[Slime]

Yes, I did.

Is there a problem?

Is there anything else I should have done?

 

Slime.

Edited by Slime, 06 September 2016 - 03:01 AM.

[Advertisements]

No you were supposed to reboot after clearing the events and before running VEW.  The problem is your logs look too good to be true.  There's usually an event

 

Type: Warning Category: 0

Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig

WLAN AutoConfig service has successfully stopped. 

 

 

which shows up in the sys log.  (It's a mistake by Microsoft since it's not a bad thing.)  The only time I get completely empty logs is when people forget to reboot before running VEW.

 

Can you run VEW again?  How is it running by the way?  

[RKinner]

No you were supposed to reboot after clearing the events and before running VEW.  The problem is your logs look too good to be true.  There's usually an event

 

Type: Warning Category: 0

Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig

WLAN AutoConfig service has successfully stopped. 

 

 

which shows up in the sys log.  (It's a mistake by Microsoft since it's not a bad thing.)  The only time I get completely empty logs is when people forget to reboot before running VEW.

 

Can you run VEW again?  How is it running by the way?  

[Slime]

These are my latest VEW logs;

 

 VEW APP 5.txt   879bytes   289 downloads

 

 VEW SYS 5.txt   1.01KB   290 downloads

 

 

 

As far as my machine is concerned ..................................... mostly good!

I get no 'Host Process' or 'Superfetch' errors, which was the reason for my post, my machine, however, is running very slowly.

It's never been very quick but it does seem very sluggish, especially when trying to open more than one atb at the same time.

This is possibly a consequence of being an old machine but, as far as I'm aware, I'm not asking it to do too much at any one time.

Can machines slow down just because they are old?

 

Thanks as always,

 

Slime.

[RKinner]

Your hard drive is probably getting old and causing the slowness::

 

Windows (2952) Windows: A request to read from the file "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" at offset 177594368 (0x000000000a95e000) for 8192 (0x00002000) bytes succeeded, but took an abnormally long time (83172 seconds) to be serviced by the OS. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.

 

 

 

From Speccy:

 

07

Attribute name Seek Error Rate

Real value 0

Current 66

Worst 55

Threshold 30

Raw Value 001C62A319

Status Good

 

B

Attribute name Reported Uncorrectable Errors

Real value 13

Current 87

Worst 87

Threshold 0

Raw Value 000000000D

Status Good

C3

Attribute name Hardware ECC Recovered

Real value 0

Current 53

Worst 45

Threshold 0

Raw Value 000677FD6C

Status Good

C5

Attribute name Current Pending Sector Count

Real value 1

Current 100

Worst 100

Threshold 0

Raw Value 0000000001

Status Good

C6

Attribute name Uncorrectable Sector Count

Real value 1

Current 100

Worst 100

Threshold 0

Raw Value 0000000001

Status Good

C7

Attribute name UltraDMA CRC Error Count

Real value 5

Current 200

Worst 200

Threshold 0

Raw Value 0000000005

Status Good

 

 

 

Ideally we want the Raw Values to be 0 on the above.  You have a Seagate drive and they have a really bad rep.  Probably time to get another drive (recommend Western Digital Black) and clone it.

 

Run Process Explorer again and create a log and let's see if there is anything else using up the CPU which would also cause ti to be slow.

 

The other error we get is:

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Log: 'System' Date/Time: 06/09/2016 16:43:00

Type: Error Category: 0

Event: 10010 Source: Microsoft-Windows-DistributedCOM

The server {6295DF2D-35EE-11D1-8707-00C04FD93327} did not register with DCOM within the required timeout.

 

 

 

 

Try turning off mobsync:

 

https://forums.techg...ync-exe.828753/

 

Another possibility for a slow PC is overheating.  Speccy said it was running at 50 C but it might be that this climbs under load.  A hot PC is a slow PC.  The CPU slows down to protect itself.  

 

You can run Speedfan:

 

http://filehippo.com...speedfan/60186/

 

Download, save and Install it (Win 7 or Vista right click and Run As Admin.) then run it (Win 7 or Vista right click and Run As Admin.).

 

It will tell you your temps in real time tho the default is to show the hard drive temp in the systray.  You can change it:  Hit Configure then click on the highest temp and check Show in tray.  If the hotest entry goes over 65 then you may need to clean the heatsink.

[Slime]

Hi RKinner.

 

1. A fresh Process Explorer log;

 

 Pro Exp 4.TXT   3.76KB   289 downloads

 

 

2. Mobsync successfully turned off.

 

 

3. SpeedFan issue?

I ran it as Administrator but only after I got the following error report!

 

 

My machine has been running for a little while now and the temperature showing on my toolbar is currently 59°C.

 

I've also just gone to 'Windows Updates' and clicked on 'Check for Updates' and it's been checking for a while now. Is this normal?

 

Thanks as always,

 

Slime.

 

 

 

[RKinner]

Speedfan has to be run as Admin.  Not sure what your error means.  If I understand you correctly you got that trying to run Speedfan without Run As Admin?

 

Your Process Explorer shows svchost eating up the 1/2 of the CPU's time.  That's probably Windows Update.  I don't think Microsoft likes Vista or Windows 7 and makes Windows Update take forever to encourage you to upgrade to a newer version .    Sometimes it take 24 or more hours for it to finish looking for updates.  Sometimes 

the System Update Readiness tool will help:

http://www.majorgeek...iness_tool.html

[Slime]

Hi again.

I've definitely been running SpeedFan as administrator and still get the message!

I'm also using the System Update Readiness tool ............................................ and it's still searching!

It's been searching for just over 22 hours now.

Anything else I can do?

 

Many thanks,

 

Slime.

[RKinner]

The error is caused by edatasecurity.  They have their own libeay32.dll which is fine but they put the path for it in the Path before everything else so all programs look there first.  If you don't use it,

uninstall Acer eDataSecurity Management.  If you do use it then try getting the latest version.  If that doesn't help then do:

 

Copy the next 2 lines:

set path > \junk.txt

notepad \junk.txt

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  Right click and Paste (or Edit then Paste) and the copied lines should appear.  Hit Enter if notepad does not open.  Copy and paste the text from notepad into a reply. 

 

 I assume you did not stop the original Windows Upgrade search first.  You probably need to repeat what you did back in post 9:

http://www.geekstogo...s/#entry2577220

 

Then once you verify that Process Explorer looks good (svchost is not in the top) then try running it again.  It still usually takes about 3 hours.

[Slime]

I now have the latest verion of Acer eDataSecurity Management, but it's made no difference!

What are the implications of uninstalling it? I don't think I am using it, certainly not consciously.

 

This is the Junk log you requested;

 

Path=C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
Pathtem=C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Program Files\Acer\Empowering Technology\eDataSecurity\;C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86;C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64
 

 

 

Slime.

[RKinner]

If you don't use it I think you can remove it.  If I understand it correctly you can right click on a file and then encrypt it using edatasecurity.  If you haven't done that to any files you probably don't need it.

[Slime]

I've just binned Acer eDataSecurity and, while I was at it, I got rid of a whole load of Acer programmes that I never use!

I still can't seem to find any Windows updates.

Looking at my update history it would appear that I installed some updates just five days ago, although they all relate to Microsoft .Net Framework!

 

This is my current Process Explorer screenshot;

 

 

[RKinner]

Search for

 

services.msc

hit Enter

 

Find Window Update and stop it.  Does the svchost drop off the top in Process Explorer?

 

Let's see some new VEW logs.

[Slime]

Hi RKinner

Sorry for the delay, I've been away a bit recently.

I've switched of Windows Updates and have the following logs for you;

 

 VEW App 20-09.txt   9.51KB   296 downloads

 

 VEW Sys 20-09.txt   17.72KB   298 downloads

 

 

 Process Explorer 20-09.TXT   3.82KB   302 downloads

 

 

Thanks again,

 

Slime.

[RKinner]

Delays are no problem.  I don't keep track.

 

Log: 'Application' Date/Time: 20/09/2016 14:27:38

Type: Error Category: 0

Event: 34 Source: VSS

Volume Shadow Copy Service error: The VSS event class is not registered.  This will prevent any VSS writers from receiving events.  This may be caused due to a setup failure or as a result of an  application's installer or uninstaller. 

 

Operation:

   Gathering Writer Data

   Executing Asynchronous Operation

 

Context:

   Execution Context: Requestor

   Current State: GatherWriterMetadata

 

 

Let's see if we can figure out what is wrong here:

 

Copy the next 2 lines:

reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}\EventClasses\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}" > \junk.txt

notepad \junk.txt

 

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  Right click and Paste (or Edit then Paste) and the copied lines should appear.  Hit Enter if notepad does not open.  Copy and paste the text from notepad into a reply.  

 

Log: 'System' Date/Time: 18/09/2016 15:15:07

Type: Warning Category: 0

Event: 36 Source: Microsoft-Windows-Time-Service

The time service has not synchronized the system time for 86400 seconds because none of the time service providers provided a usable time stamp. The time service will not update the local system time until it is able to synchronize with a time source. If the local system is configured to act as a time server for clients, it will stop advertising as a time source to clients. The time service will continue to retry and sync time with its time sources. Check system event log for other W32time events for more details. Run 'w32tm /resync' to force an instant time synchronization.

 

 

 

 

This one may be the root of your problem.  If the time isn't correct it has problems with https connections.  Right click on the clock and select Adjust Date/Time.  Verify the time and date are correct then click on Internet Time then on Change Settings.  Update Now.  If it fails to update try changing the time source to time.nist.gov

 

Process Explorer looks very good right now.

 

[Slime]

Hi mate.

Below is my Junk log as requested,

 

 junk 26-09.txt   726bytes   293 downloads

 

I also tried to update my time/date settings and ended up with the following error message,

 

 

I hope this helps,

 

Slime.