Questions

XP Slowdown

+
0 Votes
Locked

XP Slowdown

richardt
Hello, My XP Pro Startup has slowed over a short space of time. It boots up at a normal speed but once the desktop shows it takes too long for the programs to load. I have tried stopping the Anti-virus and firewall programs, etc. I have run anti-spyware programs and Trend Micro's Hi-Jack This; the results are below .Can anyone suggest a solution. Thanks.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:47:07 PM, on 06/01/08
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\SpamExperts\SpamExperts.exe
C:\Program Files\Adobe\Acrobat 7.0\Acrobat\Acrobat.exe
C:\DOCUME~1\Richard\LOCALS~1\Temp\Adobelm_Cleanup.0001
C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
C:\DOCUME~1\Richard\LOCALS~1\Temp\Adobelm_Cleanup.0001
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mun.ca/
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\spamexpertslsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\spamexpertslsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\spamexpertslsp.dll
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl.sun.com/webapps/download/AutoDL?BundleId=19588
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: C:\WINDOWS\system32\SpamExpertsLSP.dll,avgrsstx.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 6322 bytes
  • +
    0 Votes
    ThumbsUp2

    Whew Weeee! You've got a lot of extra stuff starting that you don't need! No wonder it boots slow! So, what did you install lately that caused the system to slow down? From the looks of things, it's drowning!

    (1) Adobe 7 has two copies of it's update process running. Have you let Adobe installation finish and applied all of the updates, one at a time, rebooting between each until it tells you there are no more updates? Remember too, it's going to check for updates each time you turn on your computer, as does Windows and Java. This all takes time.

    C:\Program Files\Adobe\Acrobat 7.0\Acrobat\Acrobat.exe
    C:\DOCUME~1\Richard\LOCALS~1\Temp\Adobelm_Cleanup.0001
    C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    C:\DOCUME~1\Richard\LOCALS~1\Temp\Adobelm_Cleanup.0001

    (2) Turn off Real Player's automatic start when Windows boots. You can do that in the player's options.

    C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    (3) What is SpamExpert? It has attached to the Winsock 3 times

    O10 - Unknown file in Winsock LSP: c:\windows\system32\spamexpertslsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\spamexpertslsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\spamexpertslsp.dll

    (4) If SpamExpert is legit, is there really a need to run both it and AdAware as a service, both starting when you turn on the system?

    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\Program Files\SpamExperts\SpamExperts.exe


    (5) With DiskKeeper running, it's going to take longer and longer to boot the system as you install more and more programs. Especially those that have to all get themselves started when you boot Windows.

    ( edited - can't count! )

    +
    0 Votes
    nepenthe0

    1) Disable unnecessary services

    See Scott Lowe's excellent TR post of June'05

    http://tinyurl.com/yohler

    2) Disable antivirus applications

    Every time I say this, the security experts jump all over me, calling me everything from an alien to something unfit for description in this Forum. The truth is that all these applications turn a perfectly good PC into molasses.

    3) Disable unneeded startup processes

    Check the Task Manager, and research all the processes that load at startup:

    http://www.processlibrary.com/

    If you have access to msconfig.exe, use this utility to prevent unwanted startup processes from loading. If you do not have access to msconfig.exe, download and install the free antispyware program Spybot Search & Destroy, which has a Tools menu allowing you to reversibly disable startup processes:

    http://www.safer-networking.org/en/index.html

    It goes without saying, create restore points along the way, so that you can recover from a fatal error. It's easy to get so carried away disabling startup processes that you disable an essential Windows process. Ooops.

    I also strongly recommend disk imaging software such as Norton Ghost:

    http://tinyurl.com/5s7gw8

    Make regular image file backups to an external hard drive. The time will come when you will attempt a restore procedure, only to see a Windows message following booting that your computer could not be restored to the selected restore point.

    If you have a backup image file, you can recover a working configuration in less than 10 minutes. Norton Ghost overwrites the hard drive at 1-2GB/minute.

    Hope this helps.

    Rick/Portland, OR

    +
    0 Votes
    OH Smeg

    I have 89 Processes running after Startup but I have a lot of RAM as well so I don't notice much of a problem.

    Try this for starters after you delete the listings above in the previous responce run Defrag on the HDD/s several times a week but you need to do it now especially. To launch Defrag click on Start- All Programs-Accessories-System Tools-Defrag.

    After you have run Defrag a few times if it is still too slow for you go to Start-Run and type in MSCONFIG then Startup you can disable any services not related to the System there and speed up the Boot Times.

    Col

    +
    0 Votes
    Jacky Howe

    Here is a couple of ways to keep your PC tidy and help to speed it up. Just create them and add them to the desktop as a Shortcut. Run deltmp and then run def.

    This Batch file will empty your PC of Temp Files. Make sure that you copy all the information as if you get it wrong you will end up with a PC with a lot of empty folders.

    Copy and paste between the ******* to notepad and save the file to the Root directory C:\> as deltmp.cmd
    ****************
    :USERPROFILE
    c:
    cd \
    cd %USERPROFILE%\"Local Settings"\"Temporary Internet Files"
    del *.* /s /q
    rmdir . /s /q
    goto PREFETCH

    :PREFETCH
    cd \
    cd %WINDIR%\PREFETCH
    del *.* /s /q
    goto INIT

    :INIT
    @echo off
    setlocal
    set cStatflag=0
    C:

    :USERTEMP
    cd \
    cd %TEMP%


    :REMOVE
    del *.* /s /q
    rmdir . /s /q

    :CHECK
    if %cStatflag%==1 goto FINISH

    :WINTEMP
    cd \
    cd %WINDIR%\TEMP
    set cStatflag=1
    goto REMOVE

    :FINISH
    endlocal
    ***************

    This is a Command line version of the Defrag Utility follow the above steps and save it as def.cmd, you will have to create a text file and save it to the root directory as well it will be named DrvLtr.txt and it will list the Drives that you want to Defragment. EG: C: and press Enter and press Enter it is one line for each Drive.
    **************************
    REM chkdsk and defrag automation
    for /F "eol= tokens=1 delims=( " %%i in (DrvLtr.txt) do set DrvLtr=%%i& call :dsKchk

    :dsKchk
    If %DrvLtr% == end goto :eof
    chkdsk %DrvLtr%
    If not errorlevel 3 goto :defrag
    If not exist %DrvLtr%\winnt If not exist %DrvLtr%\windows If not exist %DrvLtr%\pagefile.sys goto :dskchkon

    :dskchkoff
    cd\
    %DrvLtr%
    echo Y chkdsk /F /R
    goto :defrag

    :dskchkon
    chkdsk %DrvLtr% /F /R

    :defrag
    cd\
    %DrvLtr%
    defrag %DrvLtr% -b
    defrag %DrvLtr%
    :EOF
    **************************

    It will probably run through twice the first time that you use it.

    +
    0 Votes
    nepenthe0

    I've copied your batch files and will put them to good use. Thanks, True Blue!

    Rick/Portland, OR

    +
    0 Votes
    Jacky Howe

    I put them on all of my clients PC's and give them instructions on their use. The heavy Internet Users have the deltmp.cmd added to Startup.

  • +
    0 Votes
    ThumbsUp2

    Whew Weeee! You've got a lot of extra stuff starting that you don't need! No wonder it boots slow! So, what did you install lately that caused the system to slow down? From the looks of things, it's drowning!

    (1) Adobe 7 has two copies of it's update process running. Have you let Adobe installation finish and applied all of the updates, one at a time, rebooting between each until it tells you there are no more updates? Remember too, it's going to check for updates each time you turn on your computer, as does Windows and Java. This all takes time.

    C:\Program Files\Adobe\Acrobat 7.0\Acrobat\Acrobat.exe
    C:\DOCUME~1\Richard\LOCALS~1\Temp\Adobelm_Cleanup.0001
    C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    C:\DOCUME~1\Richard\LOCALS~1\Temp\Adobelm_Cleanup.0001

    (2) Turn off Real Player's automatic start when Windows boots. You can do that in the player's options.

    C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    (3) What is SpamExpert? It has attached to the Winsock 3 times

    O10 - Unknown file in Winsock LSP: c:\windows\system32\spamexpertslsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\spamexpertslsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\spamexpertslsp.dll

    (4) If SpamExpert is legit, is there really a need to run both it and AdAware as a service, both starting when you turn on the system?

    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\Program Files\SpamExperts\SpamExperts.exe


    (5) With DiskKeeper running, it's going to take longer and longer to boot the system as you install more and more programs. Especially those that have to all get themselves started when you boot Windows.

    ( edited - can't count! )

    +
    0 Votes
    nepenthe0

    1) Disable unnecessary services

    See Scott Lowe's excellent TR post of June'05

    http://tinyurl.com/yohler

    2) Disable antivirus applications

    Every time I say this, the security experts jump all over me, calling me everything from an alien to something unfit for description in this Forum. The truth is that all these applications turn a perfectly good PC into molasses.

    3) Disable unneeded startup processes

    Check the Task Manager, and research all the processes that load at startup:

    http://www.processlibrary.com/

    If you have access to msconfig.exe, use this utility to prevent unwanted startup processes from loading. If you do not have access to msconfig.exe, download and install the free antispyware program Spybot Search & Destroy, which has a Tools menu allowing you to reversibly disable startup processes:

    http://www.safer-networking.org/en/index.html

    It goes without saying, create restore points along the way, so that you can recover from a fatal error. It's easy to get so carried away disabling startup processes that you disable an essential Windows process. Ooops.

    I also strongly recommend disk imaging software such as Norton Ghost:

    http://tinyurl.com/5s7gw8

    Make regular image file backups to an external hard drive. The time will come when you will attempt a restore procedure, only to see a Windows message following booting that your computer could not be restored to the selected restore point.

    If you have a backup image file, you can recover a working configuration in less than 10 minutes. Norton Ghost overwrites the hard drive at 1-2GB/minute.

    Hope this helps.

    Rick/Portland, OR

    +
    0 Votes
    OH Smeg

    I have 89 Processes running after Startup but I have a lot of RAM as well so I don't notice much of a problem.

    Try this for starters after you delete the listings above in the previous responce run Defrag on the HDD/s several times a week but you need to do it now especially. To launch Defrag click on Start- All Programs-Accessories-System Tools-Defrag.

    After you have run Defrag a few times if it is still too slow for you go to Start-Run and type in MSCONFIG then Startup you can disable any services not related to the System there and speed up the Boot Times.

    Col

    +
    0 Votes
    Jacky Howe

    Here is a couple of ways to keep your PC tidy and help to speed it up. Just create them and add them to the desktop as a Shortcut. Run deltmp and then run def.

    This Batch file will empty your PC of Temp Files. Make sure that you copy all the information as if you get it wrong you will end up with a PC with a lot of empty folders.

    Copy and paste between the ******* to notepad and save the file to the Root directory C:\> as deltmp.cmd
    ****************
    :USERPROFILE
    c:
    cd \
    cd %USERPROFILE%\"Local Settings"\"Temporary Internet Files"
    del *.* /s /q
    rmdir . /s /q
    goto PREFETCH

    :PREFETCH
    cd \
    cd %WINDIR%\PREFETCH
    del *.* /s /q
    goto INIT

    :INIT
    @echo off
    setlocal
    set cStatflag=0
    C:

    :USERTEMP
    cd \
    cd %TEMP%


    :REMOVE
    del *.* /s /q
    rmdir . /s /q

    :CHECK
    if %cStatflag%==1 goto FINISH

    :WINTEMP
    cd \
    cd %WINDIR%\TEMP
    set cStatflag=1
    goto REMOVE

    :FINISH
    endlocal
    ***************

    This is a Command line version of the Defrag Utility follow the above steps and save it as def.cmd, you will have to create a text file and save it to the root directory as well it will be named DrvLtr.txt and it will list the Drives that you want to Defragment. EG: C: and press Enter and press Enter it is one line for each Drive.
    **************************
    REM chkdsk and defrag automation
    for /F "eol= tokens=1 delims=( " %%i in (DrvLtr.txt) do set DrvLtr=%%i& call :dsKchk

    :dsKchk
    If %DrvLtr% == end goto :eof
    chkdsk %DrvLtr%
    If not errorlevel 3 goto :defrag
    If not exist %DrvLtr%\winnt If not exist %DrvLtr%\windows If not exist %DrvLtr%\pagefile.sys goto :dskchkon

    :dskchkoff
    cd\
    %DrvLtr%
    echo Y chkdsk /F /R
    goto :defrag

    :dskchkon
    chkdsk %DrvLtr% /F /R

    :defrag
    cd\
    %DrvLtr%
    defrag %DrvLtr% -b
    defrag %DrvLtr%
    :EOF
    **************************

    It will probably run through twice the first time that you use it.

    +
    0 Votes
    nepenthe0

    I've copied your batch files and will put them to good use. Thanks, True Blue!

    Rick/Portland, OR

    +
    0 Votes
    Jacky Howe

    I put them on all of my clients PC's and give them instructions on their use. The heavy Internet Users have the deltmp.cmd added to Startup.