Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

old laptop is working very slow, Toshiba Satellite M60 BK3


  • Please log in to reply

#61
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,625 posts
  • MVP

Looks like I am going to need a full log plus another junk.txt file taken at the same time as the log.

 

Copy the next 2 lines:

TASKLIST /SVC  > \junk.txt
notepad \junk.txt

Open an Elevated Command Prompt:
Win 7: Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator
Win 8: http://www.eightforu...indows-8-a.html
win 10: http://www.howtogeek...-in-windows-10/

Right click and Paste (or Edit then Paste) and the copied lines should appear.
Hit Enter if notepad does not open.  Copy and paste the text from notepad into a reply.

 

A full process monitor log is enormous so will need to be uploaded to a file sharing service

 

See: https://www.hongkiat...g-alternatives/

 

then you post the link to the file. 
 


  • 0

Advertisements


#62
mraskin

mraskin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 238 posts
here is the junk.txt log :
 
Image Name                     PID Services                                    
========================= ======== ============================================
System Idle Process              0 N/A                                         
System                           4 N/A                                         
smss.exe                       308 N/A                                         
csrss.exe                      408 N/A                                         
wininit.exe                    464 N/A                                         
csrss.exe                      472 N/A                                         
services.exe                   520 N/A                                         
lsass.exe                      544 KeyIso, SamSs                               
lsm.exe                        552 N/A                                         
winlogon.exe                   568 N/A                                         
svchost.exe                    696 DcomLaunch, PlugPlay, Power                 
svchost.exe                    768 RpcEptMapper, RpcSs                         
svchost.exe                    868 Audiosrv, Dhcp, eventlog,                   
                                   HomeGroupProvider, lmhosts, wscsvc          
svchost.exe                    908 AudioEndpointBuilder, CscService, hidserv,  
                                   HomeGroupListener, Netman, PcaSvc, SysMain, 
                                   TabletInputService, TrkWks, UxSms, Wlansvc  
svchost.exe                    936 EventSystem, fdPHost, FontCache, netprofm,  
                                   nsi, W32Time, WdiServiceHost,               
                                   WinHttpAutoProxySvc                         
svchost.exe                    960 BITS, Browser, EapHost, gpsvc, IKEEXT,      
                                   iphlpsvc, LanmanServer, MMCSS, ProfSvc,     
                                   Schedule, SENS, ShellHWDetection, Themes,   
                                   Winmgmt, wuauserv                           
svchost.exe                   1308 CryptSvc, Dnscache, LanmanWorkstation,      
                                   NlaSvc, TapiSrv                             
AvastSvc.exe                  1384 avast! Antivirus                            
spoolsv.exe                   1464 Spooler                                     
svchost.exe                   1508 BFE, DPS, MpsSvc                            
Crypserv.exe                  1672 CrypKey License                             
svchost.exe                   1696 DiagTrack                                   
DSAService.exe                1812 DSAService                                  
taskhost.exe                   212 N/A                                         
dwm.exe                        352 N/A                                         
explorer.exe                  1132 N/A                                         
AvastUI.exe                   2052 N/A                                         
svchost.exe                   2128 StiSvc                                      
FXSSVC.exe                    2384 Fax                                         
SearchIndexer.exe             3472 WSearch                                     
aswidsagent.exe               3624 aswbIDSAgent                                
wmpnetwk.exe                  1216 WMPNetworkSvc                               
svchost.exe                   3232 FDResPub, SSDPSRV, upnphost                 
svchost.exe                   3180 p2pimsvc, p2psvc, PNRPsvc                   
chrome.exe                    1428 N/A                                         
chrome.exe                    3692 N/A                                         
chrome.exe                    3428 N/A                                         
chrome.exe                     228 N/A                                         
chrome.exe                    4024 N/A                                         
taskhost.exe                  4576 N/A                                         
chrome.exe                    5940 N/A                                         
chrome.exe                    5504 N/A                                         
chrome.exe                    5332 N/A                                         
chrome.exe                    4484 N/A                                         
Procmon.exe                   5808 N/A                                         
iexplore.exe                  4408 N/A                                         
iexplore.exe                  4460 N/A                                         
GoogleToolbarUser_32.exe      3524 N/A                                         
SoftwareUpdate.exe            3964 N/A                                         
audiodg.exe                   4764 N/A                                         
cmd.exe                       5968 N/A                                         
conhost.exe                   3648 N/A                                         
tasklist.exe                  1764 N/A                                         
WmiPrvSE.exe                  4920 N/A                                         

  • 0

#63
mraskin

mraskin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 238 posts

here is the link to download the logfile.csv

 

https://www.dropbox....ogfile.CSV?dl=0


  • 0

#64
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,625 posts
  • MVP

I see three things that look a bit odd.

 

svchost.exe (pid 960) seems to repeat more times than I would expect.  This is

 

svchost.exe                    960 BITS, Browser, EapHost, gpsvc, IKEEXT,      
                                   iphlpsvc, LanmanServer, MMCSS, ProfSvc,     
                                   Schedule, SENS, ShellHWDetection, Themes,   

                                   Winmgmt, wuauserv       

 

so most likely either BITS or wuauserv is doing something.  BITS is Background Intelligent Transfer Service and wuauserv is Windows Update

 

It does a lot of talking to victoria-laptop using

 

svchost.exe                   3232 FDResPub, SSDPSRV, upnphost                 

svchost.exe                   3180 p2pimsvc, p2psvc, PNRPsvc          

 

It is talking a lot to the audio driver.

 

So search for:

 

services.msc

hit Enter

 

This should open the Services window.  Find Windows Update, right click and Stop the service.

 

Open Process Explorer and see if it has any effect on Interrupts

 

Find Background Intelligent Transfer Service, right click and Stop the service.

 

see if it has any effect on Interrupts

 

Now search for

 

device manager

 

hit Enter to bring up the Device Manager Window.

 

Find the Network Adapters and click on the arrow in front to open.  Right click on each and Disable.  (You don't need to do any WAN Miniports)

 

Check Interrupts

 

Find Sound Video and Game Controllers and click on the arrow in front to open.  Right click on each and Disable. 

 

Check Interrupts

 

Any effect on Interrupts in any of the above?


  • 0

#65
mraskin

mraskin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 238 posts

I did as per your instructions, and no any change with Interrupts. the value fluctuates between 6 to 18.


  • 0

#66
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,625 posts
  • MVP

Make a new Process Monitor log but wait at least 10 minutes after the PC boots before stating process monitor.  Also wait a bit longer before stopping the monitor.


  • 0

#67
mraskin

mraskin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 238 posts

here is the link for new logfile.csv

 

https://www.dropbox....ogfile.CSV?dl=0


  • 0

#68
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,625 posts
  • MVP

This one shows a lot of installs going on.  Don't know if Windows Updates is hard at work or if Windows Installer is going crazy.

 

If you go in to services.msc

 

and find Windows Installer can you change the Startup Type: to disabled and Apply then reboot.

 

Does Process Explorer still show high interrupts?


  • 0

#69
mraskin

mraskin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 238 posts

I disabled the Startup Type and rebooted the laptop. Interrupts are between 2.6 to 16.8.

Should I restore back the Startup Type of Windows Installer ?


Edited by mraskin, 11 December 2017 - 08:26 PM.

  • 0

#70
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,625 posts
  • MVP

Yes.   While in Services, try disabling Windows Management Instrumentation (WMI) see if it makes a difference.


  • 0

Advertisements


#71
mraskin

mraskin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 238 posts

disabled WMI , no any difference with Interrupts 


  • 0

#72
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,625 posts
  • MVP

Go in to Process Explorer.

 

Right click on each entry except:

 

    System Idle Process
    explorer.exe
    taskmgr.exe
    spoolsv.exe
    lsass.exe
    csrss.exe
    smss.exe
    winlogon.exe
    svchost.exe – (There will be a few of these)
    services.exe

 

and SUSPEND.  Watch Interrupts.  Does it suddenly drop?

 

If not start suspending svchost.exe processes.  (If you hover over the process it should tell you what services run on it.  Report the services if suspending an svchost makes a difference.)


  • 0

#73
mraskin

mraskin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 238 posts

I suspended 95% of the process (not including svhost.exe) and it did not effect Interrupts at all. The laptop froze right after that.

I had to hard reboot and repeated the steps. Same thing after about 95% of processes being suspended the laptop froze again. Did hard reboot again.

Tried to do the suspension faster this time and was able to do it all. All this exercise didn't effect Interrupts. laptop froze again.

After the hard reboot I suspended all 12 svhost.exe and no any effect on Interrupts.


Edited by mraskin, 16 December 2017 - 01:45 PM.

  • 0

#74
mraskin

mraskin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 238 posts

Happy New Year!!!

The laptop is still working slow. Anything else can be done?


  • 0

#75
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,625 posts
  • MVP

Only thing I can think of is to try Process Monitor.  Perhaps it can see what is going on.  http://live.sysinternals.com/Procmon.exe Download, Save and run it by right click and Run As Admin. 

 

As soon as it starts, File, then uncheck Capture Events.  Once it stops,Now click at the top of the page and then go down to the bottom of the page, hold down the shift key and click on the last line.  That should highlight a full page of events.

File, Save, All Events, Format: Comma-Separated Values (CSV) then OK.  It should save the file to logfile.csv which should be on your desktop.  Close Process Monitor.  zip up the logfile.csv and attach it to a Reply.  (You can also rename it to logfile.txt and attach it)

 

See next post


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP