1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Slow Process

Discussion in 'Malware and Virus Removal Archive' started by elaine, 2005/01/09.

Thread Status:
Not open for further replies.
  1. 2005/01/09
    elaine

    elaine Inactive Thread Starter

    Joined:
    2002/05/08
    Messages:
    162
    Likes Received:
    0
    I've started having major problems with web pages loading, closing, etc. It takes a very long time to open a page, close a page and browse the net.
    I've defraged the system, used SpyBot, and AdaWare. This helped for one or two pages, but the more I move from page to page, the slower it gets again!

    Any suggestions? I'm using Win 98 and am on cable, which has always been very fast .
     
  2. 2005/01/09
    Newt

    Newt Inactive

    Joined:
    2002/01/07
    Messages:
    10,974
    Likes Received:
    2
    Have you emptied your TIFs (temporary internet files) and history?

    If yes and still slow, get Hijackthis (quicklinks in my signature), after downloading unzip it to a normal folder (so not a temp folder of any sort and not the desktop). Run it and use the 'scan and create a log' entry then post the contents of the log file.
     
    Newt,
    #2

  3. to hide this advert.

  4. 2005/01/10
    elaine

    elaine Inactive Thread Starter

    Joined:
    2002/05/08
    Messages:
    162
    Likes Received:
    0
    This is the log file from Hijack this:
    Logfile of HijackThis v1.99.0
    Scan saved at 7:49:21 PM, on 1/10/05
    Platform: Windows 98 SE (Win9x 4.10.2222A)
    MSIE: Internet Explorer v5.00 SP1 (5.00.2614.3500)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\ACCSTAT.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\SYSTEM\IRMON.EXE
    C:\WINDOWS\SYSTEM\PELMICED.EXE
    C:\WINDOWS\DA797.EXE
    C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\TEATIMER.EXE
    C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
    C:\PROGRAM FILES\FINEPIXVIEWER\QUICKDCF.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\PROGRAM FILES\YAHOO!\MESSENGER\YMSGR_TRAY.EXE
    C:\WINDOWS\SYSTEM\PSTORES.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\PROGRAM FILES\HIJACKTHIS.EXE

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\Program Files\Copernic Agent\CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
    R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
    O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN1\YCOMP5_3_16_0.DLL
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
    O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN1\YCOMP5_3_16_0.DLL
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [IrMon] IrMon.exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] PELMICED.EXE
    O4 - HKLM\..\Run: [Logitech Utility] LOGI_MWX.EXE
    O4 - HKLM\..\Run: [da797.exe] da797.exe
    O4 - HKLM\..\Run: [WebSpecials] rundll32 "C:\Program Files\WebSpecials\webspec.dll ",run
    O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
    O4 - HKCU\..\Run: [WebSpecials] rundll32 "C:\Program Files\WebSpecials\webspec.dll ",run
    O4 - Startup: Exif Launcher.lnk = C:\Program Files\FinePixViewer\QuickDCF.exe
    O8 - Extra context menu item: Search Using Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.dll/INTEGRATION_MENU_SEARCHEXT
    O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRAM FILES\COPERNIC AGENT\COPERNICAGENT.EXE
    O9 - Extra 'Tools' menuitem: Launch Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRAM FILES\COPERNIC AGENT\COPERNICAGENT.EXE
    O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRAM FILES\COPERNIC AGENT\COPERNICAGENT.EXE
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
    O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YHEXBMES0521.DLL
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YHEXBMES0521.DLL
    O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
    O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
    O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
    O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/autocomplete.cab
    O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EPUWALControl_v1-0-3-17.cab
    O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = ita.sel.sony.com
    O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 209.47.15.118,64.157.143.38
     
  5. 2005/01/10
    elaine

    elaine Inactive Thread Starter

    Joined:
    2002/05/08
    Messages:
    162
    Likes Received:
    0
    Oh, I forgot, yes, I've deleted the temp files and history.
     
  6. 2005/01/12
    elaine

    elaine Inactive Thread Starter

    Joined:
    2002/05/08
    Messages:
    162
    Likes Received:
    0
    SpyBot

    Also, after running SpyBot, I'm getting an ongoing popup of "spybot has blocked "double click "! What is this??
     
  7. 2005/01/12
    BillyBob Lifetime Subscription

    BillyBob Inactive

    Joined:
    2002/01/07
    Messages:
    6,048
    Likes Received:
    0
    Let someone with more experience help but I will bet $10 on the fact that the problem may well be just too many running processes.

    BillyBob
     
  8. 2005/01/13
    elaine

    elaine Inactive Thread Starter

    Joined:
    2002/05/08
    Messages:
    162
    Likes Received:
    0
    What do I need to do? What should be running and what should not be running?
     
  9. 2005/01/13
    BillyBob Lifetime Subscription

    BillyBob Inactive

    Joined:
    2002/01/07
    Messages:
    6,048
    Likes Received:
    0
    1st off I may be leaning here too.

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\ACCSTAT.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\SYSTEM\IRMON.EXE
    C:\WINDOWS\SYSTEM\PELMICED.EXE
    C:\WINDOWS\DA797.EXE


    Not sure what all of the above is

    C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\TEATIMER.EXE

    Why does that show as a running process ? Was it used and not shut down ?

    C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE

    I have found that ot be useless and trouble causing. Unless you need the special stuff it provides.

    C:\PROGRAM FILES\FINEPIXVIEWER\QUICKDCF.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE

    ???

    C:\PROGRAM FILES\YAHOO!\MESSENGER\YMSGR_TRAY.EXE
    I have found that to cause problems on one machine.

    C:\WINDOWS\SYSTEM\PSTORES.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\PROGRAM FILES\HIJACKTHIS.EXE

    ???

    But I do know that 98SE will not handle too many things running at once. ( got two machines with it.) The Kids use them and get a lot of stuff loaded and I have to clean house.

    BillyBob
     
  10. 2005/01/13
    elaine

    elaine Inactive Thread Starter

    Joined:
    2002/05/08
    Messages:
    162
    Likes Received:
    0
    I don't use Yahoo...my granddaughter uses it when she visits. How do I remove all things associated with Yahoo and not damage anything?

    I use the Logitech Mouse which I assume is part of what you are seeing. Can I remove this and still use my mouse? If so, how do I do that?

    SpyBot...don't know....I run the program, then exit out....could this be the SpyBot Resident that is on? I can turn this off.
     
  11. 2005/01/13
    BillyBob Lifetime Subscription

    BillyBob Inactive

    Joined:
    2002/01/07
    Messages:
    6,048
    Likes Received:
    0
    I don't use Yahoo...my granddaughter uses it when she visits. How do I remove all things associated with Yahoo and not damage anything?

    There should be an Icon the the Systray ( lower right corner ) that you cna use to shut the down.

    I use the Logitech Mouse which I assume is part of what you are seeing. Can I remove this and still use my mouse? If so, how do I do that?

    There should be an entry in Control Panle Add/Remove. If needed or not depends on your machine. I myself have never installed any Mouse or Keyboard software. Windows has always worked OK with its builtin drivers. But wait for more help on this.

    SpyBot...don't know....I run the program, then exit out....could this be the SpyBot Resident that is on? I can turn this off.

    Yes. I think that can be turned off. But I did not know that Sbybot had a resident part. Gotta check on that.

    Oh. BTW. I am hoping that you have run recent Virus scan.

    BillyBob
     
  12. 2005/01/13
    BillyBob Lifetime Subscription

    BillyBob Inactive

    Joined:
    2002/01/07
    Messages:
    6,048
    Likes Received:
    0
    While looking for possibilities of the slowdown I did some checking on Spybot-S&D. I thought I had seen this before but I had to check.

    You must be running it in the advance mode. When I selected ADVANCE Mode a warning came up saying.

    "The advanced mode of Spybot-S&D offers more options than the deafult Mode, but also includes some that can do harm to your system if you do not know what you are diong.
    Do you realy want to switch to the Advanced mode ?
    yes no "

    And I see there is a setting in the advanced mode to allow SSD to load at startup. So I set it to do that. Restarted Windows and you want to talk about SLOWING things down ?

    BillyBob
     
  13. 2005/01/13
    elaine

    elaine Inactive Thread Starter

    Joined:
    2002/05/08
    Messages:
    162
    Likes Received:
    0
    Ok...I just turned that thing off.....BUT.....I also downloaded EZ Armor Firewall software from this site....(I've never installed a firewall)...now, you can't believe how SLOW things are!

    Is a firewall recommended??? If so, what is causing this to become even slower (I didn't think that was possible, it it sure did?)
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.