Is My PC Dying..?!

EmptyPockets

Hi All,

Our PC has been on a go-slow for about a week now and it's driving us mad. The orange harddrive light is on constantly, and it always seems to be busy. It is also painfully slow, trying to load a page or a programme is taking forever - whereas only a couple of weeks ago it was good as new (we had a brand new harddrive - 160gb, and added memory - now 1gb).

I have run Mcafee virusscan - nothing.
I have run Ad-aware - keeps crashing halfway through scan and 'terminating gracefully' (thanks a lot!)
I delete cookies and temporary files, etc, regularly...

Following the advice from a similar thread here on MSE, I downloaded HiJackThis this morning and ran it... will post the log file next, in the hope that someone can help.

Many thanks guys,

EP x

EmptyPockets

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:56:28, on 26/08/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Boot mode: Normal
Running processes:
H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\system32\spoolsv.exe
H:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
H:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
H:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
H:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
h:\program files\common files\mcafee\mna\mcnasvc.exe
H:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
H:\PROGRA~1\McAfee\MSC\mcpromgr.exe
h:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
h:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
H:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
H:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
H:\Program Files\McAfee\MPF\MPFSrv.exe
H:\PROGRA~1\McAfee\MPS\mps.exe
H:\Program Files\McAfee\MSK\MskSrver.exe
H:\Program Files\SiteAdvisor\6066\SAService.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\wanmpsvc.exe
H:\WINDOWS\Explorer.EXE
H:\Program Files\Common Files\AOL\ACS\AOLDial.exe
H:\WINDOWS\system32\ctfmon.exe
h:\PROGRA~1\mcafee.com\agent\mcagent.exe
H:\Program Files\McAfee\MPS\mpsevh.exe
H:\Program Files\Common Files\AOL\1179433846\ee\aolsoftware.exe
h:\program files\common files\aol\1179433846\ee\services\antiSpywareApp\ver2_0_32_1\AOLSP Scheduler.exe
h:\program files\common files\aol\1179433846\ee\aolsoftware.exe
H:\Program Files\Internet Explorer\iexplore.exe
H:\Program Files\SiteAdvisor\6066\SiteAdv.exe
H:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
H:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\YTBSDK.exe
H:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aol.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - H:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - H:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - H:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - !!02478D38-C3F9-4EFB-9B51-7695ECA05670} - H:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - !!06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - H:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - !!089FD14D-132B-48FC-8861-0048AE113215} - H:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O2 - BHO: SWEETIE Class - !!1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - H:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll
O2 - BHO: (no name) - !!53707962-6F74-2D53-2644-206D7942484F} - H:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - !!761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - H:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - !!7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - H:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: scriptproxy - !!7DB2D5A0-7241-4E79-B68D-6309F01C5231} - h:\program files\mcafee\virusscan\scriptcl.dll
O2 - BHO: (no name) - !!7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - !!9030D464-4C02-4ABF-8ECC-5164760863C6} - H:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - h:\program files\google\googletoolbar1.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - H:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O3 - Toolbar: &Google - !!2318C2B1-4965-11d4-9B18-009027A5CD4F} - h:\program files\google\googletoolbar1.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - H:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O3 - Toolbar: McAfee SiteAdvisor - !!0BF43445-2F28-4351-9252-17FE6E806AA0} - H:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - H:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [AOLDialer] H:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKCU\..\Run: [ctfmon.exe] H:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: &AOL Toolbar Search - h:\program files\aol\aol toolbar 2.0\resources\en-GB\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://H:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - !!08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - !!08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: AOL Toolbar - !!3369AF0D-62E9-4bda-8103-B4C75499B578} - H:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O9 - Extra button: Research - !!92780B25-18CC-41C8-B9BE-3C9C571A8263} - H:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - H:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - H:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - H:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O16 - DPF: !!17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: !!4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} - http://aolcc.aolsvc.aol.co.uk/computercheckup/qdiagcc.cab
O16 - DPF: !!6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1179437464640
O16 - DPF: !!6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1179437664890
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\!!33CB5006-CFF6-49DE-9C9D-1DDCB45BDEF8}: NameServer = 205.188.146.145
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - H:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - H:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - H:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: Google Updater Service (gusvc) - Google - H:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - H:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - H:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - H:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - H:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - h:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - H:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - H:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - h:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - h:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - H:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - H:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - H:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - H:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - H:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NBService - Nero AG - H:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - H:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP - H:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - H:\Program Files\SiSoftware\SiSoftware Sandra Lite XI.SP2\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - H:\Program Files\SiSoftware\SiSoftware Sandra Lite XI.SP2\RpcSandraSrv.exe
O23 - Service: SiteAdvisor Service - McAfee, Inc. - H:\Program Files\SiteAdvisor\6066\SAService.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - H:\WINDOWS\wanmpsvc.exe
--
End of file - 9903 bytes

Browntoa

I' run hijackthis again and fix these

O2 - BHO: (no name) - !!7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

and also these unless you are sure what SweetImBar is and use it ??

O2 - BHO: SWEETIE Class - !!1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - H:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll

O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - H:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll

then try running Superantispyware

www.superantispyware.com

the blue button for thr free version, thn do a FULL SCAN and reboot at the end if it asks

if still slow try disabling Mcafee and see if it speeds up

Little_John

Yeah browntao got the ones I would remove, nothing other than those items wrong with that hijakthis log.

I would uninstall yahoo toolbar and google toolbar but that is my personal choice some people like toolbars they don't really affect performance that much.

If the drive is being access all the time do you have any download software running? do you use any downloading software? I think you may just need to run a scan disk checking for disk errors and fxing them and a defrag.
The only other reason a drive runs in the way it is doing is if the drive is failing so if you get the chance do a backup of your files etc just incase.

EmptyPockets

Thanks for replying,

Have taken your advice and 'fixed' the items mentioned using HJT, also downloaded and ran SUPERAntiSpyware, that found 26 adware cookies that I deleted.

Don't have any download software running (as far as I know, but I am NOT great with computers) - do you mean like Limewire or something similar? In any case, I don't have that running...

We do use the Yahoo! toolbar so wouldn't want to uninstall unless necessary...

It has speeded up a little, although the orange light is still on constantly and it sounds like it is always 'doing something'...

Do you think it is worth getting rid of Mcafee altogether and using the Windows firewall and Avast virusscan? (which would also save us £2.50 a month )

Thanks again,

EP x

Toxteth_OGrady

Have a look in Task Manager and see which process is using the most cpu time and memory.

:cool:

TOG

[Deleted User]

Definately get rid of McAfee, that a Norton really slow down your PC and sometimes from the experience I have of fixing peoples PC does not always catch all viruses.

Thanks

peter999

EmptyPockets wrote: »

Our PC has been on a go-slow for about a week now and it's driving us mad. The orange harddrive light is on constantly, and it always seems to be busy. It is also painfully slow, trying to load a page or a programme is taking forever - whereas only a couple of weeks ago it was good as new (we had a brand new harddrive - 160gb, and added memory - now 1gb).

What has changed in last few weeks, hardware & software ??
Who installed hard drive & memory ??

If the problem follows hardware changes, I would suspect hardware problem/setup.

I would go through each item, removing//uninstalling until you find the culprit.

Keep track of what you do, so you can restore system way it was.

peter999

KILL_BILL

as has been mentioned go into administarion adn look at what is using the most processes

is you isp aol ?

if not then get it removed as that is a real system hog

do a disk cleanup and then do a thorough disk defrag

peter999

1) Also boot into Safe Mode (press F5 on bootup, select safe mode), see if problem continues.

2) If it is software problem, you can use MSCONFIG to disable startup programs & services which start on bootup to try to identify which one could be causing problem.

peter999

EmptyPockets

Had a look in Task Manager, the following seem to be using the most memory:

• svchost SYSTEM 32'424K
• Mcshield.exe SYSTEM 20'524K
• aawservice.exe SYSTEM 22'260
• iexplore.exe Claire 38'363K

Nothing has changed re: hardware/software as far as I can remember, apart from uninstalling and reinstalling Ad-aware a couple of times because of it crashing... The new harddrive and extra memory was installed by a friend who is a computer engineer (overseas now so cannot ask him to help). This was done three months ago and we had no problems, the computer was like a dream and sooo quick!

I also ran disk defrag and clean up only a few days ago when trying to sort this myself, but no difference...

EP x

p.s I really appreciate you all offering advice as I feel a bit lost!