How to Find Which Program Is Making Your Windows PC Slow?

When your Windows computer starts lagging, freezing, or spinning its cooling fans loudly during basic tasks, a single runaway program or background service is often the cause. Before you uninstall software at random or spend money on new hardware, you can use the built-in diagnostic tools in Windows 11 and Windows 10 to pinpoint the exact program consuming your system resources.

This guide walks you through how to identify which app, browser tab, startup tool, or background service is slowing down your PC—starting with safe, built-in checks and progressing to deeper tools when the culprit hides from a basic glance.

Note on Windows 10 Support: According to Microsoft’s official PC performance documentation, free software updates and technical support for Windows 10 ended on October 14, 2025. The diagnostic tools covered below work on both Windows 11 and Windows 10, and version-specific menu paths are noted wherever they differ.

Match Your PC’s Symptoms to the Right Resource Bottleneck

A program does not have to use 100% of your processor (CPU) to make your computer feel slow. Before sorting process lists, match how your computer is acting to the hardware resource most likely under strain:

Symptom You Notice	Primary Resource to Check	Typical Software Culprit
Cooling fans spin loudly, cursor stutters, or typing lags across all apps	CPU (Processor)	Runaway background updater, video encoder, stuck browser script, or antivirus scan
Switching between open programs takes several seconds, or browser tabs reload when clicked	Memory (RAM)	Multi-tab web browsers, photo/video editors, or an app with a memory leak
Opening folders, saving files, or launching apps hangs with a spinning circle while CPU is low	Disk (Storage)	Windows Search indexing, cloud sync client (OneDrive, Dropbox), backup tool, or heavy pagefile swapping
Desktop animations stutter, video playback drops frames, or games lag sharply	GPU (Graphics)	Hardware-accelerated browser tab, screen recorder, wallpaper engine, or background game client

Step 1: Identify Active Resource Hogs in Task Manager

Windows Task Manager is the fastest built-in tool for checking live CPU, memory, disk, and GPU usage.

Open Task Manager and Expand the Full View

Press Ctrl + Shift + Esc on your keyboard (or right-click the Start button and select Task Manager).
If you only see a simple list of open app names without percentage columns, click More details at the bottom of the window to open the full view (Microsoft Learn Task Manager Guide).
Select the Processes tab (on Windows 11, this is the top icon in the left sidebar that looks like a four-square grid; on Windows 10, it is the first tab along the top).

[Editor Task — Screenshot Needed]: Capture a screenshot of the Windows 11 Task Manager Processes tab with the CPU, Memory, and Disk column headers clearly visible and the downward sorting arrow highlighted.

Sort by Resource Columns and Read the Numbers Correctly

Click the CPU, Memory, or Disk column header so the small arrow points downward, sorting active programs from highest to lowest usage (Microsoft High CPU Troubleshooting Guidance).

When evaluating the top processes, keep three diagnostic rules in mind:

Look for sustained usage, not brief spikes: According to Microsoft’s high CPU troubleshooting guidance, it is normal for CPU usage to spike briefly when you open an app or load a webpage. A program is a problem when it holds overall CPU usage at 80% or higher for several minutes while you are not actively running a heavy task.
Understand single-core bottlenecks: A program showing only 12.5% CPU in Task Manager can still cause severe lag inside that app. As Microsoft’s Task Manager documentation explains, on an 8-logical-processor PC, 100% / 8 = 12.5%—meaning a single-threaded program stuck at 12.5% is completely maxing out one full logical processor core. To check this, open the Performance tab, select CPU, right-click the graph, and choose Change graph to > Logical processors.
Expand grouped processes: If an app like Microsoft Edge, Google Chrome, or File Explorer is at the top of the list, click the arrow (>) to the left of its name to see which sub-process or open window is using the resources.

How to Verify Whether Ending or Throttling the Program Fixes the Slowdown

Once you spot a non-essential third-party app (such as a stuck game launcher, media player, or PDF reader) using excessive CPU, Memory, or Disk:

Save any open work in that program first.
Option A — Use Efficiency Mode on Windows 11 (Safer First Step): If you still need the background app open but want to stop it from starving your active work, right-click the individual process on the Processes tab and select Efficiency mode (or click the Efficiency mode button in the top-right toolbar). As documented in Microsoft’s Efficiency Mode guide, Windows 11 places a green double-leaf icon in the Status column and lowers that process’s CPU priority so foreground apps respond smoothly. (Exception: Efficiency mode cannot be applied to most grouped processes as a whole, and may cause instability in real-time audio or video apps.)
Option B — Close the Program: Try closing the program normally from its window first. If it is frozen, right-click the program in Task Manager and select End task (Microsoft PC Performance Tips).
Verify success: Watch the CPU, Memory, or Disk column header for 30 to 60 seconds. If the total percentage drops significantly and your mouse, keyboard, and open windows respond normally again, you have confirmed that program was the cause.

Warning: Processes You Should Never Force-Close in Task Manager

Do not click End task on processes categorized under Windows processes unless you know exactly what they do. Force-closing core operating system processes can immediately freeze your desktop, cause data loss, or trigger a system crash:

Process Name in Task Manager	What It Actually Is	Safe Action If Usage Is High
System (`ntoskrnl.exe`) / System Interrupts	Core Windows kernel and hardware driver communication	Do not end. Check for outdated hardware drivers via Start > Settings > Windows Update > Advanced options > Optional updates (Microsoft Support).
Service Host (`svchost.exe`)	Container process that runs official Windows background services	Do not end blindly. Expand the arrow next to `svchost.exe` to see which specific service (such as `Windows Update` or `SysMain`) is active.
Antimalware Service Executable (`MsMpEng.exe`)	Built-in Windows Security (Microsoft Defender) real-time or scheduled scan	Let the scan finish, or check scan status in Windows Security > Virus & threat protection (Microsoft Support).
Windows Explorer (`explorer.exe`)	Runs your desktop, taskbar, Start menu, and File Explorer windows	Clicking End task removes your taskbar and desktop icons. If File Explorer is frozen, right-click Windows Explorer and choose Restart instead.
Client Server Runtime Process (`csrss.exe`) / Local Security Authority (`lsass.exe`)	Critical Windows user-mode and security subsystems	Never end these processes. If you suspect a security issue, run a full Windows Security scan.

Step 2: Catch “Hit-and-Run” Programs with Resource Monitor

Sometimes your PC stutters every few seconds, but by the time you switch to Task Manager, every process shows 0% or 1% usage. That happens because Task Manager only shows a snapshot of the last second or two. To catch programs that spike briefly and hide, use Windows Resource Monitor (Microsoft High CPU Troubleshooting Guidance).

Click Start, type resmon (or open the Run dialog with Win + R and run perfmon /res per the Microsoft Learn perfmon command reference), and press Enter to open Resource Monitor.
Maximize the Resource Monitor window so you can read all columns clearly.
To catch intermittent CPU spikes:
- Select the CPU tab.
- Click the Average CPU column header so the arrow points downward (Microsoft High CPU Guidance).
- Unlike Task Manager’s live CPU column, Average CPU tracks rolling consumption over the last 60 seconds, keeping intermittent culprits pinned at the top of the list even when they pause between spikes.
To catch hidden Disk bottlenecks:
- Select the Disk tab and expand the Disk Activity section.
- Sort by Total (B/sec) descending.
- Resource Monitor shows not only the Image (the .exe program name) but also the exact File path being read or written. If System or svchost.exe is slowing down your drive, looking at the File column reveals whether it is writing to C:\pagefile.sys (meaning you are out of RAM), scanning a specific third-party software folder, or downloading a Windows update.

[Editor Task — Screenshot Needed]: Capture a screenshot of Resource Monitor (resmon) open to the CPU tab with the Average CPU column sorted descending, and a second screenshot of the Disk tab showing the Disk Activity file path column.

Step 3: Find Hidden Culprits Inside Frozen Apps and Web Browsers

If Task Manager shows that an app is “Not responding” or that your web browser is using gigabytes of RAM across 25 identical processes, use these two targeted checks to find the real trigger.

Use “Analyze Wait Chain” When an App Freezes With 0% CPU

Many Windows programs depend on other background processes to finish a task before they can respond. When an app freezes at 0% CPU, it is often waiting on a completely different program (such as a stuck printer spooler, cloud drive helper, or audio service).

According to Microsoft’s Task Manager troubleshooting documentation, you can view this dependency tree using Analyze wait chain:

Open Task Manager (Ctrl + Shift + Esc) and select the Details tab (in Windows 11, the icon with horizontal lines in the left sidebar).
Find the frozen or sluggish program in the list (its Status column must say Running, as wait chains cannot be viewed for Suspended processes).
Right-click the process and select Analyze wait chain.
Read the result:
- If the app is working independently, Task Manager displays <Process> is running normally.
- If the app is blocked by another program, Task Manager shows a dependency tree listing the exact child process it is waiting on. You can check the box next to the blocking child process and click End process to unfreeze your main application without losing your work (Microsoft Learn).

Find Which Browser Tab or Extension Is Slowing Down Your PC

Modern browsers like Microsoft Edge and Google Chrome isolate every open tab, extension, and background service into its own process. In Windows Task Manager, these all appear under a single group, making it hard to tell which website or extension is causing the slowdown.

Check using Browser Task Manager: While inside Microsoft Edge or Google Chrome, press Shift + Esc on your keyboard to open the browser’s internal task manager. Sort by CPU or Memory footprint to see the exact webpage title or extension name using the most resources, then select it and click End process.
Use Microsoft Edge’s Built-In Performance Detector and Sleeping Tabs: As detailed in Microsoft’s Edge performance guide, you can click Settings and more (...) > More tools > Performance inside Edge to view the Performance detector, which flags high-CPU or high-RAM background tabs and lets you put them to sleep or close them directly. You can also go to Settings > System and performance > Performance and turn on Automatically put tabs to sleep so inactive background tabs release their CPU and memory resources automatically.

Step 4: Find Programs That Slow Down Windows Startup and Background Activity

Sometimes no single program uses 80% CPU, yet your PC takes several minutes to become usable after signing in and feels sluggish all day because dozens of utilities launch automatically in the background.

Check Startup Impact in Task Manager

Both Windows 11 and Windows 10 measure how much CPU and disk activity each startup program consumes during sign-in. According to Microsoft’s Configure Startup Applications documentation, here is how to audit and disable them safely:

Open Task Manager (Ctrl + Shift + Esc) and select the Startup apps tab (or open Start > Settings > Apps > Startup).
Click the Startup impact column header to group enabled apps by how heavily they slow down your boot process. Microsoft calculates these impact ratings using specific resource thresholds:

Startup Impact Rating	Official Microsoft Resource Threshold During Sign-In	Recommended Action
High impact	Uses more than 1 second of total CPU time OR more than 3 MB of disk I/O	Right-click and select Disable for any non-essential app (game launchers, updaters, chat apps you don’t use immediately).
Medium impact	Uses 300 milliseconds to 1 second of CPU time OR 292 KB to 3 MB of disk I/O	Disable if you rarely use the app right after turning on your PC.
Low impact	Uses less than 300 milliseconds of CPU time AND less than 292 KB of disk I/O	Usually safe to leave enabled if useful (e.g., mouse/touchpad software or audio drivers).
Not measured / None	Enabled with no measurement data yet (`Not measured`), or already turned off (`None`)	Review any `Not measured` apps you do not recognize.

Important Reversibility Note: Disabling an app in Startup apps does not uninstall the program or delete your data (Microsoft Support). The program simply stops launching by itself when you turn on your PC; you can still open it normally from the Start menu whenever you need it. Do not disable your security software or hardware audio/graphics control panels.

Check Hidden Startup Folders for Unregistered Apps

As noted in Microsoft’s startup configuration guide, older desktop programs that do not register a modern Windows startup task will not appear in Task Manager’s Startup list. To check if hidden shortcuts are launching automatically:

Press Win + R to open the Run dialog box.
Type shell:startup and press Enter to view shortcuts that launch for your user account (%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup).
Press Win + R again, type shell:common startup, and press Enter to view shortcuts that launch for all users on the PC (%ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup).
Delete any shortcut inside these two folders for programs you do not want starting automatically (deleting the shortcut here only stops auto-launch; it does not uninstall the program).

Restrict Background Permissions for Installed Apps

Some Microsoft Store and packaged Windows apps continue running background tasks even when their windows are closed. You can turn off background activity for specific apps following Microsoft’s performance optimization steps:

On Windows 11: Go to Start > Settings > Apps > Installed apps. Find the app you want to restrict, click More options (...) > Advanced options, and under Background app permissions, set Let this app run in the background to Never.
On Windows 10: Go to Start > Settings > Privacy > Background apps. Under Choose which apps can run in the background, toggle Off any apps you do not need running silently.

Step 5: Check Crash History and Run a Malware Scan

If your PC slows down unpredictably—or if a background app is silently crashing and restarting in a loop—two built-in Windows checks can reveal what Task Manager misses.

Check Reliability Monitor for Silent Background Crash Loops

When a background helper service or driver crashes and restarts repeatedly, it consumes CPU and disk resources without staying at the top of Task Manager long enough to notice.

Press Win + R, type perfmon /rel, and press Enter to launch Reliability Monitor (Microsoft Learn perfmon documentation).
Review the day-by-day stability chart for red X icons under Application failures or Windows failures.
Click any day with red failure markers to see the exact program name in the bottom pane. If a third-party updater, RGB lighting controller, or printer utility is failing dozens of times per day, repairing or uninstalling that software often resolves unexplained system stutter.

[Editor Task — Screenshot Needed]: Capture a screenshot of Windows Reliability Monitor (perfmon /rel) highlighting the daily stability graph and the Application failures list at the bottom.

Run a Windows Security Scan to Rule Out Malware

Malware and potentially unwanted programs (such as hidden cryptocurrency miners or adware) frequently disguise themselves with generic process names while consuming heavy CPU or disk resources. Follow Microsoft’s malware troubleshooting instructions:

On Windows 11: Select Start > Settings > Privacy & security > Windows Security > Virus & threat protection, then select Quick scan (or choose Scan options > Full scan for a deeper check).
On Windows 10: Select Start > Settings > Update & Security > Windows Security > Virus & threat protection, then select Quick scan.

Step 6: Fallback When Nothing Stands Out — Perform a Clean Boot

What if your PC is noticeably slow, or a specific app or game stutters, yet neither Task Manager nor Resource Monitor shows a single obvious resource hog? This happens when a third-party background service, overlay, or filter driver conflicts with Windows.

In this situation, Microsoft recommends performing a Clean Boot. A Clean Boot starts Windows with only essential Microsoft drivers and services so you can test whether third-party background software is causing the slowdown.

Warning Before You Start a Clean Boot

Do not skip the “Hide all Microsoft services” checkbox: In the steps below, you must check Hide all Microsoft services before clicking Disable all. Disabling core Microsoft services can prevent Windows from booting properly or disable your PIN/biometric sign-in.
Temporary loss of some features: While in a Clean Boot state, third-party features (such as custom mouse buttons, third-party antivirus shields, or OEM hotkeys) will temporarily stop working until you reset your PC to a normal startup (Microsoft Clean Boot Guide).

How to Perform a Clean Boot and Isolate the Culprit

Sign in to Windows with an Administrator account.
Select Search on the taskbar, type msconfig, and open System Configuration (Microsoft Support).
Select the Services tab.
Crucial step: Check the box at the bottom-left labeled Hide all Microsoft services.
With all Microsoft services hidden, click Disable all, then click Apply.
Select the Startup tab and click Open Task Manager.
In Task Manager’s Startup apps tab, note which apps are currently Enabled (take a quick screenshot with Snipping Tool so you remember), then select each enabled item and click Disable.
Close Task Manager, click OK in the System Configuration window, and Restart your computer.

[Editor Task — Screenshot Needed]: Capture a screenshot of the System Configuration (msconfig) > Services tab with the Hide all Microsoft services checkbox clearly circled in red before Disable all is clicked.

How to Interpret the Clean Boot Test

If your PC is still slow during the Clean Boot: Third-party background programs and startup services are not the cause of your slowdown. Skip to the next section to restore normal startup, then check for low disk space (Start > Settings > System > Storage), overheating hardware, or pending Windows Updates (Microsoft PC Performance Guide).
If your PC runs fast during the Clean Boot: You have confirmed that one of the disabled third-party services or startup apps was slowing down your PC. To find the exact culprit without rebooting 30 times, use Microsoft’s half-at-a-time isolation method:
1. Open msconfig > Services, check Hide all Microsoft services, re-enable only the top half of the non-Microsoft services list, click OK, and restart.
2. If the slowdown returns, the culprit is in that top half (uncheck the lower half of that group and reboot). If the PC stays fast, the culprit is in the bottom half (or in your Task Manager startup items). Repeat this halving process until you isolate the single offending service or startup item.

Always Reset Your PC to Normal Startup When Finished

Once you identify and uninstall or disable the single problematic program, return Windows to normal operation (Microsoft Support):

Open Search, type msconfig, and open System Configuration.
On the General tab, select Normal Startup.
On the Services tab, clear the Hide all Microsoft services checkbox, click Enable all, and click Apply.
Open Task Manager > Startup apps and re-enable the legitimate startup programs you still want, excluding the culprit you identified.
Click OK and Restart your PC.

Step 7: Safely Repair or Uninstall the Offending Program

After you verify which third-party program is slowing down your PC, do not delete its folder directly from C:\Program Files—doing so leaves behind broken registry entries and background services that can cause startup errors. Instead, follow Microsoft’s official app removal and repair steps:

Update or Repair First (If You Still Need the Program):
- Check inside the app for a built-in update option, as software vendors frequently patch high-CPU bugs.
- To repair a corrupted installation on Windows 11 or Windows 10, go to Start > Settings > Apps > Installed apps (or Apps & features on Windows 10), click More options (...) > Advanced options (or Modify), and select Repair if available.
Uninstall cleanly (If You No Longer Need the Program):
- Open Start > Settings > Apps > Installed apps, click More (...) next to the program, and select Uninstall.
- If a legacy desktop program cannot be removed from Settings, open Search, type Control Panel, go to Programs > Programs and Features, right-click the program, and select Uninstall (Microsoft Support).

Advanced Option for Power Users: If a sluggish process is locking a specific file or folder and refusing to close or uninstall, Microsoft provides a free, official advanced tool called Sysinternals Process Explorer (procexp.exe, for Windows 11 and Windows Server 2019+). Running Process Explorer lets you search open file handles and loaded DLLs to see which exact program has a file or directory locked without installing untrusted third-party “PC cleaner” utilities.

Verified Official Sources Used

Every technical instruction, keyboard shortcut, settings path, command, and threshold in this article was verified against the following official Microsoft documentation and Google policy resources:

Microsoft Support — General PC Performance & Windows 10/11 Settings Paths:
Tips to improve PC performance in Windows
Microsoft Learn — Task Manager Tabs, Logical Processors & Wait Chain Analysis:
Troubleshoot processes by using Task Manager
Microsoft Learn — Sustained 80%+ CPU Threshold & Resource Monitor (resmon) Usage:
Guidance for troubleshooting high CPU usage
Microsoft Support — Startup Impact Thresholds, Startup Folders (shell:startup) & Registry Paths:
Configure Startup applications in Windows
Microsoft Support — Clean Boot (msconfig) & Half-at-a-Time Service Isolation:
How to perform a clean boot in Windows
Microsoft Support — Windows 11 Efficiency Mode & Edge Sleeping Tabs / Performance Detector:
Learn about performance features in Microsoft Edge
Microsoft Learn — perfmon Command Reference (/res, /rel, /report, /sys):
perfmon command-line reference
Microsoft Support — Safe App Repair & Uninstallation (Settings & Control Panel):
Uninstall or remove apps and programs in Windows
Microsoft Support — Windows Security Malware Scanning:
Scan an item with Windows Security
Microsoft Learn — Sysinternals Process Explorer (procexp.exe):
Process Explorer – Sysinternals
Google Search Central & AdSense Policy References: