Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Computer Suddenly Slow, Constant High CPU


  • This topic is locked This topic is locked
14 replies to this topic

#1 pidjinn

pidjinn

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:07:36 PM

Posted 16 September 2016 - 07:53 AM

I noticed this while gaming, but the problem seems further than that. I typically use this laptop for games, and it's ran fine for years. I know it's not a "gaming" computer, but it's been able to handle things like Metal Gear Solid V on low settings relatively painlessly. However, I got on yesterday, and noticed it running a lot choppier than it ever has in game. I chalked this up to the internet, and tried playing offline. It was just as bad. Then I tried some lower end games, which should run perfect and did in the past, and even they're stuttering a lot. Right now, all I have really running is Firefox and this tab, and my CPU usage is bouncing from 70 to 100, and during games it's in the high 90s-100.
 
I don't know what the issue could be. During games I've always kept it on a fan and kept it cold. All I have running right now is this tab and my CPU usage is at 96. That can't be normal, can it?
 

Edit: I've also noticed that this slowdown only happens after 20~ minutes of the computer being on. CPU usage is at around 60ish before this, and the games run smoothly. I haven't noticed any other programs or processes popping up over this time.

Edited by pidjinn, 16 September 2016 - 09:40 AM.


BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,554 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:01:36 PM

Posted 16 September 2016 - 09:45 AM

Please download MiniToolBox  , save it to your desktop and run it.
 
Checkmark the following checkboxes:
  List last 10 Event Viewer log
  List Installed Programs
  List Users, Partitions and Memory size.
 
Click Go and paste the content into your next post.
 
Also...please Publish a Snapshot using Speccy taking care to post the link of the snapshot in your next post.

   Go to Piriform's website, and download the free version on the left.  Click Download from Piriform.com (the FileHippo link requires an extra click). Or if you want to use a portable version of Speccy (which doesn't require installation), click the builds page link and download the portable version. You will now be asked where you want to save the file. The best place to put it is the Desktop, as it will be easy to find later.

    After the file finishes downloading, you are ready to run Speccy. If you downloaded the installer, simply double-click on it and follow the prompts until installation is complete. If you downloaded the portable version, you will need to unzip it before use. Right-click the ZIP file and click Extract all. Click Next. Open up the extracted folder and double-click on Speccy.
 
     Once inside Speccy, it will look similar to this (with your computer's specifications, of course): p22004369.gif

     Now, at the top, click File > Publish Snapshot. You will see the following prompt:

p22004371.gif

     Click Yes > then Copy to Clipboard

p22004372.gif

Now, once you are back in the forum topic you are posting in, click the p22004370.gif button. Right-click in the empty space of the Reply box and click Paste. Then, click Add Reply below the Reply box.

 

Louis



#3 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,393 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:11:36 AM

Posted 16 September 2016 - 11:54 AM

Do you have a update that is hanging at its installation?

 

Please use the Snipping tool to create an image of the Task Manager showing Processes and post it in this topic.

 

You can post the image in your next post as an attachment.  

 
Just below the area where you write text in a post there is the Post button, to the right of this is More Reply Options
 
Post2_zpsf05c0430.png
 
When you click on More Relpy Options  you will see Attach Files and Browse, click on Browse, this will open Pictures on your computer, click on the image you want to post, then click on Attach This File, then Add Reply.
 
attachment_zps9v6amtri.png

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#4 Willy22

Willy22

  • Members
  • 945 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Planet Earth
  • Local time:07:36 PM

Posted 16 September 2016 - 01:05 PM

- It COULD be a "Windows Update" problem. One syptom of that problem is (very) high CPU. Try this:

http://www.tweaking.com/forums/index.php/topic,4799.0.html



#5 pidjinn

pidjinn
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:07:36 PM

Posted 16 September 2016 - 02:24 PM

Also, I've just ran an Avira scan, and at 100% it seemed to be hanging on "node.exe" rather than ending and going to a report. I don't remember how the scan worked previously, but I thought before it would give me me some indication that it was finished. Right now it's just still on the "100%" screen, still giving me the stop/pause options as if the scan is on going, on an object only known as "node.exe". Not sure if that's relevant at all!

 

J2KdsPo.png

 

edit: apparently the node.exe is associated with Prey, which I've had installed for awhile and is a bit less worrying, but leaving this in for posterity.

 

 

- It COULD be a "Windows Update" problem. One syptom of that problem is (very) high CPU. Try this:

http://www.tweaking.com/forums/index.php/topic,4799.0.html

 

Step 1a
- Download and run the "Svchost Look up tool".
http://www.tweaking.com/content/page/tweaking_com_svchost_exe_lookup_tool.html
Maximize the GUI and click on "Refresh". If the "PID memory" of the Service called "Wuauserv" is very high (larger than say 100 to 150 MB) then the user has this particular "Windows Update" problem. Proceed with step 1b.

 

The memory is only 45.25MB on this
 

Step 1b
- Open in Task Manager the "Process" tab and click on the "Show processes from all users" button to let Task Manager show all running processes. Because we interested in how the "Svchost.exe" processes behave.
- Open in Task Manager the "Service" tab and highlight the Service called "Wuauserv". Then right click and select "Go to Process". Task Manager will re-open the "Process" tab and highlight one "Svchost.exe" process. If the highlighted "Svchost.exe" process has high CPU usage in combination with high memory usage (larger than say 100 to 150 MB) then it's indeed this particular "Windows Update" problem. Then and only then the user can proceed with this guide.

 

But the svchosts do seem high (see screenshot?). Should I continue with this?

 

 

 

Do you have a update that is hanging at its installation?

 

Please use the Snipping tool to create an image of the Task Manager showing Processes and post it in this topic.

 

I don't believe so, I'll attach my processes list as "Processes.png", though.

Attached Files


Edited by pidjinn, 16 September 2016 - 02:46 PM.


#6 pidjinn

pidjinn
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:07:36 PM

Posted 16 September 2016 - 02:41 PM

Speccy screenshot: http://speccy.piriform.com/results/jhDHyXekihfsZHw56RVS3Ue
 
 
MTB Log:
 
MiniToolBox by Farbar  Version: 17-06-2016
Ran by Will (administrator) on 16-09-2016 at 14:27:55
Running from "C:\Users\Will\Downloads"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Model: Aspire 7551 Manufacturer: Acer

Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (09/16/2016 01:52:04 PM) (Source: Application Error) (User: )
Description: Faulting application name: wpxsvc.exe, version: 1.0.0.0, time stamp: 0x00000000
Faulting module name: ntdll.dll, version: 6.1.7601.23418, time stamp: 0x5708a73e
Exception code: 0xc00000fd
Fault offset: 0x0002df76
Faulting process id: 0x12084
Faulting application start time: 0xwpxsvc.exe0
Faulting application path: wpxsvc.exe1
Faulting module path: wpxsvc.exe2
Report Id: wpxsvc.exe3

Error: (09/16/2016 12:21:07 PM) (Source: Application Error) (User: )
Description: Faulting application name: wpxsvc.exe, version: 1.0.0.0, time stamp: 0x00000000
Faulting module name: ntdll.dll, version: 6.1.7601.23418, time stamp: 0x5708a73e
Exception code: 0xc00000fd
Fault offset: 0x0002df76
Faulting process id: 0x6f0
Faulting application start time: 0xwpxsvc.exe0
Faulting application path: wpxsvc.exe1
Faulting module path: wpxsvc.exe2
Report Id: wpxsvc.exe3

Error: (09/16/2016 10:51:53 AM) (Source: Application Error) (User: )
Description: Faulting application name: PLFSetI.exe, version: 1.0.1.0, time stamp: 0x471d62d0
Faulting module name: PLFSetI.exe, version: 1.0.1.0, time stamp: 0x471d62d0
Exception code: 0xc0000005
Fault offset: 0x00001afe
Faulting process id: 0xa2c
Faulting application start time: 0xPLFSetI.exe0
Faulting application path: PLFSetI.exe1
Faulting module path: PLFSetI.exe2
Report Id: PLFSetI.exe3

System errors:
=============
Error: (09/16/2016 01:52:06 PM) (Source: Service Control Manager) (User: )
Description: The Cron Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (09/16/2016 12:21:16 PM) (Source: Service Control Manager) (User: )
Description: The Cron Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (09/16/2016 07:58:09 AM) (Source: Service Control Manager) (User: )
Description: The Spybot-S&D 2 Scanner Service service failed to start due to the following error: %%1053 = The service did not respond to the start or control request in a timely fashion.

Error: (09/16/2016 07:58:09 AM) (Source: Service Control Manager) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Spybot-S&D 2 Scanner Service service to connect.

Error: (09/16/2016 06:54:37 AM) (Source: Service Control Manager) (User: )
Description: The Cron Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (09/15/2016 10:47:16 PM) (Source: Service Control Manager) (User: )
Description: The Cron Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (09/15/2016 09:15:57 PM) (Source: Service Control Manager) (User: )
Description: The Cron Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (09/15/2016 07:24:43 PM) (Source: volsnap) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

Error: (09/15/2016 07:13:23 PM) (Source: Service Control Manager) (User: )
Description: The Spybot-S&D 2 Scanner Service service failed to start due to the following error:
%%1053 = The service did not respond to the start or control request in a timely fashion.

Error: (09/15/2016 07:13:23 PM) (Source: Service Control Manager) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Spybot-S&D 2 Scanner Service service to connect.

Microsoft Office Sessions:
=========================
Error: (09/16/2016 01:52:04 PM) (Source: Application Error)(User: )
Description: wpxsvc.exe1.0.0.000000000ntdll.dll6.1.7601.234185708a73ec00000fd0002df761208401d2103ec15bde2cC:\Windows\Prey\wpxsvc.exeC:\Windows\SysWOW64\ntdll.dlla884a4d2-7c3e-11e6-ba78-206a8a16c3e2

Error: (09/16/2016 12:21:07 PM) (Source: Application Error)(User: )
Description: wpxsvc.exe1.0.0.000000000ntdll.dll6.1.7601.234185708a73ec00000fd0002df766f001d21031dfa2bed4C:\Windows\Prey\wpxsvc.exeC:\Windows\SysWOW64\ntdll.dllf3e97b47-7c31-11e6-ba78-206a8a16c3e2

Error: (09/16/2016 10:51:53 AM) (Source: Application Error)(User: )
Description: PLFSetI.exe1.0.1.0471d62d0PLFSetI.exe1.0.1.0471d62d0c000000500001afea2c01d210323cef3f5aC:\Windows\PLFSetI.exeC:\Windows\PLFSetI.exe7c288e4f-7c25-11e6-ba78-206a8a16c3e2

=========================== Installed Programs ============================
µTorrent (HKCU\...\uTorrent) (Version: 3.4.7.42330 - BitTorrent Inc.)
100% Orange Juice (HKLM-x32\...\Steam App 282800) (Version:  - Orange_Juice)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Acceleration of Suguri X-Edition (HKLM-x32\...\Steam App 265170) (Version:  - Orange_Juice)
Acer Backup Manager (HKLM-x32\...\InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}) (Version: 2.0.0.68 - NewTech Infosystems)
Acer Crystal Eye Webcam (HKLM-x32\...\{7760D94E-B1B5-40A0-9AA0-ABF942108755}) (Version: 5.2.19.3 - Suyin Optronics Corp)
Acer Crystal Eye Webcam 2.0.7 (HKLM-x32\...\{A77255C4-AFCB-44A3-BF0F-2091A71FFD9E}) (Version: 2.0.7 - SuYin)
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 5.00.3005 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3013 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.03.3003 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3001 - Acer Incorporated)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.017.20053 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9130 - Adobe Systems Inc.)
Adobe Flash Player 23 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 23.0.0.162 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.162 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.7.157 - Adobe Systems, Inc.)
Akamai NetSession Interface (HKCU\...\Akamai) (Version:  - Akamai Technologies, Inc)
Alcor Micro USB Card Reader (HKLM-x32\...\{DD89CE29-BC88-40C6-A845-E2548682C5D6}) (Version: 1.9.17.06019 - Alcor Micro Corp.) Hidden
Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{DD89CE29-BC88-40C6-A845-E2548682C5D6}) (Version: 1.9.17.06019 - Alcor Micro Corp.)
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.105.2015.1111 - Alps Electric)
AMD Catalyst Install Manager (HKLM\...\{7E5DC2C5-115A-322B-976C-219237FAED66}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.20.59 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{82dc2ab6-088f-4e0a-8e27-bb829481d3bc}) (Version: 1.2.70.16079 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{8CC8333A-AC85-4E68-88BB-4E3452CE4981}) (Version: 1.2.70.16079 - Avira Operations GmbH & Co. KG) Hidden

Backup Manager Basic (HKLM-x32\...\{72B776E5-4530-4C4B-9453-751DF87D9D93}) (Version: 2.0.0.68 - NewTech Infosystems) Hidden
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - )
Bastion (HKLM-x32\...\Steam App 107100) (Version:  - Supergiant Games)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Broadcom Gigabit NetLink Controller (HKLM\...\{A84DB02B-9C2B-4272-9D2D-A80E00A56513}) (Version: 14.2.4.2 - Broadcom Corporation)
Castle Crashers (HKLM-x32\...\Steam App 204360) (Version:  - The Behemoth)
CCleaner (HKLM\...\CCleaner) (Version: 4.06 - Piriform)
Cheat Engine 6.5.1 (HKLM-x32\...\Cheat Engine 6.5.1_is1) (Version:  - Cheat Engine)
ConvertHelper 3.2 (HKLM\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF52}}_is1) (Version:  - DownloadHelper)
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.3216.50 - CyberLink Corp.)
Deadly Premonition: The Director's Cut (HKLM-x32\...\Steam App 247660) (Version:  - Rising Star Games)
Divekick (HKLM-x32\...\Steam App 244730) (Version:  - Iron Galaxy Studios)
Dragon's Dogma: Dark Arisen (HKLM\...\Steam App 367500) (Version:  - Capcom)
Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD)
Duck Game (HKLM-x32\...\Steam App 312530) (Version:  - Landon Podbielski)
Dungeons & Dragons: Chronicles of Mystara (HKLM-x32\...\Steam App 229480) (Version:  - Iron Galaxy Studios)
Eldritch (HKLM-x32\...\Steam App 252630) (Version:  - Minor Key Games)
Emily is Away (HKLM-x32\...\Steam App 417860) (Version:  - Kyle Seeley)
FINAL FANTASY III (HKLM-x32\...\Steam App 239120) (Version:  - Square Enix)
FINAL FANTASY VII (HKLM-x32\...\Steam App 39140) (Version:  - Square Enix)
GECK - New Vegas Edition (HKLM-x32\...\Steam App 22480) (Version:  - )
Goat Simulator (HKLM-x32\...\Steam App 265930) (Version:  - Coffee Stain Studios)
Gone Home (HKLM-x32\...\Steam App 232430) (Version:  - The Fullbright Company)
Grand Pigeon's Duty (HKLM\...\Steam App 449530) (Version:  - WolfgangIs)
Hammerwatch (HKLM-x32\...\Steam App 239070) (Version:  - )
Hatoful Boyfriend (HKLM-x32\...\Steam App 310080) (Version:  - Mediatonic)
Hatoful Boyfriend: Holiday Star (HKLM\...\Steam App 377080) (Version:  - Mediatonic)
Hotline Miami (HKLM-x32\...\Steam App 219150) (Version:  - Dennaton Games)
I Have No Mouth, and I Must Scream (HKLM-x32\...\Steam App 245390) (Version:  - )
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3003 - Acer Incorporated)
Ikaruga (HKLM-x32\...\Steam App 253750) (Version:  - Treasure)
Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.14 - Oracle Corporation)
Java SE Development Kit 8 Update 65 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180650}) (Version: 8.0.650.17 - Oracle Corporation)

Jet Set Radio (HKLM-x32\...\Steam App 205950) (Version:  - Blit Software)
Junk Mail filter update (HKLM-x32\...\{8E5233E1-7495-44FB-8DEB-4BE906D59619}) (Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Katawa Shoujo (HKLM-x32\...\Katawa Shoujo) (Version:  - )
La-Mulana (HKLM-x32\...\Steam App 230700) (Version:  - NIGORO)
Launch Manager (HKLM-x32\...\LManager) (Version: 4.0.7 - Acer Inc.)
Lexmark 2600 Series (HKLM\...\Lexmark 2600 Series) (Version:  - Lexmark International, Inc.)
LIMBO (HKLM-x32\...\Steam App 48000) (Version:  - )
Long Live The Queen (HKLM-x32\...\Steam App 251990) (Version:  - Hanako Games)
Marlow Briggs (HKLM-x32\...\Steam App 249680) (Version:  - Zootfly)
METAL GEAR SOLID V: THE PHANTOM PAIN (HKLM\...\Steam App 287700) (Version:  - Konami Digital Entertainment)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{887868A2-D6DE-3255-AA92-AA0B5A59B874}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mount & Blade: Warband (HKLM-x32\...\Steam App 48700) (Version:  - TaleWorlds Entertainment)
Mozilla Firefox 48.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 48.0.2 (x86 en-US)) (Version: 48.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 48.0.2.6079 - Mozilla)
Mp3tag v2.72 (HKLM-x32\...\Mp3tag) (Version: v2.72 - Florian Heidenreich)
Necropolis (HKLM-x32\...\1453282796_is1) (Version: 2.3.0.5 - GOG.com)
NEO AQUARIUM - The King of Crustaceans - (HKLM-x32\...\Steam App 355240) (Version:  - Nussoft)
Nidhogg (HKLM-x32\...\Steam App 94400) (Version:  - Messhof)
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenOffice 4.0.1 (HKLM-x32\...\{47F460DA-D1BE-4D85-8DF2-AA1F31D3445F}) (Version: 4.01.9714 - Apache Software Foundation)
Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)
PAC-MAN Championship Edition DX+ (HKLM-x32\...\Steam App 236450) (Version:  - Mine Loader Software Co., Ltd.)
paint.net (HKLM\...\{DD393E4D-76FA-4CCD-84F3-CD9D75C14862}) (Version: 4.0.10 - dotPDN LLC)
Papers, Please (HKLM-x32\...\Steam App 239030) (Version:  - 3909)
PBar Plugin (remove only) (HKLM-x32\...\pidgin-pbar) (Version: 0.3 - David Hauweele)
Phantasy Star Online Blue Burst Compatibility Patch v3.0 (Vista/7) (HKLM\...\{d0f8581d-65c5-4e25-9ce3-de61ac24327b}.sdb) (Version:  - )
Pidgin (HKLM-x32\...\Pidgin) (Version: 2.10.10 - )
Prey Anti-Theft (HKLM-x32\...\{592D43DB-C3CD-41D2-A967-AB5B510C029C}) (Version: 1.5.0 - Prey, Inc.) Hidden
Princess Remedy in a World of Hurt (HKLM-x32\...\Steam App 407900) (Version:  - Ludosity)
Psychonauts (HKLM-x32\...\Steam App 3830) (Version:  - Double Fine Productions, Inc.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.990 - Even Balance, Inc.)
QuickSFV (Remove only) (HKLM\...\QuickSFV) (Version:  - )
QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6167 - Realtek Semiconductor Corp.)
Recettear: An Item Shop's Tale (HKLM-x32\...\Steam App 70400) (Version:  - EasyGameStation)
redist (HKLM-x32\...\{153C7D89-9CF4-4719-A551-C5BF45236DB5}) (Version: 1.0.0.0 - redist)
Retro City Rampage™ (HKLM-x32\...\Steam App 204630) (Version:  - )
Revo Uninstaller 1.92 (HKLM-x32\...\Revo Uninstaller) (Version: 1.92 - VS Revo Group)
Rodina (HKLM\...\Steam App 314230) (Version:  - Elliptic Games)
Rogue Legacy (HKLM-x32\...\Steam App 241600) (Version:  - Cellar Door Games)
Saints Row 2 (HKLM-x32\...\Steam App 9480) (Version:  - Volition)
Shovel Knight (HKLM-x32\...\Steam App 250760) (Version:  - Yacht Club Games)
Shufflepuck Cantina Deluxe (HKLM-x32\...\Steam App 259510) (Version:  - Agharta Studio)
Skullgirls (HKLM-x32\...\Steam App 245170) (Version:  - Lab Zero Games)
Skype™ 7.26 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.26.101 - Skype Technologies S.A.)
Sonic & All-Stars Racing Transformed (HKLM-x32\...\Steam App 212480) (Version:  - Sumo Digital)
Speccy (HKLM\...\Speccy) (Version: 1.29 - Piriform)
Spiral Knights (HKLM\...\Steam App 99900) (Version:  - Grey Havens)
Star Wars - Battlefront II (HKLM-x32\...\Steam App 6060) (Version:  - Pandemic Studios)
Starbound (HKLM-x32\...\Steam App 211820) (Version:  - )
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Strike Suit Zero (HKLM-x32\...\Steam App 209540) (Version:  - )
Super Street Fighter IV: Arcade Edition (HKLM-x32\...\Steam App 45760) (Version:  - )
Superbrothers: Sword & Sworcery EP (HKLM-x32\...\Steam App 204060) (Version:  - )
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Sword of the Samurai (HKLM-x32\...\Steam App 327950) (Version:  - MicroProse Software, Inc)
System Requirements Lab (HKLM-x32\...\{FEE1F166-EAE4-4C4B-8988-D82521F9F63F}) (Version: 6.1.5.0 - Husdawg, LLC)
System Requirements Lab CYRI (64-bit) (HKLM\...\{D01E478E-05BE-46BC-AF96-DD40EABA1F6A}) (Version: 4.4.26.0 - Husdawg, LLC)
System Requirements Lab Detection (HKLM-x32\...\{B3908294-2D04-41C0-9F4D-870AF975F42C}) (Version: 6.1.6.0 - Husdawg, LLC)
T.E.C. 3001 (HKLM-x32\...\Steam App 280910) (Version:  - Phoenix Game Studio)
Teleglitch: Die More Edition (HKLM-x32\...\Steam App 234390) (Version:  - Test3 Projects)
The Chronicles of Riddick: Assault on Dark Athena (HKLM-x32\...\Steam App 9860) (Version:  - Starbreeze Studios)
The Elder Scrolls III: Morrowind (HKLM-x32\...\Steam App 22320) (Version:  - Bethesda Softworks)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)
The Polynomial (HKLM-x32\...\Steam App 67000) (Version:  - Dmytry Lavrov)
the static speaks my name (HKLM-x32\...\Steam App 387860) (Version:  - Jesse Barksdale)
Tom Clancy's Splinter Cell: Chaos Theory (HKLM-x32\...\Steam App 13570) (Version:  - Ubisoft Montreal)
Treasure Planet Battle at Procyon (HKLM-x32\...\Steam App 331970) (Version:  - Barking Dog Studios)
Ultimate Knight Windom XP (HKLM-x32\...\Ultimate Knight Windom XP) (Version: PowerUp Kit ver.2.008 - Project Windom)
Undertale (HKLM-x32\...\Steam App 391540) (Version:  - tobyfox)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft)
Vampire: The Masquerade - Bloodlines (HKLM-x32\...\Steam App 2600) (Version:  - Activision)
VC80CRTRedist - 8.0.50727.6195 (HKLM-x32\...\{933B4015-4618-4716-A828-5289FC03165F}) (Version: 1.2.0 - DivX, Inc) Hidden
Vista Shortcut Manager x64 (HKLM\...\{C7311329-C491-427B-8880-133E84869B3A}) (Version: 2.0 - Frameworkx)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Way of the Samurai 4 (HKLM-x32\...\Steam App 312780) (Version:  - ACQUIRE Corp.)
Wild Animal Racing (HKLM\...\Steam App 389510) (Version:  - Paul Bird)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{B10914FD-8812-47A4-85A1-50FCDE7F1F33}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live Upload Tool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
You Have to Win the Game (HKLM\...\Steam App 286100) (Version:  - Minor Key Games)
Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation)

========================= Memory info: ===================================
Percentage of memory in use: 62%
Total physical RAM: 4094.17 MB
Available physical RAM: 1535.22 MB
Total Virtual: 8186.53 MB
Available Virtual: 5278.29 MB

========================= Partitions: =====================================
1 Drive c: (Xanadu) (Fixed) (Total:452.97 GB) (Free:127.19 GB) NTFS

========================= Users: ========================================
User accounts for \\MATILDA

Administrator            back door                Guest                    
Will                     


**** End of log ****


Edited by hamluis, 17 September 2016 - 10:21 AM.


#7 Willy22

Willy22

  • Members
  • 945 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Planet Earth
  • Local time:07:36 PM

Posted 16 September 2016 - 02:56 PM

- Run the "Svchost look up" tool. I see one "Svchost" process using over 200 MB. Is that the process that's using 43% of CPU ?

http://www.majorgeeks.com/files/details/tweaking_com_svchost_exe_lookup_tool.html


Edited by Willy22, 16 September 2016 - 03:07 PM.


#8 pidjinn

pidjinn
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:07:36 PM

Posted 16 September 2016 - 04:56 PM

- Run the "Svchost look up" tool. I see one "Svchost" process using over 200 MB. Is that the process that's using 43% of CPU ?

http://www.majorgeeks.com/files/details/tweaking_com_svchost_exe_lookup_tool.html

 

--------------------------------------------------------------
Service Display Name: Application Experience
Service: AeLookupSvc
PID: 1020
PID Memory: 47.39 MB
Path: C:\Windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Application Information
Service: Appinfo
PID: 1020
PID Memory: 47.39 MB
Path: C:\Windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Background Intelligent Transfer Service
Service: BITS
PID: 1020
PID Memory: 47.39 MB
Path: C:\Windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Base Filtering Engine
Service: BFE
PID: 1380
PID Memory: 20.20 MB
Path: C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: COM+ Event System
Service: EventSystem
PID: 996
PID Memory: 19.70 MB
Path: C:\Windows\system32\svchost.exe -k LocalService
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Computer Browser
Service: Browser
PID: 1020
PID Memory: 47.39 MB
Path: C:\Windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Cryptographic Services
Service: CryptSvc
PID: 1036
PID Memory: 16.61 MB
Path: C:\Windows\system32\svchost.exe -k NetworkService
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: DCOM Server Process Launcher
Service: DcomLaunch
PID: 700
PID Memory: 09.42 MB
Path: C:\Windows\system32\svchost.exe -k DcomLaunch
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Desktop Window Manager Session Manager
Service: UxSms
PID: 968
PID Memory: 255.74 MB
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: DHCP Client
Service: Dhcp
PID: 932
PID Memory: 28.20 MB
Path: C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Diagnostic Policy Service
Service: DPS
PID: 1380
PID Memory: 20.20 MB
Path: C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Diagnostic Service Host
Service: WdiServiceHost
PID: 996
PID Memory: 19.70 MB
Path: C:\Windows\System32\svchost.exe -k LocalService
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Diagnostics Tracking Service
Service: DiagTrack
PID: 1808
PID Memory: 11.55 MB
Path: C:\Windows\System32\svchost.exe -k utcsvc
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Distributed Link Tracking Client
Service: TrkWks
PID: 968
PID Memory: 255.74 MB
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: DNS Client
Service: Dnscache
PID: 1036
PID Memory: 16.61 MB
Path: C:\Windows\system32\svchost.exe -k NetworkService
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Extensible Authentication Protocol
Service: EapHost
PID: 1020
PID Memory: 47.39 MB
Path: C:\Windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Function Discovery Provider Host
Service: fdPHost
PID: 996
PID Memory: 19.70 MB
Path: C:\Windows\system32\svchost.exe -k LocalService
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Function Discovery Resource Publication
Service: FDResPub
PID: 1980
PID Memory: 12.76 MB
Path: C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Group Policy Client
Service: gpsvc
PID: 1020
PID Memory: 47.39 MB
Path: C:\Windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: HomeGroup Listener
Service: HomeGroupListener
PID: 968
PID Memory: 255.74 MB
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: HomeGroup Provider
Service: HomeGroupProvider
PID: 932
PID Memory: 28.20 MB
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: IKE and AuthIP IPsec Keying Modules
Service: IKEEXT
PID: 1020
PID Memory: 47.39 MB
Path: C:\Windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: IP Helper
Service: iphlpsvc
PID: 1020
PID Memory: 47.39 MB
Path: C:\Windows\System32\svchost.exe -k NetSvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Multimedia Class Scheduler
Service: MMCSS
PID: 1020
PID Memory: 47.39 MB
Path: C:\Windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Network Connections
Service: Netman
PID: 968
PID Memory: 255.74 MB
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Network List Service
Service: netprofm
PID: 996
PID Memory: 19.70 MB
Path: C:\Windows\System32\svchost.exe -k LocalService
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Network Location Awareness
Service: NlaSvc
PID: 1036
PID Memory: 16.61 MB
Path: C:\Windows\System32\svchost.exe -k NetworkService
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Network Store Interface Service
Service: nsi
PID: 996
PID Memory: 19.70 MB
Path: C:\Windows\system32\svchost.exe -k LocalService
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Peer Name Resolution Protocol
Service: PNRPsvc
PID: 5748
PID Memory: 20.22 MB
Path: C:\Windows\System32\svchost.exe -k LocalServicePeerNet
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Peer Networking Grouping
Service: p2psvc
PID: 5748
PID Memory: 20.22 MB
Path: C:\Windows\System32\svchost.exe -k LocalServicePeerNet
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Peer Networking Identity Manager
Service: p2pimsvc
PID: 5748
PID Memory: 20.22 MB
Path: C:\Windows\System32\svchost.exe -k LocalServicePeerNet
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Plug and Play
Service: PlugPlay
PID: 700
PID Memory: 09.42 MB
Path: C:\Windows\system32\svchost.exe -k DcomLaunch
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Power
Service: Power
PID: 700
PID Memory: 09.42 MB
Path: C:\Windows\system32\svchost.exe -k DcomLaunch
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Program Compatibility Assistant Service
Service: PcaSvc
PID: 968
PID Memory: 255.74 MB
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Remote Procedure Call (RPC)
Service: RpcSs
PID: 796
PID Memory: 08.16 MB
Path: C:\Windows\system32\svchost.exe -k rpcss
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: RPC Endpoint Mapper
Service: RpcEptMapper
PID: 796
PID Memory: 08.16 MB
Path: C:\Windows\system32\svchost.exe -k RPCSS
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Security Center
Service: wscsvc
PID: 932
PID Memory: 28.20 MB
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Server
Service: LanmanServer
PID: 1020
PID Memory: 47.39 MB
Path: C:\Windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Shell Hardware Detection
Service: ShellHWDetection
PID: 1020
PID Memory: 47.39 MB
Path: C:\Windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: SSDP Discovery
Service: SSDPSRV
PID: 1980
PID Memory: 12.76 MB
Path: C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Superfetch
Service: SysMain
PID: 968
PID Memory: 255.74 MB
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: System Event Notification Service
Service: SENS
PID: 1020
PID Memory: 47.39 MB
Path: C:\Windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Task Scheduler
Service: Schedule
PID: 1020
PID Memory: 47.39 MB
Path: C:\Windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: TCP/IP NetBIOS Helper
Service: lmhosts
PID: 932
PID Memory: 28.20 MB
Path: C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Themes
Service: Themes
PID: 1020
PID Memory: 47.39 MB
Path: C:\Windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: UPnP Device Host
Service: upnphost
PID: 1980
PID Memory: 12.76 MB
Path: C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: User Profile Service
Service: ProfSvc
PID: 1020
PID Memory: 47.39 MB
Path: C:\Windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Windows Audio
Service: AudioSrv
PID: 932
PID Memory: 28.20 MB
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Windows Audio Endpoint Builder
Service: AudioEndpointBuilder
PID: 968
PID Memory: 255.74 MB
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Windows Error Reporting Service
Service: WerSvc
PID: 51004
PID Memory: 02.84 MB
Path: C:\Windows\System32\svchost.exe -k WerSvcGroup
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Windows Event Log
Service: eventlog
PID: 932
PID Memory: 28.20 MB
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Windows Firewall
Service: MpsSvc
PID: 1380
PID Memory: 20.20 MB
Path: C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Windows Font Cache Service
Service: FontCache
PID: 996
PID Memory: 19.70 MB
Path: C:\Windows\system32\svchost.exe -k LocalService
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Windows Image Acquisition (WIA)
Service: stisvc
PID: 2872
PID Memory: 06.43 MB
Path: C:\Windows\system32\svchost.exe -k imgsvc
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Windows Management Instrumentation
Service: Winmgmt
PID: 1020
PID Memory: 47.39 MB
Path: C:\Windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Windows Update
Service: wuauserv
PID: 1020
PID Memory: 47.39 MB
Path: C:\Windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: WLAN AutoConfig
Service: Wlansvc
PID: 968
PID Memory: 255.74 MB
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Workstation
Service: LanmanWorkstation
PID: 1036
PID Memory: 16.61 MB
Path: C:\Windows\System32\svchost.exe -k NetworkService
--------------------------------------------------------------
 



#9 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,393 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:11:36 AM

Posted 17 September 2016 - 09:44 AM

Open the Control Panel, select Updates.

 

When Updates opens select view update history.

 

Post any updates that occurred at the time that this problem started.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#10 pidjinn

pidjinn
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:07:36 PM

Posted 17 September 2016 - 02:28 PM

Open the Control Panel, select Updates.

 

When Updates opens select view update history.

 

Post any updates that occurred at the time that this problem started.

 

I've attached a screenshot of my recent updates, but this doesn't make any sense - these are all from an update that occurred last night. The most recent update before that is one from almost a month before today, when I wasn't having this problem. Perhaps this update from last night was pending, and that was giving me trouble? I'll try to run stuff and see if it's any better, but I don't know.

Attached Files



#11 pidjinn

pidjinn
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:07:36 PM

Posted 18 September 2016 - 01:03 PM

- It COULD be a "Windows Update" problem. One syptom of that problem is (very) high CPU. Try this:

http://www.tweaking.com/forums/index.php/topic,4799.0.html

 

So I've went through this whole thing. I got to the part where it wants me to install the packs/updates. Based on the info-text that it generated, I don't have any of them. But upon downloading from Microsoft, I can't install any of them because apparently they are already installed.



#12 pidjinn

pidjinn
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:07:36 PM

Posted 19 September 2016 - 12:13 AM

I followed the file location on one of the high use svchosts, and found it to be in the temp folder as opposed to system, so I'd assume it's a virus.

#13 hamluis

hamluis

    Moderator


  • Moderator
  • 55,554 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:01:36 PM

Posted 19 September 2016 - 07:04 AM

If you assume such...you should initiate a new topic in the Am I Infected forum.

 

Moving this topic to that forum would involve reflecting a number of posts that have nothing to do with suspected malware to that forum and it may delay receiving assistance in determining if malware is the source of your problems.

 

Louis



#14 pidjinn

pidjinn
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:07:36 PM

Posted 19 September 2016 - 05:13 PM

I understand - I'm going to run a few more scans myself before doing so. But thank you to all of you for the assistance, I wouldn't have made it that far otherwise.

#15 hamluis

hamluis

    Moderator


  • Moderator
  • 55,554 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:01:36 PM

Posted 20 September 2016 - 07:53 AM

New topic in AII:  http://www.bleepingcomputer.com/forums/t/627286/svchostexe-in-temp-folderhigh-cpu-usage/ .

 

This topic is closed to avoid confusion.

 

Louis






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users