extremely slow computer

[rsteeves]

working on my daughter's laptop. She was listening to iTunes and the sound got funky. iTunes wouldn't close, task manager wouldn't open, so she powered down. After that the computer wouldn't boot.

I booted it from the CD. I got drive C:\, but no directory. I ran check disk, which got the boot back, but the machine is very slow, won't play music properly (plays every 2nd or 3rd note, I guess). I've run all the malware fixes at Castle Cops, and their "my machine is slow" suggestions.

The machine is running XP Home v 2002 SP2. All but the last 2 updates are installed. it's an HP Mobile AMD Sempron 3300+ with 1G memory.

The Kaspersky log is too long to attach, but here's the HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:33:29 PM, on 11/17/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\TrojanHunter 5.0\THGuard.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nytimes.com/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 5.0\THGuard.exe"
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\AIM SUCKS\aim.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 2948 bytes

Thanks in advance for your help.

[pskelley]

Welcome to Safer Networking, I wish to be sure you have viewed and understand this information.
"BEFORE you POST" (READ this Procedure before Requesting Assistance)
http://forums.spybot.info/showthread.php?t=288
All advice given is taken at your own risk.
Please make sure you have read this information so we are on the same page.

Not sure if I can help or not, the HJT log is clean. I have a feeling this is something other than malware. Why don't you run a free diagnostic here:
http://www.pcpitstop.com/pcpitstop/
Register free and you will be able to post a link to your Test Results and I would be glad to look to see if I spot anything.
(I am NOT suggesting any products for sale at this website)

I also suggest if Kaspersky found any infections you can not explain, you post that log so I can see it.

Thanks...Phil

[rsteeves]

Hopefully this is the link you need. It really didn't find anything scary.
http://www.pcpitstop.com/pcpitstop/Summary.asp?conid=18994148

I don't really know what I'm looking for in the Kaspersky log.

Bob

[rsteeves]

I've also reinstalled the driver for the audio card, to no avail.

Bob

[pskelley]

Please check the links before you post them, the link will look similiar to this one, but hopefully not this bad.
http://www.pcpitstop.com/pcpitstop/Summary.asp?TechExpress=MDPSSWE9JUVSVBLV

I don't really know what I'm looking for in the Kaspersky log.
Then post it.

Thanks

[rsteeves]

Sorry about that. This seems to work:
http://www.pcpitstop.com/techexpress.asp?id=ZNEFSW8WCVVSKVVV

I took another look at the Kaspersky log, and the summary at the top says it found nothing, no viruses, nothing suspicious.

Time for a new computer?

Bob

[pskelley]

Thanks Bob, You understnad how to use the information? Click each item and if you have any questions, let me know. You can also post here:
http://pcpitstop.invisionzone.com/index.php?showforum=6
and ask questions from folks at the forum who will know more about the scan since they do it all of the time. The problem is, though some minor pointers came up, nothing to help with your problem.

Are you getting any error messages from Windows that might help us? I can suggest some great free forums where you can post questions about the operating system, etc. but any information you provide will help.

How old is the computer? When was the last time you blew the dust out of the fans, etc. I am looking for any kind of clue.

Thanks

[rsteeves]

As you observed, there was nothing much in the pcpitstop report, certainly nothing that would explain the audio suddenly and stubbornly going on the fritz. The symptom suggested something was tying up the processor, which pointed to some kind of malware, but as you saw, there doesn't seem to be any virus or malware in evidence. There are no suspicious sounding processes running, although I found some indications on the net that csrss.exe, which is running, can be a problem.

I've been through the Windows troubleshooter, even removed and reinstalled the sound card in device manager.

The computer is a Compaq, about 1 1/2 years old. I did vacuum out the vents (heat is always a possible factor, especially with a laptop). I'm going to have my daughter use the machine for a while and see if it's still as slow as it was, and check her music.

I'm looking for a clue, too.

[pskelley]

Thanks for the feedback, this file: csrss.exe is not likely bad, see this:
http://www.liutilities.com/products/wintaskspro/processlibrary/csrss/
You can look in the files properties and you should see if it is a valid Microsoft file.
Here are free scanners if needed:
http://virusscan.jotti.org/
http://www.kaspersky.com/scanforvirus
http://www.virustotal.com/

What kind of sound card is this? Have you thought about asking for help at the tech support of the sound card manufacturer? I looked all of the information over again, including the HJT log and nothing is jumping out at me except:

C:\Program Files\TrojanHunter 5.0\THGuard.exe <<< if this is a trail, remember to uninstall it once the trial period is over.

http://www.google.com/search?hl=en&q=troubleshoot+sound+card+issues&btnG=Google+Search

Some ideas that may help:
http://users.telenet.be/bluepatchy/miekiemoes/slowcomputer.html

Thanks...Phil

[rsteeves]

I've been thinking, and you kind of confirmed this, I ought to be looking for a forum that relates to sound card issues. It's a laptop, so sound card options seem limited, but that's the direction I'll go now.

My daughter says the computer is no longer slow, but the sound still isn't right. There is one symptom that makes me wonder, though. When windows is starting up, once the users logon screen appears, the cursor does not respond smoothly to mouse input. She remarked about that not being that way before her problems appeared. If that oddity makes you think of something, great. Meanwhile I'll explore some of your other suggestions.

I really appreciate your willingness to spend time trying to help. Thanks so much.

Bob

[pskelley]

The key is error messages, Windows most always responds by communicating those to us if it is anything to do with the Operating System. Remember, mouse drivers need updating also.

HTH...Phil

[pskelley]

Some good information for you:
http://users.telenet.be/bluepatchy/miekiemoes/slowcomputer.html

Here is some great information from experts in this field that will help you stay clean and safe online.
http://users.telenet.be/bluepatchy/miekiemoes/prevention.html
http://forums.spybot.info/showthread.php?t=279
http://russelltexas.com/malware/allclear.htm
http://forum.malwareremoval.com/viewtopic.php?t=14
http://www.bleepingcomputer.com/forums/topict2520.html
http://cybercoyote.org/security/not-admin.shtml

Thanks...pskelley
Safer Networking Forums
http://www.spybot.info/en/donate/index.html
If you are reading this information...thank a teacher,
If you are reading it in English...thank a soldier.