Slow computer defeats inept user

[Pastiche]

Also when was the last time you did a windows update? Pretty sure the malicious software removal tool would have removed that spyware you have accumulated.

[photon]

Originally Posted by Aeneas

Am very busy with children at this moment(temp single dad), but thought I'd quickly update the Spybot S and destroy result...

Burstmedia 4 entries browser
Casalemedia 6 browser
Doubleclick 1 browser
Fastclick 2 browser
Mediaplex 1 browser
Statcounter 1 browser
Webtrendslive 1 browser

I must say the last month or so I have been ready to destroy the mouse in furious rage. Now I read "doubleclick" and think maybe an apology to the mouse is in order.

None of those are anything serious, they're just cookies from ad companies. Nothing that would slow your computer down anyway.

[Aeneas]

Ahh, it is that time, once every 7 days I have no children for 2 whole hours!

So to answer many questions...

CPU: Intel Pentium R 2.8 GB
Memory: 1.00 GB

[Aeneas]

Originally Posted by Pastiche

Also when was the last time you did a windows update? Pretty sure the malicious software removal tool would have removed that spyware you have accumulated.

Checked the Windows updates, and it said none required. 5 optional updates available.
Last updated yesterday 0800.

[Aeneas]

It is now running at 30-50%. That's with Spybot no longer running.

The task manager is down to 8-10 CPU.

It was suggested several times to remove Internet Explorer and just use Firefox for example. Should I do that?

[photon]

Or just install Firefox and use that, i would recommend that in any case.

It still sounds like something else odd is happening, any luck with the power management stuff?

http://www.cpuid.com/download/cpuz/cpuz_154.zip

You can download that and run it and it will tell you how fast the processor is actually running to see if that's the problem.

1GB of RAM is also quite low, especially for Vista. An upgrade to 2 or 3GB would probably do wonders for you and be pretty inexpensive.

[Pinner]

[Aeneas]

Installed firefox, am now running the Trend Micro antivirus hijackthis.

Says it is running but nothing much is happening at present.

Will try the power management next.

[Azure]

If you think there is malware on there, I would suggest using Malware Bytes to scan. But I don't think that is your problem. Usually malware is quite evident. As in it pops up and bugs the hell out of you.

The next thing I would probably do is do a HijackThis scan, and post the results here. Don't delete or fix anything. Just save results, copy and paste here. That should show us more about what is going on.

[Azure]

The other thing that 'could' be is if you have multiple virus scanners on there. Norton and McAffee, at least the old versions are notorious for slowing everything down.

Go Control Panel --> Add/Remove Programs...and do a quick scan to see if either is there. Don't get rid of them though. Just let us know.

I think Hijackthis would tell us that anyways, but I'm not entirely sure. Been a while since I had to use it.

[Aeneas]

orm: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\s wg.dll
O2 - BHO: LitmusBHO - {C6867EB7-8350-4856-877F-93CF8AE3DC9C} - C:\Program Files\Shaw Secure\NRS\iescript\baselitmus.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Browsing Protection Toolbar - {265EEE8E-3228-44D3-AEA5-F7FDF5860049} - C:\Program Files\Shaw Secure\NRS\iescript\baselitmus.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero 7\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Windows Mobile-based device management] %WINDIR%\WindowsMobile\wmdcBase.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [D-Link D-Link Wireless N DWA-130] C:\Program Files\D-Link\D-Link Wireless N DWA-130\AirNCFG.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Shaw Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Shaw Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [SSDMonitor] C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RMTray.exe /H
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: Picture Motion Browser Media Check Tool.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\npjpi150_10.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\npjpi150_10.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/...x/qtplugin.cab
O16 - DPF: {0D859AF0-C75E-11D4-B760-00E0B81077E8} (FileCruiser Class) - http://abmls.mlxchange.com/4.2.10.33...ileCruiser.cab
O16 - DPF: {16FD824B-8E7B-11D2-9855-00802962956C} (Specfile Control) - http://abmls.mlxchange.com/4.2.10.33...l/Specfile.cab
O16 - DPF: {6FD482A3-7B57-438B-B040-52CAA30147EE} (MLS Client Utils) - http://abmls.mlxchange.com/4.2.10.33...lientUtils.cab
O16 - DPF: {78523E50-56EB-11D3-B739-CAA1986A452F} (LiteGridCtl Class) - http://abmls.mlxchange.com/4.2.10.33...l/LiteGrid.cab
O16 - DPF: {7A7537FC-5988-11D3-8B33-00104B9E5A4A} (IRCWwwPrint Class) - http://abmls.mlxchange.com/4.2.10.33...RCWebPrint.cab
O16 - DPF: {83AB6E4D-CDD7-11D3-B5E7-00104B9AFF6E} (GeacRevw Control) - http://abmls.mlxchange.com/4.3.07.83...l/IRCSharc.cab
O16 - DPF: {B198A72B-B4C3-42B5-B8DA-B364E76429AA} (Cerebus Class) - http://abmls.mlxchange.com/4.2.10.33/Control/WebDog.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O16 - DPF: {F060A272-A18A-11D3-B75B-00E0B81077E8} (DropList Class) - http://abmls.mlxchange.com/4.2.10.33...ustomCtrls.cab
O18 - Protocol: intu-qt2008 - {05E53CE9-66C8-4A9E-A99F-FDB7A8E7B596} - C:\Program Files\QuickTax 2008\ic2008pp.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - Unknown owner - C:\Program Files\Shaw Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Shaw Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Shaw Secure\Common\FSMA32.EXE
O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\Shaw Secure\ORSP Client\fsorsp.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\Windows\System32\LEXBCES.EXE
O23 - Service: lxbk_device - - C:\Windows\system32\lxbkcoms.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Seagate Sync Service - Unknown owner - C:\Program Files\Seagate\Sync\SeaSyncServices.exe (file missing)
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe
End of file - 12042 bytes

[Pastiche]

Take that to the hijack this forums.

[Azure]

Having dealt with Telus Security Services in the past and seeing how slow it makes your computer, this instantly stands out.

O3 - Toolbar: Browsing Protection Toolbar - {265EEE8E-3228-44D3-AEA5-F7FDF5860049} - C:\Program Files\Shaw Secure\NRS\iescript\baselitmus.dll

'Browsing Protection'....could make your internet browsing slow. Especially with the amount of RAM you have.

O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Shaw Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Shaw Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O2 - BHO: LitmusBHO - {C6867EB7-8350-4856-877F-93CF8AE3DC9C} - C:\Program Files\Shaw Secure\NRS\iescript\baselitmus.dll
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - Unknown owner - C:\Program Files\Shaw Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Shaw Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Shaw Secure\Common\FSMA32.EXE
O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\Shaw Secure\ORSP Client\fsorsp.exe

Lets see what Photon on the other guys say as I've never dealt with Shaw security stuff.

My recommendation would be to remove it. Unless its a paid service.

If you do remove it, go Control Panel --> Add/Remove Programs and there should be something there like 'F-Secure.'

But, that is just what I would do. Nothing else seriously stands out. Of course I could be missing something too.

[photon]

I don't see anything in there nasty, and nothing in there specifically that should be causing that high a CPU usage. There are a lot of things there, but even all of that together shouldn't be adding up to a 40% constant CPU useage on a 2.8GHz processor. What do you guys think?

[photon]

I'm not a big fan of Shaw Secure either, I found it to be a resource hog. If it were me I'd remove Shaw Secure and install Miscrosoft Security Essentials or avast! free antivirus. ETA: And turn on the Windows firewall.

There's some PC Tools stuff running in there too, but I haven't had much experience with PC Tools so don't know if it's good or not.

[photon]

Originally Posted by sclitheroe

No, because when the disk is thrashing during paging the CPU is completely RAM starved - it literally has almost no work to do for the thread causing paging, because the work it needs to do isn’t in RAM.

Hm.. here's another thought then, what if the drivers are messed up or haven't been installed and the hard drive is in PIO mode, then all the thrashing would eat up the CPU time too.

That used to be super common, but with all the drivers included nowadays in Windows it's pretty unlikely.

I don't even know how to check this in Vista. Aeneas try clicking Start, right click on My Computer, choose Manage, click Device Manager on the left. In listed devices look for the IDE ATA/ATAPI controllers, or the Storage Controllers, and under each item underneath right click on it and choose properties, and look in the tabs (usually the Advanced Settings tab) and see if you can see anything that has the letters PIO Mode or something like that, or DMA mode (it should say DMA mode). This one's tough sorry, there's so many different controllers and drives out there it's hard to be specific.

[Azure]

Originally Posted by photon

I'm not a big fan of Shaw Secure either, I found it to be a resource hog. If it were me I'd remove Shaw Secure and install Miscrosoft Security Essentials or avast! free antivirus. ETA: And turn on the Windows firewall.

There's some PC Tools stuff running in there too, but I haven't had much experience with PC Tools so don't know if it's good or not.

I would remove it too. Chances are its running 3-4 different processes, all of them being resource hogs. I've yet to see a virus program from an ISP that works.

PC Tools used to be alright, but with CCleaner being so fast and reliable there is no need for it.

I would remove F-Secure, and all the PC Tools stuff, install Microsoft Security Essentials(IMO better than Avast)...and install CCleaner as well.

And then go from there.

EDIT: And after you have installed CCleaner, run the registry scanner and fix all the errors. It will ask you to do a backup when you click 'fix problems.' I've never seen a need to do that. Seems to be pretty reliable.

You can run Microsoft Security Essentials too, but the full scan will take maybe an hour. I've run a scan that has taken 2 hours on a computer that old. Especially if you have lots of data. Maybe do a 'quick scan' first.

But remove F-Secure and all the PC Tools stuff first.

[Azure]

Originally Posted by photon

1GB of RAM is also quite low, especially for Vista. An upgrade to 2 or 3GB would probably do wonders for you and be pretty inexpensive.

This.

I put in 1GB more of DDR memory in a computer a while back that was very similar to yours Aeneas, and it did wonders for it. Works great right now with 1.5GB of memory.

I'm not sure if there is a limit to how MUCH you can put in, but if you have 1GB right now, chances are there will be two 512meg sticks in there right now. You should be able to put at least 2gigs in there, so if you want swap one with a new 1gig DDR stick, or maybe swap both if you want.

Memory ain't that expensive.

1GB DDR.
http://www.memoryexpress.com/Product...7%28ME%29.aspx

512meg DDR.
http://www.memoryexpress.com/Product...7%28ME%29.aspx

Make sure you have DDR memory though. So you don't buy the wrong stuff. I'm just guessing that its DDR based on how old your machine is. You might have to open up your case, and remove the memory.

It will be in slots like this.


Snap back the white things on the end and just pull it out. It should say on the stick itself what kind it is. When you put it back in make sure you're putting it in the right way. One side of the stick has a longer slot than the other one. Make sure the white things are pushed back, and just slide it into the slot again properly and when you push down the white things should snap back into place.

[Aeneas]

Thanks again to all. Will try to get on this when the kids are asleep.

Am using the old beast in the interim, shut down the newer one.