Solved Task Manager Peformance

[Slartybart]

Taskeng - see this post by marsmimar

I'm not sure I can give you all of the information you seek. That would require a full learning course in Windows. When you have a question about something in Windows, a Google search can answer a lot. I do ot know if this site is valuable, but take a look: GCF Learn Free

Malwarebytes: They began offering a trial of their full pacakge when you download the free version.
Do this: uninstall the trial and download Malwarebytes again, only this time say no to the trial offer. You will still get the free version.

So it seems as though your system had a few bad guys on it.

Please follow this tutorial and post the results. I want ot see if one of the bad guys messed up your windows authentication.

 

[Lavixgne]

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-GJY49-VJBQ7-HYRR2
Windows Product Key Hash: W5/6nm6F2UPXrCkY5xUhXb/+21g=
Windows Product ID: 00426-OEM-8992662-00006
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7600.2.00010100.0.0.001
ID: {3F6F851A-DAFA-473C-A28C-15FBD037812B}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000000
Build lab: 7600.win7_rtm.090713-1255
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\Aspire\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{3F6F851A-DAFA-473C-A28C-15FBD037812B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-HYRR2</PKey><PID>00426-OEM-8992662-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-3871379321-1423896087-801400580</SID><SYSTEM><Manufacturer>Acer</Manufacturer><Model>TravelMate 8372</Model></SYSTEM><BIOS><Manufacturer>Acer</Manufacturer><Version>V1.10</Version><SMBIOSVersion major="2" minor="6"/><Date>20110429000000.000000+000</Date></BIOS><HWID>91BB3607018400FC</HWID><UserLCID>0421</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>SE Asia Standard Time(GMT+07:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7600.16385

Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00178-926-600006-02-1057-7600.0000-2702011
Installation ID: 004923630571370095862745748210432053454960951604347511
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: HYRR2
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 15/11/2012 3:57:14

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 11:9:2012 21:30
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
N/A, hr = 0x8007000d

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			ACRSYS		ACRPRDCT
  FACP			ACRSYS		ACRPRDCT
  HPET			ACRSYS		ACRPRDCT
  BOOT			ACRSYS		ACRPRDCT
  MCFG			ACRSYS		ACRPRDCT
  WDAT			ACRSYS		ACRPRDCT
  ASF!			ACRSYS		ACRPRDCT
  SLIC			ACRSYS		ACRPRDCT
  ASPT			ACRSYS		ACRPRDCT
  SSDT			PmRef		CpuPm

 

[Lavixgne]

Today I ReInstall Malwarebyte after I uninstall it..
but doesn't catch,,Maybe later

 

[Slartybart]

Lavixgne: Good news about bad guys - none found after scanning
--> 8 were cleaned by MSE, 3 more by Malwarebytes

edit: I'm not familiar with Ultimate, so I'm not sure what virtualapp is. It looks as though there is a setting for name and password - it's just that Windows uses ******** so the real password isn't displayed.

"Bart...I never set virtualapp account name and password.."
​

Or are you saying that you didn't enter values for those. That the values were set by some other means. Do you recognize the account name as something you would use?

For privacy reasons, please delete the image in the post above 23

Edit the post, then manage attachments
in the window that pops up,
select the image and then remove
be sure to save your changes

---

Could you tell me what the COA sticker on your machine says about Windows
Only what type (Home, Pofessional, Enterprise, Ultimate),
For instance my sticker says Home Premium

Do NOT post any of the numbers (xxxx-xxxx-xxxx-xxxx) - that is also sensitive information, just the type

Windows might be confused and the information on the sticker will answer that.

I'm going to look for more information about the bad guys that were found and cleaned.

Thanks,

Bill

 

[Slartybart]

See What is VirtualApp/Didlogical? Basically it's a Windows Live credential, not a bad guy

 

[Lavixgne]

I no see COA Stickeer on my machine and Box...
but system info say : Microsoft Windows 7 Ultimate 32-bit 7600 Multiprocessor Free

 

[Lavixgne]

I no see COA Stickeer on my machine and Box...
but system info say : Microsoft Windows 7 Ultimate 32-bit 7600 Multiprocessor Free

 

[Slartybart]

Power down your PC, remove the battery, perhaps it is there.

I saw the Ultimate in one of the reports, I need to know what the sticker says.

If they don't match, Windows knows it and that might be why your machine is having issues. There are steps you can take to correct that.

If they do match, then it is something else.

Maybe a little history of your machine might help.
Did you buy it new or second hand?
Are you the only one who uses the machine?
Windows installed on the machine when you bought it, or did you re-install?

I'm trying to help you solve an issue on your machine and all of this information really does help determine what to do next.

Thanks for the update on Malwarebytes - the free version is installed. Now you don't have to think about trial software

You are doing great providing information, I hope I'm doing as well (I almost missed your post about Malwarebytes). Thanks for removing the image in post 23 - it displayed an address.

---

The COA is a sticker or a label that is often attached to the body of a computer for products such as Windows or Windows Server. You can typically find the COA sticker on the body of the computer or, for some newer laptops, inside the battery compartment.

COAs and/or product keys should never be purchased separately from the product.

COA features the product name printed on the label and also contains anti-counterfeit security features such as:

• Interwoven security thread – is built into the paper and random paper fibers are visible when the thread appears at the surface
• Color shifting ink edge - changes from green to magenta when viewed from different angles

 

[Lavixgne]

bart you mean >>>

No second'hand,bart..
yaa,only me can use machine...
Windows is installed on my machine when I bought it.

about malwarebyte,I still keep running it ,and I use CHAMELEON to protect MBAM..
Bart,I'm really happy with your assistance Keep it UP !!

 

[Lavixgne]

Bart I can't post Malwarebytes results,because my network connections going slow.. I can't use attachments upload them,I get error many time / server send no data "..
And I'll upload them later .

Bart.. I thing someone play with me..
My mobile connection faster the my laptop..
With laptop Sometimes I lost connections..
That's jerk ..
-------
Ohh ya Bart..
Can I use search Box in my computer folder,to find all data modified to my machine ??
Maybe Can detect bay guy modified date to my Machine..

----------
Bart,thanks for helps ...
Keep it up ..

 

[Slartybart]

Hi

My PC is not working
I am mobile but not good at typing without keyboard

Good sticker but does not show product type

Is there another sticker?

Thanks

I'll need to find a machine with a keyboard - this is not for me

 

[Lavixgne]

i didn't find the ticker bart,maybe my machine not origin...
bart,looks....>>>
rasphone,
bart,how can i uninstall them ?
what rasphone use for ?

 

[Slartybart]

Hi--I'm still on my mobile

Fingers too fat---eyesight too poor--this tech is for young people

I think you posted the COA sticker a few posts back, but sometimes the colors turn black when you post an image online--that might be why I cannot see the product name--black ink on background that became black due to a palette index,

If you can read the sticker, just write the product name in a post

I don't know about rasphone but it just sounds like voice over ip tool

I won't have a machine until early next week,,,8 days or more

I just wanted to let you know that is why I'm not posting often

Bill

 

[Lavixgne]

yep,bill thanks...
I will post it later,cause my network get jerk,sometimes adapter connect but no internet access,that's why I can't use attchments...

I found the TXT file name of RAS
ras come with Tp-link UserGuide PDF < i download from another website,I remember i just download y the PDF file,why Have a TXT file...

see some detail...>>

Xmodem Upload uncompleted!
  
Error of uploadRomfile()... Failed to erase!
    
uploadRomfile(): Erase OK!
  
uploadRomfile(): Write dbg1 area OK!
    
uploadRomfile(): Failed to write dbg1 area !
    
uploadRomfile(): Write dbg2 area OK!
    
uploadRomfile(): Failed to write dbg2 area !
     9600 bps
  %d bps
   
System Reboot...  
Console speed will be changed to  
Hardware version Check Disable    Update Factory Default ROM File
   Convert running ROM file to default ROM file complete!!
   Convert running ROM file to default ROM file fail!!
   
Load %s into Address 0x%08X
 RasCode HTPCode Flash type = 0x%x
 Reboot Cnt = 0x%x
 Debug Flag = 0x%x
 DRAM size  = 0x%x
 Stack Ptr  = 0x%lx
    Data Abort Address=%X
 Prefetch Abort Address=%X
 Sysreset at Address=%X
    Undefined Address=%X
  No Debug Information Available      

%06X  %s%02X%04X      

%06X  %s%02X%04X  Unknown Error
 Timeout, please download again...
 Total %d bytes received
   Remote cancel, please download again...
   
   )
 , should:   

DRAM Test Fail at address     . (read:      

OK

  OK
    Iteration %d: Filling,  Comparing,  
DRAM Test Fail at address %p. (read:%x, should:%x)
   OK


(bla bla bla bla bla
 bla bla bla bla bla
 bla bla bla bla bla )



£H€£x€¬    €£€€£Ä€´    €£Ì€¤€:t    €¤€¤4€9ì    €®°€®Ð€8”    €®Ø€¯        €¯AT            just answer OK    ATHE              
print help    
ATBA    x     change baudrate. 1:38.4k, 2:19.2k, 3:9.6k 4:57.6k 5:115.2
kATEN    x,(y)     
set BootExtension 
Debug Flag (y=password) 
ATSE show the seed of password generator   
ATTI    (h,m,s)
   
change system time to hour:min:sec or show current time   ATDA    (y,m,d)
change system date to year/month/day or show current date ATDS              
dump RAS stack
ATDT dump Boot Module Common Area  
ATDU    x,y dump memory contents from address x for length y 
ATWB    x,y write address x with  8-bit value y   
ATWW    x,y write address x with 16-bit value y   
ATWL    x,y write address x with 32-bit value y   
ATRB    x,y display the  8-bit value of address x 
ATRW    x,y display the 16-bit value of address x 
ATRL    x         display the 32-bit value of address x ATGO    

(x)
       run program at addr x or boot router  
ATGR              boot router   
ATGT              run Hardware Test Program AT%T    x
         
Enable Hardware Test Program at boot up   
ATBT    x         block0 write enable (1=enable, other=disable)
ATRT   w,x,y(,z) RAM test level w, from address x to y (z iterations) 
ATWE    a(,b,c,d) write MAC addr, Country code, EngDbgFlag, FeatureBit to flash ROM 

ATCU    x         write Country code to flash ROM   
ATCB              copy from FLASH ROM to working buffer 
ATCL              clear working buffer  
ATSB              save working buffer to FLASH ROM  
ATBU              dump manufacturer related data in working buffer
ATSH              dump manufacturer related data in ROM 
ATWM    x         set low 6 digits MAC address in working buffer
ATMH    x         set hight 6 digits MAC address in working buffer  
ATBS              show the bootbase seed of password generator  
ATLB    x         xmodem upload bootbase,x is password  
ATSM    x         set 6 digits MAC address in working buffer    
ATCO    x         set country code in working buffer    
ATFL    x         set EngDebugFlag in working buffer    
ATST    x         set ROMRAS address in working buffer  
ATSY    x         set system type in working buffer 
ATVD    x         set vendor name in working buffer 
ATPN    x         set product name in working buffer    
ATFE    x,y,...   set feature bits in working buffer    
ATMP              check & dump memMapTab    
ATDO    x,y       download from address x for length y to PC via XMODEM 
ATTD              download router configuration to PC via XMODEM    
ATUP    x,y       upload to RAM address x for length y from PC via XMODEM   
ATUR                   upload router firmware to flash ROM   
ATDC              hardware version check disable during uploading firmware  
ATLC              upload router configuration file to flash ROM 
ATUX    x(,y)     xmodem upload from flash block x to y 
ATER    x,y       erase flash rom from block x to y 
ATWF    x,y,z     copy data from addr x to flash addr y, length z   
ATXS    x         xmodem select: x=0: CRC mode(default); x=1: checksum mode 
ATLD              Upload Configuration File and Default ROM File to Flash   
ATBR    		  Reset to default Romfile    
ATCD              Convert Running ROM File to Default ROM File into Flash       ÿÿÿÿ    UUUUªªªª¥¥¥¥ZZZZ––––iiiiÌÌÌÌ3333

DRAM POST: Testing:     OK   X P H @ 8 0 (        `€‚ƒ

----------------------------------------------------------------------------
I will wait you bro...
hahaha...8 days,,upgrade your machine ? request AlienWare

 

[Lavixgne]

SOLVED !!
My Machine cpu usage now solved..

1. disable dolby advance sound..
2. solved..

dolby advance sound / audiodg.exe
eat you cpu 25% - 50%...

thanks bart,all