Free PC Performance Scan

Member Panel


Sponsors and Ads

Noticeboard

PC Forum PC Help Forum » Operating Systems » Windows XP/2000 » [Answered] Please save me from a reformat!

Windows XP/2000 - [Answered] Please save me from a reformat! posted in the Operating Systems forums; Hello all! I am trying to fix up a slow computer for a friend but it isn't working out too well! The computer is new(er) and was much faster when ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 08-16-2007
Bronze Member
 
Join Date: Aug 2007
Posts: 21
stevenfirst - See this Members User comments on their Profile page
Default [Answered] Please save me from a reformat!

Hello all! I am trying to fix up a slow computer for a friend but it isn't working out too well! The computer is new(er) and was much faster when new but now it takes a horrid amount of time to start, it hangs up opening programs, it is super sluggish, takes for ever to shut down. It doesn't freeze much, just stalls with no warnings or blue screens. I don't want to reformat the computer because much of the software cd's are MIA and many things could get lost in the format (imagine that!).

Any who, I have ran virus scans (Norton, panda, and others) and found nothing… I used windows defender, ad aware, and spybot; nothing (except cookies). I uninstalled every program that was not required or important (lime wire, games, IE. toolbars, video players, junk software…) but I left things like video codec's and such.

If someone can tell me what the problem may be please let me know! Here is a hijack this log file for starters.

Thanks!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:45:49 PM, on 8/15/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Documents and Settings\Frank\Application Data\U3\0000161A5275A2BF\LaunchPad.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Frank\Local Settings\Temporary Internet Files\Content.IE5\WDGPCZCR\hijackthis[1].exe
C:\Documents and Settings\Frank\Desktop\hijackthis.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Meyersdale, Pennsylvania (15552) Conditions & Forecast : Weather Underground
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = Yahoo! SearchBar Home Page
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gatewaybiz.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = Microsoft Windows Update
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\sw g.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .swf: C:\Program Files\Netscape\Netscape Browser\PLUGINS\NPSWF32.dll
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english...an_unicode.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/sof...iveXPlugin.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
--
End of file - 8130 bytes


  #2  
Old 08-16-2007
MadGamer's Avatar
Elite Member
My PC
 
Join Date: May 2004
Location: UK
Posts: 2,307
PC Experience: Experienced
MadGamer - See this Members User comments on their Profile page MadGamer - See this Members User comments on their Profile page MadGamer - See this Members User comments on their Profile page MadGamer - See this Members User comments on their Profile page MadGamer - See this Members User comments on their Profile page MadGamer - See this Members User comments on their Profile page
Default Re: Please save me from a reformat!

Hi there and welcome to PCHF, im going to move this into the HijackThis forum for our security team to take a look at.


  #3  
Old 08-16-2007
chiaz's Avatar
Senior Security Analyst
 
Join Date: Jun 2006
Location: Singapore
Posts: 2,858
PC Experience: PC Guru
chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page
Default Re: Please save me from a reformat!

Hello steven.

From what you've reported, your computer appears clean to me. Could be due to faulty RAM, or some other problem. Whatever it is, our tech team should be able to figure it out. On to you guys.


  #4  
Old 08-16-2007
ih8bills's Avatar
Tech Team Leader
My PC
 
Join Date: Feb 2006
Location: coastal Rhode Island
Posts: 4,580
PC Experience: More Stubborn than any PC
ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page
Default Re: Please save me from a reformat!

Chiaz says you're clean....
I would try a few things;
First-- do a check-disc/defrag your Harddrive.
Heavy fragmentation can cause many strange behaviors

Temperature check using Speedfan-- link in my sig below
if those are normal-RAMtester also from sig
Then HDtune from my sig-- will tell you if the harddrive's on it's way out


__________________


Without music, life would be a mistake
Friedrich Nietzsche
  #5  
Old 08-16-2007
Bronze Member
 
Join Date: Aug 2007
Posts: 21
stevenfirst - See this Members User comments on their Profile page
Default Re: Please save me from a reformat!

Thanks guys but can we keep shelling out ideas? I forgot to mention that I am a computer tech myself....just been a long time and I am out of practice! I checked the ram with a ram checker so I don't think it is that. I checked the HD and it seemed to be fine (used HD tune) red or yellow Here is a nother maybe useful log for ya guys. I heard that a bad cmos battery can cause slow computers but I don't think it is that because cmos is keeping its infromation saved and has never been reset. Come to think of it, even as I am typing this email the hard drive is thrashing a little but CPU usage is at ~2% and the page file is about 75% of 512 (I think). Virtual memory was manualy set to ~700mb but it was only using 390 but I changed it to auto anyway....next step is...........

EFD Inspector
=============
Software
========
Operating system
----------------
Windows XP Home Edition (5.01.2600 Service Pack 2)
User privileges
---------------
Administrator
System
======
Motherboard
-----------
Intel Corporation D850EMV2
BIOS
----
Default System BIOS
CPU
---
Intel(R) Pentium(R) 4 CPU 2.40GHz 2386 MHz
Memory
------
128 MB (RIMM1)
128 MB (RIMM2)
Video card
----------
NVIDIA GeForce4 Ti 4200
Sound card
----------
Creative Audigy Audio Processor (WDM)
Drive configuration
===================
Intel(r) 82801BA Bus Master IDE Controller
------------------------------------------
Driver: Intel 5.1.2600.1106
Primary IDE Channel
-------------------
Driver: (Standard IDE ATA/ATAPI controllers) 5.1.2600.1106
+ WDC WD600BB-53CAA1 (Master / UDMA Mode 5 / 55 GB)
Secondary IDE Channel
---------------------
Driver: (Standard IDE ATA/ATAPI controllers) 5.1.2600.1106
+ MATSHITA DVD-ROM SR-8588 (Master / UDMA Mode 2 / 0 MB)
+ LITE-ON LTR-48246S (Slave / UDMA Mode 2 / 0 MB)
NEC PCI to USB Open Host Controller
-----------------------------------
Driver: NEC 5.1.2600.1106
NEC PCI to USB Open Host Controller
-----------------------------------
Driver: NEC 5.1.2600.1106
NEC PCI to USB Enhanced Host Controller B1
------------------------------------------
Driver: NEC 5.1.2600.0
+ SanDisk ImageMate 6 in 1 USB Device (0 MB)
+ SanDisk ImageMate 6 in 1 USB Device (0 MB)
+ SanDisk ImageMate 6 in 1 USB Device (0 MB)
+ SanDisk ImageMate 6 in 1 USB Device (0 MB)
+ SanDisk U3 Cruzer Micro USB Device (1953 MB)
+ SanDisk U3 Cruzer Micro USB Device (5 MB)
Intel(r) 82801BA/BAM USB Universal Host Controller - 2442
---------------------------------------------------------
Driver: Intel 5.1.2600.1106
SCSI/RAID Host Controller
-------------------------
Driver: (Standard mass storage controllers) 5.1.2600.2180
+ SW5229P EQR235S SCSI CdRom Device (0 MB)
OHCI Compliant IEEE 1394 Host Controller
----------------------------------------
Driver: IEEE 1394 OHCI Compliant Host Controller Vendor 5.1.2535.0



Last edited by stevenfirst; 08-16-2007 at 03:49 PM.
  #6  
Old 08-16-2007
Bernster's Avatar
Bronze Member
 
Join Date: Aug 2007
Location: Burbank, CA
Posts: 9
Bernster - See this Members User comments on their Profile page
Default Re: Please save me from a reformat!

One additional thing to check - run msconfig and see if stuff is loading at startup that isn't needed. Lots of OEM stuff and background operations for recently installed programs can be there, but are totally unneeded. Usual suspects include Qtime and Adobe processes that will start anyway if you need them.


  #7  
Old 08-16-2007
ih8bills's Avatar
Tech Team Leader
My PC
 
Join Date: Feb 2006
Location: coastal Rhode Island
Posts: 4,580
PC Experience: More Stubborn than any PC
ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page ih8bills - See this Members User comments on their Profile page
Default Re: Please save me from a reformat!

Hi-- that makes it easier to communicate

You have checked for heat issues ? dead fans,etc?
256 MB ram is very much minimal to run XP, also


__________________


Without music, life would be a mistake
Friedrich Nietzsche

Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not