Forum Home
Press F1
 
Thread ID: 116192 2011-02-20 23:23:00 Slooow Laptop tuiruru (12277) Press F1
Post ID Timestamp Content User
1180115 2011-02-20 23:44:00 Right, in Disk Management it's showing a C Drive of 26900Mb a D(DATA) Drive of 27300MB and something called PQSERVICE of 2998 MB . That D Drive has 13gMB used and 26 . 5 GB Free .



Actually, looking back that D drive is showing up in My Computer now
tuiruru (12277)
1180116 2011-02-20 23:46:00 So, we've found the space. Give me a bit and I'll run HJT and get back. Thanks tuiruru (12277)
1180117 2011-02-20 23:56:00 HI Speedy

Yertis


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:52:12 PM, on 2/21/2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpHost.exe
C:\WINDOWS\system32\mmc.exe
F:\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://global.acer.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = go.microsoft.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LaunchAp] "C:\Program Files\Launch Manager\LaunchAp.exe"
O4 - HKLM\..\Run: [PowerKey] "C:\Program Files\Launch Manager\PowerKey.exe"
O4 - HKLM\..\Run: [CtrlVol] "C:\Program Files\Launch Manager\CtrlVol.exe"
O4 - HKLM\..\Run: [epm-dm] c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - update.microsoft.com
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Automatic LiveUpdate Scheduler - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 4141 bytes
tuiruru (12277)
1180118 2011-02-21 00:09:00 O23 - Service: Automatic LiveUpdate Scheduler - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)

O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--

Nortons hasn't been removed properly. Download the removal tool and finish it off.
Get more RAM and install it, it will always be a crippled snail until you do.

Leave MSSE and make sure she has anti-spyware too.
Spybot and Malware Bytes. And scan with those too.
make sure C: isn't too full, move stuff to D: if necessary.
pctek (84)
1180119 2011-02-21 00:09:00 I would use the norton removal tool to remove this. If its been uninstalled

O23 - Service: Automatic LiveUpdate Scheduler - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)

O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

You dont need these in startup

O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe " -t (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe " -t (User 'Default user')

That may not speed it up. You'll have to put more ram in it
Speedy Gonzales (78)
1180120 2011-02-21 00:16:00 Thanks PCTech and Speedy.

I'll get onto that now

As for RAM, I'll have a llok at it in a minute and get back toy you
Thnks
tuiruru (12277)
1180121 2011-02-21 02:50:00 Update:

Of course, she doesn't know what flavour of Norton was on there in the first place so given the "probable" age of the computer opted for the 2004/5 tool, tho' I reckon it was well old when they (a local shop that used to be Retravision but has since re-branded a couple of times) gave her a "special deal" on it. Tried running this is in safe mode but it didn't seem to do anything.

I was still convinced that MSSE was clogging things up but that won't uninstall in safe mode so finally did it in normal mode. (Created a restore point first which I learned is another thing you can't do in safe mode).

With MSSE gone things are, at least, now freed up a bit. I've tried running the removal tool - it tells me it's extracting and then nothing happens. It's sitting there in the Processes tab in task manager with 0% CPU usage next to it. If I try running it again it tells mere there is an instance of it already running so maybe I've got the wrong version or it thinks that norton has gone? Shall I go ahead and tell HJT to fix those entries anyway?

I thought about installing Avast free as a stopgap but that seems to have grown to 70 or 80 megs (also see it's the "final" version.

Unless there's anything else I can try I'm going to give it back to her and tell her to get the local techie to see if he can source some RAM and find a slot to put it in (something I,ve been telling her to do ever since our paths crossed! Good job I had a look tho'. On somebody's advice she was talking about forking out for an external ard drive to "give me more space". I'll have to make sure she's sat in a nice comfy chair when I explain all this.

Thanks people - great response times as usual :clap
tuiruru (12277)
1180122 2011-02-21 02:56:00 More RAM, Ccleaner, defrag. In that order of importance, not forgetting recommendations on the Symantec space debris. Not a bad machine if well maintained. PENTIUM (426)
1180123 2011-02-21 02:59:00 things to try... (just dont expect modern speeds from this machine)

remove ALL AV's - Corrupt AV can slow the laptop. MSSE can also cause really bad slowdowns (its rare though)
then scan with malware bytes
see if the CPU is stuck in power saving mode, it may be stuck at 1/3 speed:ctl panel , system, & see if Actual CPU speed ever its full tit in use. Try adjusting power saving mode to full CPU when plugged in.
disable all google services : services.msc
check the scheduled tasks(control panel) & disable all
run msonfig, disable all startups & non ms services restart & re-enable one by one & restart- it will take some time.
You dont need alot of RAM in XP UNTILL you start running programs (eg Word07 etc).
ie whats the speed like after XP starts up(give it a good 5 minutes) with no programs running.- browsing the HD, time taken to open control panel or IE etc etc

Defrag will not do a thing to help you . You said its OK in safe mode.
RAM probly wont solve this, XP will run with 256M, more RAM only critical when you start loading up RAM heavy proggies. Again, it was OK in safe mode with 256M.
More ram is definitely recommended, I dont think its the fix .

Remember it was OK if safe mode, so something is probly loading up thats slowing down the system.
1101 (13337)
1180124 2011-02-21 03:05:00 , not forgetting recommendations on the Symantec space debris. .

Symantec space debris? I remember Skylab coming down in the 70's! ;)

She's run Windows defrag on it (setting new world records for slowness in the process!!). If she gets the RAM sorted out I'll set her up with something else, and CCleaner, and one or two other things as well!!
tuiruru (12277)
1 2 3