Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Computer is slow

Started by butterrice , Mar 28 2020 12:51 PM

  • Please log in to reply

#1
butterrice
Posted 28 March 2020 - 12:51 PM

butterrice

    Member

  • Member
  • PipPipPip
  • 403 posts

HP 15 running Windows 10. Computer is running slow.  at times while I'm typing the computer freezes and will take a few minutes to catch up. Pages will freeze and have to restart computer.  I have not seen any error messages. 

 

Edited to add: There is a message popping up stating that a page did load with an option to recover the page.  Once recovered, navigating the page is difficult. 

Attached Files


Edited by butterrice, 28 March 2020 - 12:57 PM.

  • 0

Advertisements

#2
RKinner
Posted 28 March 2020 - 02:04 PM

RKinner

    Malware Expert

  • Expert
  • 24,622 posts
  • MVP

Several obvious problems but no infection that I can see:

 

1.  Windows Defender is enabled.  McAfee Disabled.  Assume McAfee came as a free trial with the PC and you didn't pay for it.  Even tho it is disabled it is eating up CPU time.  You need to uninstall it  (Search for Control panel, View by: Large Icons, then Programs & Features, click on McAfee and Uninstall) then since it is practically as hard to get rid of as a virus you need to download the McAfee Consumer Product Removal tool (MCPR)  from

http://us.mcafee.com...s/mcpr/mcpr.asp

then right click and Run As Administrator.  Follow the prompts and reboot when done.

 

2.  You are still on version 1703 so are almost 3 years behind in updates.  (You should be at 1903).  Once you get too far behind the standard update process won't work.  Instead go to

https://www.microsof...nload/windows10

Click on Update Now and download and Save the file.  Right click on it and Run As Admin.

Follow the prompts.  It will probably reboot several times and it may take several hours to complete.

 

Note 1703 uses the original version of the  Edge browser which Microsoft never really got to work right.  They have since replaced it with a Chromium based browser (uses the same basic underpinnings at Chrome).

 

Once you do the above then I will need a new FRST scan and also:

 

Get Process Explorer

https://live.sysinte...com/procexp.exe

Save it to your desktop then run it (Vista or Win7+ - right click and Run As Administrator).  

View, Select Column, check Verified Signer, OK
Options, Verify Image Signatures


Click twice on the CPU column header  to sort things by CPU usage with the big hitters at the top.  

Wait a full minute then:

File, Save As, Save.  Note the file name.   Open the file  on your desktop and copy and paste the text to a reply.


Copy the next 2 lines:

TASKLIST /SVC  > \junk.txt
notepad \junk.txt

Open an Elevated Command Prompt:
Win 7: Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator
Win 8: http://www.eightforu...indows-8-a.html
win 10: http://www.howtogeek...-in-windows-10/

Right click and Paste (or Edit then Paste) and the copied lines should appear.
Hit Enter if notepad does not open.  Copy and paste the text from notepad into a reply.


Get the free version of Speccy:

http://www.filehippo...ownload_speccy/ 

(Look in the upper right for the Download
Latest Version button  - Do NOT press the large Start Download button on the upper left!)  
Download, Save and Install it.  Tell it you do not need CCLEANER.    Run Speccy.  When it finishes (the little icon in the bottom left will stop moving),
File, Save as Text File,  (to your desktop) note the name it gives. OK.  Open the file in notepad and delete the line that gives the serial number of your Operating System.  
(It will be near the top,  10-20  lines down.) Save the file.  Attach the file to your next post.  Attaching the log is the best option as it is too big for the forum.  Attaching is a multi step process.

First click on More Reply Options
Then scroll down to where you see
Choose File and click on it.  Point it at the file and hit Open.
Now click on Attach this file.


Feel free to come back if you have any problems or questions about the above.


  • 0

#3
butterrice
Posted 28 March 2020 - 09:06 PM

butterrice

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 403 posts
Process CPU Private Bytes Working Set PID Description Company Name Verified Signer
svchost.exe 20.19 63,672 K 80,496 K 3996 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
System 14.89 196 K 136 K 4   
Interrupts 14.19 0 K 0 K n/a Hardware Interrupts and DPCs  
procexp64.exe 11.04 34,472 K 67,580 K 8288 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation
System Idle Process 8.79 60 K 8 K 0   
svchost.exe 6.78 50,904 K 51,360 K 1560 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 5.45 11,976 K 20,752 K 3800 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
dwm.exe 4.90 53,368 K 62,728 K 1064 Desktop Window Manager Microsoft Corporation (Verified) Microsoft Windows
SynTPEnh.exe 4.32 6,876 K 21,704 K 5544 Synaptics TouchPad 64-bit Enhancements Synaptics Incorporated (Verified) Synaptics Incorporated
MsMpEng.exe 1.34 237,864 K 190,532 K 4296 Antimalware Service Executable Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1.05 12,648 K 21,000 K 2284 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
csrss.exe 0.86 2,148 K 5,340 K 632 Client Server Runtime Process Microsoft Corporation (Verified) Microsoft Windows Publisher
WmiPrvSE.exe 0.78 3,008 K 9,868 K 9504 WMI Provider Host Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 0.73 14,372 K 26,320 K 4724 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
lsass.exe 0.46 7,936 K 18,724 K 792 Local Security Authority Process Microsoft Corporation (Verified) Microsoft Windows Publisher
MicrosoftEdgeCP.exe 0.44 109,848 K 138,692 K 8720 Microsoft Edge Content Process Microsoft Corporation (Verified) Microsoft Windows
FRST64.exe 0.41 474,276 K 498,604 K 4604 Farbar Recovery Scan Tool Farbar (No signature was present in the subject) Farbar
svchost.exe 0.39 2,868 K 8,500 K 1132 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.39 9,132 K 15,700 K 496 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.37 2,084 K 6,940 K 2784 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.33 18,572 K 26,332 K 2416 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
explorer.exe 0.29 43,744 K 114,064 K 3632 Windows Explorer Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 0.29 9,896 K 34,740 K 6632 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
MicrosoftEdge.exe 0.15 38,460 K 99,120 K 6432 Microsoft Edge Microsoft Corporation (Verified) Microsoft Corporation
RuntimeBroker.exe 0.14 7,892 K 35,672 K 6460 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
services.exe 0.12 5,112 K 8,888 K 768 Services and Controller app Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.11 2,252 K 6,940 K 1776 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
MicrosoftEdgeCP.exe 0.09 103,068 K 120,456 K 7792 Microsoft Edge Content Process Microsoft Corporation (Verified) Microsoft Windows
StartMenuExperienceHost.exe 0.08 32,384 K 73,840 K 2836   (Verified) Microsoft Windows
svchost.exe 0.07 2,176 K 7,088 K 624 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.07 4,472 K 11,316 K 1952 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.06 3,032 K 7,732 K 2040 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.06 3,856 K 18,164 K 5060 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.06 2,392 K 8,296 K 2956 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.05 13,028 K 31,708 K 996 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.05 2,800 K 9,632 K 2672 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.05 3,524 K 13,740 K 2476 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
RuntimeBroker.exe 0.04 12,768 K 38,628 K 7580 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 0.02 20,660 K 28,828 K 3268 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
Memory Compression 0.02 428 K 51,284 K 1200   
SearchIndexer.exe 0.01 24,908 K 27,308 K 1452 Microsoft Windows Search Indexer Microsoft Corporation (Verified) Microsoft Windows
esif_assist_64.exe 0.01 1,496 K 5,728 K 5196 Intel® Dynamic Platform and Thermal Framework Utility Application Intel Corporation (Verified) Intel® Software
svchost.exe 0.01 2,472 K 9,028 K 5064 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.01 5,652 K 16,992 K 1628 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
OfficeClickToRun.exe 0.01 26,672 K 46,196 K 3696 Microsoft Office Click-to-Run (SxS) Microsoft Corporation (Verified) Microsoft Corporation
svchost.exe 0.01 49,672 K 55,236 K 1828 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe < 0.01 4,656 K 17,796 K 60 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe < 0.01 3,540 K 13,648 K 9472 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe < 0.01 17,028 K 17,008 K 1644 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
sihost.exe < 0.01 7,620 K 30,272 K 2232 Shell Infrastructure Host Microsoft Corporation (Verified) Microsoft Windows
svchost.exe < 0.01 5,052 K 22,768 K 8140 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
csrss.exe < 0.01 1,876 K 4,924 K 552 Client Server Runtime Process Microsoft Corporation (Verified) Microsoft Windows Publisher
WUDFHost.exe  25,380 K 14,356 K 1020 Windows Driver Foundation - User-mode Driver Framework Host Process Microsoft Corporation (Verified) Microsoft Windows
WmiPrvSE.exe  2,880 K 9,804 K 4360 WMI Provider Host Microsoft Corporation (Verified) Microsoft Windows
winlogon.exe  2,696 K 12,824 K 688 Windows Logon Application Microsoft Corporation (Verified) Microsoft Windows
wininit.exe  1,352 K 6,112 K 652 Windows Start-Up Application Microsoft Corporation (Verified) Microsoft Windows Publisher
taskhostw.exe  11,240 K 21,080 K 2984 Host Process for Windows Tasks Microsoft Corporation (Verified) Microsoft Windows
SynTPHelper.exe  1,060 K 4,356 K 1404 Synaptics Pointing Device Helper Synaptics Incorporated (Verified) Synaptics Incorporated
SynTPEnhService.exe  1,252 K 4,956 K 3528 64-bit Synaptics Pointing Enhance Service Synaptics Incorporated (Verified) Synaptics Incorporated
svchost.exe  2,628 K 11,488 K 4736 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  2,860 K 10,440 K 2276 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  5,532 K 7,108 K 1708 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  1,696 K 6,108 K 2664 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  11,636 K 17,996 K 3088 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  1,992 K 6,828 K 4524 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  4,360 K 19,064 K 832 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  1,624 K 5,740 K 1960 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  2,108 K 11,816 K 1972 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  2,020 K 7,356 K 1856 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  1,492 K 5,444 K 1184 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  6,560 K 27,648 K 2812 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  2,844 K 12,048 K 1836 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  3,080 K 12,564 K 5996 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  3,112 K 16,404 K 3868 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  2,348 K 11,900 K 1584 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  1,312 K 4,884 K 3544 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  3,252 K 9,348 K 5516 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  3,180 K 11,292 K 788 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  6,376 K 15,192 K 4100 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  39,560 K 29,040 K 3244 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  4,984 K 21,152 K 2060 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  2,816 K 10,876 K 2124 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  8,400 K 36,624 K 4500 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  1,288 K 5,900 K 304 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  2,372 K 9,096 K 2616 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  1,276 K 5,044 K 3424 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  1,768 K 7,548 K 4976 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  3,492 K 11,548 K 3328 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  1,272 K 4,976 K 1788 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  1,876 K 7,764 K 2016 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  6,012 K 21,896 K 5676 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  1,976 K 7,540 K 2824 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  1,708 K 6,800 K 2396 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  1,884 K 7,228 K 3388 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  1,328 K 5,868 K 3260 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  2,000 K 8,264 K 2084 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  1,752 K 7,140 K 2092 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  1,252 K 5,440 K 1848 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  2,068 K 7,972 K 1464 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  1,420 K 6,508 K 1268 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  980 K 4,252 K 1116 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  896 K 3,640 K 900 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  2,352 K 11,536 K 7348 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  1,636 K 7,456 K 5200 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  2,160 K 9,892 K 5244 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe  1,608 K 10,428 K 8640 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
spoolsv.exe  7,652 K 22,124 K 1744 Spooler SubSystem App Microsoft Corporation (Verified) Microsoft Windows
smss.exe  1,164 K 1,000 K 348 Windows Session Manager Microsoft Corporation (Verified) Microsoft Windows Publisher
smartscreen.exe  15,776 K 30,616 K 6728 Windows Defender SmartScreen Microsoft Corporation (Verified) Microsoft Windows
SkypeBackgroundHost.exe Suspended 1,824 K 228 K 2344 Microsoft Skype Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
SkypeApp.exe Suspended 104,484 K 32,580 K 8492 SkypeApp Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
ShellExperienceHost.exe Suspended 15,672 K 38,280 K 3788 Windows Shell Experience Host Microsoft Corporation (Verified) Microsoft Windows
SgrmBroker.exe  2,692 K 5,580 K 4780 System Guard Runtime Monitor Broker Service Microsoft Corporation (Verified) Microsoft Windows Publisher
SettingSyncHost.exe  9,044 K 10,020 K 2904 Host Process for Setting Synchronization Microsoft Corporation (Verified) Microsoft Windows
SecurityHealthSystray.exe  1,720 K 8,744 K 2964 Windows Security notification icon Microsoft Corporation (Verified) Microsoft Windows
SecurityHealthService.exe  3,644 K 14,120 K 6292 Windows Security Health Service Microsoft Corporation (Verified) Microsoft Windows Publisher
SearchUI.exe Suspended 86,552 K 75,336 K 2140 Search and Cortana application Microsoft Corporation (Verified) Microsoft Windows
SearchProtocolHost.exe  1,996 K 7,916 K 8576 Microsoft Windows Search Protocol Host Microsoft Corporation (Verified) Microsoft Windows
SearchFilterHost.exe  1,580 K 6,412 K 5808 Microsoft Windows Search Filter Host Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe  2,920 K 14,040 K 8164 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe  26,692 K 29,540 K 4092 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe  2,248 K 12,396 K 5768 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe  5,104 K 20,120 K 7272 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe  2,504 K 15,540 K 8452 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RtkNGUI64.exe  4,628 K 13,228 K 3864 Realtek HD Audio Manager Realtek Semiconductor (Verified) Realtek Semiconductor Corp.
RtkAudioService64.exe  2,096 K 8,568 K 2576 Realtek Audio Service Realtek Semiconductor (Verified) Realtek Semiconductor Corp
RichVideo64.exe  1,492 K 7,392 K 2548 CyberLink RichVideo Module CyberLink (Verified) CyberLink Corp.
Registry  9,780 K 43,108 K 88   
RAVBg64.exe  6,556 K 15,372 K 2596 HD Audio Background Process Realtek Semiconductor (Verified) Realtek Semiconductor Corp.
RAVBg64.exe  6,400 K 15,252 K 2608 HD Audio Background Process Realtek Semiconductor (Verified) Realtek Semiconductor Corp.
procexp.exe  4,440 K 10,960 K 2216 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation
PresentationFontCache.exe  19,108 K 18,932 K 1768 PresentationFontCache.exe Microsoft Corporation (Verified) Microsoft Corporation
OneDrive.exe  27,468 K 65,828 K 7064 Microsoft OneDrive Microsoft Corporation (Verified) Microsoft Corporation
notepad.exe  3,208 K 16,980 K 9948 Notepad Microsoft Corporation (Verified) Microsoft Windows
notepad.exe  3,604 K 17,348 K 2392 Notepad Microsoft Corporation (Verified) Microsoft Windows
NisSrv.exe  4,212 K 8,992 K 3228 Microsoft Network Realtime Inspection Service Microsoft Corporation (Verified) Microsoft Windows Publisher
MicrosoftEdgeSH.exe  5,244 K 14,828 K 7728 Microsoft Edge Web Platform Microsoft Corporation (Verified) Microsoft Windows
MicrosoftEdgeCP.exe  5,624 K 26,032 K 4988 Microsoft Edge Content Process Microsoft Corporation (Verified) Microsoft Windows
MicrosoftEdgeCP.exe  5,648 K 25,068 K 9164 Microsoft Edge Content Process Microsoft Corporation (Verified) Microsoft Windows
MicrosoftEdgeCP.exe Suspended 110,444 K 58,592 K 8964 Microsoft Edge Content Process Microsoft Corporation (Verified) Microsoft Windows
MicrosoftEdgeCP.exe Suspended 101,172 K 69,352 K 9280 Microsoft Edge Content Process Microsoft Corporation (Verified) Microsoft Windows
Microsoft.Photos.exe Suspended 21,316 K 36,028 K 1432   (No signature was present in the subject)
mDNSResponder.exe  1,916 K 7,004 K 3492 Bonjour Service Apple Inc. (Verified) Apple Inc.
jhi_service.exe  1,324 K 6,072 K 1376 Intel® Dynamic Application Loader Host Interface Intel Corporation (Verified) Intel Corporation - Embedded Subsystems and IP Blocks Group
IntelCpHeciSvc.exe  2,760 K 9,180 K 3472 IntelCpHeciSvc Executable Intel Corporation (Verified) Intel Corporation - pGFX
igfxHK.exe  2,448 K 9,324 K 6504 igfxHK Module Intel Corporation (Verified) Intel Corporation - pGFX
igfxEM.exe  3,460 K 12,520 K 6448 igfxEM Module Intel Corporation (Verified) Intel Corporation - pGFX
igfxCUIService.exe  2,012 K 8,564 K 784 igfxCUIService Module Intel Corporation (Verified) Intel Corporation - pGFX
HPWMISVC.exe  1,652 K 8,536 K 3560 HP WMI Service HP Inc. (Verified) HP Inc.
HPSupportSolutionsFrameworkService.exe  42,112 K 75,464 K 544 HP Support Solutions Framework Service HP Inc. (Verified) HP Inc.
hpqwmiex.exe  2,068 K 9,976 K 7084 HP Software Framework WMI Service Hewlett-Packard Company (Verified) Hewlett-Packard Company
hpqwmiex.exe  2,032 K 10,232 K 9396 HP CASL Framework Service HP (Verified) Hewlett-Packard Company
HPOrbitService.exe  3,820 K 15,044 K 4084 HP Orbit HP Inc. (Verified) HP Inc.
HPMSGSVC.exe  1,900 K 9,612 K 9172 HP Message Service HP Inc. (Verified) HP Inc.
HPJumpStartProvider.exe  1,308 K 548 K 4004   (Verified) HP Inc.
HPJumpStartBridge.exe  11,900 K 28,980 K 4440 HP JumpStart Bridge HP Inc. (Verified) HP Inc.
HPCommRecovery.exe  8,356 K 17,980 K 5100 CommRecovery HP Inc. (No signature was present in the subject) HP Inc.
HPAudioSwitch.exe  36,820 K 1,040 K 4144 HPAudioSwitch HP Inc. (Verified) HP Inc.
fontdrvhost.exe  2,328 K 4,928 K 932 Usermode Font Driver Host Microsoft Corporation (Verified) Microsoft Windows
fontdrvhost.exe  1,520 K 2,976 K 936 Usermode Font Driver Host Microsoft Corporation (Verified) Microsoft Windows
esif_uf.exe  1,984 K 7,104 K 3460 Intel® Dynamic Platform and Thermal Framework Intel Corporation (Verified) Intel® Software
DropboxUpdate.exe  1,996 K 3,404 K 644 Dropbox Update Dropbox, Inc. (Verified) Dropbox, Inc
dllhost.exe  2,180 K 12,520 K 3284 COM Surrogate Microsoft Corporation (Verified) Microsoft Windows
dllhost.exe  4,088 K 13,684 K 6704 COM Surrogate Microsoft Corporation (Verified) Microsoft Windows
dllhost.exe  3,328 K 11,160 K 4152 COM Surrogate Microsoft Corporation (Verified) Microsoft Windows
dllhost.exe  3,728 K 9,480 K 2072 COM Surrogate Microsoft Corporation (Verified) Microsoft Windows
dasHost.exe  2,584 K 7,440 K 3740 Device Association Framework Provider Host Microsoft Corporation (Verified) Microsoft Windows
ctfmon.exe  3,804 K 13,748 K 5236 CTF Loader Microsoft Corporation (Verified) Microsoft Windows
CoolSense.exe  2,380 K 716 K 6220 HP CoolSense HP Development Company, L.P. (Verified) Hewlett-Packard Company
browser_broker.exe  7,292 K 30,124 K 7404 Browser_Broker Microsoft Corporation (Verified) Microsoft Windows
ApplicationFrameHost.exe  8,748 K 30,224 K 4140 Application Frame Host Microsoft Corporation (Verified) Microsoft Windows

  • 0

#4
butterrice
Posted 28 March 2020 - 09:07 PM

butterrice

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 403 posts

Image Name                     PID Services                                   
========================= ======== ============================================
System Idle Process              0 N/A                                        
System                           4 N/A                                        
Registry                        88 N/A                                        
smss.exe                       348 N/A                                        
csrss.exe                      552 N/A                                        
csrss.exe                      632 N/A                                        
wininit.exe                    652 N/A                                        
winlogon.exe                   688 N/A                                        
services.exe                   768 N/A                                        
lsass.exe                      792 KeyIso, SamSs, VaultSvc                    
svchost.exe                    900 PlugPlay                                   
fontdrvhost.exe                936 N/A                                        
fontdrvhost.exe                932 N/A                                        
svchost.exe                    996 BrokerInfrastructure, DcomLaunch, Power,   
                                   SystemEventsBroker                         
WUDFHost.exe                  1020 N/A                                        
svchost.exe                    496 RpcEptMapper, RpcSs                        
svchost.exe                    624 LSM                                        
dwm.exe                       1064 N/A                                        
svchost.exe                   1116 DeviceInstall                              
svchost.exe                   1184 CoreMessagingRegistrar                     
svchost.exe                   1268 DispBrokerDesktopSvc                       
svchost.exe                   1464 DisplayEnhancementService                  
svchost.exe                   1584 TimeBrokerSvc                              
svchost.exe                   1644 EventLog                                   
svchost.exe                   1708 nsi                                        
svchost.exe                   1776 Dhcp                                       
svchost.exe                   1828 SysMain                                    
svchost.exe                   1836 ProfSvc                                    
svchost.exe                   1848 Themes                                     
svchost.exe                   1856 EventSystem                                
svchost.exe                   1952 NlaSvc                                     
svchost.exe                   2016 SENS                                       
svchost.exe                   2040 Dnscache                                   
Memory Compression            1200 N/A                                        
igfxCUIService.exe             784 igfxCUIService2.0.0.0                      
svchost.exe                   1132 netprofm                                   
svchost.exe                   2084 FontCache                                  
svchost.exe                   2092 AudioEndpointBuilder                       
svchost.exe                   2276 UserManager                                
svchost.exe                   2284 Winmgmt                                    
svchost.exe                   2416 StateRepository                            
svchost.exe                   2476 Audiosrv                                   
RtkAudioService64.exe         2576 RtkAudioService                            
RAVBg64.exe                   2596 N/A                                        
RAVBg64.exe                   2608 N/A                                        
svchost.exe                   2664 DusmSvc                                    
svchost.exe                   2672 Wcmsvc                                     
svchost.exe                   2784 WinHttpAutoProxySvc                        
svchost.exe                   2956 LanmanServer                               
svchost.exe                   1972 ShellHWDetection                           
spoolsv.exe                   1744 Spooler                                    
svchost.exe                   3088 BFE, mpssvc                                
svchost.exe                   3244 CryptSvc                                   
svchost.exe                   3260 DeviceAssociationService                   
svchost.exe                   3268 DPS                                        
svchost.exe                   3328 iphlpsvc                                   
svchost.exe                   3388 stisvc                                     
svchost.exe                   3424 TrkWks                                     
esif_uf.exe                   3460 esifsvc                                    
IntelCpHeciSvc.exe            3472 cphs                                       
mDNSResponder.exe             3492 Bonjour Service                            
SynTPEnhService.exe           3528 SynTPEnhService                            
svchost.exe                   3544 WdiServiceHost                             
HPWMISVC.exe                  3560 HPWMISVC                                   
OfficeClickToRun.exe          3696 ClickToRunSvc                              
dasHost.exe                   3740 N/A                                        
HPOrbitService.exe            4084 HP Orbit Service                           
svchost.exe                   2396 PolicyAgent                                
dllhost.exe                   4152 N/A                                        
svchost.exe                   4524 SSDPSRV                                    
HPCommRecovery.exe            5100 HP Comm Recover                            
DropboxUpdate.exe              644 N/A                                        
HPJumpStartBridge.exe         4440 HPJumpStartBridge                          
HPSupportSolutionsFramewo      544 HPSupportSolutionsFrameworkService         
jhi_service.exe               1376 jhi_service                                
RichVideo64.exe               2548 RichVideo64                                
SgrmBroker.exe                4780 SgrmBroker                                 
svchost.exe                    788 UsoSvc                                     
dllhost.exe                   2072 N/A                                        
svchost.exe                   1628 WlanSvc                                    
svchost.exe                   2124 NcbService                                 
svchost.exe                    832 lfsvc                                      
svchost.exe                   1960 WdiSystemHost                              
svchost.exe                   5064 PcaSvc                                     
SearchIndexer.exe             1452 WSearch                                    
svchost.exe                   4100 Schedule                                   
svchost.exe                   2824 LanmanWorkstation                          
svchost.exe                   2616 wscsvc                                     
svchost.exe                     60 CDPSvc                                     
svchost.exe                   4736 camsvc                                     
svchost.exe                   2060 WpnService                                 
MsMpEng.exe                   4296 WinDefend                                  
NisSrv.exe                    3228 WdNisSvc                                   
svchost.exe                   4724 DiagTrack                                  
WmiPrvSE.exe                  4360 N/A                                        
svchost.exe                   1560 wuauserv                                   
svchost.exe                   5200 NgcSvc                                     
svchost.exe                   5244 NgcCtnrSvc                                 
svchost.exe                   1788 lmhosts                                    
esif_assist_64.exe            5196 N/A                                        
sihost.exe                    2232 N/A                                        
svchost.exe                   2812 CDPUserSvc_268797                          
svchost.exe                   4500 WpnUserService_268797                      
PresentationFontCache.exe     1768 FontCache3.0.0.0                           
svchost.exe                   4976 TabletInputService                         
svchost.exe                   5060 TokenBroker                                
ctfmon.exe                    5236 N/A                                        
SynTPEnh.exe                  5544 N/A                                        
svchost.exe                    304 Appinfo                                    
explorer.exe                  3632 N/A                                        
SynTPHelper.exe               1404 N/A                                        
taskhostw.exe                 2984 N/A                                        
HPJumpStartProvider.exe       4004 N/A                                        
igfxEM.exe                    6448 N/A                                        
igfxHK.exe                    6504 N/A                                        
smartscreen.exe               6728 N/A                                        
CoolSense.exe                 6220 N/A                                        
svchost.exe                   6632 InstallService                             
SettingSyncHost.exe           2904 N/A                                        
hpqwmiex.exe                  7084 hpqwmiex                                   
dllhost.exe                   6704 N/A                                        
svchost.exe                   5676 OneSyncSvc_268797,                         
                                   PimIndexMaintenanceSvc_268797,             
                                   UnistoreSvc_268797, UserDataSvc_268797     
HPAudioSwitch.exe             4144 N/A                                        
svchost.exe                   3868 cbdhsvc_268797                             
StartMenuExperienceHost.e     2836 N/A                                        
RuntimeBroker.exe             6460 N/A                                        
ApplicationFrameHost.exe      4140 N/A                                        
SearchUI.exe                  2140 N/A                                        
RuntimeBroker.exe             4092 N/A                                        
MicrosoftEdge.exe             6432 N/A                                        
browser_broker.exe            7404 N/A                                        
RuntimeBroker.exe             7580 N/A                                        
MicrosoftEdgeSH.exe           7728 N/A                                        
MicrosoftEdgeCP.exe           7792 N/A                                        
MicrosoftEdgeCP.exe           8720 N/A                                        
MicrosoftEdgeCP.exe           8964 N/A                                        
MicrosoftEdgeCP.exe           9164 N/A                                        
RuntimeBroker.exe             8164 N/A                                        
ShellExperienceHost.exe       3788 N/A                                        
dllhost.exe                   3284 N/A                                        
svchost.exe                   8140 LicenseManager                             
svchost.exe                   8640 BthAvctpSvc                                
RuntimeBroker.exe             8452 N/A                                        
SecurityHealthSystray.exe     2964 N/A                                        
SecurityHealthService.exe     6292 SecurityHealthService                      
RtkNGUI64.exe                 3864 N/A                                        
OneDrive.exe                  7064 N/A                                        
HPMSGSVC.exe                  9172 N/A                                        
RuntimeBroker.exe             7272 N/A                                        
hpqwmiex.exe                  9396 hpqcaslwmiex                               
MicrosoftEdgeCP.exe           9280 N/A                                        
FRST64.exe                    4604 N/A                                        
svchost.exe                   9472 StorSvc                                    
svchost.exe                   7348 SEMgrSvc                                   
svchost.exe                   3800 DoSvc                                      
notepad.exe                   2392 N/A                                        
notepad.exe                   9948 N/A                                        
MicrosoftEdgeCP.exe           4988 N/A                                        
procexp.exe                   2216 N/A                                        
procexp64.exe                 8288 N/A                                        
svchost.exe                   5996 wlidsvc                                    
svchost.exe                   3996 AppXSvc                                    
svchost.exe                   5516 ClipSVC                                    
WmiPrvSE.exe                  9504 N/A                                        
SearchProtocolHost.exe        8576 N/A                                        
svchost.exe                   6208 gpsvc                                      
SkypeApp.exe                  3636 N/A                                        
notepad.exe                   4064 N/A                                        
backgroundTaskHost.exe         488 N/A                                        
RuntimeBroker.exe             4928 N/A                                        
WindowsInternal.Composabl     4260 N/A                                        
SearchFilterHost.exe          2056 N/A                                        
audiodg.exe                   3912 N/A                                        
svchost.exe                   3184 WarpJITSvc                                 
Windows.WARP.JITService.e     5044 N/A                                        
BackgroundTransferHost.ex     2336 N/A                                        
backgroundTaskHost.exe        3412 N/A                                        
backgroundTaskHost.exe        4768 N/A                                        
cmd.exe                       6744 N/A                                        
conhost.exe                   2120 N/A                                        
tasklist.exe                  4356 N/A                                        
 


  • 0

#5
butterrice
Posted 28 March 2020 - 09:09 PM

butterrice

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 403 posts

FRST attachments

Attached Files


  • 0

#6
butterrice
Posted 28 March 2020 - 09:25 PM

butterrice

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 403 posts

Speccy Report

Attached Files


  • 0

#7
RKinner
Posted 28 March 2020 - 09:52 PM

RKinner

    Malware Expert

  • Expert
  • 24,622 posts
  • MVP

Go to the hp support website:

 

https://support.hp.com/us-en/drivers

 

See if they have a newer version of Intel® Dynamic Platform and Thermal Framework.  You have version 8.1.10605.221

If HP doesn't offer something newer try the version 8.2.11004.3973 in the Microsoft Catalog:

https://www.catalog....work Manager 10

 

Then

Download the attached fixlist.txt to the same location as FRST

Attached File  fixlist.txt   1.94KB   192 downloads

Run FRST and press Fix
A fix log will be generated please post that

Reboot if the fix doesn't reboot it for you

Run FRST again as before.  Make sure Addition.txt is checked and hit Scan.  Post both logs.

 

Also give me a new Process Explorer log.

 



 


  • 0

#8
butterrice
Posted 29 March 2020 - 06:27 AM

butterrice

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 403 posts

All three logs attached.

 

Thank you!

Attached Files


  • 0

#9
RKinner
Posted 29 March 2020 - 07:29 AM

RKinner

    Malware Expert

  • Expert
  • 24,622 posts
  • MVP

Could I see the fixlog too?


  • 0

#10
RKinner
Posted 29 March 2020 - 07:35 AM

RKinner

    Malware Expert

  • Expert
  • 24,622 posts
  • MVP

Also the Addition.txt appears to be an older version.  Can you run FRST again and make sure addition.txt is checked.  Then post the addition.txt file.

 

Also were you able to update the Intel file?


  • 0

Advertisements

#11
butterrice
Posted 29 March 2020 - 08:37 AM

butterrice

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 403 posts

Sorry about that!! I attached the Fix log.  Running FRST again. I did update the Intel to a 2018 update that was offered in the first link you had posted. 

Attached Files


  • 0

#12
RKinner
Posted 29 March 2020 - 09:10 AM

RKinner

    Malware Expert

  • Expert
  • 24,622 posts
  • MVP

Could you do this fixlist like the first?

 

Attached File  fixlist.txt   316bytes   185 downloads

 

The first time it ran DISM it needed a reboot which stopped sfc from running.  (These are builtin program that check critical system files to make sure they haven't been corrupted.)  Will take 10-15 minutes.

 

Please make a new Process Explorer log.  Please make sure you wait a full minute or more before saving the log.  Otherwise the CPU used by Process explorer will be much higher than it should be.

 

If you look at the first Process Explorer log you will see we only had

System Idle Process 8.79  Now we have System Idle Process    54.85    so we are making progress.  (Normally we expect System Idle + ProcExp64 to be > 90% so we still have some work to do)

 

Also we had Interrupts 14.19 and now Interrupts    3.68.  Good progress but should be < 1.4


  • 0

#13
butterrice
Posted 29 March 2020 - 10:01 AM

butterrice

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 403 posts

The addition attachment

Attached Files


  • 0

#14
butterrice
Posted 29 March 2020 - 10:04 AM

butterrice

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 403 posts

Running Fixlist and Process Explorer Log now....


  • 0

#15
butterrice
Posted 29 March 2020 - 11:00 AM

butterrice

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 403 posts

Okay... See the attached :-)

Attached Files


  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP