1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Slow Windows Load

Discussion in 'Windows XP' started by Dickre, Jan 27, 2006.

Thread Status:
Not open for further replies.
Advertisement
  1. Dickre

    Dickre Thread Starter

    Joined:
    Jun 2, 2004
    Messages:
    25
    This is a Compaq Presario SR1120NX running XP Home, SP2.

    About 4 minutes go by between the arrival of the Welcome screen and the appearance of the last icon in the tray. The "Start Windows .wav frequently plays while the Welcome screen comes up which is much earlier than it used to be.

    There are 3 small Startup programs in that folder plus Norton System Works, Zone Alarm, Stopzilla, and CounterSpy plus the Volume Control and the "Safely Remove Hardware" icons in the tray.

    I've run Chkdsk, Defrag, a Virus scan and every other repair uility that I have including Registry First Aid and CounterSpy.


    Can someone give me a clue as to what else I can do before I restore Windows?
     
  2. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Clean boot troubleshooting. You can also try a System Restore if you have restore points that preceed the problem. System Restores' can be Undone if not helpful.

    Cleanbooting:

    run msconfig and select the "Services" tab. Check "Hide Microsoft Services" and then disable the rest. Also uncheck "load startup group" on the general page.

    See this link for detailed information:

    http://support.microsoft.com/default.aspx?scid=kb;EN-US;310353

    Now restart and test the issue at hand

    If no problems, run msconfig and recheck half the disabled items on the Services tab. Test again. If the problem recurs, UNcheck half the items you just checked to narrow down the culprit.

    If the problem didn't occur, check the other half, so all the Services are enabled -- proceed to do this on the startup tab as well.

    Get the idea? You want to isolate the problem to a specific startup if possible.
     
  3. Dickre

    Dickre Thread Starter

    Joined:
    Jun 2, 2004
    Messages:
    25
    Unfortunately I've bin there---done that, to no avail.

    I think that the problem resides in Windows itself---something is corrupted...or I have gotten mayonaise in my computer's gyroscope <gr>.

    Any other thoughts?

    Thanks, Dick
     
  4. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    You've done the full drill, including the Non Microsoft services?

    Have you tested in Safe Mode or using another User Account?

    Where exactly is the delay longest, at the "welcome screen" or once the desktop appears?

    Post a HijackThis scanlog while your at it:

    Download and install HijackThis using the "self extractor". Run it and select "do a system scan and save the log file". Then copy/paste the contents of the log to a reply

    http://www.thespykiller.co.uk/files/hijackthis_sfx.exe
     
  5. Dickre

    Dickre Thread Starter

    Joined:
    Jun 2, 2004
    Messages:
    25
    No other account to use, and safe mode didn't help. I'd say that more time elapses once the desktop appears, although I'd hate to hang for it if I was wrong.

    The attachment handling doesn't seem to be working for me, but if it does, I've attached a Hijack log.
     
  6. Dickre

    Dickre Thread Starter

    Joined:
    Jun 2, 2004
    Messages:
    25
    No other account to use, and safe mode didn't help. I'd say that more time elapses once the desktop appears, although I'd hate to hang for it if I was wrong.

    The attachment handling doesn't seem to be working for me, but if it does, I've attached a Hijack log. If it didn't work, give me an email address and I'll send it to you that way
     
  7. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    You can copy/paste the Scanlog -- but if starting in Safe Mode made no difference, then nothing in the Scanlog is likely to be relevant -- although I do believe I've seen issues with Webroot spy sweeper software in Safe Mode because it loads under the winlogon registry key -- which is just about where you are experiencing the delay.

    I'm not sure if you have done a System Restore to a date prior to this problem. If you did, and the problem remained -- it's likely to be a hardware issue of some kind.
     
  8. Dickre

    Dickre Thread Starter

    Joined:
    Jun 2, 2004
    Messages:
    25
    OK---here's the log...I hope that it tells you something---and thanks for all the effort:
    Logfile of HijackThis v1.99.1
    Scan saved at 2:16:00 PM, on 1/27/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\STOPzilla!\szserver.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
    C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    C:\WINDOWS\System32\snmp.exe
    C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunThreatEngine.exe
    C:\Program Files\Sunbelt Software\CounterSpy\Consumer\SunProtectionServer.exe
    C:\Program Files\STOPzilla!\STOPzilla.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\WINDOWS\EzDesk.exe
    C:\Program Files\PrintKey-Pro\PKey_Pro.exe
    C:\Program Files\tclocklight-040702-3\tclock.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\WINDOWS\system32\ntvdm.exe
    C:\Program Files\Qualcomm\Eudora Mail\Eudora.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q304&bd=presario&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q304&bd=presario&pf=desktop
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q304&bd=presario&pf=desktop
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\PCHealth\HelpCtr\System\panels\blank.htm
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\PCHealth\HelpCtr\System\panels\blank.htm
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O2 - BHO: STOPzilla Browser Helper Object - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\Program Files\STOPzilla!\SZIEBHO.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [STOPzilla] C:\Program Files\STOPzilla!\STOPzilla.exe /autostart
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    O4 - HKCU\..\Run: [Norton SystemWorks] "C:\Program Files\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz
    O4 - Startup: EzDesk.exe.lnk = C:\WINDOWS\EzDesk.exe
    O4 - Startup: PKey_Pro.exe.lnk = C:\Program Files\PrintKey-Pro\PKey_Pro.exe
    O4 - Startup: tclock.exe.lnk = C:\Program Files\tclocklight-040702-3\tclock.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\WINDOWS\ServicePackFiles\i386\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\WINDOWS\ServicePackFiles\i386\msmsgs.exe
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1134447212937
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
    O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    O23 - Service: STOPzilla Service (szserver) - Unknown owner - C:\Program Files\Common Files\STOPzilla!\szserver.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
     
  9. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    I don't really see anything there that would cause this problem.

    Nonetheless, you can check and "fix" these two funky entries:

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\PCHealth\HelpCtr\System\panels\blank.htm
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\PCHealth\HelpCtr\System\panels\blank.htm

    Does everything run fine once windows is loaded? Or are programs particularly slow to open?

    A cleanboot following the instructions I gave should rule out most anything not hardware caused -- as would a Safe Mode boot or a boot using the "diagnostic startup" mode.

    To rule out any issues associated with your paticurlar User Profile, you will have to log in under a different account.

    Another thing you can do is run eventvwr.msc and look for any errors in the System and Application logs that were not associated with booting in Safe Mode. You will see Dcom errors at those boots.

    You can double click the error entry and then use the double-paper copy icon to copy the description to the clipboard for pasting.

    Were you running these manually at the time of the scanlog, because I don't see any startup points for them?

    C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunThreatEngine.exe
    C:\Program Files\Sunbelt Software\CounterSpy\Consumer\SunProtectionServer.exe
     
  10. rodeognome

    rodeognome

    Joined:
    Dec 13, 2003
    Messages:
    1,366
    On next reboot could you watch very carefully just what is the last icon to arrive ?

    Is it the Norton icon ?

    Is it the CounterSpy icon ? or Something else ?

    Do you have a wireless PCI or USB card installed ?
     
  11. Dickre

    Dickre Thread Starter

    Joined:
    Jun 2, 2004
    Messages:
    25
    Last one is usually the Zone Alarm icon. And I have neither of those installed.
     
  12. rodeognome

    rodeognome

    Joined:
    Dec 13, 2003
    Messages:
    1,366
    you are going to have to completely uninstall ZoneAlarm then - it appears that it
    is still in your registry - this COULD be causing your problem
     
  13. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    ZoneAlarm is fully installed as far as I can see in the scanlog.

    I think the poster was referring to USB and PCI wireless networking.
     
  14. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/437726

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice