Slow computer

Author
Discussion

Race2the redline

Original Poster:

477 posts

235 months

Thursday 4th January 2007
quotequote all
race2the redline said:
BliarOut said:
Run task manager and double click on the CPU and then the memory columns to sort which is using all your system resources and then report back.


Thanks, ill try this tonight and report back.

Regards
R2TR


Right mem usage in decending order:

iexplore.exe 32128k
msnmsgr.exe 26800k
svchost.exe 24472k
explorer.exe 23032k
avgcc.exe 10380k
avgamsvr.exe 7252k
apdproxy.exe 7032k
avgemc.exe 6912k
servicelayer.exe 5592k
ycommon.exe 5540k
ituneshelper.exe 5508k
ctsysvol.exe 5432k
svchost.exe 5328k
etc etc etc

46 processes
CPU usage 1%
Commit charge 263m/3939m

BliarOut

72,857 posts

240 months

Thursday 4th January 2007
quotequote all
RAM is fine....

Click on the CPU column to sort by it and see which process is grabbing the most CPU time. Chances are they'll jump about a bit. If everything is minimised the system idle process should be grabbing most your CPU time.

If nothing stands out, Google a copy of HijackThis and copy/paste the output of the logfile here.

ThePassenger

6,962 posts

236 months

Thursday 4th January 2007
quotequote all
Start > Control Panel > System > Hardware > Device Manager.

Hit the [+] next to ATA/ATAPI Controller, right click on the one called 'Primary' select properties.

Go to 'Advanced Properties' is the first one using UDMA?

Reboot go in to the BIOS (tap Del or F2) wander around and look for something called S.M.A.R.T (often in the Advanced area or bundled in with the section dealing with drives), turn it on. Save settings. The computer will reboot.

If it instantly goes "SMART error HDD0 is about to fail" you need to buy a new drive.

BliarOut

72,857 posts

240 months

Thursday 4th January 2007
quotequote all
ThePassenger said:
Start > Control Panel > System > Hardware > Device Manager.

Hit the [+] next to ATA/ATAPI Controller, right click on the one called 'Primary' select properties.

Go to 'Advanced Properties' is the first one using UDMA?

Reboot go in to the BIOS (tap Del or F2) wander around and look for something called S.M.A.R.T (often in the Advanced area or bundled in with the section dealing with drives), turn it on. Save settings. The computer will reboot.

If it instantly goes "SMART error HDD0 is about to fail" you need to buy a new drive.

Have you recently taken on an HDD franchise?

Race2the redline

Original Poster:

477 posts

235 months

Thursday 4th January 2007
quotequote all
BliarOut said:
RAM is fine....

Click on the CPU column to sort by it and see which process is grabbing the most CPU time. Chances are they'll jump about a bit. If everything is minimised the system idle process should be grabbing most your CPU time.

If nothing stands out, Google a copy of HijackThis and copy/paste the output of the logfile here.


The only thing that is using anything is the 'System Idle Process' at circa 98

Ill have a look for the HijackThis program.

Thanks

ThePassenger

6,962 posts

236 months

Thursday 4th January 2007
quotequote all
BliarOut said:
Have you recently taken on an HDD franchise?


Nope, but everyone is poking Windows with a sharp stick; I do agree it's most likely Windows going 'phut' but a knackered drive can cause the system to be sluggish. Besides turning on SMART is a sensible thing regardless.

BliarOut

72,857 posts

240 months

Thursday 4th January 2007
quotequote all
Race2the redline said:
BliarOut said:
RAM is fine....

Click on the CPU column to sort by it and see which process is grabbing the most CPU time. Chances are they'll jump about a bit. If everything is minimised the system idle process should be grabbing most your CPU time.

If nothing stands out, Google a copy of HijackThis and copy/paste the output of the logfile here.


The only thing that is using anything is the 'System Idle Process' at circa 98

Ill have a look for the HijackThis program.

Thanks

It'll tell us if anything untoward is running... Seems reasonable so far, ie. nothings consuming your machine.

Race2the redline

Original Poster:

477 posts

235 months

Thursday 4th January 2007
quotequote all
BliarOut said:
Race2the redline said:
BliarOut said:
RAM is fine....

Click on the CPU column to sort by it and see which process is grabbing the most CPU time. Chances are they'll jump about a bit. If everything is minimised the system idle process should be grabbing most your CPU time.

If nothing stands out, Google a copy of HijackThis and copy/paste the output of the logfile here.


The only thing that is using anything is the 'System Idle Process' at circa 98

Ill have a look for the HijackThis program.

Thanks


Logfile of HijackThis v1.99.1
Scan saved at 19:09:46, on 04/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesAdobePhotoshop Elements 4.0PhotoshopElementsFileAgent.exe
C:PROGRA~1GrisoftAVGFRE~1avgamsvr.exe
C:PROGRA~1GrisoftAVGFRE~1avgupsvc.exe
C:WINDOWSsystem32CTsvcCDA.EXE
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32MsPMSPSv.exe
C:Program FilesCommon FilesSymantec SharedSecurity CenterSymWSC.exe
C:Program FilesJavajre1.5.0_10 injusched.exe
C:Program FilesCreativeSound Blaster Live! 24-bitSurround MixerCTSysVol.exe
C:WINDOWSsystem32Rundll32.exe
C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe
C:PROGRA~1Yahoo! rowserybrwicon.exe
C:PROGRA~1GrisoftAVGFRE~1avgcc.exe
C:PROGRA~1GrisoftAVGFRE~1avgemc.exe
C:Program FilesMicrosoft IntelliType Pro ype32.exe
C:Program FilesMicrosoft IntelliPointpoint32.exe
C:WINDOWSvsnpstd.exe
C:PROGRA~1Yahoo! rowserycommon.exe
C:Program FilesQuickTimeqttask.exe
C:Program FilesiTunesiTunesHelper.exe
C:Program FilesAdobePhotoshop Elements 4.0apdproxy.exe
C:Program FilesDell SupportDSAgnt.exe
C:Program FilesMSN MessengerMsnMsgr.Exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesDigital Line DetectDLG.exe
C:Program FilesiPod iniPodService.exe
C:PROGRA~1Yahoo!MESSEN~1ymsgr_tray.exe
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:Program FilesCommon FilesPCSuiteServicesServiceLayer.exe
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:DOCUME~1DanLOCALS~1TempTemporary Directory 1 for hijackthis[1].zipHijackThis.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = www.dell.co.uk/myway
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://mysearch.myway.com/jsp/dellsid
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = www.google.co.uk/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkI
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkI
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://uk.red.clientapps.yahoo.com/cu*http://uk.docs.yahoo.com/info/bt_side
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkI
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkI
R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://uk.red.clientapps.yahoo.com/cu*http://uk.search.yahoo.com/
R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://bt.yahoo.com/
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:Program FilesMyWaySASrchAsDedeSrcAs.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:Program FilesMyWaySASrchAsDedeSrcAs.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:PROGRA~1SPYBOT~1SDHelper.dll
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:Program FilesYahoo!Commonyiesrvc.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:Program FilesYahoo!CommonYIeTagBm.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.5.0_10 inssv.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:Program FilesYahoo! rowserYSidebarIEBHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:Program FilesYahoo!CompanionInstallscpnyt.dll
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre1.5.0_10 injusched.exe"
O4 - HKLM..Run: [ATIPTA] C:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe
O4 - HKLM..Run: [CTSysVol] C:Program FilesCreativeSound Blaster Live! 24-bitSurround MixerCTSysVol.exe /r
O4 - HKLM..Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM..Run: [UpdReg] C:WINDOWSUpdReg.EXE
O4 - HKLM..Run: [ISUSPM Startup] C:PROGRA~1COMMON~1INSTAL~1UPDATE~1ISUSPM.exe -startup
O4 - HKLM..Run: [ISUSScheduler] "C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe" -start
O4 - HKLM..Run: [YBrowser] C:PROGRA~1Yahoo! rowserybrwicon.exe
O4 - HKLM..Run: [AVG7_CC] C:PROGRA~1GrisoftAVGFRE~1avgcc.exe /STARTUP
O4 - HKLM..Run: [AVG7_EMC] C:PROGRA~1GrisoftAVGFRE~1avgemc.exe
O4 - HKLM..Run: [type32] "C:Program FilesMicrosoft IntelliType Pro ype32.exe"
O4 - HKLM..Run: [IntelliPoint] "C:Program FilesMicrosoft IntelliPointpoint32.exe"
O4 - HKLM..Run: [snpstd] C:WINDOWSvsnpstd.exe
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [iTunesHelper] "C:Program FilesiTunesiTunesHelper.exe"
O4 - HKLM..Run: [Adobe Photo Downloader] "C:Program FilesAdobePhotoshop Elements 4.0apdproxy.exe"
O4 - HKCU..Run: [DellSupport] "C:Program FilesDell SupportDSAgnt.exe" /startup
O4 - HKCU..Run: [Yahoo! Pager] C:PROGRA~1Yahoo!MESSEN~1ypager.exe -quiet
O4 - HKCU..Run: [MsnMsgr] "C:Program FilesMSN MessengerMsnMsgr.Exe" /background
O4 - HKCU..Run: [gStart] C:GarmingStart.exe
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_10 inssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_10 inssv.dll
O9 - Extra button: BT Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:Program FilesYahoo!Commonyiesrvc.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoft
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:PROGRA~1MSNMES~1msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:WINDOWSSYSTEM32WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:WINDOWSsystem32WPDShServiceObj.dll
O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:Program FilesAdobePhotoshop Elements 4.0PhotoshopElementsFileAgent.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:WINDOWSsystem32Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:PROGRA~1GrisoftAVGFRE~1avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:PROGRA~1GrisoftAVGFRE~1avgupsvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:WINDOWSsystem32CTsvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:Program FilesiPod iniPodService.exe
O23 - Service: ServiceLayer - Nokia. - C:Program FilesCommon FilesPCSuiteServicesServiceLayer.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedSecurity CenterSymWSC.exe
O23 - Service: YPCService - Yahoo! Inc. - C:WINDOWSsystem32YPCSER~1.EXE
It'll tell us if anything untoward is running... Seems reasonable so far, ie. nothings consuming your machine.

BliarOut

72,857 posts

240 months

Thursday 4th January 2007
quotequote all
Just shooting out the door,

However couple of things. Symantec & AVG?

Also R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:Program FilesMyWaySASrchAsDedeSrcAs.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:Program FilesMyWaySASrchAsDedeSrcAs.dll

Race2the redline

Original Poster:

477 posts

235 months

Thursday 4th January 2007
quotequote all
ThePassenger said:
Start > Control Panel > System > Hardware > Device Manager.

Hit the [+] next to ATA/ATAPI Controller, right click on the one called 'Primary' select properties.

Go to 'Advanced Properties' is the first one using UDMA?

Reboot go in to the BIOS (tap Del or F2) wander around and look for something called S.M.A.R.T (often in the Advanced area or bundled in with the section dealing with drives), turn it on. Save settings. The computer will reboot.

If it instantly goes "SMART error HDD0 is about to fail" you need to buy a new drive.


I have done the first part of this, there are two identical 'Primary IDE channel' both show the below:

Device type: Auto detection
Transfer mode: DMA if available
Current transfer mode ULTRA DMA mode 5

regards
R2TR

ThePassenger

6,962 posts

236 months

Thursday 4th January 2007
quotequote all
BliarOut said:
Just shooting out the door,

However couple of things. Symantec & AVG?

Also R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:Program FilesMyWaySASrchAsDedeSrcAs.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:Program FilesMyWaySASrchAsDedeSrcAs.dll


And the one ending in SymWSC.exe can go for a bloody start. Kill Symantec... kill it with fire! *cough*

Race2the redline

Original Poster:

477 posts

235 months

Thursday 4th January 2007
quotequote all
BliarOut said:
Just shooting out the door,

However couple of things. Symantec & AVG?

Also R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:Program FilesMyWaySASrchAsDedeSrcAs.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:Program FilesMyWaySASrchAsDedeSrcAs.dll


Thankyou; i assume i dont need both Symantec and AVG?

with regards to the other 2 items i have no idea?

regards
R2TR

ThePassenger

6,962 posts

236 months

Thursday 4th January 2007
quotequote all
Race2the redline said:
BliarOut said:
Just shooting out the door,

However couple of things. Symantec & AVG?

Also R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:Program FilesMyWaySASrchAsDedeSrcAs.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:Program FilesMyWaySASrchAsDedeSrcAs.dll


Thankyou; i assume i dont need both Symantec and AVG?

with regards to the other 2 items i have no idea?

regards
R2TR


No. Two Virus killers on a system is considered a bad thing. As is two Firewalls.

Race2the redline

Original Poster:

477 posts

235 months

Thursday 4th January 2007
quotequote all
ThePassenger said:
BliarOut said:
Just shooting out the door,

However couple of things. Symantec & AVG?

Also R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:Program FilesMyWaySASrchAsDedeSrcAs.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:Program FilesMyWaySASrchAsDedeSrcAs.dll


And the one ending in SymWSC.exe can go for a bloody start. Kill Symantec... kill it with fire! *cough*


Another opportunity to show my ignorance with regards to computers:

Firstly the files ending ‘SymWSC.exe’ how can these be safely removed can I use the tool that originally found them (HijackThis) to ‘fix’

Secondly; I assume Symantec (Norton) has an uninstall feature that will remove all traces?

Regards
R2TR

ThePassenger

6,962 posts

236 months

Thursday 4th January 2007
quotequote all
Race2the redline said:
ThePassenger said:
BliarOut said:
Just shooting out the door,

However couple of things. Symantec & AVG?

Also R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:Program FilesMyWaySASrchAsDedeSrcAs.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:Program FilesMyWaySASrchAsDedeSrcAs.dll


And the one ending in SymWSC.exe can go for a bloody start. Kill Symantec... kill it with fire! *cough*


Another opportunity to show my ignorance with regards to computers:

Firstly the files ending ‘SymWSC.exe’ how can these be safely removed can I use the tool that originally found them (HijackThis) to ‘fix’

Secondly; I assume Symantec (Norton) has an uninstall feature that will remove all traces?

Regards
R2TR


Yep, Symantec / Norton should have an uninstall feature. Start > Control Panel > Add/Remove Programs. It should be listed in there. However, don't expect it to work properly. Figure out what your actual product is and then google "<product name> removal" to get a wide range of utilities that will finish the job.

Race2the redline

Original Poster:

477 posts

235 months

Thursday 4th January 2007
quotequote all
ThePassenger said:
Race2the redline said:
ThePassenger said:
BliarOut said:
Just shooting out the door,

However couple of things. Symantec & AVG?

Also R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:Program FilesMyWaySASrchAsDedeSrcAs.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:Program FilesMyWaySASrchAsDedeSrcAs.dll


And the one ending in SymWSC.exe can go for a bloody start. Kill Symantec... kill it with fire! *cough*


Another opportunity to show my ignorance with regards to computers:

Firstly the files ending ‘SymWSC.exe’ how can these be safely removed can I use the tool that originally found them (HijackThis) to ‘fix’

Secondly; I assume Symantec (Norton) has an uninstall feature that will remove all traces?

Regards
R2TR


Yep, Symantec / Norton should have an uninstall feature. Start > Control Panel > Add/Remove Programs. It should be listed in there. However, don't expect it to work properly. Figure out what your actual product is and then google "<product name> removal" to get a wide range of utilities that will finish the job.


Done, just the others to worry about now.

ThePassenger

6,962 posts

236 months

Thursday 4th January 2007
quotequote all
Race2the redline said:
Done, just the others to worry about now.


Any improvement in performance?

BliarOut

72,857 posts

240 months

Friday 5th January 2007
quotequote all
The two I hilighted are the MyWay search bar... Do you use/want it? You've got loads of additional browser search tools installed.

race2the redline

Original Poster:

477 posts

235 months

Friday 5th January 2007
quotequote all
BliarOut said:
The two I hilighted are the MyWay search bar... Do you use/want it? You've got loads of additional browser search tools installed.


I found and subsequently ridded my system of a few extra search tools last night.

BliarOut

72,857 posts

240 months

Friday 5th January 2007
quotequote all
So how's it running now?