Hello,
My machine is P4 3.6Ghz, 2GB RAM, XPPro SP2, all Win Updates installed,
Sophos Antivirus, Also scan weekly and alternately with the following
utilities AVG AntiSpyware, S;ybot S&D, Super AntiSpyware, AdAware 2007. Also
do weekly updates with SpywareBlaster. I do scheduled defrag every night with
Diskeeper. I've struggled with these issues for months. Hope someone can help:
Symptoms:
1) Right Clicking on files or folders in Windows Explorer requires about 30
seconds for the context menu to visualize and then 10 seconds more for any
chosen action to occur. Sometimes the context menu doesn't visualize at all
and the entire Windows Explorer interface does a "whiteout."
2) Highlighting a file or folder and selecting 'Edit' dropdown menu has same
symptoms as #1 above.
3) Deleting a file takes 20-30 seconds.
4) Internet Explorer 7 takes painfully long (30 seconds to a minute) to
initialize and it takes about 20-30 seconds for new tabs to initialize. By
contrast Firefox 3 Beta 2 initializes fast and renders fast. Within Windows
Explorer I disable the 'Automatically search for network drives and printers'
and in System properties have chosen 'Best performance' option. All other
programs on my computer are running without any issues including Windows
Media Player 11.
Here's what I've done so far without fixing the problems:
1) Ran HijackThis and verified everything is clean
2) Ran ShellExView and selectively disabled items one-at-a-time and then
disabled everything which wasn't native to XP
3) Uninstalled IEPro plugin
3) Uninstalled/reinstalled IE 7
4) Performed a Windows XP Repair
5) From time to time historically, the svchost 100% CPU issue has kicked in
(not in a long time though). When it does I use this script:
et stop WuAuServ
net stop bits
taskkill /f /im wuauclt.exe
sc config WuAuServ type= own start= auto error= normal obj= LocalSystem
sc config BITS type= own start= auto error= normal obj= LocalSystem
sc config wudfsvc start= disabled
REGSVR32 WUAPI.DLL /s-
REGSVR32 WUAUENG.DLL /s-
REGSVR32 WUAUENG1.DLL /s-
REGSVR32 ATL.DLL /s-
REGSVR32 WUCLTUI.DLL /s-
REGSVR32 WUPS.DLL /s-
REGSVR32 WUPS2.DLL /s-
REGSVR32 WUWEB.DLL /s-
if exist %windir%\SDpld rd %windir%\SDOld /S /Q
ren %windir%\SoftwareDistribution SDOld
net start WuAuServ
net start bits
Here is a hijackthis log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:21:21 PM, on 1/17/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal
Any guidance would be greatly appreciated. I want to avoid format and fresh
XP installation because of the large number of programs I would have to
reinstall.
Try Ctrl+Alt+Delete to select Task Manager and click the Performance
Tab. Under Commit Charge what is the Total, the Limit and the Peak?
Do you leave your computer on 24/7?
Open Disk Defragmenter and click on Analyse. Select View Report and
click on Save As and Save. Now find VolumeC.txt in your My Documents
Folder and post a copy. Do this before running Disk Defragmenter as it
is more informative.
Any memory optimisers installed?
Please post copies of all Error and Warning Reports appearing in
the System and Application logs in Event Viewer for the last boot. No
Information Reports or Duplicates please. Indicate which also appear in
a previous boot.
You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer.
A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.
--
Hope this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
Scott wrote:
> Hello,
> My machine is P4 3.6Ghz, 2GB RAM, XPPro SP2, all Win Updates
> installed, Sophos Antivirus, Also scan weekly and alternately with
> the following utilities AVG AntiSpyware, S;ybot S&D, Super
> AntiSpyware, AdAware 2007. Also do weekly updates with
> SpywareBlaster. I do scheduled defrag every night with Diskeeper.
> I've struggled with these issues for months. Hope someone can help:
> Symptoms: 1) Right Clicking on files or folders in Windows Explorer
> requires about 30 seconds for the context menu to visualize and then
> 10 seconds more for any chosen action to occur. Sometimes the context
> menu doesn't visualize at all and the entire Windows Explorer
> interface does a "whiteout." 2) Highlighting a file or folder and
> selecting 'Edit' dropdown menu has same symptoms as #1 above.
> 3) Deleting a file takes 20-30 seconds.
> 4) Internet Explorer 7 takes painfully long (30 seconds to a minute)
> to initialize and it takes about 20-30 seconds for new tabs to
> initialize. By contrast Firefox 3 Beta 2 initializes fast and renders
> fast. Within Windows Explorer I disable the 'Automatically search for
> network drives and printers' and in System properties have chosen
> 'Best performance' option. All other programs on my computer are
> running without any issues including Windows Media Player 11.
> Here's what I've done so far without fixing the problems:
> 1) Ran HijackThis and verified everything is clean
> 2) Ran ShellExView and selectively disabled items one-at-a-time and
> then disabled everything which wasn't native to XP
> 3) Uninstalled IEPro plugin
> 3) Uninstalled/reinstalled IE 7
> 4) Performed a Windows XP Repair
> 5) From time to time historically, the svchost 100% CPU issue has
> kicked in (not in a long time though). When it does I use this script:
> et stop WuAuServ
> net stop bits
> taskkill /f /im wuauclt.exe
> sc config WuAuServ type= own start= auto error= normal obj=
> LocalSystem
> sc config BITS type= own start= auto error= normal obj= LocalSystem
> sc config wudfsvc start= disabled
> REGSVR32 WUAPI.DLL /s-
> REGSVR32 WUAUENG.DLL /s-
> REGSVR32 WUAUENG1.DLL /s-
> REGSVR32 ATL.DLL /s-
> REGSVR32 WUCLTUI.DLL /s-
> REGSVR32 WUPS.DLL /s-
> REGSVR32 WUPS2.DLL /s-
> REGSVR32 WUWEB.DLL /s-
> if exist %windir%\SDpld rd %windir%\SDOld /S /Q
> ren %windir%\SoftwareDistribution SDOld
> net start WuAuServ
> net start bits
>
> Here is a hijackthis log:
>
> Logfile of Trend Micro HijackThis v2.0.2
> Scan saved at 5:21:21 PM, on 1/17/2008
> Platform: Windows XP SP2 (WinNT 5.01.2600)
> MSIE: Internet Explorer v7.00 (7.00.6000.16574)
> Boot mode: Normal
>
> Running processes:
> C:\WINDOWS\System32\smss.exe
> C:\WINDOWS\system32\winlogon.exe
> C:\WINDOWS\system32\services.exe
> C:\WINDOWS\system32\lsass.exe
> C:\WINDOWS\system32\svchost.exe
> C:\WINDOWS\System32\svchost.exe
> C:\WINDOWS\Explorer.EXE
> C:\WINDOWS\system32\ZoneLabs\vsmon.exe
> C:\WINDOWS\system32\spoolsv.exe
> C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
> D:\Program Files\APC PowerChute Personal Edition\mainserv.exe
> C:\WINDOWS\system32\svchost.exe
> D:\Program Files\Diskeeper\DkService.exe
> C:\WINDOWS\System32\svchost.exe
> D:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe
> C:\WINDOWS\system32\slserv.exe
> D:\Program Files\Sophos\AutoUpdate\ALsvc.exe
> C:\WINDOWS\system32\svchost.exe
> D:\Program Files\UPHClean\uphclean.exe
> D:\Program Files\InkSaver\InkSaver.exe
> C:\WINDOWS\vsnpstd.exe
> C:\Program Files\Microsoft IntelliPoint\ipoint.exe
> D:\Program Files\ZoneAlarm\zlclient.exe
> C:\WINDOWS\system32\devldr32.exe
> C:\WINDOWS\system32\RUNDLL32.EXE
> C:\Program
> Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
> D:\Program Files\Wallpaper Master\Wallpaper.exe
> D:\Program Files\Sophos\AutoUpdate\ALMon.exe
> D:\Program Files\DeltaCrypt\DTITray.exe
> D:\Program Files\Desktop Calendar\Desktop Calendar.exe
> C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
> C:\WINDOWS\explorer.exe
> C:\Program Files\Windows Media Player\WMPNSCFG.exe
> D:\Program Files\Mozilla Firefox 3 Beta 2\firefox.exe
> D:\Downloads\hijackthis\HijackThis.exe
>
> R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
> http://www.nytimes.com//
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
> http://go.microsoft.com/fwlink/?LinkId=69157
> R1 - HKLM\Software\Microsoft\Internet
> Explorer\Main,Default_Search_URL =
> http://go.microsoft.com/fwlink/?LinkId=54896
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
> http://go.microsoft.com/fwlink/?LinkId=54896
> R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
> http://go.microsoft.com/fwlink/?LinkId=69157
> R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch
> = http://www.ask.com
> R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title =
> Microsoft Internet Explorer provided by Scott McIntosh
> O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - D:\Program
> Files\IE7pro\iepro.dll
> O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} -
> D:\Program Files\Orbitdownloader\orbitcth.dll
> O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208}
> - D:\Program Files\SnagIt 7\SnagItBHO.dll
> O2 - BHO: Adobe PDF Reader Link Helper -
> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common
> Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
> O2 - BHO: (no name) - {0A87E45F-537A-40B4-B812-E2544C21A09F} - (no
> file)
> O2 - BHO: StumbleUpon Launcher -
> {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - C:\Program
> Files\StumbleUpon\StumbleUponIEBar.dll
> O2 - BHO: CtBho Class - {6462546F-70AE-4abc-B2B6-BE68E9410002} -
> D:\Program Files\Haute Secure\CtBho.dll
> O2 - BHO: Groove GFS Browser Helper -
> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Program Files\Microsoft
> Office\Office12\GrooveShellExtensions.dll
> O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
> C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
> O2 - BHO: Google Toolbar Helper -
> {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program
> files\google\googletoolbar3.dll
> O2 - BHO: (no name) - {AE7CD045-E861-484f-8273-0445EE161910} - (no
> file)
> O2 - BHO: Google Toolbar Notifier BHO -
> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program
> Files\Google\GoogleToolbarNotifier\2.0.301.7164\sw g.dll
> O3 - Toolbar: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -
> (no file) O3 - Toolbar: StumbleUpon Toolbar -
> {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - C:\Program
> Files\StumbleUpon\StumbleUponIEBar.dll
> O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} -
> c:\program files\google\googletoolbar3.dll
> O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} -
> D:\Program Files\SnagIt 7\SnagItIEAddin.dll
> O3 - Toolbar: Haute Secure Toolbar -
> {7792546F-70AE-4abc-B2B6-BE68E9410002} - D:\Program Files\Haute
> Secure\CtToolBand.dll
> O4 - HKLM\..\Run: [InkSaver] D:\Program Files\InkSaver\InkSaver.exe
> hide
> O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
> O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft
> IntelliPoint\ipoint.exe"
> O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\Program
> Files\ZoneAlarm\zlclient.exe" O4 - HKCU\..\Run: [swg] C:\Program
> Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
> O4 - HKCU\..\Run: [WallpaperChanger] D:\Program Files\Wallpaper
> Master\Wallpaper.exe
> O4 - HKCU\..\Run: [cdloader] "C:\Documents and
> Settings\Scott\Application Data\mjusbsp\cdloader2.exe" MAGICJACK
> O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media
> Player\WMPNSCFG.exe
> O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] D:\Program
> Files\Picasa\PicasaMediaDetector.exe (User 'SYSTEM')
> O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] D:\Program
> Files\Picasa\PicasaMediaDetector.exe (User 'Default user')
> O4 - Startup: Desktop Calendar.exe.lnk = D:\Program Files\Desktop
> Calendar\Desktop Calendar.exe
> O4 - Startup: Logon.lnk = D:\Admin\Logon.cmd
> O4 - Global Startup: AutoUpdate Monitor.lnk = D:\Program
> Files\Sophos\AutoUpdate\ALMon.exe
> O4 - Global Startup: DTITray.LNK = D:\Program
> Files\DeltaCrypt\DTITray.exe
> O8 - Extra context menu item: &Download by Orbit - res://D:\Program
> Files\Orbitdownloader\orbitmxt.dll/201
> O8 - Extra context menu item: &Grab video by Orbit - res://D:\Program
> Files\Orbitdownloader\orbitmxt.dll/204
> O8 - Extra context menu item: Do&wnload selected by Orbit -
> res://D:\Program Files\Orbitdownloader\orbitmxt.dll/203
> O8 - Extra context menu item: Down&load all by Orbit -
> res://D:\Program Files\Orbitdownloader\orbitmxt.dll/202
> O8 - Extra context menu item: E&xport to Microsoft Excel -
> res://D:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
> O8 - Extra context menu item: Open with Scansoft PDF Converter 3.0 -
> res://C:\Program
> Files\ScanSoft\OmniPage15.0\PDFConverter3\IEShellE xt.dll /100 O8 -
> Extra context menu item: StumbleUpon PhotoBlog It! -
> res://StumbleUponIEBar.dll/blogimage
> O9 - Extra button: IE7Pro Preferences -
> {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - D:\Program
> Files\IE7pro\iepro.dll
> O9 - Extra 'Tools' menuitem: IE7Pro Preferences -
> {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - D:\Program
> Files\IE7pro\iepro.dll
> O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501}
> - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
> O9 - Extra 'Tools' menuitem: Sun Java Console -
> {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
> Files\Java\jre1.6.0_02\bin\ssv.dll
> O9 - Extra button: Send to OneNote -
> {2670000A-7350-4f3c-8081-5663EE0C6C49} -
> D:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
> O9 - Extra 'Tools' menuitem: S&end to OneNote -
> {2670000A-7350-4f3c-8081-5663EE0C6C49} -
> D:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
> O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
> D:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
> O15 - Trusted Zone: http://www.afterdawn.com
> O15 - Trusted Zone: *.blogsmithmedia.com
> O15 - Trusted Zone: http://googtube.blogspot.com
> O15 - Trusted Zone: *.buy.com
> O15 - Trusted Zone: http://ct.cnet-ssa.cnet.com
> O15 - Trusted Zone: http://www.colourlovers.com
> O15 - Trusted Zone: http://www.correctdeck.com
> O15 - Trusted Zone: http://www.crossengine.com
> O15 - Trusted Zone: *.digg.com
> O15 - Trusted Zone: *.downloadsquad.com
> O15 - Trusted Zone: http://www.engadget.com
> O15 - Trusted Zone: *.eventid.net
> O15 - Trusted Zone: http://www.fatwallet.com
> O15 - Trusted Zone: http://feeds.feedburner.com
> O15 - Trusted Zone: http://*.freewarewiki.com
> O15 - Trusted Zone: http://feeds.gawker.com
> O15 - Trusted Zone: http://*.gizmodo.com
> O15 - Trusted Zone: http://mail.glastonburyus.org
> O15 - Trusted Zone: *.glastonburyus.org
> O15 - Trusted Zone: 22.gmodules.com
> O15 - Trusted Zone: *.gmodules.com
> O15 - Trusted Zone: http://www.hoax-slayer.com
> O15 - Trusted Zone: http://officebeta.iponet.net
> O15 - Trusted Zone: http://*.isohunt.com
> O15 - Trusted Zone: http://*.jott.com
> O15 - Trusted Zone: *.kirchersociety.org
> O15 - Trusted Zone: http://www.last100.com
> O15 - Trusted Zone: http://www.lifegoggles.com
> O15 - Trusted Zone: http://www.lifehack.org
> O15 - Trusted Zone: http://*.lifehacker.com
> O15 - Trusted Zone: http://*.lifelearningtoday.com
> O15 - Trusted Zone: *.live.com
> O15 - Trusted Zone: http://*.mashable.com
> O15 - Trusted Zone: http://zone.msn.com
> O15 - Trusted Zone: http://redtape.msnbc.com
> O15 - Trusted Zone: *.neowin.net
> O15 - Trusted Zone: *.netvibes.com
> O15 - Trusted Zone: http://www.openhulu.com
> O15 - Trusted Zone: http://linksynergy.overstock.com
> O15 - Trusted Zone: http://www.overstock.com
> O15 - Trusted Zone: http://chris.pirillo.com
> O15 - Trusted Zone: http://www.popularmechanics.com
> O15 - Trusted Zone: http://www.propeller.com
> O15 - Trusted Zone: http://www.rev2.org
> O15 - Trusted Zone: *.searchsecurity.com
> O15 - Trusted Zone: *.shellcity.net
> O15 - Trusted Zone: http://fr.sitestat.com
> O15 - Trusted Zone: http://www.sorrygottago.com
> O15 - Trusted Zone: http://www.sortprice.com
> O15 - Trusted Zone: *.stumbleupon.com
> O15 - Trusted Zone: *.sysinternals.com
> O15 - Trusted Zone: *.techtarget.com
> O15 - Trusted Zone: http://www.thatsfit.com
> O15 - Trusted Zone: http://www.thedailygreen.com
> O15 - Trusted Zone: http://www.theinquirer.net
> O15 - Trusted Zone: http://*.torrentfreak.com
> O15 - Trusted Zone: http://www.viralvideochart.com
> O15 - Trusted Zone: http://www.wfsb.com
> O15 - Trusted Zone: *.windowsmobile.com
> O15 - Trusted Zone: *.wired.com
> O15 - Trusted Zone: http://*.grp.yahoofs.com
> O15 - Trusted Zone: http://www.youtube.com
> O15 - Trusted Zone: http://www.youtubex.com
> O15 - Trusted Zone: *.zdnet.com
> O15 - Trusted Zone: http://*.zenhabits.net
> O15 - Trusted Zone: *.excite.com (HKLM)
> O15 - Trusted Zone: *.foxsports.com (HKLM)
> O15 - Trusted Zone: *.hotmail.com (HKLM)
> O15 - Trusted Zone: *.kodak.com (HKLM)
> O15 - Trusted Zone: http://safety.live.com (HKLM)
> O15 - Trusted Zone: zone.msn.com (HKLM)
> O15 - Trusted Zone: *.msn.com (HKLM)
> O15 - Trusted Zone: www.mybookmarks.com (HKLM)
> O15 - Trusted Zone: *.passport.com (HKLM)
> O15 - Trusted Zone: *.passport.net (HKLM)
> O15 - Trusted Zone: http://www.symantec.com (HKLM)
> O15 - Trusted Zone: *.windowsecurity.com (HKLM)
> O16 - DPF: IEPrint -
> http://www.visiontech.ltd.uk/softwar...ad/IEPrint.CAB
> O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab
> O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) -
> http://zone.msn.com/binFrameWork/v10...I.cab55579.cab
> O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software
> AutoUpdate) - http://www.creative.com/su/ocx/15026/CTSUEng.cab
> O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} -
> http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
> O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus
> scanner) -
> http://security.symantec.com/sscv6/S...in/AvSniff.cab
> O16 - DPF: {2E28242B-A689-11D4-80F2-0040266CBB8D} (KX-HCM10 Control)
> - http://hangercam.me.calpoly.edu/kxhcm10.ocx
> O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (MSN Games - Buddy
> Invite) - http://zone.msn.com/BinFrameWork/v10...y.cab55579.cab
> O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} -
> http://appldnld.m7z.net/qtinstall.in...eInstaller.exe
> O16 - DPF: {54BE6B6F-3056-470B-97E1-BB92E051B6C4} (DeviceEnum Class) -
> http://h30155.www3.hp.com/ediags/dd/...osticsxp2k.cab
> O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object)
> - http://zone.msn.com/binframework/v10...t.cab55579.cab
> O16 - DPF: {594ECDD4-A991-4208-A7B7-00DDAD9BE328} (Photosynth Class) -
> http://media.labs.live.com/all/ps/_code_/Photosynth.cab
> O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} -
> http://a1540.g.akamai.net/7/1540/52/...eInstaller.exe
> O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl
> Class) -
> http://www.update.microsoft.com/wind...?1192990840109
> O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI
> Utility Class) -
> http://security.symantec.com/sscv6/S.../bin/cabsa.cab
> O16 - DPF: {64D01C7F-810D-446E-A07E-16C764235644}
> (AtlAtomadersCtlAttrib Class) -
> http://zone.msn.com/bingame/amad/default/atomaders.cab
> O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl
> Class) -
> http://www.update.microsoft.com/micr...?1187402548203
> O16 - DPF: {82774781-8F4E-11D1-AB1C-0000F8773BF0} (DLC Class) -
> https://transfers.ds.microsoft.com/F...ansferCtrl.cab
> O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} -
> http://paris.tourismeville.wanadoo.fr/AMC.cab
> O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online
> Scanner
> 3.0) - http://support.f-secure.com/ols/fscax.cab
> O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) -
> http://www.crucial.com/controls/cpcScanner.cab
> O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} -
> http://www.trendmicro.com/spyware-scan/as4web.cab
> O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games -
> Installer) -
> http://cdn2.zone.msn.com/binFramewor...o.cab56649.cab
> O16 - DPF: {CAC181B0-4D70-402D-B571-C596A47D0CE0} (CBankshotZoneCtrl
> Class) - http://zone.msn.com/bingame/zpagames...l.cab56649.cab
> O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (MSN Games - Game
> Communicator) -
> http://zone.msn.com/binframework/v10...y.cab55579.cab
> O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader
> Object) - http://zone.msn.com/bingame/popcaploader_v10.cab
> O16 - DPF: {E7DBFB6C-113A-47CF-B278-F5C6AF4DE1BD} -
> http://download.abacast.com/download...basetup145.cab
> O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software
> XUpload) - http://upload.mediamax.com/Upload/XUpload.ocx
> O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent
> ActiveX Control) - http://driveragent.com/files/driveragent.cab
> O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software
> AutoUpdate Support Package) -
> http://www.creative.com/su/ocx/15026/CTPID.cab O18 - Protocol:
> AutorunsDisabled - (no CLSID) - (no file)
> O18 - Protocol: grooveLocalGWS -
> {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Program Files\Microsoft
> Office\Office12\GrooveSystemServices.dll
> O20 - AppInit_DLLs:
> C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL,D:\PROGRA ~1\Sophos\SOPHOS~2\SOPHOS~1.DLL
> O20 - Winlogon Notify: !SASWinLogon - D:\Program
> Files\SUPERAntiSpyware\SASWINLO.dll
> O22 - SharedTaskScheduler: IE Browseui preloader -
> {240E2B94-741E-4513-B66A-60EC26A9EF26} - (no file)
> O22 - SharedTaskScheduler: IE Component Categories cache daemon -
> {553858A7-4922-4e7e-B1C1-97140C1C16EF} -
> C:\WINDOWS\system32\ieframe.dll
> O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB -
> D:\Program Files\Ad-Aware 2007\aawservice.exe
> O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis -
> C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
> O23 - Service: Adobe LM Service - Adobe Systems - C:\Program
> Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
> O23 - Service: APC UPS Service - American Power Conversion
> Corporation - D:\Program Files\APC PowerChute Personal
> Edition\mainserv.exe
> O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program
> Files\Common Files\Apple\Mobile Device
> Support\bin\AppleMobileDeviceService.exe
> O23 - Service: Diskeeper - Diskeeper Corporation - D:\Program
> Files\Diskeeper\DkService.exe
> O23 - Service: GB-PVR Recording Service - - D:\Program
> Files\gbpvr\GBPVRRecordingService.exe
> O23 - Service: Google Updater Service (gusvc) - Google - C:\Program
> Files\Google\Common\Google Updater\GoogleUpdaterService.exe
> O23 - Service: GWINMWZWC - Sysinternals - www.sysinternals.com -
> D:\Temp\GWINMWZWC.exe
> O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
> Corporation - C:\Program Files\Common
> Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
> O23 - Service: Imapi Helper - Alex Feinman - D:\Program Files\ISO
> Recorder\ImapiHelper.exe
> O23 - Service: iPod Service - Apple Inc. - D:\Program
> Files\iPod\bin\iPodService.exe
> O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman
> Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
> O23 - Service: SQL Server (SASMB_VRA) (MSSQL$SASMB_VRA) - Unknown
> owner - C:\Program Files\Microsoft SQL
> Server\MSSQL.1\MSSQL\Binn\sqlservr.exe (file missing)
> O23 - Service: SQL Server Active Directory Helper
> (MSSQLServerADHelper) - Unknown owner - C:\Program Files\Microsoft SQL
> Server\90\Shared\sqladhlp90.exe (file missing)
> O23 - Service: NBService - Nero AG - D:\Program Files\Nero 7\Nero
> BackItUp\NBService.exe
> O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA
> Corporation - C:\WINDOWS\system32\nvsvc32.exe
> O23 - Service: OneTouch 4.0 Monitor - Visioneer Inc - C:\Program
> Files\Visioneer\OneTouch 4.0\OtService.exe
> O23 - Service: Pml Driver HPH11 - HP -
> C:\WINDOWS\system32\HPHipm11.exe
> O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) -
> Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
> O23 - Service: Sophos Anti-Virus status reporter (SAVAdminService) -
> Sophos Plc - D:\Program Files\Sophos\Sophos
> Anti-Virus\SAVAdminService.exe
> O23 - Service: Sophos Anti-Virus (SAVService) - Sophos Plc -
> D:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe
> O23 - Service: SmartLinkService (SLService) - Smart Link -
> C:\WINDOWS\SYSTEM32\slserv.exe
> O23 - Service: Sophos AutoUpdate Service - Sophos Plc - D:\Program
> Files\Sophos\AutoUpdate\ALsvc.exe
> O23 - Service: SQL Server Browser (SQLBrowser) - Unknown owner -
> C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe (file
> missing)
> O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC -
> C:\WINDOWS\system32\ZoneLabs\vsmon.exe
> O23 - Service: WinFax PRO (wfxsvc) - Symantec Corporation -
> C:\WINDOWS\system32\WFXSVC.EXE
> O24 - Desktop Component 0: (no name) - (no file)
> 1) Right Clicking on files or folders in Windows Explorer requires
> about 30 seconds for the context menu to visualize and then 10
> seconds more for any chosen action to occur. Sometimes the
> context menu doesn't visualize at all and the entire Windows
> Explorer interface does a "whiteout."
Please see "Right-click is slow or weird behavior caused by context menu
handlers":
Hello Gerry and thank you for your response. Here is the information
you requested:
Total 504M, Limit 4964M, Peak--since I am not sure how to enable
display which aggregates total peak mem usage of all processes, I
added the delta from each process and arrived at 680M peak.
Yes, I leave the computer on 24x7. I use ZoneAlarm, Sophos AV/malware
including nightly full scans, occasional weekly scans with AVG
AntiSpyware, Spybot S&D, Super AntiSpyware and also run Spyware
Blaster. My D-Link DIR-655 also has protection.
I run Diskeeper Pro weekly on both volumes for two hourslate at night.
Fragmentation has not been an issue nor do the symptoms (being so
selective) point to that. No memory optimizers because I do not
subscribe to the premise.
There are no warnings or errors in either System or Application Evt
log following reboot.
Gerry a écrit :
> Scott
>
> Try Ctrl+Alt+Delete to select Task Manager and click the Performance
> Tab. Under Commit Charge what is the Total, the Limit and the Peak?
>
> Do you leave your computer on 24/7?
>
> Open Disk Defragmenter and click on Analyse. Select View Report and
> click on Save As and Save. Now find VolumeC.txt in your My Documents
> Folder and post a copy. Do this before running Disk Defragmenter as it
> is more informative.
>
> Any memory optimisers installed?
>
> Please post copies of all Error and Warning Reports appearing in
> the System and Application logs in Event Viewer for the last boot. No
> Information Reports or Duplicates please. Indicate which also appear in
> a previous boot.
>
> You can access Event Viewer by selecting Start, Control Panel,
> Administrative Tools, and Event Viewer.
>
> A tip for posting copies of Error Reports! Run Event Viewer and double
> click on the error you want to copy. In the window, which appears is a
> button resembling two pages. Click the button and close Event
> Viewer.Now start your message (email) and do a paste into the body of
> the message. Make sure this is the first paste after exiting from
> Event Viewer.
>
> --
>
>
>
> Hope this helps.
>
> Gerry
> ~~~~
> FCA
> Stourport, England
> Enquire, plan and execute
> ~~~~~~~~~~~~~~~~~~~
>
> Scott wrote:
> > Hello,
> > My machine is P4 3.6Ghz, 2GB RAM, XPPro SP2, all Win Updates
> > installed, Sophos Antivirus, Also scan weekly and alternately with
> > the following utilities AVG AntiSpyware, S;ybot S&D, Super
> > AntiSpyware, AdAware 2007. Also do weekly updates with
> > SpywareBlaster. I do scheduled defrag every night with Diskeeper.
> > I've struggled with these issues for months. Hope someone can help:
> > Symptoms: 1) Right Clicking on files or folders in Windows Explorer
> > requires about 30 seconds for the context menu to visualize and then
> > 10 seconds more for any chosen action to occur. Sometimes the context
> > menu doesn't visualize at all and the entire Windows Explorer
> > interface does a "whiteout." 2) Highlighting a file or folder and
> > selecting 'Edit' dropdown menu has same symptoms as #1 above.
> > 3) Deleting a file takes 20-30 seconds.
> > 4) Internet Explorer 7 takes painfully long (30 seconds to a minute)
> > to initialize and it takes about 20-30 seconds for new tabs to
> > initialize. By contrast Firefox 3 Beta 2 initializes fast and renders
> > fast. Within Windows Explorer I disable the 'Automatically search for
> > network drives and printers' and in System properties have chosen
> > 'Best performance' option. All other programs on my computer are
> > running without any issues including Windows Media Player 11.
> > Here's what I've done so far without fixing the problems:
> > 1) Ran HijackThis and verified everything is clean
> > 2) Ran ShellExView and selectively disabled items one-at-a-time and
> > then disabled everything which wasn't native to XP
> > 3) Uninstalled IEPro plugin
> > 3) Uninstalled/reinstalled IE 7
> > 4) Performed a Windows XP Repair
> > 5) From time to time historically, the svchost 100% CPU issue has
> > kicked in (not in a long time though). When it does I use this script:
> > et stop WuAuServ
> > net stop bits
> > taskkill /f /im wuauclt.exe
> > sc config WuAuServ type= own start= auto error= normal obj=
> > LocalSystem
> > sc config BITS type= own start= auto error= normal obj= LocalSystem
> > sc config wudfsvc start= disabled
> > REGSVR32 WUAPI.DLL /s-
> > REGSVR32 WUAUENG.DLL /s-
> > REGSVR32 WUAUENG1.DLL /s-
> > REGSVR32 ATL.DLL /s-
> > REGSVR32 WUCLTUI.DLL /s-
> > REGSVR32 WUPS.DLL /s-
> > REGSVR32 WUPS2.DLL /s-
> > REGSVR32 WUWEB.DLL /s-
> > if exist %windir%\SDpld rd %windir%\SDOld /S /Q
> > ren %windir%\SoftwareDistribution SDOld
> > net start WuAuServ
> > net start bits
> >
> > Here is a hijackthis log:
> >
> > Logfile of Trend Micro HijackThis v2.0.2
> > Scan saved at 5:21:21 PM, on 1/17/2008
> > Platform: Windows XP SP2 (WinNT 5.01.2600)
> > MSIE: Internet Explorer v7.00 (7.00.6000.16574)
> > Boot mode: Normal
> >
> > Running processes:
> > C:\WINDOWS\System32\smss.exe
> > C:\WINDOWS\system32\winlogon.exe
> > C:\WINDOWS\system32\services.exe
> > C:\WINDOWS\system32\lsass.exe
> > C:\WINDOWS\system32\svchost.exe
> > C:\WINDOWS\System32\svchost.exe
> > C:\WINDOWS\Explorer.EXE
> > C:\WINDOWS\system32\ZoneLabs\vsmon.exe
> > C:\WINDOWS\system32\spoolsv.exe
> > C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
> > D:\Program Files\APC PowerChute Personal Edition\mainserv.exe
> > C:\WINDOWS\system32\svchost.exe
> > D:\Program Files\Diskeeper\DkService.exe
> > C:\WINDOWS\System32\svchost.exe
> > D:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe
> > C:\WINDOWS\system32\slserv.exe
> > D:\Program Files\Sophos\AutoUpdate\ALsvc.exe
> > C:\WINDOWS\system32\svchost.exe
> > D:\Program Files\UPHClean\uphclean.exe
> > D:\Program Files\InkSaver\InkSaver.exe
> > C:\WINDOWS\vsnpstd.exe
> > C:\Program Files\Microsoft IntelliPoint\ipoint.exe
> > D:\Program Files\ZoneAlarm\zlclient.exe
> > C:\WINDOWS\system32\devldr32.exe
> > C:\WINDOWS\system32\RUNDLL32.EXE
> > C:\Program
> > Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
> > D:\Program Files\Wallpaper Master\Wallpaper.exe
> > D:\Program Files\Sophos\AutoUpdate\ALMon.exe
> > D:\Program Files\DeltaCrypt\DTITray.exe
> > D:\Program Files\Desktop Calendar\Desktop Calendar.exe
> > C:\Program Files\Common File
XP Performance Issue 