[ rss / options / help ]
post ]
[ b / iq / g / zoo ] [ e / news / lab ] [ v / nom / pol / eco / emo / 101 / shed ]
[ art / A / beat / boo / com / fat / job / lit / map / mph / poof / £$€¥ / spo / uhu / uni / x / y ] [ * | sfw | o ]
logo
technology

Return ]

Posting mode: Reply
Reply ]
Subject   (reply to 24209)
Message
File  []
close
fuckyouacer3.png
242092420924209
>> No. 24209 Anonymous
31st May 2015
Sunday 9:05 pm
24209 spacer
My laptop just starts screaming for no reason, it gets slow, and when I look at the task manager, this is what I see. I turn it on sometimes, leave it idling for an hour or so, and then come back to it going mental. It does this for a few good minutes, then calms back down. What the hell is going on? I try and see what else is running, what is eating up all the memory, and there's nothing. Just nothing, everything seems normal, but something I can't see is doing this.

Any ideas lads?
Expand all images.
>> No. 24210 Anonymous
31st May 2015
Sunday 9:08 pm
24210 spacer
I guess the obvious question is have you ran any scans for naughty things?
>> No. 24211 Anonymous
31st May 2015
Sunday 9:14 pm
24211 spacer
>>24210
Yes. No problems what so ever. This memory eating issue, happens once a day, in some weeks it happens once every two days.
>> No. 24212 Anonymous
31st May 2015
Sunday 9:14 pm
24212 spacer
>I try and see what else is running, what is eating up all the memory, and there's nothing.
Have you checked out the Processes tab in Task Manager and ordered them by memory usage?

Have you installed any programs that "optimise" your HDD by defragging in the background, by any chance?
>> No. 24213 Anonymous
31st May 2015
Sunday 9:19 pm
24213 spacer

fuckyouacer4.png
242132421324213
>>24212
Yes, while the memory eating occurs, this is how the process tab looks like. There are no optimise programs installed.
>> No. 24214 Anonymous
31st May 2015
Sunday 9:30 pm
24214 spacer
>>24213
How much memory does this system have? Did you enable "Show processes from all users" at the bottom?

You might have better luck downloading Process Explorer and leaving it running in the background until the issue happens, it's better than Task Manager in every way.
>> No. 24215 Anonymous
31st May 2015
Sunday 9:37 pm
24215 spacer

fuckyouacer5.png
242152421524215
>>24214
I will download it now, and let it run till it happens again. Thanks mate.
>> No. 24216 Anonymous
31st May 2015
Sunday 11:09 pm
24216 spacer
>>24210
Scans don't pick everything up. Sounds like classic botted behaviour.
Backup, format, reinstall. It's the only way to be sure.
>> No. 24217 Anonymous
1st June 2015
Monday 12:03 am
24217 spacer
>>24216
It's a bit premature to be saying such drastic things.
>> No. 24218 Anonymous
1st June 2015
Monday 12:06 am
24218 spacer
>>24217

There's not a lot other than a rootkit that can invisibly hoover up memory.
>> No. 24219 Anonymous
1st June 2015
Monday 12:23 am
24219 spacer
>>24218
The point I was making is that we've not yet established the hoovering is anywhere close to invisible.
>> No. 24220 Anonymous
1st June 2015
Monday 8:21 am
24220 spacer
>>24216
>Backup, format, reinstall
This is perhaps a stupid question, but wouldn't the act of backing up all your stuff include whatever nasty thing was slowing it down? So it would still be there when you put everything back on the newly formatted disk?
>> No. 24221 Anonymous
1st June 2015
Monday 11:05 am
24221 spacer
>>24220
Possibly. Depends.

Try and stay away from backing up anything with a .exe format if you can. Of course, it could affect other filetypes as well, but that's the most common target.
>> No. 24223 Anonymous
1st June 2015
Monday 1:08 pm
24223 spacer
>>24220

The trick is to update your OS and install antivirus before you restore your backups.
>> No. 24240 Anonymous
3rd June 2015
Wednesday 7:44 am
24240 spacer

fuckyouacer8.png
242402424024240
Lads. It has happened right now. Took two and a bit days to occur again. This time I was patient and waited hours for things to load so as to get these screenshots. Turns out that something called svchost is causing this. Any help will be appreciated lads, please.
>> No. 24241 Anonymous
3rd June 2015
Wednesday 7:55 am
24241 spacer
>>24240

Svchost is a shared process used by various DLLs. You need to look under the "services" tab.
>> No. 24243 Anonymous
3rd June 2015
Wednesday 8:16 am
24243 spacer

fuckyouacer9.png
242432424324243
>>24241
Never mind, I found how to do it, but the issue is that I don't know which one was causing the issue to begin with since it moved down the list after it stopped hoovering up all my RAM, and it got mixed up with all the other svchosts.

I am a tiny bit sure it could be this one, so I clicked services for it, and these are what turned up. On the surface, to me and my untrained eyes, they don't seem bad. They seem like legitimate processes and services. So smartlads, what do you lot think?
>> No. 24244 Anonymous
3rd June 2015
Wednesday 10:50 am
24244 spacer
Maybe Windows Search Indexing service thingy. You can disable that.
>> No. 24245 Anonymous
3rd June 2015
Wednesday 3:59 pm
24245 spacer
>>24244
Which one is that?

Lads? Anyone?
>> No. 24246 Anonymous
3rd June 2015
Wednesday 4:11 pm
24246 spacer
Can you see trustedinstaller.exe running? It checks your system for what updates are needed. You can disable it in services and set updates to manual.
>> No. 24252 Anonymous
3rd June 2015
Wednesday 4:41 pm
24252 spacer
>>24240
To more reliably identify the process in Task Manager, you'll want to click View, Select Columns and tick PID (Process Identifier).
>> No. 24253 Anonymous
3rd June 2015
Wednesday 8:59 pm
24253 spacer
>>24211

what scans have you run? have you run walware bytes?
https://www.malwarebytes.org/
>> No. 24262 Anonymous
4th June 2015
Thursday 11:17 pm
24262 spacer

fuckyouacer13.png
242622426224262
I didn't have to wait long this time around. It happened again, but I documented everything I could this time around, and here it is. So lads please, what is doing it?
>> No. 24263 Anonymous
4th June 2015
Thursday 11:25 pm
24263 spacer
>>24262

I'm not an expert on this but if I was in your position, I'd consider trying Hijack This then looking for one of those forums with a lot of users adept at analysing the logs.
>> No. 24264 Anonymous
5th June 2015
Friday 3:03 am
24264 spacer
>>24262

Looks like some kind of automated cp distributor.
>> No. 24265 Anonymous
5th June 2015
Friday 3:24 am
24265 spacer
>>24262
At a guess, BITS could be shovelling shitloads of data for an update or something.
>> No. 24266 Anonymous
5th June 2015
Friday 7:29 am
24266 spacer
>>24265
Bits and Vids finished ages ago, ninetieslad.
>> No. 24267 Anonymous
7th June 2015
Sunday 10:52 am
24267 spacer
>>24262

According to google, it seems like it's very common for svchost.exe to suck up a lot of memory. Here

http://www.sevenforums.com/performance-maintenance/338326-svchost-exe-high-memory-usage-startup.html

I think they're basically saying it's like a vague banner for a lot of processes and break it down more by using Process Explorer.
>> No. 24268 Anonymous
7th June 2015
Sunday 7:50 pm
24268 spacer
>>24243
>>24267
It's already been established that it's a Windows service eating memory for OP. Process Explorer can't help further as memory use of individual services under an svchost.exe isn't exposed.

If it's consistently the same services under svchost.exe with high memory usage then OP could try either:
- Stopping those services under the svchost.exe showing high memory usage in services.msc and checking for a large decrease in memory use, although that may break the system depending on which services they are, and perhaps some bad services won't release memory when stopped.
- The definitive option: configuring each service from the svchost.exe showing high memory to run in an individual process with 'sc.exe config (ServiceName) type=own' then restarting them all (or just rebooting) which can then show which service is responsible, as each suspect service would have a single process that can be monitored in Process Explorer. It would be wise to keep track of which service config options have been changed if OP takes that route, to undo them afterwards.
>> No. 24272 Anonymous
9th June 2015
Tuesday 5:15 am
24272 spacer

fuckyouacerfinal.png
242722427224272
Thanks lads.

I think I cracked it. Only took my nine days. Anyway, I took a screenshot of services running for PID:532 when it wasn't going mental, and compared it to when it started eating up my memory. I took an informed guess a wild guess and disabled the Windows Update service (wuauserv) and immediately it stopped eating up all my RAM. I started researching a bit to find out if disabling this service would fuck my laptop up, but so far I didn't find anything to worry about. Maybe you lads know more about it, if you do, please share. I guess I will manually update it every now and again from now onwards.

I really like troubleshooting, and trying to find solutions to problems. More than I thought I did. I really enjoyed this. Thanks lads.
>> No. 24278 Anonymous
9th June 2015
Tuesday 2:12 pm
24278 spacer
>>24272

>I really like troubleshooting, and trying to find solutions to problems. More than I thought I did. I really enjoyed this. Thanks lads.


A fulfilling career awaits you in the wonderful world of IT!*

*Career may not be fulfilling. Wonderfulness may vary. Terms and conditions apply.
>> No. 24279 Anonymous
9th June 2015
Tuesday 2:15 pm
24279 spacer
>>24278
not him but this is why I cling onto my ambition of 'doing that computers stuff'. Few things give me as much fulfilment as spending hours trying to solve a problem and finally having a light bulb moment. You just want to tell the world how over the fucking moon you are.

I miss it.
>> No. 24280 Anonymous
9th June 2015
Tuesday 4:27 pm
24280 spacer
>>24279

If you're self-motivated, it really isn't that hard to get into the industry. There's a crippling shortage of skilled techies, and a massive surfeit of people with a suitable degree but no practical skills.

Try taking a few courses on Udacity or Coursera, try out the challenges on Codewars or Topcoder, do a few personal projects. Once you've got a bit of experience under your belt, have a look at the freelance gigs on Upwork or Elance. It's absolutely possible to establish a career in tech just by tinkering with things in your spare time.
>> No. 24281 Anonymous
9th June 2015
Tuesday 5:05 pm
24281 spacer
On the topic of the IT industry, I've been looking at FDM group. Seems quite polished and all but then I discovered they want you to do three to four months unpaid training and then remain there for two years afterwards or foot the bill for aforementioned unpaid training.
>> No. 24282 Anonymous
9th June 2015
Tuesday 5:10 pm
24282 spacer
>>24281
Those terms don't sound like anything a reasonable person should be considering.
>> No. 24283 Anonymous
9th June 2015
Tuesday 5:47 pm
24283 spacer
>>24282
My thoughts exactly.
>> No. 24284 Anonymous
10th June 2015
Wednesday 3:11 am
24284 spacer
>>24278
It was fulfilling when I worked in an internet cafe and people used to bring their laptops and I had to figure out what was wrong with it, etc.

I know it sounds simple, but one of my dreams is buying a garage somewhere, and just repairing cars and other motorised vehicles. It probably is not a good career choice, and nobody can probably make good money off it, but I will try to do it at some point. Offices, papers, insufferable people, etc, it poisons me slowly into depression.
>> No. 24285 Anonymous
10th June 2015
Wednesday 10:56 am
24285 spacer
>>24284
>Offices, papers, insufferable people, etc
If you think that working in IT will mean not having to deal with all of these then you're likely to be in for a rude awakening.
>> No. 24286 Anonymous
10th June 2015
Wednesday 1:17 pm
24286 spacer
>>24285
IT: Failing to deliver on promises since 1975.
>> No. 24470 Anonymous
12th August 2015
Wednesday 5:03 pm
24470 spacer
Its probably windows update.
>> No. 24471 Anonymous
12th August 2015
Wednesday 5:07 pm
24471 spacer
>>24272
See this and make sure the listed updates are installed, I used to see this problem all the time on clients computers.
>> No. 24472 Anonymous
12th August 2015
Wednesday 5:08 pm
24472 spacer
>>24471
Forgot link https://social.technet.microsoft.com/Forums/windows/en-US/4a782e40-bbd8-40b7-869d-68e3dfd1a5b4/windows-update-scan-high-memory-usage

Return ]
whiteline

Delete Post []
Password