Forum Home
Press F1
 
Thread ID: 44952 2004-05-04 05:37:00 Weird Start-up problem. mr_rix (5375) Press F1
Post ID Timestamp Content User
234215 2004-05-04 05:37:00 Hi,

My system has got a new-ish install of XP Pro SP1 on it (maybe installed about 2-3 weeks ago) . I have been having odd startup problems .
The system is definitely capable of running XP .

AMD 2800+
512 DDR
FX 5200 vid

The problem is, whenever I start the computer up, it takes a long time . You have the xp loading screen with the little bar thingy . Once that goes away a have a blank screen for about 45 seconds, then the mouse pointer loads, another 45 seconds after that the user names appear (the PC has two users) .

Once I click on my user name it shows the 'Loading you settings" or whatever . the Windows logon sound plays, then about 30 seconds after the sound my desktop appears . Then, it is slow for about 15 minutes . Like, when I right click on the desktop, the menu takes about 5 seconds to open . I ran PCMark02 about 5 minutes after the system booted to my desktop & I scored my usual 6150 for CPU .

I looked in the processes tab in the task manager and there is no resource hog there (average CPU usage is 1%-7%) .

I have AVG 7 Pro, Zone Alarm 4 . 5 Pro & AdAware 6 Personal . None of those pick anything up . I tried defragging the HDD (its 7200rpm 80GB Seagate) that didn't make any difference .

I also download System Mechanic 4 & tried that as I have had some luck with it on other occaisions . I ran all the tools in there, registry cleaner etc to no avail .

AVG has fully upto date definitions & it doesn't find anything . It did pick up on a 'quick scan' that users32 . dll had grown about 10kb in size .

After about 15 minutes the computer runs blazingly fast just like it should .

I have tried using MSconfig & I selected 'Diagnostic Startup' & restarted but it still took a long time to load .

Any ideas on what may be slowing everything down?
mr_rix (5375)
234216 2004-05-04 05:57:00 Overheating... close to dying hard drive... laptop drivers not installed properly??

Lo.
Lohsing (219)
234217 2004-05-04 05:58:00 D'oh! That should be motherboard drivers haven't been installed properly.

Lo.
Lohsing (219)
234218 2004-05-04 06:01:00 Have you, at some stage, or now, connected to a network of computers?

Mine does this too after a networking session, and I guess it is looking for the PCs that are now no longer part of the network.

I delete them from within the PC's Network Places folder, then re-boot.

Also, I found that ZoneAlarm took a while to release the system on start-up. I now use Sygate.

You mentioned AdAware. Do you have that load at start-up too? Maybe disable it at start-up if so, and just use it when carrying out a scan.

J
:D
Jester (13)
234219 2004-05-04 06:17:00 Hmmm,

I'm going to try to reinstall the mobo drivers. I don't think the HDD is close to dying, it is only about 2 months old. As for the over heating, it is running at 49C & I believe the max is 80C.

Also, doing a few Google searches I found a tool called 'Hijackthis' and it said that posting this log to a forum may help so here it is :) :

Logfile of HijackThis v1.97.7
Scan saved at 5:16:17 PM, on 5/4/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\netdde.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\System32\cisvc.exe
C:\WINDOWS\system32\clipsrv.exe
C:\WINDOWS\System32\dllhost.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\dllhost.exe
C:\WINDOWS\System32\tlntsvr.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\vssvc.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\dmadmin.exe
C:\WINDOWS\System32\Fast.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\WINDOWS\System32\cidaemon.exe
C:\WINDOWS\System32\taskmgr.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Documents and Settings\Tom Rix\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Documents%20and%20Settings/All%20Users/Documents/tomlinks.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MessengerPlus2] "C:\Program Files\Messenger Plus! 2\MsgPlus1.exe"
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [FastUser] C:\WINDOWS\System32\fast.exe
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\System32\taskswitch.exe
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: EarthView.lnk = C:\Documents and Settings\Tom Rix\Local Settings\Temp\Temporary Directory 1 for Crack.zip\EarthView.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - download.macromedia.com
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - download.yahoo.com
O16 - DPF: {3AF4DACE-36ED-42EF-9DFC-ADC34DA30CFF} (PatchInstaller.Installer) - file://D:\content\include\XPPatchInstaller.CAB
O16 - DPF: {8B1BC605-C593-4865-8F5B-05517F0CD0BB} (MSSecurityAdvisorCD Class) - file://D:\Content\include\msSecUcd.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - download.macromedia.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{D297BBCB-866D-44E6-BDEC-4C9AB0A2EF5F}: NameServer = 210.56.33.70 210.56.34.70

See anything funny there?

I'm going to reinstall the drivers now. Keep you posted. I'm also going to reflash the BIOS.
mr_rix (5375)
234220 2004-05-04 06:19:00 Oh yea, there was only one thing it network places. Some advertisment about MSN. I deleted it. mr_rix (5375)
234221 2004-05-04 06:26:00 Ah,

In the 'network connections' windows there was an 'incoming connections' header with 'incoming connection' writen below it. I have deleted that also.
mr_rix (5375)
234222 2004-05-04 06:29:00 Ah,

In the 'network connections' windows there was an 'incoming connections' header with 'incoming connection' writen below it . I have deleted that also . I have reinstalled the drivers, re flashed the bios, deleted that connection, I am now going to restart .

Wish me luck :)
mr_rix (5375)
234223 2004-05-04 06:30:00 These were running and would take time to load at start-up:

C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\WINDOWS\System32\ taskmgr.exe

Do you need these running at start-up? If not, go into Start/Run services.msc
and Start/Run msconfig and disable at start-up.

TweakUI:
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp

Quicktime:
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

Unsure of this one:
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe

msn Messenger:
O4 - HKLM\..\Run: [MessengerPlus2] "C:\Program Files\Messenger Plus! 2\MsgPlus1.exe"
and
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

Earthview (?):
O4 - Startup: EarthView.lnk = C:\Documents and Settings\Tom Rix\Local Settings\Temp\Temporary Directory 1 for Crack.zip\EarthView.exe

Microsoft Office:
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

Finally, unless you really need to switch between users quickly, disable Fast User Switching. It uses memory when sitting there wait for you to change users. You can always log off and log on as new user:
O4 - HKLM\..\Run: [FastUser] C:\WINDOWS\System32\fast.exe

J
:D
Jester (13)
234224 2004-05-04 06:47:00 mr_rix,

I notice in the running Processes you've listed ,there is an entry for;

C:\windows\system32\Isass.exe.

Is this entry not being covered at some length in another thread by robo.

Just a thought.

Hook.
Capt.Hook (5586)
1 2