Solved What is being copied or transferred ?

[FredM8]

I am running Win7 Home Premium and for some time now my machine will periodically start transferring or copying date from one place to another. At least that is what it sounds like. When this is happening my machine becomes unusable. It happens at various time but mostly when I start to use it after start up.

Any ideas anyone ?

 

[AddRAM]

Are you using any kind of backup program ?

 

[ignatzatsonic]

Well, you have an old CPU and a hard drive that may well be older than the CPU.

Windows has certain "housekeeping" tasks that it does periodically. That would be my guess. It just takes longer and is more work in your case considering the age of your hardware.

There is some chance you have something else going on that might be revealed by info on your processes, memory usage, etc from Task Manager.

I assume the noise you refer to is just hard drive chatter--reading and writing for whatever reason?

 

[FredM8]

None at all. I use Acronis to make a eSata clone when needed.

 

[AddRAM]

Is it defragmenting ?

How do you know it`s copying or moving files ?

As Ignatz suggested look at task manager when it`s doing it.

Your pc shouldn`t do anything without you telling it to

 

[FredM8]

Well, you have an old CPU and a hard drive that may well be older than the CPU.

Windows has certain "housekeeping" tasks that it does periodically. That would be my guess. It just takes longer and is more work in your case considering the age of your hardware.

There is some chance you have something else going on that might be revealed by info on your processes, memory usage, etc from Task Manager.

I assume the noise you refer to is just hard drive chatter--reading and writing for whatever reason?

Yes, the noise is the Hard Drive chatter. And at the moment I am using the same hard drive that came with the machine 1TB Seagate Barracuda.

My own suspicion has been what you suggested that Windows is doing some sort of housekeeping, but how do I find out, and why has it not always done this ?

 

[AddRAM]

Ugh, Open Task Manger and click the processes tab. Then check the list for anything using the cpu.

Also click the performance tab and check the cpu usage.

 

[ignatzatsonic]

OK; I thought you were using the 250 gb drive listed in your specs.

When it's noisy, look in Task Manager at the processes tab; sort the processes by clicking the CPU column. What's at the top of that list.

You could also look at the performance tab of Task Manager and click on Resource Monitor. When it opens, look at the disk tab to see what's going on with the disk.

Right now, you could type disk defrag into the start box and look at Disk Defragmenter. Let it analyze your drive. It will show you if it is fragmented. If you have defrag set to run on a certain schedule that could be the problem. Maybe it hadn't run much before because the drive has rarely been fragmented to any degree.

But it could be some other process entirely.

What do you have checked in the startup tab of msconfig?

 

[FredM8]

This is the memory usage just a few moments ago while idle.

 

[AddRAM]

Neither one of us said to check the memory usage.

 

[FredM8]

OK; I thought you were using the 250 gb drive listed in your specs.

When it's noisy, look in Task Manager at the processes tab; sort the processes by clicking the CPU column. What's at the top of that list.

You could also look at the performance tab of Task Manager and click on Resource Monitor. When it opens, look at the disk tab to see what's going on with the disk.

Right now, you could type disk defrag into the start box and look at Disk Defragmenter. Let it analyze your drive. It will show you if it is fragmented. If you have defrag set to run on a certain schedule that could be the problem. Maybe it hadn't run much before because the drive has rarely been fragmented to any degree.

But it could be some other process entirely.

What do you have checked in the startup tab of msconfig?

Quite a lot by the looks of it !?!?
I did a defrag last night, it is always set to manual and never on a schedule.

Acronis Scheduler Helper Acronis
Microsoft Security Client Microsoft
NVIDIA Update NVIDIA
Sidebar Unknown
Windows Live Device Integrator Microsoft
mcui_exe Unknown
Adobe CS5 Service Manager Adobe
SBSV 2010/02/19-11:02:07 Adobe
Adobe Reader and Acrobat Manager Adobe
hpwuSchd Application Hewlet Packard
Acronis True Image Acronis
Acronis True Image Acronis
Java (TM) Platform SE Auto Updater Oracle
HP Digital Imaging Hewlet Packard

 

[FredM8]

Neither one of us said to check the memory usage.

No, you did not. It was something that I did before I read your reply.

 

[Golden]

Fred, is the disk perhaps indexing the contents to make the searching more efficient?

Please check for that using this:
http://www.sevenforums.com/tutorials/17874-indexing-pause.html

 

[FredM8]

Indexing ???

Thank you for that. It may be the problem. I have cleared all indexing locations. The last count for the indexing was 269,012. I will wait and see if that cures the problem. My need for rapid searches are very limited, so I can bear the pain if need be.

 

[Golden]

Let us know if it improves things.

 

[FredM8]

I have spent hours letting the index rebuild itself from scratch
284,841 items indexed

At the moment all seems to be quiet on the HD front, just very slight sounds of activity. When I paused the search the HD chatter did stop.

With your reply a link was inserted for RegCureProSetup.exe

I have downloaded it, should I use it ? It is unclear if you, or the forum inserted the link.

 

[ignatzatsonic]

With your reply a link was inserted for RegCureProSetup.exe

I have downloaded it, should I use it ? It is unclear if you, or the forum inserted the link.

I don't see that link in Golden's reply.

It's a registry cleaner, which you should avoid other than in extreme circumstances. Particularly that one.

No, I wouldn't use it, particularly since you apparently don't know where it came from or what it is.

It says here it is bad news:

How safe is RegCure Pro? - Microsoft Community

You ought to get to the bottom of why this link was offered to you as I don't see it.

You may well be infected with Adware that is having its way with your PC.

Have you run Adwcleaner or Malwarebytes?

 

[FredM8]

With your reply a link was inserted for RegCureProSetup.exe

I have downloaded it, should I use it ? It is unclear if you, or the forum inserted the link.

I don't see that link in Golden's reply.

It's a registry cleaner, which you should avoid other than in extreme circumstances. Particularly that one.

No, I wouldn't use it, particularly since you apparently don't know where it came from or what it is.

It says here it is bad news:

How safe is RegCure Pro? - Microsoft Community

You ought to get to the bottom of why this link was offered to you as I don't see it.

You may well be infected with Adware that is having its way with your PC.

Have you run Adwcleaner or Malwarebytes?

No, I have not run either of these programs

Where do I get Adwcleaner or Malwarebytes?

 

[ignatzatsonic]

malwarebytes:

Malwarebytes.org

There's a free version and a paid version; free is all you need for now.

Adwcleaner:

Téléchargements - Outils de Xplode - AdwCleaner

Look for "telechargements" download.

 

[FredM8]

Just after I made my last post I realized it was a dumb question to ask, and went and found it on Google.
Below is the result.

# AdwCleaner v3.023 - Report created 10/04/2014 at 22:33:17
# Updated 01/04/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Sean - SEAN-PC
# Running from : C:\Users\Sean\AppData\Local\Temp\wz20ae\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\boost_interprocess
Folder Deleted : C:\Program Files (x86)\sweetpacks bundle uninstaller
Folder Deleted : C:\Users\Sean\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Sean\AppData\Roaming\DSite
Folder Deleted : C:\Users\Sean\AppData\Roaming\Systweak
Folder Deleted : C:\Users\Sean\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Users\Sean\AppData\Roaming\Mozilla\Firefox\Profiles\s0sqnmf7.default\searchplugins\Babylon.xml
File Deleted : C:\Users\Sean\AppData\Roaming\Mozilla\Firefox\Profiles\s0sqnmf7.default\searchplugins\conduit-search.xml
File Deleted : C:\Users\Sean\AppData\Roaming\Mozilla\Firefox\Profiles\s0sqnmf7.default\searchplugins\delta.xml
File Deleted : C:\Users\Sean\AppData\Roaming\Mozilla\Firefox\Profiles\s0sqnmf7.default\user.js
File Deleted : C:\Windows\System32\Tasks\DSite

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook
Key Deleted : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Key Deleted : HKLM\SOFTWARE\d50d8dee16fba48
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2974C985-8151-4DE5-B23C-B875F0A8522F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FF7C3CF0-4B15-11D1-ABED-709549C10000}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{603C4CC9-5DC6-4C44-873F-8281509DF953}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : HKCU\Software\BabSolution
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\DataMngr
[#] Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\dsiteproducts
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\SoftwareUpdater
Key Deleted : HKLM\Software\systweak
Key Deleted : HKLM\Software\Vittalia
Key Deleted : [x64] HKLM\SOFTWARE\DataMngr

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Mozilla Firefox v17.0.1 (en-US)

[ File : C:\Users\Sean\AppData\Roaming\Mozilla\Firefox\Profiles\s0sqnmf7.default\prefs.js ]

Line Deleted : user_pref("extensions.delta.admin", false);
Line Deleted : user_pref("extensions.delta.aflt", "babsst");
Line Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Line Deleted : user_pref("extensions.delta.autoRvrt", "false");
Line Deleted : user_pref("extensions.delta.dfltLng", "en");
Line Deleted : user_pref("extensions.delta.excTlbr", false);
Line Deleted : user_pref("extensions.delta.ffxUnstlRst", true);
Line Deleted : user_pref("extensions.delta.id", "ff67ecf9000000000000000000000000");
Line Deleted : user_pref("extensions.delta.instlDay", "15864");
Line Deleted : user_pref("extensions.delta.instlRef", "sst");
Line Deleted : user_pref("extensions.delta.newTab", false);
Line Deleted : user_pref("extensions.delta.prdct", "delta");
Line Deleted : user_pref("extensions.delta.prtnrId", "delta");
Line Deleted : user_pref("extensions.delta.rvrt", "false");
Line Deleted : user_pref("extensions.delta.smplGrp", "none");
Line Deleted : user_pref("extensions.delta.tlbrId", "base");
Line Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");
Line Deleted : user_pref("extensions.delta.vrsn", "1.8.21.5");
Line Deleted : user_pref("extensions.delta.vrsnTs", "1.8.21.522:19:28");
Line Deleted : user_pref("extensions.delta.vrsni", "1.8.21.5");
Line Deleted : user_pref("extensions.delta_i.babExt", "");
Line Deleted : user_pref("extensions.delta_i.babTrack", "affID=122123");
Line Deleted : user_pref("extensions.delta_i.srcExt", "ss");

-\\ Google Chrome v34.0.1847.116

[ File : C:\Users\Sean\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : homepage

*************************

AdwCleaner[R0].txt - [8632 octets] - [10/04/2014 22:31:01]
AdwCleaner[S0].txt - [8135 octets] - [10/04/2014 22:33:17]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8195 octets] ##########

Hoe often do you think that I should run this program, and can you see anything that has been deleted that should have been left alone ?