[Buzzinator]

(XP Home Ed./SP3)

I've been experiencing some insane freezes lately. This is especially common when I try to run an application close to start-up, but it also happens a few hours after that. I honestly have no idea what is going on, I've already tried disk cleanup, scanning for viruses and what-not, and so on. However, I find that there are some specific moments where this happens as well:

a. During Firefox, especially when I am prompted about an unresponsive script.
b. During a MMORPG I play, whenever I go up/down a floor.

As well, I've found that a lot of the processes are eating up way too much memory. Here's a snapshot:


I can understand Firefox and what-not eating up high memory, but the rest of those are way too high and it's affecting the way I can use some of my programs. I'm hoping it's a simple solution, because it's driving me nuts.

No idea where my specs are found on this site, but here they are:
OS Version: Microsoft Windows XP Home Edition, Service Pack 3, 32 bit
Processor: Intel(R) Pentium(R) D CPU 2.80GHz, x86 Family 15 Model 4 Stepping 4
Processor Count: 2
RAM: 2046 Mb
Graphics Card: NVIDIA GeForce 7300 LE, 256 Mb
Hard Drives: H: Total - 953859 MB, Free - 911071 MB;
Motherboard: ASUSTek Computer INC., EMERY, 1.05, MB-1234567890
Antivirus: None

And a last question... I have Windows Security Essentials installed but Windows can never pick it up, how do I fix this problem?

Thanks in advance.

[Phantom010]

Please click here to download and install HijackThis.

Run it and select Do a system scan and save a logfile from the Main Menu.

The log will be saved in Notepad. Copy and paste the log in your next post.

Do not fix anything

[Buzzinator]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:35:56 PM, on 9/5/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17080)
Boot mode: Normal

Running processes:
H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\WINDOWS\system32\svchost.exe
h:\Program Files\Microsoft Security Essentials\MsMpEng.exe
H:\WINDOWS\System32\svchost.exe
H:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
H:\WINDOWS\system32\spoolsv.exe
H:\WINDOWS\Explorer.EXE
H:\WINDOWS\RTHDCPL.EXE
H:\Program Files\Common Files\Java\Java Update\jusched.exe
H:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
H:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
H:\Program Files\Microsoft Security Essentials\msseces.exe
H:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
H:\Program Files\Windows Live\Messenger\msnmsgr.exe
H:\WINDOWS\system32\rundll32.exe
H:\Program Files\Messenger\msmsgs.exe
H:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
H:\Program Files\Greenshot\Greenshot.exe
H:\Program Files\LSI SoftModem\agrsmsvc.exe
H:\Program Files\Bonjour\mDNSResponder.exe
H:\Program Files\LogMeIn Hamachi\hamachi-2.exe
H:\Program Files\Java\jre6\bin\jqs.exe
H:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
H:\WINDOWS\system32\nvsvc32.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\system32\wscntfy.exe
H:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
H:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
H:\Program Files\Windows Live\Contacts\wlcomm.exe
H:\Program Files\Tibia\Tibia.exe
H:\Program Files\Mozilla Firefox\firefox.exe
H:\Program Files\Mozilla Firefox\plugin-container.exe
H:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - H:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - H:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - H:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - H:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE H:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [SunJavaUpdateSched] "H:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "H:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "H:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "H:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "H:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "H:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "H:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [MSSE] "h:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [SUPERAntiSpyware] H:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [msnmsgr] "H:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "H:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Logitech Vid] "H:\Program Files\Logitech\Logitech Vid\vid.exe" -bootmode
O4 - S-1-5-18 Startup: Captus.lnk = H:\Program Files\Softario\Captus\Captus.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: Greenshot.lnk = H:\Program Files\Greenshot\Greenshot.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: Logitech . Product Registration.lnk = H:\Program Files\Logitech\Logitech WebCam Software\eReg.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: OpenOffice.org 3.1.lnk = H:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: Captus.lnk = H:\Program Files\Softario\Captus\Captus.exe (User 'Default user')
O4 - .DEFAULT Startup: Greenshot.lnk = H:\Program Files\Greenshot\Greenshot.exe (User 'Default user')
O4 - .DEFAULT Startup: Logitech . Product Registration.lnk = H:\Program Files\Logitech\Logitech WebCam Software\eReg.exe (User 'Default user')
O4 - .DEFAULT Startup: OpenOffice.org 3.1.lnk = H:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'Default user')
O4 - Startup: Captus.lnk = H:\Program Files\Softario\Captus\Captus.exe
O4 - Startup: Greenshot.lnk = H:\Program Files\Greenshot\Greenshot.exe
O4 - Startup: Logitech . Product Registration.lnk = H:\Program Files\Logitech\Logitech WebCam Software\eReg.exe
O4 - Startup: OpenOffice.org 3.1.lnk = H:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Run Nintendo Wi-Fi USB Connector Registration Tool.lnk = H:\Program Files\WiFiConnector\NintendoWFCReg.exe
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - H:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - H:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - H:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/Messen.../GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1257211239936
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab
O20 - Winlogon Notify: !SASWinLogon - H:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - H:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - H:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - H:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - H:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: iPod Service - Apple Inc. - H:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - H:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - H:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - H:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - H:\WINDOWS\system32\nvsvc32.exe

--
End of file - 8164 bytes

[Phantom010]

You have too many Startup applications loading with Windows. This can significantly increase your Startup time and affect overall performance.

Please download and run Autoruns.

Click on Options.

Put a check mark on Hide Microsoft and Windows Entries.

Hit the F5 key to refresh your page.

Only non-Microsoft applications will be showing.

Select the Logon tab and uncheck the following items:

RTHDCPL

Alcmtr

NvCplDaemon

nwiz

SunJavaUpdateSched

LogitechQuickCamRibbon

Adobe Reader Speed Launche

Adobe ARM

QuickTime Task

msnmsgr

MSMSGS

Logitech Vid

Logitech . Product Registration.lnk

OpenOffice.org 3.1.lnk


Other than your antivirus, firewall and Internet connectivity service, the Startup Type on most of your non-Microsoft Services (from programs YOU have installed), can be changed from Automatic to Manual. This will reduce the amount of processes running in the background and speed up your computer.

Do not worry about making the wrong choices. If some programs aren't running properly when their Service's Startup Type is set to Manual, everything can be restored to the way it was before, following the same procedure. There isn't any risk involved.

Run Autoruns again (with a check mark on Hide Microsoft and Windows Entries).

Select the Services tab.

Only non-Microsoft services will be showing.

Right-click on any service.

Click on Jump to...

You will now be at the exact registry key for that service.

In the right-hand pane, look at the DWORD Start.

The last number at the end of the entry will be either:

(0) for Boot.

(1) for System.

(2) for Automatic.

(3) for Manual.

(4) for Disabled.

If you want to change the value, double-click on Start and change the number accordingly.


Reboot the computer.

[Buzzinator]

Thanks, it seems to have improved my performance. I'll see how it goes over the next 24 hours. I do have another question though, is it normal for so many non-Windows related processes to be in the 5-digit memory usage area?

[Phantom010]

Yes, it's normal, depending on the programs.

[Buzzinator]

Alright, so it's nearly been 24 hours, and performance in general is much better. I believe that the source of what (temporary) freezes I have now is coming my from Firefox browser, especially when I go to sites where the plugin-container.exe reaches as high as 350, 000 K memory usage. These are sites that would normally run fine. Any fix for this?

[Phantom010]

The plugin-container.exe process is known to cause this behavior. What's your version of Firefox?

[Buzzinator]

Version 3.6.8.