Sluggish processing and some crashing

check.txt

Administrator
Administrator.TELETRAN-A40479
All Users
All Users.WINDOWS
Default User
Default User.WINDOWS
Gideon
HP_Administrator
LocalService
LocalService.NT AUTHORITY
NetworkService
NetworkService.NT AUTHORITY

 

Highlight and copy the following bolded text.

del /q C:\Docume~1\HP_Administrator\Local~1\Temp\*.*
rmdir /q /s C:\Docume~1\HP_Administrator\Local~1\Temp
md C:\Docume~1\HP_Administrator\Local~1\Temp

Right click check.bat and select Edit. When it opens, click the page once to make sure it's the active window. Press the Ctrl and A keys to select everything on the page, then press the Ctrl and V keys. That will paste the copied text from above onto the page. Close check.bat and save the changes. Now right click check.bat and select Copy. Open My Computer and right click Local Disk C: then select paste.

Reboot to safe mode and logon to the Administrator account. Open Local Disk C: and double click check.bat to run it. It should run quickly and close. Reboot to normal mode and try your av scan again.

 

Task completed scan failed.

 

What did it fail on?

 

This is about where the scan fails. (C:\Documents and Settings\HP_Administrator\LocalSettings\Temp) If I browse my C: drve and go into Documents and Settings I'm forced to close. I can't get any furtherthan that. It seems to be getting worse... If that's possible.

 

Download ATF Cleaner by Atribune and save it to your Desktop.

• Double click ATF-Cleaner.exe to run the program.
• Check the boxes to the left of:
  
  
  • Windows Temp
  • Current User Temp
  • All Users Temp
  • Temporary Internet Files
  • Prefetch
  • Java Cache
  • Recycle bin
  
  
• The rest are optional - if you want it to remove everything check "Select All ".
• Finally, click Empty Selected. When you get the "Done Cleaning" message, click OK then exit.

Reboot

See if the problem persists.

 

I have used ATF. I have had it all along. the problem still presists. I am out of ideas. If I get near the C:\Documents and Settings\HP_Administrator\LocalSettings it asks if I want to send an error report to Microsoft. (like they are gonna help I have run search and destroy and Adaware.... Nothin. Do you think it's in the registry? if so I can't go near it there either. Not in regedit. I learned a few things a while back from T-Merc. Still totally an amature and know not to mess with things I don't understand. I did looked in the registry and got booted.



I suppose you need a scan for HJT. Question if I transfered all of my files that I want to keep to one of my other 2 hard drives can I format the drive with the OS and not loose the OS?

 

Looking back over the Docs and Settings directory listing above, I'm thinking that the HP_Administrator folder may be a folder you can remove entirely. There was a parallel installation done at some point, which accounts for the duplicated folders like All Users and All Users.WINDOWS
The Gideon folder is likely your current user profile directory, and the HP_Administrator is probably the original user profile directory. Can you open the HP_Administrator\Desktop folder and verify if it was from the previous installation, based on what you might remember having on the desktop prior to the repair installation? Or maybe the HP_Administrator\My Documents folder?

Try this too. Click Start>Run and type (or paste) lusrmgr.msc then hit enter. Click the Users folder. Is HP_Administrator listed in the right pane?


If you format the drive, ALL data will be lost.

 

I can open HP_Administrator desktop and it does look like my old desktop and also My Documents. When preforming (lusrmgr.msc) I did not see HP_Administrator. It showed [Local Users Local Groups (Local)] Should I delete HP_Administrator folder?

 

I would say yes. Might want to look through the My Documents folder and subfolders to see if there's anything you want to keep.

The following folders are no longer needed either.

Administrator
All Users
Default User
LocalService
NetworkService

 

Ok, I deleted the files suggested. What about HP_Administrator?

 

Yes, delete it.

 

I tried to delete HP_Administrator but was un able to.

 

Most likely a permissions problem. Boot to safe mode and logon to the administrator account. Right click the HP-Administrator folder and select Properties. Select the Security tab. Click Advanced. Select the Owner tab. Click Administrator in the list, check the box to replace owner then click OK. Back on the Security tab, make sure Administrator is listed and when selected, the lower pane shows full control allowed. If not listed, click Add. Type Administrator then click Check Names. Administrator should populate. Click OK and then check for full control again. OK out and you should be able to delete the folder.

 

Ok.. I can't get near it without it shutting down windows explorer..... I tried all you've suggested. I did however looked at some file names and figured this is the guy.... DRWTSN32.EXE. Any ideas?

 

Please download OTMoveIt by OldTimer.

• Save it to your desktop.
• Double-click OTMoveIt.exe to run it.
• If pre-checked, Uncheck the box labled 'Unregister Dll's and Ocx's'
• Copy the bolded path below to the clipboard by highlighting and pressing CTRL + C (or, after highlighting, right-click and choose copy)
  
  C:\Docume~1\HP_Administrator
  
  
• Return to OTMoveIt, right click on the 'Paste List of Files/Folders to be moved' window and choose Paste.
• Click the red Moveit! button.
• Copy everything on the Results window to the clipboard by highlighting ALL of it and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it on your next reply.
• Click "Exit " to close OTMoveIt.

*If a file or folder cannot be moved immediately, you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine, choose Yes.

**If a reboot was necessary or you needed to Exit before posting the log, you will find a copy of the log at the root of the drive where OTMoveIt is installed, usually at :
C:\_OTMoveIt\MovedFiles\********_******.log
(where "********_******" is the "date_time ")