Laptop is Very Slow

FastEddie57 · August 21, 2012

Hi,

My daughter's laptop is very slow. It takes forever to load up and open IE. It also takes forever to move from webpage to webpage.

I installed AVG and updated the definitions. I did a complete scan and it found no threats. I installed Malwarebytes and did a quick scan and it found nothing. I ran a full scan on malwarebytes during the night and it didn't complete the scan. The labtop seemed to be frozen. I had to do a manual shut down. I started in in safemode and while in safe mode it is much much faster.

I cannot update windows. It just freezes up. I attempted to install Microsoft Security Essentials, but I was not able to install

I did a disk cleanup and also ran cw shreddar and spybot and they found nothing.

The OS is Vista with SP2. Any suggestions it.on how to fix this are appreciated.

Thanks

Eddie

Tarun · August 21, 2012

It sounds like there's some service or process attempting to run during the normal Windows boot that is causing issues. Process Explorer may help to identify which one may be experiencing a memory leak.

You could also do the following. Post a HijackThis log and a log from CCleaner of all installed applications. The reason for the CCleaner list is that some apps may be able to be removed to help improve performance or could be identified as a known problematic software.

greenknight · August 21, 2012

Was she running any antivirus before you installed AVG?

FastEddie57 · August 22, 2012

It sounds like there's some service or process attempting to run during the normal Windows boot that is causing issues. Process Explorer may help to identify which one may be experiencing a memory leak.

You could also do the following. Post a HijackThis log and a log from CCleaner of all installed applications. The reason for the CCleaner list is that some apps may be able to be removed to help improve performance or could be identified as a known problematic software.

Thanks for the reply.

When I ran the HiJackThis program I got the following message:

"For some reason your system denied write access to the Hosts file. If any hijacked domain are in the file, Hijackthis may not be able to fix this. If this happens you need to add the file yourself. To do this click start, Run and type: notepad C:Windowssystem32diveretchosts and press enter. Find the line(s) HiJackThis reports and delete them. Save the file as 'hosts.' (with quotes), and reboot.

For Vista: simply, exit HiJackThis, right click on the HijackThis icon and choose run as administrator.

I didn't have the option to run as "administrator so I enabled in built-in administrator account and then finally was able to run HJT.

I have posted the HJT log as well as the CCleaner application list.

In regards to the 2nd reply on whether there was an antivirus previously, yes, but it was expired and not working.

Also, I was able to update windows. I disabled all startup items to make it work. Didn't help. It is still super slow. Starts up slow and freezes a lot. Most programs give me the message "not responding". Not much fun working with a slow PC.

Any suggestions are appreciated.

HIJACKTHIS Log....

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 8:53:22 PM, on 8/21/2012

Platform: Windows Vista SP2 (WinNT 6.00.1906)

MSIE: Internet Explorer v9.00 (9.00.8112.16448)

Boot mode: Normal

Running processes:

C:Windowssystem32Dwm.exe

C:Windowssystem32taskeng.exe

C:WindowsExplorer.EXE

C:Windowssystem32wuauclt.exe

C:Program FilesInternet Exploreriexplore.exe

C:Program FilesTrend MicroHiJackThisHiJackThis.exe

C:Windowssystem32SearchProtocolHost.exe

C:Windowssystem32SearchFilterHost.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop

R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop

R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop

R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =

R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =

R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll

O2 - BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:Program FilesAVGAVG2012avgdtiex.dll

O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:Program FilesAVG Secure Search12.2.0.5AVG Secure Search_toolbar.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre6binjp2ssv.dll

O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:Program FilesAVG Secure Search12.2.0.5AVG Secure Search_toolbar.dll

O4 - HKLM..RunOnce: [Launcher] %WINDIR%SMINSTlauncher.exe

O4 - HKCU..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter

O4 - HKUSS-1-5-19..Run: [sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User 'LOCAL SERVICE')

O4 - HKUSS-1-5-19..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')

O4 - HKUSS-1-5-20..Run: [sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User 'NETWORK SERVICE')

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:PROGRA~1MICROS~3Office12ONBttnIE.dll

O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:PROGRA~1MICROS~3Office12ONBttnIE.dll

O9 - Extra button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:Program FilesAVGAVG2012avgdtiex.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~3Office12REFIEBAR.DLL

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:Program FilesAVGAVG2012avgpp.dll

O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:Program FilesCommon FilesAVG Secure SearchViProtocolInstaller12.2.0ViProtocol.dll

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:Windowssystem32browseui.dll

O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:Program FilesHewlett-PackardHP Quick Launch ButtonsAddFiltr.exe

O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:Program FilesAVGAVG2012avgidsagent.exe

O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:Program FilesAVGAVG2012avgwdsvc.exe

O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:Program FilesHPQuickPlayKernelTVCLCapSvc.exe

O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:Program FilesHPQuickPlayKernelTVCLSched.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:Program FilesCommon FilesSymantec SharedccSvcHst.exe (file missing)

O23 - Service: HP Health Check Service - Hewlett-Packard - C:Program FilesHewlett-PackardHP Health Checkhphc_service.exe

O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:Program FilesHewlett-PackardSharedhpqwmiex.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesRoxioRoxio MyDVD Basic v9InstallShieldDriver1050Intel 32IDriverT.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:Program FilesCommon FilesLightScribeLSSrvc.exe

O23 - Service: McciCMService - Alcatel-Lucent - C:Program FilesCommon FilesMotiveMcciCMService.exe

O23 - Service: RoxMediaDB9 - Sonic Solutions - C:Program FilesCommon FilesRoxio Shared9.0SharedCOMRoxMediaDB9.exe

O23 - Service: stllssvr - MicroVision Development, Inc. - C:Program FilesCommon FilesSureThing Sharedstllssvr.exe

O23 - Service: vToolbarUpdater12.2.0 - Unknown owner - C:Program FilesCommon FilesAVG Secure SearchvToolbarUpdater12.2.0ToolbarUpdater.exe

O23 - Service: XAudioService - Conexant Systems, Inc. - C:Windowssystem32DRIVERSxaudio.exe

--

End of file - 5966 bytes

CCleaner Applications

Activation Assistant for the 2007 Microsoft Office suites Microsoft Corporation 9/2/2009 13.5 MB

Adobe Flash Player 10 ActiveX Adobe Systems Incorporated 1/8/2011 10.1.102.64

Adobe Flash Player 10 Plugin Adobe Systems Incorporated 10/4/2009 10.0.32.18

Adobe Reader 8 Adobe Systems Incorporated 9/9/2008 77.0 MB 8.0.0

AVG 2012 AVG Technologies 8/19/2012 111 MB 2012.0.2197

CCleaner Piriform 7/24/2012 4.82 MB 3.21

CleanUp! 8/19/2012 580 KB

Conexant HD Audio 9/9/2008 708 KB

DivX DivXNetworks, Inc. 9/2/2009 324 KB 5.2.1

HiJackThis Trend Micro 8/21/2012 368 KB 1.0.0

HP Connections (remove only) 9/2/2009 15.3 MB

HP Customer Experience Enhancements Hewlett-Packard 9/9/2008 1.00.0000

HP Easy Setup - Core Hewlett-Packard 9/9/2008 1.02 MB 1.00.0000

HP Easy Setup - Frontend Hewlett-Packard 9/9/2008 1.83 MB 5.00.0000

HP Help and Support Hewlett-Packard 9/9/2008 20.9 MB 1.0.0

HP Quick Launch Buttons 6.10 B9 Hewlett-Packard 9/9/2008 13.9 MB 6.10 B9

HP QuickPlay 3.0 9/2/2009 6.94 MB

HP Total Care Advisor Hewlett-Packard 9/9/2008 24.4 MB 1.0.94

HP Update Hewlett-Packard 9/9/2008 3.56 MB 4.000.005.007

HP Wireless Assistant Hewlett-Packard 9/9/2008 3.75 MB 3.00 B2

HPNetworkAssistant Hewlett-Packard. 9/9/2008 17.6 MB 1.1.70

Java 6 Update 23 Oracle 10/11/2010 94.8 MB 6.0.230

Java SE Runtime Environment 6 Sun Microsystems, Inc. 9/9/2008 114 MB 1.6.0.0

Malwarebytes Anti-Malware version 1.62.0.1300 Malwarebytes Corporation 8/19/2012 11.8 MB 1.62.0.1300

Microsoft .NET Framework 3.5 SP1 Microsoft Corporation 10/11/2009 27.8 MB

Microsoft .NET Framework 4 Client Profile Microsoft Corporation 10/27/2010 120 MB 4.0.30319

Microsoft Office File Validation Add-In Microsoft Corporation 8/21/2012 7.91 MB 14.0.5130.5003

Microsoft Office Home and Student 2007 Microsoft Corporation 8/21/2012 306 MB 12.0.6612.1000

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 7/9/2010 590 KB 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Corporation 8/21/2012 594 KB 9.0.30729.6161

Microsoft Works Microsoft Corporation 1/8/2011 265 MB 08.05.0818

MSXML 4.0 SP2 (KB954430) Microsoft Corporation 10/11/2009 1.27 MB 4.20.9870.0

MSXML 4.0 SP2 (KB973688) Microsoft Corporation 7/8/2010 1.33 MB 4.20.9876.0

muvee autoProducer 5.0 muvee Technologies 9/2/2009 111 MB 5.00.050

My HP Games WildTangent 9/2/2009 809 MB HPLAP0304

NVIDIA Drivers 9/9/2008

Roxio Creator Audio Roxio 9/9/2008 1.11 MB 3.3.0

Roxio Creator Basic v9 Roxio 9/9/2008 21.3 MB 3.3.0

Roxio Creator Copy Roxio 9/9/2008 632 KB 3.3.0

Roxio Creator Data Roxio 9/9/2008 876 KB 3.3.0

Roxio Creator EasyArchive Roxio 9/9/2008 1.49 MB 3.3.0

Roxio Creator Tools Roxio 9/9/2008 345 KB 3.3.0

Roxio Express Labeler 3 Roxio 9/9/2008 16.2 MB 2.1.0

Roxio MyDVD Basic v9 Roxio 9/9/2008 293 MB 9.0.114

Soft Data Fax Modem with SmartCP 9/9/2008 680 KB

SpywareBlaster 4.6 Javacool Software LLC 8/19/2012 5.48 MB 4.6.0

Synaptics Pointing Device Driver Synaptics 9/9/2008 12.7 MB 9.0.1.5

Tarun · August 22, 2012

Run HijackThis again as Administrator and post the new log. It looks like a lot of the processes that would normally be shown are hidden. If Java is not necessary, you may want to uninstall it. If it's needed, uninstall it temporarily.

FastEddie57 · August 22, 2012

Run HijackThis again as Administrator and post the new log. It looks like a lot of the processes that would normally be shown are hidden. If Java is not necessary, you may want to uninstall it. If it's needed, uninstall it temporarily.

The HJT log above was run under the administrator account. Do you want me to run it again?

FastEddie57 · August 23, 2012

I removed the JAVA programs and and a bunch of other programs that were not needed.

I ran the HijackThis program again and these are the results

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 8:21:11 PM, on 8/22/2012

Platform: Windows Vista SP2 (WinNT 6.00.1906)

MSIE: Internet Explorer v9.00 (9.00.8112.16448)

Boot mode: Normal

Running processes:

C:Windowssystem32taskeng.exe

C:Windowssystem32Dwm.exe

C:WindowsExplorer.EXE

C:Program FilesHPHP Software Updatehpwuschd2.exe

C:Program FilesAVGAVG2012avgtray.exe

C:Program FilesInternet Exploreriexplore.exe

C:Program FilesTrend MicroHiJackThisHiJackThis.exe

C:Windowssystem32SearchFilterHost.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop

R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop

R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop

R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =

R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =

R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll

O2 - BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:Program FilesAVGAVG2012avgdtiex.dll

O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:Program FilesAVG Secure Search12.2.0.5AVG Secure Search_toolbar.dll

O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:Program FilesAVG Secure Search12.2.0.5AVG Secure Search_toolbar.dll

O4 - HKLM..Run: [HP Software Update] C:Program FilesHpHP Software UpdateHPWuSchd2.exe

O4 - HKLM..Run: [AVG_TRAY] "C:Program FilesAVGAVG2012avgtray.exe"