Clearing out laptop

closed

If you want to try and recover some music, try downloading and running recuva.

If you haven't done so already, create factory recovery discs - see manual section c6

http://bizsupport2.austin.hp.com/bc/docs/support/SupportManual/c00725936/c00725936.pdf

check the price of a ram upgrade at www.crucial.com/uk

http://www.youtube.com/watch?v=7bEVbkfNo4w



This list may look daunting, but should take less than an hour of effort:-

__________________________________________________

uninstall bearshare

uninstall apple mobile software if you aren't planning on attaching it anymore.

Unless you use media sharing across the network, disable it in media player, library, media sharing, or options media sharing, untick find and share media

Download and install cleanmem http://www.pcwintech.com/cleanmem (download direct download) - see note in speedup sticky to make sure you download the correct software.

In internet explorer, click on tools, internet options, advanced, disable script debugging to stop this running
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

__________________________________________________

Unless you need them running all the time, use the startup tab in msconfig (start, run, msconfig )to disable these items from running at startup (they can always be run manually if needed) . When you reboot after using msconfig, you will get a prompt, select don't show this again.

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\Sminst\Recguard.exe


Install and run ccleaner (untick the google toolbar during the install). Untick the "windows log files" box, under the system heading before cleaning. Also Tick the java cache tick box under CCleaner, applications, internet to wipe the java cache which sometimes hides infections. http://www.piriform.com/ccleaner/download/slim

Install and run startuplite, accept suggested changes - http://www.malwarebytes.org/StartUpLite.exe

Disable ctfmon - control panel, regional and language options,languages, details, advanced, tick the Turn off advanced text services, ok

Click the java icon in control panel, updates, untick check for updates

__________________________________________________

Using Hijackthis, tick and fix these entries
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/...oUploader5.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/pr02...s/MSNPUpld.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/...toUploader.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://msnuk.oberon-media.com/online...der_v10_en.cab

O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\BearShare MP3\Plugins\RazaWebHook.dll (file missing)
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
__________________________________________________

Uninstall any IE toolbars (browser helper objects or BHO's) in Control panel, or Firefox plugins that you don't need. This is a list of the IE BHO's evident in the log, (firefox plugins don't show up in hijackthis)
O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\BearShare MP3\Plugins\RazaWebHook.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: HP Credential Manager for ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\HPQ\IAM\Bin\ItIeAddIN.dll


__________________________________________________

Run Windows update, your XP service pack is SP2 which out of date


start, run, services.msc - disable these services UNLESS you use them. (make a note of any services you disable,if you have any problems related to these services subsequently, simply re-enable them)

SSDP Discovery Service
Remote Registry
WebClient
Distributed Link Tracking Client

Also disable these services if you don't use them by running services.msc
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

__________________________________________________


When you've done all that, reboot, note the commit charge before opening any applications, and post it along with a fresh hijackthis log


The best way of cleaning up a slow machine is to backup all your data to an external drive, and do a factory restore using the factory restore partition (see manual or manufacturers website) or Windows disc. The log suggests you have a factory restore partition and pc angel software on the machine, so this is an option to consider. It will wipe all data and lose office, if you installed it after purchase.

Lexxi

I'm almost done but I have got a bit of a problem with a few things

closed wrote: »

uninstall bearshare Bearshare isn't installed so I can't find it in add/remove

Unless you use media sharing across the network, disable it in media player, library, media sharing, or options media sharing, untick find and share media I can't find this one, I found an options menu but none said find and share


Uninstall any IE toolbars (browser helper objects or BHO's) in Control panel, or Firefox plugins that you don't need. This is a list of the IE BHO's evident in the log, (firefox plugins don't show up in hijackthis)
O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\BearShare MP3\Plugins\RazaWebHook.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: HP Credential Manager for ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\HPQ\IAM\Bin\ItIeAddIN.dll

These aren't in add/remove either, is there somewhere else I should be looking, like the internet settings?

Also disable these services if you don't use them by running services.msc

I'm just about to run the cleanmem and then everything else has been done

GunJack

If bearshare's gone already, that's good

the IE toolbars/BHOs can be disabled from within IE. Tools > Manage Add-ons. Find them and disable/delete them

media network sharing can also be disabled from control panel > Admin Tools > Services. Scroll down til you find it, and disable from there ...

Once you've finished off and rebooted, run CCleaner's cleaner and reg cleaner, then post the new hjt log and commit charge figures.

closed

it was there once, check this folder has gone

C:\Program Files\BearShare MP3\

Is it running any better?

GunJack

and Java's well out of date, a lot of current nasties will exploit it, Get the latest version here:-

http://www.filehippo.com/download_jre_32/

and remove older versions via control panel > add/remove programs

Notmyrealname

Lexxi wrote: »

Make and model, ummm does nx6325 mean anything? That's what the sticker says on the bottom. It's a HP

HP NX6325. A business class machine with a dual core chip in it. It shouldn't be slow.

Lexxi

GunJack wrote: »

and Java's well out of date, a lot of current nasties will exploit it, Get the latest version here:-

http://www.filehippo.com/download_jre_32/

and remove older versions via control panel > add/remove programs

Do I download the new one and then delete the others? It shows up about 5 times in add/remove

Notmyrealname wrote: »

HP NX6325. A business class machine with a dual core chip in it. It shouldn't be slow.

Like I said, I lent it to someone while they got used to it and decided if they wanted one but she took it to IT classes, all the relatives wanted to have a go or show her things, they meant well but the poor thing is just overloaded now

The best way of cleaning up a slow machine is to backup all your data to an external drive, and do a factory restore using the factory restore partition (see manual or manufacturers website) or Windows disc. The log suggests you have a factory restore partition and pc angel software on the machine, so this is an option to consider. It will wipe all data and lose office, if you installed it after purchase.

If we did this what data would we back up? I can't remember when I installed Office but for what I use it for I don't mind using the free version that I can't remember the name of

I went on some naughty websites last night as my husband had been signing up for them so I wanted to see what they were. I had to run malware and the cclean to get the speed back up but it is a bit happier since doing all the things you suggested. Thank you for your help
I kept getting error messages about script debugging when I was using it last night but I haven't been on today to know if it was just a site or what it meant


Sorry, I should also mention I'm replying from my parents so I can't do the next lot till I get back

GunJack

it doesn't matter which order you do java in, might be better to remove all the old ones first

TakeThis

I recommend the Factory Restore if you've no important data to save and upping the RAM to 1GB.

Lexxi

I think the restore might be better as I have no idea who has put what on there. What will the restore leave on, would it be the same things as when I got it?