<div>
Is Windows updating?<br />
More likely scan for viruses with Windows Defender and Malwarebytes
</div>


<div>
I will check updates...he is running MBAM Premium I saw nothing in Quarantine.
</div>


<div>
Look in Task Manager, sort by CPU , and see what process is bogging down the CPU
</div>


<div>
Updates were good as of this morning...found an update tonight, downloading. &nbsp;JPG image was sorted by CPU...here is the most recent.<br />
<a href="https://filedb.experts-exchange.com/incoming/2018/04_w17/1305009/CPU-useage-2.jpg" target="_blank" title="CPU usage 2 (210 KB)"><img alt="CPU usage 2" class="file-block lazyload" style="max-width: 625px;" data-src="https://filedb.experts-exchange.com/incoming/2018/04_w17/1305009/CPU-useage-2.jpg" /></a>
</div>


CPU-useage-2.jpg

<div>
goto assist also seems to be a major culprit
</div>


<div>
That is not a Windows 10 app so uninstall it and test again
</div>


<div>
Hey David and John...GoToAssist is my remote connection...this was all happening before I connected. My end shows GoToAssist at between 0 and .3%.
</div>


<div>
Three things then,<br />
<br />
1. Ask your client to stop Go to Assist, wait a minute and capture CPU usage again.<br />
<br />
2. Below Go to Assist there are a bunch of items in the 10% range. All zero on my machine. <br />
<br />
3. See if Windows Defender is running (system tray and may be in the Up Arrow in the system tray). If it is, run a full scan with Windows Defender. If WD is running, try turn MBAM real time scanning OFF to avoid AV conflicts.<br />
<br />
In a properly running machine, CPU should run &lt;5% more than 95 % of time.
</div>


<div>
1. His CPU usage was maxing out without me connected, which I why he contacted me. <br />
<br />
2. I agree, they are all zero on my machine as well.<br />
<br />
3. He does have Bit Defender running as well...I have never had an issue with MBAM and WD conflicting...happy to turn MBAM off for testing if needed though. I think BD is overkill. I will stop that as well.<br />
<br />
He needs to do a restart to finish the Windows Update.<br />
<br />
Done for the night...I will check back in the morning...thanks for your assistance!
</div>


<div>
One stuck out at me: suoerfetch. While not strictly &quot;malware&quot; &nbsp;where there is one borderline suspect program, there are ten you don't see.<br />
<br />
Antivirus programs are good at stopping infections (good &nbsp;not great.) But are bad at finding them if already infected. The infections just have too many ways to hide.<br />
<br />
Wipe and install is usually the only option. This doesn't feel like a normal minor fixable issue.
</div>


<div>
Does it happen immediately after reboot or after you start to run apps?
</div>


<div>
We need a screenshot of task manager without you being connected, without GoTo assist.
</div>


<div>
why does he needs settings to be open?<br />
also - suggest him to close the apps he does not use regularly
</div>


<div>
Also check Startup items and disable all you don't need.
</div>


<div>
I think SuperFetch is a Windows app. It is on my machine but runs at zero (near enough).<br />
<br />
I, too, am waiting the update on Viruses and AV tools.
</div>


<div>
Good Morning...before reading your added suggestions &nbsp;- Hello everyone - I use msconfig to set his computer to start in safe mode with only my service check however I discovered that BitDefender will not allow me to turn off it's services.<br />
<br />
It will be difficult for me not to be connected as he is deaf and not close.<br />
<br />
Here is the new screen<br />
<a href="https://filedb.experts-exchange.com/incoming/2018/04_w17/1305363/CPU-useage-3.jpg" target="_blank" title="CPU-useage-3.jpg (212 KB)"><img alt="CPU-useage-3.jpg" class="file-block lazyload" style="max-width: 703px;" data-src="https://filedb.experts-exchange.com/incoming/2018/04_w17/1305363/CPU-useage-3.jpg" /></a>
</div>


CPU-useage-3.jpg

<div>
I am not sure what version of Bit Defender. Here are some BD suggestions for turning it off. <br />
<br />
<a href="https://www.bitdefender.com/consumer/support/answer/3347/" rel="ugc">https://www.bitdefender.com/consumer/support/answer/3347/</a><br />
<br />
Consider uninstalling it (at least temporarily).
</div>


<div>
He was getting crazy high CPU output without me connected...would you need me to take off my service...this has never happened before and I've been using GoToAssist for years. Looking at one of my computers now with GoToAssist connected.
</div>


<div>
Thanks John...already did that...I will check with him...he is not at his computer yet.
</div>


<div>
Probably all of Bit Defender, MBAM and Windows Defender are running real time. I think that need to be resolved first.
</div>


<div>
Able to turn off MBAM and WD...need to check with him about BD.<br />
<br />
Windows updates were all successfully installed.
</div>


<div>
tested CPU usage for GoToAssist on another computer - 3%
</div>


<div>
Write him: open task manager, go to the details tab, sort by the cpu usage column. Press Alt-Gr and Print together so that task manager's screen is now in clipboard. Paste into a mail and send to you. That's all we need.
</div>


<div>
Will do, asap. Used Revo to remove BitDefender...didn't remove it completely. Needing to do a system restore. First time I have had an issue with Revo...used it since he already had it installed.
</div>


<div>
Okay...got BD uninstalled...my latest CPU. <br />
<br />
<a href="https://filedb.experts-exchange.com/incoming/2018/04_w17/1305453/CPU-useage-4.jpg" target="_blank" title="CPU-useage-4.jpg (218 KB)"><img alt="CPU-useage-4.jpg" class="file-block lazyload" style="max-width: 737px;" data-src="https://filedb.experts-exchange.com/incoming/2018/04_w17/1305453/CPU-useage-4.jpg" /></a><br />
I disconnected and he is getting a fresh screen shot.
</div>


CPU-useage-4.jpg

<div>
First line SuperFetch: &nbsp;Is the Disk heavily fragmented (lots of disk activity). &nbsp;The user could run disk defrag but that could take an hour or two.<br />
<br />
Antimalware service belongs to Windows Defender and high cpu there means a Defender conflict. <br />
<br />
Either turn Defender off or MBAM off<br />
<br />
To turn Defender OFF &nbsp;Group Policy Editor (gpedit.msc) and restart the computer when done.<br />
<br />
Group Policy Editor:<br />
Computer configuration -&gt; Administrative Templates -&gt; Windows Components -&gt; Windows Defender<br />
Turn off Windows Defender &nbsp;(set to Enabled)<br />
<br />
Computer configuration -&gt; Administrative Templates -&gt; Windows Components -&gt; Windows Defender<br />
&nbsp;-&gt; Real-time protection<br />
Turn off Real Time Protection (set to Enabled)<br />
<br />
OK and exit out . Default setting is Not Configured<br />
<br />
Personally I would disable MBAM and use only Windows Defender.
</div>


<div>
I disagree with disabling MBAM...it has saved my butt several times and has never caused an issue running with WD.<br />
<br />
I believe MBAM was turned off when I looked at Task Manager's CPU<br />
<br />
I'll send him these instructions and be back in touch.<br />
Thanks!
</div>


<div>
<b>McKnife</b> -Press Alt-Gr and Print together...what is Gr??
</div>


<div>
He has run CCleaner, I will run it again...I have not manually removed temp files. I will check if he has been infected recently (had minor PUP last September) but will probably run other scans just in case. The next time I can be on his computer is tomorrow morning.
</div>


<div>
The Alt GR key is the key next to your space bar, on the right side of it.<br />
Your screenshot shows superfetch as the main suspect, turn off the service superfetch, for a test, in services.msc.<br />
<br />
And now let him make that screenshot, without superfetch and without Go To Assist.
</div>


<div>
Hey <b>McKnife</b> I think the Gr key on your keyboard is Fn on ours...at least I was able to get a screen shot that way. Thanks!
</div>


<div>
Okay...I ran HitmanPro - it found 3 suspicious files<br />
<br />
<a href="https://filedb.experts-exchange.com/incoming/2018/04_w17/1306102/HitmanPro.jpg" target="_blank" title="Hitman Pro screen shot (64 KB)"><img alt="Hitman Pro screen shot" class="file-block lazyload" style="max-width: 716px;" data-src="https://filedb.experts-exchange.com/incoming/2018/04_w17/1306102/HitmanPro.jpg" /></a><br />
Here is the log. Could be legit or a virus hiding. What do you think. HitmanPro is suggesting to ignore.<br />
<a href="https://filedb.experts-exchange.com/incoming/2018/04_w17/1306104/HitmanPro_20180426_1157.log" target="_blank" class="file-inline" title="Hitman Log (67 KB)"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M67.508 468.467c-58.005-58.013-58.016-151.92 0-209.943l225.011-225.04c44.643-44.645 117.279-44.645 161.92 0 44.743 44.749 44.753 117.186 0 161.944l-189.465 189.49c-31.41 31.413-82.518 31.412-113.926.001-31.479-31.482-31.49-82.453 0-113.944L311.51 110.491c4.687-4.687 12.286-4.687 16.972 0l16.967 16.971c4.685 4.686 4.685 12.283 0 16.969L184.983 304.917c-12.724 12.724-12.73 33.328 0 46.058 12.696 12.697 33.356 12.699 46.054-.001l189.465-189.489c25.987-25.989 25.994-68.06.001-94.056-25.931-25.934-68.119-25.932-94.049 0l-225.01 225.039c-39.249 39.252-39.258 102.795-.001 142.057 39.285 39.29 102.885 39.287 142.162-.028A739446.174 739446.174 0 0 1 439.497 238.49c4.686-4.687 12.282-4.684 16.969.004l16.967 16.971c4.685 4.686 4.689 12.279.004 16.965a755654.128 755654.128 0 0 0-195.881 195.996c-58.034 58.092-152.004 58.093-210.048.041z"/></svg>HitmanPro_20180426_1157.log</a>
</div>


HitmanPro_20180426_1157.log

HitmanPro.jpg

<div>
Malwarebytes' AdwCleaner just found a file called &quot;TOSTACK&quot;. I've never seen that before. Installed on 4/23/18 and research seems to point to malware? Thoughts?
</div>


<div>
What about what HitmanPro found...shall I ignore?
</div>


<div>
You should be able to delete what hitman pro shows you
</div>


<div>
I would only feel comfortable deleting if I knew it was a virus...do not want to make the system unstable. HitmanPro suggests to ignore.
</div>


<div>
I'll get that info David. Best way to get CPU temp?
</div>


<div>
Concerned about ending Superfetch...I get this message before ending the process<br />
<br />
<a href="https://filedb.experts-exchange.com/incoming/2018/04_w17/1306142/End-Task.jpg" target="_blank" title="End Task (131 KB)"><img alt="End Task" class="file-block lazyload" style="max-width: 746px;" data-src="https://filedb.experts-exchange.com/incoming/2018/04_w17/1306142/End-Task.jpg" /></a>
</div>


End-Task.jpg

<div>
SuperFetch if running probably does not need to be stopped. It runs fine for me.
</div>


<div>
K...let me see if I can jump on my clients computer...he is try to work.<br />
Thanks
</div>


<div>
John I was asked by <b>McKnife</b> to stop SuperFetch...to see if it made a difference in CPU usage.
</div>


<div>
SuperFetch causes NO issues on a machine that works properly so leave that until last to disable. Fix everything else first.
</div>


<div>
<b>David</b> here is the info requested<br />
Dell Inspiron 3656 Desktop<br />
Processor AMD FX-8800P Radeon R7, 12 Compute Cores 4C +8G 2.10 FHz<br />
Ram 16 GB<br />
64 bit system<br />
2 T Hard Drive Toshiba DT01ACA200<br />
<br />
<br />
Core Temp<br />
<a href="https://filedb.experts-exchange.com/incoming/2018/04_w17/1306153/Core-Temp.jpg" target="_blank" title="Core Temp (54 KB)"><img alt="Core Temp" class="file-block lazyload" style="max-width: 332px;" data-src="https://filedb.experts-exchange.com/incoming/2018/04_w17/1306153/Core-Temp.jpg" /></a>
</div>


Core-Temp.jpg

<div>
My client is having issues getting a screen shot...here is one with SuperFetch stopped but I am logged in. He is getting frustrated but am sending him instructions with a screen shot.<br />
<br />
<a href="https://filedb.experts-exchange.com/incoming/2018/04_w17/1306165/TM-with-SuperFetch-stopped.png" target="_blank" title="TM-with-SuperFetch-stopped.png (102 KB)"><img alt="TM-with-SuperFetch-stopped.png" class="file-block lazyload" style="max-width: 800px;" data-src="https://filedb.experts-exchange.com/incoming/2018/04_w17/800_1306165/TM-with-SuperFetch-stopped.png" /></a>
</div>


TM-with-SuperFetch-stopped.png

<div>
Just got your message John...we'll see how his machine behaves.
</div>


<div>
You have cleaned up some viruses (I think) and CPU is down 40 % . Target is 5 %.<br />
<br />
The systems eating up the 40% do not cause issues on my or client machines. <br />
<br />
Farther back I asked you / client to run Defrag. &nbsp;Was that done?
</div>


<div>
haven't had time...will do when I have access to his computer next. Thanks
</div>


<div>
Thanks for the feedback, we now know that it isn't memory or heat issues. Personally I would not have bought this computer for mainstream use. I would have bought an intel cpu'd Laptop and not a notebook. Doing your research before purchase is always advised. &nbsp;Even though it is only 3 years old the cpu benchmark is way under cpu's released 10 years ago. Until Ryzen appeared from AMD they were pretty much out of the competition as far as cpu performance was. One doesn't buy a go cart and expect lamborghini performance<br />
<br />
Surprised that it has a 3.5&quot; Hard drive notebooks normally have a 2.5&quot; Hard drive (glad that it is 7200RPM not 5400rpm (good choice)
</div>


<div>
That seems a reasonable desktop computer if set up properly<br />
<br />
<a href="https://www.cnet.com/products/dell-inspiron-3656-mt-a10-8700p-1-8-ghz-8-gb-2-tb-english-with-samsung-32-inch-led-tv-un32j4000-hdtv/specs/" rel="ugc">https://www.cnet.com/products/dell-inspiron-3656-mt-a10-8700p-1-8-ghz-8-gb-2-tb-english-with-samsung-32-inch-led-tv-un32j4000-hdtv/specs/</a><br />
<br />
Would your user be able to back up Everything (including email and documents) and do a fresh install of Windows?<br />
<br />
Tall order. Is the customer up to it?
</div>


<div>
John: you are comparing an 8700 vs what he has an 8800 cpu. &nbsp;These are notebook/laptop non user replaceable (almost a SOC system) &nbsp;cpu's in other words a go cart cpu. &nbsp;This cpu is only 83% of the performance of a cpu that was released 4 years earlier. <a href="https://www.cpubenchmark.net/compare/AMD-FX-8800P-vs-Intel-i5-2405S/2567vs795" rel="ugc">bench marks</a> other than replacing the system drive with an SSD he has what he has.. you can't make a silk purse out of a sow's ear.
</div>


<div>
I think the system description by Mags above was a Desktop computer &nbsp; <br />
<br />
Mags - can you clarify laptop or desktop?
</div>


<div>
My client says, &nbsp;&quot;it is now routinely below 20%, sometimes sitting around 0% for seconds at a time. &nbsp;I think that’s significant.&quot; This is with SuperFetch stopped and after some malware scans. I will find out how his computer performance is.<br />
<br />
He is having issues sending me a screen shot when I'm not on. He can do it while I am watching but that &quot;paste&quot; doesn't work when I'm not. I will check the WD files and get back to you.<br />
<br />
I still have some malware scans to run.
</div>


<div>
take a screenshot with the snipping tool - and attach the jpg to a mail
</div>


<div>
I'll ask him...not sure what his work schedule is...thanks <b>nobus</b>!
</div>


<div>
I am going to work on his computer tomorrow...until then.<br />
Have a great day!<br />
Mags
</div>


<div>
I have done a defrag, have run MBAM, SAS, CCleaner, AdwCleaner, HitmanPro and am now running RogueKiller. It too is finding issues. I have recommended to my client that we do a OS Refresh. He is considering it.
</div>


<div>
Thank you for all your help. His computer is running much better. If that changes we will to an OS Refresh.
</div>


<div>
<div class="content wysiwyg-content">
I have a client whos computer is slow as well as internet pages loading very slowly...he says he has to twiddle his thumbs (although his speed shows 170 mbps). His CPU usage is off the charts...see attached. He runs a lot of programs simultaneously. <br />
He says, &nbsp;&quot;Lately, it’s gotten intolerable, and is an impediment to getting any work done. <br />
My system has gotten very very slow. &nbsp;I have to wait and twiddle my thumbs while it opens a new website. &nbsp;Likewise, linking to another page is a very lengthy operation. &nbsp;When I look at Task Manager, CPU is near 100% at those times. The main culprits when I look at processes are WMI Provider Hosts for each browser. &nbsp;Service Host: Superfetch is another. &nbsp;Those processes tend to grow and gobble up all available CPU time, which slows everything else to a halt.&quot;<br />
<br />
He has 16 GB of ram, Windows 10. Thoughts?<br />
Mags<br />
<a href="https://filedb.experts-exchange.com/incoming/2018/04_w17/1305002/CPU-useage.jpg" target="_blank" class="file-inline" title="Task Manager - CPU useage (208 KB)"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M67.508 468.467c-58.005-58.013-58.016-151.92 0-209.943l225.011-225.04c44.643-44.645 117.279-44.645 161.92 0 44.743 44.749 44.753 117.186 0 161.944l-189.465 189.49c-31.41 31.413-82.518 31.412-113.926.001-31.479-31.482-31.49-82.453 0-113.944L311.51 110.491c4.687-4.687 12.286-4.687 16.972 0l16.967 16.971c4.685 4.686 4.685 12.283 0 16.969L184.983 304.917c-12.724 12.724-12.73 33.328 0 46.058 12.696 12.697 33.356 12.699 46.054-.001l189.465-189.489c25.987-25.989 25.994-68.06.001-94.056-25.931-25.934-68.119-25.932-94.049 0l-225.01 225.039c-39.249 39.252-39.258 102.795-.001 142.057 39.285 39.29 102.885 39.287 142.162-.028A739446.174 739446.174 0 0 1 439.497 238.49c4.686-4.687 12.282-4.684 16.969.004l16.967 16.971c4.685 4.686 4.689 12.279.004 16.965a755654.128 755654.128 0 0 0-195.881 195.996c-58.034 58.092-152.004 58.093-210.048.041z"/></svg>CPU-useage.jpg</a>
</div>
</div>


CPU-useage.jpg

I have a client whos computer is slow as well as internet pages loading very slowly...he says he has to twiddle his thumbs (although his speed shows 170 mbps). His CPU usage is off the charts...see attached. He runs a lot of programs simultaneously. 
He says,  "Lately, it’s gotten intolerable, and is an impediment to getting any work done. 
My system has gotten very very slow.  I have to wait and twiddle my thumbs while it opens a new website.  Likewise, linking to another page is a very lengthy operation.  When I look at Task Manager, CPU is near 100% at those times. The main culprits when I look at processes are WMI Provider Hosts for each browser.  Service Host: Superfetch is another.  Those processes tend to grow and gobble up all available CPU time, which slows everything else to a halt."

He has 16 GB of ram, Windows 10. Thoughts?
Mags

Slow computer and internet browser

Windows 10 is a personal computer operating system featuring the "universal application architecture" (UAP); apps can be designed to run across multiple devices with nearly identical code, including PCs, tablets, smartphones, embedded systems, Xbox One, Surface Hub and HoloLens. Windows 10 also includes a virtual desktop system, a window and desktop management feature called Task View, the Microsoft Edge web browser, support for fingerprint and face recognition login, voice-based search (Cortana), new security features for enterprise environments, and DirectX 12 and WDDM 2.0 to improve the operating system's graphics capabilities for games.