Processes and Memory?

Hi, I'm having trouble with my comp and i'm thinking it's due to memory.

When I click on "Shut Off" to turn off the computer, it has to wait for like 5 minutes before it completely shuts off, it seems to just pause (no busy sounds coming from the computer other than the fan). Also when double click on programs to start it, it shows the busy hourglass sign on the mouse pointer than it just... returns normal, nothing shows up/starts.
So i looked at the task manager to see the processes to whether it's still beginning or not. It was there. The Mem usage of these process are significantly much higher (varying from 1000 - 8000kb) than i can remember, and I don't know which ones should be shut off and which ones should be kept.
I tried spyware/adware clean up tools to get rid of useless things and tried to Regcleaner also. Help me plz, this is getting really really annoying.

 

Oh and I just remembered, I think this began approximately when I was trying out the window password system. In the control pannel I went to users/passwords and set up a password along with the setting that every user must enter password (at this time there were only Administrator and Guests). When I realized this was useless to me, I changed the setting back to normal, when I did, it seemed to have created a new login in name of "Mark ".
So when I goto windows explorer and look in the folder "documents and settings ", I see subfolders "administrators" "All users" "Default User" and "Mark ". Does the fact there seems to exist different settings in these subfolders somehow effect my process/memory thing?

 

Tell me what you used and how you cleaned Spy/Adware?

Do the following things

D/L startuplist install and run it will put all your starups in a wordpad file. Copy this and paste back in a message so we can read.

http://www.spywareinfo.com/~merijn/files/startuplist.zip

then

Start-Run

type

cleanmgr /sageset:1

It will present a menu select all but compression, then

Start-Run

type

cleanmgr /sagerun:1

When tha completes

Start-Run

type

sfc /scannow

then

Start-Run

type

chkdsk /r

reboot to complete and get back. Remeber to tell how and what you did before.

Mike

 

I downloaded somethign called "Spy bot- search and destroy" and "Lavasoft Ad-Aware" and i selected everything that I installed before and I no longer use, like a game files that i thought i uninstalled long ago.


StartupList report, 1/26/2003, 1:30:24 PM
StartupList version: 1.51
Started from : C:\Downloads\StartupList.EXE
Detected: Windows 2000 SP3 (WinNT 5.00.2195)
Detected: Internet Explorer v6.00 (6.00.2600.0000)
* Using default options
==================================================

Running processes:

C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\PROGRA~1\Navnt\navapsvc.exe
C:\PROGRA~1\Navnt\npssvc.exe
C:\WINNT\System32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe
C:\WINNT\System32\internat.exe
C:\Program Files\Navnt\navapw32.exe
C:\PROGRA~1\Navnt\alertsvc.exe
C:\Program Files\KaZaA\kazaa.exe
C:\Documents and Settings\Administrator\Desktop\Tribes Demo.exe
C:\Documents and Settings\All Users\Desktop\Explorer.EXE
C:\Downloads\StartupList.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
Norton AntiVirus AutoProtect.lnk = C:\Program Files\Navnt\navapw32.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINNT\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

Synchronization Manager = mobsync.exe /logon
NvCplDaemon = RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
hpppta = C:\Program Files\Hewlett-Packard\HP PrecisionScan\PrecisionScan\hpppta.exe /ICON
NPS Event Checker = C:\PROGRA~1\Navnt\npscheck.exe
(Default) =
QuickTime Task = "C:\Program Files\QuickTime\qttask.exe" -atboottime
TkBellExe = C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

internat.exe = internat.exe

--------------------------------------------------


Enumerating Download Program Files:

[HS_live Control]
InProcServer32 = C:\WINNT\System32\HS_live.ocx
CODEBASE = http://install.homestead.com/~site/InstallFiles/SIFiles/live/HS_live.cab

[Shockwave ActiveX Control]
InProcServer32 = C:\WINNT\system32\Macromed\Director\SwDir.dll
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

[{41F17733-B041-4099-A042-B518BB6A408C}]
CODEBASE = http://a1540.g.akamai.net/7/1540/52...le.com/samantha/us/win/QuickTimeInstaller.exe

[Update Class]
InProcServer32 = C:\WINNT\System32\iuctl.dll
CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37471.5261458333

[ScorchPlugin Class]
InProcServer32 = C:\WINNT\Downloaded Program Files\NPSibelius.dll
CODEBASE = http://www.sibelius.com/download/software/win/ActiveXPlugin.cab

[session Class]
InProcServer32 = C:\WINNT\System32\sayax.dll
CODEBASE = http://dl.sayclub.com/sayclub/sayctl/sayax.cab

[WTHoster Class]
InProcServer32 = C:\WINNT\wt\webdriver\wthostctl.dll
CODEBASE = http://www.wildtangent.com/install/wdriver/ddc/shockwave/blackhawkstriker/wtinst.cab

[Btool Control]
InProcServer32 = C:\WINNT\System32\btool.ocx
CODEBASE = http://iwebschool.net/~hotaruk/btool/btool.cab

[Shockwave Flash Object]
InProcServer32 = C:\WINNT\System32\macromed\flash\Flash.ocx
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

[TP_live Control]
InProcServer32 = C:\WINNT\System32\TP_live.ocx
CODEBASE = http://www.homestead.com/~site/InstallFiles/SIFiles/live/TP_live.cab

[DameSetupInit Class]
InProcServer32 = C:\WINNT\Downloaded Program Files\dmsetupi.dll
CODEBASE = http://messenger.daum.net/download/dmsetupi.cab

--------------------------------------------------
End of report, 4,897 bytes
Report generated in 0.181 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only



The process called "Tribes Demo" is the game I'm trying to run but won't run.. It used to run without any problems.


I ran everything and when I ran chkdsk /r it said "The type of the file system is FAT32. Cannot lock current drive. Chkdsk cannot run because the volume is in use by another process. Would you like to schedule this volume to be checked the next time the system restarts? <Y/N> i pressed Y since you said to reboot.

 

Ok Good!


I see problems!

First thing go to Add/Remove and uninstall the Full Kazaa. This will not delete downloaded music and files but just in case move them to another folder.

The full kazaa has Ad/Spyware. After your problem is fixed you can reinstall Kazaa lite which is kazaa witout the bad stuff.

Then uninstall the game, it has aproblem so get it out of the way, when the problem is fixed we can reinstall it.

So D/L and install:

Startup control panel
http://www.mlin.net/StartupCPL.shtml

This gives simple and full control of what starts at boot up. After install there will be a Startup icon in control panel.

Go to control panel and run Startup control Panel
find the following and uncheck, this does not delete but only stops autoloading.

C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe
C:\Program Files\KaZaA\kazaa.exe
C:\Documents and Settings\Administrator\Desktop\Tribes Demo.exe
C:\Program Files\Microsoft Office\Office\OSA9.EXE

NvCplDaemon = RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
This one item Nvcpl may be needed but I don't think so, if you have a video problem after booting just click it back and reboot.


QuickTime Task = "C:\Program Files\QuickTime\qttask.exe" -atboottime
TkBellExe = C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot

After this is done and you have rebooted do the following

Run SpyBot again twice delete all "ALL" it finds.
Then run Adaware again once delete all it finds.

Then do the following

Go to Start-Run and type

cleanmgr /sageset:1
It will present a menu select all except compress, then

Go to Start-Run and type

cleanmgr /sagerun:1


This is almost everything do this and get back and we will finish.

Mike

 

yeap I did as you instructed, no problems.

Is it normal that processes should require such memory usage? When I goto task manager, it says explorer is using 20 000kb, and others all using 1000- 7000kb.

 

Depends on how your computer is setup. Driver versions many things.

How does it run!

Is it fixed?

Do you mean the problem is fixed or that you had no problem doing the steps i gave?

Mike

 

it's fixed! THANK YOU!!!

 

Great!

Not only should it be fixed the whole system should be faster and more stable.

Here is one more goodie!

http://www.webattack.com/get/xpantispy.shtml

Select everything except these 4 items.
Don’t show balloon tips
Enable fast shutdown
Increase MaxConnectionsperServer to 10
Disable Task Scheduler service

After the first reboot after you run XPAntiSpy go back to XpAntiSpy and uncheck the clear Pagefile at shutdown, as we only want to clear it once. Do it ocasionally for cleaning.

mike