The server freezes for a while

[el_sabio_]

Hello, I have a problem with my Windows server, let's see if you can help me here.
First, forgive me for my bad written English.
The problem I have is that suddenly, when we open or create some document, for example, print a PDF document, the server freezes for a few seconds, even minutes and does not respond. The task manager does not show any tasks that consume more resources. I have noticed the Windows clock, which even freezes, and the time does not change until the computer works again.
The computer is a Windows 2016 server STANDARD, in which 15 users connect to use a program that is installed. The server freezes if you use CutePDF or AdobePDF, but it also freezes when you open an Excel, etc. It doesn't always crash the first time but it almost always crashes the first time. Perhaps with the PROCMON tool we can do something else but I don't know how it is used and if it is a good option.

Attached to various documents in Mega.

Steps performed:
1-“SFC /scannow”
Result: Windows Resource Protection found damaged files and successfully repaired them.

2-DISM
C:\Windows\system32>Dism/Online/Cleanup-Image/ScanHealth

Deployment Image Servicing and Management Tool
Version: 10.0.14393.4169

Image version: 10.0.14393.4169

[===========================100.0%====================== =====] No component store corruption detected.
The operation was successful.

3-FARBAR BAR RECOVERY SCAN TOOL (FRST64.EXE)


I begin to be desperate and under a lot of pressure, putting my job at risk. I appreciate your help. Thanks in advance.

698.3 KB file on MEGA

 

[xrobwx71]

DO you have a backup image of your drive(s)? If not, that would be the first thing I'd do.

 

[el_sabio_]

I have a backup but I think the copy may be damaged too although I don't know. It's complicated for me. I'm a desperate girl right now.
Scannercomponents say: No corruptions were detected in the COMPONENTS hive. Upload completed successfully.

Do you want me to use procmon to record the failure?

 

[el_sabio_]

Attached link to what procmon has taken me. The user pc05 has tried to print in pdf from an invoicing program and when clicking on save it has frozen approximately one or two minutes.
661.08 MB file on MEGA

 

[xrobwx71]

Having a verified backup is essential in case something goes wrong. I don't want you to run anything until you have a verified backup.

 

[el_sabio_]

We just verified that we have backup of the following dates:
November 5 (it was already autumn)
October 22 (without fail I think)
October 15 and 8 (without sure failure)
Images of disk c: (of the operating system and programs)

 

[el_sabio_]

I have detected in the event viewer, the following information, which is repeated many times, could it be the cause?

id 17890:
A significant part of sql server process memory has been paged out. This may result in a performance degradation. Duration: 57644 seconds. Working set (KB): 112728, committed (KB): 306604, memory utilization: 36%%.
This event repeats from time to time

 

[xrobwx71]

Yes, SQL memory errors can cause this but you need someone who is versed in SQL to diagnose. I'm assuming this is the database for the place you work?

Can you run a backup for today or tonight?



What is the Sirius.exe?

It looks like you have 3 maybe 4 FTP programs running? Why?

3 PDF programs?

 

[el_sabio_]

Sirius is a French erp software that uses ftp programs to download updates and send files. SQL was recently installed, I think it now uses SQL in its new version. I made a backup. I'll get in touch with Sirius to check this out I think. Any suggestion?

 

[xrobwx71]

Do you have an IT dept where you work? I would suggest referring to them.

If this is used for work and your job is on the line, I don't want to be responsible for anything going wrong.

We use SQL as our point of sale database at work. But only the point of sale vendor has access to it. Things can go bad quick.

I rescinded my advice about uninstalling things. You might uninstall something that may break something else.

I'll continue looking through the PML that you sent, more research is needed. Hopefully others might have some ideas here.

 

[DR M]

Hi, el_sabio.

xRobwx71 asked if this is a work computer. If yes, then you should ask for assistance from the IT department of your company.

I have reviewed your FRST logs, and it seems that there are issues with Windows activation. Is your system activated with an OEM or a Retail licence?

In addition to the above, it seems that you are using a method to bypass activation for Adobe products.

Sysnative does not condone software piracy, plus, having an operating system or programs not activated with genuine licenses is the best way to infect a system.

 

[el_sabio_]

The company is in dissolution, that's why I'm taking care of the IT without being an expert. There is no IT department anymore. The reason for uninstalling the original HP ROK OEM license was because it wouldn't let me repair windows with the cd, I think because the cd is a test cd or something similar, that's why I tried deactivating the license.
At the moment we have chosen to print the documents and not use PDF printing. Thank you also for your time, you are the best.