Win10 Security Audits

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • SunnySydeRamsay
    PCHF Member
    • Mar 2020
    • 16

    #1

    Win10 Security Audits

    Hey yโ€™all,

    I have a copy of Win10 Education build 18363. Occasionally my computer mostly locks up for a period of 30-60 seconds; by mostly I mean it tends to make loading new webpages impossible, live video streaming websites such as twitch tend to stop buffering the video while the chat function continues to work just fine, most applications either functioning incorrectly or stop responding altogether (refreshing a webpage on Chrome for example will lead to a โ€œwaiting for cacheโ€ message in the lower left, most other applications just hard lock), and the OS tends to just stop responding (canโ€™t open start menu, taskmgr, etc.). Everything goes back to normal after 30-60 seconds; it just acts like a bunch of processing power was suddenly released.

    Iโ€™ve never noticed any CPU usage spikes in the times Iโ€™ve already had taskmgr open in the background and checked the performance tab afterwards (I donโ€™t recall disk activity, Iโ€™ll check again when it happens). The only thing Iโ€™ve been able to identify in eventvwr logs are security audits that seem to trigger this lockup based on timestamps of the audits occurring. There tends to be dozens of audits occurring at the same time.

    The machine is not attached to any enterprise domain/isnโ€™t supported by any organization, so shouldnโ€™t (I wouldnโ€™t think) be related to that.

    Thoughts? Iโ€™ll post fresh logs when it occurs again.

    Thanks!
  • phillpower2
    PCHF Administrator
    • Sep 2016
    • 15206

    #2
    Hello SunnySydeRamsay,

    As per forum rules regarding the legitimacy of a members software, can I ask how you come to have an OS that is intended for places of learning on a personal computer, such an OS is the responsibility of the admin of the IT department to whom the software is licensed and we are not allowed to go anywhere near it due to the risk of a lawsuit.

    Comment

    • SunnySydeRamsay
      PCHF Member
      • Mar 2020
      • 16

      #3
      Certainly, I was a computer science student at Portland State University, and the computer science/engineering college allowed access to a whole bunch of Microsoft gimmicks like 365, azure, cloud computing, etc. I donโ€™t remember what it was exactly but it was a Microsoft site authenticated via third-party SSO (third-party being my college computer account credentials), and that site provided a bunch of stuff, one of those things being a Win10 education key.

      If yโ€™all need evidence the license Iโ€™m using is genuine Iโ€™d be happy to provide it, but I built the machine myself back in 2015 and the machine isnโ€™t enrolled in the universityโ€™s SCCM, and has never received a university image, so nothing is owned by the university if thatโ€™s also a concern, though Iโ€™m not sure how Iโ€™d be able to definitively prove the latter unless you have suggestions.

      Comment

      • SunnySydeRamsay
        PCHF Member
        • Mar 2020
        • 16

        #4
        [ATTACH type=โ€œfullโ€]6447[/ATTACH]

        Comment

        • phillpower2
          PCHF Administrator
          • Sep 2016
          • 15206

          #5
          Thanks for the updates, we have to check as there are so many people that think it is acceptable to use cracked or unlicensed software and they then have the nerve to act all offended when it is explained to them that we are unable to help.

          Couple of things for you to do;

          [COLOR=rgb(226, 80, 65)]If the computer is a desktop can you post the brand and model name or number of the power supply (PSU).

          (1) Download then run Speccy (free) and post the resultant url for us, details here, this will provide us with information about your computer hardware + any software that you have installed that may explain the present issue/s.

          To publish a Speccy profile to the Web:

          In Speccy, click File, and then click Publish Snapshot.

          In the Publish Snapshot dialog box, click Yes to enable Speccy to proceed.

          Speccy publishes the profile and displays a second Publish Snapshot. You can open the URL in your default browser, copy it to the clipboard, or close the dialog box.

          (2) Download MiniToolBox and save the file to the Desktop.

          Close the browser and run the tool, check the following options;

          Flush DNS
          Report IE Proxy Settings
          Reset IE Proxy Settings
          Report FF Proxy Settings
          Reset FF Proxy Settings
          List content of Hosts
          List IP Configuration
          List Winsock Entries
          List last 10 Event Viewer Errors
          List Installed Programs
          List Devices (Only Problems)
          List Users, Partitions and Memory size

          Click on Go.

          Post the resulting log in your next reply for us.[/COLOR]

          Comment

          • SunnySydeRamsay
            PCHF Member
            • Mar 2020
            • 16

            #6
            I used to be a helper on the forum on a different when I was in high school almost 10 years ago so I get it 100%

            Hmmโ€ฆ for some reason Speccy is no longer able to analyze my storage or audio components, seems to be stuck at analyzing, thus itโ€™s not letting me generate a snapshot. I can go through each subsection and post screencaps if thatโ€™s helpful? Storage is a 1TB Samsung 860 EVO SSD connected via SATA.

            If my PC Part Picker list is accurate, I should have an EVGA 430W 80+ installed for my PSU.

            [ATTACH type=โ€œfullโ€]6453[/ATTACH]

            MTB log attached.

            Thanks!

            Comment

            • phillpower2
              PCHF Administrator
              • Sep 2016
              • 15206

              #7
              Windows is shown to have a couple of issues the most concerning being the failed updates followed by shadow copy problems, we will check the HDDs health first, it doesnt take as long as the next test which is only worthwhile doing if the HDD is shown to be in good order.

              Download and run CrystalDisk info standard edition from here

              Run the program, grab any screenshots and attach to your next reply for us.

              To capture and post a screenshot;

              Click on the ALT key + PRT SCR key..its on the top row..right hand side..now click on startโ€ฆall programsโ€ฆaccessoriesโ€ฆpaintโ€ฆleft click in the white area โ€ฆpress CTRL + Vโ€ฆclick on fileโ€ฆclick on saveโ€ฆsave it to your desktopโ€ฆname it something related to the screen your capturingโ€ฆ BE SURE TO SAVE IT AS A .JPG โ€ฆotherwise it may be to big to uploadโ€ฆ after typing in any response you haveโ€ฆ click on Upload a File to add the screenshot.

              Screenshot instructions are provided to assist those that may read this topic but are not yet aware of the โ€œhow toโ€.

              Comment

              • SunnySydeRamsay
                PCHF Member
                • Mar 2020
                • 16

                #8
                Final output
                [ATTACH type=โ€œfullโ€ alt=โ€œ1590269007067.pngโ€]6460[/ATTACH]

                Comment

                • phillpower2
                  PCHF Administrator
                  • Sep 2016
                  • 15206

                  #9
                  Sorry but you have run the wrong thing;
                  Originally posted by phillpower2
                  Download and run [COLOR=rgb(226, 80, 65)]CrystalDisk info standard edition from here
                  [/COLOR]
                  [COLOR=rgb(226, 80, 65)]
                  You have run Benchmark while we asked for Info.[/color]

                  Comment

                  • SunnySydeRamsay
                    PCHF Member
                    • Mar 2020
                    • 16

                    #10
                    Apologies for the wrong logs!

                    At this point I think Iโ€™m just gonna do an OS reinstall and drop money on a Win10 pro key if the education edition keeps giving me issues; currently also unable to run certain things in my Adobe suite and now some games arenโ€™t installing.

                    Thanks for the help attempted!

                    Comment

                    • phillpower2
                      PCHF Administrator
                      • Sep 2016
                      • 15206

                      #11
                      Could be due to limitations of the education software but at the same time it could be a hard drive issue, post the correct screenshot and we will be able to check the latter, you don`t want to risk trying a clean install only to find out that the HDD is failing.

                      Comment

                      • SunnySydeRamsay
                        PCHF Member
                        • Mar 2020
                        • 16

                        #12
                        Iโ€™ll follow up on this in a day or two.

                        Comment

                        • phillpower2
                          PCHF Administrator
                          • Sep 2016
                          • 15206

                          #13
                          (y)

                          Comment

                          • phillpower2
                            PCHF Administrator
                            • Sep 2016
                            • 15206

                            #14
                            Any update for us?

                            Comment

                            • SunnySydeRamsay
                              PCHF Member
                              • Mar 2020
                              • 16

                              #15
                              Sorry!

                              [ATTACH type=โ€œfullโ€ alt=โ€œ1591031573439.pngโ€]6494[/ATTACH]

                              Also have a dead hard drive in the machine I havenโ€™t had a chance to remove yet, unrecognized by Windows/canโ€™t initialize.

                              [ATTACH type=โ€œfullโ€ alt=โ€œ1591031660041.pngโ€]6495[/ATTACH]

                              Comment

                              Working...