1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Slow pc [HJT LOG]

Discussion in 'Malware and Virus Removal Archive' started by Eleanor316, 2007/08/26.

  1. 2007/08/26
    Eleanor316

    Eleanor316 Well-Known Member Thread Starter

    Joined:
    2002/09/29
    Messages:
    268
    Likes Received:
    2
    Trying to help a friend whose pc has gotten horribly slow. Takes up to 2 minutes to load Internet Explorer or other programs, even such things as Control Panel functions open very slow.
    Minimum applications running at start up.

    Dell pc running Windows XP HE SP2 (laptop)
    3 GB HD, 256 RAM
    IE 6, Windows updates done

    Have run McAfee and AVG scans, no virus
    Ran AVG spyware, deleted 10 moderate risk spyware
    Run scandisk and defrag

    Have run out of idea on how to solve problem.
    Is there anything in this log file that could be causing the problem?

    Logfile of HijackThis v1.99.1
    Scan saved at 10:12:32 PM, on 8/25/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Dell\EUSW\Support.exe
    C:\WINDOWS\system32\pctspk.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\PROGRA~1\AVG\avgamsvr.exe
    C:\PROGRA~1\SBCSEL~2\SMARTB~1\MotiveSB.exe
    C:\PROGRA~1\AVG\avgcc.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\PROGRA~1\AVG\avgupsvc.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
    C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    c:\program files\common files\mcafee\mna\mcnasvc.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
    c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
    C:\PROGRA~1\mcafee.com\agent\mcagent.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    C:\Program Files\McAfee\MPF\MPFSrv.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
    C:\Program Files\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dellnet.com
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://clinic.mcafee.com/clinic/roo...oemid=1790-642&dtag=JKJWD21&installtype=force (obfuscated)
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
    R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
    O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
    O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
    O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
    O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\SBCSEL~2\SMARTB~1\MotiveSB.exe
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\AVG\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O15 - Trusted Zone: *.troweprice.com
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\common\yinsthelper.dll
    O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,76/mcinsctl.cab
    O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,19/mcgdmgr.cab
    O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\AVG\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\AVG\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\AVG\avgemc.exe
    O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
    O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
    O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6066\SAService.exe
     
  2. 2007/08/26
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,072
    Likes Received:
    400
    Use HjT to get rid of:

    R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file

    Run Disk Cleanup and delete all temp files:
    start > programs > accesories > system tools > disk cleanup

    I hope this is a typo:
    If the drive is really only 3 GB then that is why the comp is so slow. It's not big enough.
     

  3. to hide this advert.

  4. 2007/08/26
    rsjones

    rsjones Inactive

    Joined:
    2007/08/25
    Messages:
    12
    Likes Received:
    0
    Hi Eleanor

    Yeah! I hope that is a typo on the HD also.

    Your HJT log does not reveal any obvious spy/aware or virus.

    But it does reveal what I think is your problems.

    1. This is the least of the 3 problems.
    You seem to have 2 competing Major Tool bars. Not good. They clash trying to be your one and only!

    Un-install either the Yahoo tool bar or Google.

    2. Next in severity. This issue can effect performance but not likely. But this does need to be addressed. Your Java is out of date.

    You will need to uninstall all Java and up date to the newest version. Go to Control panel Add/Remove programs and remove

    Java and J2SE Runtime Environment entries(all entries). Then reboot.

    Then get the latest version from Sun here and install.

    http://www.java.com/en/download/index.jsp

    3. This is the worst problem with your slowdown.

    You have 2 Online major Virus scanners. One needs to go.

    My suggestion keep AVG dump Mcaffee. AVG is one of the best virus scanners that is also very light on the processor.

    Mcafee is very heavy on the processor and is not any better and perhaps not as good as AVG.
    Mcafee is a little hard to remove (another one of it's issues) as just un-installing does not do it completely.

    The Mcafee site advisor is a good thing altho it does have some processor overhead.

    If you decide to un-install Mcafee go to control panel Add\Remove software un-install all Mcafee products including Site Advisor. (Put that back later if you want).

    After un-installing Mcafee and rebooting get back and I will give you the steps to finish removing it.

    At this point tho you should have a noticeable performance increase.

    RS
     
  5. 2007/08/26
    Eleanor316

    Eleanor316 Well-Known Member Thread Starter

    Joined:
    2002/09/29
    Messages:
    268
    Likes Received:
    2
    You're right, it was a typo HD is 13 GB. I had previously run disk cleanup and deleted all temporary files before running sypware and virus scans.

    At your suggestion, have uninstalled Yahoo tool bar, but not yet installed and reinstalled Java. I installed AVG to run a virus scan other than McAfee ; pc was slow before that was installed.

    This pc is 4 1/2 years old and hasn't had the bests of care/usage by the owner (a friend), so I believe it has problems other than the obvious. Will suggest he get a new pc; he can afford it. My favorite pc is Dell, have had 4 and liked all of them. Especially like their next day at-home service on hardware problems. What brand do you prefer?

    Thanks for your help.
     
  6. 2007/08/26
    rsjones

    rsjones Inactive

    Joined:
    2007/08/25
    Messages:
    12
    Likes Received:
    0
    Hi Eleanor

    No doubt that it was slow before. Because of Mcafee.

    You can always reinstall Mcafee.

    So why not see what a big diference it will make. It will be a big difference.

    Mine and a lot of other Pros acknowledge that McAfee has problems and I and many truly believe AVG is better. Just because it is free don't make it lesser quality in this case.

    In yout last post you acknowlege this is an older computer. As such is less a candidate for a bloated CPU hog like McAfee. If this is a newer McAfee then its resource drag will draw an older computer way down.

    This drag is still there on a new Hi speed processor but is less noticable.

    Try it! But it is up to you.

    RS
     
  7. 2007/08/26
    mva5493

    mva5493 Well-Known Member

    Joined:
    2007/01/29
    Messages:
    287
    Likes Received:
    0
    Eleanor,
    I am not an expert by no means, but I am currently working on a dell also with xp, also having issues with being slow, the memory is also 256mb...I think that is part of the problem...it has been recommended here that windows xp needs at least 512 to function properly.
     
  8. 2007/08/26
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,072
    Likes Received:
    400
    I did not suggest uninstalling yahoo toolbar, who suggested that?
     
  9. 2007/08/26
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    rsjones, who's posts have been removed from the forum
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.