Redirected from Malware forum
Started by
Oniketsoku
, Nov 24 2007 03:12 PM
#32
Posted 27 November 2007 - 08:17 PM
1101doc
-
- Retired Staff
-
- 909 posts
Trusted Tech
I haven't started with your services because ProcExp doesn't really show any excessive svchost activity. Of course, it could be periodic, but what I've seen makes me think that you are running defaults. The Black Viper site has a handy chart with the defaults listed. When you have time, you may wish to compare the list found on your computer with his.
To view Services, just type services.msc into a Run box. 'Services' is also listed under 'Administrative Tools' which can be made to display on the Start Menu from the Control Panel Applet titled "Taskbar and Start Menu." You'll need to click the 'customize' button and then open the 'Advanced' tab to make the change.
About the only Service that really drags down performance is the "Indexing" service. That one should be Disabled. Just double click any entry on the list and use the drop-down menu box to change the start-up type. Except for those which are set to a disabled default, please use "Manual" if you want to limit the service. That way Windows can start it if needed.
For another boost in overall system responsiveness, I suggest that you limit the number of visual effects that are being used. Here is a snapshot of my "Visual Effects" list. This is found from the top 'Settings' button of the 'Advanced' tab of "System Properties." (System applet of the Control Panel) http://senduit.com/01a2b2 (All entries above those that are visible are not checked)
These settings let XP look like XP and Themes still work, but the most resource intensive effects are eliminated.
Also please open Folder Options and select the 'View' tab. Whatever other changes you want there, do uncheck the first entry: "Automatically search for network folders and printers" and the last entry: "Use simple file sharing." Those will give you a bump as well.
Processes are assigned a priority when they run under XP. Both ProcExp and Taskmanager will offer to display the priority when the process is right clicked. It is no problem to elevate the priority of a process to "Above Normal" or even "High." This will mean that the process has "first dibs' on system resources. I run my browser at "Above Normal" all the time.
Do not go for the "Real Time" setting. This usually results in system crash, because you are requiring all the system resources to be allocated to that process. Windows has to 'hold its breath' til it's over. OOPS!
I think that you will get better performance if you raise your games to 'Above Normal.' That way they won't have to compete for resources.
To view Services, just type services.msc into a Run box. 'Services' is also listed under 'Administrative Tools' which can be made to display on the Start Menu from the Control Panel Applet titled "Taskbar and Start Menu." You'll need to click the 'customize' button and then open the 'Advanced' tab to make the change.
About the only Service that really drags down performance is the "Indexing" service. That one should be Disabled. Just double click any entry on the list and use the drop-down menu box to change the start-up type. Except for those which are set to a disabled default, please use "Manual" if you want to limit the service. That way Windows can start it if needed.
For another boost in overall system responsiveness, I suggest that you limit the number of visual effects that are being used. Here is a snapshot of my "Visual Effects" list. This is found from the top 'Settings' button of the 'Advanced' tab of "System Properties." (System applet of the Control Panel) http://senduit.com/01a2b2 (All entries above those that are visible are not checked)
These settings let XP look like XP and Themes still work, but the most resource intensive effects are eliminated.
Also please open Folder Options and select the 'View' tab. Whatever other changes you want there, do uncheck the first entry: "Automatically search for network folders and printers" and the last entry: "Use simple file sharing." Those will give you a bump as well.
Processes are assigned a priority when they run under XP. Both ProcExp and Taskmanager will offer to display the priority when the process is right clicked. It is no problem to elevate the priority of a process to "Above Normal" or even "High." This will mean that the process has "first dibs' on system resources. I run my browser at "Above Normal" all the time.
Do not go for the "Real Time" setting. This usually results in system crash, because you are requiring all the system resources to be allocated to that process. Windows has to 'hold its breath' til it's over. OOPS!
I think that you will get better performance if you raise your games to 'Above Normal.' That way they won't have to compete for resources.
#33
Posted 27 November 2007 - 08:58 PM
Oniketsoku
- Topic Starter
-
- Member
-
- 343 posts
Member
http://senduit.com/cd4064
http://senduit.com/7c5c8f
http://senduit.com/f8ab7e
Those are screenshots of all the services
http://senduit.com/7c5c8f
http://senduit.com/f8ab7e
Those are screenshots of all the services
#34
Posted 27 November 2007 - 09:03 PM
Oniketsoku
- Topic Starter
-
- Member
-
- 343 posts
Member
http://senduit.com/990b4e
Thats a screenshot of what my firefox browser randomly does -.-
Anyway, I unchecked the first one but couldnt find use Simple File Sharing
Thats a screenshot of what my firefox browser randomly does -.-
Anyway, I unchecked the first one but couldnt find use Simple File Sharing
#35
Posted 27 November 2007 - 09:06 PM
Oniketsoku
- Topic Starter
-
- Member
-
- 343 posts
Member
Thanks for the tips on priority, I never knew that! Real useful.
As soon as this scan I have running finishes I'm gonna launch a couple programs and see how they work.
As soon as this scan I have running finishes I'm gonna launch a couple programs and see how they work.
#36
Posted 27 November 2007 - 11:59 PM
1101doc
-
- Retired Staff
-
- 909 posts
Trusted Tech
Should be the last entry on the list-Use simple file sharing.
Firefox snapshot had timed out. I usually set the timeout period to the longest-one week. Defaults to 30min.
If it were my machine, I would probably trim down some of the services, but that's just the way I am. Some of them are just not needed for home users.
I would set these to Manual:
Application layer gateway- using your computer as an entry point for applications from other computers to access the internet
ATI Hot key- Not needed unless you have customized your keyboard for keystrokes to activate specific commands or programs. (or want to)
Computer Browser- designed for networks so that your computer can 'browse' the other machines in the network. (and vice versa)
Distributed link transaction-another one for networks. Allows changing the location of a 'linked' file on the host computer without loss of connectivity to shortcuts on other computers in the network.
Error Reporting- the "service" that gives you the send/don't send dialog after errors.
Other than that, You're pretty much at defaults or even tighter. I am not a fan of "Automatic Updates," so I have that Service set to 'manual' as well. (And the whole thing turned off in System Properties) I go in and change it when it is time to visit Windows Updates once a month. I just don't see the reason to have a process running full-time when I only need it once a month for 15min.
After you've lived with it for a while, go in and set any started "Manual" services back to "Automatic." If Windows is starting them all the time, might as well make it easier.
I'm wondering about your RAM. How much is installed, and have you ever run a test: http://hcidesign.com/memtest/
The only acceptable finding is zero errors.
Let it run for a while. Overnight to really test.
Firefox snapshot had timed out. I usually set the timeout period to the longest-one week. Defaults to 30min.
If it were my machine, I would probably trim down some of the services, but that's just the way I am. Some of them are just not needed for home users.
I would set these to Manual:
Application layer gateway- using your computer as an entry point for applications from other computers to access the internet
ATI Hot key- Not needed unless you have customized your keyboard for keystrokes to activate specific commands or programs. (or want to)
Computer Browser- designed for networks so that your computer can 'browse' the other machines in the network. (and vice versa)
Distributed link transaction-another one for networks. Allows changing the location of a 'linked' file on the host computer without loss of connectivity to shortcuts on other computers in the network.
Error Reporting- the "service" that gives you the send/don't send dialog after errors.
Other than that, You're pretty much at defaults or even tighter. I am not a fan of "Automatic Updates," so I have that Service set to 'manual' as well. (And the whole thing turned off in System Properties) I go in and change it when it is time to visit Windows Updates once a month. I just don't see the reason to have a process running full-time when I only need it once a month for 15min.
After you've lived with it for a while, go in and set any started "Manual" services back to "Automatic." If Windows is starting them all the time, might as well make it easier.
I'm wondering about your RAM. How much is installed, and have you ever run a test: http://hcidesign.com/memtest/
The only acceptable finding is zero errors.
Let it run for a while. Overnight to really test.
#37
Posted 28 November 2007 - 03:47 PM
Oniketsoku
- Topic Starter
-
- Member
-
- 343 posts
Member
I have 1535 MB Ram and I think it's all OK
I'll run that test tonight when I sleep
I'll run that test tonight when I sleep
#38
Posted 28 November 2007 - 04:02 PM
Oniketsoku
- Topic Starter
-
- Member
-
- 343 posts
Member
My computer seems to be running slower then it has been even more than normal today
#39
Posted 28 November 2007 - 10:36 PM
1101doc
-
- Retired Staff
-
- 909 posts
Trusted Tech
Can you be specific about exactly what you are experiencing as the "slowness?" What are you doing. What actions are not responding? What is delayed, and under what circumstances?
#40
Posted 29 November 2007 - 07:11 AM
Oniketsoku
- Topic Starter
-
- Member
-
- 343 posts
Member
My internet browser is unbearably slow;
All programs and software seem to lag badly and respond slowly even malware scanners or kaspersky;
And all my games run at an FPS(frames per second) of < 5-10.
I don't really do much besides those 3 things on my PC.
Sorry if I've been vague.
(( I'll be back after school. ))
All programs and software seem to lag badly and respond slowly even malware scanners or kaspersky;
And all my games run at an FPS(frames per second) of < 5-10.
I don't really do much besides those 3 things on my PC.
Sorry if I've been vague.
(( I'll be back after school. ))
Edited by Oniketsoku, 29 November 2007 - 07:13 AM.
#41
Posted 29 November 2007 - 11:33 AM
rf6647
-
- Member
-
- 14 posts
Member
Coming Clean
I am not a frequent user of this board. However, this topic caught my attention. The technical specialist working this issue has suggested many tools to analyze this problem. Now I am coming clean – I posted a link to this topic on another board so the other user can consider some of the tools suggested here. You both are giving attention to Internet Explorer (IE).
http://64.233.183.10...T...&lr=lang_en
The above link is temporary and is related to a board’s malware removal instructions. In my opinion, this board is pretty vigorous when it comes to acting on the HJT log. They would have removed all remnants of the Norton application and they would have zonk some of the browser helper objects (BHO) that can be brought back after solving the current issue. I am not advocating that you switch allegiance. A different explanation sometimes makes the light go on.
Now you are reporting slowness with kaspersky and other spykiller applications. Some BHOs are notorious for inviting nasties back to your computer. You should get their expert view on re-running virus and spy sweeps, and on the advisability of removing unnecessary AV and spykiller applications. Often you need to follow the last-in strategy for backing out of applications that put hooks into the OS. Once you arrive to clean machine, and the vital few security applications re-installed, you can resume this issue.
Feel free to ignore this post. And that is my 2¢ worth.
I am not a frequent user of this board. However, this topic caught my attention. The technical specialist working this issue has suggested many tools to analyze this problem. Now I am coming clean – I posted a link to this topic on another board so the other user can consider some of the tools suggested here. You both are giving attention to Internet Explorer (IE).
http://64.233.183.10...T...&lr=lang_en
The above link is temporary and is related to a board’s malware removal instructions. In my opinion, this board is pretty vigorous when it comes to acting on the HJT log. They would have removed all remnants of the Norton application and they would have zonk some of the browser helper objects (BHO) that can be brought back after solving the current issue. I am not advocating that you switch allegiance. A different explanation sometimes makes the light go on.
Now you are reporting slowness with kaspersky and other spykiller applications. Some BHOs are notorious for inviting nasties back to your computer. You should get their expert view on re-running virus and spy sweeps, and on the advisability of removing unnecessary AV and spykiller applications. Often you need to follow the last-in strategy for backing out of applications that put hooks into the OS. Once you arrive to clean machine, and the vital few security applications re-installed, you can resume this issue.
Feel free to ignore this post. And that is my 2¢ worth.
#42
Posted 29 November 2007 - 02:53 PM
1101doc
-
- Retired Staff
-
- 909 posts
Trusted Tech
He makes some good points. The Yahoo Toolbar has often been reported to cause trouble, and Browser Helper Objects (BHOs) are a common issue.
Also, if you did not use the Norton Removal tool, you may have some bits of it hanging on and conflicting with Kaspersky. Did you also un-install the "Live Update" application when you got rid of Norton?
As far as BHOs go, you can actually dump them all at once if you want.
The Advanced tab of Internet Options has a Reset button.
If you push that IE will return to its defaults. I suggest Exporting your Favorites first just to be sure.
A less radical method would be to use A-Squared Hijack Free.
http://www.hijackfree.com/en/
Once you have it running, click "Others" on the left side, and then expand ExplorerAddOns by clicking the small + and choose Browser Helper Objects. The right panel will offer a list. At the top right just under the big '?' are three icons. The first is a 'refresh.' Pushing this should set to "Refresh analysis automatically." If it is working, in a few seconds some of the entries will display colored highlights: Red, Yellow, Green. If that does not seem helpful, click the next icon that sorta looks like a 'world.' A browser page will open with online analysis of the list.
Many entries will be yellow. That just means that it is possible under some circumstances that they 'could' be a problem. What we are looking for are red entries. If any are found, the left hand panel offers a place to delete them. Left click the entry once to select, and then press the Delete Add On message near the bottom of the left hand list.
Of course, it is possible that your particular system is 'sensitive' to one of the BHOs that is not red-flagged, but it would be a start. All the yellow entries can be investigated.
if you are not too attached to your IE configuration, I think the Reset option has the greatest potential for improving performance.
You can then re-configure it to your preferences.
Before you do anything radical to IE, I suggest that you download and install Opera so that you have a functional browser in case anything goes "horribly awry." At its default, Opera will feel very much like IE. I can help with any questions about configuring it to your preferences if you want. http://www.opera.com/download/
Since IE is so tied into Windows, it's a good practice to have a backup anyway just in case. If you already have Firefox and are comfortable with it then, of course, that will do nicely.
Also, if you did not use the Norton Removal tool, you may have some bits of it hanging on and conflicting with Kaspersky. Did you also un-install the "Live Update" application when you got rid of Norton?
As far as BHOs go, you can actually dump them all at once if you want.
The Advanced tab of Internet Options has a Reset button.
If you push that IE will return to its defaults. I suggest Exporting your Favorites first just to be sure.
A less radical method would be to use A-Squared Hijack Free.
http://www.hijackfree.com/en/
Once you have it running, click "Others" on the left side, and then expand ExplorerAddOns by clicking the small + and choose Browser Helper Objects. The right panel will offer a list. At the top right just under the big '?' are three icons. The first is a 'refresh.' Pushing this should set to "Refresh analysis automatically." If it is working, in a few seconds some of the entries will display colored highlights: Red, Yellow, Green. If that does not seem helpful, click the next icon that sorta looks like a 'world.' A browser page will open with online analysis of the list.
Many entries will be yellow. That just means that it is possible under some circumstances that they 'could' be a problem. What we are looking for are red entries. If any are found, the left hand panel offers a place to delete them. Left click the entry once to select, and then press the Delete Add On message near the bottom of the left hand list.
Of course, it is possible that your particular system is 'sensitive' to one of the BHOs that is not red-flagged, but it would be a start. All the yellow entries can be investigated.
if you are not too attached to your IE configuration, I think the Reset option has the greatest potential for improving performance.
You can then re-configure it to your preferences.
Before you do anything radical to IE, I suggest that you download and install Opera so that you have a functional browser in case anything goes "horribly awry." At its default, Opera will feel very much like IE. I can help with any questions about configuring it to your preferences if you want. http://www.opera.com/download/
Since IE is so tied into Windows, it's a good practice to have a backup anyway just in case. If you already have Firefox and are comfortable with it then, of course, that will do nicely.
#43
Posted 29 November 2007 - 02:59 PM
The Skeptic
-
- Technician
-
- 4,075 posts
Trusted Tech
With your permission doc:
Post no. 3 shows what seems to be irregularities in the advanced settings of IDE ata/atapi controllers. I compare it to the appearance in my computer and it shows grayed area that should not be grayed, especially the udma 6. I suspect that some drivers are corrupted and suggest:
1: Go to Disk Drives in device manager and uninstall the drivers. Reboot. Windows will load up the drivers again.
2: Go to the motherboard's manufacturer's site, download and reinstall IDE, chipset or any other driver that may be linked to system operation.
Post no. 3 shows what seems to be irregularities in the advanced settings of IDE ata/atapi controllers. I compare it to the appearance in my computer and it shows grayed area that should not be grayed, especially the udma 6. I suspect that some drivers are corrupted and suggest:
1: Go to Disk Drives in device manager and uninstall the drivers. Reboot. Windows will load up the drivers again.
2: Go to the motherboard's manufacturer's site, download and reinstall IDE, chipset or any other driver that may be linked to system operation.
#44
Posted 29 November 2007 - 03:25 PM
Oniketsoku
- Topic Starter
-
- Member
-
- 343 posts
Member
Lots of info to take in at once
Thanks for all the input, folks
I'm going to attempt Skeptic's solution and after that I will begin working with hijackfree
I will post back once I have completed trying everything
Thanks for all the input, folks
I'm going to attempt Skeptic's solution and after that I will begin working with hijackfree
I will post back once I have completed trying everything
#45
Posted 29 November 2007 - 03:53 PM
Oniketsoku
- Topic Starter
-
- Member
-
- 343 posts
Member
Before I uninstall those drivers:
http://www.biostar-u...?model=p4m80-m4
That's my motherboard
What am I looking for there?
http://www.biostar-u...?model=p4m80-m4
That's my motherboard
What am I looking for there?
Similar Topics
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users
As Featured On:
Sign In
Create Account
