PC Slow can someone please have a look at Hijack This log?

catlou

I'm looking at the processes I don't seem to be able to right click on them all to copy them?

There are a 6 for chrome though and I only have it open as a browser once with 3 tabs in that? most of those chrome ones are between 24,600k-36,000k but one is 123,000K at the moment? If that makes sense?

GunJack

yeah, it makes sense if it's a big page....anything else look very high, say over 40,000k ?? might be an idea to close thunderbird and chrome, re-check the commit charge and do a hjt run & log

GunJack

IE is the same, 2 entries in task manager for one tab....so chrome is using a quarter of that commit charge figure...not so good...

catlou

Thanks again!

I'm having am mess round with it.....will get back to you!

closed

how are you backing up, which method or program are you using? Are you doing a disk image? maxblast/acronis? when did you last backup?

copy (don't move) your photo's (ie the folders) to the external drive, and also burn a copy to dvd (or cd if you don't have a dvd writer) if you have one available (you can use imgburn if you have no dvd writing software)

---

stop these running at startup using msconfig, then reboot

O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [CleanMem Mini Monitor] C:\Program Files\CleanMem\mini_monitor.exe /startup
O4 - HKLM\..\Run: [TkBellExe] "C:\program files\real\realplayer\update\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - Global Startup: TP-LINK Wireless Client Utility.lnk = C:\Program Files\TP-LINK\TP-LINK Wireless Client Utility\RtWLan.exe

if there is a google update task under c:\windows\tasks, delete it.

If your wireless stops working as a result of stopping rtwlan.exe, browse to the file (C:\Program Files\TP-LINK\TP-LINK Wireless Client Utility\RtWLan.exe), and double click on it.



If you have a java icon in control panel, click it, advanced, misc - untick java quick starter, and untick place icon in system tray.

Is this slowness problem only when you are browsing photo's or browsing directories with photo's in? - If so, try deleting the thumbs.db in each directory.

If you shutdown the machine, remove the external drive from the usb port, and reboot, is it still slow?

start, run

chkdsk c: /F

then reboot to check the c drive for errors.


Have you changed wireless network card from a belkin?

uninstall avast and (if you don't mind, chrome, google update), reboot, see if it is still slow

then put avast back on, but decline the chrome, and remote control functionality during install (do a custom install)

Could you post a fresh hijackthis log and commit charge straight after a reboot, before loading any programs, in particular chrome/works/thunderbird.

catlou

Thanks Closed for your help!

Update!

I had already disabled those things in start up through CC Cleaner as advised by gunjack and also changed the wireless from TP Link to windows.

To answer your questions:

I am doing regular back ups with Maxtor Maxblast (thanks to your previous advice! ) I did one a couple of weeks ago but will do another in the next couple of days.

I did previously have a Belkin USB wireless dongle but now have the TP Link one instead.

I have checked the Java settings and they were already un-ticked.

There was 4 google updater things in that file so I have deleted them all.

I have noticed as a whole that things have become slower mainly over the last few weeks although probably gradually over months too? I have been trying to organise my photos and this is when I have really noticed it's been very slow opening files / folders even when you click back etc. and crashing at times too. I have seen the thumbs files I thought they were something important?? I will delete those.

I ran the ckdsk thing I assume everything was ok as it didn't tell me otherwise? I saw something flash on the screen at the end but not for long enough to read it!!!

I haven't uninstalled the things you suggested yet but these are the figures at the moment:

When it boots up with nothing open Total 301904 / Peak 314080.

With Chrome Open with 3 tabs + Thunderbird to compare to what it was before Total 802268 / Peak 1051988

For curiosity I have tried the same thing but with Firefox which I used to use until about 6 months ago and overall it does seem quicker? Total 541244 / Peak 1051988

I will post a hijack this log for now and will carry on using Firefox for a bit and see if the Photos are any quicker when I delete the thumbs things!

Thanks Very Much!

debitcardmayhem

catlou wrote: »

Thanks Closed for your help!

Update!


I will post a hijack this log for now and will carry on using Firefox for a bit and see if the Photos are any quicker when I delete the thumbs things!

Thanks Very Much!

No do not delete them set explorer to view details not thumbnails/icon

catlou

As of now:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:08:18, on 15/03/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Program Files\Common Files\Maxtor\Schedule2\schedul2.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\CleanMem\mini_monitor.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Trend Micro\HijackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://register.hp.com/servlet/WebReg.servlets.ProdReg1Servlet?appID=java_wreg_wreg_genpg&prodOS=011&gwCountry=GB&language=en&PURCH_DT_MONTH=01&PURCH_DT_DAY=25&PURCH_DT_YEAR=2006&PROD_SERIAL_ID=CNN5430MXX&application=305&modelID=EL495AA&LF=red
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (file missing)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Maxtor Scheduler2 Service (MaxSch2Svc) - Maxtor - C:\Program Files\Common Files\Maxtor\Schedule2\schedul2.exe

--
End of file - 5209 bytes

catlou

debitcardmayhem wrote: »

No do not delete them set explorer to view details not thumbnails/icon

closed wrote: »

Is this slowness problem only when you are browsing photo's or browsing directories with photo's in? - If so, try deleting the thumbs.db in each directory.

Not done it yet.....but I thought that was what Closed meant?

catlou

Overall it does seem a bit better since I have stopped using chrome and use firefox instead.

But it's opening & closing the photos folders in explorer that still seems to be very slow / crash.

I will delete the Thumbs files

But if you can't see anything in the Hijackthis log maybe it's just one of those things it is about 6+ years old now?