Vista moving in slow motion

[dgerson]

My Vista 32 OS os moving at what seems like slow motion, I have run scans and diag but can't find a problem.. can anyone help me before I re-install the OS and make a mess for myself?

thanks a ton!

- Dave

[brandypeppy]

How much RAM? What are you using for security?

Download and install Winpatrol from HERE

Then post back what you have under the startup tab.

[dgerson]

I really appreciate the help.. this started 2 nights ago and I am going crazy trying to figure it out. I ran virus scan got nada, ran spybot and got the 'virtumonde.sdn' to show up and had it removed. Ran Vundo Fix but it found nothing, then ran MS malicious removal tool and found nothing. None of my scans or diagnostic reveal anything, but the system will only operate in Safe Mode.

RAM - 3318
Security - CA Security Suite (comes with ISP)
Spot Bot - Periodically
Windows Defender

WinPatrol StartUp Tab

• Startup Programs •
LifeCam
LifeExp.exe LifeExp.exe
Version: 3.0.215.0 Copyright (c) Microsoft Corporation. All rights reserved.
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\Microsoft LifeCam\LifeExp.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


Windows Defender
MSASCui.exe -hide Windows Defender User Interface
Version: 1.1.1505.0 © Microsoft Corporation. All rights reserved.
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: %ProgramFiles%\Windows Defender\MSASCui.exe -hide
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


VetAlert
vetmsg.exe CA Anti-Virus Realtime Messaging Service
Version: Version 9.0.0.194 (c) Copyright 2006 CA, Inc.
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\vetmsg.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


SynTPEnh
SynTPEnh.exe Synaptics TouchPad Enhancements
Version: 9.0.1.3 06Nov06 Copyright (C) Synaptics, Inc. 1996-2006
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


SunJavaUpdateSched
jusched.exe Java(TM) Platform SE binary
Version: 6.0.130.3 Copyright © 2004
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\Java\jre6\bin\jusched.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


SigmatelSysTrayApp
sttray.exe Sigmatel Audio system tray application
Version: 1.0.5343.1 nd544 cp1 Copyright (c) 2004-2006, SigmaTel, Inc.
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: sttray.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


QOELOADER
QOELoader.exe QOELoader Application
Version: 6.0.1.33 Copyright © 2006 CA. All rights reserved.
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-6.0.1.33\QOELoader.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


Persistence
igfxpers.exe persistence Module
Version: 7.14.10.1147 Copyright 1999-2006, Intel Corporation
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Windows\System32\igfxpers.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


PCMService
PCMService.exe CyberLink PowerCinema Resident Program
Version: 4, 5, 0, 0 Copyright (c) 2005 CyberLink Corp.
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\Dell\MediaDirect\PCMService.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


Kernel and Hardware Abstraction Layer
KHALMNPR.EXE Logitech KHAL Main Process
Version: 4.00.101 (C) 1998-2007 Logitech. All rights reserved.
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: KHALMNPR.EXE
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


ISUSScheduler
issch.exe -start Macrovision FLEXnet Connect Scheduler
Version: 3, 20 Copyright (C) 1990-2004 Macrovision Corporation
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe -start
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


ISUSPM Startup
ISUSPM.exe -startup Macrovision FLEXnet Connect Software Manager
Version: 3, 20 Copyright (C) 1990-2004 Macrovision Corporation
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


IgfxTray
igfxtray.exe igfxTray Module
Version: 7.14.10.1147 Copyright 1999-2006, Intel Corporation
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Windows\System32\igfxtray.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


HotKeysCmds
hkcmd.exe hkcmd Module
Version: 6.14.10.1147 Copyright 1999-2006, Intel Corporation
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Windows\System32\hkcmd.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


GrooveMonitor
GrooveMonitor.exe GrooveMonitor Utility
Version: 4.2.1.2704 © 2006 Microsoft Corporation. All rights reserved.
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


Google Desktop Search
GoogleDesktop.exe /startup Google Desktop
Version: 5.7.806.10245 Copyright (c) 2003-08 Google. All Rights Reserved.
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe /startup
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


eFax 4.3
J2GDllCmd.exe /R eFax Messenger - DLL Command Utility
Version: 4.3.409.0 Copyright © 2006 j2 Global Communications, Inc.
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\eFax Messenger 4.3\J2GDllCmd.exe /R
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


ECenter
EULALauncher.exe
Version: 1.0.2489.24404
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: c:\DELL\E-Center\EULALauncher.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


Corel Photo Downloader
PhotoDownloader.exe
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\Corel\Corel Snapfire Plus\PhotoDownloader.exe
Click for Plus Info


cctray
cctray.exe CA Common Tray
Version: Version 4.0.0.205 (c) Copyright 2007 CA, Inc.
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


CAVRID
cavrid.exe CA Anti-Virus Realtime Infection Report
Version: Version 9.0.0.194 (c) Copyright 2006 CA, Inc.
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\cavrid.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


capfasem
capfasem.exe CA Personal Firewall capfasem Module
Version: Version 10.0.0.162 (c) Copyright 2007 CA, Inc.
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


cafw
cafw.exe -cl CA Personal Firewall Application
Version: Version 10.0.0.162 (c) Copyright 2006 CA, Inc.
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\cafw.exe -cl
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


LogMeIn GUI
LogMeInSystray.exe
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
Click for Plus Info


{0228e555-4f9c-4e35-a3ec-b109a192b4c2}
gnotify.exe Gmail Notifier
Version: 1.0.25.0 Copyright © Google Inc. 2004-2005
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\Google\Gmail Notifier\gnotify.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


QuickTime Task
QTTask.exe -atboottime QuickTime Task
Version: QuickTime 7.6.5 (1327.80) Copyright Apple Inc. 1989-2009
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\QuickTime\QTTask.exe -atboottime
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


iTunesHelper
iTunesHelper.exe iTunesHelper
Version: 9.0.3.15 © 2003-2010 Apple Inc. All Rights Reserved.
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\iTunes\iTunesHelper.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


WinPatrol [FREE Edition]
winpatrol.exe -expressboot WinPatrol System Monitor
Version: 17.0.2010.0 Copyright © 1997- 2010 BillP Studios
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


CAISafe
isafe.exe CA ISafe Service
Version: Version 8.0.9.0 © 2004 Computer Associates International, Inc.
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
Path: C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\isafe.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


Google Update
GoogleUpdate.exe /c Google Installer
Version: 1.2.131.7 Copyright 2007-2008 Google Inc.
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Users\gersons\AppData\Local\Google\Update\GoogleUpdate.exe /c
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


Aim6
aim6.exe /d locale=en-US ee://aol/imApp AIM
Version: 1.4.9.1 © 2007 AOL LLC.
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\AIM6\aim6.exe /d locale=en-US ee://aol/imApp
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


swg
GoogleToolbarNotifier.exe GoogleToolbarNotifier
Version: 2, 0, 301, 1654 Copyright © 2005-2007
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


SpybotSD TeaTimer
TeaTimer.exe System settings protector
Version: 1, 6, 2, 0 © 2000-2009 Safer-Networking Ltd. All rights reserved.
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


MsnMsgr
msnmsgr.exe /background Windows Live Messenger
Version: 14.0.8089.0726 © Microsoft Corporation. All rights reserved.
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\Windows Live\Messenger\msnmsgr.exe /background
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


googletalk
googletalk.exe /autostart Google Talk
Version: 1,0,0,104 Copyright (C) 2005-2006
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Users\gersons\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


ehTray.exe
ehtray.exe Media Center Tray Applet
Version: 6.0.6000.16386 © Microsoft Corporation. All rights reserved.
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Windows\ehome\ehtray.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


DW6
DesktopWeather.exe
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Path: C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


Adobe Gamma Loader
Adobe Gamma Loader.exe Adobe Gamma Loader
Version: 1, 0, 0, 1 Copyright © 1998
Location: Windows Startup Group
Path: C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


Adobe Acrobat SpeedLauncher
reader_sl.exe Adobe Acrobat SpeedLauncher
Version: 7.1.0.2008042300 Copyright 1984-2008 Adobe Systems Incorporated and its licensors. All rights reserved.
Location: Windows Startup Group
Path: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


Digital Line Detection
DLG.exe Digital Line Detection
Version: 1, 0, 0, 2 Copyright © 2001-2006
Location: Windows Startup Group
Path: C:\Program Files\Digital Line Detect\DLG.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


eFax Messenger - Tray
J2GTray.exe eFax Messenger - Tray
Version: 4.3.409.0 Copyright © 2006 j2 Global Communications, Inc.
Location: Windows Startup Group
Path: C:\Program Files\eFax Messenger 4.3\J2GTray.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


ImageFox add-on image viewer
NewShortcut1.exe
Location: Windows Startup Group
Path: C:\Windows\Installer\{92E64C51-5096-442F-9A44-61CB2941391D}\NewShortcut1.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


InstallShield
NewShortcut2_53A01CC614B04512A2E710D39BF83DC4.exe InstallShield
Version: 12.0 Copyright (C) 2006 Macrovision Corporation
Location: Windows Startup Group
Path: C:\Windows\Installer\{7F0C4457-8E64-491B-8D7B-991504365D1E}\NewShortcut2_53A01CC614B04512A2E710D39BF83DC4.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


Screen Clipper (Windows+S) and Launcher (Windows+N) for Microsoft Office OneNote.
ONENOTEM.EXE Microsoft Office OneNote Quick Launcher
Version: 12.0.6300.5000 © 2006 Microsoft Corporation. All rights reserved.
Location: Windows Startup Group
Path: C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


OneNote Table Of Contents.one
OneNote Table Of Contents.onetoc2
Location: Windows Startup Group
Path: C:\Users\gersons\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote Table Of Contents.onetoc2
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


Winlogon Userinit
userinit.exe Userinit Logon Application
Version: 6.0.6000.16386 © Microsoft Corporation. All rights reserved.
Location: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon Userinit
Path: C:\Windows\System32\userinit.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


Winlogon Shell
explorer.exe Windows Explorer
Version: 6.0.6000.16386 © Microsoft Corporation. All rights reserved.
Location: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon Shell
Path: explorer.exe
First Detected by WinPatrol: 04/14/2010 4:06 PM
Click for Plus Info


WebCheck
webcheck.dll Web Site Monitor
Version: 8.00.6001.18702 © Microsoft Corporation. All rights reserved.
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
Path: C:\Windows\System32\webcheck.dll
First Detected by WinPatrol: 04/14/2010 4:06 PM
8.00.6001.18702
Click for Plus Info


Component Categories cache daemon
browseui.dll Shell Browser UI Library
Version: 6.0.6000.16386 © Microsoft Corporation. All rights reserved.
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
Path: C:\Windows\System32\browseui.dll
First Detected by WinPatrol: 04/14/2010 4:06 PM
6.0.6000.16386
Click for Plus Info


Groove GFS Stub Execution Hook
GrooveShellExtensions.dll GrooveShellExtensions Module
Version: 4.2.1.2704 © 2006 Microsoft Corporation. All rights reserved.
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
Path: C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
First Detected by WinPatrol: 04/14/2010 4:06 PM
4.2.1.2704
Click for Plus Info


CallingID Link Advisor
CIDLinkAdvisor.dll Version: 1.0.0.80 (c) CallingID Ltd. All rights reserved.
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
Path: C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\LinkAdvisor\CIDLinkAdvisor.dll
First Detected by WinPatrol: 04/14/2010 4:06 PM
1.0.0.80
Click for Plus Info


Google Desktop
GoogleDesktopNetwork3.dll Google Desktop
Version: 5.7.806.10245 Copyright (c) 2003-08 Google. All Rights Reserved.
Location: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows AppInit_DLLs
Path: C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll
First Detected by WinPatrol: 04/14/2010 4:06 PM
5.7.806.10245
Click for Plus Info


GoToAssist
G2AWinLogon.dll
Location: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon Notify
Path: C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll
Click for Plus Info


igfxcui
igfxdev.dll igfxdev Module
Version: 7.14.10.1147 Copyright 1999-2006, Intel Corporation
Location: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon Notify
Path: igfxdev.dll
First Detected by WinPatrol: 04/14/2010 4:06 PM
7.14.10.1147
Click for Plus Info


PFW
UmxWnp.Dll HIPS Logon Notification Package
Version: 1.0 (c) 2006 CA
Location: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon Notify
Path: UmxWnp.Dll
First Detected by WinPatrol: 04/14/2010 4:06 PM
1.0
Click for Plus Info

[brandypeppy]

The list I wanted is the one right under the start up tab of Winpatrol.
Should show just the programs starting, no description, no location.

That said, you do have a lot of stuff running that will really bog the system, and I can help you with that.

HOWEVER, you can only start in safe? You did remove a virus? I don't think your machine is clean yet, not by a far sight.

Go HERE, run the steps, and start a thread there, esp. if you can still only get into safe mode!

When given the all clear by a Malware Doctor, come back for a final tune-up.

[dgerson]

That list under the StartUp Tab in WinPatrol has;
Title Command Company Type First Detected

I could not download it because I am in safe mode and could not save it as shown. I am able to run in regular mode, but it takes forever to start and each program takes forever to execute anything, and usually fail... something is choking it hard and I need to find out what. I have even seen one error, 'log on process has failed to create the security options dialog'..

I will follow your clean up steps shortly and report back my progress

thanks again

[inspectorweb]

I recommend AnVir Task Manager. It shows everything running on a computer. I've been using it for about 4 or 5 years on a couple of pc's, and never get any problems with viruses or slow PC

[dgerson]

Turns out I needed a new motherboard.. there was an inverter that was burned out.. I ordered one online and installed it myself into my Dell Inspiron E1405.. it is working good since then!

thanks for everyone's help!

[brandypeppy]

Originally Posted by inspectorweb

I recommend AnVir Task Manager. It shows everything running on a computer. I've been using it for about 4 or 5 years on a couple of pc's, and never get any problems with viruses or slow PC

That link doesn't work.

[plodr]

Good for us, brandypeppy, it isn't a good link because when I searched for info on what the mouseover was showing me, I see dangerous downloads mentioned.
I did a bit more searching and discovered it comes with Dealio and Yahoo Toolbars. You have to be sure to uncheck/untick those toolbars before you install the Task Manager.