Lagging computer performance

It was suggested to me that to improve the performance of my computer I should...

Quote:

---

disable System Restore (Right-click My Computer --> System Restore tab). Finally, disabling the useless "last access time" feature of the NTFS filesystem can yield a performance boost, especially on a slow HDD. Try adding the following entry to your registry:
Code:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\FileSystem] " NtfsDisableLastAccessUpdate"=dword:00000001

---

I was wondering what you guys think...not that I don't trust the source...I just trust your opinion more.

Eg ;)

I have a very slow Windows 2000 Pro at 500mhz and I'm looking for ways to speed this puppy up.

Hi Eg~

Please have a look at this site:

http://homepage.ntlworld.com/mrx9000/

Paul Brown is pretty cool on tweaking most flavours (flavors :D ) of Windoze............I have used his "Xen" app for some years now.

500MHz and a slow Windows 2000 installation does not sound right to me..............It is one of my favourite OSes (it is actually NT5.0) because it works just fine on boxes that don't quite "make the grade" for a good WinXP experience:) How much RAM do you have?

You might like to check ric-o's post about the latest version of Win Patrol...............that has a lot of useful utilities to show you what is going on. You can "suspend" stuff to help you with tuning.

I am sure I read somewhere that Win 2000 runs about 8% faster than WinME? so you should be fine on a PII/266MHz for example.............and you obviously have much better than that.

We need to look into this a bit more closely, can you post your full system specs?

Cheers :)

Hi nihil,

I just downloaded XEN and XENTWEAKS but I can't try them yet as I have to find a ZIP program to unzip them...I know where to look for them, so that's ok. I don't buy anything on-line so I'll look for a free download...or pick something up at the store.

About my system specs...how do they look ?

Eg :)

Do you have any [?] showing in device mangler ?

R/Click My Computer
Properties
hardware tab
device manager .......

Are there any question mark symbols [yellow] or X [red] showing ?

Double click to get to get to the properties, and see what, if any, conflicts there are.

I'm no expert, but four items on IRQ 9 ?

I'm assuming that it has all been set automatically ?
If they're showing manual set, check the auto box in the resources tab.

OR : would it be a good idea to set MANUALLY these four items, to see if that make a difference ?

I wouldn't do that [manual] just yet Eg :) just wait for the cavalry to arrive............

Hi foxyloxley,

Checked Device Manager and there's no ? or X's yellow or red markers...everything listed ( and I clicked the + on each one ) seems to be exactly the way it should be.

Checked Start-up in Systems and the only one I don't recognize is: TkBell.exe

Checked under Services: these are the only ones running that look out of place :
Background Intelligent Transfer Service
DHCP Client
Messenger
Remote Access Connection
Remote Registry Service
RunAs Service
Telephony
Distributed Link Tracking Client

Checked in Running Tasks: again I don't know about these:
mmc.exe
svchost.exe
stisvc.exe
mstask.exe
lexpps.exe
spoolsv.exe
lexbces.exe
lsass.exe
csiss.exe
smss.exe

Does this help more ? Anything strike you as odd ? I have, awhile back, printed out BlackVipers Windows 2000 Registry papers but I haven't done anything with them because I don't know enough to tackle that yet.

thanks,

Eg :)

Hi Eg~

Sorry for the delay........Saturday + shopping + wife :D

Yes you seem to have 4/5 devices sharing IRQ9..............that seems excessive to me (agree with Foxy~ on that one) I would look to move:

IRQ 9 ESS ES56H-PI Data Fax Voice Modem
IRQ 9 ESS Solo1 PCI AudioDrive [WDM]

onto other IRQ slots

Also, you are sharing your IRQ slot 9 between a modem and a 10/100 ethernet connection........is this thing on a network? if not, please uninstal the network card in device "mangler" as Foxy~ so delicately describes it :)

As for unzipping, you should be able to get a 30 day trial of Winzip, or PKunzip...........they actually run for ever, if not, PM me and I will try to send you a free (all totally legal) one...........do you have Gmail?

Hmmmmmmm................you are running a hell of a lot of services there?.............like I asked, is this on a network and does it share with other machines? I will get back to you when you answer that question

But you look like a safe haven for spammers and God knows what at face value :( ..................remote access?...........remote registry?........run as?............I don't even trust myself that well..............

Cheers

Get Win Patrol and start suspending a few?


EDIT: sorry I forgot.........your system specs, it should go like moose dung off a shiny shovel..........as we say over here in the frozen North (of England)

Hey Egaladeist

I can't help you with the hardware issue (if there is any) - so I leave that
to the experts. Of course, the less services you have running, the faster
your computer is. However, if you have activated to priorize foreground tasks,
this does not matter much, I think.

But let us try to look at a few security issues.
As per the services...
I might give you some hints. Actually I recommend
theeldergeek.com[1].

- setting automatic is fine for:
Background Intelligent Transfer Service (gets updates while network idle time)

- setting manual might be fine for (depends on your environment)
Remote Access Connection
Telephony
Distributed Link Tracking Client
DHCP Client

- setting disabled is fine for:
Remote Registry Service
RunAs Service
Messenger

However, fine tuning might be adjusted if we know in which environment
this machine is (standalone, LAN) and how it is connected to the internet
(dialup, router, bridge, ...)

As per the running tasks...
mstask.exe for example is the task manager. It ran when you checked for running tasks.
I recommend to use a tool like process explorer[2] which gives you the full path. This is
just an indication, but it might help us further. Most of the tasks looks reasonable
(you have a lexmark printer attached?).

Cheers.

/edit: as per tkbell.exe[3]. liutilities.com-processlibrary is rather useful, however
you have to check what you current have installed on your system. if you have
realplayer and tkbell.exe is where it should, wherever that is :), this is fine.


[1] http://www.theeldergeek.com/services_guide.htm
[2] http://www.sysinternals.com/ntw2k/fr.../procexp.shtml
[3] http://www.liutilities.com/products/...ibrary/tkbell/

Hi nihil, foxyloxley, sec_ware,

I think I did these in order...

first nihil

I'm a sloooow one-finger typer so bear with me...

how do you move them?

nope...no network...but I'm pretty sure this was on a network before I bought it.

no G-Mail.

no sharing.

how do you suspend?

now sec_ware

dial-up.

process explorer[2]?

lexmark printer attached? Yes.

realplayer. Yes.

general info

under drivers, there's about 160 units listed...79 running

under services 62...33 running

under running tasks 32 items listed

and loaded modules won't give me a reading

whew... :D

Thanks,

Eg ;)

OH...how do I change from manual to auto...etc...

I did check out the elder geek...but it's for XP and I'm running Windows 2000 Pro...or does he have a section for 2000...I didn't see one but I was only there a couple minutes?

I don't ask many questions but when I do... :D

Quote:

---

OH...how do I change from manual to auto...etc...

---

re-read my other post.
when you get to device mangler

open a section as mentioned, double click will open the properties box, in there, there is a check box, to get into auto, check it. Manual, un-check it.

No network : strip and remove the ethernet card.
first : device manager to network adapters.
double click the ethernet
open the drivers tab, uninstall drivers.

to move IRQ :
uncheck the auto setting box in the relevant window. ie: open the audio drive, resources, uncheck the auto box.
this should now allow you to set the IRQ manually.
you should be presented with a list of available IRQ no's - choose the LOWEST one.

continue till both the offenders are on their own IRQ.

Yes, there WERE four.
removed ethernet = 3
leave ONE on No9 = TWO to go :)

suspend :
go to start
run
type services.msc
into the cmd line
enter
it will open a window to the services
down to 'messenger' [as an example]
double clik to open properties box
drop down menu select disable
under service status hit the stop button
hit the OK

go to next on list.

lexpps.exe
spoolsv.exe
lexbces.exe
these are your Lexmark printer and spool service. OK

don't forget :
copy and paste any of those 'running tasks' and services into GOOGLE
for info :)

Hi Egaladeist

Thanks for providing the info.

Concerning services:
- BlackVipers[1] page is the way to go, but you said it does not help you much.
The elders geek page is in general a good source of information - albeit it is
adjusted to WinXP.

- The services can be adjusted by
Run.Open and enter "services" or "services.msc" (have no machine here to test).
When you click on a service, you can start/stop/restart it - and set the property
to automatic/manual/disabled.

- I recommend for your setting (however I would write down what you are doing
in case something is not working as you wish).

. setting automatic is fine for:

. setting manual might be fine for (depends on your environment)
Background Intelligent Transfer Service (put also auomatic would be fine)

. setting disabled is fine for:
Remote Registry Service
RunAs Service
Messenger
Remote Access Connection
Telephony
Distributed Link Tracking Client
DHCP Client

When you got a feeling for that, you might again check BlackVipers page.

Concerning tasks:

I guess I was a bit quick with the process explorer. It might be an overkill.
cmdline[2] will suit your and our needs. It prints running tasks inclusively
path to the command line.

These issues here are just a few things - after having that complete list of
running tasks, you might try to increase the speed a bit. But if it really
pays off - I don't know :(

Cheers

[1] http://www.blackviper.com/WIN2K/servicecfg.htm
[2] http://www.diamondcs.com.au/index.ph...onsole-cmdline

Hi foxyloxley,

I uninstalled the drivers...which means I uninstalled the ethernet...right?

I disabled messenger.

Am I suppose to uninstall my printers things or leave them alone...I'm not sure what you want?

Thanks,

Eg :D

Give me a little while while I try to get to sec_ware...I know...I'm slow as... :D

hi sec_ware,

I disabled all the ones you mentioned except Remote Access Connection...because I have two...and I don't know which one you mean...

Remote Access Connection Manager...or
Remote Access Auto connection

Yes...I'll take another look at the pages I printed off from BlackViper too...but I do have some stuff that's not on BV's list...now that you guys are teaching me how to do it...if I tried it alone I would've buggered it all up for sure :D

Thanks,

Eg :D

Hi

I only now realised that foxyloxley already answered a few questions...

Actually two more issues popped in my mind - issues which are at hand
1. Did you check malware of all kind? foxyloxley wrote a good read[1].
2. Maybe this is really an overkill - but would reformating/reinstalling be an option?
Unfortunately, we cannot learn anything by that and it may help not at all, but
I ask it because "the box previously might have been part of a network".

As per
Remote Access Connection Manager...or
Remote Access Auto connection

You can disable both (I think. Always make a note and check whether
everything runs as you are used to it).

Quote:

---

some stuff that's not on BV's list

---

That sounds interesting. Firewall? AV? They usually have running services.

Cheers and good luck.

[1] http://www.antionline.com/showthread...hreadid=265440

Hi foxyloxley, nihil, sec_ware,

In the registry everything under " log on as " is listed as " local system " except for this one item: \ASPNET...what is this?

Can I, or rather should I disable, it?

Thanks,


Eg ;)

Hi Eg~

It sounds as if your machine has been part of a network in some sort of support/development or training role.

/ASPNET is part of the Microsoft .NET package, and is for building dynamic web pages and the like (AFAIK) so it does not sound as if you need it.

I have encountered your problem before with old ex-corporate machines running NT 4.0

When you take them off the network they take forever looking for what used to be there :)

Major corporations have group licences, and wipe their machines before disposing of them to comply with security and MS licencing considerations. Small businesses tend to buy individual licences and when they upgrade, just distribute the old kit amongst family and friends.

The quickest solution is usually to format the drives and do a fresh install of an operating system, but I have also just removed the network stuff and licenced software that has been retained by the business.

I hope your system is running a lot better now, but please do take a look at Paul Brown's stuff and get Win Patrol.

Cheers :)

Hi nihil,

Thanks...I'll do that.

On another note...

Ahem...:D When I woke up this morning and turned my computer on I couldn't connect to the net...my ISP connection was gone...after spending about an hour trying to locate it on my computer I finally decided to call my ISP to see if they disconnected me or there was some problem with my bill, where I waited for another hour on hold, who, after finally taking me off hold, told me it wasn't them and I was probably the victim of a practical joke and I should restore everything to where it was, as some of those things were essential for my connection...which I did...and I got my connection back...the only thing I didn't restore was my ethernet because I couldn't..it's been deleted.
Being a very inexperienced computer user myself...this caused me, probably, more problems than the average user. I appreciate the help...and I did learn how to use the registry ( at least to able or disable )...Eg ;)

I was in a hurry to go someplace this morning so I didn't have time to edit...just post and go...so I'll edit now.

The ethernet [NIC] Network Interface Card, would NOT be the cause.
As you've now re-instated / re-enabled all the sevices that you disabled, you should be good to go until you feel more secure about 'faffing' about by yourself :)

Are all the potential IRQ conflicts sorted ?

Hi foxyloxley,

I didn't do anything with the IRQ's...because I wasn't sure what you meant

Quote:

---

I'm no expert, but four items on IRQ 9 ?

I'm assuming that it has all been set automatically ?
If they're showing manual set, check the auto box in the resources tab.

OR : would it be a good idea to set MANUALLY these four items, to see if that make a difference ?

I wouldn't do that [manual] just yet Eg just wait for the cavalry to arrive............

---

and you did say that maybe I should wait anyways before I do anything. :)

Eg ;)

Hi Eg~

I guess I have lost track a bit here :) what is the current IRQ situation on your machine. If you have removed the network stuff, it should be different now?

Cheers

Hi nihil,

It still lists all 5 items...

Conflicts/sharing...

IRQ 9 Microsoft ACPI-Compliant System
IRQ 9 SiS 7001 PCI to USB Open Host Controller
IRQ 9 ESS ES56H-PI Data Fax Voice Modem
IRQ 9 ESS Solo1 PCI AudioDrive [WDM]
IRQ 9 AcerLAN ALN-325 10/100 Base-PX Fast Ethernet Adapter

even after removing the drivers.

I haven't touched anything since I've restored. I know you asked me to move them...but I don't know how. There are some things I'm good at...and some things I'm very good at...but when it comes to computers...assume you're dealing with an idiot. :D

Eg ;)

You know how to get into "device mangler" so delete the 10/100 ethernet connector..............you should first physically remove the card (if you can?.......Acer have a lot of stuff on the motherboard)

You should also have an option to do "manual settings" so if you select the two ESS devices you should be able to give them different IRQ slots.

It is rather late/early here...........if you have problems I will fire up a Win2000 box tomorrow and talk you through it.

Cheers

go back and re-read my posts.
IRQ's to be changed.

Has this thread been edited [Eg]
I can't see your system specs with the IRQ's on here now ? :confused:

Hi nihil,

Apparently the uninstall didn't take...because on a check it's still all there even the driver...didn't see any " manual settings " at all but there was a place for " able and disable " so I disabled it...rebooted...and re-checked system information conflicts/sharing...and it's gone...checked device manager and it says disabled...

so now we're down to 4.

Eg ;)

Hi foxyloxley,

yep...I deleted that one post because I wasn't sure if that much information may compromise my system...maybe it's a case of just not knowing where you draw the line in an open forum. If you know what I mean :D

As for moving them I don't see anywhere in device manager where you can change the IRQ settings...so that's why I said in a post I wasn't sure what you meant.

IRQ's re-posted on post #20


Eg ;)

Edit...

Well...I went through BV's list and made some of the changes listed...disabled the ones he said weren't needed on a non-network computer, etc...left some things at the default settings...or changed them to the default...total: 8 changes

All the ones I do not have that were on his list ( 7 items ) are ones he said are not installed by default anyways.

I have 4 items not on his list:

1. LexBce Server ( printer? )
2. Still Image Service ( doesn't even say what it is )
3. TrueVector ( firewall? )
4. Workstation

He suggests removal...via add/remove...Indexing Service...right now on disabled.
He suggests disabling IPSEC...presently on automatic
He suggests " get rid of it " for Net Meeting...now on disabled

re-booted...and then accessed the net to post...so far the only difference I've noticed is that I have a couple of extra Windows pop-ups to access my connection, that I've never seen before...whereas before I only had one...and not the same one.

Made a note on his list of every change I made: changed...

1. BITS from Auto to Manual
2. CB from Auto to Disabled
3. NL from Manual to Disabled
4. N-MRDS from Manual to Disabled
5. RAACM from Manual to Auto
6. RACM from Manual to Auto
7. RRS from Auto to Disabled
8. WC from Manual to Disabled

these are the 8 changes I made...I know that one of them must be responsible for my new pop-ups...and I think it might be 1, 5, or 6 ?

I haven't noticed any performance benefit yet. Are HijackThis logs Registry logs ? Because some of the logs I see posted are huge compared to mine.

Thanks,

Eg ( out of smilies )

As nihil said, it's late here, I'm up for work in four hours, so I'll be back later :sleep: :)

Good Morning Guys,

6:52 am and just gettin' up...let's see...yawn...cough...yawn

Well...after editing and adding to my previous post ( see above ), I decided to change the two remote access things back to their original place ( manual ) and when I turned on my comp just moments ago those new pop-ups are gone and the one I've gotten so used to is back.
So...now my changes have been reduced to six.

Besides that, all my changes and up-dates from last night are in the above post.

Thanks,

yawn...Eg ;)

P.S. I've got to get the girl's up soon and get them ready for school, then have some immediate work to do and get out of the way...so...I'll try to get back as soon as I can to answer any replies...thanks...Eg :D

Hi Eg~

I have fired up one of my Win2k boxes and have the following settings for IRQs:

9 - Microsoft ACPI- Compliant System
16 - Video card
20 - SiS 7001 PC to USB Open Host Controller
23- same as 20
14 - Primary IDE Channel
15 - Secondary IDE Channel
21 - Avance AC97 Audio
17 - Modem
8 - System CMOS/ real time clock
13 - Numeric data processor
6 - Standard floppy disk controller
4 - Com1
3 - Com2
12 - Mouse
1 - Keyboard
10 - MPU-401 compatible midi device.

I can't remember, have you defragmented recently?

Also, can you give it ctrl + alt + delete and look at Task Manager...........the "performance" tab will show you your resource status, and the "processes" tab should show if anything is hogging resource.

Cheers

Ok...Hi nihil,

Gimme a few it's going to take me a moment to one finger type this...I'll be right back... :D

In task manager...damn...you almost gave me a heartattack :D the screen went black then it popped up...

under Performance...

CPU Usage: Fluctuated between 3 and 12 %
MEM Usage: 173044K

Totals:
Handles: 6074
Threads: 343
Processes: 33

Physical Memory:
Total: 384496
Available: 170916 ( never rose above or fell from 170 the whole time I was copying this )
System Cache: 216944 ( same as above...very little fluctuation )

Commit Charge:
Total: 172972
Limit: 925172
Peak: 226148

Kernel Memory:
Total: 54144
Paged: 45308
Nonpaged: 8836

Eg ;) There's more coming...


9 - Microsoft ACPI- Compliant System................................9 same
16 - Video card....................................................................none
20 - SiS 7001 PC to USB Open Host Controller...................on 9
23- same as 20...................................................................? you got 2?
14 - Primary IDE Channel....................................................14 same
15 - Secondary IDE Channel................................................15 same
21 - Avance AC97 Audio......................................................ESS Solo AudioDrive on 9
17 - Modem..........................................................................FaxVoiceModem on 9
8 - System CMOS/ real time clock..........................................8 same
13 - Numeric data processor.................................................13 same
6 - Standard floppy disk controller.......................................6 same
4 - Com1...............................................................................4 same
3 - Com2...............................................................................3 same
12 - Mouse.............................................................................12 same
1 - Keyboard...........................................................................1 same
10 - MPU-401 compatible midi device....................................none

the only thing I seem to have that you don't is that ethernet item on 9...and you have those 2 things that I don't


I think that's everything now...

Thanks,


Eg ( too many images .. put smiley here! ) Oh...Yes , I check it every week but it says I don't need to defragment...there's about 93% free space

Hi Eg~,

Your resources seem OK to me.

Even though my machine doesn't do it, it is apparently OK to use IRQ9 for multiple devices:

http://support.microsoft.com/default...;EN-US;q252420

I have an AGP video card and my sound is on the MoBo which probably explains those differences.

Yes, I have a USB expansion card which probably explains why I have two IRQs?

Have you had a chance to look at Xen yet?

Just to be on the safe side, I would run chkdsk on your hard drive.

The next step would be to get a copy of HijackThis and run it. Save the log and post it here so we can see what is running that might be causing a conflict.

Another possibility is that you may have problems with your Registry?

Cheers

Hi nihil,

These are the only differences between my Registry and the one on BVer's site...

1. LexBce Server ( printer? )
2. Still Image Service ( doesn't even say what it is )
3. TrueVector ( firewall? )
4. Workstation

and only 2 and 4 confuse me as to what they are. There's nothing else there...

I haven't noticed any performance benefit yet...but BV says that even if I were to disable everything that he suggests it would only free up 12-70MB of RAM, and I did disable all the items that I could.
Are HijackThis logs Registry logs ? Because some of the logs I see posted are huge compared to mine...but then I'm only using less than 4GB on a 80GB HD...so unless there's a different registry that HijackThis reports on, there doesn't seem to be much need for it at this point...or is it different?

If my resources are all looking ok, and the IRQ's are ok, then why the sluggishness? Or...maybe I'm making a bad comparison to faster machines...is mine suppose to be slow?

I looked at XEN and downloaded but I still haven't a way to un-zip yet.

How do you run a chkdsk?

I'm learning...so far you guys have taught me how to use device manager and change registry settings, how to access and use task manager ( which I never even knew I had )...etc...

I've got HijackThis downloaded too...but again it's a zip file. I also have other downloads I can't un-zip like TCPVeiw.

Is " processes " the log for HijackThis? in Task Manager?

Thanks,

Eg ;)

Hi Eg~,

Go to <Start> <run> and type in:

chkdsk C: /r

Then OK it...........it will take some time ;)

Hijack This! produces its own log/report. As you may have noticed, it contains a lot of Registry data, so it picks up stuff that Task Manager does not.

You can get a 21 day trial of a Zip utility here: http://www.winzip.com/

You might like to try turning off the power saving options (boot into set-up) and screensaver. That is more commonly a WinXP problem, but it is just possible.

Cheers

Hi

Egaladeist, we really need some more input. So far, it actually sounds quite
good, such that the machine should run smoothly (considering the software
part only) :)

1. as Nihil said (and read the tutorial by foxyloxley I linked): get hijack this[1]
2. as said, get also the cmdline program[2] and run it in a command shell:
(I assume you unpack the zip file in c:\cmdline):

Code:

---

> cd c:\cmdline
> cmdline >cmdline.txt

---

grab the cmdline.txt file via explorer and attach it here (or pm me/us).

Quote:

---

2. Still Image Service ( doesn't even say what it is )
4. Workstation

---

No idea about the "Still Image Service"[3] (I have seen that stisvc.exe is running
on your pc), however it is recommended:
"If you attach a camera, scanner or similar device to your computer, you
should leave this process running"

Workstation is crucial. It should be running.

Cheers

[1] http://www.spywareinfo.com/~merijn/downloads.html
[2] http://www.diamondcs.com.au/index.ph...onsole-cmdline
[3] http://www.auditmypc.com/process/stisvc.asp

Hi Everyone,

Quote:

---

Just to be on the safe side, I would run chkdsk on your hard drive.

---

I ran chkdsk last night...I didn't know it was related to that box you find in Manage when you right-click My Computer...I check that every so often and it's always said " Healthy "...and still does...that's a long program...took about six hours to complete...but it doesn't seem to give a report that you can read.
I first tried to run automatically fix file system errors but it wouldn't let me because it said there was something else running and needed exclusive access...so I ran it under the only other option scan for and attempt recovery of bad sectors.

Question...how exactly do these free trial things work anyways? I know what they tell you...but I always retain a healthy scepticism when it comes to people trying to sell me their product. Like that AOL...it's like a freakin' disease...it took me hours to delete it and Netscape off my system and I'm still not sure I got it all...it's like a cancer...as soon as you think it's gone...it's back.
So I've always been wary of these so-called free downloads and free trials...and how they really work.
Like...what happens after the trial period? Do they install spyware? Am I going to end up with something on my system I don't want there?
You read on these forums how people download and end up with all kinds of crap from malware to pop-ups infecting their systems...so I follow the simple policy...if I'm not sure...I don't click! I've got about 10-12 downloads on my box that I still haven't loaded and are just sitting in a folder because I'm not sure about them...they're all computer related stuff like a tool for checking monitor performance and tutorials.

Maybe...after all is said and done...my computer is sluggish just because it's old...do computers slow down like other things ( myself included ) with age. You would naturally assume that would be the case...that it's not going to have the freshness that it had coming off the assembly line. But I don't know if that applies to computers.

Thanks,

Eg :) ;)

Hi Eg~

I can assure you that all stuff I recommend I use myself or have done at some time. :D

"Still Image Service" is something that loads when you use a scanner or digital camera..........it is from Microsoft.

Yes, computers can slow down with age, but this is usually because they have been running very hot for a long time. The other reason is that the Registry fills up with redundant information and gets fragmented.

After we have had a look at the Hijack This! log, I guess the Registry is the next logical step.

On the hardware side, is all your RAM of the same speed and type? Mixing RAM can have a strange effect on performance...........your machine will certainly find the lowest common denominator and run at that.

OH!.............you are quite safe with the Winzip trial................they have been around since DOS days.

Cheers

Hi Everyone,

nihil,

Yep...my Lex has a scanner...which I use occasionally.

My RAM is the old kind...the SSR?...not the new DDR or whatever it's called. I started out with two 32's...there's only two slots...added a 128...then later added a 264...which gives me the 384 I have now...I know it doesn't add up right :D ...I remember reading someplace you're suppose to install the same size ( eg. both 128's ) but the guy who installed it is a computer guy so I went with it because I needed more memory and couldn't afford to install two sticks of 264 at the same time...and pay for labor.

Hopefully I'll get a chance to download that trial WinZip today and run that HijackThis but I'm not sure right now what kind of time I'm going to have.

Can I assume that if the log comes up empty...as I'm assuming it will...that my performance is just due to age...or is there something else that might be the culprit?

Thanks,

Eg ;)

Hi Everyone,

I'm backkkkkk...

Well I got the log...now...I noticed when l3lacklce posted his log he mentioned he removed any sensitive and personal data before he posted...

my question is what should I remove before posting the log so that I don't compromise my system ?
Obviously I don't want any Tom, Dick, or Harry looking at my log if it's not safe to post...not just for the sake of some people here but also guests, bots, and everything else that will have access.

Eg ;)

Well...I ran the log on that Automated site I posted in the Spyware Forum...and everything came up under " safe " with 2 " unknowns "

essspk.exe........which I assume is my mic
and
my lexmark printer

Eg