PDA

View Full Version : PC is soooooooo slow...



robortiz59
02-09-2010, 01:18 PM
Mp PC has been acting very badly lately. First it is sooooo slow. It runs like there is something else running in the background, or there are too many windows open. It takes forever for it to respond even if its just booted, and there is only one app open. Additionally, it has simply refused to shut down a couple of times. That is, I click on start>turn off computer>shut down, and nothing happens. And, recently, it wouldn't boot up. It got part way through the boot up and repeatedly shut itself down and rebooted. I'm not sure how many cycles it took before finally booting.

The other clue that might help relates to the hard drive. It sounds like its constantly reading/writing, even when the computer is idle.

For background, I think I'm pretty anal retentive about maintaining and protecting the PC. I run MSE, and scan it every week. I also run Malware Bytes scans each week. I regularly run CCleaner, and I've just defragged the disk.

It is getting a little old: I've been running it since 2002. I've replaced a couple of drives, two power supplies, and the cooling fan. Is it possible its just outlived its usefullness?

The HijackThis scan log is pasted below.

By the way, any idea what all the svchost.exe entries could be?

Any suggestions would sure be appreciated.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:58:51 PM, on 9/1/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17080)
Boot mode: Normal

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
c:\Program Files\Microsoft Security Essentials\MsMpEng.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINNT\CDProxyServ.exe
C:\WINNT\System32\CTsvcCDA.exe
C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Google\Update\1.2.183.29\GoogleCrashHandler. exe
C:\WINNT\System32\MsPMSPSv.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = localhost;*.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdmcks.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINNT\system32\ctfmon.exe
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Download all by Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download by Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Download selected by Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download web site by Free Download Manager - file://C:\Program Files\Free Download Manager\dlpage.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINNT\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINNT\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .bcf: C:\Program Files\Internet Explorer\Plugins\NPBelv32.dll
O15 - Trusted Zone: *.wachovia.net
O15 - Trusted Zone: *.wachovia.net (HKLM)
O16 - DPF: {3BFFE033-BF43-11D5-A271-00A024A51325} (iNotes6 Class) - https://myed-nc-alt.wachovia.com/,DanaInfo=.amt385fFuw2o3L9orx5B1uU91F+iNotes6W.cab
O16 - DPF: {739E8D90-2F4C-43AD-A1B8-66C356FCEA35} (RunExeActiveX.RunExe) - hcp://system/RunExeActiveX.CAB
O16 - DPF: {99CDFD87-F97A-42E1-9C13-D18220D90AD1} (StartFirstControl.CheckFirst) - hcp://system/StartFirstControl.CAB
O16 - DPF: {E5F5D008-DD2C-4D32-977D-1A0ADF03058B} (JuniperSetupSP1 Control) - https://myed-nc.wachovia.com/dana-cached/setup/JuniperSetupSP1.cab
O23 - Service: Plug and Play Device Manager ($sys$DRMServer) - Unknown owner - C:\WINNT\system32\$sys$filesystem\$sys$DRMServer.e xe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: XCP CD Proxy (CD_Proxy) - Unknown owner - C:\WINNT\CDProxyServ.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINNT\System32\CTsvcCDA.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate1c9d0c0ae0b9464) (gupdate1c9d0c0ae0b9464) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINNT\System32\NMSSvc.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (file missing)

--
End of file - 8749 bytes

Speedy Gonzales
02-09-2010, 01:29 PM
Uninstall Nortons / Symantec, if its still installed

You can tick these then tick fix checked

Close browser/s

Its probably this CDProxyServ.exe. It belongs to Sony's crap

I would remove it

http://www.bleepingcomputer.com/forums/topic34904.html

Or use this

http://www.symantec.com/security_response/writeup.jsp?docid=2005-110615-2710-99&tabid=3


O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

If you didn't add these, tick them

O15 - Trusted Zone: *.wachovia.net
O15 - Trusted Zone: *.wachovia.net (HKLM)

Then reboot then post another log. Did you upgrade from windows 2000 or something?? XP doesnt use the Winnt folder

1101
02-09-2010, 01:41 PM
Ive seen the occasional hard drive have a strange fault that makes it
really slow-slowing down the PC, yet pass all HD tests. HD Thrashing can be caused by failing HD's, among other things (lack of ram, spyware etc)
Have a look & check the HD isnt in PIO mode: ctl panel, device manager,primary IDE, advanced, current transfer mode.

2002 era pc: dont expect it to run as fast as a modern PC(may do), people seem less tolerant of slow(low spec) PC's than they were 5-10 years ago :badpc: :badpc:
What are the specs??

edit
This can cause issues on SOME pc's. Uninstall & see how the PC runs (disconnect from internet)
C:\Program Files\Microsoft Security Essentials\msseces.exe

A reload of WIN is often a the best fix if you cant trace the fault in reasonable time.

pctek
02-09-2010, 01:44 PM
Mp PC is sooooo slow.


For background, I think I'm pretty anal retentive about maintaining and protecting the PC. I run MSE, and scan it every week. I also run Malware Bytes scans each week.


Anal? I run all of them.
You should run 2 antispywares at least not just one. One can miss things, 2 they tend to compliment each other and pick up things one might miss.
Get Spybot as well.

And after all the cleaning sometimes it's time to back up your personal stuff, wipe the drive and do a fresh install.

It accomplishes miracles. Seeing how long you've been using it that is what I would recommend. Ccleaner is OK, but nothing ever gets its all. Do a fresh install.

allcamp
02-09-2010, 01:51 PM
Giveaway of the Day has Process Lasso available for free time-limited download for the next 5 hours. I suggest that you consider downloading and installing it on your computer. I have used it successfully for a couple of years now. You can find it and user reviews/comments at

http://www.giveawayoftheday.com/process-lasso-38/

It may help keep your machine running better once you have sorted out your problem. It also shows which processes are using more memory.

PPp
02-09-2010, 05:20 PM
You could go the simple solution, if you haven't done anything similar. Download and run CCleaner run in system and registry modes. go to my Computer, right click on your Hard Drive and select Properties, then select select tools and scan, after that has finished run defrag from the same place. May all take a bit of time if you haven't done it before

kahawai chaser
02-09-2010, 05:48 PM
Use process explorer (http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx), which is an advanced task manger to find out what the svchost.exe entries are; Hover the mouse over the entries, and a list of it's processes will display (if present) - sometimes up to 20 I have found. Processes can include audio service, event notification service, anti-malware service (which is MSE), security center, session manager and much more - general related to Microsoft standby type services.

I don't run MSE in residence, as I'm sure it's taxes resources at times but have Avast running, I turn MSE off in windows services, but still do updated manual scans. As noted below, should scan with at least 2 spyware programs, depending on browsing habits. All pc's running slowly, cutting out, etc,that I have fixed for family members/friends had one thing in common - they were all visiting/downloading from p2p sites.

Speedy Gonzales
02-09-2010, 05:56 PM
Even if MSE is disabled you sholuldnt have 2 AV programs installed

kahawai chaser
02-09-2010, 06:45 PM
Even if MSE is disabled you sholuldnt have 2 AV programs installed

Well true, but I can't find a reputable portable antivirus free version, unlike for spyware programs, ccleaner, revo, etc. Perhaps I could install MSE on my USB or pen drive, but can I update/download (from firefox) to it from my desktop?

Speedy Gonzales
02-09-2010, 06:51 PM
There is a U3 version of Avast I think (if you've got a U3 flash drive). But its not free (I think). I dont think MSE is portable. Some programs have special install files (they're different from normal install files), so they'll install on USB flash drives

It looks like AVG, Antivir, and Clamwin also have portable versions

robortiz59
13-10-2010, 02:21 PM
Just a follow up to close the loop on this. I tried all the suggested ideas. Nothing seemed to work. I gave up, reformatted the drive, and reinstalled Windows. Everything is working well now. I have a couple questions related to restoring my Thunderbird address book and how to access a private folder. But I'll ask them in a new thread. Thanks to everybody for your help.

jhonnydeep
22-10-2010, 09:29 AM
Just delete all the programs and software which is unwanted. dont keep anything in desktop and keep C drive little free space. if you are using internet check the internet speed and then do this and again check the internet speed you can notice the speed of your computer. there are lots and lots of sites offering free internet speed test try there. you can also test your speed here [edited] at free of cost for n number of times...

jareemon
22-10-2010, 11:25 AM
If all else fails, reformat and reinstall windows, if it's still slow, then its a hardware problem