Results 1 to 4 of 4

Thread: Computer running real slow most of the time

  1. #1
    Junior Member
    Join Date
    Mar 2009
    Location
    Grifton, NC
    Posts
    2

    Default Computer running real slow most of the time

    So far, I have run the Trend Micro internet security pro s/w, super anti-spyware, CCleaner, and Ad-ware. none seem to be finding a root cause. So I did see from Trend about the HJT. There does seem to be a lot of processes running (70-79) when I look via the Windows Tack Mgr. Not sure which are valid an dwhich I should try to remove (and how to remove them). Here is the log I copied (as shown in the read me first thread). Any help and recommendations is welcomed and appreciated. I am just a novice at best, IMO, as far as computer interworkings go. I feel much better on the apps side. Thanks in advance.

    StartupList report, 3/18/2009, 3:29:31 PM
    StartupList version: 1.52.2
    Started from : C:\Program Files\Trend Micro\HijackThis\HijackThis.EXE
    Detected: Windows XP SP3 (WinNT 5.01.2600)
    Detected: Internet Explorer v7.00 (7.00.6000.16791)
    * Using default options
    ==================================================

    Running processes:

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Dell\EUSW\Support.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\Trend Micro\TrendSecure\TSCFPlatformCOMSvr.exe
    C:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exe
    C:\WINDOWS\system32\Rundll32.exe
    C:\WINDOWS\system32\igfxpers.exe
    C:\WINDOWS\ehome\ehtray.exe
    C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
    C:\WINDOWS\system32\dla\tfswctrl.exe
    C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe
    C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
    C:\WINDOWS\SYSTEM32\3cmlink.exe
    C:\WINDOWS\SYSTEM32\3cshtdwn.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\WINDOWS\SYSTEM32\3cmlink.exe
    C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe
    C:\Program Files\Trend Micro\TrendSecure\RemoteFileLock\FLMain.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\Program Files\Windows Media Player\WMPNSCFG.exe
    C:\Program Files\SanDisk\SanDisk TransferMate\SD Monitor.exe
    C:\Program Files\Yahoo!\Yahoo! Music Jukebox\ymetray.exe
    C:\Program Files\Trend Micro\BM\TMBMSRV.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\WINDOWS\system32\CTsvcCDA.EXE
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxduserv.exe
    C:\WINDOWS\system32\lxducoms.exe
    C:\WINDOWS\system32\HPZipm12.exe
    C:\Program Files\Trend Micro\TrendSecure\SecurityActivityDashboard\tmarsvc.exe
    C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Trend Micro\Internet Security\TmPfw.exe
    C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
    C:\WINDOWS\system32\MsPMSPSv.exe
    C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\ProToolbarUpdate.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\Program Files\Trend Micro\TrendSecure\TSCFCommander.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\PROGRA~1\MICROS~4\Office\OUTLOOK.EXE
    C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\PlatformDependent\ProToolbarComm.exe
    C:\WINDOWS\system32\kdfmgr.exe
    C:\Program Files\Trend Micro\Internet Security\TMAS_OL\TMAS_OL.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    --------------------------------------------------

    Listing of startup folders:

    Shell folders Common Startup:
    [C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
    HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
    Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    Monitor.lnk = C:\Program Files\SanDisk\SanDisk TransferMate\SD Monitor.exe
    ymetray.lnk = C:\Program Files\Yahoo!\Yahoo! Music Jukebox\ymetray.exe

    --------------------------------------------------

    Checking Windows NT UserInit:

    [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    UserInit = C:\WINDOWS\system32\userinit.exe,

    --------------------------------------------------

    Autorun entries from Registry:
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run

    DwlClient = C:\Program Files\Common Files\Dell\EUSW\Support.exe
    Windows Defender = "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    UpdReg = C:\WINDOWS\UpdReg.EXE
    UpdateManager = "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
    P17Helper = Rundll32 P17.dll,P17Helper
    IntelMeM = C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
    igfxpers = C:\WINDOWS\system32\igfxpers.exe
    ehTray = C:\WINDOWS\ehome\ehtray.exe
    DVDLauncher = "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
    dla = C:\WINDOWS\system32\dla\tfswctrl.exe
    CTSysVol = C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe /r
    Adobe Photo Downloader = "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
    3c1807pd = C:\WINDOWS\SYSTEM32\3cmlink.exe RunServices \Device\3cpipe-3c1807pd
    Lexmark 5600-6600 Series Fax Server = "C:\Program Files\Lexmark 5600-6600 Series\fm3032.exe" /s
    SunJavaUpdateSched = "C:\Program Files\Java\jre6\bin\jusched.exe"
    UfSeAgnt.exe = "C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe"

    --------------------------------------------------

    Autorun entries from Registry:
    HKCU\Software\Microsoft\Windows\CurrentVersion\Run

    ctfmon.exe = C:\WINDOWS\system32\ctfmon.exe
    msnmsgr = "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    Iomega Automatic Backup Pro = "C:\Program Files\Iomega\Automatic Backup Pro\LiveSystem.exe" -s
    MSMSGS = "C:\Program Files\Messenger\msmsgs.exe" /background
    OE = C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe
    TrendSecure Remote File Lock = C:\Program Files\Trend Micro\TrendSecure\RemoteFileLock\FLMain.exe
    SUPERAntiSpyware = C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    WMPNSCFG = C:\Program Files\Windows Media Player\WMPNSCFG.exe

    --------------------------------------------------

    Autorun entries from Registry:
    HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce

    Shockwave Updater = C:\WINDOWS\SYSTEM32\Adobe\SHOCKW~1\SWHELP~2.EXE -Update -1100465 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648)" -"http://www.nick.com/games/nick_games/spongebob/sb_crater.jhtml"

    --------------------------------------------------

    Autorun entries in Registry subkeys of:
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run

    [OptionalComponents]
    =

    --------------------------------------------------

    Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

    Shell=*INI section not found*
    SCRNSAVE.EXE=*INI section not found*
    drivers=*INI section not found*

    Shell & screensaver key from Registry:

    Shell=Explorer.exe
    SCRNSAVE.EXE=C:\WINDOWS\system32\EASTCA~1.SCR
    drivers=*Registry value not found*

    Policies Shell key:

    HKCU\..\Policies: Shell=*Registry value not found*
    HKLM\..\Policies: Shell=*Registry value not found*

    --------------------------------------------------


    Enumerating Browser Helper Objects:

    (no name) - (no file) - {00000000-0000-0000-0000-000000000002}
    (no name) - (no file) - {02478D38-C3F9-4efb-9B51-7695ECA05670}
    (no name) - (no file) - {15F4D456-5BAA-4076-8486-EECB38CD3E57}
    AcroIEHelperStub - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll - {18DF081C-E8AD-4283-A596-FA578C2EBDC3}
    Trend Micro Toolbar BHO - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll - {43C6D902-A1C5-45c9-91F6-FD9E90337E18}
    (no name) - (no file) - {512ACF1B-64D9-4928-B382-A80556F28DB4}
    (no name) - C:\WINDOWS\system32\dla\tfswshx.dll - {5CA3D70E-1895-11CF-8E15-001234567890}
    (no name) - C:\Program Files\Java\jre6\bin\ssv.dll - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
    (no name) - (no file) - {7E853D72-626A-48EC-A868-BA8D5E23E045}
    (no name) - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll - {9030D464-4C02-4ABF-8ECC-5164760863C6}
    (no name) - (no file) - {9579D574-D4D8-4335-9560-FE8641A013BD}
    (no name) - C:\Program Files\Lexmark Printable Web\bho.dll - {D2C5E510-BE6D-42CC-9F61-E4F939078474}
    (no name) - C:\Program Files\Java\jre6\bin\jp2ssv.dll - {DBC80044-A445-435b-BC74-9C25C1C588A9}
    (no name) - (no file) - {E713904C-DF05-4C79-BBAD-02DB923253BE}
    JQSIEStartDetectorImpl - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll - {E7E6F031-17CE-4C07-BC86-EABFE594F69C}
    FCTBPos00Pos - C:\Program Files\Mob Wars Toolbar\Toolbar.dll - {ED53F43D-B309-4F2C-A4A3-8D4F81177FD4}

    --------------------------------------------------

    Enumerating Task Scheduler jobs:

    MP Scheduled Scan.job
    User_Feed_Synchronization-{13EC2623-3A19-48DA-9DF6-A4E3D70BE75A}.job
    User_Feed_Synchronization-{1B6E92B8-CD0E-4FEE-B4DE-C5DB8590A2D1}.job

    --------------------------------------------------

    Enumerating Download Program Files:

    [Microsoft Office Template and Media Control]
    InProcServer32 = C:\WINDOWS\Downloaded Program Files\IEAWSDC.DLL
    CODEBASE = http://office.microsoft.com/templates/ieawsdc.cab

    [Office Genuine Advantage Validation Tool]
    InProcServer32 = C:\WINDOWS\system32\OGACheckControl.DLL
    CODEBASE = http://download.microsoft.com/downlo...OGAControl.cab

    [Facebook Photo Uploader 5 Control]
    InProcServer32 = C:\WINDOWS\Downloaded Program Files\PhotoUploader5.ocx
    CODEBASE = http://upload.facebook.com/controls/...oUploader5.cab

    [Macromedia Authorware Web Player Control]
    InProcServer32 = C:\WINDOWS\system32\macromed\authorwa\awswax.ocx
    CODEBASE = http://download.macromedia.com/pub/s...re/awswaxf.cab

    [Shockwave ActiveX Control]
    InProcServer32 = C:\WINDOWS\system32\Adobe\Director\SwDir.dll
    CODEBASE = http://fpdownload.macromedia.com/get...irector/sw.cab

    [Windows Genuine Advantage Validation Tool]
    InProcServer32 = C:\WINDOWS\system32\legitcheckcontrol.dll
    CODEBASE = http://download.microsoft.com/downlo...eckControl.cab

    [Shockwave ActiveX Control]
    InProcServer32 = C:\WINDOWS\SYSTEM32\Adobe\Director\SwDir.dll
    CODEBASE = http://fpdownload.macromedia.com/get...irector/sw.cab

    [Installation Support]
    InProcServer32 = C:\Program Files\Yahoo!\Common\Yinsthelper200711281.dll
    CODEBASE = C:\Program Files\Yahoo!\Common\Yinsthelper200711281.dll

    [Microsoft PID Sniffer]
    InProcServer32 = C:\WINDOWS\system32\odc.dll
    CODEBASE = https://support.microsoft.com/OAS/ActiveX/odc.cab

    [{33564D57-0000-0010-8000-00AA00389B71}]
    CODEBASE = http://download.microsoft.com/downlo...22/wmv9VCM.CAB

    [MSN Money Charting]
    InProcServer32 = C:\Program Files\Microsoft Money 2006\MNYCoreFiles\prtstb06.dll
    CODEBASE = http://moneycentral.msn.com/cabs/pmupd806.exe

    [Office Update Installation Engine]
    InProcServer32 = C:\WINDOWS\opuc.dll
    CODEBASE = http://office.microsoft.com/officeup...tent/opuc3.cab

    [{49232000-16E4-426C-A231-62846947304B}]
    CODEBASE = http://ipgweb.cce.hp.com/rdqna/downloads/sysinfo.cab

    [Windows Live Safety Center Base Module]
    InProcServer32 = C:\WINDOWS\Downloaded Program Files\wlscBase.dll
    CODEBASE = http://cdn.scan.onecare.live.com/res...scbase5036.cab

    [HpProductDetection Class]
    InProcServer32 = C:\Program Files\Hp\Common\HPDeviceDetection.dll
    CODEBASE = http://h20270.www2.hp.com/ediags/gmn...tDetection.cab

    [MUWebControl Class]
    InProcServer32 = C:\WINDOWS\system32\muweb.dll
    CODEBASE = http://update.microsoft.com/microsof...?1124491203656

    [{74C861A1-D548-4916-BC8A-FDE92EDFF62C}]
    CODEBASE = http://mediaplayer.walmart.com/installer/install.cab

    [Wizard101GameLauncher]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\WIZARD~1.OCX
    CODEBASE = https://secure.footprint.net/kingsis...meLauncher.CAB

    [SystemInfo Class]
    InProcServer32 = C:\WINDOWS\Downloaded Program Files\dpcsysinfo.dll
    CODEBASE = http://getdway.com/dwayready/dpcsysinfo.cab

    [{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}]
    CODEBASE = http://fpdownload.macromedia.com/get.../ultrashim.cab

    [Crucial cpcScan]
    InProcServer32 = C:\WINDOWS\Downloaded Program Files\cpcScan.dll
    CODEBASE = http://www.crucial.com/controls/cpcScanner.cab

    [MsnMessengerSetupDownloadControl Class]
    InProcServer32 = C:\WINDOWS\Downloaded Program Files\MsnMessengerSetupDownloader.ocx
    CODEBASE = http://messenger.msn.com/download/Ms...Downloader.cab

    [Office Update Installation Engine]
    InProcServer32 = C:\WINDOWS\opuc.dll
    CODEBASE = http://office.microsoft.com/officeup...tent/opuc4.cab

    [get_atlcom Class]
    InProcServer32 = C:\WINDOWS\Downloaded Program Files\gp.ocx
    CODEBASE = http://wwwimages.adobe.com/www.adobe...bat/nos/gp.cab

    --------------------------------------------------

    Enumerating Winsock LSP files:

    NameSpace #4: C:\Program Files\Bonjour\mdnsNSP.dll

    --------------------------------------------------

    Enumerating ShellServiceObjectDelayLoad items:

    PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
    CDBurn: C:\WINDOWS\system32\SHELL32.dll
    WebCheck: C:\WINDOWS\system32\webcheck.dll
    SysTray: C:\WINDOWS\system32\stobject.dll
    UPnPMonitor: C:\WINDOWS\system32\upnpui.dll
    WPDShServiceObj: C:\WINDOWS\system32\WPDShServiceObj.dll

    --------------------------------------------------
    End of report, 14,443 bytes
    Report generated in 0.093 seconds

    Command line options:
    /verbose - to add additional info on each section
    /complete - to include empty sections and unsuspicious data
    /full - to include several rarely-important sections
    /force9x - to include Win9x-only startups even if running on WinNT
    /forcent - to include WinNT-only startups even if running on Win9x
    /forceall - to include all Win9x and WinNT startups, regardless of platform
    /history - to list version history only
    Last edited by tashi; 2009-03-18 at 22:55. Reason: removed email address in username, spam magnet ;-)

  2. #2
    In Memoriam -Always in our heart pskelley's Avatar
    Join Date
    Oct 2005
    Location
    Clearwater, Florida
    Posts
    20,247

    Default

    Welcome to Safer Networking, I wish to be sure you have viewed and understand this information.
    "BEFORE you POST" (READ this Procedure before Requesting Assistance) http://forums.spybot.info/showthread.php?t=288
    All advice given is taken at your own risk.
    Please make sure you have read this information so we are on the same page.

    Pinned (sticky) to the top of this forum, and posted above are the directions, make sure you have read and followed them.

    Some information for you:

    1) If you read the directions in "Before you Post" You will see that you were supposed to post a HijackThis log, not a StartupList.

    2) Having said that, I can see you have a load of running processes, start with this information:
    What to do if your Computer's running slowly
    http://www.netsquirrel.com/msconfig/msconfig_xp.html
    http://www.malwareremoval.com/tutori...ningslowly.php
    http://users.telenet.be/bluepatchy/m...wcomputer.html
    http://www.microsoft.com/atwork/getstarted/speed.mspx

    If it helps, for an example, I will say I have four items checked and starting, three are security programs and the other is Windows Live Messenger that I use all off the time.

    Here are good links to find out what programs are.
    http://www.bleepingcomputer.com/startups/
    http://www.pacs-portal.co.uk/startup_index.htm
    http://www.sysinfo.org/startuplist.php

    3) Once you have used that information, if you still have issues and have read and followed the "Before you Post" instructions, post a HijackThis log and I will take a look.

    Thanks
    MS-MVP Consumer Security 2007-08-09
    Proud Member ASAP
    UNITE Member 2006

  3. #3
    Junior Member
    Join Date
    Mar 2009
    Location
    Grifton, NC
    Posts
    2

    Default thanks so much ....

    and I also removed the anti spy and added spybot. donation coming to the site

  4. #4
    In Memoriam -Always in our heart pskelley's Avatar
    Join Date
    Oct 2005
    Location
    Clearwater, Florida
    Posts
    20,247
    MS-MVP Consumer Security 2007-08-09
    Proud Member ASAP
    UNITE Member 2006

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •