System Slowing down after medium-long session

[Pauuuuulix]

Hello community,
time to time happens that my whole windows( and everything else that could) slows down and any kind of tasks are very painful to complete. Even writing becomes very laggy.
Usually I'm in the middle of gaming and have a lot of apps opened.I try finishing what's unfinfished and close everything(usually at this step I restart my computer). By checking task manager I can see memory used at 99%. Last time I was curios how slow can everything finally turn(since it slowed even more down with time) and after about 15 mins cpu usage hopped to 100%. Then both my screens turned black(only mouse cursor didn't disappear) and I had to hard shut down my computer by the physical button. So far the only solution to this has been restarting the computer. Any solutions are welcome!

Mobo: Gigabyte GA-Z97X-GAMING 3
CPU: Intel® Core i5-46903.5GHz
RAM: Crucial Ballistix 8GBDDR3 1866MHZ Kit Of 2
GPU: MSI GTX 780 Twin Frozr IV
Storage: Samsung 850 EVO 250gb(windows on it and some apps), WD Black 1TB 7200RPM PSU: Enermax ATX 2.3 Revolution X't 730W
Plus, Windows 10 Enterprise 64bit

 

[HEXiT]

figure out whats using all the memory and kill it.

 

[Pauuuuulix]

Well that's the funny part, I had all the programs closed, only task manager opened. Any of background processes or windows ones didn't use more memory than usually.

 

[filippi]

check for malware?

 

[Pauuuuulix]

Don't have any as much as I know. I only install apps I really need, no random junk. Bitdefender also running if that counts as malware detecter.

 

[HEXiT]

mate if your cpu is jumping to 100% usage for no reason then something is running in a way it shouldnt.

check task manager and make sure your cpu is idling , then check performance to see what mem is being allocated.
for win 10/8 and 7 that will be about 1.2 gigs-1.8 gigs depending on whats running.

if its substantially more than that say 3+ gigs at boot time and nothing is running as far as you can tell then its likely your a.v missed something.
a couple of things you can try.

run msconfig from the run bar. select basic startup and restart. are you using less mem? if so then what ever the issue is is likley to do with something auto starting at boot time.
so check your startup entries witrh ccleaner and disable everything apart from your driver control panels, mouse, keyboard panels and your av.
everything else should be set to off.
close ccleaner.
load up msconfig again and set it back to normal startup.

reboot the machine and see if its working properly...

if not. download hijack this and post the results of a scan...
http://sourceforge.net/projects/hjt/ <- official download link.

 

[Pauuuuulix]

Well if it finally hops to 100% then there's couple of seconds left and then blackout. Most of the time computer works perfectly but suddenly when in the middle of gaming(that has goning on for quite some time) or something like that the problem starts.
At boot time 1.4 Gb was used and cpu was idling.
No, I am using fully 8Gigs of my memory.
Disabled things with Ccleaner.
Soon comes the hijack scan result.

 

[Pauuuuulix]

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 23:33.34, on 05.01.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Unable to get Internet Explorer version!


Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
C:\Program Files (x86)\Razer\InGameEngine\32bit\RazerIngameEngine.exe
C:\Users\Paul Erik Olli\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\RzCefRenderProcess.exe
C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
C:\Users\Paul Erik Olli\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\java\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\java\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Razer Synapse] "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Paul Erik Olli\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Paul Erik Olli\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Paul Erik Olli\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Paul Erik Olli\AppData\Local\Microsoft\OneDrive\17.3.5892.0626] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Paul Erik Olli\AppData\Local\Microsoft\OneDrive\17.3.5892.0626"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: Killer Network Manager.lnk = ?
O4 - Global Startup: SteelSeries Engine 3.lnk = C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Digital Wave Update Service (DigitalWave.Update.Service) - Digital Wave Ltd. - C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Teenus Google'i uuendus (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Teenus Google'i uuendus (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Bitdefender Antivirus Free Edition (gzserv) - Bitdefender - C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Qualcomm Atheros Killer Service V2 - Qualcomm Atheros - C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
O23 - Service: Razer Chroma SDK Service - Razer Inc. - C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe
O23 - Service: Razer Game Scanner (Razer Game Scanner Service) - Unknown owner - C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 10358 bytes

NB: I ran this as administrator because it was popping up a report.

 

[HEXiT]

well theres nothing that immediately stands out... although chrome is there and 1 of its past bugs was chewing up memory...

hmmm...
have you tried running process explorer.exe

https://technet.microsoft.com/en-us/sysinternals/processexplorer.aspx

it might show something that task manager is missing.

also can you post a couple of screens with your task manager open showing the running processes. please do it bear bones with no browser active in the background. also 1 of the performance tab.

 

[Pauuuuulix]

Didn't find anything extrordinary with explorer.exe.
I had turned my computrer on just a hour ago so quite fresh start. May this isseue be Windows's fault? Like windows background processes pile up and at one moment there are just too much of them and everything stops working?

Task manager pics:
https://gyazo.com/a22774d22c70ffbc1391d11846e41d02
https://gyazo.com/19264d053c2cf66f859ef3899b43d6df
https://gyazo.com/239956b256f7fa3df800a02a8f4822b6
https://gyazo.com/acdd3f11984204472053be22cbfe0635
NB: I did shut down razer heatmaps (RzrStatsManager in task manager), it was taking about 25mb

 

[HEXiT]

mate your ram usage is sitting at 1.8gigs used so thats normal. so yeah everything im seeing says your system is working normally.

so now im guessing this is user error... try closing down some of the apps your running while gaming. things like chrome for instance can eat up huge amounts of memeory while doing very little. and each time you open a tab it uses more. so close that down, if open.

 

[Pauuuuulix]

Well since you were the most helpful person I'll give you trhe best solution trophy.

Looks like there is no other solution than just keeping open only the main apps. Still funny why it was still slow after closing all apps. But then again, the seconds that takes to restart my computer I can count on my fingers, thanks to SSD. So restarting is not a big issue.

Thanks for the professional help and have a nice day!

 

[HEXiT]

mate you shouldn't have to restart just because your system is slowing. thats not a fix. obviously something is causing an issue.
the pics you have shown me, indicate a system running smoothly. take the same set of pics when it starts to chug.

also try increasing your page file to 4096MB

if you still get no change. disconnect from the wireless if you use it and connect a wire.
try disabling the M.S. shadow copy service.
go into folder options under the view tab and set to thumbnails only.
disable all the telemitry gathering stuff with an app like spybot antibeacon.
https://www.safer-networking.org/spybot-anti-beacon/

lastly clean your registry (use the ccleaner multiple times till you get no more errors).
reboot and hope for the best.

 

[Pauuuuulix]

I found out my page filke size is at 6400mb, should I decrease it?
Have no wireless things.
Disabled M.S shadow copy service.
Thumbnails only set.
All telemitry gathering stuff is disabled.
Registry cleaned with ccleaner, had to do it 3-4 times.
Reboot: to be done.
Okay then, I hope I will have this issue no more. If I do then I'll let you know under the same topic.

And last but not least,
Thank You!

 

[HEXiT]

as a final suggestion i would run sfc/scannow from an elivated comand prompt. it will scan windows and repair anything that may be corrupt.
try using a mem cleaner. http://www.koshyjohn.com/software/memclean/
its a basic tool that will free up any unused memory.

if thats still not the job done.
all i can suggest is you start monitoring and logging events.

 

[Pauuuuulix]

Sadly the problem is not lost. I recently encountered the same problem again. This time i was just using google chrome and iTunes. I left my room to get the printed out document from printer and after i came back everything was hella slow. Even the pop-up noise of entering USB was laggy.

I found out the problem is not lost even a little earlier because time to time I check task manager and the RAM usage just goes up with time. What I am doing doesn't matter, just time. And if it is closing to 95% it is better to restart computer because it is slowly beginning to turn laggy. It wasn't that big of a problem before but it feels like the time I am able to use computer before restarting is shortening.
I am very concerned and if there's no other way then maybe reinstallation of windows helps.

 

[Pauuuuulix]

Is there anything to be done besides windows reinstall?

 

[HEXiT]

othere than finding out which app is leaking memory theres not a lot you can do...

 

[Pauuuuulix]

Task manager isn't showing anything that drains the memory. The memory strangely just disappears to whatever source. I should plan reinstalling the windows then, I am quite sure it is some kind of windows's own thing.

 

[Pauuuuulix]

https://gyazo.com/aeebb50e98c494c3ebffa6b50282ad8b
No apps opened and at 63% of usage, isn't that strange? And the longer I use the computer the higher it gets.

 

[HEXiT]

not really a good pic mate.
move the status bar over slightly so you can see the full names and values.
take a pic at the start of a session and 1 when the session slows down to almost a stop. both showing what are runing and how much ram there using.

but looking at it, unless you have an absolutely massive set of processes running under 4mb each hiding at the bottom (dont worry i know you havent). im starting to think malware.


have you tried the basics like malwarebytes and a top tier a.v.?

couple more questions. are you on wireless a pci-e card.
are you on a shared network?

 

[Pauuuuulix]

I am not using a wireless pci-e card. I am in shared network, besides there can be 1-2 computers using the internet sometimes, but they are primarly just web-browsing. The internet is 10 Mbit/s down and up aswell if that is important. I just installed malwarebytes and it found 2 "threats" which are related to Windows NT(atleast I think so and I "Removed selected" now), here are the results:
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 19.01.2016
Scan Time: 15:39
Logfile:
Administrator: Yes

Version: 2.2.0.1024
Malware Database: v2016.01.19.03
Rootkit Database: v2016.01.09.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 10
CPU: x64
File System: NTFS
User: Paul Erik Olli

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 345458
Time Elapsed: 3 min, 0 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 2
PUP.Optional.AmiUpdater, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\amiupdaterExd, , [2e516bd0c0d91422f2ece0cb26dd23dd],
PUP.Optional.AmiUpdater, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\amiupdaterExi, , [ee912f0c4653ec4afee0812a00033ec2],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)
Better pictures of task manager coming soon.

 

[Pauuuuulix]

Pictures:
https://gyazo.com/d89323f2935113bde6a6c11cf0c0db11 - after the startup (no apps opened atm)
https://gyazo.com/0c297f1096b769d73466a90fc39bcf27 - after 5-6 hours of mainly creating presentations, tect documents and web surfing (no apps opened atm)
For me it is a big mistery how the RAM disappears. The applications are taking pretty much the same amount of memory in both pictures.
EDIT: Resource monitor: https://gyazo.com/ecf2911db59a797afe9c3ca03fc18d27

 

[HEXiT]

yeah mate i had a look at the pics and apart from the new additions of bitdefender and mbam nothing is different.
razor snaps is using the same amount of ram as it was in the beginning and is pretty much at the top of the list in ram usage.
so what ever is chewing up the memory is hidden.

knowing what it was that got removed would have been useful mate.
open the quarantine folder in mbam (malwarebytes) and list the suspect entries.

as you found something scan with bitdefender (update to the latest databases befor you scan)
again list anything found.

 

[Pauuuuulix]

Sorry, I thought you noticed the full names of the files in my earlier long post with the scan results.
The removed items: https://gyazo.com/ddbd56cf2a1e5a769183ee4f97f717c9
Scan with bitdefender: https://gyazo.com/9cc5a2301de7d060aec107bef0ed32e1
I also scanned my D drive (HDD), nothing from there. As you can see from the picture, above there are 65 infected items detected but below it says Scan results: no infected items have been found. Should it be in that way?