[milanmagan]

I have no idea what the problem is (I don't know anything about computers - which is why I'm here I guess!). This morning when I turned it on it said something went wrong, and gave me the option of starting in safe mode, which I did. But seeing it loaded up fine I changed back into normal mode...

And tonight it is being INCREDIBLY slow! Could somebody please help me figure out why??

Here's a hijackthis log, if that'll be of any help whatsoever.

Thank you so much,




Absolutely clueless, but furious with it taking so long to do anything-

Milan.




Logfile of HijackThis v1.99.1
Scan saved at 10:44:42 PM, on 8/5/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\carpserv.exe
C:\Program Files\Philips\Sound Agent 2\mc500cpl.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\AVPersonal\AVGNT.EXE
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\AVPersonal\AVGUARD.EXE
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Documents and Settings\Magan.MAGAN-0QEMXNI9D\Desktop\hijackthis\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [dnmckj] c:\windows\system32\uhcmwri.exe r
O4 - HKLM\..\Run: [lnxgqm] c:\windows\system32\djgtsg.exe r
O4 - HKLM\..\Run: [QveCtl2Tray] C:\Program Files\Philips\Sound Agent 2\mc500cpl.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVGCtrl] "C:\Program Files\AVPersonal\AVGNT.EXE" /min
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Download with Star Downloader - C:\Program Files\Star Downloader\sdie.htm
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec....sa/LSSupCtl.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec....sa/SymAData.cab
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

[Advertisements]

And tonight it is being INCREDIBLY slow!

You need to expand on this. What exactly are you experiencing??

By the way, you are NOT supposed to post a HJT log here unless you're asked to do so.

makai

Edited by makai, 05 August 2005 - 04:55 AM.

[makai]

And tonight it is being INCREDIBLY slow!

You need to expand on this. What exactly are you experiencing??

By the way, you are NOT supposed to post a HJT log here unless you're asked to do so.

makai

Edited by makai, 05 August 2005 - 04:55 AM.

[milanmagan]

LOL, okay!

So, it takes ages to shut down, I mean ages - 10 minutes, where usually it took only one.

It's like there are heaps of programs running behind the scenes maybe? It keeps making noises as if that's what's happening. For example, msn messenger might take like 3 minutes to come on screen after I press the icon, whereas before it took 5 seconds.

Moxilla might take 10 minutes to appear after I click the icon...


The other day I downloaded a java applet for chatting, but deleted it soon after... could it have anything to do with this? Like I said, I don't know much about computers, but I do know something is up when it takes so long to shut down, and so long for programs to run...

Thanks for helping,

Milan

[milanmagan]

It seems to run fine for a few minutes after I start up, but soon after that it begins to become slow, very slow. When I click open new window in Moxilla everything freezes, and it might take two or three minutes to unfreeze again. Playing songs with Media Player is also a hassle because it freezes up so much...

Thanks,

[milanmagan]

Just ran process manager on hjt, including dll files, and here is what's running:

all in c:/windows/system32

ntdll.dll
kernel32.dll
msvcrt.dll
USER32.dll
GDI32.dll
SHELL32.dll
ADVAPI32.dll
RPCRT4.dll
SHLWAPI.dll
xpsp2res.dll
uxtheme.dll

[help meee]

From my experience i had the same problem as you. i did this....
ctrl+alt+deleted go to the processor and you can se what programs thats running i shutted all down that i diden't need and after that i deleted them use some ad-aware some scanning for virus and then it worked fine... i found out it was all the programs that started up when i turned on my PC well that helped me...

dont know if it was to any help, hope so

[milanmagan]

there are many programs running, such as svchost.exe and lsass.exe...

The only problem is, I don't know which processes to end! Because it gives you a warning, saying "Terminating a process may cause undesired results including loss of data and system instability"

There's a process called explorer.exe that is taking up the most memory - 22MB, but I don't know what would happen if I ended it... would everything crash? lol

Thanks

[Stasiek]

before you start to close out running aplications in the background try this first.

1-run defrag program
2-run antivirus (if you believe a virus is causing it do to a recent download)
3-run adware
4-run malware

what was the message that showed up on the screen when it gave you the option to start in safe mode?

what is you computer specifications? processor type and speed, operating system, ram installed?

*note*
if you want to open task manager and click on tasks to see what is using the processing power, if there is a file that is hogging all the cpu cycles then you may copy and paste in search box to see what folder it belongs to and from there you probably will be able to tell what software it is a part off, then reply back here

Edited by Stasiek, 06 August 2005 - 04:21 AM.

[milanmagan]

Cool! That sounds very complicato though. Give me a day and I will post back in here with my results.

As for help meeee's advice, I took it, and ended some processes that I gathered were associated with the anti-virus program my repair man loaded on here... And from that time it's been so much faster! Regularly back to normal I'd say...

But I'll do everything you suggested, Staseik, just to make sure.

(I can't remember the screen that showed up yesterday morning when I turned on my comp. I think it said the computer wasn't closed down properly, or there had been some error. I'm sorry, I really can't remember. Some help am I!)

I'll post back here tomorrow for all you guys' help!

[milanmagan]

OK so I ran malware and adware programs, they came up clean.

(I'm on a 2.2 GHz comp, with 27 GB hard drive; not sure how to find out the memory? Operating system Windows XP.)

So should I uninstall that antivirus software my computer repair man put in? (My mum's friend lol) It seems to be what's slowing up my comp... But without it I'll have no antivirus protection...

[Stasiek]

sorry for late reply,

as a pc tech i don't recommend uninstalling the antivirus software as it's being used to actively scan your pc for infections.

the reason you pc/programs load slower is because of the active scanning, everytime a file is loaded it's being scaned by the antivirus software.

it will come down to you as far as choosing security over speed.

what i do is this, i have my antivirus software disabled for autostart so my operating system can load up quicker and whenever i use other programs/games but once i do regular internet surfing or file downloading i turn the antivirus software back on, i also perform a weekly virus scan of my pc with a monthly defrag for the hard drives.

hope this helps