Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!
Member
Thank you RK for giving your time to helping technically-challenged guys like me on this forum, your time and enthusiasm is much appreciated,
I look forward to hearing your views on the junk that has been accumulating on Patricia's laptop. Undoubtedly I am responsible for some of the software added, but I imagined that if I am not using the apps then they would not be taking resources and slowing things down!
Best regards,
Roger B
Malware Expert
The two screenshots in post #12 are from Smart Screen. It's been a nuisance recently randomly blocking FRST.
Speccy says you are using AVG's VPN. Can you turn it off and just connect normally?
"to disable it please click on "Secure VPN" on the AVG User Interface and then click on the cursor left which will turn off the VPN."
I gave you a fixlist back on post #5. Can you run it now that you have FRST sorted out? It will test your system files and perhaps correct some of your update problems.
Not sure why you posted two Process Explorer logs but it's good you did. (The name changes based roughly on the order of processes which is why I said to note the name when saving the log)
The first one shows a moderately slow system. The second shows one that is stalled.
Looking at the second one we see something called LocalBridge.exe is eating most of the CPU along with CompatTelRunner.exe. (Normally we expect System Idle Process to be at the top)
LocalBridge is supposed to be part of Microsoft Office
Search for
control panel
then hit Enter and it should bring up the Control Panel.
If you haven't already, click on View By: in the upper right and change it to Large Icons.
Click on Programs & Features
Find
Microsoft Office Home and Student 2010
Right click on it and there should be a Repair option. Select it and see if it is able to do any repairs.
CompatTelRunner.exe is a Microsoft program which claims to speed up your system but actually just reports back to Microsoft. We can turn it off without problems.
Search for
task scheduler
hit Enter
Click on the arrow in front of Task Scheduler Library then
Click on the arrow in front of Microsoft
Click on the arrow in front of Windows
Click on Application Experience. In the next pane to the right, right click on each Task and Disable. Should be three tasks.
Click on Customer Experience Improvement Program. In the next pane to the right, right click on each Task and Disable. Should be two tasks.
Reboot and after a few minutes to let Windows settle down, rerun Process Explorer, wait a minute after bringing it up then save a new log and post it.
Both Process Explorer logs show your Interrupts are too high. So let's run Latency Monitor:
OK. Let's try Latency Monitor:
Go to
http://www.resplendence.com/downloads
Scroll down to
System Monitoring Tools
and then find
LatencyMon 6.70 (or it may be a higher number if they update)
Click on Download free home edition
Save it then right click and Run As Admin. It will install and then start the program.
It will tell you to click on the Start button but there isn't one.
Instead click on the green arrowhead (looks like a Play button). Let it run for at least 20 seconds. Then hit the red box to stop it.
Edit, Copy Report text to Clipboard then move to a REPLY and Ctrl + v to paste the text into a reply.
In Latency Monitor: Click on the Drivers Tab. Click on the column header for "Total execution (ms)" once or twice until the biggest numbers are at the top then take a screen shot and post it. Click on the Processes tab then click on the column header once or twice until the big numbers are at the top. Take a screen shot and post it.
Member
Member
Hello once again,
A mixed bag of results for you!
VPN turned off as requested, but not until after I ran FRST, sorry. Not sure if this will affect the results. At some stage it turned on again but I cannot be sure when. Possibly at the first reboot. If you would like me to try to turn it off permanently and redo the tests please advise! Maybe the results below will be OK.
When VPN was definitely off I tried to Update Windows but got the same result as before 
New FRST reports attached
Local Bridge - I repaired Office after a problem and I think it went OK. (I had to find the original CD for it to locate a file.)
Task Scheduler - Hardware Interrupts and DPCs report attached
Latency Monitor - Screenshots attached and Report pasted below
I hope I have done all you asked, I get a bit muddled at times!
Thanks Again, Roger
Latency Monitor report:
Fixlog 1203.txt 229.08KB
209 downloads
Addition 1225pm.txt 36.79KB
214 downloads
Hardware Interrupts and DPCs.txt 11.05KB
197 downloads
Member
Hello,
Sorry, I meant to mention that when Task Scheduler was running it seemed to fluctuate around the mid 80s for sometime then drop momentarily into the 50s and 60s, then it stabilized around the mid 80s again. Not sure if this is significant!
Roger
Malware Expert
By the way: name is Ron not Roger.
It doesn't take hours to review the logs. Most of the info in the logs can be ignored. We just look for certain critical parts. I've been doing this for 20 years so I have a pretty good idea what is important and what not and what belongs and what doesn't.
I have another fix list for you:
Download the attached fixlist.txt to the same location as FRST
fixlist.txt 13.3KB
197 downloads
Run FRST and press Fix
A fix log will be generated please post that
Reboot if the fix doesn't reboot it for you
Run FRST again as before. Make sure Addition.txt is checked and hit Scan. Post both logs.
After the reboot, wait a couple of minutes before making a new Process Explorer log and remember to wait another full minute after starting Process Explorer before making the log.
Rerun Latency Monitor again as before. I don't need the Drivers screenshot this time but I do need the Processes screenshot again. Last time you forgot to click once or twice on the Hard pagefaults column header to sort the processes so that the ones with pagefaults are at the top. (If there are any. I've tried to kill off compattelrunner.exe with the fix list so there may not be any this time) I need to determine what if anything is causing pagefaults.
Member
Hello Ron,
Sorry for the confusion re your name! Instead of 'Thanks Again, Roger' I should have written:
"Thanks again,
Roger"
Anyway, it is nice to know who I am talking to 
I am attaching the next 2 FRST logs
I have run the Process Explorer again and attached is the log, named procexp64.exe this time
Below is the pasted file from Latency Monitor. Sorry, I was not sure which column to double click before, and chose the wrong one.
I hope these results help you, best wishes,
Roger
Addition 16th May.txt 35.51KB
210 downloads
Fixlog 16th May.txt 25.12KB
188 downloads
procexp64.exe 16th May.txt 14.4KB
207 downloads
Edited by rogerbid, 15 May 2020 - 07:56 PM.
Malware Expert
Something went wrong that time.
Did you get a skype call in the middle of running process explorer? Skype is eating up all of the CPU.
SkypeApp.exe 73.99
If you click on the up arrow to the left of the clock you will see the blue ball with a white S which is Skype's icon. Right click on it and Close Skype.
Then redo the Process Explorer log.
Also no attachments for Latency Monitor. We are also missing FRST.txt
See if you can download and save this file:
https://www.ath-driv...-Windows10.html
Click on Download Driver AR3012...
Right click on the saved file and Extract All, Extract. Right click on BletoothSetup.exe and Run As Admin or if that doesn't work try running Install.bat.
Member
Hi Ron,
I am so sorry I messed up with my reply earlier. I am surprised that the reports show a Skype call!! My wife reminded me we used Skype a few times several years ago, I had forgotten, but certainly there was no call when I was working through your instructions! It is a long time since we have used Skype.
I clicked on the arrow left of the clock and no Skype icon showed but found the app and opened it and then followed your instructions and closed it.
I have now run Process Explorer as per your earlier instructions where you asked me to paste the contents of the file in a reply. On this occasion the file is called Hardware Interrupts and DPCs.txt In case it is easier for you I am also attaching this file.
You have not asked me to run TASKLIST in an elevated command prompt this time but just in case I will do so now and paste the test in a separate reply, then follow on with your further instructions.
Roger
Hardware Interrupts and DPCs.txt 15.53KB
209 downloads
Member
Ron,
Here is the junk.txt file contents, as before I will also attach the file for you. Sorry, I sent the previous reply before attaching Hardware Interrupts and DCPs.txt so it is attached now!
Image Name PID Services
========================= ======== ============================================
System Idle Process 0 N/A
System 4 N/A
smss.exe 408 N/A
csrss.exe 588 N/A
wininit.exe 712 N/A
services.exe 844 N/A
lsass.exe 856 EFS, KeyIso, SamSs, VaultSvc
svchost.exe 968 BrokerInfrastructure, DcomLaunch, LSM,
PlugPlay, Power, SystemEventsBroker
fontdrvhost.exe 976 N/A
svchost.exe 440 RpcEptMapper, RpcSs
svchost.exe 1068 Appinfo, Browser, IKEEXT, iphlpsvc,
LanmanServer, lfsvc, ProfSvc, Schedule,
SENS, ShellHWDetection, Themes,
TokenBroker, UserManager, Winmgmt, wlidsvc,
WpnService
svchost.exe 1088 BFE, CoreMessagingRegistrar, DPS, MpsSvc
svchost.exe 1112 AudioEndpointBuilder,
DeviceAssociationService, DsSvc, fhsvc,
hidserv, NcbService, Netman, PcaSvc,
StorSvc, SysMain, TabletInputService,
TrkWks, WdiSystemHost
svchost.exe 1124 Dhcp, EventLog, lmhosts, TimeBrokerSvc,
WinHttpAutoProxySvc, wscsvc
svchost.exe 1352 bthserv, CDPSvc, EventSystem, FontCache,
LicenseManager, netprofm, nsi, SEMgrSvc,
SstpSvc, WdiServiceHost
svchost.exe 1488 CryptSvc, Dnscache, DoSvc,
LanmanWorkstation, NlaSvc, TapiSrv
atiesrxx.exe 1496 AMD External Events Utility
wsc_proxy.exe 1584 AvgWscReporter
Memory Compression 1596 N/A
svchost.exe 1788 Audiosrv
svchost.exe 1860 StateRepository, tiledatamodelsvc
svchost.exe 1884 DusmSvc
svchost.exe 1904 Wcmsvc
svchost.exe 1532 WlanSvc
AVGSvc.exe 2080 AVG Antivirus
dasHost.exe 2204 N/A
spoolsv.exe 2236 Spooler
svchost.exe 2360 SSDPSRV
aswEngSrv.exe 2820 N/A
afwServ.exe 2960 AVG Firewall
AdaptiveSleepService.exe 3048 AdaptiveSleepService
ACService.exe 3056 ACDaemon
armsvc.exe 3064 AdobeARMservice
AdminService.exe 1708 AtherosSvc
AVerRemote.exe 2192 AVerRemote
AppleMobileDeviceService. 2452 Apple Mobile Device Service
AVerScheduleService.exe 484 AVerScheduleService
AVerUpdateServer.exe 2384 AVerUpdateServer
BtwRSupportService.exe 1368 BcmBtRSupport
mDNSResponder.exe 2904 Bonjour Service
btwdins.exe 2280 btwdins
TuneupSvc.exe 3104 CleanupPSvc
svchost.exe 3116 DiagTrack
ETDService.exe 3184 ETDService
ijplmsvc.exe 3208 IJPLMSVC
svchost.exe 3316 osrss
SecurityHealthService.exe 3352 SecurityHealthService
VpnSvc.exe 3376 SecureVpn
svchost.exe 3416 stisvc
svchost.exe 3456 W32Time
TecoService.exe 3744 TOSHIBA eco Utility Service
svchost.exe 2424 RasMan, UsoSvc
svchost.exe 4464 PolicyAgent
aswidsagent.exe 4960 avgbIDSAgent
WmiPrvSE.exe 5036 N/A
backupService-abpb.exe 5284 ashbackuppb
oxHelper.exe 5500 N/A
unsecapp.exe 5668 N/A
SearchIndexer.exe 4324 WSearch
dts_apo_service.exe 7968 dts_apo_service
GamesAppIntegrationServic 6408 GamesAppIntegrationService
GamesAppService.exe 10288 GamesAppService
sedsvc.exe 10760 sedsvc
sedlauncher.exe 4676 N/A
conhost.exe 4432 N/A
csrss.exe 8904 N/A
winlogon.exe 1040 N/A
dwm.exe 10724 N/A
fontdrvhost.exe 1424 N/A
atieclxx.exe 10272 N/A
ETDCtrl.exe 3876 N/A
svchost.exe 10788 CDPUserSvc_972038, OneSyncSvc_972038,
PimIndexMaintenanceSvc_972038,
UnistoreSvc_972038, UserDataSvc_972038,
WpnUserService_972038
sihost.exe 10128 N/A
taskhostw.exe 8712 N/A
ETDCtrlHelper.exe 9572 N/A
explorer.exe 1248 N/A
SettingSyncHost.exe 3288 N/A
Microsoft.Notes.exe 1436 N/A
ShellExperienceHost.exe 3920 N/A
RuntimeBroker.exe 8236 N/A
RuntimeBroker.exe 2988 N/A
SkypeBackgroundHost.exe 10324 N/A
ctfmon.exe 2560 N/A
TecoResident.exe 1212 N/A
RAVCpl64.exe 1056 N/A
AVGUI.exe 6620 N/A
MSOSYNC.EXE 8080 N/A
AVerHIDReceiver.exe 9824 N/A
KeNotify.exe 1304 N/A
Vpn.exe 11092 N/A
CNMNSST.exe 7436 N/A
CNQMMAIN.EXE 8572 N/A
TuneupUI.exe 7464 N/A
RemindMe.exe 10576 N/A
splwow64.exe 8056 N/A
CNQMUPDT.EXE 6172 N/A
AVGUI.exe 1972 N/A
ApplicationFrameHost.exe 7356 N/A
MicrosoftEdge.exe 9928 N/A
browser_broker.exe 4692 N/A
RuntimeBroker.exe 10252 N/A
MicrosoftEdgeCP.exe 10612 N/A
MicrosoftEdgeCP.exe 8832 N/A
RuntimeBroker.exe 9632 N/A
MicrosoftEdgeCP.exe 7020 N/A
RuntimeBroker.exe 7012 N/A
dllhost.exe 11060 N/A
MicrosoftEdgeCP.exe 2784 N/A
OSPPSVC.EXE 1200 osppsvc
audiodg.exe 10424 N/A
SystemSettings.exe 8476 N/A
Video.UI.exe 1560 N/A
PaintStudio.View.exe 9376 N/A
RuntimeBroker.exe 2268 N/A
svchost.exe 8680 InstallService
SearchUI.exe 776 N/A
RuntimeBroker.exe 4740 N/A
WINWORD.EXE 8960 N/A
MicrosoftEdgeCP.exe 8064 N/A
MicrosoftEdgeCP.exe 3468 N/A
procexp.exe 6152 N/A
procexp64.exe 10744 N/A
svchost.exe 11980 RmSvc
notepad.exe 6400 N/A
smartscreen.exe 1148 N/A
SearchProtocolHost.exe 7132 N/A
SearchFilterHost.exe 5460 N/A
svchost.exe 5168 ClipSVC
backgroundTaskHost.exe 5604 N/A
RuntimeBroker.exe 11864 N/A
cmd.exe 480 N/A
conhost.exe 10072 N/A
tasklist.exe 11916 N/A
WmiPrvSE.exe 1780 N/A
junk.txt 12.03KB
189 downloads
Hardware Interrupts and DPCs.txt 15.53KB
185 downloads
Member
Here is the Latency Report, scrfeen shot to follow
Member
Latency Monitor screenshots attached
Member
In your last reply you mentioned 'We are also missing FRST.txt'. I am not sure if you need me to run it again but as you have not sent a fixlisyt.txt I am assuming not. Sorry if I have misunderstood! (I seem to be making many mistakes now!)
your next instruction is to run Download Driver AR3012 but I am not entirely sure what I have to do. I will go now and follow the instructions and hope it becomes clear as I go.
Roger
Member
Hi Ron
Sorry to report that I was unable to open the zipped file downloaded from https://www.ath-driv...-Windows10.htmlbecause a popup appeared telling my free trial of WinZip has expired.
If there is another way to extract the files please let me know, otherwise I will see how I go about buying the app. I did not like to try downloading the free trial again, not sure what would happen, although the popup said no archives had been opened!
I seem to be making a few mistakes now, I will try very hard to follow your next instructions in full, I hope you are not losing your patience with me!
Roger
Malware Expert
Uninstall WinZip.
The default Windows Extract All should work but if you need something better or you don't see Extract All as an option when you right click on the zip file after uninstalling WinZip then you can get the free 7-zip from:
https://www.7-zip.org/a/7z1900-x64.exe
This is a direct download so it should start immediately. Save the file then right click and Run As Admin.
When you run a FRST SCAN you actually get two files. The addition.txt file and the FRST.txt file (which actually shows up first) When you run FRST with a Fixlist you get a file called fixlog.txt. I'm loking for the FRST.txt log which should be int he same folder as FRST64.exe
This run had a problem with a file from Microsoft Office's Outlook. HxTsr.exe
Not sure what it was up to but let's try the whole thing again with the Internet disconnected or in airplane mode.
0 members, 0 guests, 0 anonymous users
Community Forum Software by IP.Board
Licensed to: Geeks to Go, Inc.
Sign In
Create Account
