WHATS slowing my pc down

**fijimatt** · April 27th, 2004, 11:51 AM

I have tried spybot and adaware but am still running very slowly.

processess are as follows. Can someone please help me as to which ones can be deleted

thanks fjmatt

Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Symantec\NORTON~1\GHOSTS~2.EXE
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\WFXSVC.EXE
C:\Program Files\Symantec\WinFax\WFXMOD32.EXE
C:\WINDOWS\System32\RunDll32.exe
C:\WINDOWS\System32\wfxsnt40.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\ctfmon.exe
C:\PROGRA~1\ezula\mmod.exe
C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
c:\progra~1\exact\exactupdate.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\TView2000\ASTV99.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\WINDOWS\sysupd.exe
C:\Documents and Settings\matth\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir...ie&ar=iesearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigpond.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SU B_PVER}&ar=home
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = C:\Program Files\Copernic 2000 Pro\Search Bar.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir...ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bigpond.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir...ie&ar=iesearch
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Telstra BigPond
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = iexplore
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {2843DAC1-05EF-11D2-95BA-0060083493D6} - C:\WINDOWS\Speech\Dragon\web_ie.dll
O2 - BHO: (no name) - {71ED4FBA-4024-4bbe-91DC-9704C93F453E} - c:\progra~1\iesearchbar\iesearchbar.dll
O2 - BHO: (no name) - {83DE62E0-5805-11D8-9B25-00E04C60FAF2} - C:\WINDOWS\2_0_1browserhelper2.dll
O2 - BHO: (no name) - {9C691A33-7DDA-4C2F-BE4C-C176083F35CF} - C:\WINDOWS\Downloaded Program Files\bridge.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: IE Search Bar - {71ED4FBA-4024-4bbe-91DC-9704C93F453E} - c:\progra~1\iesearchbar\iesearchbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [WinFaxAppPortStarter] wfxsnt40.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [RunDLL] rundll32.exe "C:\WINDOWS\Downloaded Program Files\bridge.dll",Load
O4 - HKLM\..\Run: [Belt] C:\WINDOWS\Belt.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [SysUpd] C:\WINDOWS\sysupd.exe
O4 - HKLM\..\Run: [Ad-aware] "C:\Program Files\Lavasoft\Ad-aware 6\Ad-aware.exe" +c
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKLM\..\RunOnce: [Ad-aware] "C:\Program Files\Lavasoft\Ad-aware 6\Ad-aware.exe" "+b1"
O4 - HKLM\..\RunOnce: [SpyBotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra 'Tools' menuitem: Launch Copernic (HKLM)
O9 - Extra button: Copernic (HKLM)
O9 - Extra button: Translate (HKLM)
O9 - Extra 'Tools' menuitem: &Translate Using Gist-In-Time (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.bigpond.com
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinstc.cab
O16 - DPF: {9C691A33-7DDA-4C2F-BE4C-C176083F35CF} (brdg Class) - http://www2.flingstone.com/cab/2000XP/new/bridge.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.co...071.9078240741
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://zone.msn.com/bingame/zuma/def...ploader_v5.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{D5700FA5-A0F5-4CCC-9C80-CE515DF1F3B6}: NameServer = 203.49.70.92 139.134.2.190
O17 - HKLM\System\CCS\Services\Tcpip\..\{DFCD9F52-E14E-4615-A864-C6D5BE94A4F9}: NameServer = 192.168.1.253,202.62.124.238

**CeeBee** · April 27th, 2004, 12:13 PM

Wild guess... you have 128M of RAM.
With so many apps you definitely need at least 256M.
You could remove acrobat, quicktime and office from the startup.
Belt.exe seems to be junk, same for exactupdate.exe, bridge.dll...
Get the latest Adaware, update the reference file and do a full scan... then see what happenes.

**fijimatt** · April 27th, 2004, 09:18 PM

NO I have 700+ MB DDR RAM on a athlon 2400 but its as slow as a dog. I have tried adaware and spybot but still very sluggish.

I have removed those listed but still quite slow.........

**wmicro** · April 28th, 2004, 01:28 AM

PC seems to take forever to boot up Windows 2000/XP
See this links for addition help
http://dynamicmember.us/wmtbb/index.php?showtopic=14

**fijimatt** · April 28th, 2004, 01:48 AM

bootup seems ok but then slows to a crawl even with a min of apps...

**wmicro** · April 28th, 2004, 01:58 AM

Did you go to this links and try what was suggested

See this links for addition help
http://dynamicmember.us/wmtbb/index.php?showtopic=14

**fijimatt** · April 28th, 2004, 02:12 AM

Yes followed the link and cleaned out a lot of stuff but the problem is still there. Bootup has not been the problem but running apps is.

Not sure what the prob is. Looks like a format/reinstall may be the only way as it was running fine with many apps previously.

I have scanned for viruses and used norton sysworks to cleanup as well as adaware and spybot ....still no luck.

Appreciate your help......

FJM

**wmicro** · April 28th, 2004, 02:31 AM

Is your Norton and virus software up to date?
and Open msconfig and see what is rurnnig there also

**TechZ** · April 28th, 2004, 04:25 AM

maybe a defrag would help too

**iceman** · April 28th, 2004, 05:45 AM

Mcafee was corrupt and was scanning full time! Also, does it run slow in safe mode? If not, its a program causing the problem.

**hudsonsmith** · April 28th, 2004, 06:56 AM

Pull up task manager and sort the processes on the cpu column. Might give you a hint as to what's hogging resources.

**hogman** · April 28th, 2004, 10:36 AM

C:\Documents and Settings\matth\Desktop\HijackThis.exe

WTF is this?

Also BIN Norton - all of it, just don't ask - jt do it
go get AVG 7 or anything else - BIN norton - it is a right slág!!

try to eliminate as many of the TSR's as possible.

do you have 2 drives?
defrag your secondary drive then move your swap file to that drive.

**cyberhh** · April 28th, 2004, 10:53 AM

also go to DoxDesk Parasite Checker and have it run it's check.

**machineman** · April 28th, 2004, 11:35 AM

[QUOTE=hogman]

Also BIN Norton - all of it, just don't ask - jt do it
go get AVG 7 or anything else - BIN norton - it is a right slág!!

QUOTE]

I agree with this one. Fixed a few user PC by removing Noton System Works. Speeds them right up. NAV is one I actually paid for and is making my home PC misbehave. That might go after some testing.

**geoscomp** · April 28th, 2004, 11:51 AM

Originally Posted by hogman

C:\Documents and Settings\matth\Desktop\HijackThis.exe

WTF is this?

Hijack This is the program used to generate the list he posted.
there are some bits and pieces left over from spybot and adaware..I assume that you updated both before scanning?

move hijack this into it's own folder..and with only it open..no other windows..run again and repost