Slow PC

Discussion in 'Malware Help (A Specialist Will Reply)' started by JerryD, Jul 17, 2007.

  1. JerryD

    JerryD Private E-2

    My Dell 9100 PC has suddenly become very slow at accessing the internet and on reboot. I have run through both the Basic Computer maintenance and malware removal guide. Attached are copies of the files requested. Counterspy did not detect anything and so nothing is attached for it. I also could not get a connection for PadnaActiveScan that could run the scan. I will try again if you wish. I am connected/wired through a wireless router to a cable modem(Comcast). Only this computer has the slow connection and many times says that it cannot find a page, including Major Geeks links. The other computer connected to the router works fine. I have swapped ports on the router between computers, as well as done numerous restarts without success. Thanks for any help and guidance you may be able to provide. I will attache the HijackThis log in the next message.
     

    Attached Files:

  2. JerryD

    JerryD Private E-2

    Attached is the HijackThis log for the above problem.
     

    Attached Files:

  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You said you are connected by a wireless router to a cable modem. Do you mean that you have no phyical connection between the router and the modem because that is the wireless part? Or do you mean your PCs have wireless connections to the router? Based on your message, it sounds like you are hard wired from the PCs to the router. Is that true for both PCs?

    When you say "numerous restarts", exactly what is it that you mean you are restarting?

    Many times slow PCs are not caused by malware. They are very frequently just related to what you have running and how much you have running. This appears to be your problem. Also incomplete uninstalls of previously used software causes problems. I see you still have traces from Symantec Antivirus but you are currently using ZoneAlarm Security Suite. When did you install the ZoneAlarm software (before or after your problems began)? Was it just after installing this that your PC became slow?

    None of the below list of items/questions pertains to malware but they all can slow you down. These are not topics for this forum.
    1. When did you install Windows Desktop Search? Do you really need it? Do you use it? If not, uninstall it.
    2. When did you install Google Toolbar etc? Do you really need it? Do you use it? If not, uninstall it.
    3. Do you use Roxio's Drag to Disc feature? If not, uninstall it or at least stop it from running at startup.
    4. Do you do anything special with Windows Media Player that requires this process to always run at startup? See: http://www.bleepingcomputer.com/startups/WMPNSCFG.exe-17104.html
    5. Below is a whole bunch of process I consider unnecessary to load at startup, but you have decide what you use and want and what you don't need. Again these are not malware so you have to do your research on them and decide if you need them:
    Since CounterSpy did not find anything, uninstall it now if it is the free trial from the READ ME since it will just slow you down more. If it is a paid version, then you should not be running Windows Defender.

    You need to install HijackThis where requested. You have it exactly where we specify not to install it. You have this:

    C:\Documents and Settings\Jerry\Desktop\Analyze.exe

    You need to have this:
    C:\Program Files\HijackThis\Analyze.exe


    Uninstall the below software:
    J2SE Runtime Environment 5.0 Update 11
    Java 2 Runtime Environment, SE v1.4.2_03
    Java(TM) SE Runtime Environment 6 Update 1
    Symantec Technical Support Web Controls
    Viewpoint Media Player <-- should have been uninstalled in step 0 of the READ ME

    Make sure you reboot after uninstalling the above!

    After reboot, now install the current version of Sun Java from: Sun Java Runtime Environment

    Let's remove Symantec running service.
    • Click on Start, then Run ... type services.msc into the box that opens up, and press 'OK'.
    • On the page that opens, scroll down to Symantec Core LC
    • then right click the entry, select Properties and press Stop Service.
    • When it shows that it is stopped, next please set the Start-up Type to 'Disabled'.
    • Click OK until you get back to Windows.
    Make sure the below line no longer appears in your HJT log:
    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
     
    Last edited: Jul 18, 2007
  4. JerryD

    JerryD Private E-2

    Sorry for the confusion. I had saved the HijackThis file on the desktop and then saw the note and later saved it where it was supposed to be. I attached the wrong file. I have attached a copy of the HiJackThis log run from the correct location after I had corrected items.

    I followed your suggestions. When I ran the RegistryBooster2 application that you linked me to, it found over 500 registry problems, 270 in ActiveX, OLE, COM section; 177 in Invalid file association; 22 in User software settings; 45 in System software settings; 3 in Uninstall settings; 2 in Application paths; 1 in System drivers and none in the other sections. I am wondering if this is not the main source of the problem. If it appears to be the case and I should be in another forum, please redirect me.

    Regarding the items that are running at startup, how do I permanently eliminate them from starting at that time.

    Thanks again for the assistance.
     

    Attached Files:

  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Actually I was only referring you to the information on the WMPNSCFG.exe process and nothing else. Personally I would not waste your time with RegistryBooster which you have to pay for. There are other free registry cleaning tools you can use. See the Registry file folder in the left column of majorgeeks home page. I would expect your problems to be what I said. The stuff you are running. If you want or need to to discuss these tools further, that would be a topic for the Software Forum. Uninstall Uniblue RegistryBooster 2 now since it will only add to your slow down.


    I see you did not uninstall CounterSpy as suggested. Does that mean it is a paid version? I still see Windows Defender too so I'm not sure why you did not do what was requested. One of these should go.

    First I will give a few items you can permanently remove by doing the following.

    Run this Disable/Remove Windows Messenger to remove Windows Messenger.


    Run HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

    O4 - HKLM\..\Run: [MMTray] C:\PROGRA~1\MUSICM~1\MUSICM~3\mm_tray.exe
    O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
    O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
    O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
    After clicking Fix, exit HJT.

    Now reboot in normal mode

    Now attach the below new logs and tell me how the above steps went.

    1. ShowNew
    2. HJT


    Are things working any better?

    For other processes I mentioned, read on thru the below.

    How to deal with startup processes.
    • First you should uninstall any software that you do not use.
    • Second if you have processes still trying to load at startup even though you have uninstalled them. You can simple use HijackThis to easily remove the startup. That way you will not have to manually edit the registry.
    • Third for software you do not want to uninstall but you don't want it to load at startup, look in the program for an option not to load when Windows starts and disable it this way. If you cannot find an option like that you have two possible actions:
      • if you never want it to load at startup, use HJT to permanently remove the startup.
      • if you sometimes want it to load at startup, use a program like Startup CPL to enable or disable as you see fit.
     
  6. JerryD

    JerryD Private E-2

    Did what you suggested. Was able to get rid of windows defender with your link. When I ran the HJT scan, it only found the following:

    O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"

    The others did not show up. I removed the RegistryBooster, but I noticed that it still showed up in the HJT log. Why is that? I am assuming this is where I use HJT to remove the process where the program is no longer on the system.

    The system is running better, but the connection speed to the internet is still very poor. for some reason, the manage attachments button is not working. I will start another reply and add the files you requested.

    I will move over to the software forum to continue. Thanks for the help.
     
  7. JerryD

    JerryD Private E-2

    Here are the Newfile and HJT log.
     

    Attached Files:

  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I cannot look at your logs since you are using MSconfig to control startup which we specifically requested that you not do. That may also explain why you did not see some of the items listed in the fix. I also gave you a link to Startup CPL which is what you should use if you want to experiment with startups.

    Also you did not uninstall CounterSpy as requested!

    Yes you can fix the Registry Booster line with HJT.
     
  9. JerryD

    JerryD Private E-2

    I subsequently ran Startup CPL. Works great and put smconfig back to normal startup. After that the two missing items were available. I then removed them using HJT as requested. You said to remove counterspy if it was not purchased, which it is. The problem started before counterspy was loaded, so I don't believe it is the problem. A copy of the latest HJT file is attached.
     

    Attached Files:

  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Your problems do not appear to be malware. You will have to experiment with uninstalling software to see if you can locate anything that is the cause of what you describe as slowing down you Internet Connection. Start with CounterSpy then try ZoneAlarm's Security Suite.

    You will have to continue any further work on this in the Software Forum since this is not a malware issue.

    Note however your last newfiles.txt log showed Windows Defender still installed. Have you uinstalled this as requested?
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds