Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

old laptop is working very slow, Toshiba Satellite M60 BK3


  • Please log in to reply

#61
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,003 posts
  • MVP

Looks like I am going to need a full log plus another junk.txt file taken at the same time as the log.

 

Copy the next 2 lines:

TASKLIST /SVC  > \junk.txt
notepad \junk.txt

Open an Elevated Command Prompt:
Win 7: Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator
Win 8: http://www.eightforu...indows-8-a.html
win 10: http://www.howtogeek...-in-windows-10/

Right click and Paste (or Edit then Paste) and the copied lines should appear.
Hit Enter if notepad does not open.  Copy and paste the text from notepad into a reply.

 

A full process monitor log is enormous so will need to be uploaded to a file sharing service

 

See: https://www.hongkiat...g-alternatives/

 

then you post the link to the file. 
 


  • 0

Advertisements


#62
mraskin

mraskin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 219 posts
here is the junk.txt log :
 
Image Name                     PID Services                                    
========================= ======== ============================================
System Idle Process              0 N/A                                         
System                           4 N/A                                         
smss.exe                       308 N/A                                         
csrss.exe                      408 N/A                                         
wininit.exe                    464 N/A                                         
csrss.exe                      472 N/A                                         
services.exe                   520 N/A                                         
lsass.exe                      544 KeyIso, SamSs                               
lsm.exe                        552 N/A                                         
winlogon.exe                   568 N/A                                         
svchost.exe                    696 DcomLaunch, PlugPlay, Power                 
svchost.exe                    768 RpcEptMapper, RpcSs                         
svchost.exe                    868 Audiosrv, Dhcp, eventlog,                   
                                   HomeGroupProvider, lmhosts, wscsvc          
svchost.exe                    908 AudioEndpointBuilder, CscService, hidserv,  
                                   HomeGroupListener, Netman, PcaSvc, SysMain, 
                                   TabletInputService, TrkWks, UxSms, Wlansvc  
svchost.exe                    936 EventSystem, fdPHost, FontCache, netprofm,  
                                   nsi, W32Time, WdiServiceHost,               
                                   WinHttpAutoProxySvc                         
svchost.exe                    960 BITS, Browser, EapHost, gpsvc, IKEEXT,      
                                   iphlpsvc, LanmanServer, MMCSS, ProfSvc,     
                                   Schedule, SENS, ShellHWDetection, Themes,   
                                   Winmgmt, wuauserv                           
svchost.exe                   1308 CryptSvc, Dnscache, LanmanWorkstation,      
                                   NlaSvc, TapiSrv                             
AvastSvc.exe                  1384 avast! Antivirus                            
spoolsv.exe                   1464 Spooler                                     
svchost.exe                   1508 BFE, DPS, MpsSvc                            
Crypserv.exe                  1672 CrypKey License                             
svchost.exe                   1696 DiagTrack                                   
DSAService.exe                1812 DSAService                                  
taskhost.exe                   212 N/A                                         
dwm.exe                        352 N/A                                         
explorer.exe                  1132 N/A                                         
AvastUI.exe                   2052 N/A                                         
svchost.exe                   2128 StiSvc                                      
FXSSVC.exe                    2384 Fax                                         
SearchIndexer.exe             3472 WSearch                                     
aswidsagent.exe               3624 aswbIDSAgent                                
wmpnetwk.exe                  1216 WMPNetworkSvc                               
svchost.exe                   3232 FDResPub, SSDPSRV, upnphost                 
svchost.exe                   3180 p2pimsvc, p2psvc, PNRPsvc                   
chrome.exe                    1428 N/A                                         
chrome.exe                    3692 N/A                                         
chrome.exe                    3428 N/A                                         
chrome.exe                     228 N/A                                         
chrome.exe                    4024 N/A                                         
taskhost.exe                  4576 N/A                                         
chrome.exe                    5940 N/A                                         
chrome.exe                    5504 N/A                                         
chrome.exe                    5332 N/A                                         
chrome.exe                    4484 N/A                                         
Procmon.exe                   5808 N/A                                         
iexplore.exe                  4408 N/A                                         
iexplore.exe                  4460 N/A                                         
GoogleToolbarUser_32.exe      3524 N/A                                         
SoftwareUpdate.exe            3964 N/A                                         
audiodg.exe                   4764 N/A                                         
cmd.exe                       5968 N/A                                         
conhost.exe                   3648 N/A                                         
tasklist.exe                  1764 N/A                                         
WmiPrvSE.exe                  4920 N/A                                         

  • 0

#63
mraskin

mraskin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 219 posts

here is the link to download the logfile.csv

 

https://www.dropbox....ogfile.CSV?dl=0


  • 0

#64
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,003 posts
  • MVP

I see three things that look a bit odd.

 

svchost.exe (pid 960) seems to repeat more times than I would expect.  This is

 

svchost.exe                    960 BITS, Browser, EapHost, gpsvc, IKEEXT,      
                                   iphlpsvc, LanmanServer, MMCSS, ProfSvc,     
                                   Schedule, SENS, ShellHWDetection, Themes,   

                                   Winmgmt, wuauserv       

 

so most likely either BITS or wuauserv is doing something.  BITS is Background Intelligent Transfer Service and wuauserv is Windows Update

 

It does a lot of talking to victoria-laptop using

 

svchost.exe                   3232 FDResPub, SSDPSRV, upnphost                 

svchost.exe                   3180 p2pimsvc, p2psvc, PNRPsvc          

 

It is talking a lot to the audio driver.

 

So search for:

 

services.msc

hit Enter

 

This should open the Services window.  Find Windows Update, right click and Stop the service.

 

Open Process Explorer and see if it has any effect on Interrupts

 

Find Background Intelligent Transfer Service, right click and Stop the service.

 

see if it has any effect on Interrupts

 

Now search for

 

device manager

 

hit Enter to bring up the Device Manager Window.

 

Find the Network Adapters and click on the arrow in front to open.  Right click on each and Disable.  (You don't need to do any WAN Miniports)

 

Check Interrupts

 

Find Sound Video and Game Controllers and click on the arrow in front to open.  Right click on each and Disable. 

 

Check Interrupts

 

Any effect on Interrupts in any of the above?


  • 0

#65
mraskin

mraskin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 219 posts

I did as per your instructions, and no any change with Interrupts. the value fluctuates between 6 to 18.


  • 0

#66
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,003 posts
  • MVP

Make a new Process Monitor log but wait at least 10 minutes after the PC boots before stating process monitor.  Also wait a bit longer before stopping the monitor.


  • 0

#67
mraskin

mraskin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 219 posts

here is the link for new logfile.csv

 

https://www.dropbox....ogfile.CSV?dl=0


  • 0

#68
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,003 posts
  • MVP

This one shows a lot of installs going on.  Don't know if Windows Updates is hard at work or if Windows Installer is going crazy.

 

If you go in to services.msc

 

and find Windows Installer can you change the Startup Type: to disabled and Apply then reboot.

 

Does Process Explorer still show high interrupts?


  • 0

#69
mraskin

mraskin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 219 posts

I disabled the Startup Type and rebooted the laptop. Interrupts are between 2.6 to 16.8.

Should I restore back the Startup Type of Windows Installer ?


Edited by mraskin, 8 minutes ago.

  • 0






Similar Topics

1 user(s) are reading this topic

1 members, 0 guests, 0 anonymous users


    mraskin

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP