Page 1 of 2 12 LastLast
Results 1 to 10 of 13

Thread: very slow, can somebody check my HJT log

  1. #1
    Junior Member
    Join Date
    Apr 2005
    Posts
    18

    very slow, can somebody check my HJT log

    my computer (Dell 2350 with XP 2002 and SP2, pentium 4, 1.8 Ghtz, and 256 megs of RAM) has been running increasingly slower. It takes forever for programs to load and to close, especially if IE is left on and idle. I am a casual user, mostly just e-mail and some games, some research, browsing and home banking.

    I have had Lime Wire and KaZaa lite installed in the past but uninstalled and deleted them. I also uninstalled AOL recently. None of this sped up my system.

    I use AdAware, AOL anti spy, CA and the latest version of AVG. I have Zone Alarm Firewall.

    Could somebody please look at this HJT log and see if they see anything suspect?

    Is my system just outdated? I know more RAM would help but I want to be sure there isn't something else.
    THANK YOU

    Logfile of HijackThis v1.99.1
    Scan saved at 1:31:39 PM, on 3/15/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16414)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\WINDOWS\system32\HPZipm12.exe
    C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
    C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\HijackThis\HijackThis.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\system32\wuauclt.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/yco.../www.yahoo.com
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/yco.../www.yahoo.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
    O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com.../c381/chat.cab
    O16 - DPF: Yahoo! Cribbage - http://download.games.yahoo.com/game...ts/y/it1_x.cab
    O16 - DPF: Yahoo! Graffiti - http://download.games.yahoo.com/game...s/y/grt5_x.cab
    O16 - DPF: Yahoo! Literati - http://download.games.yahoo.com/game...ts/y/tt4_x.cab
    O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} (VerifyGMN Class) - http://h20270.www2.hp.com/ediags/gmn...taller_gmn.cab
    O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yaho...st20040510.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1170498461718
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
    O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://download.games.yahoo.com/game...ploader_v6.cab
    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: VET Message Service (VETMSGNT) - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe

  2. #2
    AO übergeek phishphreek's Avatar
    Join Date
    Jan 2002
    Posts
    4,325
    I don't have the time to dig into your hjack this log yet... at first glance it looks ok. However, you are running a LOT for only having 256mb of ram. If you have an integrated video card, that often also reduces your ram available to the system.

    How much is being used after you start the workstation? More than likely, a ram upgrade would fix your performance issues. I'd recommend at least 512. I won't run XP without 1gig. I run a lot of stuff though...

    These utilties start themselves with the OS to check for updates. You can remove them from starting and just keep on top of it yourself. That will save you some resources.

    jusched.exe
    hpwuschd2.exe
    realsched.exe
    qttask.exe
    ituneshelper.exe
    wkdetect.exe
    reader_sl.exe

    I would also get rid of the Yahoo! Toolbar just because I despise it.

    I wouldn't use the HP Digital Imaging programs either. But, that is just me. I like to access my pictures after they've been mounted and move them manually myself. I don't like the utilities they provide with cameras... or printers for that matter.
    Last edited by phishphreek; March 15th, 2007 at 07:20 PM.
    Quitmzilla is a firefox extension that gives you stats on how long you have quit smoking, how much money you\'ve saved, how much you haven\'t smoked and recent milestones. Very helpful for people who quit smoking and used to smoke at their computers... Helps out with the urges.

  3. #3
    AOs Resident Troll
    Join Date
    Nov 2003
    Posts
    3,152
    a couple of things

    You need more memory...256 is min...512 or 1 gig will make a huge difference...

    specially if you are running 2 AVs (not recommended) and multiple Antispyware.

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    you can remove these...seeing the files are missing

    MLF
    How people treat you is their karma- how you react is yours-Wayne Dyer

  4. #4
    ********** |ceWriterguy
    Join Date
    Aug 2004
    Posts
    1,608
    In addition to upgrading RAM (which you very strongly need)

    Try running MSCONFIG, going into startup, selective startup, and unchecking those programs non-essential to your computer's operation. This'll free up a thunderous amount of system resources.
    Even a broken watch is correct twice a day.

    Which coder said that nobody could outcode Microsoft in their own OS? Write a bit and make a fortune!

  5. #5
    Senior Member
    Join Date
    Mar 2003
    Location
    central il
    Posts
    1,779
    you have way to much running for that little ram, ram is cheap get at least 512
    Who is more trustworthy then all of the gurus or Buddha’s?

  6. #6
    Senior Member Aardpsymon's Avatar
    Join Date
    Feb 2007
    Location
    St Annes (aaaa!)
    Posts
    434
    Actually, if you are a gamer with on board graphics I'd go with a 1 Gig ram minimum.

    A run with Spybot S&D couldn't hurt too. Nothing obvious jumps out at me from the logs that hasn't been mentioned already.
    If the world doesn't stop annoying me I will name my kids ";DROP DATABASE;" and get revenge.

  7. #7
    Banned
    Join Date
    Jul 2006
    Location
    /
    Posts
    385
    i would remove the suggested items, then maybe boot up into safe mode. and turn of system restore, then do a disc defrag. then run your AV and antispy ware programs.

    Then reboot the computer then turn system restore back on, and make a fresh restore point.

    and also maybe upgrade your ram..

    cheers
    acidtone..

  8. #8
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,188
    In the first instance, submit your HJT log file here:

    http://www.hijackthis.de/

    You will get an automatic analysis just check out the stuff they warn about or don't recognise.

    Remove things that you do not use all the time from your start up folder, and only call them when you need them.

    Get CCleaner and run it http://www.ccleaner.com/

    Reboot into safe mode and run all your scans.

    Defragment your hard drive.

    As already stated, you have a minimal amount of RAM to run Windows XP. Adding more will produce a noticeable improvement. Whilst I would not personally build an XP box with less than 1GB, you will really notice a difference between 256 and 512.

    This is a true story that I hope will amuse you............. a few months ago I had a machine in that "wasn't working properly"............. that isn't the joke..........that is how some of us supplement our income

    It has Windows XP Pro SP2 and 64MB of RAM. It also had onboard graphics!

    My first instinctive move was to try another monitor................ it was that slow!............then I saw what the problem was

  9. #9
    AO übergeek phishphreek's Avatar
    Join Date
    Jan 2002
    Posts
    4,325
    Quote Originally Posted by Aardpsymon
    Actually, if you are a gamer with on board graphics I'd go with a 1 Gig ram minimum.
    Doubt that a "gamer" would be using an onboard video card? I doubt that any newer games would even run on it? Maybe solitare?

    Nihil: According to m$, 128mb of memory is fine... 64mb is supported... but "may may limit performance and some features"... ROFL.

    Always take what m$ counts as recommended and quadruple it.

    They recommend 512mb or memory for Vista... so, that means at least 2gigs.
    Quitmzilla is a firefox extension that gives you stats on how long you have quit smoking, how much money you\'ve saved, how much you haven\'t smoked and recent milestones. Very helpful for people who quit smoking and used to smoke at their computers... Helps out with the urges.

  10. #10
    Senior Member JPnyc's Avatar
    Join Date
    Jan 2005
    Posts
    2,734
    When did you last run disc cleanup?

Similar Threads

  1. Tcp/ip
    By gore in forum Newbie Security Questions
    Replies: 11
    Last Post: December 29th, 2003, 08:01 AM
  2. Newbie FAQ. Check these to make sure your question hasn't been asked.
    By Alcatraz in forum Newbie Security Questions
    Replies: 13
    Last Post: July 9th, 2003, 07:34 AM
  3. more info on Henpeck Rodock worm
    By prodikal in forum Microsoft Security Discussions
    Replies: 0
    Last Post: October 12th, 2002, 10:00 AM
  4. bash script for md5 binary integrity check
    By slackwarelinux in forum IDS & Scanner Discussions
    Replies: 1
    Last Post: July 23rd, 2002, 06:24 AM
  5. Tutorial: Simple Adult Check Website Hacking..
    By s0nIc in forum The Security Tutorials Forum
    Replies: 14
    Last Post: February 6th, 2002, 11:40 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •