5.0.1.6) (Version: 5.0.1.6 - Coupons.com Incorporated)
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
EBSCO Publishing Download Manager (HKLM-x32\...\{B7CA99A3-8B8F-4760-B5CF-B422C06ECFE3}) (Version: 1.1.3 - EBSCO Publishing)
Ginger (HKLM-x32\...\{1EBF9A59-F4E3-4EA7-BA97-76703C1432F6}) (Version: 3.7.41 - Ginger Software) Hidden
Ginger (HKLM-x32\...\InstallShield_{1EBF9A59-F4E3-4EA7-BA97-76703C1432F6}) (Version: 3.7.41 - Ginger Software)
Glary Duplicate Cleaner 5.0.1.22 (HKLM-x32\...\Glary Duplicate Cleaner) (Version: 5.0.1.22 - Glarysoft Ltd)
Intel® Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Junk Mail filter update (HKLM-x32\...\{8E5233E1-7495-44FB-8DEB-4BE906D59619}) (Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Kindle Kids' Book Creator (HKCU\...\KKBC) (Version: 1.003 - Amazon)
Kindle Previewer (HKCU\...\KindlePreviewer) (Version: 2.923 - Amazon)
Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{91110409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.7.205.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Web Publishing Wizard 1.52 (HKLM-x32\...\WebPost) (Version:  - )
Mozilla Firefox 41.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 41.0 (x86 en-US)) (Version: 41.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0 - Mozilla)
MPC-HC 1.7.5 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.5 - MPC-HC Team)
OpenOffice.org 3.3 (HKLM-x32\...\{3E171899-0175-47CC-84C4-562ACDD4C021}) (Version: 3.3.9567 - OpenOffice.org)
OverDrive for Windows (HKLM-x32\...\{36994F59-D10D-46DD-A040-C5D095C2A3E9}) (Version: 3.4.1 - OverDrive, Inc.)
Painter Lite - Content (HKLM\...\{E8CBA7F7-1DFB-4A84-BED2-93F8D46FCC38}) (Version: 1.0 - Corel Corporation) Hidden
Painter Lite - Core (HKLM\...\{26ABD007-B756-4231-A047-175317639E23}) (Version: 1.0 - Corel Corporation) Hidden
Painter Lite - Corex64 (HKLM\...\{DB0C39A6-A6CB-4D96-933E-4E98F329E901}) (Version: 1.0 - Corel Corporation) Hidden
Painter Lite - EN (HKLM\...\{568EF145-A1ED-4B60-8FEE-3EDAAF08FA81}) (Version: 1.0 - Corel Corporation) Hidden
Painter Lite - Setup Files (HKLM\...\{16E336F3-CA33-4D5C-B3E7-042C5873E69E}) (Version: 1.0 - Corel Corporation) Hidden
Python 2.6 (64-bit) (HKLM\...\{110EB5C4-E995-4CFB-AB80-A5F315BEA9E9}) (Version: 2.6.150 - Python Software Foundation)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Shockwave (HKLM-x32\...\Shockwave) (Version:  - )
SoundMAX (HKLM-x32\...\{F0A37341-D692-11D4-A984-009027EC0A9C}) (Version: 6.10.2.7265 - Analog Devices)
The Print Shop (HKLM-x32\...\{FB26EA24-AE01-4C86-BEBC-424D5B81E66E}) (Version:  - Broderbund LLC)
Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live Sign-in Assistant (HKLM-x32\...\{45338B07-A236-4270-9A77-EBB4115517B5}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{B10914FD-8812-47A4-85A1-50FCDE7F1F33}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live Upload Tool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

========================= Memory info: ===================================
Percentage of memory in use: 39%
Total physical RAM: 4021.61 MB
Available physical RAM: 2424.93 MB
Total Virtual: 8041.42 MB
Available Virtual: 6201.88 MB

========================= Partitions: =====================================
1 Drive c: (OS) (Fixed) (Total:64.25 GB) (Free:19.12 GB) NTFS
2 Drive d: (Recovery) (Fixed) (Total:9.77 GB) (Free:4.45 GB) NTFS

========================= Users: ========================================
User accounts for \\LZY-PC

Administrator            Guest                    Lzy                      


**** End of log ****


Edited by hamluis, 24 January 2016 - 03:40 PM.


#4 QuiltFinger

QuiltFinger
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:06:37 AM

Posted 24 January 2016 - 12:18 PM

And, here's the link to the speccy results.



#5 Phantom010

Phantom010

  • Members
  • 1,022 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cyberspace
  • Local time:07:37 AM

Posted 24 January 2016 - 12:55 PM

Could you please run MiniToolBox again? This time, select the List content of Hosts box only. Click Go and copy/paste the content into your next reply.



#6 QuiltFinger

QuiltFinger
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:06:37 AM

Posted 24 January 2016 - 01:09 PM

No problem.

 

I recognize these results. They showed up about two weeks ago. I tried to x out of an ad on a bad site, and it took me to a nasty "this is a windows security alert" page. I tried to force internet explore to close from task manager and it opened maybe 5 new windows. Then, my taskbar and desktop disappeared. I ran rkill to abort anything that was trying to run. Rkill didn't find anything, but it listed these 100 link sites at the end of the log.

 

I don't know enough, but it seems like they are using my computer's internal IP loop thing?

 

MiniToolBox by Farbar  Version: 02-11-2015
Ran by Lzy (administrator) on 24-01-2016 at 12:04:03
Running from "C:\Users\Lzy\Downloads"
Microsoft Windows 7 Professional  Service Pack 1 (X64)
Model: OptiPlex 745 Manufacturer: Dell Inc.
Boot Mode: Normal
***************************************************************************
========================= Hosts content: =================================
127.0.0.1    www.007guard.com
127.0.0.1    007guard.com
127.0.0.1    008i.com
127.0.0.1    www.008k.com
127.0.0.1    008k.com
127.0.0.1    www.00hq.com
127.0.0.1    00hq.com
127.0.0.1    010402.com
127.0.0.1    www.032439.com
127.0.0.1    032439.com
127.0.0.1    www.0scan.com
127.0.0.1    0scan.com
127.0.0.1    www.1000gratisproben.com
127.0.0.1    1000gratisproben.com
127.0.0.1    1001namen.com
127.0.0.1    www.1001namen.com
127.0.0.1    100888290cs.com
127.0.0.1    www.100888290cs.com
127.0.0.1    www.100sexlinks.com
127.0.0.1    100sexlinks.com
127.0.0.1    www.10sek.com
127.0.0.1    10sek.com
127.0.0.1    www.1-2005-search.com
127.0.0.1    1-2005-search.com
127.0.0.1    www.123fporn.info
127.0.0.1    123fporn.info
127.0.0.1    123haustiereundmehr.com
127.0.0.1    www.123haustiereundmehr.com
127.0.0.1    123moviedownload.com
127.0.0.1    www.123moviedownload.com

There are 15236 entries.


**** End of log ****
 



#7 Phantom010

Phantom010

  • Members
  • 1,022 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cyberspace
  • Local time:07:37 AM

Posted 24 January 2016 - 01:14 PM

Looks like you had Spybot installed before, but it left the Hosts file entries behind.

 

Do the following:

 

Reset Hosts File to Default

 

Download and run the "Easy Fix".


Edited by Phantom010, 24 January 2016 - 01:14 PM.


#8 QuiltFinger

QuiltFinger
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:06:37 AM

Posted 24 January 2016 - 01:59 PM

I had a bit of difficulty with this step. The first easy fix produced no change after restart. I attempted to change the hosts manually. The log then said no host file. Then, I did easy fix again. This is the new hosts log.

 

By the way, when I tried to rename the hosts file for the manual steps, it said that the hosts file was currently in use by Cryptographic Services.

 

MiniToolBox by Farbar  Version: 02-11-2015
Ran by Lzy (administrator) on 24-01-2016 at 12:55:31
Running from "C:\Users\Lzy\Downloads"
Microsoft Windows 7 Professional  Service Pack 1 (X64)
Model: OptiPlex 745 Manufacturer: Dell Inc.
Boot Mode: Normal
***************************************************************************
========================= Hosts content: =================================

**** End of log ****
 



#9 Phantom010

Phantom010

  • Members
  • 1,022 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cyberspace
  • Local time:07:37 AM

Posted 24 January 2016 - 02:04 PM

Ok, now watch your CPU for a while and let us know if there's any improvement.



#10 QuiltFinger

QuiltFinger
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:06:37 AM

Posted 24 January 2016 - 02:19 PM

Great! Will do. I think my internet speed improved. Since I activated our own modem yesterday, it was taking a full minute or more for pages to load, and that's at 29 Mb/second. My husband kept yelling, it's your settings, it's your computer. That was after we changed the cable and did all sorts of nonsense.

 

Things seem better now. I will keep you posted. Thanks so much for your help. Enjoy your Sunday afternoon!



#11 Phantom010

Phantom010

  • Members
  • 1,022 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cyberspace
  • Local time:07:37 AM

Posted 24 January 2016 - 02:27 PM

Having such a large Hosts file can indeed slow browsing speed.



#12 QuiltFinger

QuiltFinger
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:06:37 AM

Posted 03 February 2016 - 09:19 AM

Hello again,

 

Thanks so much for bearing with me. I'm still having some problems with the CPU skyrocketing unpredictably. I installed Chrome to see if Firefox is to blame. I have to say that I like Chrome because it has less nonsense, more like the ancient versions on FF. However, when using tabs, it looks like each tab has its own entry in Resource Monitor, so it's difficult for me to tell how much memory its using.

 

 

I've had the problem strike in all three browsers, including IE. It has happened with one window open or a dozen tabs. It seems like Resource Performance Manager and Antimalware Service Executable sometimes use CPU too at those moments.

 

Thank you very much for your help so far. It has made a difference. I will be able to get back to you as soon as I can.

 

Oh, just thought that I should mention that I have about a million bookmarks.



#13 Phantom010

Phantom010

  • Members
  • 1,022 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cyberspace
  • Local time:07:37 AM

Posted 03 February 2016 - 10:30 AM

Could also be related to your antivirus. Try disabling MSE temporarily to see if it makes a significant difference.


Edited by Phantom010, 03 February 2016 - 10:31 AM.


#14 QuiltFinger

QuiltFinger
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:06:37 AM

Posted 24 February 2016 - 01:18 PM

Hello again,

 

I'm finally back. So, I disabled MS Security Essentials. Well, what I did was turn off real time protection. I haven't noticed much change.

 

A few days ago, I had to install a real anti virus program for a new work project, so I uninstalled Security Essentials and installed Ad-Aware with Web Companion. It seems that Windows Defender is disabled now. One thing I did notice while sitting on the couch was that the hard drive light seems to flicker or stay on completely when the CPU and fan rev up.--At least I think that it's the hard drive light. It looks like a little canister.

 

All of this happens when I have one browser window open with just one tab, so Firefox is only using maybe 300,000K of memory, which is really low for me. Physical memory has been 2.6 or 2.4 without doing much either.

 

I've also noticed that if I watch videos that machine goes crazy. I suppose that they are HTML 5, since I don't have the Flash add-on installed for Firefox. I don't know what any of this means, so I hope that I'm giving you the right information.

 

I think I have a tech support number for the refurbishing company I bought the machine from, I just saw that somewhere, if you think I should call them.

 

Thanks again for your help, and I really appreciate your giving me the time.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users