Windows 7: Task Manager Peformance

Slartybart · 14 Nov 2012

Taskeng - see this post by marsmimar

I'm not sure I can give you all of the information you seek. That would require a full learning course in Windows. When you have a question about something in Windows, a Google search can answer a lot. I do ot know if this site is valuable, but take a look: GCF Learn Free

Malwarebytes: They began offering a trial of their full pacakge when you download the free version.
Do this: uninstall the trial and download Malwarebytes again, only this time say no to the trial offer. You will still get the free version.

So it seems as though your system had a few bad guys on it.

Please follow this tutorial and post the results. I want ot see if one of the bad guys messed up your windows authentication.

Lavixgne · 14 Nov 2012

Code:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-GJY49-VJBQ7-HYRR2
Windows Product Key Hash: W5/6nm6F2UPXrCkY5xUhXb/+21g=
Windows Product ID: 00426-OEM-8992662-00006
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7600.2.00010100.0.0.001
ID: {3F6F851A-DAFA-473C-A28C-15FBD037812B}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000000
Build lab: 7600.win7_rtm.090713-1255
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\Aspire\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{3F6F851A-DAFA-473C-A28C-15FBD037812B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-HYRR2</PKey><PID>00426-OEM-8992662-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-3871379321-1423896087-801400580</SID><SYSTEM><Manufacturer>Acer</Manufacturer><Model>TravelMate 8372</Model></SYSTEM><BIOS><Manufacturer>Acer</Manufacturer><Version>V1.10</Version><SMBIOSVersion major="2" minor="6"/><Date>20110429000000.000000+000</Date></BIOS><HWID>91BB3607018400FC</HWID><UserLCID>0421</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>SE Asia Standard Time(GMT+07:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7600.16385

Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00178-926-600006-02-1057-7600.0000-2702011
Installation ID: 004923630571370095862745748210432053454960951604347511
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: HYRR2
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 15/11/2012 3:57:14

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 11:9:2012 21:30
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
N/A, hr = 0x8007000d

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			ACRSYS		ACRPRDCT
  FACP			ACRSYS		ACRPRDCT
  HPET			ACRSYS		ACRPRDCT
  BOOT			ACRSYS		ACRPRDCT
  MCFG			ACRSYS		ACRPRDCT
  WDAT			ACRSYS		ACRPRDCT
  ASF!			ACRSYS		ACRPRDCT
  SLIC			ACRSYS		ACRPRDCT
  ASPT			ACRSYS		ACRPRDCT
  SSDT			PmRef		CpuPm

Lavixgne · 14 Nov 2012

Today I ReInstall Malwarebyte after I uninstall it..
but doesn't catch,,Maybe later

Slartybart · 14 Nov 2012

Lavixgne: Good news about bad guys - none found after scanning
--> 8 were cleaned by MSE, 3 more by Malwarebytes

edit: I'm not familiar with Ultimate, so I'm not sure what virtualapp is. It looks as though there is a setting for name and password - it's just that Windows uses ******** so the real password isn't displayed.

"Bart...I never set virtualapp account name and password.."

Or are you saying that you didn't enter values for those. That the values were set by some other means. Do you recognize the account name as something you would use?

For privacy reasons, please delete the image in the post above 23

Edit the post, then manage attachments
in the window that pops up,
select the image and then remove
be sure to save your changes

Could you tell me what the COA sticker on your machine says about Windows
Only what type (Home, Pofessional, Enterprise, Ultimate),
For instance my sticker says Home Premium

Do NOT post any of the numbers ~~(xxxx-xxxx-xxxx-xxxx)~~ - that is also sensitive information, just the type

Windows might be confused and the information on the sticker will answer that.

I'm going to look for more information about the bad guys that were found and cleaned.

Thanks,

Bill

Slartybart · 14 Nov 2012

See What is VirtualApp/Didlogical? Basically it's a Windows Live credential, not a bad guy

Lavixgne · 14 Nov 2012

I no see COA Stickeer on my machine and Box...
but system info say : Microsoft Windows 7 Ultimate 32-bit 7600 Multiprocessor Free

Lavixgne · 14 Nov 2012

I no see COA Stickeer on my machine and Box...
but system info say : Microsoft Windows 7 Ultimate 32-bit 7600 Multiprocessor Free

Slartybart · 14 Nov 2012

Power down your PC, remove the battery, perhaps it is there.

I saw the Ultimate in one of the reports, I need to know what the sticker says.

If they don't match, Windows knows it and that might be why your machine is having issues. There are steps you can take to correct that.

If they do match, then it is something else.

Maybe a little history of your machine might help.
Did you buy it new or second hand?
Are you the only one who uses the machine?
Windows installed on the machine when you bought it, or did you re-install?

I'm trying to help you solve an issue on your machine and all of this information really does help determine what to do next.

Thanks for the update on Malwarebytes - the free version is installed. Now you don't have to think about trial software

You are doing great providing information, I hope I'm doing as well (I almost missed your post about Malwarebytes). Thanks for removing the image in post 23 - it displayed an address.

The COA is a sticker or a label that is often attached to the body of a computer for products such as Windows or Windows Server. You can typically find the COA sticker on the body of the computer or, for some newer laptops, inside the battery compartment.

COAs and/or product keys should never be purchased separately from the product.

COA features the product name printed on the label and also contains anti-counterfeit security features such as:

Interwoven security thread – is built into the paper and random paper fibers are visible when the thread appears at the surface
Color shifting ink edge - changes from green to magenta when viewed from different angles

Lavixgne · 15 Nov 2012

bart you mean >>>

Task Manager Peformance-img-20121115-00035v.jpg

No second'hand,bart..
yaa,only me can use machine...
Windows is installed on my machine when I bought it.

about malwarebyte,I still keep running it ,and I use CHAMELEON to protect MBAM..

Bart,I'm really happy with your assistance

Keep it UP !!

Lavixgne · 15 Nov 2012

Bart I can't post Malwarebytes results,because my network connections going slow.. I can't use attachments upload them,I get error many time / server send no data "..
And I'll upload them later .

Bart.. I thing someone play with me..
My mobile connection faster the my laptop..
With laptop Sometimes I lost connections..
That's jerk ..
-------
Ohh ya Bart..
Can I use search Box in my computer folder,to find all data modified to my machine ??
Maybe Can detect bay guy modified date to my Machine..

----------
Bart,thanks for helps ...
Keep it up ..

Windows 7: Task Manager Peformance

Task Manager Peformance problems?