1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

XP Running Slow and Freezing

Discussion in 'Windows XP' started by A Hawk, Jun 14, 2003.

Thread Status:
Not open for further replies.
Advertisement
  1. A Hawk

    A Hawk Thread Starter

    Joined:
    Feb 11, 2003
    Messages:
    882
    My sons puter is running slow and freezing could you guys have a look at this log and let us know what you think,as he won't listen to me.:D thLogfile of HijackThis v1.93.0
    Scan saved at 10:47:08 PM, on 14/06/2003
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar=about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://ll2.breezeland.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant=about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar=about:blank
    O2 - BHO: (no name) - {3a2f2178-f9d1-4157-90b9-20cf3940da2f} - C:\DOCUME~1\Daza400\APPLIC~1\peawssuebr.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [1A:Stardock TrayMonitor] "C:\Program Files\Common Files\Stardock\TrayServer.exe"
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
    O4 - HKLM\..\Run: [iamapp] C:\Program Files\Norton Internet Security\IAMAPP.EXE
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
    O4 - HKLM\..\Run: [DownloadAccelerator] C:\PROGRA~1\DAP\DAP.EXE /STARTUP
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - Startup: Shortcut to WKeyKill.lnk = C:\Documents and Settings\Daza400\Desktop\WKeyKill\WKeyKill.exe
    O4 - Startup: Trillian.lnk = ?
    O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
    O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
    O9 - Extra button: Related (HKLM)
    O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
    O12 - Plugin for .mov: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll
    O12 - Plugin for .png: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin5.dll
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://www.apple.com/qtactivex/qtplugin.cab
    O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) - https://components.viewpoint.com/MT...//ghostopsmod.com/images/viewpoint/f2000.html
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab
    O16 - DPF: {665585FD-2068-4C5E-A6D3-53AC3270ECD4} (FileSharingCtrl Class) - http://appdirectory.messenger.msn-int.com/AppDirectory/P4Apps/FileSharing/en/filesharingctrl.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37722.1421296296
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = O23944.tfil.com
    O17 - HKLM\Software\..\Telephony: DomainName = O23944.tfil.com
    O17 - HKLM\System\CCS\Services\Tcpip\..\{755691F2-52CC-4949-B27B-B5CE09D4217A}: Domain = O23944.tfil.com
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = O23944.tfil.com
    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = O23944.tfil.com
    thanx Hawk;)
     
  2. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    http://support.microsoft.com/default.aspx?scid=kb;en-us;819634

    Did you install the above update?

    Is this performance problem occuring both on and offline...

    Your HijackThis log shows a lop.com Domain hijacking: http://o23944.tfil.com/

    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = O23944.tfil.com
    O17 - HKLM\Software\..\Telephony: DomainName = O23944.tfil.com
    O17 - HKLM\System\CCS\Services\Tcpip\..\{755691F2-52CC-4949-B27B-B5CE09D4217A}: Domain = O23944.tfil.com
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = O23944.tfil.com
    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = O23944.tfil.com

    I would check and have HijackThis 'fix' those entries.
     
  3. A Hawk

    A Hawk Thread Starter

    Joined:
    Feb 11, 2003
    Messages:
    882
    Thanks Rollin'Rog I thought those things should go I just needed someone with a more experience like yourself to look it over. In answer to your questions, yes its running slow and freezing on and offline. It doesn't actually freeze to a dead stop that you have to reboot, it just stops for a few seconds and then eventually starts doing what it should be doing. And no he didn't download the update. He did however download a game and the prob started just after that, we've since deleted the game.

    Thanks again Hawk(y) :)
     
  4. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    You're welcome. I take it the problem is continuing after uninstalling the game?

    When the slowdown is most evident, do a ctrl-alt-del and look at the cpu time consumed by each process. Ignore "system idle process", which should be highest. If anything else is consuming a lot of cpu cycles, such as explorer.exe -- that might point to a solution.

    If nothing is obvious, post a copy of the HijackThis StartupList, which will show running processes and services. Something might stand out there. It's available through HijackThis > Config > Miscl Tools > Generate StartupList.

    I see ctfmon as a startup there, not something standard. It should be checked out as a possible source of the problem.

    http://support.microsoft.com/?kbid=282599

    You can probably just terminate the process with no ill effect for test purposes, at least if you don't have any Office products open.

    It's also unclear what this shortcut is pointig to, if anything:

    O4 - Startup: Trillian.lnk = ?
     
  5. A Hawk

    A Hawk Thread Starter

    Joined:
    Feb 11, 2003
    Messages:
    882
    Thanks Rog heres the startup list. And yes the prob is continuing after uninstall.Trillian is a chat program, so I'm told.:) The lad has a lot of junk on his puter but He won't part with any of it.;)
     

    Attached Files:

  6. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
  7. A Hawk

    A Hawk Thread Starter

    Joined:
    Feb 11, 2003
    Messages:
    882
    Thanks for your time and help Rog,I appreciate it. Its a hard one to pin point, the trouble is that the Lad loves to download, so it could be any thing that he's picked up along the way.We will try those suggestions.:) If all else fails we might have to backup and format.:)You get that;) Thanks again Hawk.:)
     
  8. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    You're welcome. From the description I thought that would be a good suspect, since there is nothing else of note in the startups.

    The service can be easily disabled through Administrative tools > Services. Just find it, double click and set to 'manual'. Speed disk should still work, from the note at the site.


    If you do get a definitive answer, we'd appreciate knowing of course.
     
  9. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/139763

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice