[Erazen]

Hello guys,

Over the past several months my computer has become very slow in terms of start-up.

Start-up generally takes in excess 5-7 minutes. I have already removed a large portion of programs from start-up, but the start-up time is still considerable.

In addition, my computer also makes an error noise during start-up, but no error prompt appears.

Below are my pc specs:

Age: Approx. 2-3 years old
OS: Windows XP Professional (v2002) SP3
CPU: Intel Core 2 CPU 6300 @ 1.86 GHZ
RAM: 0.99 GB
HDD: Standard 40 GB (C: ) drive for programs with 21.6GB free
Standard 182 GB (D: ) drive for data with 132 GB free

Below is my HijackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:55:58, on 14-10-2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\Update\1.2.183.7\GoogleCrashHandler.exe
C:\WINDOWS\system32\jwpen.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe
C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\HWKeyPlus.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\Acrobat_sl.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.ninemsn.com.au
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ninemsn.com.au/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: MSN Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: MSN Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [HWTablet KeyPlus] C:\WINDOWS\system32\HWKeyPlus.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Google Update Service (gupdate1c985f74130d84a) (gupdate1c985f74130d84a) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HWSuperPowerTablet - HanWang - C:\WINDOWS\system32\jwpen.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Symantec Management Client (SmcService) - Symantec Corporation - C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
O23 - Service: Symantec Network Access Control (SNAC) - Symantec Corporation - C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE
O23 - Service: Symantec Endpoint Protection (Symantec AntiVirus) - Symantec Corporation - C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
--
End of file - 10240 bytes

Any suggestion will be greatly appreciated.

Thanks,

Erazen

[Saga Lout]

There are issues in your log but it needs to go to the Malware and HJT Logs forum for best advice so I'll click on Report when I post this to ask the Mods to move it for you. That error sound could be a memory stick showing signs of problems. If that 1Gb of RAM is made up of two sticks, you might try removing one stick to see if it improves matters. If it doesn't, pop it back and withdraw the other.

[Rollin' Rog]

I'm going to move this back, at-least for the time being, since I don't see any malware there -- and treat it as a "performance" issue.

Please answer any questions below which you have not already answered -- also can you describe the "error" sound you hear?

Review item 6 in the list below with particular attention.

And do you see any repeating error messages in the Event Viewer (run: eventvwr.msc) and look at both the system and applications logs.

For any repeating error, double click it to read the description, and use the double-paper copy icon to copy it to a reply here. Just do a select few of these.

Look in particular for "Disk" errors in the system log which might indicate bad blocks on the drive.


PERFORMANCE QUESTIONS:

0 > when did the problem seem to be begin?
1 > is it very slow to boot up?
2 > do programs open slowly?
3 > does the same behavior occur both on and off the internet. Or with no connection at all?
4 > does it matter how long the system has been on, and does a restart improve things?

Slow performance issues can often be due to overheating, so if the system is faster after it has been shutdown for a while and then restarted -- that would be especially suspect. To check for possible problems here, shutdown, open the case and blow out any accumulated dust. Then turn it
on and check to see that the fan is working. Sometimes it helps to physically clean the fan.

If a laptop, check to see that the vent is clear of dust and verify the fan is working. Temps and fan speed can usually be monitored with SpeedFan (except on Dell desktops), a free utility.

5 > if you do a ctrl-alt-del, do any processes show excess cpu usage, other than System Idle Process?

6 > If you open the Device Manager (run devmgmt.msc) and select the entry for IDE ATA/Atapi and select the Primary IDE > Advanced Settings, does it say the "current transfer mode" is Ultra DMA or PIO?

If it says PIO or even just DMA (rather than “ULTRA” DMA, first ensure "Use DMA if Available” is selected, then select the driver tab and uninstall the driver and reboot. Then check again.

Alternately you can run the script on this page >> http://winhlp.com/node/10

*note that the above will not apply to RAID drive configurations.
___________________________________________________________________________ _
COMMIT CHARGE

Do ctrl-alt-del to open up the task manager. Select the "performance" tab. Let me know what you see under:

Physical Memory

Total: this is your total installed ram -- "physical" memory
Available: this is the amt of real "physical" memory presently uncommitted

Commit Charge

Total: this is the combination of total physical and virtual memory currently in use
Limit: this is the total physical and virtual memory available
Peak: this is the most you have had in use in this session

[Erazen]

Thanks in advance

The error sound is the deep, blunt sound associated with the red-circle-white-X error messages.

I ran event viewer as you requested. In system, I noticed the following:

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 15-10-2009
Time: 20:04:42
User: N/A
Computer:
Description:
The BDVEDISK service failed to start due to the following error:
The system cannot find the path specified.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 15-10-2009
Time: 20:04:42
User: N/A
Computer:
Description:
The HYRDBios service failed to start due to the following error:
The system cannot find the file specified.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 15-10-2009
Time: 20:04:50
User: N/A
Computer:
Description:
The following boot-start or system-start driver(s) failed to load:
DumaNT
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: BROWSER
Event Category: None
Event ID: 8021
Date: 15-10-2009
Time: 20:06:09
User: N/A
Computer:
Description:
The browser was unable to retrieve a list of servers from the browser master \\ <INSERT NAME OF OTHER COMPUTER> on the network \Device\NetBT_Tcpip_{8B45042A-C954-447C-AA4D-9F514C0D79F9}. The data is the error code.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 35 00 00 00 5...


Event Type: Error
Event Source: BROWSER
Event Category: None
Event ID: 8032
Date: 15-10-2009
Time: 20:09:33
User: N/A
Computer:
Description:
The browser service has failed to retrieve the backup list too many times on transport \Device\NetBT_Tcpip_{8B45042A-C954-447C-AA4D-9F514C0D79F9}. The backup browser is stopping.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 35 00 00 00 5...

I did not notice any "Disk" errors in the system log of events.

In Application, I noticed the following:

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 15-10-2009
Time: 20:02:48
User: NT AUTHORITY\SYSTEM
Computer:
Description:
Windows saved user <INSERT NAME OF MY COMPUTER>\User registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: SQLBrowser
Event Category: None
Event ID: 3
Date: 15-10-2009
Time: 20:04:29
User: N/A
Computer:
Description:
The configuration of the AdminConnection\TCP protocol in the SQL instance SQLEXPRESS is not valid.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: EvntAgnt
Event Category: None
Event ID: 1003
Date: 15-10-2009
Time: 20:04:40
User: N/A
Computer:
Description:
TraceFileName parameter not located in registry; Default trace file used is .
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: EvntAgnt
Event Category: None
Event ID: 1015
Date: 15-10-2009
Time: 20:04:40
User: N/A
Computer:
Description:
TraceLevel parameter not located in registry; Default trace level used is 32.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

I noticed that a lot of the entries were sourced from MS SQL Express. What is this application, and what is it for?

PERFROMANCE QUESTIONS - ANSWERS:

0 > Problem began months ago. It seemed to creep up on me, although it may have been as slow then as it is now and I dismissed it as being something tolerable.

On that note, I'm wondering if using Symantec as an anti-virus program is the main reason (or at least one of the main reasons) for the slow-computer problem, as it may have began around the time I (or rather, we) switched to Symantec. I don't exactly remember warming up to the change either.

1 > It doesn't take long to boot up at all, taking about 0.5-1 min to reach the windows desktop. It's start-up that's taking ages - 5-7 mins.

2 > Programs open really slowly during the first 5-7 mins. After that, they open normally within seconds and taking at most 0.5-1min to open if it's a larger application.

3 > Same behaviour occurs even when I tried to boot with the internet cable disconnected.

4 > The system operating speed is consistent over any period of time after start-up (However, if I left Internet Explorer or some game open and unchecked, a great deal of memory leaks occur such that they may take up >100,000 K of memory usage. I guess that's a different issue altogether though).

5 > Processes that show excess usage are:

iexplore.exe (User but not initiated at start-up; ~70,000K)
msnmsgr.exe (User, automatic; varies during startup from 20,000-60,000K; when stabilised after startup it takes ~30,000K)
rtvscan.exe (User, automatic; varies during startup from 12,000-90,000K; When stabilised after startup it takes ~8,000K)
sqlservr.exe (System, ~30,000K)
svchost.exe (System, 8 processes, varying totalling ~80,000K with the highest at 30,000K)

6 > I checked the IDE and ran the script. There were no PIO settings.

COMMIT CHARGE

Physical Memory

Total 1,038,236
Available ~540,000
System Cache ~365,000

Commit Charge

Total ~ 464,000
Limit 2,500,532
Peak 963,424

Other info not requested but may be helpful:

Totals

Handles ~14,550
Threads ~970
Processes 41

Kernel Memory

Total ~180,000
Paged ~134,500
Non-paged ~45,000

Thanks again.

[flavallee]

Make use of this site to research the "Startup Item" list in Start - Run - MSCONFIG - OK - Startup(tab). I see several of them that don't need to automatically load and run.

----------------------------------------------------------------

Also, these services in Start - Run - SERVICES.MSC - OK can be changed from Automatic to Manual.

Google Update Service
Google Software Updater
Java Quick Starter
NVIDIA Display Driver Service
Viewpoint Manager Service

---------------------------------------------------------------

[Rollin' Rog]

BDVEDISK relates to "Bit Defender" which you seem to have uninstalled; although the error exists I don't think it is a source of problems and would likely be a diversion to address now.

HYRDBios looks to be related to your tablet; you may need to reinstall that, or uninstall it if not critical -- I don't know how much of an issue it is in your problems.

Event Source: Userenv
Event Category: None
Event ID: 1517

There is a "fix" for this, and it could be helpful since you may have incomplete or corrupt user data without it

See this >>

http://www.microsoft.com/downloads/d...displaylang=en

The rest seem inconsequential to me.

For item 5 it is the CPU usage that I am looking for, not Memory usage.

Personally I would recommend a less resource hogging Antivirus program than Symantec. I like the free version of Avast myself.

I noticed that a lot of the entries were sourced from MS SQL Express. What is this application, and what is it for?

C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

http://www.google.com/search?client=...utf-8&oe=utf-8

You have a server configuration installed here; note that this will NOT be disabled using the "Clean Boot" instructions below, since it is a Microsoft application. But if you have to ask what it is, you should probably uninstall it through Add/Remove programs. Disabling it is a bit tricky.

You may find "clean boot" troubleshooting helpful >>

Run msconfig and select the "Services" tab. Check "Hide Microsoft Services" and then disable the rest. Also uncheck "load startup items" on the general page.


Now restart and test the issue at hand

If no problems, run msconfig and recheck half the disabled items on the Services tab. Test again. If the problem recurs, UNcheck half the items you just checked to narrow down the culprit.

If the problem didn't occur, check the other half, so all the Services are enabled -- proceed to do this on the startup tab as well.

Get the idea? You want to isolate the problem to a specific startup if possible.

Note: if you already have items unchecked under msconfig > startups and are in “selective” startup mode – you should note what these are before beginning. They will need to be de-selected again.


http://support.microsoft.com/kb/929135/en-us >> writen for Vista but applies just as well to XP

[Erazen]

Problem solved!

Problem: Slow start-up
Reason: Symantec Antivirus is a resource hog (confirmed using the clean boot method)
Solution: Switch from Symantec to Avast! Antivirus
Result: Start-up time is reduced dramatically to 1-1.5 min, about a fifth of what it was before (5-7 mins).

In addition, I've cleaned up a lot of my system of unnecessary clutter, although it is by no means perfectly clean. Other actions taken that did not necessarily fix the problem but contributed to a healthier system included:

- Removal of Microsoft SQL Server, freeing up ~300MB
- Removal of unused programs, freeing up ~600MB
- Disabled unnecessary services and further start-up services
- Fixed the HYRDBios error by uninstalling the tablet driver (no longer needed)
- Fixed the Userenv error by using the User Profile Hive Cleanup Service
- Cleaned up my registry

Although I still have one unresolved problem: the mysterious error sound. But for now, that will have to wait another day.


More importantly...


To all contributers, especially to Rollin' Rog: Thank you for your kind assistance!

[Rollin' Rog]

You're welcome -- the bugger came with my Vista/Acer desktop and when I installed it it doubled the boot-up time -- lol

I guess things haven't changed.