[Gemius]

Hi

I use Windows 98 Second Edition and I've been struggling with low resources for some time. I removed all un-necessary programs from start Up. I deleted all unwanted files, programs, temp folders etc. and I cleaned the registry.

The performance of my computer improved dramatically and is like lightning when I access Word, Works etc.

I've been monitoring the resources and the pattern is clear. Using programs like word will cause them to drop a few percentage points but on closing the program down they recover. When I log onto the internet or Outlook Express however, I get a big drop in resources (down from 85% to 73%) the result of which is a jerky mouse and slow browsing.

What I've also noticed is that on logging off the internet the resources do not fully recover. They stay low and still affect the computers speed and the mouse.

I'm not aware of any problems with viruses or malware as everything else works fine.

I know this is a perennial problem and I'd appreciate any views and opinions as to what can be done about it.


Regards

Jim

[Advertisements]

Have you tried pressing CTRL-ALT-DEL when this happens to see whats running in the background?

[Samm]

Have you tried pressing CTRL-ALT-DEL when this happens to see whats running in the background?

[Gemius]

Hi Samm

I have Explorer, Ccapp and Navapw32 running in the background all the time. Other programs come and go as I use them. I use Genes Reunited a lot and it's always very slow and jerky. Tonight was no exception and Resources are down to their usual 73% once I logged on. They recover a few percent when I log off but the longer I stay online the slower it gets.

Regards

Jim

[Samm]

Hi again

Can you run a hijack this log out of interest? Download hijack this from here :
http://www.majorgeek...wnload3155.html

Close all other apps then run hijack. Paste the contents of the log file here.

[Metallica81]

Hey there Jim, go to www.techspot.com, go to downloads, go to performance and download a resource manager. This will dramaticly increase the resourse percentage and the best thing is it Sorts the programmes wich the PC does not require to run and remove them...... It worked for me.

[Gemius]

Hi Samm

I hope this is OK. Thanks for your help.

Jim

Logfile of HijackThis v1.99.1
Scan saved at 19:26:01, on 24/07/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\NORTON PERSONAL FIREWALL\NISUM.EXE
C:\PROGRAM FILES\NORTON PERSONAL FIREWALL\CCPXYSVC.EXE
C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\MY DOCUMENTS\JIM\HJT FOLDER\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ntlworld.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = dynhost.inetcam.com;register.inetcam.com;<local>
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\Run: [iamapp] C:\Program Files\Norton Personal Firewall\IAMAPP.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE /Consumer
O4 - HKLM\..\Run: [EnsoniqMixer] starter.exe
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [nisserv] C:\Program Files\Norton Personal Firewall\NISSERV.EXE
O4 - HKLM\..\RunServices: [Nisum] C:\Program Files\Norton Personal Firewall\NISUM.EXE
O4 - HKLM\..\RunServices: [ccPxySvc] C:\PROGRA~1\NORTON~2\CCPXYSVC.EXE
O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://support.gatew...r/PCPitStop.CAB
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150...tzip/RdxIE6.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.syma...bin/AvSniff.cab
O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://www.lizardtec...DjVuControl.cab
O16 - DPF: {AD7FAFB0-16D6-40C3-AF27-585D6E6453FD} (loader Class) - http://dload.ipbill.com/del/loader.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.s.../ActiveData.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.s...sa/SymAData.cab
O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) - https://components.v...apitch_tp10.htm
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.s...sa/LSSupCtl.cab
O16 - DPF: {9A57B18E-2F5D-11D5-8997-00104BD12D94} (compid Class) - http://support.gatew...rvest/gwCID.CAB
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....467&clcid=0x409

[Samm]

Hi there

Thanks for the HJT log.
One of the possible reasons for your system running slowly, is the amount of Symantec software you have running in the background! Thats just my personal opinion though as I don't like a lot of their software. Also, you don't want to get rid of it unless you have something to replace it with.

I am concerned about a couple of entries though. They are :
...../netzip/rdxie6.cab
and
http://dload/ipbill.com/del/loader.cab

I'm fairly certain you don't want either of these 2 being loaded.

I suggest you do one of two things:

1. Run Hijack this again & do perform the scan. Click on the 'config...' button and make sure that the 'make backups before fixing items' box is checked. Then place a check mark against the two entries I listed, and click 'Fix selected items'

If you need to, you can always run hijack again, select 'view list of backups' & undo the changes you made

OR

2. Post your log in the malware forum & let the experts have a look over it!

[Gemius]

Thanks Samm

I've been waiting to get an opinion from the experts on my log but they must be busy as they've not replied as yet. Anyway I've deleted the two items you were concerned about without any obvious side effects. There hasn't been a dramatic improvement in performance but I can live with it now.

I take your point about the Symantic software. I don't suppose Windows 98 was designed to be used with all this extra software running in the background. When I first had it I wasn't on broadband and I've always been suspicious of the Firewall causing various problems ever since it was installed.

I'm considering my options but as Windows 98 is getting a bit long in the tooth now I don't think it's worth installing a different Firewall. I think I might as well go the whole hog and upgrade to XP or stick it out until Vista comes along.

Thanks for your help it's really appreciated.

Jim