Avast WEBforum
Other => General Topics => Topic started by: Edwards19179 on July 10, 2007, 10:15:28 PM
-
I have windows XP home on my computer which is 4 years old! But it has become so slow. It takes a long time to launch applications and programmes such as internet explorer etc.
I have run virus scans, adaware, spyboy, AVG antispyware, super antispyware, spyware doctor etc they have found some spyware and removed it. But the compuer is still so slow!
why?
-
If you still detecting any strange behavior or even you're sure you're not clean, maybe it will be good to test your machine with anti-rootkit applications (http://www.antirootkit.com/software/index.htm). I suggest AVG (http://www.grisoft.com/doc/download-free-anti-rootkit/us/crp/0), Panda (http://research.pandasoftware.com/blogs/research/archive/2007/04/27/New-Panda-Anti_2D00_Rootkit-_2D00_-Version-1.07.aspx) and/or F-Secure BlackLight (http://www.f-secure.com/blacklight/try_blacklight.html).
Also, if you still detecting strange behaviors or you want to be sure you're clean, maybe making a HijackThis (http://www.bleepingcomputer.com/files/hijackthis.php) log to post here and, specially, scan and submit to on-line analysis the RunScanner (http://www.runscanner.net/) log would help to identify the problem and the solution.
-
:) Hi Edwards :
Do you "Delete" your various "Temporary" Files on a regular basis,
perhaps using a program like the FREE "ATF Cleaner", available at
www.atribune.org/content/view/25/2/ . Do you COMPLETELY
REMOVE all unwanted programs ?
-
If you still detecting any strange behavior or even you're sure you're not clean, maybe it will be good to test your machine with anti-rootkit applications (http://www.antirootkit.com/software/index.htm). I suggest AVG (http://www.grisoft.com/doc/download-free-anti-rootkit/us/crp/0), Panda (http://research.pandasoftware.com/blogs/research/archive/2007/04/27/New-Panda-Anti_2D00_Rootkit-_2D00_-Version-1.07.aspx) and/or F-Secure BlackLight (http://www.f-secure.com/blacklight/try_blacklight.html).
Also, if you still detecting strange behaviors or you want to be sure you're clean, maybe making a HijackThis (http://www.bleepingcomputer.com/files/hijackthis.php) log to post here and, specially, scan and submit to on-line analysis the RunScanner (http://www.runscanner.net/) log would help to identify the problem and the solution.
Thanks, I will post a hijacklog in due course!
Will you be able to assist with run scanner log?
-
Will you be able to assist with run scanner log?
There is a button for automatic analysis of your log in the top of the application 8)
But we can help if you find any 'red' item.
-
maby defragment the hard drive and run check disk http://www.microsoft.com/windowsxp/using/setup/maintain/improveperf.mspx :)
-
Will you be able to assist with run scanner log?
There is a button for automatic analysis of your log in the top of the application 8)
But we can help if you find any 'red' item.
hi, this is my hijackthis log:
Logfile of HijackThis v1.99.1
Scan saved at 13:56:53, on 14/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\PROGRA~1\ntl\BROADB~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
C:\Program Files\Comodo\Firewall\CPF.exe
C:\Program Files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\UnH Solutions\IE Privacy Keeper\IEPrivacyKeeper.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\Program Files\ntl\broadband medic\bin\mpbtn.exe
C:\Program Files\SiteAdvisor\6066\SAService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\DOCUME~1\WHITTA~1\LOCALS~1\Temp\Temporary Directory 1 for
hijackthis.zip\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.ntlworld.com/broadband
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.ntlworld.com/broadband
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName
=
O2 - BHO: Adobe PDF Reader Link Helper -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat
7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} -
C:\Program
Files\SiteAdvisor\6066\SiteAdv.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} -
C:\Program
Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O3 - Toolbar: McAfee SiteAdvisor -
{0BF43445-2F28-4351-9252-17FE6E806AA0} -
C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client
Foundation\CFD.exe
O4 - HKLM\..\Run: [Motive SmartBridge]
C:\PROGRA~1\ntl\BROADB~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program
Files\QuickTime\qttask.exe"
-atboottime
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program
Files\SiteAdvisor\6066\SiteAdv.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE
/AUTORUN
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program
Files\Comodo\Firewall\CPF.exe" /background
O4 - HKLM\..\Run: [SmartDefrag] "C:\Program Files\IObit\IObit
SmartDefrag\IObit SmartDefrag.exe" /startup
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware
Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
Files\Java\jre1.6.0_01\bin\jusched.exe
O4 - HKCU\..\Run: [IE Privacy Keeper] "C:\Program Files\UnH
Solutions\IE
Privacy Keeper\IEPrivacyKeeper.exe" -startup
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program
Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: broadband medic.lnk = C:\Program
Files\ntl\broadband
medic\bin\matcli.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
Files\Java\jre1.6.0_01\bin\ssv.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) -
http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine
Advantage
Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl
Class) -
http://tools.ebayimg.com/eps/wl/activex/EPUWALControl_v1-0-3-24.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload
Tool) -
http://by108fd.bay108.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class)
-
http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1125225002687
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Trend Micro ActiveX
Scan
Agent 6.5) -
http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} -
http://www.trendmicro.com/spyware-scan/as4web.cab
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} -
C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program
Files\SUPERAntiSpyware\SASWINLO.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program
Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO -
C:\Program
Files\Comodo\Firewall\cmdagent.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program
Files\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO
EPSON
CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
Corporation - C:\Program Files\Common
Files\InstallShield\Driver\11\Intel
32\IDriverT.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC
Tools -
C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools -
C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program
Files\SiteAdvisor\6066\SAService.exe
and this is the link to my run scanner log:
http://www.runscanner.net/report.aspx?report=7b63677b-6753-4d84-93e3-20b971ce659c
-
Look at O20 item...
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
See http://www.wikifortio.com/654670/Edwards19179.html
http://www.runscanner.net/report.aspx?report=7b63677b-6753-4d84-93e3-20b971ce659c
cfd.exe c:\program files\broadjump\client foundation\cfd.exe
mpbtn.exe c:\program files\ntl\broadband medic\bin\mpbtn.exe
BJCFD c:\program files\broadjump\client foundation\cfd.exe[/quote]
Do you recognize these ones?
xoftspy.job c:\windows\tasks\xoftspy.job
Are you using the 'bad' XoftSpy application?
-
Look at O20 item...
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
See http://www.wikifortio.com/654670/Edwards19179.html
http://www.runscanner.net/report.aspx?report=7b63677b-6753-4d84-93e3-20b971ce659c
cfd.exe c:\program files\broadjump\client foundation\cfd.exe
mpbtn.exe c:\program files\ntl\broadband medic\bin\mpbtn.exe
BJCFD c:\program files\broadjump\client foundation\cfd.exe
Do you recognize these ones?
xoftspy.job c:\windows\tasks\xoftspy.job
Are you using the 'bad' XoftSpy application?
[/quote]
Hi
should "O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll" be fixed with hijackthis? Is this a major security risk, why?
Are you using the 'bad' XoftSpy application? i used to use it bus unistalled it along time ago! Do i need to stop this process straight away? how can i stop c:\windows\tasks\xoftspy.job?
i recognize the other items!
-
Simple...
First run Windows Disk Cleaner to clean all the unneeded stuff (temporary files).
Then download this tool, scan with it and fix everything it finds:
http://www.snapfiles.com/get/winregrepair.html
Next step is this tool (not much to write about it just follow the steps):
http://www.snapfiles.com/get/alregdefrag.html
In the end use this tool on all your partitions/disks (it may take a while first time):
http://www.snapfiles.com/get/alregdefrag.html
Make sure you do in the same order for best possible results.
All tools are very straight forward so i don't think you'll have much problems with them. They are very effective though and completelly free to use. Hope it helps.
-
First you don't appear to have any anti-virus on your system or it is disabled.
should "O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll" be fixed with hijackthis? Is this a major security risk, why?
I would say no it shouldn't be fixed.
Are you using the 'bad' XoftSpy application? i used to use it bus unistalled it along time ago! Do i need to stop this process straight away? how can i stop c:\windows\tasks\xoftspy.job?
Xoftspy had a chequered past and was considered adware, this has now been unlisted at spywarewarrior.com, but my thoughts are that there are a number of tools that are up to the task that didn't have a chequered history.
-
Simple...
First run Windows Disk Cleaner to clean all the unneeded stuff (temporary files).
Then download this tool, scan with it and fix everything it finds:
http://www.snapfiles.com/get/winregrepair.html
Next step is this tool (not much to write about it just follow the steps):
http://www.snapfiles.com/get/alregdefrag.html
In the end use this tool on all your partitions/disks (it may take a while first time):
http://www.snapfiles.com/get/alregdefrag.html
Make sure you do in the same order for best possible results.
All tools are very straight forward so i don't think you'll have much problems with them. They are very effective though and completelly free to use. Hope it helps.
I will give those a go, the last 2 tools are the same ones! Is that correct or have you posted the same 2 up twice ;D
Also do you know of eny other suitable tools that may help to improve the computers performance?
-
Second link should be tis one:
http://www.snapfiles.com/get/adiskdefrag.html
They are from the same developer so i accidantely posted the same link.
-
Have you tried CCleaner? You can get it here: http://www.filehippo.com/download_ccleaner/ . After install run issues at least 3 times or until shows nothing to fix and cleaner twice.
-
Second link should be tis one:
http://www.snapfiles.com/get/adiskdefrag.html
They are from the same developer so i accidantely posted the same link.
Do you think that is better than your Power Defragmenter with contig then ?
-
Second link should be tis one:
http://www.snapfiles.com/get/adiskdefrag.html
They are from the same developer so i accidantely posted the same link.
Do you think that is better than your Power Defragmenter with contig then ?
I have Power Defragmenter with contig, but the built in defragger in XP does a better job. Yes, Power Defragmenter with contig is faster.
-
I honestly can't see how the XP defragmenter does a better job as I check with the windows defrag, analyse to check if it needs defragmenting I run Power Defragmenter, if I check after it is complete (Very Quick) it shows zero fragmentation. So I can't see how you can get better than zero fragmentation.
The time taken to defragment a disk with XP's defragmenter I could almost etch the contents of the disk in stone, a slight exaggeration I know, but like if too short for the XP defrag.
-
Second link should be tis one:
http://www.snapfiles.com/get/adiskdefrag.html
They are from the same developer so i accidantely posted the same link.
Do you think that is better than your Power Defragmenter with contig then ?
On my both machines (desktop (AMD Athlon 64 X2 as well as on laptop Intel Core 2 Duo) Auslogics Disk Defrag is at least 1/3 faster than Power Defragmenter.
-
I must admit I have just moved to Auslogic from power defrag
-
RejZoR if you know of any other programmes that could help i will be most grateful!
-
<snip>
They are from the same developer so i accidantely posted the same link.
Do you think that is better than your Power Defragmenter with contig then ?
On my both machines (desktop (AMD Athlon 64 X2 as well as on laptop Intel Core 2 Duo) Auslogics Disk Defrag is at least 1/3 faster than Power Defragmenter.
Thanks Sasha, I will give it a try.
-
Other good defragmenter worth using is WinContig which can also be found on SnapFiles.
It's fast and has most of functionality similar to my Power Defragmenter. Just with nicer GUI and few more options. Some might like it more.
-
Another freebie defragmenter i really like is JKDefrag (http://www.kessels.com/JkDefrag/), but i prefer this GUI for JKDefrag since it also has PageDefrag built in there. Here's the link: http://www.emro.nl/freeware/ (http://www.emro.nl/freeware/)
-
I just found a link to a nice review of defrag tools on the JKDefrag forum. Here's the link if anyone is interested. http://donnedwards.openaccess.co.za/2007/04/great-defrag-shootout-part-1.html (http://donnedwards.openaccess.co.za/2007/04/great-defrag-shootout-part-1.html)
-
Nice article Darth_Mikey.
I have run some tests after my weekly maintenance where I take images of my hard disk partitions and save them to another hard disk. This usually results in two files of about 1.7GB and 1.9GB, which are usually in 2-3 fragments each.
Interestingly the smaller file took 32 minutes and the larger one took only 30 minutes this is largely in line with PowerDefragmenter with contig with no huge difference for me.
The major difference is the graphical representation of the defrag (like windows defrag), but more importantly is the progress information and number of clusters processed against the total clusters for that file. So you know where you are and have a reasonably good idea how much longer it will take.
-
PageDefrag is a must have. Run at boot time and defrag off-line the registry and other system files.
Quality from Sysinternals.
70k Standalone
http://www.microsoft.com/technet/sysinternals/Utilities/PageDefrag.mspx
-
Simple...
First run Windows Disk Cleaner to clean all the unneeded stuff (temporary files).
Then download this tool, scan with it and fix everything it finds:
http://www.snapfiles.com/get/winregrepair.html
Next step is this tool (not much to write about it just follow the steps):
http://www.snapfiles.com/get/alregdefrag.html
In the end use this tool on all your partitions/disks (it may take a while first time):
http://www.snapfiles.com/get/alregdefrag.html
Make sure you do in the same order for best possible results.
All tools are very straight forward so i don't think you'll have much problems with them. They are very effective though and completelly free to use. Hope it helps.
Hi RejZoR
I`ve ran all those programmes you suggested, thinks have improved slightly! Is there anything else i can do in order to boost performance?
-
Hi!
Is there any thing else i can do in order to boost my computers performanace!
-
I don't believe you mentioned what our CPU or RAM is ?
One major improvement is usually by increasing RAM.
You should also ensure that you only run absolutely essential applications at boot, many programs on installation set themselves to start on boot when it isn't required, media players are common for this and don't need to run until you click on a media file.
Over 4 years you have probably installed lots of applications, have check and clean out your system of unused applications.
-
I honestly can't see how the XP defragmenter does a better job as I check with the windows defrag, analyse to check if it needs defragmenting I run Power Defragmenter, if I check after it is complete (Very Quick) it shows zero fragmentation. So I can't see how you can get better than zero fragmentation.
The time taken to defragment a disk with XP's defragmenter I could almost etch the contents of the disk in stone, a slight exaggeration I know, but like if too short for the XP defrag.
After running Power Defragmenter I do an analysis with XP's defragmenter & it shows files scattered all over. I then run XP's defragmenter to compact them. The whole idea of a defragmenter is so Windows doesn't have to waste time finding & putting files together. I may be incorrect in my judgment, maybe you can show where I'm wrong.
-
What you are seeing isn't fragmented files, otherwise you would see a list of all fragmented files in the log of XP's Defrag.
There is fragmentation and there is also optimisation where you also organise the files after they are defragmented so the files are at the start of the drive, there are different options for optimisation as well. You can have most frequently used files at the start of the drive and several other options to place files at the start of a disk to reduce disk read head travel.
Files that are fragmented are a greater impact in terms of reduced speed as the disk read head has to flit around the disk many times to read the data. Whilst defragmented and optimised files also only require one movement of the disk read head modern drives won't see much difference between retrieving data from a single location.
So personally I don't thing a user would see much difference as we are talking micro seconds difference to read a file at the start of the disk to one at the end of the disk.
Contig.exe is a defragmentor only not a file optimiser, you could use JKDefrag which I also believe is quicker than XPs and if you use the JKDefragGUI it makes these file optimisation options very configurable in a GUI interface.
-
Thank you David
-
Your welcome.