1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

PC Slowdown

Discussion in 'Windows XP' started by RPhox, Feb 12, 2003.

Thread Status:
Not open for further replies.
Advertisement
  1. RPhox

    RPhox Thread Starter

    Joined:
    Apr 21, 2001
    Messages:
    140
    It seems like the longer I leave my pc running - the slower it gets. If I leave it on overnite for downloading, in the morning I can click on a icon a wait for over a minute for a program (such as outlook) to open. Even if I click on Start it takes forever for the menu to appear.

    Any ideas?

    Thanks,
    RFox

    Pentium III 600
    256 MB RAM
    Windows XP Pro
    Voodoo 3 Video Card
     
  2. kknla

    kknla

    Joined:
    Jan 19, 2001
    Messages:
    257
  3. RPhox

    RPhox Thread Starter

    Joined:
    Apr 21, 2001
    Messages:
    140
    StartupList report, 2/12/2003, 10:43:51 PM
    StartupList version: 1.51
    Started from : C:\Documents and Settings\Main\DownLoads\StartupList.EXE
    Detected: Windows XP (WinNT 5.01.2600)
    Detected: Internet Explorer v6.00 (6.00.2600.0000)
    * Using default options
    ==================================================

    Running processes:

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Winamp\Winampa.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\3dhq Tools\v_ctrl.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
    C:\WINDOWS\System32\msbb.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Documents and Settings\Main\DownLoads\FreeRAM XP Pro 1.22.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zapro.exe
    C:\WINDOWS\System32\ZoneLabs\vsmon.exe
    C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
    C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
    C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ZONELABS\minilog.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\WinMX\WinMX.exe
    C:\WINDOWS\System32\taskmgr.exe
    C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE
    C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\Main\DownLoads\StartupList.exe

    --------------------------------------------------

    Listing of startup folders:

    Shell folders Common Startup:
    [C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
    Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    ZoneAlarm Pro.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zapro.exe

    --------------------------------------------------

    Checking Windows NT UserInit:

    [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    UserInit = C:\WINDOWS\system32\userinit.exe,

    --------------------------------------------------

    Autorun entries from Registry:
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run

    WinampAgent = "C:\Program Files\Winamp\Winampa.exe"
    ccApp = C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    ccRegVfy = C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe
    xv_crtl = C:\Program Files\3dhq Tools\v_ctrl.exe
    EPSON Stylus C42 Series = C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P23 "EPSON Stylus C42 Series" /O6 "USB001" /M "Stylus C42"
    NeroCheck = C:\WINDOWS\system32\NeroCheck.exe
    msbb = C:\WINDOWS\System32\msbb.exe

    --------------------------------------------------

    Autorun entries from Registry:
    HKCU\Software\Microsoft\Windows\CurrentVersion\Run

    ctfmon.exe = C:\WINDOWS\System32\ctfmon.exe
    FreeRAM XP = "C:\Documents and Settings\Main\DownLoads\FreeRAM XP Pro 1.22.exe" -win

    --------------------------------------------------

    Enumerating ICQ Agent Autostart apps:
    HKCU\Software\Mirabilis\ICQ\Agent\Apps

    C:\Program Files\LingoCom\Lingoware.exe\

    --------------------------------------------------


    Enumerating Browser Helper Objects:

    (no name) - C:\WINDOWS\System32\FOne.dll - {000000F1-34E3-4633-87C6-1AA7A44296DA}
    (no name) - C:\WINDOWS\System32\lwz.dll - {00000EF1-34E3-4633-87C6-1AA7A44296DA}
    (no name) - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
    (no name) - (no file) - {665ACD90-4541-4836-9FE4-062386BB8F05}
    (no name) - C:\WINDOWS\System32\veg32.dll - {7DD896A9-7AEB-430F-955B-CD125604FDCB}
    NAV Helper - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll - {BDF3E430-B101-42AD-A544-FADC6B084872}

    --------------------------------------------------

    Enumerating Task Scheduler jobs:

    Symantec NetDetect.job
    Norton SystemWorks One Button Checkup.job
    Norton AntiVirus - Scan my computer.job

    --------------------------------------------------

    Enumerating Download Program Files:

    [Shockwave ActiveX Control]
    InProcServer32 = C:\WINDOWS\system32\Macromed\Director\SwDir.dll
    CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

    [HbInstObj Class]
    InProcServer32 = C:\Program Files\Hotbar\bin\HbInstIE.dll
    CODEBASE = http://installs.hotbar.com/installs/hotbar/programs/hotbar.cab

    [Update Class]
    InProcServer32 = C:\WINDOWS\System32\iuctl.dll
    CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37559.4504282407

    [HeartbeatCtl Class]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\hrtbeat.ocx
    CODEBASE = http://fdl.msn.com/zone/datafiles/heartbeat.cab

    [Shockwave Flash Object]
    InProcServer32 = C:\WINDOWS\System32\macromed\flash\Flash.ocx
    CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

    --------------------------------------------------
    End of report, 5,728 bytes
    Report generated in 0.561 seconds

    Command line options:
    /verbose - to add additional info on each section
    /complete - to include empty sections and unsuspicious data
    /full - to include several rarely-important sections
    /force9x - to include Win9x-only startups even if running on WinNT
    /forcent - to include WinNT-only startups even if running on Win9x
    /forceall - to include all Win9x and WinNT startups, regardless of platform
    /history - to list version history only
     
  4. kknla

    kknla

    Joined:
    Jan 19, 2001
    Messages:
    257
    Have you noticed the CPU being very active during this time? Or have you checked to see if certain processes are eating up your cpu? Norton speed disk is known to startup at bad times and eats about 80% of resorces up in the process. If you hold down CTRL + ALT and click DEL, it will open your task manager up. Look on the processes tab during a time when you are having a slow computer time like you described. Under the cpu colum, see if there is a process that is using a large amount of resorces. Maybe nopdb.exe, or it could also be Zonealarm. I did run into a problem once with the new zonealarm hogging about 90% of my cpu. Even after writting to zonelabs, I could not get it resolved. I was forced to change to a diff firewall.
     
  5. RPhox

    RPhox Thread Starter

    Joined:
    Apr 21, 2001
    Messages:
    140
    It's morning now and I've just check the CPU.

    It's running at 100%!!!!

    But the culprit seems to be VSMON.EXE. ZoneAlarm is using almost zilch.

    What can I do? (reboot is not a desired option)

    Thanks
    RFox
     
  6. kknla

    kknla

    Joined:
    Jan 19, 2001
    Messages:
    257
    VSMON.EXE is a Zonealarm process. I am off to school right now, but I will look into it a lil bit and see if I can find a solution. VSMON.exe is what monitors internet traffic and generates the alerts.
     
  7. kknla

    kknla

    Joined:
    Jan 19, 2001
    Messages:
    257
    I just came across something about it. Try disabling Mail Safe in ZA. It seems to conflict with antivirus software when they both are trying to scan mail. You do not need mail safe running if you have antivirus scanning you mail.
     
  8. The_Egg

    The_Egg

    Joined:
    Sep 16, 2002
    Messages:
    1,157
    Zone Alarm is busy for a reason.
    Basically, you've got some nasty spyware issues.

    Running processes
    C:\WINDOWS\System32\msbb.exe

    Autorun entries from Registry:
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run
    msbb = C:\WINDOWS\System32\msbb.exe

    http://www.pacs-portal.co.uk/startup_pages/startup_full.htm#M
    MSBB | msbb.exe | Advertising spyware


    I'm pretty certain that Lingoware is laden with spyware too:
    http://www.google.com/search?num=50&hl=en&lr=&ie=UTF-8&oe=UTF-8&q=ICQ+lingoware+spyware


    Enumerating Browser Helper Objects:

    (no name) - C:\WINDOWS\System32\FOne.dll
    (no name) - C:\WINDOWS\System32\lwz.dll
    http://www.doxdesk.com/parasite/FavoriteMan.html

    (no name) - C:\WINDOWS\System32\veg32.dll
    http://www.doxdesk.com/parasite/DailyWinner.html


    Enumerating Download Program Files:

    [HbInstObj Class]
    InProcServer32 = C:\Program Files\Hotbar\bin\HbInstIE.dll
    CODEBASE = http://installs.hotbar.com/installs/hotbar/programs/hotbar.cab

    http://www.google.com/search?num=50&hl=en&lr=&ie=UTF-8&oe=UTF-8&q=hotbar+spyware


    I strongly suggest you download and run
    Spybot Search and Destroy
    and get rid of all the spyware/parasiteware on your system.

    I also use Ad-Aware 6, because both programs pick up some spyware that the other one doesn't.

    Check Add/Remove Programs Control Panel before running Spybot/Ad-Aware. If any of those spyware apps have entries, remove them here first.

    Instructions for running Spybot S&D are here
    Read this first.
     
  9. RPhox

    RPhox Thread Starter

    Joined:
    Apr 21, 2001
    Messages:
    140
    Ok. I disabled the MailSafe in ZA and ran Spybot and Adaware. I'll leave the pc on all nite and see where I stand in the morning.

    Thanks for all the help.
    RFox
     
  10. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/118456

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice