Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Malware attacks Using Apple Bonjour !


  • Please log in to reply

#31
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,731 posts
  • MVP

My snipping tool doesn't even have an option to save as text so not sure how yours manages that feat.  The default is .png but it can be changed to .jpg, .gif or .mht

 

Process Explorer says your system should be very quick as far as the CPU is concerned.  Even Interrupts is very low.  Create a new Speccy log as before:

 

Run Speccy.  When it finishes (the little icon in the bottom left will stop moving), 
File, Save as Text File,  (to your desktop) note the name it gives. OK.  Open the file in notepad and delete the line that gives the serial number of your Operating System.  
(It will be near the top about 10 lines down.) Save the file.  Attach the file to your next post.  (More Reply Options, Choose File, Open, Attach This File)
 
 
Let's look at the war zone that is your events:
First clear the alarms:
Right click on  Computer and select Manage Then the Event Viewer. Next select Windows Logs.  Right click on System and Clear Log, Clear. Repeat for Application.
 
Reboot. 
Then use VEW to see the alarms:
 
2. Right-click VEW.exe and Run AS Administrator
3. Under 'Select log to query', select:
 
* System
4. Under 'Select type to list', select:
* Error
* Warning
 
 
Then use the 'Number of events' as follows:
 
 
1. Click the radio button for 'Number of events'
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.
 
 
Please post the Output log in your next reply then repeat but select Application.
 
Let's also check your Internet connection:
 
 
Go to http://www.speedtest.net/and click on Begin Test
 
When the Test finishes click on Share This Result and then select Forum then Copy then move to a reply and Ctrl + v
 
 
 

  • 0

Advertisements


#32
sub101uk

sub101uk

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts

Attached new Speccy scan so see what you think yes I know what you mean regarding screen grabs coming out as text files as it clearly states saving in JPG format .

 

Last night I was unable to use both of my Blue tooth mice as both where unstable , So in the end I took the wifi mouse from the TV and plugged the receiver into the USB port and that works fine . So I hope to go down the local shop today and test both blue tooth mice .

 

As far as clearing the war Zone logs yes your thinking the same as me Clear them all and try and work out where the problem is like night I down loaded all the files from Intel so starting a fresh .

 

The files I could not install are Intel Rapid Storage Technology like you say they have version 15 and mine is only 12 so maybe its not compatible with my computer I could 14 or 13 and see if they install . The other file I could not install was Intel USB 3.0 eXtensible Host Controller Driver on the intel site its got  Intel USB 3.0 eXtensible Host Controller Driver for Intel 8/9/10 but my computer is a core 7 . On the Intel web site they have core 7 drivers but there older than the ones I have installed mine are 2.0.0.102  and the web one is 1.0.10.255 so its much older other wise I think there up to date I also installed a new copy of the Logitech +Microsoft mouse software so next is to test both mice on some other computer . If both mice are found to be working fine then I hate to say this its going to be a reinstall job I wanted to change C drive over any way so its a good time . Ok just rebooting for VEW log I have cleared System Log so will send this now .

 

 


  • 0

#33
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,731 posts
  • MVP

no attachment


  • 0

#34
sub101uk

sub101uk

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts

Very strange no worrys I will attach again . I have attached the VEW logs over the day plus you can see what intel files I have installed but the blue tooth problem still returns but I only have online the microsoft 5000mouse online so all the error messages dont make much sense .

 

Well I am off to bed

 

Cheers

Attached Thumbnails

  • Current Intel files installed 14.01.17.JPG

Attached Files


  • 0

#35
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,731 posts
  • MVP

Speccy is showing your PC and your SSD are running at 52 C.  This isn't too bad for a laptop but your SSD says it doesn't want to be higher than 50 so you might invest in a cooler tray.  (I had an SSD fail on me and it got so hot it burnt my finger.  Took a long time to get them to replace it.  They didn't want to believe it was bad.  I have the new one in a special cooler mount so I hope it lasts longer.)  

 

When you run VEW it would be helpful if you would:

 Under 'Select type to list', select:

 

ONLY

* Error
* Warning
 
The information events are just cluttering up the logs.
 
 
 
the 7 PM log shows you tried to disconnect a USB device (Perhaps one fo the hard drives?) and there were several programs using it at the time that objected.
 
The 10 PM log shows your bluetooth getting lost.  Could there be some interfernce that gets turned on about the time the bluetooth stops?
 
IRST:
 
 
claims that their latest version should work on your version of Windows but see if you can use one of the earlier versions.

  • 0

#36
sub101uk

sub101uk

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts

All ok on the increase of temperature well it is a hot place over here in Thailand but with only 3 weeks to go I don't really want to buy a cooling tray since the weather in the UK is only a few degrees off freezing since the computer has been over here for the past 2 years the fan intakes have never been cleaned so there's no harm in removing the bottom and making sure the fan intakes are clear..

 

Understood on the VEW settings with just scanning Error + Warning , Yes I did read all the scan results .What did you make of this ERROR in the afternoon scan :-

 

Log: 'Application' Date/Time: 14/01/2017 05:01:34
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.     DETAIL -   1 user registry handles leaked from \Registry\User\S-1-5-21-3090456578-2289362299-1625809071-1000:
Process 2136 (\Device\HarddiskVolume2\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe) has opened key \REGISTRY\USER\S-1-5-21-3090456578-2289362299-1625809071-1000\Software\NVIDIA Corporation\Global\ShadowPlay
 

All ok on attempting to disconnect my USB drive but was unable to , I had to close down all browsers and even then it would not let me unplug the drive in the end I had to turn the computer off and unplug the drive then reboot the computer .

 

As far as the BlueTooth problem goes I am at a loss on how we are getting these error messages :-  Bluetooth HID device (7c:1e:52:6f:db:8b) either went out of range or became unresponsive. The mouse is only 2 inches away from the side of the computer so not sure why I am seeing this error message I will check and see if Blue Tooth on my phone is tuned off . Phone Blue Tooth is off

All the software drivers have been replaced but I will test both of my mice and see if there ok but I have a feeling they are . As far as interference goes I can think of nothing round me that operates on 2.4 Ghz my thoughts are its induced from within the computer . 2.4 Ghz is used for wifi and I understand even micro waves for cooking . This interference does not effect the wifi mouse only both blue tooth  mice . I am sure if I got hold a spectrum analyzer I would find nothing any way 3 weeks and I am out of here and back to the UK then we shall see if the problem continues .

 

As far as downloading a newer version of Intel® Rapid Storage not sure whats going on there maybe its finger trouble . I click on the link :-

Then click on   Intel® Rapid Storage Technology (Intel® RST) version 15.2.0.1020 save file to desk top , Click on file on desk top f6flpy-x64 , While file opens click on extract all files . Most other files just install them self but this is not one of them . So what am I doing wrong ?
 
Well the computer has been on for the past 5 hours and just checked with VEW and found nothing so we shall see what happens during the day . Ok about mid day I ran VEW and found this on this report but the computer was working fine so not sure if we can go by these reports as for heat you can just about hear the fans so there not running hot just checked it at 53 c .so I dont think this is temperature related problem but I fully understand that solid state equipment needs lots of air .
 
No Load
 
Core       Speed     Multiplier  Bus Speed  Temperature   Threads
Core 0    798.1 MHz    x 8.0    99.8 MHz    53 °C    APIC ID: 0, 1
Core 1    798.1 MHz    x 8.0    99.8 MHz    53 °C    APIC ID: 2, 3
Core 2    798.1 MHz    x 8.0    99.8 MHz    51 °C    APIC ID: 4, 5
Core 3    798.1 MHz    x 8.0    99.8 MHz    52 °C    APIC ID: 6, 7
 
Under load 
 
Doing a full Scan with ESET
 
 
Core       Speed      Multiplier    Bus Speed   Temperature  Threads
Core 0    3691.2 MHz    x 37.0    99.8 MHz    79 °C    APIC ID: 0, 1
Core 1    3691.2 MHz    x 37.0    99.8 MHz    89 °C    APIC ID: 2, 3
Core 2    3691.2 MHz    x 37.0    99.8 MHz    95 °C    APIC ID: 4, 5
Core 3    3691.2 MHz    x 37.0    99.8 MHz    86 °C    APIC ID: 6, 7

 

 

There is nothing on VEW logs

 

Ok at 6pm i checked the VEW log and found it reported a problem with Blue tooth , The computer was not being used at this time so Temp was only 53 C .

 

Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 15/01/2017 18:22:14

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 15/01/2017 09:31:42
Type: Warning Category: 0
Event: 2 Source: HidBth
Bluetooth HID device (7c:1e:52:6f:db:8b) either went out of range or became unresponsive.

Log: 'System' Date/Time: 15/01/2017 09:30:51
Type: Warning Category: 0
Event: 2 Source: HidBth
Bluetooth HID device (7c:1e:52:6f:db:8b) either went out of range or became unresponsive.

 

On the internet there are a few items there regarding this problem .
 

 

 

 

Attached Files


Edited by sub101uk, 15 January 2017 - 05:31 AM.

  • 0

#37
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,731 posts
  • MVP
Core       Speed      Multiplier    Bus Speed   Temperature  Threads
Core 0    3691.2 MHz    x 37.0    99.8 MHz    79 °C    APIC ID: 0, 1
Core 1    3691.2 MHz    x 37.0    99.8 MHz    89 °C    APIC ID: 2, 3
Core 2    3691.2 MHz    x 37.0    99.8 MHz    95 °C    APIC ID: 4, 5
Core 3    3691.2 MHz    x 37.0    99.8 MHz    86 °C    APIC ID: 6, 7

 

 

This looks way too hot for a simple ESET scan.  I would say the heatsink is dust clogged.  If you do try to clean it (not an easy job on some laptops - Dells are the easiest, HP's the hardest) it's OK to remove the fan but do not remove the heatsink unless you plan to replace the themal paste.  A vaccum cleaner hose and a small brush are what I use.  Most dust is between the fan and the heatsink.

 

You are right about a lot on the internet about the bluetooth problem.  Most people seem to think it's caused by the Allow Windows to Turn off this Driver to save Power option being checked or by interference.  Assume you have already tried unchecking the option.  http://www.evilbox.r...-under-windows/

 

 

 

The 

 

Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.     DETAIL -   1 user registry handles leaked from \Registry\User\S-1-5-21-3090456578-2289362299-1625809071-1000:
Process 2136 (\Device\HarddiskVolume2\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe) has opened key \REGISTRY\USER\S-1-5-21-3090456578-2289362299-1625809071-1000\Software\NVIDIA Corporation\Global\ShadowPlay

 

 

error is from Nvidia.  Usually it a mistake in the program that causes this.  However, it's not as bad as the error implies.  The warning is leftover from XP.  Windows now handles registry leaks a lot better.

 

The inability to remove the USB device was probably caused by Seagate Dashboard 2.0's Seagate.Dashboard.DASWindowsService.exe.  Don't know what it does but you problably can live without it.  Since it was using the drive, ESET was also interested.  ID4 is usually the System process which probably got involved because the drive was in use.

 

Log: 'System' Date/Time: 14/01/2017 11:06:10

Type: Warning Category: 223
Event: 225 Source: Microsoft-Windows-Kernel-PnP
The application \Device\HarddiskVolume2\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe with process id 2144 stopped the removal or ejection for the device USB\VID_0BC2&PID_AB24\NA7YM8BT.
 
Log: 'System' Date/Time: 14/01/2017 11:06:10
Type: Warning Category: 223
Event: 225 Source: Microsoft-Windows-Kernel-PnP
The application System with process id 4 stopped the removal or ejection for the device USB\VID_0BC2&PID_AB24\NA7YM8BT.
 
Log: 'System' Date/Time: 14/01/2017 11:05:09
Type: Warning Category: 223
Event: 225 Source: Microsoft-Windows-Kernel-PnP
The application \Device\HarddiskVolume2\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe with process id 2144 stopped the removal or ejection for the device USB\VID_0BC2&PID_AB24\NA7YM8BT.
 
Log: 'System' Date/Time: 14/01/2017 11:05:09
Type: Warning Category: 223
Event: 225 Source: Microsoft-Windows-Kernel-PnP
The application \Device\HarddiskVolume2\Program Files\ESET\ESET Smart Security\ekrn.exe with process id 940 stopped the removal or ejection for the device USB\VID_0BC2&PID_AB24\NA7YM8BT.
 

 

 

 


  • 0

#38
sub101uk

sub101uk

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts

All ok on the heat yes I need to get hold of a vacuum cleaner I think that may have to wait till I return to the UK I think the best I could do here is get a 1/4 inch paint brush remove the bottom panel and see what I can clean out of the fan intakes . Done this many times before with my old 12 inch but this 17 inch has not been cleaned in 2 years so you may be right . its looks straight forward   Removing the fans looks straight forward then clean the fans with the brush .

 

As far this bluetooth problem goes :-Event: 2 Source: HidBth
Bluetooth HID device (7c:1e:52:6f:db:8b) either went out of range or became unresponsive.
 

it seems to be a ongoing problem one guy thinks this will solve my problem .

  1. Go to Control Panel
  2. Go to More Settings
  3. Search for BLUETOOTH and bluetooth options will appear under DEVICES AND PRINTERS
  4. select CHANGE BLUETOOTH SETTINGS
  5. Select the HARDWARE TAB
  6. Select the GENERIC BLUETOOTH ADAPTER
  7. Click the PROPERTIES Button
  8. Click the CHANGE SETTINGS button
  9. Select the POWER MANAGEMENT Tab
  10. Uncheck the box that says "Allow the computer to turn off the device to save power"

and OK your way back out. (2)

 

So I have done this and reset the logs and see what happens .


  • 0

#39
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,731 posts
  • MVP

Actually it looks more like the HP method of sitting a fan down and building a laptop around it.  On the last Dell I worked on there were 8 screws, a panel came off and you could get to the fan.

 

This is brain surgery so pay careful attention to where each screw came from.  I have a friend that swears by masking tape.  He puts down a strip sticky side up and sticks each screw to the tape and makes a note where it came from.  I take digital pictures of each step and separate the screws.  

 

If you can't get a vacuum cleaner you might find a can of compressed air.

 

Is this bluetooth adapter built-in to the laptop or one that plugs into a USB jack?  If built-in it could be suffering from the heat.


  • 0

#40
sub101uk

sub101uk

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts

Well with just over 2 weeks to go before I return to the UK I might wait till I get home then I can strip it down and use the vacuum cleaner and remove both fans its not had a clean in 2 years so I hate to think what its like inside . Its ok on the hardware side as I am a Rov guy so used to stripping down pods but the IT side of things I still learning but while its stripped I think I will install a larger C drive and a fresh version of windows 7 and do a total re install .

 

Yes the Bluetooth adapter is built in so not much I can do with that but from looking on the web it seems to be a common problem and many people have gone over to use a Wifi mouse than Bluetooth using a wireless mouse means you loose one of your USB ports so BlueTooth is better .

 

Ok just checked the computer VEW log and found this :-

 

Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 17/01/2017 10:34:10

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 17/01/2017 01:58:30
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 1 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 4 seconds since the last report.

Log: 'System' Date/Time: 17/01/2017 01:58:30
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 0 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 4 seconds since the last report.

Log: 'System' Date/Time: 17/01/2017 01:58:30
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 2 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 4 seconds since the last report.

Log: 'System' Date/Time: 17/01/2017 01:58:30
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 3 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 4 seconds since the last report.

Log: 'System' Date/Time: 17/01/2017 01:58:30
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 4 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 4 seconds since the last report.

Log: 'System' Date/Time: 17/01/2017 01:58:30
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 7 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 4 seconds since the last report.

Log: 'System' Date/Time: 17/01/2017 01:58:30
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 5 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 4 seconds since the last report.

Log: 'System' Date/Time: 17/01/2017 01:58:30
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 6 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 4 seconds since the last report.
 


  • 0

Advertisements


#41
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,731 posts
  • MVP

Two possible reasons for alarms like the above:

 

1.  Overheating - the CPU slows down when it gets hot

 

2.  Some sort of power saving thing from the BIOS.


  • 0

#42
sub101uk

sub101uk

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts

Well that little BlueTooth fix does not seem to work as this just came up in the past 7 hours so wait and see so wait and see .

 

Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 18/01/2017 15:30:23

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 18/01/2017 07:57:16
Type: Warning Category: 0
Event: 2 Source: HidBth
Bluetooth HID device (7c:1e:52:6f:db:8b) either went out of range or became unresponsive.
 


  • 0

#43
sub101uk

sub101uk

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts

Soon after turning on the computer I noticed the fan increased speed and things started to slow down , So I went offline and things were now running normal again but as soon as I went online again the fan speeded up . I seem to be getting these error messages :-

 

  Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 19/01/2017 08:33:36

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 19/01/2017 00:01:33
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 0 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 4 seconds since the last report.

Log: 'System' Date/Time: 19/01/2017 00:01:33
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 2 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 4 seconds since the last report.

Log: 'System' Date/Time: 19/01/2017 00:01:33
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 6 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 4 seconds since the last report.

Log: 'System' Date/Time: 19/01/2017 00:01:33
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 3 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 4 seconds since the last report.

Log: 'System' Date/Time: 19/01/2017 00:01:33
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 4 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 4 seconds since the last report.

Log: 'System' Date/Time: 19/01/2017 00:01:33
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 5 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 4 seconds since the last report.

Log: 'System' Date/Time: 19/01/2017 00:01:33
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 1 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 4 seconds since the last report.

Log: 'System' Date/Time: 19/01/2017 00:01:33
Type: Warning Category: 7
Event: 37 Source: Microsoft-Windows-Kernel-Processor-Power
The speed of processor 7 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 4 seconds since the last report.
 


  • 0

#44
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,731 posts
  • MVP

Could be heat but let's see who it's talking to:

 

 
There is a program called tcpview.  http://live.sysinter...com/Tcpview.exe Download, Save and then run it by right clicking and Run As Admin.
 
 
 
Then File, Save As (to your desktop), tcp , OK.  This should create a  file tcp.txt on your desktop.  Attach or copy and paste it to a reply.

  • 0

#45
sub101uk

sub101uk

    Member

  • Topic Starter
  • Member
  • PipPip
  • 39 posts

Ok Just removed the bottom and cleaned the fans at first all seems not to bad but when I removed the CPU fan wow that was blocked with layer of muck so a clean with a old tooth brush and reinstall the other Fan was fine did give the intake a good clean but look at the heat levels after the clean .

 

After Clean NO LOAD

 

Core      Speed    Multiplier    Bus Spee   Temperature    Threads
Core 0    798.1 MHz    x 8.0    99.8 MHz    45 °C    APIC ID: 0, 1
Core 1    798.1 MHz    x 8.0    99.8 MHz    46 °C    APIC ID: 2, 3
Core 2    798.1 MHz    x 8.0    99.8 MHz    42 °C    APIC ID: 4, 5
Core 3    798.1 MHz    x 8.0    99.8 MHz    44 °C    APIC ID: 6, 7

 

With ESET Load

 

Core     Speed           Multiplier   Bus Speed Temperature  Threads
Core 0    3691.2 MHz    x 37.0    99.8 MHz    61 °C    APIC ID: 0, 1
Core 1    3691.2 MHz    x 37.0    99.8 MHz    75 °C    APIC ID: 2, 3
Core 2    3691.2 MHz    x 37.0    99.8 MHz    74 °C    APIC ID: 4, 5
Core 3    3791.0 MHz    x 38.0    99.8 MHz    67 °C    APIC ID: 6, 7

 

Yes I think I do have sysinter installed so will run that fingers crossed its the heat .

 

Before clean NO LOAD

 

Core       Speed     Multiplier  Bus Speed  Temperature   Threads
Core 0    798.1 MHz    x 8.0    99.8 MHz    53 °C    APIC ID: 0, 1
Core 1    798.1 MHz    x 8.0    99.8 MHz    53 °C    APIC ID: 2, 3
Core 2    798.1 MHz    x 8.0    99.8 MHz    51 °C    APIC ID: 4, 5
Core 3    798.1 MHz    x 8.0    99.8 MHz    52 °C    APIC ID: 6, 7

 

With ESET Load

 

Core       Speed      Multiplier    Bus Speed   Temperature  Threads
Core 0    3691.2 MHz    x 37.0    99.8 MHz    79 °C    APIC ID: 0, 1
Core 1    3691.2 MHz    x 37.0    99.8 MHz    89 °C    APIC ID: 2, 3
Core 2    3691.2 MHz    x 37.0    99.8 MHz    95 °C    APIC ID: 4, 5
Core 3    3691.2 MHz    x 37.0    99.8 MHz    86 °C    APIC ID: 6, 7

 

Average Temperature    64 °C

Attached Files


Edited by sub101uk, 19 January 2017 - 12:08 AM.

  • 0






Similar Topics

1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP