Logo

Fix NTOSKRNL.exe high CPU, Memory & Disk usage

This post will guide you in fixing high CPU, Memory, and Disk usage problems caused by NTOSKRNL.exe. NTOSKRNL stands for “NT Operating System Kernel. This file is a kernel image that is responsible for a lot of systems-based processes such as Hardware Virtualization, Process, and Memory. Aside from that, it is also the one that compresses the old pages of memory that reduces the overall amount of memory being used. If you notice that your computer is running slowly and you find that the NTOSKRNL.exe file is hogging your resources such as disk usage, CPU usage as well as memory usage, then read on as this post will guide you in fixing the problem caused by NTOSKRNL.exe.

Make use of the options given below to resolve the issues caused by NTOSKRNL.exe.

1] Scan your computer for potential malware

There might be a good chance that your computer might be infected with malware. And this malware might be associated with the NTOSKRNL.exe file and hence making it consume a lot of system resources. So, I would really recommend you to make sure that your Antivirus is up to date and then scan your computer with it specifically the C:/Windows/System32 folder because this is the location where the NTOSKRNL.exe file is located.

Option 1 – Put your computer in a Clean Boot State

The first thing you have to do is to put your computer in a Clean Boot State as this can help you in finding any incompatible programs that are causing the problem.

  • Log onto your PC as an administrator.
  • Type in MSConfig in the Start Search to open the System Configuration utility.
  • From there, go to the General tab and click “Selective startup”.
  • Clear the “Load Startup items” check box and make sure that the “Load System Services” and “Use Original boot configuration” options are checked.
  • Next, click the Services tab and select the “Hide All Microsoft Services” check box.
  • Click Disable all.
  • Click on Apply/OK and restart your PC. (This will put your PC into a Clean Boot State. And configure Windows to use the usual startup, just simply undo the changes.)
  • From there, start to isolate the problem by checking which one of the programs you installed recently is the root cause of the problem.

Once you’ve found any incompatible programs, you need to uninstall them. Refer to the steps below to do so.

  • In the search box, type in “control” and then click on Control Panel (desktop app) among the search results.
  • After that, select Programs and Features from the list which will give you a list of all the programs installed on your computer.
  • From there, look for the concerned program and select it and then uninstall it.

Note: If you have downloaded the app from the Windows Store, you can simply right-click on it from the application list and then uninstall it.

Option 2 – Update or rollback drivers

If the first option didn’t work for you, then it’s time to either update or roll back the device drivers. It is most likely that after you updated your Windows computer that your driver also needs a refresh. On the other hand, if you have just updated your device drivers then you need to roll back the drivers to their previous versions. Whichever applies to you, refer to the steps below.

  • Open the Devices Manager from the Win X Menu.
  • Then locate the device drivers and right-click on them to open the Properties.
  • After that, switch to the Driver tab and click on the Uninstall Device button.
  • Follow the screen option to completely uninstall it.
  • Finally, restart your computer. It will just reinstall the device drivers automatically.

Note: You can install a dedicated driver on your computer in case you have it or you could also look for it directly from the website of the manufacturer.

Option 3 – Try to run the DISM tool

If the first two options didn’t work, then running the Deployment Imaging and Servicing Management might. Using this built-in tool, you have various options such as the “/ScanHealth”, “/CheckHealth”, and “/RestoreHealth”.

  • Open the Command Prompt with admin privileges.
  • Then type in the following commands and make sure to hit Enter right after you type each one of them:
    • Dism /Online /Cleanup-Image /CheckHealth
    • Dism /Online /Cleanup-Image /ScanHealth
    • exe /Online /Cleanup-image /Restorehealth
  • Do not close the window if the process takes a while as it will probably take a few minutes to finish.

Option 4 – Try to stop the Runtime Broker process

The RuntimeBroker.exe or the Runtime Broker process is the one that monitors access to Windows APIs to make sure that the apps do not violate the core security of Windows. This process usually leaves a very small footprint. However, there are times when it consumes more resources than it’s supposed to and does not release memory after the work is done that results in a memory leak. As a result, it affects NTOSKRNL.exe which is why you have to stop the Runtime Broker process. To do so, refer to these steps:

  • Tap the Ctrl + Shift + Esc to open the Task Manager.
  • After opening Task Manager, go to the Processes tab and look for the Runtime Broker process.
  • Once you find it, check if it is using more than 15% of your memory. If it is, then you most likely have an issue with an app installed on your computer.
  • Select the Runtime Broker process and right-click on it and then click on the End Task option to end its process.

Option 5 – Try to run the Performance Troubleshooter

  • Tap the Win + R keys to open the Run dialog box.
  • Type “msdt.exe /id PerformanceDiagnostic” in the field and hit Enter to open the Performance troubleshooter.
  • Then click on Next to get started. Wait until the process is completed.

Option 6 – Try using the Windows Performance Toolkit

You can also use the Windows Performance Toolkit in finding the root cause of the problem. Just refer to the following steps to use this toolkit.

  • Search for “cmd” in the Cortana Search box and click on Command Prompt from the search results to open it.
  • Next, type in the command given below or copy and paste it and then hit Enter:

xperf -on latency -stackwalk profile -buffersize 1024 -MaxFile 256 -FileMode Circular && timeout -1 && xperf -d cpuusage.etl

  • After executing the command, wait for at least 60 seconds and then check the logs of the Windows Performance toolkit which is stored in a file named cpuusage.etl in the folder located at C:/Windows/System32. From there, you should see a list of all the causes of the System Resources being hogged.

Do You Need Help with Your Device?

Our Team of Experts May Help
Troubleshoot.Tech Experts are There for You!
Replace damaged files
Restore performance
Free disk space
Remove Malware
Protects WEB browser
Remove Viruses
Stop PC freezing
GET HELP
Troubleshoot.Tech experts work with all versions of Microsoft Windows including Windows 11, with Android, Mac, and more.

Share this article:

You might also like

FreeDownloadManager Removal Tutorial

Free Download Manager is a software program developed by FreeDownloadManager.ORG. According to the publisher:

This software downloads files and converts videos. Its features include integration with all browsers, support of downloads from RapidShare, BitTorrent support, adjusting traffic usage, resuming broken downloads, and adds BitTorrent support, flash video download, upload manager, portable mode, and remote control.

During setup, the program creates a startup registration point in Windows in order to automatically start when any user boots the PC. It adds a browser extension to help it cache files you are downloading over your browser. The software is designed to connect to the internet and adds a Windows Firewall exception in order to do so without being interfered with. It also hooks up to start automatically and cache every download even if it's turned off.

This software comes bundled with video converters that some anti-virus programs marked as malware and therefore it is considered a potentially unwanted program.

About Potentially Unwanted Applications

If you’ve ever downloaded freeware or shareware, odds are high that your computer can get installed with a bunch of unwanted programs. These unwanted applications, officially known as Potentially Unwanted Programs (PUPs), often come bundled with other software and install themselves on user’s computers without their knowledge. They might not look like computer viruses to some individuals, but they can create huge annoyances and lead to serious difficulties for users. It’s clear by its name – unwanted programs – but did not really constitute “malware” in the traditional sense. What makes a PUP different from malware is the fact that when you download one, you’re doing it with your approval – even though in most cases unconsciously and unwillingly. Nevertheless, there is no doubt that PUPs continue to be bad news for PC users as they can be incredibly detrimental to your computer in several ways.

How does unwanted software affect you?

Unwanted programs come in various forms. Usually, they could be found in adware bundlers that are known to use aggressive and deceptive advertising. The majority of bundlers install multiple adware applications from a number of companies, each of which has its own EULA policy. Safebytes Anti-Malware entirely eliminates this threat and safeguards your PC against PUP or adware infection. They will also come in the form of web browser extension add-ons and toolbars. Not just they needlessly fill up space on your computer screen, toolbars could also manipulate search results, keep an eye on your web browsing activities, decrease your internet browser’s efficiency, and slow down your net connection to a crawl. Potentially unwanted programs utilize aggressive distribution methods to get in your computer. They will often include things like information gathering code that will collect and send your private information to other companies. Due to this unwanted program, your application may freeze, your security protections may get turned off that can leave your computer susceptible, your system could get damaged, and this list goes on and on.

Tips to prevent PUPs

• Always read the license agreement and privacy statement. Don’t agree unless you understand exactly what you are acknowledging. • Always choose “Custom” or “Advanced” installation and don’t blindly click the Next button, which will allow you to uncheck any foistware software programs you do not want. • Install an ad blocker/pop-up blocker; Add anti-malware products such as Safebytes Anti-Malware. These applications could establish a wall between the computer and cybercriminals. • Be alert if you install freeware, open-source programs, or shareware. Nowadays ‘freeware’ is not really freeware – but ‘crapware’ bundling nonsense. • Always download software from trusted sources like official websites instead of untrustworthy sharing space. Avoid file-hosting sites wherever possible.

Can't Install Safebytes Anti-malware due to the presence of Malware? Do This!

Malware could cause plenty of damage to your PC. Some malware types modify browser settings by including a proxy server or change the PC’s DNS configurations. In these cases, you’ll be unable to visit certain or all of the internet sites, and thus not able to download or install the required security software to remove the infection. If you are reading this article, you may have got infected by malware that stops you from installing a computer security program such as Safebytes Anti-Malware. There are some fixes you can attempt to get around with this obstacle.

Get rid of viruses in Safe Mode

In the event the malware is set to load at Windows startup, then booting in safe mode should avoid it. Only minimal required programs and services are loaded whenever you boot your PC in Safe Mode. To launch your Windows XP, Vista, or 7 computers in Safe Mode with Networking, do as instructed below. 1) Tap the F8 key continuously as soon as your PC boots, however, before the large Windows logo appears. This would conjure up the Advanced Boot Options menu. 2) Choose Safe Mode with Networking using arrow keys and hit Enter. 3) Once you get into this mode, you should have an internet connection once again. Now, use your browser normally and navigate to https://safebytes.com/products/anti-malware/ to download and install Safebytes Anti-Malware. 4) Following installation, run a complete scan and let the software program remove the threats it discovers.

Obtain the anti-malware program using an alternate browser

Web-based viruses could be environment-specific, targeting a particular web browser or attacking particular versions of the web browser. In case you suspect that your Internet Explorer has been hijacked by a computer virus or otherwise compromised by online hackers, the most effective thing to do would be to switch to a different browser like Chrome, Firefox, or Safari to download your chosen computer security program – Safebytes Anti-Malware.

Run antivirus from your pen drive

Here’s yet another solution which is creating a portable USB antivirus software package that can scan your computer for malicious software without the need for installation. Try these simple steps to clear up your infected computer by using a portable antivirus. 1) On a virus-free PC, download and install Safebytes Anti-Malware. 2) Put the pen drive into the clean PC. 3) Double click on the downloaded file to open the installation wizard. 4) Choose the drive letter of the flash drive as the location when the wizard asks you where you want to install the antivirus. Follow the directions to finish the installation process. 5) Unplug the pen drive. Now you can utilize this portable anti-virus on the affected computer system. 6) Run the Safebytes Anti-malware directly from the USB drive by double-clicking the icon. 7) Click on “Scan Now” to run a scan on the infected computer for malware.

Features and Benefits of SafeBytes Anti-Malware

If you are looking to purchase anti-malware for your computer system, there are numerous brands and applications for you to consider. A few of them do a good job in getting rid of malware threats while some will ruin your PC by themselves. You must choose a product that has gained a good reputation and detects not only viruses but other kinds of malware too. Among few good programs, SafeBytes Anti-Malware is the strongly recommended software for the security-conscious user. SafeBytes anti-malware is a very effective and easy-to-use protection tool that is created for users of all levels of IT literacy. Once you’ve got installed this software program, SafeBytes superior protection system will make sure that no viruses or malware can seep through your computer. SafeBytes anti-malware provides an array of advanced features that sets it aside from all others. The following are some of the good ones: World-class AntiMalware Protection: Safebytes is made on the very best virus engine in the industry. These engines can detect and remove threats even during the early stages of a malware outbreak. Real-time Active Protection: SafeBytes provides complete and real-time security for your personal machine. It will monitor your personal computer for suspicious activity at all times and shields your PC from unauthorized access. Fast Multi-threaded Scanning: Safebytes Anti-Malware, using its advanced scanning engine, provides super-fast scanning that can immediately target any active online threat. Safe Web Browsing: Through its unique safety rating, SafeBytes notifies you whether a website is safe or not to access it. This will ensure that you’re always certain of your safety when browsing the online world. Lowest Memory/CPU Usage: This software is lightweight and will work silently in the background, and that does not have an effect on your PC efficiency. 24/7 Live Expert Support: You can obtain high levels of support round the clock if you’re using their paid software.

Technical Details and Manual Removal (Advanced Users)

If you wish to manually remove FreeDownloadManager without the use of an automated tool, it may be possible to do so by removing the program from the Windows Add/Remove Programs menu, or in cases of browser extensions, going to the browsers AddOn/Extension manager and removing it. You will likely also want to reset your browser. To ensure the complete removal, manually check your hard drive and registry for all of the following and remove or reset the values accordingly. Please note that this is for advanced users only and may be difficult, with incorrect file removal causing additional PC errors. In addition, some malware is capable of replicating or preventing deletion. Doing this in Safe Mode is advised.

The following files, folders, and registry entries are created or modified by FreeDownloadManager

Files: C:WINDOWSsystem32netmsg.dll C:DocumentsUserLocalTempfdminst.exe C:DocumentsUserLocalTempis-FJKMF.tmpfdminst.tmp C:WINDOWSsystem32msctfime.ime C:DocumentsUserLocalTempis-FN3E3.tmp_isetup_shfoldr.dll C:WINDOWSsystem32shfolder.dll C:DocumentsUserLocalTempis-FN3E3.tmpfdminno.dll C:DocumentsUserLocalTempis-FN3E3.tmpnsProcessW_modified.dll C:WINDOWSsystem32shell32.dll C:Documents and SettingsUserStart Menudesktop.ini C:Documents and SettingsUserStart MenuProgramsdesktop.ini C:WINDOWSRegistrationR000000000007.clb C:WINDOWSwin.ini Registry: HKEY_CURRENT_USERSoftwareCodeGearLocales HKEY_LOCAL_MACHINESoftwareCodeGearLocales HKEY_CURRENT_USERSoftwareBorlandLocales HKEY_CURRENT_USERSoftwareBorlandDelphiLocales HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionIMM HKEY_USERSS-1-5-21-1547161642-507921405-839522115-1004SoftwareMicrosoftWindows NTCurrentVersionAppCompatFlagsLayers HKEY_CURRENT_USERSOFTWAREMicrosoftCTF HKEY_LOCAL_MACHINESoftwareMicrosoftCTFSystemShared HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionFontSubstitutes HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersion HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersion HKEY_CURRENT_USERSoftwareFreeDownloadManager.ORGFree Download Manager 5 HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellCompatibilityObjects20D04FE0-3AEA-1069-A2D8-08002B30309D HKEY_CLASSES_ROOTHKEY_LOCAL_MACHINESoftwareClassesCLSID20D04FE0-3AEA-1069-A2D8-08002B30309DInProcServer32 HKEY_CLASSES_ROOTDriveshellexFolderExtensions HKEY_CLASSES_ROOTDriveshellexFolderExtensionsfbeb8a05-beee-4442-804e-409d6c4515e9 HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerUser Shell Folders HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionExplorerUser Shell Folders HKEY_LOCAL_MACHINESystemCurrentControlSetControlSession Manager HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerShell Folders HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerMountPoints2CPCVolume HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerMountPoints2CPCVolume475c7950-e3d2-11e0-8d7a-806d6172696f HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerMountPoints2CPCVolume475c7952-e3d2-11e0-8d7a-806d6172696f HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerMountPoints2475c7952-e3d2-11e0-8d7a-806d6172696f HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerMountPoints2475c7950-e3d2-11e0-8d7a-806d6172696f HKEY_CLASSES_ROOTDirectory HKEY_CLASSES_ROOTDirectoryCurVer HKEY_CLASSES_ROOTDirectory HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorer HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorer HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced HKEY_CLASSES_ROOTDirectoryShellExIconHandler HKEY_CLASSES_ROOTDirectoryClsid HKEY_CLASSES_ROOTFolder HKEY_CLASSES_ROOTFolderClsid HKEY_CURRENT_USERSoftwareMicrosoftwindowsCurrentVersionExplorerAutoComplete HKEY_LOCAL_MACHINESoftwareMicrosoftwindowsCurrentVersionExplorerAutoComplete HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerAutoComplete HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionExplorerAutoComplete HKEY_LOCAL_MACHINESoftwareMicrosoftCOM3 HKEY_USERSS-1-5-21-1547161642-507921405-839522115-1004_Classes HKEY_LOCAL_MACHINESoftwareClassesREGISTRYUSER HKEY_LOCAL_MACHINESoftwareClassesHKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2765-6A77-11D0-A535-00C04FD7D062 HKEY_LOCAL_MACHINESoftwareClassesHKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2765-6A77-11D0-A535-00C04FD7D062TreatAs HKEY_LOCAL_MACHINESoftwareClassesHKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2765-6A77-11D0-A535-00C04FD7D062 HKEY_LOCAL_MACHINESoftwareClassesHKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2765-6A77-11D0-A535-00C04FD7D062InprocServer32 HKEY_LOCAL_MACHINESoftwareClassesHKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2765-6A77-11D0-A535-00C04FD7D062InprocServerX86 HKEY_LOCAL_MACHINESoftwareClassesHKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2765-6A77-11D0-A535-00C04FD7D062LocalServer32 HKEY_LOCAL_MACHINESoftwareClassesHKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2765-6A77-11D0-A535-00C04FD7D062InprocHandler32 HKEY_LOCAL_MACHINESoftwareClassesHKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2765-6A77-11D0-A535-00C04FD7D062InprocHandlerX86 HKEY_LOCAL_MACHINESoftwareClassesHKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2765-6A77-11D0-A535-00C04FD7D062LocalServer HKEY_CLASSES_ROOTHKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2765-6A77-11D0-A535-00C04FD7D062 HKEY_CLASSES_ROOTHKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2765-6A77-11D0-A535-00C04FD7D062TreatAs HKEY_LOCAL_MACHINESoftwareClassesHKEY_LOCAL_MACHINESoftwareClassesCLSID3C036F1-A186-11D0-824A-00AA005B4383 HKEY_LOCAL_MACHINESoftwareClassesHKEY_LOCAL_MACHINESoftwareClassesCLSID3C036F1-A186-11D0-824A-00AA005B4383TreatAs HKEY_LOCAL_MACHINESoftwareClassesHKEY_LOCAL_MACHINESoftwareClassesCLSID3C036F1-A186-11D0-824A-00AA005B4383 HKEY_LOCAL_MACHINESoftwareClassesHKEY_LOCAL_MACHINESoftwareClassesCLSID3C036F1-A186-11D0-824A-00AA005B4383InprocServer32 HKEY_LOCAL_MACHINESoftwareClassesHKEY_LOCAL_MACHINESoftwareClassesCLSID3C036F1-A186-11D0-824A-00AA005B4383InprocServerX86 HKEY_LOCAL_MACHINESoftwareClassesHKEY_LOCAL_MACHINESoftwareClassesCLSID3C036F1-A186-11D0-824A-00AA005B4383LocalServer32 HKEY_LOCAL_MACHINESoftwareClassesHKEY_LOCAL_MACHINESoftwareClassesCLSID3C036F1-A186-11D0-824A-00AA005B4383InprocHandler32 HKEY_LOCAL_MACHINESoftwareClassesHKEY_LOCAL_MACHINESoftwareClassesCLSID3C036F1-A186-11D0-824A-00AA005B4383InprocHandlerX86 HKEY_LOCAL_MACHINESoftwareClassesHKEY_LOCAL_MACHINESoftwareClassesCLSID3C036F1-A186-11D0-824A-00AA005B4383LocalServer HKEY_CLASSES_ROOTHKEY_LOCAL_MACHINESoftwareClassesCLSID3C036F1-A186-11D0-824A-00AA005B4383 HKEY_CLASSES_ROOTHKEY_LOCAL_MACHINESoftwareClassesCLSID3C036F1-A186-11D0-824A-00AA005B4383TreatAs HKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2763-6A77-11D0-A535-00C04FD7D062 HKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2763-6A77-11D0-A535-00C04FD7D062TreatAs HKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2763-6A77-11D0-A535-00C04FD7D062 HKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2763-6A77-11D0-A535-00C04FD7D062InprocServer32 HKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2763-6A77-11D0-A535-00C04FD7D062InprocServerX86 HKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2763-6A77-11D0-A535-00C04FD7D062LocalServer32 HKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2763-6A77-11D0-A535-00C04FD7D062InprocHandler32 HKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2763-6A77-11D0-A535-00C04FD7D062InprocHandlerX86 HKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2763-6A77-11D0-A535-00C04FD7D062LocalServer HKEY_CLASSES_ROOTHKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2763-6A77-11D0-A535-00C04FD7D062 HKEY_CLASSES_ROOTHKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2763-6A77-11D0-A535-00C04FD7D062TreatAs HKEY_CLASSES_ROOTHKEY_LOCAL_MACHINESoftwareClassesCLSID3C036F1-A186-11D0-824A-00AA005B4383InProcServer32 HKEY_CLASSES_ROOTHKEY_LOCAL_MACHINESoftwareClassesCLSID0BB2763-6A77-11D0-A535-00C04FD7D062InProcServer32 HKEY_CURRENT_USERsoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced HKEY_LOCAL_MACHINEsoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionFontSubstitutes HKEY_USERSS-1-5-21-1547161642-507921405-839522115-1004 HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionLanguagePackSurrogateFallback HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionUninstallFree Download Manager_is1 HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionUninstallFree Download Manager_is1 HKEY_CURRENT_USERSoftwareFreeDownloadManager.ORGFree Download ManagerSettingsCommunity HKEY_CURRENT_USERSoftwareFreeDownloadManager.ORGFree Download ManagerSettingsNetworkBittorrent HKEY_CURRENT_USERKeyboard LayoutToggle HKEY_CURRENT_USERSOFTWAREMicrosoftCTFLangBarAddIn HKEY_LOCAL_MACHINESOFTWAREMicrosoftCTFLangBarAddIn
Read More
Fix UTCSVC high CPU and Disk usage in Windows
There is a lot of high resource utilization by any process that slows down a Windows operating system and one of the services that could cause such a thing is the utcsvc.exe process. This particular process at times can cause high CPU and disk usage. So if you are currently facing this problem, read on as this post will guide you on how you can resolve the problem. UTC which stands for Universal Telemetry Client is a software that runs a service named Diagnostic Tracking Service or DiagTrak. This service is used by Microsoft to collect customer feedback, analyze customer’s problems, and push resolution via updates in order to make the Windows 10 operating system better. This service is an executable file that could be translated to Service Host and even though the process does not usually cause problems, there are actually times when it does especially if it results in high resource utilization. In such cases, you might want to consider disabling it to fix its high CPU and disk usage.

According to Microsoft:

“We collect information about you, your devices, applications and networks, and your use of those devices, applications, and networks. Examples of data we collect include your name, email address, preferences, and interests; browsing, search and file history; phone call and SMS data; device configuration and sensor data; and application usage.”
There are several ways you can disable the utcsvc.exe process. You can disable it using the Service Manager, Registry Editor, and Group Policy Editor. For more details, refer to the instructions laid out below.

Option 1 – Disable the Connected User Experience & Telemetry Service via Service Manager

Note that this option is for standalone systems, so if you’re not using one, refer to the next given options below.
  • Tap the Win + R keys to open the Run dialog box.
  • Then type “services.msc” in the field and tap Enter or click OK to open the Services Manager.
  • From the given list of services, look for the Connected User Experience service. Once you found it, click on it and you’ll see its description which states:
“The Connected User Experiences and Telemetry service enables features that support in-application and connected user experiences. Additionally, this service manages the event-driven collection and transmission of diagnostic and usage information (used to improve the experience and quality of the Windows Platform) when the diagnostics and usage privacy option settings are enabled under Feedback and Diagnostics.”
  • Next, right-click on it and select Properties.
  • Now, change its Startup Type to Disabled and click on the Apply and OK buttons to save the changes made.

Option 2 – Disable the Connected User Experience & Telemetry Service via Registry Editor

  • Tap the Win + R keys to launch the Run utility and type “Regedit” in the field and click OK to open the Registry Editor.
  • Next, navigate to this registry path: HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsDataCollection
  • After that, right-click on the folder named “DataCollection” and select New > DWORD (32-bit) Value.
  • Now name the new value “AllowTelemetry” and make sure that its Value data is “0” and then click on OK to save the changes made.
  • Restart your computer.

Option 3 – Disable the Connected User Experience & Telemetry Service via Group Policy Editor

If you have to disable the service related to the Universal Telemetry Client for company-managed systems, then you can do that using the Group Policy Editor.
  • Tap the Win + R keys to open the Run utility and type “gpedit.msc” in the field and hit Enter to open the Group Policy Editor.
  • Next, navigate to this path: Computer Configuration > Administrative Templates > Windows Components> Data Collection and Preview Build
  • After that, double-click on Data Collection and Preview Build to open its settings.
  • From there, look for the “Allow Telemetry” item and double click on it to open its Properties.
  • Next, set the radio button to Disabled and then click on the Apply button to save the changes made.
  • Restart your computer.

Option 4 – Run the Hardware and Devices Troubleshooter or the Performance Troubleshooter

Hardware and Devices Troubleshooter:

  • The first thing you need to do is click on Start and then on the gear-like icon to pull up the window for Settings.
  • After opening Settings, look for the Update and Security option and select it.
  • From there, go to the Troubleshoot option located on the left-hand side of the list.
  • Next, select Hardware and Devices from the list and open the Troubleshooter and run it. Once it is doing its job, wait for it to complete the process and then restart the system.
  • After the system restarts, check if the problem’s now fixed. If not, refer to the next option given below.

Performance Troubleshooter:

  • Tap the Win + R keys to open the Run dialog box.
  • Type “exe /id PerformanceDiagnostic” in the field and hit Enter to open the Performance troubleshooter.
  • Then click on Next to get started. Wait until the process is completed.
Read More
A Quick Method To Fix Error Code 0x80070002

What is 0x80070002 Error Code?

0x80070002 error message triggers Windows update problems. This error code pop prevents you from successfully updating Windows operating system and its installed components. Windows update is necessary to keep the system up to date and efficient. It also helps you close security holes in your system and prevents your system from being infected by viruses or hacked.

Solution

Restoro box imageError Causes for 0x80070002

This error code pops up on the screen and results in an unsuccessful Windows update, when either your system has wrong date/time settings or when Windows update temporary folder is corrupted. The latter cause is the one to be worried about as it usually results from malware, viral infection, and registry corruption and damage. If this error code is not fixed timely it can lead to system crash and failure too.

Further Information and Manual Repair of 0x80070002

The best way to fix the 0x80070002 Windows update error code is to download Restoro on your system. Restoro is a new, powerful, intuitive, and cutting-edge PC fixer that serves as both a registry cleaner and a system optimizer. It is integrated with multiple performance-boosting and highly functional utilities. With this helper, you can resolve the maximum number and types of PC issues in a few seconds. This tool spares you from the hassle of finding and detecting the underlying cause of the error 0x80070002. Its intuitive built-in technology automatically detects and identifies the error and its causes and repairs it right away. Restoro includes utilities like registry cleaner, privacy issue detector, Active X and Class cleaner, and system stability scanner. The registry cleaner feature assists users to clean up registry clutter. This includes clearing junk files, temporary files, and invalid registry entries which take up all the disk space causing the registry to get corrupted and hampering Windows updates. It repairs the corrupt registry in no time allowing you to perform successful Windows updates.

Restoro Privacy Features

Nonetheless, if the error 0x80070002 occurs due to malware, Restoro will scan and repair it too. Its advanced privacy error anti-virus built-in feature scans for all types of malware, spyware, and viruses quickly and removes them from your PC. This ensures that your PC remains safe from malicious malware that can cause unsuccessful Windows updates and error codes like 0x80070002. Restoro is compatible with all Windows versions. It has a sophisticated and easy-to-use layout making it easier for users of all levels to use it without any complexity or hassle. It is safe and efficient.  It also helps boost the speed of your PC thus lowering boot time tremendously. For user safety, Restoro advises users to create backup files. This helps retrieve valuable data and files in the event of data loss during repair which rarely happens; but in case it does, you don’t have to suffer from a big loss.

Get Restoro

To get started, all you have to do is download and install Restoro on your system. After downloading, run it on your PC for a scan. Once the scanning is complete, a comprehensive scan report will be displayed on your screen showing you the errors affecting your system including 0x80070002 errors that you’ve been experiencing when performing Windows updates. To resolve issues on your PC right away, simply click on repair.  This will repair the error 0x80070002 issues on your PC in seconds. After your PC is repaired, you can then perform a Windows update again. It will be executed successfully. Click here to download Restoro today!
Read More
Happy New Year from ErrorTools.com!!!
As we are on the last day of 2021, our team here at errortools.com would like to express their great gratitude to you all for being with us all this time and would also want to wish you error-free 2022!!! Thank you for being part of this community, we wish you all the best in the upcoming 2022 and hope that we will see you again From all members of errotools, HAPPY NEW YEAR!!! new year christmass tree
Read More
Delete Downloaded, Failed and Pending Windows Updates in Windows 10
There are instances when instead of fixing problems the Windows Update brings you problems on your Windows 10 computer. You might even see some pending Windows Updates which for some reason, refuse to install no matter what you do. The good thing is you won’t have to deal with those failed and pending updates that are incompletely downloaded to your PC as you can actually delete them. Follow the instructions prepared below to delete the failed and pending Windows Updates.

Step 1: The first thing you have to do is delete all the contents in the Temporary folder

  • Tap the Win + R keys to open the Run dialog box.
  • Next, type in “%temp%” in the field and hit Enter or click OK to open the Temporary folder.
  • From there, select all the folders and files within the Temporary folder and then delete them all.
Note: %temp% is one of the many environment variables in Windows that could open the designated folder by Windows as the Temporary folder which is usually located at C:\Users[username]AppDataLocalTemp.

Step 2: Next, remove the pending.xml file

  • Go to the C:\Windows WinSxS folder.
  • Once you’ve opened the folder, look for a file named “pending.xml” file and right-click on it and you can either rename it or delete it.
  • After that, the Windows Update should delete the pending tasks and build a fresh new update.

Step 3: Delete all the contents of the SoftwareDistribution folder

The Software Distribution folder in the Windows operating system is a folder that can be found in the Windows directory and is used to store files temporarily which might be required to install the Windows Update on your PC. Thus, it is required by the Windows Update and maintained by WUAgent. Aside from that, it also contains all the Windows Update History files and once you delete them, you will most likely lose the Update history. As a result, the next time you run the Windows Update, it may result in a longer detection time.
  • Open the WinX Menu.
  • From there, open Command Prompt as admin.
  • Then type in the following command – don’t forget to hit Enter right after typing each one of them.
net stop wuauserv net stop bits
  • After entering these commands, it will stop the Windows Update Service and the Background Intelligent Transfer Service.
  • Next, got to the C:\Windows\Software\Distribution folder and get rid of all the folders and files thereby tapping the Ctrl + A keys to select them all and then click on Delete. Note that if the files are in use, you won’t be able to delete them.
  • Once all the contents in the Software Distribution folder are deleted, restart your PC and then go back to Command Prompt and input the following commands again.
net start wuauserv net start bits
Since the folder has already been flushed, it will be populated afresh the instant your restart your computer and open Windows Update.

Step 4: Try resetting the catroot2 folder

You can also try resetting the catroort2 folder as it is known to fix tons of Windows Update issues. Both the Catroot and catroot2 are Windows operating system folders that are required for the Windows update process.  So when you run the Windows Update, the catroort2 folders stores the signatures of the Windows Update package and helps it in the installation. It makes use of the “%windir%System32catroot2edb.log” file in the updating process. Afterward, the updates are stored in the SoftwareDistribution folder which is used then by the Automatic Updates in order to execute the updating process. Keep in mind that you must not rename or delete the Catroot folder. Although the Catroot2 folder is recreated automatically by Windows, the Catroot folder isn’t.
Read More
Google docs crush with repeating a word

A newfound bug in Google docs is causing it to crush and upon reopening it will crush again making it very difficult to re-access your document. The bug is manifested when a series of the same word is typed into a document and Show grammar suggestion is turned on.

google doc bug

How was it found

A Google Docs user, Pat Needham brought up the issue on Google Docs Editors Help forum.

"I've only tried in Google Chrome, with documents from three separate Google accounts (personal, G Suite Basic, and work one which might be enterprise). All three experience this same issue".

"It's case-sensitive. So trying with 'and. and. And. and. And.' doesn't cause it to crash."

While Needham publicly reported the bug, it appears that the issue was discovered by Eliza Callahan who was writing a poem novel for her novel using Google Docs.

Needham's findings have also been confirmed by other users running Firefox 99.0.1

Another user, Sergii Dymchenko, said strings like "But. But. But. But. But." triggered the same response. Some also noticed putting any of the terms like "Also, Therefore, And, Anyway, But, Who, Why, Besides, However," in the same format achieved the outcome.

A YCombinator HackerNews reader suspected the cause to be the "Show grammar suggestion" option in Google Docs.

A Google spokesperson confirmed the presence of the issue adding, "we're aware of this issue and the team is working on a fix."

How to recover your document

First thing first, turn off Show grammar suggestions so you do not run into issue by accident. In order to turn it off go to Tools and then into Spelling and grammar and untick Show grammar suggestions.

Now, if you already have a document that has been crushed, fear not because there is a workaround to access it. For some strange reason this bug does not manifest on Google Docs mobile app, so you can open the crushed document in the mobile app, delete words that have caused the bug and reopen the document on your desktop.

Until Google comes up with the solution this is currently the only way to address the issue.

Read More
Windows 10 exploit using App installer
Scammers have decided to target Windows’s 10 App installer process in order to infect your computer and steal your data. windows 10 mail exploitAs in most usual online scams, everything starts with a strange email containing threats and other poorly written and composed speech. At the end of the given email, there would be a link claiming that you, of course, need to read it and follow instructions about the threat, if you click the link it will open a web page where you will have an innocent-looking PDF file with more information about the threat itself. If you click on a seemingly innocent PDF file it will summon Windows 10's AppInstaller.exe tool, kickstarting a download-and-run process that'll put you in a bad place very quickly. From there, you'll have to deal with the dangers of malware BazarBackdoor, including data and credential theft. This kind of scam is nothing new but the interesting thing here is that it uses App installer and by clicking on a link you are opening and giving permission for a malicious crook to use it. So, stay safe and do not click on any links from unknown emails no matter what.
Read More
Fix MUP_FILE_SYSTEM Blue Screen Error
If you encounter the MUP_FILE_SYSTEM Blue Screen error with a value of 0c00000103, then it indicates that the multiple UNC provider or MUP has got an invalid of unexpected data. This can lead to the fact that the MUP cannot channel a remote file system request to a network redirector, the UNC, or Universal Naming Convention provider. There are several ways you can fix the MUP_FILE_SYSTEM Blue Screen Error on your Windows 10 computer, you can try to check the hardware of your computer physically, update or rollback some device drivers, run the Driver Verifier Manager, remove any hardware you’ve installed recently or fix issues related to IRQ. Use the given options below as reference to fix the MUP_FILE_SYSTEM Blue Screen Error.

Option 1 – Try to physically check the hardware

The first thing you can do is to check the physical status of the hardware in your computer. You can clean the dust off the hardware components like the Network Card of the computer. You might want to use a small blower or you could also use a soft cloth and run the components gently. Make sure that you don’t damage any parts with moisture or cause harm to any circuits while you carry out this task.

Option 2 – Try to rollback, update several device drivers

You can try to roll back, update or disable certain device drivers on your computer to resolve the MUP_FILE_SYSTEM Blue Screen error.
  • First, boot your computer into Safe Mode.
  • After that, tap the Win + R keys to launch Run.
  • Type in devmgmt.msc into the box and tap Enter or click OK to open the Device Manager.
  • After that, a list of device drivers will be displayed. From there, look for the device drivers related to the Network Card, Chipset, Disk Drive, and the Graphics Drivers and any other driver related to MUP.sys and SwapBuffers.sys system files
  • After that, right-click on each entry of the device drivers and select the “Update Device” option from the menu.
  • Now follow the next on-screen instructions that appear and then restart your computer.
  • After restarting your computer, check if the Stop error is now fixed.

Option 3 – Configure the Driver Verifier Manager

The Driver Verifier Manager is another tool in Windows that could help you fix driver-related issues. And so if you want to fix the MUP_FILE_SYSTEM Blue Screen error you need to use the Driver Verifier Manager:
  • Type in the keyword “Verifier” in the Cortana search box to search for Verifier in Windows 10.
  • After that, select the option “Create custom settings”.
  • Make sure that you have checked everything except the options “DDI compliance checking” and “Randomized low resources simulation”.
  • Next, select the option “Select driver names from a list” option.
  • Afterward, you have to select all the drivers from any unofficial or third-party provider. To simply put it, you have to select all the drivers that are not supplied by Microsoft.
  • Then click on the Finish button.
  • Open Command Prompt as administrator and execute this command – verifier /querysettings
  • The command you just executed will display the Driver Verifier settings so if you see any of the flags enabled boot your Windows 10 PC into Safe Mode.
  • Open the Command Prompt as admin again and run this command – verifier /reset
  • The command will reset the Driver Verifier. Once the process is done, restart your PC and check.

Option 4 – Try to disconnect or disable newly installed hardware

In this option, you will have to disable or remove the hardware you’ve just installed recently since external devices could be the one that’s causing the Blue Screen of Death error to appear. To do that, just disconnect any external device that’s connected to your computer physically and then check if it fixes the MUP_FILE_SYSTEM Blue Screen error.

Option 5 – Try fixing IRQ-related issues

The Stop error might have something to do with an issue related to IRQ. You can verify it by switching your PCI Cards around. Aside from that, you can also check if the IRQ2 is assigned to a COM Port that is unavailable at that time.

Option 6 – Run the Blue Screen Troubleshooter

The Blue Screen troubleshooter is a built-in tool in Windows 10 that helps users in fixing BSOD errors like MUP_FILE_SYSTEM. It can be found in the Settings Troubleshooters page. To use it, refer to these steps:
  • Tap the Win + I keys to open the Settings panel.
  • Then go to Update & Security > Troubleshoot.
  • From there, look for the option called “Blue Screen” on your right-hand side and then click the “Run the troubleshooter” button to run the Blue Screen Troubleshooter and then follow the next on-screen options. Note that you might have to boot your PC into Safe Mode.

Option 7 – Perform a System Restore

Performing System Restore might help you in fixing the Blue Screen error. You can do this option either by booting into Safe Mode or in System Restore. If you are already in the Advanced Startup Options, just directly select System Restore and proceed with the next steps. And if you have just booted your PC into Safe Mode, refer to the steps below.
  • Tap the Win + R keys to open the Run dialog box.
  • After that, type in “sysdm.cpl” in the field and tap Enter.
  • Next, go to the System Protection tab then click the System Restore button. This will open a new window where you have to select your preferred System Restore point.
  • After that, follow the on-screen instructions to finish the process and then restart your computer and check if the problem is fixed or not.
Read More
Fix Windows Activation Error 0xC004F211
If you got an Activation Error 0xC004F211 after having installed or upgraded your Windows 10 PC, then this indicates that some hardware in your computer has changed which’s causing the error to pop up. Windows might not be able to determine if the key is used on a new computer or if it’s still the same one if you have just removed or upgraded old hardware. But worry not for this post will guide you in fixing the Windows Activation Error 0xC004F211 on your Windows 10 computer. When you encounter this error, you will see the following error message on your screen:
“Cannot activate Windows 10. Try activating again later. If that doesn’t work, contact support. Error code: 0xC004F211.”
Note that although hardware changes cause this error, the minor ones don’t really cause any issues with activation, however, if you have made any significant hardware change such as replacing your motherboard, it will most likely cause the activation error. In such cases, the Windows Activation system will treat this as new hardware and you will need a new license for that. Even if your Windows 10 computer has a genuine key, it might still fail to get activated which results in the Windows Activation Error 0xC004F211. Thus, before you do other troubleshooting steps, you need to run the Windows 10 Activation Troubleshooter first. To do so, follow these steps:
  • Go to Settings and then select Activation.
  • After that, click on the Windows Activation and then troubleshoot. This will help you address most of the commonly found activation issues in Windows devices.
In addition, there is an exception offered by Microsoft – if you are connected to a Microsoft account prior to the hardware change, then you can most certainly use the same license key to reactivate Windows 10 again. Microsoft calls this an “Exception path” which should be fixed easily by the Windows Activation Troubleshooter as pointed out earlier. However, if the Windows Activation Troubleshooter isn’t able to resolve the error you can try purchasing a new license. In such rate case, even if you do have a Microsoft account available on your Windows 10 computer, and if Windows was never activated, this solution will not work. And if you haven’t connected your Microsoft account with your Windows 10 computer prior to the major hardware change, then your only option left is to purchase a new license. For you to do that here are some steps you can follow.
  • To purchase a new Windows license, the first thing you have to do is click on the Start button > Settings > Update & Security.
  • From there, go to Activation and select the “Go to Microsoft Store” option.
  • After receiving your new license, you need to go back to Update & Security then go to Activation and select the “Change product key” option.
  • Now update your Windows 10 computer using the new key and it should automatically activate your computer.
  • Next, you have to create a Microsoft account or connect your existing local account to your online account.
  • Once the system links the key and the account, you need not buy a new license in case something like this happens again.
Note: If you are an IT administrator, you need to keep in mind that there is a limit to the number of times you can reactivate Windows on your computer. Moreover, if you don’t see any option to reactivate the license, and it is a work computer, you need to contact your organization’s tech support.
Read More
Change Font Size in Sticky Notes in Windows
Sticky Notes is one of the useful programs and in the early days, the option is available for users to change the font size of the text a lot easier. However, for some unknown reason, Microsoft decided to get rid of this feature in the latest Windows Update. One would expect that the feature will be replaced by an even more useful feature but it’s not which makes the Sticky Notes app worse than before. Worry not though for it doesn’t have to stay that way as there is another thing you can try to change the font size in your Sticky Notes app and that’s what we’re going to cover in this post. As mentioned, Microsoft removing this font feature is quite strange and in the past, users asked for this feature and since it’s no longer available, you can try following the steps given below to bring it back. And for that, you need to go to the Ease of Access section in the Settings app. Refer to the steps given below for more instructions. Step 1: First, tap the Win + I keys to open Settings and then go to the Ease of Access section. Step 2: After going to the Ease of Access menu and select Display from the list of options. Step 3: From there, you should see an option that says “Make text bigger”. And then use your mouse to navigate to the slider to change the size of the font. Note: Take note that after doing all the steps above, it will change not just the Sticky Notes app but also everything in Windows 10. This method is actually the best since it only changes the size of the apps rather than a wholesale change in your Windows 10 computer. Step 4: Next, scroll under Display until you see the “Change the size of apps and text on the main display” option where you’ll see that the option is 100% but you’ll want to change that to 125%. Step 5: After that, click on the drop-down menu and select 125% and then restart your Windows 10 computer. Step 6: Now open the Sticky Notes app and check if you can now change the font size in the Sticky Notes app.
Read More
1 2 3 171
Logo
Copyright © 2023, ErrorTools. All Rights Reserved
Trademark: Microsoft Windows logos are registered trademarks of Microsoft. Disclaimer: ErrorTools.com is not affiliated with Microsoft, nor claims direct affiliation.
The information on this page is provided for information purposes only.
DMCA.com Protection Status