Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Need help troubleshooting a disk thrashing lockout

08 Apr 2014   #11
Britton30
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

You have a lot of "crap" on your system, together they could be causing all the disk activity.
In addition to what Matts suggested, re-do Adwcleaner with the Clean option, and reboot, post the resulting log.
Code:
 
***** [ Files / Folders ] *****
File Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
Folder Found C:\Users\Hanson\AppData\Local\PackageAware
Folder Found C:\Users\Hanson\AppData\Roaming\iWin
***** [ Shortcuts ] *****
 
***** [ Registry ] *****
Key Found : HKCU\Software\AppDataLow\Software\Crossrider
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Key Found : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Found : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110011441193}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220022442293}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0004493.BHO
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0004493.BHO.1
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0004493.Sandbox
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0004493.Sandbox.1
Key Found : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055445593}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066446693}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440044444493}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011441193}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\HPSF_Tasks_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\HPSF_Tasks_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011441193}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055445593}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066446693}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.16521
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar] - hxxp://search.xetzero.xxx/search?action=minisearch&source=minisearch
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page] - hxxp://my.xetzero.net/s/search?r=minisearch
Setting Found : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [] - hxxp://search.xetzero.xxx/search?action=minisearch&source=minisearch



My System SpecsSystem Spec
.
09 Apr 2014   #12
davenk23

windows7 64bit
 
 
Post scan results

(Now clean) ADW cleaner log is attached. Also ran the other 2 scans which showed zero errors.
As my original post mentioned, I have run several other scans with "clean" results.
I don't know if I would call the few registry fragments a lot of "crap". Looks like
leftovers from poor uninstalls.

I am still hoping to get some troubleshooting/debugging advice to isolate my
thrashing problem.


Attached Files
File Type: txt AdwCleaner[R3].txt (939 Bytes, 3 views)
My System SpecsSystem Spec
09 Apr 2014   #13
Britton30
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

Code:
***** [ Files / Folders ] *****
File Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
Folder Found C:\Users\Hanson\AppData\Local\PackageAware
Folder Found C:\Users\Hanson\AppData\Roaming\iWin
***** [ Shortcuts ] *****
 
***** [ Registry ] *****
Key Found : HKCU\Software\AppDataLow\Software\Crossrider
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Key Found : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Found : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110011441193}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220022442293}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0004493.BHO
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0004493.BHO.1
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0004493.Sandbox
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0004493.Sandbox.1
Those in red are what I was mostly concerning with. Is the drive still over reacting? when did you first notice it? Have you updated your BIOs recently?

Windows Genuine and Activation Issue Posting Instructions
My System SpecsSystem Spec
.

09 Apr 2014   #14
Gandalf

Microsoft Windows 7 Ultimate 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

CCleaner will probably fix you up.
Click <CCleaner> in my Signature.
Here is a tutorial, if you need it.
How to Use CCleaner: 14 Steps - wikiHow
My System SpecsSystem Spec
09 Apr 2014   #15
ICIT2LOL

Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10
 
 

Mate some system specs would be very handy please as we don't know what we are dealing with here except it is an HP desktop. Info like brands of hard drive and RAM CPU etc would be really good/ If the disk is racing then I guess it would be probably the cause and I would suggest you slip in another drive ands reinstall using this even if it means we can get the monitor to work.
System Info - See Your System Specs if you can get it going but a handwritten specs will do.

To do that you will need access to another machine and make an ISO and use this
Clean Reinstall - Factory OEM Windows 7

You could of course do a factory default but it means you lose all data.

By the way does the machine start in safe mode?? - power on tap F8?
My System SpecsSystem Spec
09 Apr 2014   #16
gregrocker

 

Run a full Malwarebytes scan, declining the free trial upon install, to check for more serious infection. Then run SUPERAntiSpyware (also declining trial and turning off at Startup in prefs) to double-check the spyware and further root out spyware from registry.

Look at your browsers' Add-Ons and Search providers to assure only Google is allowed, disable any Add-Ons other than Flash. In Control Panel>Programs and Features uninstall any Search service, toolbar or add-on you don't need or recognize - ask if in doubt, or provide a screenshot.

In addition I'd work through the other Troubleshooting Steps for Windows 7 starting with running the HD maker's HD Diagnostic extended CD scan followed by a full Disk Check, establishing a Clean Boot, replace the bloated AV with MSE to try one which we know doesn't cause problems. You should find the cause of your problem during one or more of the steps. Report back results as you go if you want additional steps indicated.
My System SpecsSystem Spec
09 Apr 2014   #17
Golden
Microsoft MVP

Windows 7 Ult. x64
 
 

Have you considered replacing Norton temporarily with MSE......just to test whether Norton is up to something?
My System SpecsSystem Spec
09 Apr 2014   #18
Anak

Microsoft Community Contributor Award Recipient

Win 7 Home Premium 64bit Ver 6.1.7600 Build 7601 - SP1
 
 

It would be my opinion that the only troubleshooting davenk23 needs to do is a good scrubbing of his hard drive with an assortment of anti-malware tools to remove the malware on his machine.

Everything listed on his AdwCleaner log including the ones pointed out in red by Britton are either Adware, Pups, Trojans or browser hijackers, and his HDD is trying to keep its head above water with all that thrashing, but it looks as if its fighting a losing battle. Lord only knows what else is on his machine.

Stay away from third-party so called safety-scanners and tweakers. SearchScopes is loaded by just such program types, Windows 7 does not need them but if you really want to try something ask around here first.
Antimalware PC Safety
TROJ_BUZUS.SMUM | Low Risk | Trend Micro Threat Encyclopedia

Depending where secman.DLL is located it can be either good %ProgramFiles%\common files\outlook security manager\secman.dll or bad, AppID\secman.DLL\ can ride in with the Babylon toolbar.

The first one relates to Crossfire and the last three are MediaBack adware:
Key Found : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110011441193}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220022442293}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}

We need to see if someone from security can help here, this is beyond me.
My System SpecsSystem Spec
10 Apr 2014   #19
Britton30
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

Derek found something useful, perhaps. check the size of your page file, increase it if it's less than 2GB.

Quote   Quote: Originally Posted by derekimo View Post
Thrashing (computer science) - Wikipedia, the free encyclopedia

What is thrashing?

Quote:
When referring to a computer, thrashing or disk thrashing is a term used to describe when the hard drive is being overworked by moving information between the system memory and virtual memory excessively. Thrashing is often caused when the system does not have enough memory, the system swap file is not properly configured, or too much is running on the computer and it has low system resources.
When thrashing occurs, a user will notice the computer hard drive always working and a decrease in system performance. Thrashing is bad on a hard drive because of the amount of work the hard drive has to do and if is left unfixed will likely cause an early failure of the hard drive.
My System SpecsSystem Spec
10 Apr 2014   #20
davenk23

windows7 64bit
 
 

I have run all of the scan/cleaners suggested. They have found no active malware.
My page file is 6-12 GB.
I have attached my configuration.
I have looked for a new BIOS from HP, but their website is not cooperating. Any ideas?

I appreciate most of your suggestions, but some of you are obviously not
reading the problem description and jumping to conclusions. I will ignore any "shotgun approaches" to save
my time on redundant or wild guesses.

To clarify.... 90% of the time the system runs well. When this anomaly starts, any response to commands
are ignored until the highly active hard drive ("thrashing") runs its course (10-15 minutes). I am still hoping for a "rifle" approach to help identify the source of the disk activity.


Attached Files
File Type: txt system specs.txt (333 Bytes, 7 views)
My System SpecsSystem Spec
Reply

 Need help troubleshooting a disk thrashing lockout




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Disk Thrashing - disable ReadyBoot (not ReadyBoost)
Hello, I am trying to figure out how to permanently disable the "ReadyBoot" feature in Windows 7 x64 (note: I am not talking about ReadyBoost, that's something else!) I've checked out some guides that I found online, such as here or here. But even though they seem to work, after rebooting my...
Performance & Maintenance
Windows bsod on boot, slow boot, disk thrashing.
Hey everyone. Every time I boot up my PC, windows will load, but will take forever to load, during which lots of disk thrashing occurs, then gets the BSOD. After the BSOD, the pc will automatically reboot. After it reboots, the BSOD will not show back up, however it still takes about 5 minutes...
BSOD Help and Support
MSE thrashing disks after boot.
Ive noticed that MSE seems to do a hidden scan after you boot up and get to the desktop. Doesnt always do it but sometimes. Is there a way to prevent it from doing this? There is no option in the MSE interface and I cant see any option in task scheduler.
System Security
Troubleshooting heavy disk activity
Hi all, I'm seeing some pretty heavy disk activity on my machine and I'm wondering what methods others out there use to troubleshoot a situation like this. I've tried using task manager and adding the IO stats so that I can sort based on that, but that does not seem to work very well. ...
Performance & Maintenance
Win 7 - Core i7 but HD thrashing?
Hi All, Weird situation and wondered what advice people might have. I recently upgraded this whole system to one that should scream - Core i7 920, 6 GB triple channel RAM, Nvidia GTS 250 and Gigabyte UD-3R m'board. Anyway, it was running great but now, if I do ANY sort of large copy or use a...
Performance & Maintenance
slow and thrashing
After doing a clean install of Windows 7 Home Premium, my desktop became very slow and noisy. The hard drive seemed to be always thrashing, and windows explorer lagged. After reading the many similar posts, and trying all the fixes, what finally worked for me was uninstalling AVG 9 Free. I am...
Performance & Maintenance


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 13:18.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App