Tweaking.com Support Forums

Main Forum => General Computer Support => Topic started by: Lady on February 19, 2016, 02:38:17 pm

Title: (Solved) Desktop pc suddenly slow
Post by: Lady on February 19, 2016, 02:38:17 pm

Hi guys,

Everything was going well for a while (SO wonderful  :cheesy:) but since a few days my desktop pc (HP, W7) has become superslow. The weird thing is that it's not all the time, sometimes I have no problems, sometimes after a while, sometimes the whole time. Sometimes a reboot helps but now it seems to be getting worse. It doesn't matter what I click on, it takes like half a minute to a full minute for the pc to get the job done. I cannot play any videos anymore, they're full of hiccups. So it seems a buffering problem?? I regularly clean the pc with WiseDiskCleaner (= similar to CCleaner) and with BullGuard's optimalisation feature. I did several scans (MBAM, Eset, BullGuard) but nothing there.

Anybody any ideas?

Lady

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 19, 2016, 03:01:46 pm

Have you checked the BIOS when it occurs to check the temperatures ?

Alternatively, you can leave the free version of HWMonitor running to keep an eye on the temps as the case may need a clean out.

http://www.cpuid.com/softwares/hwmonitor.html

The freebie download link is lower don on the left.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 20, 2016, 04:38:26 am

Hi Boggin,

I downloaded the program (don't like entering the BIOS on reboot) and temperatures of motherboard, processors and SSD drive are perfect. Am experiencing no problems with slowness at all today. So I should check the temperatures when it does get slow? And by cleaning out the case you mean literally dusting off the inside of the desktop thing (cannot find a word, haha)? I heard about that. Would be a first for me to open the thing up....

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 20, 2016, 08:30:11 am

Is ESET your AV program and what is Bullguard ?

If it was overheating then it wouldn't be as intermittent as that, but checking the temps when it does slow down is something to check.

It sounds as if something is running in the background at times and using up memory and maxing out the CPU.

When it's running okay, open Task Manager and under Performance see what the Memory and CPU usage is and under Processes see which is using the most - double click on Memory in that column and they will sort themselves to the highest first.

You can then open Task Manager and compare the results when it starts to or gets slow.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 20, 2016, 10:28:59 am

ESET is a free online scanner and is supposed to be one of the best. http://www.eset.com/int/home/products/online-scanner/

BullGuard is my (paid) antivirus & firewall program. Am very satisfied with it.

That was rather cool to see the memory usage of my programs, Boggin!  :smiley:  I made a screenshot so I can compare things. Yes, I agree, it feels like something is taking up too much space sometimes. I thought about that yesterday when I looked at 40 pages on an online webshop site, but I also had the issue in a major way right at startup last week.

Because my problem happens so randomly I don't think this is a cause but I wondered about this. Would you mind explaining this to me? When I load a lot of pages or windows it takes up a lot of cache, right? And that could also slow things down, couldn't it? So if I want to delete the cache, how do I go about that? I assumed WiseDiskCleaner does that as it mentions Mozilla Firefox Cache (see attachment). So I did that when I had major problems yesterday, but it didn't help. I ran the optimalisation feature in BullGuard and it gave a lot of Mbs in the Firefox cache to be removed which I did but that didn't help either. So what's with the cache? Is it a good idea to empty it after several hours at the pc? The Task Manager says the cache now takes up half of the memory (about 4 out of 8 RAM). I hope I'm not saying really wrong things now. I'm out of my league here. :)

Oh, light bulb moment! Yesterday before closing down I closed quite a few windows in Firefox. I now have about 70 open and I closed about 20. Could that just have been it because today everything is peachy!

Another thing: it struck me that EMET (not to be confused with ESET) takes up ranking No. 7 in memory usage. Sometimes I get this message from EMET (see attachment) when I'm working in Word and it closes Word down. Today I had it again when I wanted to open a file which I use daily. On other days I have no problems opening it. After opening Word anew I got the same shutdown on opening that file two times and the third time I opened it via the regular opening button (not via 'recently opened documents') and everything was fine again. This seems to me to be odd too. Do I really need EMET? (I have version 5.2.) I thought it was needed for the Internet Explorer browser but I don't use IE. I was told to install EMET anyway but maybe it is outdated and only interferes? Cannot find any answers online about that.

Hope you're still with me. :)

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 20, 2016, 03:18:32 pm

It has been found that an AV program updating in the background can slow a machine down, but I think the only way to determine if EMET is conflicting with other software on your system would be to uninstall it.

Which browser are you using if not IE ?

Flash Player has recently been found to cause slow in Firefox and changing it to ask to activate has resolved.

Other than using CCleaner to clean the temp file cache which I use, there can sometimes be a lot in the Temp folder which it hasn't cleaned and you can check that by going Start - type %temp% and press enter.

For the most part, the size of the files are listed, but if you want to remove them - click on Organize - Select all - Organize - Delete - confirm - check the box then click on Skip.

There should only be two or three small ones at most remaining.

Unnecessary start up programs in msconfig can unnecessarily take up memory and if you are used to having a lot of tabs open, then there will be competition so to speak.

You don't really need anything in the Startup menu except your AV program if it is listed in there - sometimes it's listed under the the Services tab.

Anyway, go Start - type msconfig and press enter then under the Startup tab click on Disable all, but don't do that until you have uninstalled EMET because if it is listed in the Startup menu and it is disabled when you uninstall it - it will leave orphaned files and that entry will remain after the program has been uninstalled - and this applies to any program that is in the Startup menu.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 21, 2016, 06:04:10 am

Quote from: Boggin on February 20, 2016, 03:18:32 pm

It has been found that an AV program updating in the background can slow a machine down, but I think the only way to determine if EMET is conflicting with other software on your system would be to uninstall it.

I think you are confusing EMET and ESET. ESET is an online scanner which can be used whenever necessary and updates at that moment. It is not an installed program and doesn't run in the background.
EMET is a Microsoft tool to help against vulnerabilities in the Windows software.  https://support.microsoft.com/en-us/kb/2458544

I'm still unsure whether EMET is really necessary. An IT person told me to use it. It only conflicts with Word sometimes. I think I'll make a new post just to ask about EMET.

Quote from: Boggin on February 20, 2016, 03:18:32 pm

Flash Player has recently been found to cause slow in Firefox and changing it to ask to activate has resolved.

Do I understand correctly that I have to change the Shockwave plugin into "ask to be activated"? I have it on "always activated". Do you recommend Flashplayer over Shockwave Player?

I ran through the Startup Menu a while ago with someone and I only have a few, like AV and Intel.

Today I have no problems with slowness again. Maybe it was just another temporary Windows Little Devil. We KNOW they exist.   :cheesy:

Thank you, Boggin! Much appreciated once again.

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 21, 2016, 06:47:56 am

No, I wasn't confusing anything.

The AV program that I was referring to that could have been updating in the background was for your Bullguard and then went onto mention EMET and I'm well aware of ESET, having used it a number of times myself.

Shockwave Flash is what Flash Player is called in Firefox, although there is also a Shockwave for Director which I've never understood the role of - while I have both Flash Player and Shockwave in IE.

You could change it to Ask to activate to see if you still get the intermittent slow as it could be one or more of the many windows you have open that is making the demands.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 21, 2016, 07:21:21 am

Quote from: Boggin on February 21, 2016, 06:47:56 am

You could change it to Ask to activate to see if you still get the intermittent slow as it could be one or more of the many windows you have open that is making the demands.

Oh, now I understand! That's a good one anyway, I changed it. Didn't know that open tabs which haven't been opened to use on a new day, if you understand what I mean, are making any demands on the system.

The AV updating seems to me an unlikely cause as the slowness lasted so long while I was trying out things to solve it.

The number of open tabs I can understand. Still, it doesn't explain why on one particular day there was a huge slowness on every mouse click in every program and after a reboot everything was fine..... Really odd.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 22, 2016, 11:53:52 am

The pc is slow again, in an increasingly worse way.

How much should the percentage of processor use in Task Manager be, ideally spoken?

I have open: Outlook e-mail program, Explorer, Firefox, Word, Energy Management, Task Manager, HW Monitor.

This is what I noticed: yesterday when everything was fine the processor use varied between 0 and 5 percent. When the pc now gets non-responsive, the processor use drops to 0% (see attachment). That may be obvious to you, but I don't know, maybe that helps. Is 0 to 5 percent not very little when it functions normally?

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 22, 2016, 02:21:03 pm

If the machine is frozen then there won't be any CPU usage, but something is using up to 3.02GB of memory.

Out of the 8GB I have installed, with my gmail, the forum and Task Manager open - while the CPU fluctuates, mine is only using 1.72GB of memory.

In Task Manager (if you can open it), check under Processes tab to see what is using so much memory - in that section double click on Memory and it will list the processes from the highest users.

If you have Windows Repair installed, you can use the system tray icon to Clean Memory which may knock the overall usage down a bit.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 22, 2016, 03:14:01 pm

I'll let you see the Task Manager of yesterday when everything was superfine and the one of right now. See attachments.

The striking thing is that yesterday the pc was asking much more of CPU memory. This was before I closed the 20 tabs in Firefox, I think.

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 22, 2016, 03:43:34 pm

I've noticed that you have the GWX.exe running - don't know if that is significant, although it isn't hogging any memory but go into Task Scheduler by typing that at Start then press enter.

Click on Task Schedule Library - Microsoft - Windows - Setup - GWX and then look at the Triggers etc. to see how often it's set to go looking.

I'm not sure how EMET works but an AV program can slow things when it starts checking files or the tabs.

Have you ever had the slow with say just one or two tabs open ?

I would think your Paging File is set to default but when was the last time you defragged the HDD if you are using one and not a SSD ?

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 26, 2016, 04:54:44 am

Dear Boggin, I'm late in responding, sorry, I have a lot on my plate at the moment.

The GWX I don't really understand but I can give you two screenshots of (I believe to be) significant pages. It seems to me that it doesn't do a whole lot. I have no idea. Or should I open GWXTriggers?

Quote from: Boggin on February 22, 2016, 03:43:34 pm

I'm not sure how EMET works but an AV program can slow things when it starts checking files or the tabs.

Yes, but it doesn't explain why the slowness is so random. I had it again yesterday in a major way, tried to find a possible cause, but had to reboot and everything was fine again.

Quote from: Boggin on February 22, 2016, 03:43:34 pm

Have you ever had the slow with say just one or two tabs open ?

It has been a looooooooong time since I had just one or two tabs open. :cheesy: They're my modern form of yellow post-its, you know.  :smiley:

Quote from: Boggin on February 22, 2016, 03:43:34 pm

I would think your Paging File is set to default but when was the last time you defragged the HDD if you are using one and not a SSD ?

I cannot find out what a paging file is. My C: drive where the Windows files are on is an SSD.

Tell me if you want some more info on one of these things.

Another problem: to fill in a form for a certain website I have to use Internet Explorer, but I cannot get it to open. It opens but the waiting symbol (the little blue circle spinning) is there and then it shuts down. In the attachment the files that are involved from the error popup.

Maybe it's time for a Windows Repair All In One. Or would that be a problem with my Dynamic Discs?  :omg:

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 26, 2016, 06:11:09 am

GWX is Get Windows 10 and I was wondering if it was triggered to go looking for the update at certain times.

You can also check to see if Bullguard is also tasked to perform certain actions at given intervals or any of MBAM.

An intermittent fault is the worst type to try to nail down.

The Paging File is your Virtual Memory and you can check to see that it is set for Windows to auto manage it but with 8GB RAM installed you probably wouldn't need it.

http://windows.microsoft.com/en-gb/windows/change-virtual-memory-size#1TC=windows-7

However, I noticed from your Task Manager/Performance that you have very little free memory left.

While I may only have up to 10 tabs open but generally a lot less, below is my Task Manager/Performance and I also have 8GB RAM installed.

I also have IObit Uninstaller and the free version of MBAM - but not Exploit, but don't have them running in the background and have disabled MBAM in services.msc

When you are talking about "slow" is this primarily browsing ?

This can occur when the SNRM drops which affects your bandwidth and could be an explanation for it being intermittent if your computer still performs normally with multiple tabs open at other times.

Would you say that the slow occurs at peak times or isn't there any pattern to it ?

At these times you could run a speed test from www.speedtest.net to see if you are getting what you normally or should be getting when all is well.

You would need to log into your router to check the SNR Margin at these times and if the Downstream is well under 1 then first have a look around your home to see if anything is coming on that could interfere with your broadband signal and checking to see if you still get the slow or not when Ethernet wired could point to fluctuating broadband.

Depending upon your answer, I'll go into more detail on improving your wireless signal.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 26, 2016, 07:36:54 am

BullGuard and MBAM both perform real-time protection, on browsing and e-mail. MBAM daily performs a threat scan. BG has a few daily backup tasks to the external HDs. And I have MBAM Anti-Exploit. With a new slow-attack I can check if they're active. But if these real-time actions are interfering I would have had these slow-attacks all along (some days I spend a LOT of hours on the pc continuously) and I haven't had these serious problems with slowness before. I know the pc to be slow sometimes with opening new programs e.g. and then I often hear the pc case give starting-up sounds as if it were asleep (sleep options are off).

The paging file is set to auto-manage.
I saw DEP being set for all programmes and services (as somebody told me to). Is that correct? I have so much protection already. And the EMET error message on Word said something about DEP mitigation. Is that connected?

I decided to bring the number of tabs down. But for that I need more time which I have not at the moment. :S

Slowness in its worst form is waiting up to a minute with every mouse click. Even in Explorer or MusicBee or Word or wherever. Whatever its degree of slowness, it's with every program or function. I think I also tried shutting Firefox down to "make space", but to no avail. Up till now I have not detected any pattern. But then I have to check it in a more structured way, noting down time and checking all possible causes.

The bandwith is another very good idea of yours! I use a LAN cable (ADSL). Right now without any slowness problems my download speed is 12.99  (I pay for 20 Mb but I understand from my provider that I'm further away from the transmitting station). Upload is 0.83. I can check the speed when under attack.  :smiley:  Years ago I checked the download speed and it was about 13 at the time too. I have had no problems with such a seemingly low download speed. Especially since I blocked the trackers, downloading sites is very fast. At least fast enough for me. With uploading also no problems. I can wait, am a patient person.  :smiley:

Could you comment on my last two paragraphs of my last post about IE and Windows Repair?

Thank you for putting in some much of your time and your brain energy! Thumbs up again!

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 26, 2016, 08:16:51 am

Didn't you have this discussion with Shane before about you having Dynamic disks and wasn't a fix suggested to convert them ?

Can't remember now if they were a problem with WR.

I'm not sure about IE shutting down with just one particular site - have you tried running IE in Compatibility Mode ?

It could be a fault with the site itself and contacting whoever to report that problem may cough up something.

Usually resetting IE to defaults can resolve some problems, but when it is site specific, then it could be the site itself.

Changing your DNS servers to something like Google's 8.8.8.8 / 8.8.4.4 may help if your current DNS servers have problems resolving its address and resetting the winsock may also help, but if it was the winsock, then I would expect you to have other browsing problems.

To reset the winsock, run a cmd prompt as an admin and enter netsh winsock reset catalog and then shutdown /r /t 00 to effect an immediate reboot.

I don't think it will be a TLS problem, but SSL should no longer be used although depending upon the website, you may need to check the box for Use SSL 3.0 as well as all of the TLS boxes.

They are in IE - Tools - Internet options under the Advanced tab then scroll down to the Security section.

I can't think of anything else for that at the moment other than also in IE - Tools etc. under the Content tab click on Clear SSL state.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 26, 2016, 08:35:40 am

We talked about changing the dynamic discs to standard using Minitool Partition Wizard or some other program but I was advised not to mess with them if the pc was doing okay.

I wouldn't think a WR would act differently if the discs were dynamic. What are the possible risks of doing a WR? And does a system restore point work if anything after a WR is totally off?

I cannot open IE at all. That's what got me thinking about a WR again. Maybe some files have become corrupted again and maybe hence the slowness??

I don't want to put a lot more energy into this. Let's drop the slowness issue for now. A re-installation is the No. 1 solution, also regarding the discs, but I really can't have that now.

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 26, 2016, 09:01:17 am

Not being able to open IE at all could be a winsock problem but go Start - All Programs - Accessories - System Tools - Internet Explorer (No Add-ons)

Or you could go Start - type iexplore -extoff and press enter.

When it opens, click on the home page icon and then see if you can browse - btw which browser are you using now ?

If you can then browse, you may have picked up adware.

Resetting IE to defaults can get rid of most add-ons but download and run AdwCleaner followed by Junkware Removal Tool -

https://toolslib.net/downloads/viewdownload/1-adwcleaner/

https://www.malwarebytes.org/junkwareremovaltool/

Don't know if you've used AdwCleaner before but click on Scan and when it has completed, click on Report - during the scan it may pick up other programs it considers as adware and will list those in the lower pane - which you can uncheck before clicking on Report.

The report will list whatever it will delete when you close the report and click on Cleaning, then after the reboot will open another report to show what it has deleted.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 27, 2016, 10:36:46 am

Quote from: Boggin on February 26, 2016, 09:01:17 am

Not being able to open IE at all could be a winsock problem but go Start - All Programs - Accessories - System Tools - Internet Explorer (No Add-ons)

Or you could go Start - type iexplore -extoff and press enter.

Both times, as with my own efforts, IE opens but it says "not responding" and the waiting symbol is there for about 20 seconds and then it all disappears.

The slow attack is back since I returned to my pc an hour ago. Today in the afternoon all was fine. I kept the pc running with the monitor off after a minute. I just now checked the bandwith speed: 13.02, so no problem there. My AV/Malware family is doing nothing as far as I can see.

See attachments for the Task Manager at this moment. In 2a it is interesting to see that I have a lot more free memory now. I guess that's because I closed Firefox just now so that BullGuard could delete the Firefox cache for its Optimalisation feature and after that I didn't open a lot of tabs. In 2b you can see a lot lower figure for Firefox right now (before it was 400.000). I haven't closed any more tabs. And still the pc is slow. Not on every mouse click or keyboard touch, but still, very annoying.

If you're online now on Saturday evening  :smiley: and while I'm under attack, could you suggest anything else I can check? I'll be online for another hour or so.

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 27, 2016, 12:21:13 pm

Something is still using a hell of a lot of memory, but it isn't apparent from the Processes.

What does the Applications list ?

Can you download the free version of Speccy and when it has analysed, can you click on RAM and list what it says under Physical Memory - your Virtual Memory doesn't look as much as it should in Task Manager.

https://www.piriform.com/speccy

This is what mine looks like - disregard the lower attachment, it didn't come out as I wanted.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 27, 2016, 03:20:24 pm

If by applications you mean plug-ins, see attachment for my plug-ins.

The pc has become SUPERSLOW now. I have Speccy 1.28, couldn't get it to update to 1.29. After right-clicking on the exe file there was a very short pop-up, something like "please wait while Speccy....loading...." and then it's gone. Tried it several times. So I used 1.28.
The outcome is in the attachment.

I purposely didn't reboot today and it seems that, when it's under a slow attack, the slowness gets worse with time.

Could it be malware? If the scans by BullGuard, MBAM and Eset don't give anything, is there another program that would find something they might overlook?

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 27, 2016, 03:26:19 pm

Well, your Virtual Memory looks okay.

Not Firefox plug-ins but the Applications tab in Task Manager - something's aggregating 43% of your memory.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 27, 2016, 03:47:49 pm

Well well well, look at this.

I closed all programs and opened Task Manager. It was still on 36% physical memory. Or is it just me?

BTW, your Dutch is coming along nicely now, isn't it, Boggin?   :cheesy:

I'm off to bed. Tomorrow I'll run all my AV/Malware scans again and some other ones from a Dutch IT helpers' site specialized in malware.

Good night, y'all, sweet dreams. <3

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 27, 2016, 03:59:14 pm

My Dutch is fine as long as it's in English :D

Tomorrow, download Process Explorer https://technet.microsoft.com/en-us/sysinternals/processexplorer.aspx

Click on Options and ensure Verify Signature is checked then hover over VirusTotal.com and check its box.

Look for any VirusTotal entries in red with a highish value /50ish.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 28, 2016, 02:25:11 am

It took me some time to understand what you meant but I think I do now.

I see three VirusTotals in red. See attachments. 1 is the Tweaking.com Windows Repair Tray Icon! 2 is IOBit Uninstaller. I noticed before that when I wanted to update this program uBlock came with a warning and I didn't update. The third is the Prey program.

What do you say?

Had one instance of slowness. Pc is still fine today, just watched some videos without any problems.

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 28, 2016, 03:44:22 am

I have WR Pro and while it is listed in Process Explorer for me, it doesn't have a signature or Virus Total rating.

I also have IObit Uninstaller but it isn't running in the background and so, isn't listed - use IObit Uninstaller to uninstall itself to see if that makes any difference and what is the Prey program ?

Generally, 1 or 2/50 in red are nothing to worry about.

I think at one time I used to get a 1/50 for Flash Player, mine are all showing in blue with 0/50ish.

EDIT - Just had another look and Uninstall Monitor.exe is listed but doesn't have a signature or rating and is very low usage - so perhaps not that.

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 28, 2016, 03:56:01 am

Just been playing about with the View options in PE and now both WR and Uninstaller are verified and now showing in red as 1/50ish and 2/50ish respectively - possibly because they have the ability to change your system.

However, PE may show something that is responsible for that 3.6GB usage.

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 28, 2016, 04:19:38 am

A bit more on using PE - https://askleo.com/how_do_i_find_out_whos_using_all_my_memory/

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 28, 2016, 04:42:49 am

Prey is a program that can locate your pc/laptop/cell phone.  https://preyproject.com/  You have to sign up and log in, it's not an installed program.

I was just looking at Programs and Features and saw Surfing Protection by IObit. That might be a realtime thing as well. I don't like this IObit one bit   :tongue:. They keep trying to install all kinds of things. I have Revo but only for 32 bit programs. Didn't know your trick back then. :( Do you know another freeware uninstaller so I can get rid of this IObit?

Yeah, I got that, that 1 or 2 positives is nothing to worry about.

I made screenshots of my Process Explorer for you.

Now I'm signing off for the rest of the afternoon, Boggin. It's lovely weather here and I REALLY promised myself to do something else today!  :cheesy:

We'll talk later. Oh, but we should not forget that I still cannot open IE.

Have a nice day!

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 28, 2016, 04:57:49 am

I've used IObit to uninstall itself before now, but you can download the Pro trial version of Revo which will uninstall 64 bit programs.

Have you tried to open IE without add-ons yet or run AdwCleaner or Junkware Removal Tool to see if they find anything untoward which will stop IE from opening.

Have you also tried resetting IE to defaults ?

If you can open IE without add-ons then that would point to something nasty on your computer which both AdwCleaner and JRT are designed to remove.

If they haven't found anything untoward then go to Method 4 in this article and hit the Download button to re-register IE - https://support.microsoft.com/en-us/kb/813444

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 28, 2016, 09:48:45 am

I was able to do something with my Sunday for a bit........and here I am again.

If we solve this, I believe I should deserve another karma point. Pfffffffff.

Am looking right now at a possible memory leak in Process Explorer, according to Leo's instructions (Working Set and Virtual Size). I think it's better to do this after a fresh start, but anyway, I'm looking at it.   :cheesy:

Hadn't turned off the pc and now it's starting to get really slow again.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 28, 2016, 09:54:26 am

Oh, I hadn't seen your last post.
About IE please read my post No. 19.

I will now run AdwCleaner and JunkwareRemovalTool.

No, cannot install them, the pc is too slow. Tomorrow then. BullGuard blocked the JRT site but I assume that's a false positive?

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 28, 2016, 10:19:57 am

I've had Norton block AdwCleaner before now as a false positive.

JRT now belongs to MBAM but there are a number of sites you can download it from http://lmgtfy.com/?q=jrt+download

Of those, I would trust bleepingcomputer.com, the MBAM link, filehippo.com, majorgeeks.com and techspot.com

The block may be site specific.

If AdwCleaner and JRT don't find anything or IE still fails to open after running them, then use the link to re-register IE or from an elevated cmd prompt, see what a sfc /scannow reports.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 28, 2016, 10:45:50 am

Just a thought: the way I see IE trying to open which is similar to when the pc is slow and I try to install a program made me think: isn't IE a big program like Firefox which would use a LOT of memory space and therefore cannot even open?

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 28, 2016, 12:57:49 pm

It's possible that you have tried to open IE and even though it failed to open, Windows could still be trying which could account for the memory leak - but just a guess.

When you go Start - type iexplore.exe and press enter, does it open ?

The next thing to check would be Event Viewer for when you try to open IE - look for the Error time stamps, but don't forget to use the MS article to re-register IE or see if a sfc /scannow reports anything.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 28, 2016, 01:57:40 pm

Quote from: Boggin on February 28, 2016, 12:57:49 pm

It's possible that you have tried to open IE and even though it failed to open, Windows could still be trying which could account for the memory leak - but just a guess.

Yes, this could well be. I meant it in a different way: if there's so little free physical memory left then IE wouldn't have enough memory to even open and fails immediately. As already happens with simple programs failing to be installed. So maybe, even when the pc is on normal speed, there's not enough memory for IE to open. Could this be valid somehow?

Quote from: Boggin on February 28, 2016, 12:57:49 pm

When you go Start - type iexplore.exe and press enter, does it open ?

I did this, see post 19.

Quote from: Boggin on February 28, 2016, 12:57:49 pm

The next thing to check would be Event Viewer for when you try to open IE - look for the Error time stamps, but don't forget to use the MS article to re-register IE or see if a sfc /scannow reports anything.

Please don't forget that I'm trying hard to keep up with you, trying to understand what you're saying, I have to look up pretty much everything you're suggesting, search for things, translate, etc. It's not easy....

I found out what the Event Viewer is, but don't know where to look. It's big. I uploaded the error message again which I received once when I tried to open IE. See attachment.

Maybe it's just all due to the number of tabs I have in Firefox......

The pc is so superslow now that I cannot even write here in a normal fashion. Have to turn the thing off.

And I have to take a break from this now.

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 28, 2016, 02:27:20 pm

Shane may know what that IE txt refers to but I don't.

Do you try to open IE in each new session ?

I would normally explain about Event Viewer but thought you'd already been in there.

When Event Viewer has read the data you will be presented with a pane listing Critical, Errors etc. and if any have occurred in the last hour, 24 hrs etc.

Click on Error then on View All Instances of This Event in the lower right pane and then you can look for the applicable time stamped errors.

If you see any, click on them and more info will appear in the lower pane and clicking on the blue online help link can sometimes explain why that error occurred and possible solutions, but if you want to post the error, then click on Copy/Copy details as text in the lower right pane, then right click in the reply box and select Paste.

You would do this for each Error you clicked on.

Can you see if you can boot up into Safe Mode with Networking, usually by tapping F8 as you switch on and then select that option and press enter - AdwCleaner should install then as all 3rd party programs such as Bullguard will be isolated.

I believe you have WR installed - if you click on its system tray icon you can see if using the Clean Memory option will free up sufficient for you to install AdwCleaner.

You haven't said if you've used the download button in that MS article to re-register the IE .dlls.

The article doesn't give it as being applicable to IE 11 and Win 7 but I'd already run it to see if it gave any error messages, everything still works as it should.

I think you know how to run a sfc /scannow from an elevated command prompt, but go Start - type cmd then right click on cmd and select Run as administrator - accept the UAC and enter sfc /scannow to see what it reports.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 28, 2016, 02:43:05 pm

When I closed down the pc just now I paid more attention as I thought I saw something happening yesterday. And it did. I was very particular in closing every program before closing down and it took a while (the slowness) but for a very short time a pane appeared which said something about program or programs still needing to be closed. I couldn't even read it, it was gone so fast. But I managed to click on cancel, so I could view it again. It appeared again on closing down, I pressed printscreen but it closed down completely.

So there are still things happening in the background that I cannot see. I think that was important for you to know.

Right now I cannot do all the things you're suggesting. It's too much. Communicating through writing causes misunderstandings so easily, it wears me out. I can download AdwCleaner and everything else when the pc is normal.

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 28, 2016, 02:52:56 pm

Sometimes the shutdown can hang because not all background programs/services shutdown straight away, but if the message is just fleeting then they will be closing down.

What problems are you encountering in following my suggestions ?

If you can run AdwCleaner when the machine is normal - at least that is something, but without the further diagnostic suggestions it is difficult to progress.

I've emailed Shane to see what he makes of that IE.txt attachment, but I don't expect a reply until at least tomorrow.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 29, 2016, 03:51:21 am

I cannot install Revo Pro as I've used the 30 days trial period in the past and didn't know your trick (what was the trick again?), so now they ask to activate it with a licence. Maybe I should buy a licence.

I'll run AdwCleaner and JRT today.

Can we leave the IE issue for now? My feeling is that there's nothing wrong with IE itself.

I have uninstalled EMET. Someone told me to install HitmanPro.Alert instead. He said it was necessary especially for banktrojans.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 29, 2016, 04:21:40 am

Now I remember why I stopped using AdwCleaner. Because I never knew whether its findings were malware or not.

Please look over them and give me the green light.

I know MyFreeCodec. That's from a Samsung cell phone program I de-installed.

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 29, 2016, 05:17:31 am

A rule of thumb is if you don't know what something is or the effects of deleting something, then you leave it.

As you have uninstalled MyFreeCodec then you can leave those items checked for removal as they will be registry residue.

Re, your PM, I forgot to mention that running the MS fixit to re-register IE is quite safe as I've already explained in a previous post.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 29, 2016, 07:04:07 am

Alright, thanks.

Did you see post No. 40?

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 29, 2016, 07:49:47 am

Please comment on my post No. 40.

Strange things happening again! I let AdwCleaner remove the files and reboot. Then no log and the whole exe file had disappeared from my desktop! Had to download it again. Has AdwCleaner changed its ways in the meantime? Or is my pc really going crazy now?

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 29, 2016, 07:59:38 am

Yes, I saw your Reply #40

I don't think you need to bother with uninstalling IObit Uninstaller as it has never caused problems for me but if you go Start - All programs and expand IObit Uninstaller, you will see that it has its own uninstaller.

Let me know if IE opens after you have run AdwCleaner, but as IE is part of Windows and if there is any corruption, a sfc /scannow may report on that.

I used to use HitmanPro.Alert v2.0 but that started telling me there was something wrong with my IE 11.

This coincided with an update to v3.0 which may have affected my v2.0

I tried v3.0 when it was a free program and found it corrupted my Teredo Tunneling adapter in Device Manager/View/Show hidden devices/Network adapters by putting a yellow alert next to it.

Some banks insist you install Trusteer Rapport but that can cause problems in itself.

While another security level is good, they can have their side effects and I think as long as you have a decent antivirus program then you should be safe.

EDIT - Just seen your last post while I was typing my reply.

Not sure what happened there but Windows should have created a restore point prior to installing AdwCleaner which you could use to restore before you ran it.

After it had completed the scan did you click on Report to see what else it had found prior to clicking on Cleaning ?

If you need help in accessing System Protection to Restore then say so or if the restore reports as unsuccessful, you will need to do it again in Safe Mode as it will be Bullguard interfering in that.

When you get a chance, check Task Manager to see if uninstalling EMET has made any difference to the memory used or your computer has benefitted from it.

Title: Re: Desktop pc suddenly slow
Post by: Lady on February 29, 2016, 10:38:19 am

Yaaaaaaayyyyyyyyy!!!!! IE opens!!!!! What was it about then, do you know now? Closed it again quickly. I find IE scary. :)

Ok, I'll continue with IObit but I want to uninstall IObit Surfing Protection because I assume it's another real-time protection thing, and I don't want everything to get conflicted. Re HitmanPro: I agree, what I have with those superprograms MBAM and BullGuard (and Eset) must be enough. Thanks for sharing your experience with it. I know about Trusteer Rapport, had it for a while and got rid of it. Didn't trust it. No pun intended. Hahahaha.

AdwCleaner: with Report I thought you meant Results (because of my Dutch version). Ran AdwC again in English but I don't see any Report for the life of me. See attachment. Didn't see a restore point being made either.

Quote from: Boggin on February 29, 2016, 07:59:38 am

If you need help in accessing System Protection to Restore then say so or if the restore reports as unsuccessful, you will need to do it again in Safe Mode as it will be Bullguard interfering in that.

I'm sorry, I have no idea what you mean by this. What restore?

The Task Manager shows a better result. I attached the pic of the TM when it was slow, so you can see the difference. I don't see much difference other than much more free physical memory. I must say the pc has definitely increased in speed since AdwC, it's REALLY fast now. No slowness yet, but the pc is only on for 1.5 hours. Do you think we found the culprit? And if we did, what was it exactly? And do I still have to run JRT?

Alas, more new problems:

As I looked at IObit Surfing Protection I saw I have 2 Tweaking.com WRs and I wanted to uninstall the older version 3.0.0. I couldn't, it said the tray icon was in use. So I opened the latest WR to see if I can get the tray icon out or stopped or whatever, but then I saw the latest version was already corrupted. See attachment. I only recently installed WR 3.8.3 (on Feb. 23) as I thought we would do that. How can that happen? And how do I uninstall the old WR with this tray icon running?

It's a lot of issues/questions, Boggin. Can you respond to them all, please? Thanks!

I'm really hoping this solved the slowness!! If you want to know what AdwC did, we still have the pictures.  :cheesy:
I checked, but there isn't a log report in C\AdwCleaner of the first scan and removal either, the "S1". Strange.

Title: Re: Desktop pc suddenly slow
Post by: Boggin on February 29, 2016, 03:01:10 pm

You would click on Logfile after the scan which will open in Notepad to show you what else it has found and it will produce another report (Logfile) after the reboot to show what it has removed.

After I've run it previously there has only been one AdwCleaner file listed in C: so don't know what has produced that many.

For IE to now open, it must have found something, but your memory usage is still way too high - I would still give JRT a run and see what things are like afterward as JRT is quite often used to supplement AdwCleaner.

You can end the WR Tray Icon in Task Manager by clicking on it under the Processes tab then on End Process which should enable you to uninstall both versions prior to a fresh install.

Are you using the free or the Pro version ?

I'm not sure if having two versions installed would disrupt anything, but check the memory usage in Task Manager after uninstalling and before the reinstall.

As for the restore - thought your computer had gone all to hell with AdwCleaner vanishing and using your restore points to prior its install may have gotten the system back to the way it should be.

I would go ahead and uninstall that Surfing Protection and again, check to see if the memory usage has improved.

Think I've covered everything....

Title: Re: Desktop pc suddenly slow
Post by: Lady on March 01, 2016, 06:41:02 am

The other AdwC files in C: are from my attempts to find your "Report" in AdwC.  :smiley:  I only let it scan a few times and apparently that already gives a logfile in C:. I just performed the whole process again with AdwC, scan and clean, nothing else, didn't click on logfile. After reboot it gave a logfile and the program itself was still there. This IMHO means that AdwC cleaned something which really corrupted a lot, even with AdwC itself that first time around. What else has been corrupted??

Another thing: normally when you perform an update to a newer version of a program the program deletes the old version, right? This didn't happen with Tweaking.com. I don't suppose Tweaking.com doesn't delete the older version, so that means another corruption. I uninstalled one with IObit and then both were gone. I have the free version of WR.

I made a pic of Task Manager after I started the pc without opening any program. And then pics of Process Explorer in Virtual Memory order and then in Working Set order. See attachments. I hope that will help.

Well, IObit thinks my pc is really one big mess. Look at the message I got after uninstalling Surfing Protection. See attachment. It says: remnants of the files have been successfully removed and it gives the number of privacy problems, registry errors and waste files and that I should install their Advanced System Care. I assume this is a scare-tactics pitch?

I have to go. Will perform JRT later. Thanks, Boggin! Don't know what to do without you!  :cheesy:

Oh, no slowness yet................ Although I saw last night in TM that free memory dropped more and more.

Title: Re: Desktop pc suddenly slow
Post by: Boggin on March 01, 2016, 07:26:15 am

I noticed that GWX.exe is using a lot more memory than it was in your earlier pic of TM so it must be set to trigger at certain times, although you haven't experienced any slow because of it.

Because I don't want Win 10 installed again, I went into the registry, did a search for GWX - exported it so it was backed up and then deleted its entry in the registry.

While I don't have MBAME, I do have the free version of MBAM and I have its service stopped as there is no reason for it to be running in the background.

I don't know if you would have two service entries for MBAM in services and if stopping one would interfere with the other, but they are highish users.

To check, go Start - type services.msc and press enter then scroll down to the MBAM entries - one may be listed as MBAME but clicking on their names will give details of their purpose.

I believe MBAME needs to be active, so leave that one alone.

To disable, right click on the name and select Properties then use the dropdown to change its status to Disabled - Apply - OK - File - Exit

While I don't normally advocate the use of a registry cleaner, the free version of CCleaner is safe enough to use and I occasionally check my registry with it and if there are quite a lot of entries, then I'll have a clean out just for tidiness.

If you want to give that a run then uncheck the box for ActiveX and Class Issues first so they won't be in the list.

Title: Re: Desktop pc suddenly slow
Post by: Lady on March 01, 2016, 10:33:57 am

I did CCleaner registry and JRT. CCleaner gave a LOT of entries, almost all for Silverlight. JRT logfile is attached. If I'm correct in reading the file the pc is so squeaky clean now that JRT couldn't find anything interesting anymore.  :smiley: Doesn't CCleaner give a log somewhere? Might be interesting for you.

Can we wait with disabling MBAM real-time and first see if the slow returns? I feel so very nicely protected now.  :smiley:

I can very easily disable real-time in MBAM settings. They have 2: against malware and malicious websites.

Title: Re: Desktop pc suddenly slow
Post by: Lady on March 01, 2016, 03:26:07 pm

Bad news: I've been checking the pc a few times this evening and it has become superslow again. I just now made a pic of Process Explorer to check its values with tomorrow morning after a fresh start.

Is it a memory leak, Boggin? How can it be that the pc can be really fast with the same amount of tabs in Firefox, MBAM and BG running in real-time etc. and become so slow, when I'm not doing anything different?

Is it time for a WR? I mean, it's obvious something has corrupted parts of the system, hasn't it?

Can you ask Shane whether a WR can be done with dynamic discs? And will a restore point work?

Also, a re-install is becoming an option for me more and more. If you assist me.  :smiley: I've had major problems with this pc since I bought it in Dec. 2013. It's crazy and it's driving me crazy. I think we should delete everything and make it a brand new one.

Title: Re: Desktop pc suddenly slow
Post by: Boggin on March 01, 2016, 03:47:22 pm

Yes, if it no longer slows then you can leave things as they are.

However, the normal MBAM if the free version isn't an active scanner so there is no need for it to run in the background when you boot up and having its service disabled will have no effect on it when you boot it up.

I also have all items under the Startup tab in msconfig disabled as well as some non-MS services under the Services tab.

My AV program - Norton Security sits under the Services tab, although some AVs can be listed under the Startup tab and may not reinstate themselves after being unchecked and the Apply button clicked.

Strangely enough, when I used CCleaner to check my registry there was also quite a lot of Silverlight entries which I had it delete after creating the back up it offered.

EDIT - Just seen your recent post - I noticed from your last TM pic that the memory usage was still on the high side, but if that didn't affect anything then that could be left.

Normally when a machine becomes slow the longer you use it, that can sometimes point to an overheating problem but something is eating up the memory.

What did Shane say last time about running WR with your Dynamic disks.

I tend to distrust restore points when it comes to running a major program like WR and would create a full system image, which includes the Recovery partition where there is one, onto external media before I would run the program.

Doing that pulled me out of the mire when I tried Uniblue's Power Suite in my naivety, which is a tune up program and which damaged files beyond repair - but on a couple of occasions when I've used my restore points, the laptop has froze and the only way to do anything with it was to power shut it down.

This results in just a black screen with a big white cursor arrow and the only way out of that with an OEM machine is to factory reset with the Recovery disks which some vendors allow you to make.

As another precaution, it's best to go into the Setup (BIOS) and change the boot order to permanently check the disk drive and USB if applicable before it checks the HDD for an OS to boot up.

Title: Re: Desktop pc suddenly slow
Post by: Boggin on March 02, 2016, 12:20:44 am

Shane says that you are okay to run WR.

Title: Re: Desktop pc suddenly slow
Post by: Lady on March 02, 2016, 03:06:56 am

I have the paid version of MBAM, it's active on malware and on malicious websites. I really want it to stay active. I just now updated my YouTubeDownloaderHD and MBAM always picks out and deletes their OpenCandyPUP.

I've been rereading some of my older posts and as far as I can recall Shane and I never discussed WR in connection to the dynamic discs. When I did a WR in Nov. 2014 on my desktop pc I didn't know yet about the DDs.  :tongue:

Maybe I'm all wrong but I can stop all kinds of features from running but that won't erase the cause of the memory leak. Yesterday I looked at the TM of a friend's laptop. She has 4 Gb RAM and a high memory usage, I believe it was 2.9 or 3.4 or something, and no problems with slowness.

I made a full system image backup on 15-09-2015 after I learned how to do that on my laptop, remember? After removing all the Lenovo bloatware crap. If I make a system image backup now, won't I be backing up the memory leak monster as well?

I don't think my desktop is an OEM. I had it custom-made in a pc shop and I asked for a W7 cd-rom.

Very nice recommendation, your precaution. Remind me please if we get to that point.

I read the site page by Leo which you recommended. https://askleo.com/how_do_i_fix_this_high_cpu_usage_svchost_virus_or_whatever_it_is/
But I see it's about WindowsXP in 2007 and there has been a Microsoft fix for that. It did give me the info that svchosts are often the place for viruses to hide.

First I'll go to the Dutch IT website which specializes in malware etc. Maybe they can find our monster.  :cheesy:

Title: Re: Desktop pc suddenly slow
Post by: Boggin on March 02, 2016, 03:29:41 am

I create a system image after the monthly updates, but first do a chkdsk /f, an antimalware scan and defrag if required, but while you should have created more regular images, it may be worth restoring with that image, although there will be quite a few Windows Updates to reinstall and you would lose any personal stuff that you have added since - although you could back that up separately onto something like a flash drive.

For an in depth scan I usually use the ESET Free Online Scanner, but an antimalware forum would be a good place to go although I don't think an infection would be as intermittent as you are experiencing.

You are right in that if an infection or system corruption is suspect then you shouldn't image that.

BTW - How much does your friend have under the Startup tab in msconfig and is that usage in a quiescent state without multiple tabs open ?

Is your IE still working okay ?

I can't remember if you have downloaded the free version of HWMonitor to check the temps when your computer slows, but they are something worth checking.

Title: Re: Desktop pc suddenly slow
Post by: Lady on March 02, 2016, 04:22:36 am

Yes, it's a good thing that you remind me to regularly make a system image backup. BUT I just thought of this: I cannot use an old or new SIB because of the dynamic discs!! We have to start from scratch. And even apart from the DDs I'd prefer it that way to really make this pc well. The good thing is is that I now have my laptop so I can really quickly set all the programs and settings by looking at the laptop.

Quote from: Boggin on March 02, 2016, 03:29:41 am

BTW - How much does your friend have under the Startup tab in msconfig and is that usage in a quiescent state without multiple tabs open ?

I cannot tell you, I won't be seeing her again soon. I can try asking her on the phone but she's doesn't know anything about pcs.

Yes, I checked IE this morning. It's still fine.
Yes, we already did the temperatures. And I checked them again today as well.
Is opening the case and cleaning it easy to do? Can you tell me?

Title: Re: Desktop pc suddenly slow
Post by: Lady on March 02, 2016, 05:07:28 am

I talked to my friend on the phone. She has a Vaio laptop, Intel i3, Windows10. Memory in TM is 2.4/3.9 Gb (62%) with everything open and 1.7/3.9 (44%) with everything closed. She has 14 items in startup menu (checked via her Norton) and she always has only 4 tabs continuously open in Chrome. So her memory usage is much higher than mine on a slower pc. She only experiences slowness when opening some websites but she has no ad or tracker blocker. I'll install uBlock for her and do some cleaning etc. next time. Her hubbie has no idea of pcs either, so I'm the one-eyed queen there! Hahaha

Title: Re: Desktop pc suddenly slow
Post by: Boggin on March 02, 2016, 05:20:19 am

Probably best to get your computer sorted out first before taking on another project, but I agree, your friend's computer is in need of some maintenance - talking of which, Windows has a Maintenance and Performance check in Control Panel/System and Security/Find and fix problems and clicking on each then on Advanced and Run as administrator may find something to clean up on yours.

Title: Re: Desktop pc suddenly slow
Post by: Lady on March 02, 2016, 06:40:08 am

I don't have a System and Security in Control Panel, only System and System Management, but I found it anyway.

I performed Windows problem solution. Found nothing.  :artist:

It only changed my settings on closing the monitor and sleep mode for the pc which I changed back immediately.  :smiley:

Title: Re: Desktop pc suddenly slow
Post by: Boggin on March 02, 2016, 09:43:25 am

See what that antimalware forum finds on your computer, but infections don't usually cause intermittent problems.

Event Viewer may have timed stamped errors for when you experience the slow which you could check for.

Title: Re: Desktop pc suddenly slow
Post by: Lady on March 02, 2016, 10:36:17 am

Another plan is to clean the pc case tomorrow. Never done that, but I can do that.

Also did a sfc \scannow. It says not all damaged files can be repaired. Did I have to paste the logfile in the post? It's not being accepted as an attachment.

Title: Re: Desktop pc suddenly slow
Post by: Lady on March 02, 2016, 11:00:43 am

Ok, I looked it up in a previous post when I did the sfc /scannow. Here's the log. Good luck! Hope you find something!

2016-03-02 13:04:56, Info                  CBS    Starting TrustedInstaller initialization.
2016-03-02 13:04:56, Info                  CBS    Loaded Servicing Stack v6.1.7601.18766 with Core: C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\cbscore.dll
2016-03-02 13:04:56, Info                  CSI    00000001@2016/3/2:12:04:56.933 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fef321f0dd @0x7fef35498b5 @0x7fef35134e3 @0xff09e97c @0xff09d799 @0xff09db2f)
2016-03-02 13:04:56, Info                  CSI    00000002@2016/3/2:12:04:56.949 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fef321f0dd @0x7fef3596816 @0x7fef3562b18 @0x7fef35135b9 @0xff09e97c @0xff09d799)
2016-03-02 13:04:56, Info                  CSI    00000003@2016/3/2:12:04:56.949 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fef321f0dd @0x7fef3978738 @0x7fef3978866 @0xff09e474 @0xff09d7de @0xff09db2f)
2016-03-02 13:04:56, Info                  CBS    Ending TrustedInstaller initialization.
2016-03-02 13:04:56, Info                  CBS    Starting the TrustedInstaller main loop.
2016-03-02 13:04:56, Info                  CBS    TrustedInstaller service starts successfully.
2016-03-02 13:04:56, Info                  CBS    SQM: Initializing online with Windows opt-in: False
2016-03-02 13:04:56, Info                  CBS    SQM: Cleaning up report files older than 10 days.
2016-03-02 13:04:56, Info                  CBS    SQM: Requesting upload of all unsent reports.
2016-03-02 13:04:56, Info                  CBS    SQM: Failed to start upload with file pattern: C:\Windows\servicing\sqm\*_std.sqm, flags: 0x2 [HRESULT = 0x80004005 - E_FAIL]
2016-03-02 13:04:56, Info                  CBS    SQM: Failed to start standard sample upload. [HRESULT = 0x80004005 - E_FAIL]
2016-03-02 13:04:56, Info                  CBS    SQM: Queued 0 file(s) for upload with pattern: C:\Windows\servicing\sqm\*_all.sqm, flags: 0x6
2016-03-02 13:04:56, Info                  CBS    SQM: Warning: Failed to upload all unsent reports. [HRESULT = 0x80004005 - E_FAIL]
2016-03-02 13:04:56, Info                  CBS    No startup processing required, TrustedInstaller service was not set as autostart, or else a reboot is still pending.
2016-03-02 13:04:56, Info                  CBS    NonStart: Checking to ensure startup processing was not required.
2016-03-02 13:04:56, Info                  CSI    00000004 IAdvancedInstallerAwareStore_ResolvePendingTransactions (call 1) (flags = 00000004, progress = NULL, phase = 0, pdwDisposition = @0x133fcb0
2016-03-02 13:04:56, Info                  CSI    00000005 Creating NT transaction (seq 1), objectname [6]"(null)"
2016-03-02 13:04:56, Info                  CSI    00000006 Created NT transaction (seq 1) result 0x00000000, handle @0x1f8
2016-03-02 13:04:57, Info                  CSI    00000007@2016/3/2:12:04:57.011 CSI perf trace:
CSIPERF:TXCOMMIT;316
2016-03-02 13:04:57, Info                  CBS    NonStart: Success, startup processing not required as expected.
2016-03-02 13:04:57, Info                  CBS    Startup processing thread terminated normally
2016-03-02 13:04:57, Info                  CSI    00000008 CSI Store 2254960 (0x0000000000226870) initialized
2016-03-02 13:04:57, Info                  CBS    Session: 30504059_3170017857 initialized by client lpksetup.
2016-03-02 13:04:57, Info                  CBS    Session: 30504059_3170017857 finalized. Reboot required: no [HRESULT = 0x00000000 - S_OK]
2016-03-02 13:05:19, Info                  CBS    Archived backup log: C:\Windows\Logs\CBS\CbsPersist_20160302120456.cab.
2016-03-02 13:08:25, Info                  CBS    Session: 30504060_956639452 initialized by client WindowsUpdateAgent.
2016-03-02 13:10:38, Info                  CBS    Starting TrustedInstaller initialization.
2016-03-02 13:10:38, Info                  CBS    Loaded Servicing Stack v6.1.7601.18766 with Core: C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.1.7601.18766_none_675144b3de10d6f7\cbscore.dll
2016-03-02 13:10:38, Info                  CSI    00000001@2016/3/2:12:10:38.706 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fef23cf0dd @0x7fef26898b5 @0x7fef26534e3 @0xfffae97c @0xfffad799 @0xfffadb2f)
2016-03-02 13:10:38, Info                  CSI    00000002@2016/3/2:12:10:38.706 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fef23cf0dd @0x7fef26d6816 @0x7fef26a2b18 @0x7fef26535b9 @0xfffae97c @0xfffad799)
2016-03-02 13:10:38, Info                  CSI    00000003@2016/3/2:12:10:38.706 WcpInitialize (wcp.dll version 0.0.0.6) called (stack @0x7fef23cf0dd @0x7fef22b8738 @0x7fef22b8866 @0xfffae474 @0xfffad7de @0xfffadb2f)
2016-03-02 13:10:38, Info                  CBS    Ending TrustedInstaller initialization.
2016-03-02 13:10:38, Info                  CBS    Starting the TrustedInstaller main loop.
2016-03-02 13:10:38, Info                  CBS    TrustedInstaller service starts successfully.
2016-03-02 13:10:38, Info                  CBS    SQM: Initializing online with Windows opt-in: False
2016-03-02 13:10:38, Info                  CBS    SQM: Cleaning up report files older than 10 days.
2016-03-02 13:10:38, Info                  CBS    SQM: Requesting upload of all unsent reports.
2016-03-02 13:10:38, Info                  CBS    SQM: Failed to start upload with file pattern: C:\Windows\servicing\sqm\*_std.sqm, flags: 0x2 [HRESULT = 0x80004005 - E_FAIL]
2016-03-02 13:10:38, Info                  CBS    SQM: Failed to start standard sample upload. [HRESULT = 0x80004005 - E_FAIL]
2016-03-02 13:10:38, Info                  CBS    SQM: Queued 0 file(s) for upload with pattern: C:\Windows\servicing\sqm\*_all.sqm, flags: 0x6
2016-03-02 13:10:38, Info                  CBS    SQM: Warning: Failed to upload all unsent reports. [HRESULT = 0x80004005 - E_FAIL]
2016-03-02 13:10:38, Info                  CBS    No startup processing required, TrustedInstaller service was not set as autostart, or else a reboot is still pending.
2016-03-02 13:10:38, Info                  CBS    NonStart: Checking to ensure startup processing was not required.
2016-03-02 13:10:38, Info                  CSI    00000004 IAdvancedInstallerAwareStore_ResolvePendingTransactions (call 1) (flags = 00000004, progress = NULL, phase = 0, pdwDisposition = @0x18cfa70
2016-03-02 13:10:38, Info                  CSI    00000005 Creating NT transaction (seq 1), objectname [6]"(null)"
2016-03-02 13:10:38, Info                  CSI    00000006 Created NT transaction (seq 1) result 0x00000000, handle @0x1ec
2016-03-02 13:10:38, Info                  CSI    00000007@2016/3/2:12:10:38.752 CSI perf trace:
CSIPERF:TXCOMMIT;321
2016-03-02 13:10:38, Info                  CBS    NonStart: Success, startup processing not required as expected.
2016-03-02 13:10:38, Info                  CBS    Startup processing thread terminated normally
2016-03-02 13:10:38, Info                  CSI    00000008 CSI Store 3245088 (0x0000000000318420) initialized
2016-03-02 13:10:38, Info                  CBS    Session: 30504060_2292306588 initialized by client lpksetup.
2016-03-02 13:10:38, Info                  CBS    Session: 30504060_2292306588 finalized. Reboot required: no [HRESULT = 0x00000000 - S_OK]
2016-03-02 13:11:15, Info                  CBS    Session: 30504060_2658781234 initialized by client WinMgmt.
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:17, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:17, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:17, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:17, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:17, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:17, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:17, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:17, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:17, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:17, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:17, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:17, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:17, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:17, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:17, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:17, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 13:11:17, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 13:11:26, Info                  CBS    Session: 30504060_2658781234 finalized. Reboot required: no [HRESULT = 0x00000000 - S_OK]
2016-03-02 14:52:14, Info                  CBS    Session: 30504074_3123715053 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:14, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:14, Info                  CBS    Session: 30504074_3123715054 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:14, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:14, Info                  CBS    Session: 30504074_3124495055 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:14, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:14, Info                  CBS    Session: 30504074_3124495056 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:14, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:14, Info                  CBS    Session: 30504074_3124495057 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:14, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:14, Info                  CBS    Session: 30504074_3124495058 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:14, Info                  CBS    Session: 30504074_3124651055 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:14, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:14, Info                  CBS    Session: 30504074_3124651056 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:14, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:14, Info                  CBS    Session: 30504074_3124651057 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:14, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:14, Info                  CBS    Session: 30504074_3124651058 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:14, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:14, Info                  CBS    Session: 30504074_3124963055 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:14, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:14, Info                  CBS    Session: 30504074_3124963056 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:14, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:15, Info                  CBS    Session: 30504074_3126055057 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:15, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:15, Info                  CBS    Session: 30504074_3126055058 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:15, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:15, Info                  CBS    Session: 30504074_3126367058 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:15, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:15, Info                  CBS    Session: 30504074_3126367059 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:15, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:15, Info                  CBS    Session: 30504074_3130891066 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:15, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:15, Info                  CBS    Session: 30504074_3130891067 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:15, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:15, Info                  CBS    Session: 30504074_3130891068 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:15, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:15, Info                  CBS    Session: 30504074_3131047066 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:15, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:15, Info                  CBS    Session: 30504074_3131047067 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:16, Info                  CBS    Session: 30504074_3135259074 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Session: 30504074_3140875083 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Expecting attribute name [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2016-03-02 14:52:16, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2016-03-02 14:52:16, Info                  CBS    Session: 30504074_3144775090 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:16, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:16, Info                  CBS    Session: 30504074_3144775091 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:16, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:16, Info                  CBS    Session: 30504074_3144775092 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:16, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:16, Info                  CBS    Session: 30504074_3144775093 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:16, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:16, Info                  CBS    Session: 30504074_3144775094 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:16, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:16, Info                  CBS    Session: 30504074_3144775095 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:16, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:16, Info                  CBS    Session: 30504074_3144775096 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:16, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:16, Info                  CBS    Session: 30504074_3144931091 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:16, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:16, Info                  CBS    Session: 30504074_3144931092 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:16, Info                  CBS    Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-03-02 14:52:21, Info                  CBS    Session: 30504074_3186271163 initialized by client WindowsUpdateAgent.
2016-03-02 14:52:21, Info                  CBS    Appl: detect Parent, Package: Package_for_KB3121255~31bf3856ad364e35~amd64~~6.1.1.0, Parent: Microsoft-Windows-WinPE-Package~31bf3856ad364e35~amd64~~6.1.7601.17514, Disposition = Detect, VersionComp: EQ, ServiceComp: EQ, BuildComp: EQ, DistributionComp: GE, RevisionComp: GE, Exist: present
2016-03-02 14:52:21, Info                  CBS    Appl: detectParent: package: Package_for_KB3121255~31bf3856ad364e35~amd64~~6.1.1.0, no parent found, go absent
2016-03-02 14:52:21, Info                  CBS    Appl: detect Parent, Package: Package_for_KB3121255~31bf3856ad364e35~amd64~~6.1.1.0, Parent: Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514, Disposition = Detect, VersionComp: EQ, ServiceComp: EQ, BuildComp: EQ, DistributionComp: GE, RevisionComp: GE, Exist: present
2016-03-02 14:52:21, Info                  CBS    Appl: detectParent: package: Package_for_KB3121255~31bf3856ad364e35~amd64~~6.1.1.0, parent found: Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514, state: Installed
2016-03-02 14:52:21, Info                  CBS    Appl: detect Parent, Package: Package_for_KB3121255~31bf3856ad364e35~amd64~~6.1.1.0, disposition state from detectParent: Installed
2016-03-02 14:52:21, Info                  CBS    Appl: Evaluating package applicability for package Package_for_KB3121255~31bf3856ad364e35~amd64~~6.1.1.0, applicable state: Installed
2016-03-02 14:52:21, Info                  CBS    Appl: detect Parent, Package: Package_for_KB3121255_RTM~31bf3856ad364e35~amd64~~6.1.1.0, Parent: Microsoft-Windows-WinPE-Package~31bf3856ad364e35~amd64~~6.1.7601.17514, Disposition = Detect, VersionComp: EQ, ServiceComp: EQ, BuildComp: EQ, DistributionComp: GE, RevisionComp: GE, Exist: present
2016-03-02 14:52:21, Info                  CBS    Appl: detectParent: package: Package_for_KB3121255_RTM~31bf3856ad364e35~amd64~~6.1.1.0, no parent found, go absent
2016-03-02 14:52:21, Info                  CBS    Appl: detect Parent, Package: Package_for_KB3121255_RTM~31bf3856ad364e35~amd64~~6.1.1.0, disposition state from detectParent: Absent
2016-03-02 14:52:21, Info                  CBS    Appl: Evaluating package applicability for package Package_for_KB3121255_RTM~31bf3856ad364e35~amd64~~6.1.1.0, applicable state: Absent
2016-03-02 14:52:21, Info                  CBS    EvaluateApplicability, package: Package_for_KB3121255_RTM~31bf3856ad364e35~amd64~~6.1.1.0, Package applicability: Absent.
2016-03-02 14:52:21, Info                  CBS    Appl: detect Parent, Package: Package_for_KB3121255_SP1~31bf3856ad364e35~amd64~~6.1.1.0, Parent: Microsoft-Windows-EmbeddedCore-Package~31bf3856ad364e35~amd64~~6.1.7601.17514, Disposition = Staged, VersionComp: EQ, ServiceComp: EQ, BuildComp: EQ, DistributionComp: GE, RevisionComp: GE, Exist: present
2016-03-02 14:52:21, Info                  CBS    Appl: detectParent: package: Package_for_KB3121255_SP1~31bf3856ad364e35~amd64~~6.1.1.0, no parent found, go absent
2016-03-02 14:52:21, Info                  CBS    Appl: detect Parent, Package: Package_for_KB3121255_SP1~31bf3856ad364e35~amd64~~6.1.1.0, Parent: Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514, Disposition = Staged, VersionComp: EQ, ServiceComp: EQ, BuildComp: EQ, DistributionComp: GE, RevisionComp: GE, Exist: present
2016-03-02 14:52:21, Info                  CBS    Appl: detectParent: package: Package_for_KB3121255_SP1~31bf3856ad364e35~amd64~~6.1.1.0, parent found: Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514, state: Installed
2016-03-02 14:52:21, Info                  CBS    Appl: detect Parent, Package: Package_for_KB3121255_SP1~31bf3856ad364e35~amd64~~6.1.1.0, disposition state from detectParent: Installed
2016-03-02 14:52:21, Info                  CBS    Appl: Evaluating package applicability for package Package_for_KB3121255_SP1~31bf3856ad364e35~amd64~~6.1.1.0, applicable state: Installed
2016-03-02 14:52:21, Info                  CBS    Appl: detect Parent, Package: Package_2_for_KB3121255~31bf3856ad364e35~amd64~~6.1.1.0, Parent: Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514, Disposition = Detect, VersionComp: EQ, ServiceComp: EQ, BuildComp: EQ, DistributionComp: GE, RevisionComp: GE, Exist: present
2016-03-02 14:52:21, Info                  CBS    Appl: detectParent: package: Package_2_for_KB3121255~31bf3856ad364e35~amd64~~6.1.1.0, parent found: Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514, state: Installed
2016-03-02 14:52:21, Info                  CBS    Appl: detect Parent, Package: Package_2_for_KB3121255~31bf3856ad364e35~amd64~~6.1.1.0, disposition state from detectParent: Installed
2016-03-02 14:52:21, Info                  CBS    Appl: Evaluating package applicability for package Package_2_for_KB3121255~31bf3856ad364e35~amd64~~6.1.1.0, applicable state: Installed
2016-03-02 14:52:21, Info                  CSI    00000009@2016/3/2:13:52:21.103 CSI Transaction @0x131c0c80 i

Title: Re: Desktop pc suddenly slow
Post by: Boggin on March 02, 2016, 02:01:39 pm

When you have done a sfc /scannow you can get a clearer CBS log with the following cmd -

findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt

This will produce an icon on the desktop which will open in Notepad when double clicked and will show what it could and couldn't repair.

However, running SFCFix.exe will produce a more concise report which you can only run after running a sfc /scannow because it requires the CBS log to work on.

https://www.sysnative.com/niemiro/apps/SFCFix.exe

Depending upon what that reports, then I would seriously consider restoring with that old system image after doing the prep work so as not to lose any recent data.

Title: Re: Desktop pc suddenly slow
Post by: Lady on March 02, 2016, 02:04:22 pm

The outcome of the Dutch forum might take a few days.

I don't understand. What do you want me to do?

The first command doesn't do anything. See attachment.

The second, here's the logfile. It's only about those stupid sample files again, do you remember from last time?

SFCFix version 2.4.9.2 by niemiro.
Start time: 2016-03-02 23:09:28.213
Microsoft Windows 7 Service Pack 1 - amd64
Not using a script file.




AutoAnalysis::
CORRUPT: C:\Windows\winsxs\amd64_microsoft-windows-ehome-samplemedia_31bf3856ad364e35_6.1.7600.16385_none_b6b9b223710b3802\desktop.ini
CORRUPT: C:\Windows\winsxs\amd64_microsoft-windows-ehome-samplemedia_31bf3856ad364e35_6.1.7600.16385_none_b6b9b223710b3802\win7_scenic-demoshort_raw.wtv
CORRUPT: C:\Windows\winsxs\amd64_microsoft-windows-musicsamples_31bf3856ad364e35_6.1.7600.16385_none_06495209cbd8e93b\Kalimba.mp3
CORRUPT: C:\Windows\winsxs\amd64_microsoft-windows-musicsamples_31bf3856ad364e35_6.1.7600.16385_none_06495209cbd8e93b\desktop.ini
CORRUPT: C:\Windows\winsxs\amd64_microsoft-windows-musicsamples_31bf3856ad364e35_6.1.7600.16385_none_06495209cbd8e93b\Maid with the Flaxen Hair.mp3
CORRUPT: C:\Windows\winsxs\amd64_microsoft-windows-musicsamples_31bf3856ad364e35_6.1.7600.16385_none_06495209cbd8e93b\Sleep Away.mp3
CORRUPT: C:\Windows\winsxs\amd64_microsoft-windows-photosamples_31bf3856ad364e35_6.1.7600.16385_none_f36e0e659b8042be\SampleRes.dll
CORRUPT: C:\Windows\winsxs\amd64_microsoft-windows-photosamples_31bf3856ad364e35_6.1.7600.16385_none_f36e0e659b8042be\desktop.ini
CORRUPT: C:\Windows\winsxs\amd64_microsoft-windows-videosamples_31bf3856ad364e35_6.1.7600.16385_none_51a21f033003affd\desktop.ini
CORRUPT: C:\Windows\winsxs\amd64_microsoft-windows-videosamples_31bf3856ad364e35_6.1.7600.16385_none_51a21f033003affd\Wildlife.wmv


SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.
   CBS & SFC total detected corruption count:     10
   CBS & SFC total unimportant corruption count:  0
   CBS & SFC total fixed corruption count:        0
   SURT total detected corruption count:          0
   SURT total unimportant corruption count:       0
   SURT total fixed corruption count:             0
AutoAnalysis:: directive completed successfully.




Successfully processed all directives.
SFCFix version 2.4.9.2 by niemiro has completed.
Currently storing 2 datablocks.
Finish time: 2016-03-02 23:17:22.693
----------------------EOF-----------------------

Title: Re: Desktop pc suddenly slow
Post by: Boggin on March 02, 2016, 02:56:54 pm

Did you have a look on your desktop for the CBS icon after executing that cmd ?

I wonder if running Disk Cleanup as an admin would clean up the WinSXS folder...

Do you have the free version of CCleaner installed - you can do a registry clean up with that and that may find those remnants from when you deleted those sample music files - but I don't think they will be cause of your slow.

Prior to running the registry clean with CCleaner, uncheck the box for ActiveX and Class Issues.

Title: Re: Desktop pc suddenly slow
Post by: Lady on March 03, 2016, 02:20:24 am

It was under sfcdeetails on my desktop. See attachment.

I did a CCleaner registry, see post #50.

I'll leave the pc on for the whole day, see if the slowness returns.

I still have to close more tabs in Firefox. That could still be it, couldn't it? Is it true that using Firefox and other programs more and more during several hours uses up more and more memory?

After the outcome on the Dutch forum, I opt for a WR.

First now I'm going to clean the case.

Title: Re: Desktop pc suddenly slow
Post by: Boggin on March 03, 2016, 02:45:43 am

The sfc /scannow certainly found quite a lot to repair.

Yes, the more you use Firefox or whatever will build up the temp files and when you continue it can struggle to find more to use.

When you use both IE and FF and then run CCleaner to clear the cache, you will see that FF is a much heavier user than IE, although from your TM pics, I wouldn't have thought it that excessive to slow a machine to a crawl - but while I have FF installed, I only use it to trouble shoot IE so haven't used it excessively to experience any depreciation of performance.

With your Startup items in msconfig mainly devoid of any programs to use up memory, I don't know why it is using so much but you could try disabling the MBAMs in services to see what that effect has on your memory usage, but it's the intermittent nature of yours that is puzzling as you haven't always had this problem - have you ?

I've had to clean out one of my sister's laptops because it was crawling but she wasn't aware that a laptop isn't maintenance free and the %temp% folder was chocka with about 3GB of temp files, plus she had picked up some adware that was preventing IE from working which had also taken out her audio.

Title: Re: Desktop pc suddenly slow
Post by: Lady on March 03, 2016, 06:09:41 am

Phewwww, it's still working after cleaning the case!  :cheesy:  Quite some dust there.

That was kinda scary. Doing something new on/with the pc for the first time is always scary for me!

My pc is happy with me. It's nice and clean now on the physical inside.

I don't use IE at all. Just FF.

What I now think has happened - correct me if I'm wrong - is that some adware corrupted files and prevented IE from opening and was also responsible for at least part of the slowness, don't you think? The rest of the slowness could be just a result of free memory being used up by so many things running. That doesn't explain the slowness I experienced at start-up sometimes, but that hasn't happened anymore, so that could have been the adware. Just a few weeks ago I told someone I was so happy that I didn't have to spend time on fixing pc issues anymore! I suppose the adware came in around that time. And it's true that I created more and more tabs lately. Not enough time to get things done...

Can you explain why AdwCleaner caught something that MBAM and BullGuard both overlooked? I mean, (bad) adware is malware, right? How often do you use AdwCleaner?

I'll close more tabs one of these days. That has to be done anyway. It's ridiculous to keep them open just as reminders, hahaha.

I have another idea. I will reboot and make a pic of TM. Then I'll leave it on and won't touch the pc for a few hours and see if the memory drops.

Title: Re: Desktop pc suddenly slow
Post by: Lady on March 03, 2016, 11:15:26 am

Two pics: TM just after reboot, with nothing opened, and TM after 2.5 hours, without having done anything on the pc.

Is this useful info for you? Or more of the same, I'm not sure.  :confused:

I'm trying to understand this. So the cache was filled by all the processes running in the background? Is that how it's supposed to be?

No slowness yet.....

Title: Re: Desktop pc suddenly slow
Post by: Boggin on March 03, 2016, 01:16:10 pm

A bit of an explanation of what you are seeing under the Performance tab in Task Manager -

http://windows.microsoft.com/en-gb/windows/see-details-computers-performance-task-manager#1TC=windows-7

I haven't gone right into it because the only time I've ever had performance issues was when the Internet was crawling due to a line fault which was drastically reducing the SNR Margin.

With just gmail, the forum and Task Manager open, my CPU usage was jumping between 1 and 27% without any real fluctuation on the memory usage, but the processes can seem to be in a flux.

Title: Re: Desktop pc suddenly slow
Post by: Lady on March 03, 2016, 01:42:49 pm

Had a response from the Dutch forum and did some search scan. They told me to run this script:

emptyfolderscheck;delete
firefoxlook;
Chromelook;
autoclean;
iedefaults;

He says it was all kinds of malware. Now I have to run Delfix and install Unchecky.

Do you want to see the logs?

Title: Re: Desktop pc suddenly slow
Post by: Boggin on March 03, 2016, 02:08:34 pm

No, that's okay - just give me a summary of what they find or what those programs do.

Title: Re: Desktop pc suddenly slow
Post by: Lady on March 03, 2016, 02:33:32 pm

I don't know, I asked him but he didn't specify. I googled on Unchecky: it prevents software from installing unwanted extra programs by unchecking those. But I always pay attention to the things that are checked when downloading. I guess it's what they give as a rule to people who have PUPs.

I thought you'd know when you see the logs. I read every log but don't know what I'm seeing.

No slowness yet. Looks like we did it, Boggin! Tomorrow one final test by leaving the pc on the whole day.

Title: Re: Desktop pc suddenly slow
Post by: Boggin on March 03, 2016, 02:42:29 pm

Your helper will interpret the logs and suggest anything else if required.

Disinfecting is a specialised subject and there may be items it lists as being installed on your computer that the layman wouldn't recognise as malware, so I tend not to read through those on other forums, but sometimes follow their progress.

Is the machine staying stable even with your usual amount of tabs open ?

Getting rid of any dust bunnies from inside of the machine will have helped, but as you said the BIOS wasn't showing any high temps then overheating may not have been the problem.

Title: Re: Desktop pc suddenly slow
Post by: Lady on March 04, 2016, 01:13:07 am

The Dutch forum which is helping me is a member of UNITE. They give trainings. Might be interesting for you?

https://uniteagainstmalware.com/

Title: Re: Desktop pc suddenly slow
Post by: Boggin on March 04, 2016, 02:33:02 am

A bit too long in the tooth now for learning new tricks, but thanks anyway.

UNITE in the UK is the name of a large lefty Union and is one of the main contributors to the Labour Party who are Her Majesty's official opposition to the gov. being the second largest political party in the UK.

Title: Re: Desktop pc suddenly slow
Post by: Lady on March 04, 2016, 04:27:03 am

Boggin, a small question on the side, if you please.

I use a LAN cable for my laptop but it's a bit of a hassle and too short for every room. So I decided to install Wifi. But I googled a bit and saw that you can simply download software to hack your neighbour's Wifi. I assume you use Wifi. How secure is it? I plan to have my own username and password.

Title: Re: Desktop pc suddenly slow
Post by: Boggin on March 04, 2016, 05:22:46 am

I haven't heard of that program but WPA2 PSK AES is pretty robust.

I've recently came across WiFi Guard which seems to scan for anyone trying it on, but as an alternative to WiFi you could use Home Plugs which route the signal through the mains electricity and then you can Ethernet connect to each Home Plug wherever you have them plugged in.

I don't really have any other users near me, but inSSIDer3 will show you where the strongest users are, but any 20 or more, greater that your RSSI won't pose a threat.

https://www.softperfect.com/products/wifiguard/

http://www.techspot.com/downloads/5936-inssider.html

Title: Re: Desktop pc suddenly slow
Post by: Lady on March 04, 2016, 06:37:34 am

Thank you, that's very informative. But I have to return to the slowness issue........... Just returned to my pc, it has been on for 5.5 hours now and slowness has returned. I've asked the Dutch forum if they have any more ideas. Have you? :sad:

Title: Re: Desktop pc suddenly slow
Post by: Boggin on March 04, 2016, 06:40:48 am

Not with an intermittent problem - I think we have covered all of the usual suspects.

Did the Dutch malware forum find anything on your computer ?

Is every thing slow or just browsing ?

Title: Re: Desktop pc suddenly slow
Post by: Lady on March 09, 2016, 04:26:08 am

My helper on the Dutch site too turned the pc inside out. He now referred me to a hardware specialist on another Dutch forum as it isn't a malware issue. And according to him it's not a memory issue either as far as he can see.

Slowness is overall when it happens. Knock on wood, but the pc has been better the last two days. Yesterday after 6.5 hours no problem. Today, now 4.5 hours, still no problem. But I'm wary.

They did say that IOBit has a bad reputation and told me to uninstall the IOBitUninstaller. I must say, the program didn't feel good to me. Female intuition.  :cheesy: So I complied.

On these two websites they strongly recommend installing HitmanPro.Alert and they say they never had any problems with it. I'm hesitant, I already have MBAM Anti-Exploit. I know a very nice guy at MBAM, I'll ask what he thinks of it.

Can I ask you to take a look at the screenshots I made of CCleaner? I decided to return to CC because it has an uninstall feature and it feels better to me than WiseDiskCleaner.  :smiley: But the settings are a bit of a question mark to me. Would you mind?

In Registry I have unchecked Active X and Class Issues. You taught me that.  :cheesy:
And in Options > Monitoring I have unchecked everything. Not too many things should be running all the time, right?  :cheesy:

Oh, and I found out that IE didn't open in my laptop either.  :shocked:  I thought it must be the same adware as my laptop is practically a copy of my desktop. I let them have a go at it, AdwCleaner didn't fix it, and just now I think I know what that was, as I finally got an EMET warning popup and closure of the programme. So after uninstalling EMET from the laptop, IE opened perfectly. Yayyyy! I hope the laptop is totally fine now. Phew. Not 2 PCs at the same time having problems, no thank you....

Hope you are okay.  :smiley:  I'm trying hard not to crash......  :sad:

Title: Re: Desktop pc suddenly slow
Post by: Boggin on March 09, 2016, 05:42:46 am

Here is a reasonable guide to using CCleaner, but I would uncheck the box for Memory dumps and like the author of the article, I very rarely use the registry cleaner.

http://www.howtogeek.com/113382/how-to-use-ccleaner-like-a-pro-9-tips-tricks/

Having a 3rd party uninstaller negates the need to use a registry cleaner to remove the residue which Windows uninstaller leaves.

I use IObit Uninstaller and haven't noticed any detriment.

There was a down on all IObit programs at one time and would seem to be carried over because of their alleged plagiarism of other security programs to develop their own.

I would leave HitmanPro.Alert as it can disable your Teredo Tunneling adapter by putting a yellow alert on it in Device Manager/View/Show hidden devices/Network adapters and I don't think it's a freebie either.

Title: Re: Desktop pc suddenly slow
Post by: Lady on April 04, 2016, 03:47:21 am

Hi guys! I'm back!   :cheesy:

Re HitmanPro:

I did install it after all, on the desktop and laptop. From all sides I was advised to do so. :S And I must say it found 22 (!) remnants of Visual Discovery (Lenovo's SuperFish) in the registry of my laptop. I was happy to get rid of those! HitmanPro version 3 is not freeware. Its scan feature works but for removal of the results you need to have a licence. But with the scan log we (better said: you) are still able to remove the malicious bits. The Dutch forum helped me with that. Version 2 is freeware but doesn't have the scan feature. It was confusing but I think this is right.

Re IOBit:

I read this:

https://forums.malwarebytes.org/topic/29681-iobit-steals-malwarebytes-intellectual-property/

Even if they changed their ways since then, from an ethical point of view I cannot use any IOBit program any longer. My female intuition was right after all. It knew it was fishy. :)

So I installed Wise Program Uninstaller instead. CCleaner has an uninstall feature but doesn't show it searches for deep cleansing after removal.

Re the slowness:

I monitored Process Explorer for a while and began to notice a pattern. There were 3 BullGuard values in PE. Every time there was a slow one of them had dropped dramatically or another got higher up. Or both. So with the confirmation of the Dutch IT forum I uninstalled BG and installed Avira temporarily. Since then I had no more slows! Yaaaaaaaayyyyyyy!!!! Repaired some things on my laptop too so that one is all fine now, and the desktop pc is working almost immaculately (I suppose Windows can never run totally immaculately, hahaha), so I took a well-deserved rest from working on it. :)

So the BG files either have become corrupted (because I have had BG for several years now and it never gave slows before) or there is another cause and I thought about the many tabs I have open and maybe BG becomes distressed by scanning so much all the time :) but in that case I should have had slows all the time, shouldn't I? I haven't closed tabs in FF yet to keep the detective work simple. :)

Before I uninstalled BG and installed Avira I re-installed BG but with settings saved. The slows were still there so then I uninstalled BG altogether. Would you say that a complete uninstall is really different, so that when I will re-install BG in a few days, chances are high it will work properly again?

Thank you, Boggin, for introducing Process Explorer for that eventually showed the solution!

For now I'm SO enjoying a problem-free PC-experience.  :cheesy: Thank you, guys, for all your trouble and time!! I'm handing out karma points right this minute.  :cheesy:

Title: Re: Desktop pc suddenly slow
Post by: Boggin on April 04, 2016, 05:39:56 am

I've recently been sorting out problems of my own and after restoring with an image from Feb. even though I managed to get Norton Security up to date, it still didn't seem right.

I went to use Norton's Remove and Reinstall tool but that didn't recognise the install or the licence, so used Norton Uninstaller which has a follow up for you to log into your Norton account to reinstall and that sorted it.

I would think that fully uninstalling BG before its reinstall should resolve if my experience is anything to go by, but when any program becomes buggy, an uninstall/reinstall usually resolves.

I don't have any scruples about using IObit - as long as it does what it says on the tin, but what you read probably happened years ago - but look at the recent litigation between MS and Apple - they are all at it - are you going to stop using MS products ?

Title: Re: Desktop pc suddenly slow
Post by: Lady on April 04, 2016, 06:01:18 am

Let's hope that a clean re-install of BG will solve it. I'll let you know.

Quote from: Boggin on April 04, 2016, 05:39:56 am

are you going to stop using MS products ?

If I could, I would, yes. And that goes for Apple too. And a lot of other companies.

Title: Re: Desktop pc suddenly slow
Post by: Boggin on May 07, 2016, 06:44:18 am

Just posting in this to bring it up so that it easier to find.

I've just unchecked the Lock box and Save so will see if it stays unlocked.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- - - - - - - - - - -

It looks okay now.

Title: Re: Desktop pc suddenly slow
Post by: Lady on May 08, 2016, 07:31:42 am

I will post an update within a few days. Still testing something.  :cheesy:

Title: Re: Desktop pc suddenly slow
Post by: Lady on May 11, 2016, 02:59:50 am

Hi guys,

I'm back with some bad news. I re-installed BullGuard and at first it seemed kinda okay, there were still slows but not so bad and not so often. I also brought the number of tabs in FF down to about 30 but that doesn't seem to matter at all. And since yesterday the big slows have come back. I'm not happy.....

I really cannot see anything that might trigger them and we've done everything in the book now, haven't we, so it seems to me that the only option remaining is to contact BullGuard. My licence is still valid for more than a year.

Can you help me out by putting the right jargon on this issue? And by giving me suggestions on what to write to them? I enclose screenshots of Process Explorer which clearly show the difference in BG values but I have no clue how to name that. That it's too heavy on the system or something. During these screenshots I had open at the most: Outlook Mail, Explorer, FF, Word, Windows Energy Management, Process Explorer and Windows Picture Manager. That shouldn't be too much. The big slows start when BullGuardScanner.exe drops below 100,000 K in Working Set and get really bad when it gets down to 40,000 and lower (attachment 2). Or when the other two BG values increase, which I'm experiencing right now (attachment 3)

Thanks, guys, as always.

Title: Re: Desktop pc suddenly slow
Post by: Boggin on May 11, 2016, 08:18:26 am

MBAM seems to be quite heavy on resources as well and it's possible there could be a conflict between Bullguard and MBAM as each could be scanning the other.

Just contact Bullguard and tell them it is slowing your machine to a crawl and that you will have to uninstall it and could you please have a refund for the remaining time on the licence.

Title: Re: Desktop pc suddenly slow
Post by: Lady on May 15, 2016, 06:14:51 am

You will NOT believe it but the problem has been solved!!!

I contacted BullGuard Support Desk and the lady answered: put BullGuard and MBAM in the mutual exclusion lists (folders and exe files)......

So I did, and after a reboot the pc has been SUPERFINE! Very fast, no problems whatsoever.

The lady also checked a lot of things on the pc via remote control and solved some minor issues I had in the process. Amazing! I saw her at work and was very impressed. I tell you, I have nothing but compliments for BullGuard's Support Desk. They're very competent, always.

And check this out: she said: "You have a pretty neat computer. It's rare to see a clean computer like yours. But you used good tools."

Yoohoooooo!!!  :artist:

Well guys, this means this problem finally, after THREE months, has been solved. No need to tell you how relieved I am. Thanks again for all your assistance!

You won't be seeing me for a long while! Hopefully.....

Title: Re: (Solved) Desktop pc suddenly slow
Post by: Boggin on May 15, 2016, 08:33:44 am

So it was a conflict between the two programs ?

Title: Re: (Solved) Desktop pc suddenly slow
Post by: Lady on May 15, 2016, 10:45:32 am

Yes, apparently they were checking each other and that caused the slows. I suppose that's nothing new, but I find her exclusion solution super.

Title: Re: (Solved) Desktop pc suddenly slow
Post by: Lady on May 16, 2016, 09:09:11 am

The thing was, I've had the combination BullGuard and MBAM for years and never had compatibility issues. But I informed MBAM about it. I gathered they want to know of compatibility issues so they can solve it with the AV program concerned.

I can keep you posted if you're interested in what MBAM has to say.

Title: Re: (Solved) Desktop pc suddenly slow
Post by: Boggin on May 16, 2016, 09:53:56 am

What normally causes it is either an upgrade of MBAM or Definitions update on an AV program.

I think it was a couple of years ago now that there was an actual conflict between Norton 360 and MBAM and Symantec had to come up with a workaround so that both could run alongside of each other.

It may have been around the time that MBAM had a version upgrade, but not sure now.

On checking my Programs and Features, MBAM is showing as v2.2.1.1043 with an install date of 8th April this year - would that tally with when you started getting problems with Bullguard or was it before ?

Google tells me that MBAM Premium had an upgrade on 18th March this year - not sure though if that would also apply to the freebie.

Title: Re: (Solved) Desktop pc suddenly slow
Post by: Lady on May 16, 2016, 10:12:16 am

I have MBAM Premium.

When the slowness started, after a few days I turned to you, as you can see in my first post. That was February 19, so it started a few days earlier.

My v2.2.1.1043 was installed on March 24. Odd that you got that later. BullGuard version 16.0 was installed on April 28.

So the slowness started before those upgrades. MBAM has definitions updates too, hasn't it? That's almost or always daily I suppose.

It's SUCH a great experience to just USE the pc without problems! It's SO fast and doing so well. Great! At least the pc became SQUEAKY clean in the process! And I learned a lot again. I'm SMILING!

 :cheesy: