Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Host Process and Superfetch Issues.


Best Answer Slime , 15 October 2016 - 10:16 AM

Hi FellaI hope you have a great trip.This thread was about host process and superftch issues and, to that end, it has been sorted.If I continue having update problems I'll start a new thread.I thin... Go to the full post »


  • Please log in to reply

#16
Slime

Slime

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 114 posts

Yes, I did.

Is there a problem?

Is there anything else I should have done?

 

Slime.


Edited by Slime, 06 September 2016 - 03:01 AM.

  • 0

Advertisements


#17
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP

No you were supposed to reboot after clearing the events and before running VEW.  The problem is your logs look too good to be true.  There's usually an event

 


Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped. 

 

 

which shows up in the sys log.  (It's a mistake by Microsoft since it's not a bad thing.)  The only time I get completely empty logs is when people forget to reboot before running VEW.
 
Can you run VEW again?  How is it running by the way?  

  • 0

#18
Slime

Slime

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 114 posts

These are my latest VEW logs;

 

Attached File  VEW APP 5.txt   879bytes   34 downloads

 

Attached File  VEW SYS 5.txt   1.01KB   32 downloads

 

 

 

As far as my machine is concerned ..................................... mostly good!

I get no 'Host Process' or 'Superfetch' errors, which was the reason for my post, my machine, however, is running very slowly.

It's never been very quick but it does seem very sluggish, especially when trying to open more than one atb at the same time.

This is possibly a consequence of being an old machine but, as far as I'm aware, I'm not asking it to do too much at any one time.

Can machines slow down just because they are old?

 

Thanks as always,

 

Slime.


  • 0

#19
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP

Your hard drive is probably getting old and causing the slowness::

 

Windows (2952) Windows: A request to read from the file "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" at offset 177594368 (0x000000000a95e000) for 8192 (0x00002000) bytes succeeded, but took an abnormally long time (83172 seconds) to be serviced by the OS. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.
 

 

 

From Speccy:
 
07
Attribute name Seek Error Rate
Real value 0
Current 66
Worst 55
Threshold 30
Raw Value 001C62A319
Status Good
 
B
Attribute name Reported Uncorrectable Errors
Real value 13
Current 87
Worst 87
Threshold 0
Raw Value 000000000D
Status Good
C3
Attribute name Hardware ECC Recovered
Real value 0
Current 53
Worst 45
Threshold 0
Raw Value 000677FD6C
Status Good
C5
Attribute name Current Pending Sector Count
Real value 1
Current 100
Worst 100
Threshold 0
Raw Value 0000000001
Status Good
C6
Attribute name Uncorrectable Sector Count
Real value 1
Current 100
Worst 100
Threshold 0
Raw Value 0000000001
Status Good
C7
Attribute name UltraDMA CRC Error Count
Real value 5
Current 200
Worst 200
Threshold 0
Raw Value 0000000005
Status Good

 

 
 
Ideally we want the Raw Values to be 0 on the above.  You have a Seagate drive and they have a really bad rep.  Probably time to get another drive (recommend Western Digital Black) and clone it.
 
Run Process Explorer again and create a log and let's see if there is anything else using up the CPU which would also cause ti to be slow.
 
The other error we get is:
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 06/09/2016 16:43:00
Type: Error Category: 0
Event: 10010 Source: Microsoft-Windows-DistributedCOM
The server {6295DF2D-35EE-11D1-8707-00C04FD93327} did not register with DCOM within the required timeout.
 
 

 

 

Try turning off mobsync:

 
 
Another possibility for a slow PC is overheating.  Speccy said it was running at 50 C but it might be that this climbs under load.  A hot PC is a slow PC.  The CPU slows down to protect itself.  
 
You can run Speedfan:
 
 
Download, save and Install it (Win 7 or Vista right click and Run As Admin.) then run it (Win 7 or Vista right click and Run As Admin.).
 
It will tell you your temps in real time tho the default is to show the hard drive temp in the systray.  You can change it:  Hit Configure then click on the highest temp and check Show in tray.  If the hotest entry goes over 65 then you may need to clean the heatsink.

  • 0

#20
Slime

Slime

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 114 posts

Hi RKinner.

 

1. A fresh Process Explorer log;

 

Attached File  Pro Exp 4.TXT   3.76KB   29 downloads

 

 

2. Mobsync successfully turned off.

 

 

3. SpeedFan issue?

I ran it as Administrator but only after I got the following error report!

 

SpeedFan Error Message..jpg

 

My machine has been running for a little while now and the temperature showing on my toolbar is currently 59°C.

 

I've also just gone to 'Windows Updates' and clicked on 'Check for Updates' and it's been checking for a while now. Is this normal?

 

Thanks as always,

 

Slime.

 

 

 


  • 0

#21
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP

Speedfan has to be run as Admin.  Not sure what your error means.  If I understand you correctly you got that trying to run Speedfan without Run As Admin?

 

Your Process Explorer shows svchost eating up the 1/2 of the CPU's time.  That's probably Windows Update.  I don't think Microsoft likes Vista or Windows 7 and makes Windows Update take forever to encourage you to upgrade to a newer version .    Sometimes it take 24 or more hours for it to finish looking for updates.  Sometimes 

the System Update Readiness tool will help:

http://www.majorgeek...iness_tool.html


  • 0

#22
Slime

Slime

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 114 posts

Hi again.

I've definitely been running SpeedFan as administrator and still get the message!

I'm also using the System Update Readiness tool ............................................ and it's still searching!

It's been searching for just over 22 hours now.

Anything else I can do?

 

Many thanks,

 

Slime.


  • 0

#23
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP

The error is caused by edatasecurity.  They have their own libeay32.dll which is fine but they put the path for it in the Path before everything else so all programs look there first.  If you don't use it,

uninstall Acer eDataSecurity Management.  If you do use it then try getting the latest version.  If that doesn't help then do:

 

Copy the next 2 lines:

set path > \junk.txt
notepad \junk.txt

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  Right click and Paste (or Edit then Paste) and the copied lines should appear.  Hit Enter if notepad does not open.  Copy and paste the text from notepad into a reply. 

 

 I assume you did not stop the original Windows Upgrade search first.  You probably need to repeat what you did back in post 9:

http://www.geekstogo...s/#entry2577220

 

Then once you verify that Process Explorer looks good (svchost is not in the top) then try running it again.  It still usually takes about 3 hours.


  • 0

#24
Slime

Slime

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 114 posts

I now have the latest verion of Acer eDataSecurity Management, but it's made no difference!

What are the implications of uninstalling it? I don't think I am using it, certainly not consciously.

 

This is the Junk log you requested;

 

Path=C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
Pathtem=C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Program Files\Acer\Empowering Technology\eDataSecurity\;C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86;C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64
 

 

 

Slime.


  • 0

#25
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP

If you don't use it I think you can remove it.  If I understand it correctly you can right click on a file and then encrypt it using edatasecurity.  If you haven't done that to any files you probably don't need it.


  • 0

Advertisements


#26
Slime

Slime

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 114 posts

I've just binned Acer eDataSecurity and, while I was at it, I got rid of a whole load of Acer programmes that I never use!

I still can't seem to find any Windows updates.

Looking at my update history it would appear that I installed some updates just five days ago, although they all relate to Microsoft .Net Framework!

 

This is my current Process Explorer screenshot;

 

 

Sys Pro Screenshot.jpg


  • 0

#27
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP

Search for

 

services.msc

hit Enter

 

Find Window Update and stop it.  Does the svchost drop off the top in Process Explorer?

 

Let's see some new VEW logs.


  • 0

#28
Slime

Slime

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 114 posts

Hi RKinner

Sorry for the delay, I've been away a bit recently.

I've switched of Windows Updates and have the following logs for you;

 

Attached File  VEW App 20-09.txt   9.51KB   31 downloads

 

Attached File  VEW Sys 20-09.txt   17.72KB   27 downloads

 

 

Attached File  Process Explorer 20-09.TXT   3.82KB   30 downloads

 

 

Thanks again,

 

Slime.


  • 0

#29
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,799 posts
  • MVP

Delays are no problem.  I don't keep track.

 


Log: 'Application' Date/Time: 20/09/2016 14:27:38
Type: Error Category: 0
Event: 34 Source: VSS
Volume Shadow Copy Service error: The VSS event class is not registered.  This will prevent any VSS writers from receiving events.  This may be caused due to a setup failure or as a result of an  application's installer or uninstaller. 
 
Operation:
   Gathering Writer Data
   Executing Asynchronous Operation
 
Context:
   Execution Context: Requestor
   Current State: GatherWriterMetadata

 

 

Let's see if we can figure out what is wrong here:
 

Copy the next 2 lines:

reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}\EventClasses\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}" > \junk.txt
notepad \junk.txt
 
Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  Right click and Paste (or Edit then Paste) and the copied lines should appear.  Hit Enter if notepad does not open.  Copy and paste the text from notepad into a reply.  
 
Log: 'System' Date/Time: 18/09/2016 15:15:07
Type: Warning Category: 0
Event: 36 Source: Microsoft-Windows-Time-Service
The time service has not synchronized the system time for 86400 seconds because none of the time service providers provided a usable time stamp. The time service will not update the local system time until it is able to synchronize with a time source. If the local system is configured to act as a time server for clients, it will stop advertising as a time source to clients. The time service will continue to retry and sync time with its time sources. Check system event log for other W32time events for more details. Run 'w32tm /resync' to force an instant time synchronization.
 

 

 

 
This one may be the root of your problem.  If the time isn't correct it has problems with https connections.  Right click on the clock and select Adjust Date/Time.  Verify the time and date are correct then click on Internet Time then on Change Settings.  Update Now.  If it fails to update try changing the time source to time.nist.gov
 
Process Explorer looks very good right now.
 

  • 0

#30
Slime

Slime

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 114 posts

Hi mate.

Below is my Junk log as requested,

 

Attached File  junk 26-09.txt   726bytes   20 downloads

 

I also tried to update my time/date settings and ended up with the following error message,

 

Time Change Error..jpg

 

I hope this helps,

 

Slime.


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP