📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

laptop so slow!

Options
13

Comments

  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    edited 9 January 2013 at 8:41PM
    How we doing?

    When running this your desktop may temporarily disappear, it will return on reboot and your Recycle Bin will be emptied.

    • Right click OTM.exe and choose Run as Administrator to run it.
    • Agree to any UAC prompt
    • Copy the following code inside the codebox below. Do not include the word Code: 
      :commands
[CREATERESTOREPOINT]

:reg
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"=-
"MobileDocuments"=-
"ISUSPM"=-
"Skype"=-

[HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=-
"ISBMgr.exe"=-
"MarketingTools"=-
"PMBVolumeWatcher"=-
"TkBellExe"=-
"Adobe ARM"=-
"SunJavaUpdateSched"=-
"QuickTime Task"=-
"iTunesHelper"=-
"EEventManager"=-


[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=-
"HotKeysCmds"=-
"Persistence"=-

:services
mfehidk
mfeavfk
mferkdk
mfesmfk

:files
C:\Users\Ash\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk
C:\Windows\System32\drivers\mfehidk.sys
C:\Windows\System32\drivers\mfeavfk.sys
C:\Windows\System32\drivers\mferkdk.sys
C:\Windows\System32\drivers\mfesmfk.sys
sc stop SASDIFSV /c
sc config SASDIFSV start= demand /c
sc stop SASKUTIL /c
sc config SASKUTIL start= demand /c
sc stop SASCORE /c
sc config SASCORE start= demand /c
sc stop ABBYY.Licensing.FineReader.Sprint.9.0 /c
sc config ABBYY.Licensing.FineReader.Sprint.9.0 start= demand /c
sc stop IAStorDataMgrSvc /c
sc config IAStorDataMgrSvc start= demand /c
sc stop SkypeUpdate /c
sc config SkypeUpdate start= demand /c
C:\Users\Ash\AppData\Roaming\Owboe
C:\Users\Ash\AppData\Roaming\Osyco

:commands
[EMPTYTEMP]
[CREATERESTOREPOINT]
    • Return to OTM, right click in the Paste instructions for Items to be Moved window (under the yellow bar) and choose Paste.
    • Push the large MoveIt! button.
    • Click OK to the prompt
    • OTM may ask to reboot the machine. Please Allow it to do so if asked.
    • The report should appear in Notepad after the reboot. Copy/paste the contents of that report back here in your next reply.
  • ayeshasi
    ayeshasi Posts: 1,737 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    edited 9 January 2013 at 10:15PM
    Done,

    All processes killed
    ========== COMMANDS ==========
    Restore point Set: OTM Restore Point
    ========== REGISTRY ==========
    Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\swg deleted successfully.
    Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\MobileDocuments not found.
    Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\ISUSPM not found.
    Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Skype not found.
    Registry value HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\IAStorIcon not found.
    Registry value HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ISBMgr.exe not found.
    Registry value HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\MarketingTools not found.
    Registry value HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\PMBVolumeWatcher not found.
    Registry value HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\TkBellExe not found.
    Registry value HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM not found.
    Registry value HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched not found.
    Registry value HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task not found.
    Registry value HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\iTunesHelper not found.
    Registry value HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\EEventManager not found.
    Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\IgfxTray not found.
    Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HotKeysCmds not found.
    Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Persistence not found.
    ========== SERVICES/DRIVERS ==========
    Error: Unable to stop service mfehidk!
    Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mfehidk deleted successfully.
    Service mfeavfk stopped successfully!
    Service mfeavfk deleted successfully!
    Service mferkdk stopped successfully!
    Service mferkdk deleted successfully!
    Service mfesmfk stopped successfully!
    Service mfesmfk deleted successfully!
    ========== FILES ==========
    C:\Users\Ash\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk moved successfully.
    File/Folder C:\Windows\System32\drivers\mfehidk.sys not found.
    File/Folder C:\Windows\System32\drivers\mfeavfk.sys not found.
    File/Folder C:\Windows\System32\drivers\mferkdk.sys not found.
    File/Folder C:\Windows\System32\drivers\mfesmfk.sys not found.
    < sc stop SASDIFSV /c >
    SERVICE_NAME: SASDIFSV
    TYPE : 1 KERNEL_DRIVER
    STATE : 1 STOPPED
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0
    C:\Users\Ash\Desktop\cmd.bat deleted successfully.
    C:\Users\Ash\Desktop\cmd.txt deleted successfully.
    < sc config SASDIFSV start= demand /c >
    [SC] ChangeServiceConfig SUCCESS
    C:\Users\Ash\Desktop\cmd.bat deleted successfully.
    C:\Users\Ash\Desktop\cmd.txt deleted successfully.
    < sc stop SASKUTIL /c >
    SERVICE_NAME: SASKUTIL
    TYPE : 1 KERNEL_DRIVER
    STATE : 1 STOPPED
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0
    C:\Users\Ash\Desktop\cmd.bat deleted successfully.
    C:\Users\Ash\Desktop\cmd.txt deleted successfully.
    < sc config SASKUTIL start= demand /c >
    [SC] ChangeServiceConfig SUCCESS
    C:\Users\Ash\Desktop\cmd.bat deleted successfully.
    C:\Users\Ash\Desktop\cmd.txt deleted successfully.
    < sc stop SASCORE /c >
    SERVICE_NAME: SASCORE
    TYPE : 10 WIN32_OWN_PROCESS
    STATE : 3 STOP_PENDING
    (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0
    C:\Users\Ash\Desktop\cmd.bat deleted successfully.
    C:\Users\Ash\Desktop\cmd.txt deleted successfully.
    < sc config SASCORE start= demand /c >
    [SC] ChangeServiceConfig SUCCESS
    C:\Users\Ash\Desktop\cmd.bat deleted successfully.
    C:\Users\Ash\Desktop\cmd.txt deleted successfully.
    < sc stop ABBYY.Licensing.FineReader.Sprint.9.0 /c >
    SERVICE_NAME: ABBYY.Licensing.FineReader.Sprint.9.0
    TYPE : 10 WIN32_OWN_PROCESS
    STATE : 4 RUNNING
    (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0
    C:\Users\Ash\Desktop\cmd.bat deleted successfully.
    C:\Users\Ash\Desktop\cmd.txt deleted successfully.
    < sc config ABBYY.Licensing.FineReader.Sprint.9.0 start= demand /c >
    [SC] ChangeServiceConfig SUCCESS
    C:\Users\Ash\Desktop\cmd.bat deleted successfully.
    C:\Users\Ash\Desktop\cmd.txt deleted successfully.
    < sc stop IAStorDataMgrSvc /c >
    SERVICE_NAME: IAStorDataMgrSvc
    TYPE : 10 WIN32_OWN_PROCESS
    STATE : 3 STOP_PENDING
    (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0
    C:\Users\Ash\Desktop\cmd.bat deleted successfully.
    C:\Users\Ash\Desktop\cmd.txt deleted successfully.
    < sc config IAStorDataMgrSvc start= demand /c >
    [SC] ChangeServiceConfig SUCCESS
    C:\Users\Ash\Desktop\cmd.bat deleted successfully.
    C:\Users\Ash\Desktop\cmd.txt deleted successfully.
    < sc stop SkypeUpdate /c >
    [SC] ControlService FAILED 1062:
    The service has not been started.
    C:\Users\Ash\Desktop\cmd.bat deleted successfully.
    C:\Users\Ash\Desktop\cmd.txt deleted successfully.
    < sc config SkypeUpdate start= demand /c >
    [SC] ChangeServiceConfig SUCCESS
    C:\Users\Ash\Desktop\cmd.bat deleted successfully.
    C:\Users\Ash\Desktop\cmd.txt deleted successfully.
    C:\Users\Ash\AppData\Roaming\Owboe folder moved successfully.
    C:\Users\Ash\AppData\Roaming\Osyco folder moved successfully.
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: All Users

    User: Ash
    ->Temp folder emptied: 214660107 bytes
    ->Temporary Internet Files folder emptied: 682664533 bytes
    ->Java cache emptied: 176468 bytes
    ->Flash cache emptied: 9166 bytes

    User: Default
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes

    User: Public

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 0 bytes
    %systemroot%\System32 .tmp files removed: 0 bytes
    %systemroot%\System32 (64bit) .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 65272446 bytes
    %systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
    %systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 0 bytes
    %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 158709 bytes
    RecycleBin emptied: 0 bytes

    Total Files Cleaned = 918.00 mb


    OTM by OldTimer - Version 3.1.21.0 log created on 01092013_204623
    Files moved on Reboot...
    C:\Users\Ash\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
    File C:\Users\Ash\AppData\Local\Temp\~DF16AB8B2EE0679058.TMP not found!
    File C:\Users\Ash\AppData\Local\Temp\~DF2D80F5880B25781C.TMP not found!
    File C:\Users\Ash\AppData\Local\Temp\~DF4247FB1C05656013.TMP not found!
    File C:\Users\Ash\AppData\Local\Temp\~DF42E3100F1AF5B3E9.TMP not found!
    File C:\Users\Ash\AppData\Local\Temp\~DF5108FE512FE31CC3.TMP not found!
    File C:\Users\Ash\AppData\Local\Temp\~DF543334523E45E060.TMP not found!
    File C:\Users\Ash\AppData\Local\Temp\~DF5DA6C547F9494A02.TMP not found!
    File C:\Users\Ash\AppData\Local\Temp\~DF6B74DCF21A7CEA42.TMP not found!
    File C:\Users\Ash\AppData\Local\Temp\~DF8DFB164929C21037.TMP not found!
    File C:\Users\Ash\AppData\Local\Temp\~DF9526B376806113CE.TMP not found!
    File C:\Users\Ash\AppData\Local\Temp\~DFE89DEB3077FFD7C1.TMP not found!
    File C:\Users\Ash\AppData\Local\Temp\~DFED7F96A0937F3A18.TMP not found!
    File C:\Users\Ash\AppData\Local\Temp\~DFF67533FDD5C19339.TMP not found!
    File C:\Users\Ash\AppData\Local\Temp\~DFFC2774D6E4D68243.TMP not found!
    File C:\Users\Ash\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\X9BTK5H6\xd_arbiter[3].htm not found!
    C:\Users\Ash\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\T6355171\follow_button.1357735024[1].htm moved successfully.
    C:\Users\Ash\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\T6355171\hub[1].htm moved successfully.
    C:\Users\Ash\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\T6355171\hub[2].htm moved successfully.
    C:\Users\Ash\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OT410P69\sck[2].htm moved successfully.
    File C:\Users\Ash\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OT410P69\uk_msn_com[2].htm not found!
    C:\Users\Ash\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HOJNV5RF\set[1].htm moved successfully.
    File C:\Users\Ash\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\HOJNV5RF\xd_arbiter[1].htm not found!
    File C:\Users\Ash\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\FAAPDFVZ\MoreStoriesPagelet[2].htm not found!
    File C:\Users\Ash\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\F6HE43CJ\sck_fix[2].htm not found!
    C:\Users\Ash\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0CZXAWHW\xd_arbiter[1].htm moved successfully.
    C:\Users\Ash\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT moved successfully.
    Registry entries deleted on Reboot...
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    It looks like some of that worked, but some didn't... ?

    How are things now?
  • ayeshasi
    ayeshasi Posts: 1,737 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    Its much better, although still a little slow in opening pages
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    How did IE run in no add-ons mode?

    Did you try a different browser - was that any better?

    Run this quick OTM script for me and post the log.
    • Right click OTM.exe and choose Run as Administrator to run it.
    • Agree to any UAC prompt
    • Copy the following code inside the codebox below. Do not include the word Code: 
      :files
reg query HKCU\Software\Microsoft\Windows\CurrentVersion\Run /c
reg query HKLM\Software\Microsoft\Windows\CurrentVersion\Run /c
reg query HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run /c
reg query HKCU\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run /c
    • Return to OTM, right click in the Paste instructions for Items to be Moved window (under the yellow bar) and choose Paste.
    • Push the large MoveIt! button.
    • Click OK to the prompt
    • The report should appear in Notepad. Copy/paste the contents of that report back here in your next reply.
  • ayeshasi
    ayeshasi Posts: 1,737 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    waddler_8 wrote: »
    How did IE run in no add-ons mode?

    Did you try a different browser - was that any better?

    Run this quick OTM script for me and post the log.
    • Right click OTM.exe and choose Run as Administrator to run it.
    • Agree to any UAC prompt
    • Copy the following code inside the codebox below. Do not include the word Code: 
      :files
reg query HKCU\Software\Microsoft\Windows\CurrentVersion\Run /c
reg query HKLM\Software\Microsoft\Windows\CurrentVersion\Run /c
reg query HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run /c
reg query HKCU\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run /c
    • Return to OTM, right click in the Paste instructions for Items to be Moved window (under the yellow bar) and choose Paste.
    • Push the large MoveIt! button.
    • Click OK to the prompt
    • The report should appear in Notepad. Copy/paste the contents of that report back here in your next reply.
    I didnt try a different browser, actually forgot about that, Went to sleep LOL.
    I couldnt find how to run in no add-ons mode :s.
    I will try the above
  • ayeshasi
    ayeshasi Posts: 1,737 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    ========== FILES ==========
    < reg query HKCU\Software\Microsoft\Windows\CurrentVersion\Run /c >
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    EPLTarget\P0000000000000000 REG_SZ C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIKE.EXE /EPT "EPLTarget\P0000000000000000" /M "XP-302 303 305 306 Series"
    swg REG_SZ "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
    C:\Users\Ash\Desktop\cmd.bat deleted successfully.
    C:\Users\Ash\Desktop\cmd.txt deleted successfully.
    < reg query HKLM\Software\Microsoft\Windows\CurrentVersion\Run /c >
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
    NortonOnlineBackup REG_SZ C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
    BCSSync REG_SZ "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
    RIMBBLaunchAgent.exe REG_SZ C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
    APSDaemon REG_SZ "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    avgnt REG_SZ "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
    C:\Users\Ash\Desktop\cmd.bat deleted successfully.
    C:\Users\Ash\Desktop\cmd.txt deleted successfully.
    < reg query HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run /c >
    HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run
    NortonOnlineBackup REG_SZ C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
    BCSSync REG_SZ "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
    RIMBBLaunchAgent.exe REG_SZ C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
    APSDaemon REG_SZ "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    avgnt REG_SZ "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
    C:\Users\Ash\Desktop\cmd.bat deleted successfully.
    C:\Users\Ash\Desktop\cmd.txt deleted successfully.
    File/Folder reg query HKCU\Software\WOW6432Node\Microsoft\Windows\CurrentVersion not found.

    OTM by OldTimer - Version 3.1.21.0 log created on 01092013_225944
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    ayeshasi wrote: »
    I couldnt find how to run in no add-ons mode :s

    It was in the link in my previous post ;)
    waddler_8 wrote: »
    In the meantime, run IE in no add-ons mode for a short while and see if it improves.

    http://www.enhanceie.com/ie/troubleshoot.asp
    Start IE in No Add-ons mode, either by right-clicking the Desktop icon, or clicking START | RUN and typing: iexplore.exe -extoff

    Close IE, press your windows key + R on your keyboard and type or copy/paste in:

    iexplore.exe -extoff

    Click OK (note there's a space between iexplore.exe & -extoff)
  • ayeshasi
    ayeshasi Posts: 1,737 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    waddler_8 wrote: »
    It was in the link in my previous post ;)




    Close IE, press your windows key + R on your keyboard and type or copy/paste in:

    iexplore.exe -extoff

    Click OK (note there's a space between iexplore.exe & -extoff)

    Oops sorry, think it was way too late for me last night. Will try that
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    ayeshasi wrote: »
    OTM by OldTimer - Version 3.1.21.0 log created on 01092013_225944

    That's great - thanks.
    ayeshasi wrote: »
    Oops sorry, think it was way too late for me last night. Will try that
    No worries. :)
This discussion has been closed.
★ ★ ★ Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 351.1K Banking & Borrowing
  • 253.2K Reduce Debt & Boost Income
  • 453.6K Spending & Discounts
  • 244.1K Work, Benefits & Business
  • 599.1K Mortgages, Homes & Bills
  • 177K Life & Family
  • 257.5K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.1K Discuss & Feedback
  • 37.6K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.
Update Your Picture