Processor upgrade (is it worth doing)

George_Michael

I've been asked to look into the possibility of upgrading the CPU on my mothers PC as she isn't happy with the speed of it when using the internet.
I've "played" with computers plenty of times, but just things like upping the RAM and replacing the HDD, so I would like a bit of advice about this.

The computer is about 3 years old (it was built to order by an independent company) and the spec it currently has is as follows.

Motherboard. ASUS P5K SE:
CPU. Intel® Core™2 Duo E6750 (2 X 2.66GHz) 1333MHz
RAM 3GB
HDD 160GB with about 110GB empty

I've done a reasonable cleanup on the computer (removing many unused programs and CCleaned the registry).
This has helped a small bit but I was wondering if installing a faster CPU would make any noticeable difference. (providing I can find one that is compatible with the motherboard).

Also any advice as to how to actually go about the installation would be gratefully received.

closed

https://forums.moneysavingexpert.com/discussion/2436849

That machine should be fast, so it's either a software problem, or your connection to the isp. post a hijackthis log and check the connection stats in the router control panel.

esuhl

Unless you're processing/transcoding a lot of data that are being uploaded/downloaded during your Internet use, the network connection is going to be the main limiting factor - not CPU speed.

What applications does your mother think are performing too slowly?

Have you considered trying Linux? I've had great success in improving the performance of old computers when using Arch Linux instead of Windows XP...

George_Michael

Many thanks for the advice.

I've been through the list and didn't find any nasties using malwarebytes or Avast.
I also ran hijackthis as suggested and the log is shown below. (Top be honest, I can't make head or tail of it)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:40:18, on 14/06/2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17023)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\AOL\1254147574\ee\AOLSoftware.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\SkypeIntegration\SkypeIntegration\SkypeClient.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\WINDOWS\Temp\Password.exe
C:\PROGRA~1\Webshots\Webshots.scr
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\Home.COMPUTER-AEB232\Desktop\HijackThis (2).exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: AOL Broadband Toolbar Loader - {776a9d06-e178-4aa0-aee4-b4de3a64ad28} - C:\Program Files\AOL Broadband Toolbar\aolbbtb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll
O3 - Toolbar: AOL Broadband Toolbar - {e6ed7f95-e571-4f81-8757-5eb11252703d} - C:\Program Files\AOL Broadband Toolbar\aolbbtb.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1254147574\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [SkypeClient] "C:\Program Files\PDT\VoIPVoiceIntegration\VoIPVoice Integration.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Password.lnk = C:\WINDOWS\Temp\Password.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: Garmin Communicator Plug-In - https://static.garmincdn.com/gcp/ie/2.9.1.0/GarminAxControl.CAB
O16 - DPF: {556EEC63-31E2-47C3-BF29-DFF799D2FE04} (Remote Access ActiveX Client) - https://secure.logmein.com/activex/RACtrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1229770028593
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1229769975609
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.adobe.com/pub/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Google Update Service (gupdate1c98bb4e4d42287) (gupdate1c98bb4e4d42287) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/HOME~1.COM/LOCALS~1/Temp/msohtml1/01/clip_image001.jpg

--

To answer the questions, the computer is running XP and it's using Google Chrome for the browser.
My mother seems to think that downloading anything is slower than it used to be, but I use the computer so rarely I couldn't really confirm if this is really the case.
She also has AOL as the internet provider. (I know this won't help, but it's what she is used to and doesn't want to change)

relic

George_Michael wrote: »

Many thanks for the advice.

I've been through the list and didn't find any nasties using malwarebytes or Avast.
I also ran hijackthis as suggested and the log is shown below. (Top be honest, I can't make head or tail of it)



To answer the questions, the computer is running XP and it's using Google Chrome for the browser.
My mother seems to think that downloading anything is slower than it used to be, but I use the computer so rarely I couldn't really confirm if this is really the case.
She also has AOL as the internet provider. (I know this won't help, but it's what she is used to and doesn't want to change)

That's rarely anything to do with the speed of the computer itself.

Does she mean to computer itself performs slow, or the internet?

With those sort of specs you shouldn't be having any problems, mine has a lower CPU (but has a graphics card, don't know whether yours does!) and I am able to play Bad Company 2, Black Ops and so on in 720p and high details.

RussJK

What's with this:
O4 - Global Startup: Password.lnk = C:\WINDOWS\Temp\Password.exe

An autostart running out of a temp folder is almost always a bad sign, and calling itself "password.exe" is really rubbing it in. I would disable that from autorunning via MSCONFIG or checking the box in Hijackthis and fixing it that way - then send it to https://www.virustotal.com for checking.

Do you give your mum remote support using Logmein by the way?

Is this something you've done with the Windows active desktop:
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/HOME~1.COM/LOCALS~1/Temp/msohtml1/01/clip_image001.jpg

George_Michael

Yes, I occasionally have to connect up remotely with logmein to sort out the odd problem.

I did wonder what that "O4 - Global Startup" bit was, but as I said, I don't really have a clue about decoding what's on the hijack log.

RussJK

I'm going to assume then that the active desktop component is malicious. Go back into Hijackthis, and Check and Fix the following:
O4 - Global Startup: Password.lnk = C:\WINDOWS\Temp\Password.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/HOME~1.COM/LOCALS~1/Temp/msohtml1/01/clip_image001.jpg

and let me know what virustotal.com thinks of the password.exe

Might want to run Combofix afterwards, to see what else is there. Will have to disable Avast and the Windows firewall. Combofix will make a log, if it doesn't come up in notepad then it'll be on Drive C as combofix.txt
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

esuhl

George_Michael wrote: »

To answer the questions, the computer is running XP and it's using Google Chrome for the browser.
My mother seems to think that downloading anything is slower than it used to be...

If she's downloading large files, you might want to give the DownloadThemAll add-on (for Firefox only, alas) a go. I use it as my download manager and it works really well.

Is she connecting via a wireless network? If so, maybe the signal strength isn't too great. InSSIDer is a useful tool that shows you the wireless networks in your area, and can help you select a (relatively) free wi-fi channel.

Have you asked her to check the download speed she's getting from somewhere like SpeedTest.net? If the speed is really low, it's probably not related to your PC settings; you'd need to check your internal network or speak to your mother's ISP.

spannerzone

That spec is still pretty good for an everyday PC.... heck it's more than I've got and mine flies with XP or Windows 7

I certainly wouldn't waste any money of upgrading a processor as sorting the Internet/wireless etc speed and/or reloading Windows will make all the difference.

George_Michael

I've done a bit of research and the following 2 log entries appear to be okay.

O4 - Global Startup: Password.lnk = C:\WINDOWS\Temp\Password.exe

O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/HOME~1.COM/LOCALS~1/Temp/msohtml1/01/clip_image001.jpg

The first one is for a Freecom external HDD that I occasionally plug into the PC (it has password protection on it), and the second entry is for the screensaver/wallpaper application used on the PC (it's from a company called Webshots).

I've been right through the process suggested in the post from Closed and haven't found anything nasty on the PC.
It seems to be running fine to me, but I will have to let my mother play with it and see if she notices any difference.

Thanks for all the advice from everyone. It was much appreciated.