I tried contacting Trend Micro about my problem and if no good answers here, will contact them direct again. Latest version just installed last night and problem started again. (SR1-1-1137775571)
This PC is basically my DVR (Windows Media Center - will refer to as WMC) and its other jobs are Internet and game play. Contact in August. Have replaced the HD about a week after initial contact. Re-installed Trend Micro at least 3 times now. PROBLEM: about every 5 minutes or so (when it gets bad it is more like 2 minutes) play back (both audio and video) come to a complete halt for 3-5 seconds. Great example, while I took the screen shots, you can see on the right side I’m watching “The Gifted” on Fox. I CAN DO OTHER THINGS ON THE PC. Be aware, this isn’t an ALWAYS thing, it will present for a day or two and go away might happen every 3 weeks, but if it lasts and gets worse, that's when I un-install and re-install using the special un-install tool I was given from Trend.
I have shut down other active things (like my WD backup drive, OneDrive, pull the internet, Kodak EasyShare, and Fitbitconnect) and the ONLY THING that seems to stop my problem is shutting down Trend. Tried the balance settings in Trend, tried to “pause” Trend, yet, WMC and Trend seem to be colliding into each other for some reason. I also tried to add the “eh” programs to the exception list, but that was a fail too (I.E. “ehshell” or “ehrecvr” or “ehrec” or “ehvid” are all components of WMC).
Proof to this interruptible behavior: Look at the screen shots. Take note of shots and how jaggedy the blue / purple “I/O” graph at the bottom is. Now look at how NOT-JAGGEDY the I/O is when I turn Trend Micro off (trendmicrooff.jpg). Take note WHO has the most “private bytes” on the list. The circled areas are where the I/O usually dips, then spikes. You can see that at the time the coreserviceshell is mentioned and at what percentage. The back ground on the screen shots will most reflect the percentage at that exact moment because the Process Explorer graphs take a couple seconds to post the whole event. I will point out that in the back ground, the WMC is what items you see as anything with an “eh” on them. I.E. “ehshell” or “ehrecvr” or “ehrec” or “ehvid”. I also wouldn’t doubt that WMC likely uses some of the “svchost”, but you can discuss that with Microsoft. Finally, at the bottom of the screen you can see the CPU useage, Commit Charge, etc.
So, I got the feeling Trend using an interrupt, a file, a service, or the like that causes WMC to get interrupted and yet not really effect anything else on the PC.
Any ideas? Feel free to ask for logs and where I can find them for you.