1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

URGENT HELP NEEDED - XP not behaving well - multiple symptoms

Discussion in 'Windows XP' started by bdfrasure, Mar 31, 2008.

Thread Status:
Not open for further replies.
  1. bdfrasure

    bdfrasure Thread Starter

    Joined:
    Aug 18, 2007
    Messages:
    33
    My PC is exhibiting the following symptoms and is almost at the point where it is functionally unuseable because of its unreliability and overall slowness.

    1. Sometimes starts slowly (3 mins), sometimes it hangs up and doesn't start even after 15 mins or more. When it doesn't start, it hangs up with a blank blue screen and a moveable mouse cursor.

    2. When I get this blue screen, I can seem to "force" the system to finish starting up by using the task manager (ctrl-alt-del works even on the blue screen) to shut down a few processes. Usually when I shut down one of the 'svchost' processes that's using the most memory, that will work.

    3. The fonts everywhere on my computer got messed up all at once a week or so back. Everything is either almost too small to read, or it looks like an old-school typewriter font and messes up line wrapping and text display in browsers (firefox & IE).

    4. Often times the system will take an incredibly long time to shut down (5 minutes or more).


    All these symptoms began at once while I was uninstalling some programs I tend not to use anymore. I have scanned for viruses/ad-ware and that's not the issue as far as I can tell. I did check my physical hard drive for errors which it found a few and fixed them.

    The system is a Dell Latitude D620 Core2 Duo, 1.66GHz/980MHz with 1.0 GB of RAM.

    Any ideas? HijackThis log is below (but remember, I had to shut down processes to get the pc to load). It does seem to me that I have a ton of processes running all the time (50 at the moment).


    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:07:41 AM, on 3/31/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Novell\XTAgent.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Symantec AntiVirus\DefWatch.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\Novell\ZENworks\nalntsrv.exe
    C:\Program Files\Novell\ZENworks\RemoteManagement\RMAgent\ZenRem32.exe
    C:\Program Files\Symantec AntiVirus\SavRoam.exe
    C:\Program Files\SMART Technologies Inc\SMART Board Software\SMARTBoardService.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Novell\ZENworks\wm.exe
    C:\Program Files\Novell\ZENworks\WMRUNDLL.EXE
    C:\WINDOWS\system32\wscntfy.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\imapi.exe
    C:\WINDOWS\system32\NWTRAY.EXE
    C:\Program Files\Apoint\Apoint.exe
    C:\WINDOWS\system32\dpmw32.exe
    C:\WINDOWS\stsystra.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Apoint\Apntex.exe
    C:\PROGRA~1\SYMANT~2\VPTray.exe
    C:\Program Files\PatchLink\Update Agent\pddm.exe
    C:\WINDOWS\system32\igfxpers.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\igfxsrvc.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\WINDOWS\Twain_32\Fjscan32\SOP\FtLnSOP.exe
    C:\WINDOWS\Twain_32\fjscan32\FjtwSetup.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.columbus.k12.oh.us/
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
    O2 - BHO: SMART Notebook Download Plugin - {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files\SMART Technologies Inc\Notebook Software\NotebookPlugin.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    O4 - HKLM\..\Run: [NWTRAY] NWTRAY.EXE
    O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
    O4 - HKLM\..\Run: [NDPS] C:\WINDOWS\system32\dpmw32.exe
    O4 - HKLM\..\Run: [ZENRC Tray Icon] C:\WINDOWS\system32\zentray.exe
    O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~2\VPTray.exe
    O4 - HKLM\..\Run: [PDDM] C:\Program Files\PatchLink\Update Agent\pddm.exe
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
    O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
    O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [FtLnSOP_setup] C:\WINDOWS\Twain_32\Fjscan32\SOP\FtLnSOP.exe
    O4 - HKLM\..\Run: [FJTWAIN Setup] C:\WINDOWS\Twain_32\fjscan32\FjtwSetup.exe /Station
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
    O15 - Trusted IP range: http://10.120.56.22 (HKLM)
    O15 - Trusted IP range: http://164.83.7.7 (HKLM)
    O15 - Trusted IP range: http://164.83.7.12 (HKLM)
    O15 - Trusted IP range: http://10.243.54.20 (HKLM)
    O15 - Trusted IP range: http://10.120.56.32 (HKLM)
    O15 - Trusted IP range: http://10.120.56.34 (HKLM)
    O15 - Trusted IP range: http://10.173.56.32 (HKLM)
    O15 - Trusted IP range: http://10.173.56.34 (HKLM)
    O15 - Trusted IP range: http://10.120.66.20 (HKLM)
    O15 - Trusted IP range: http://10.120.66.21 (HKLM)
    O15 - Trusted IP range: http://10.120.66.22 (HKLM)
    O15 - Trusted IP range: http://10.120.56.24 (HKLM)
    O15 - Trusted IP range: http://10.118.42.61 (HKLM)
    O15 - Trusted IP range: http://10.118.42.62 (HKLM)
    O15 - Trusted IP range: http://10.120.56.26 (HKLM)
    O15 - Trusted IP range: http://10.173.56.22 (HKLM)
    O15 - Trusted IP range: http://10.173.56.24 (HKLM)
    O15 - Trusted IP range: http://10.173.56.26 (HKLM)
    O15 - Trusted IP range: http://10.243.56.22 (HKLM)
    O15 - Trusted IP range: http://10.243.56.24 (HKLM)
    O15 - Trusted IP range: http://10.243.56.26 (HKLM)
    O16 - DPF: {1E2941E3-8E63-11D4-9D5A-00902742D6E0} (iNotes Class) - http://10.120.66.20/iNotes.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1191338822994
    O16 - DPF: {CAFECAFE-0013-0001-0022-ABCDEFABCDEF} (JInitiator 1.3.1.22) - http://apps.columbus.k12.oh.us:7777/forms/jinitiator/jinit.exe
    O17 - HKLM\Software\..\Telephony: DomainName = cps.local
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Client Update Service for Novell (cusrvc) - Novell, Inc. - C:\WINDOWS\System32\cusrvc.exe
    O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
    O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\hpbpro.exe
    O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\hpboid.exe
    O23 - Service: Novell Application Launcher (NALNTSERVICE) - Novell, Inc. - C:\Program Files\Novell\ZENworks\nalntsrv.exe
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: ZENworks Patch Management Update (PatchLink Update) - Novell, Inc. - C:\Program Files\PatchLink\Update Agent\GravitixService.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: Novell ZENworks Remote Management Agent (Remote Management Agent) - Novell, Inc. - C:\Program Files\Novell\ZENworks\RemoteManagement\RMAgent\ZenRem32.exe
    O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
    O23 - Service: SMART Board Service - SMART Technologies Inc. - C:\Program Files\SMART Technologies Inc\SMART Board Software\SMARTBoardService.exe
    O23 - Service: SMART Web Server - Unknown owner - C:\Program Files\SMART Technologies Inc\SMART Board Software\WebServer.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
    O23 - Service: Novell XTier Agent Services (XTAgent) - Novell, Inc. - C:\WINDOWS\System32\Novell\XTAgent.exe
    O23 - Service: Workstation Manager (ZFDWM) - Novell, Inc. - C:\Program Files\Novell\ZENworks\wm.exe

    --
    End of file - 8605 bytes
     
  2. jasaiyajin

    jasaiyajin

    Joined:
    Mar 31, 2008
    Messages:
    230
    You may have inadvertently uninstalled programs that shared system files when you removed the programs from your system. Those actions may have messed up dependent system files or modified registry entries that have created your current behavioral problems with XP.

    I've noticed novell installed with norton on a Dell D620 laptop, usually issued to school's teachers and staff. There have been recent removal of Symantec products in my area, district wide, and replacement with Sophos Antivirus by the field technicians. If you are a school employee, simply contact your technical coordinator and explain the situation. I suggest you get the laptop reimaged and backup all your data beforehand.

    In the meanwhile, you could go to start, RUN, then type "msconfig"
    Then click on the startup tab
    Uncheck unnecessary startup programs like... Real Player, Quicktime, Adobe

    They are under your hijack post...

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"


    On top of all this, you may also view your system logs by typing "eventvwr.exe" in the RUN option of your start menu. Or you may access the Event Viewer by accessing the Control Panel, then Administrative Tools, Event Viewer. From there you may browse around and check if your system logs conflicts or problems that may help point to underlying issues with your system.

    Sometimes, hard drives go bad, system files go bad with them; however with current technology, the hard drive will rarely tell you it's going bad. It will just place checks on bad sectors and use the additional hidden sectors in place. Smart technology will tell you that your hard drive life going down in percents. But you never know when they will go, except when you hear the hard drive working weirdly.

    If all else fails, just reinstall.
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/698909

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice