computer starting up VERY SLOWLY

5775 Views 93 Replies 3 Participants Last post by Faithful one, Sep 9, 2003

Faithful one

Discussion Starter · Sep 5, 2003

CAn you help me and tell me what needs to be checked and what doesnt. I have Windows ME...Internet version 6.0...cipher strength 128 bit...update version SP1 , Q818529 , Q822925

Under msconfig I have this:

ALL OF THESE ARE UNCHECKED:

money agent
AIM
taskbar display controls
weather
task moniter
system tray(I ahve two..one checked)
scan registry
loadpowerprofile
delay
hpsysdrv
tkbellexe
HPAIO_printfoldermgr
new.net startup
BJCFD
workds FUD
quick time task
PC health
adaptec direct cd
motive moniter
msbb
{2CF0B992-5EEB-4143-99C0-5297EF1F44B}
stcloader
VSOcheck task
Microsoft works portfolio
wcmdmgr
tgcmd
McVsRte ( i have two of these one checked)
SSDPSRV
*statemgr
scheduling AGent
LoadPowerProfile
Zonealarm ( I have two..one that has zonepro and htats checked)
HPAIODevice( i have two...one checked)
hewlette packard recorder( I have teo..one checked)
correct connect
greetings workshop

NOW ALL THESE ARE CHECKED:

adsgone
webshots
adsgone2003
hewlettepackard recorder
HPAIODevice
Zonealarm PRO
McVsRte
TrueVector
keyboard Manager
MCUpdatExe
System tray
virus scan online
MCAgent

Thanks so much!
Is there any other way to seep up the connection. I have cable hook up!
Thanks
Faithful one

See less See more

Status: Not open for further replies.

1 - 20 of 94 Posts

mobo

· #2 · Sep 5, 2003

Yep ...from the looks of the msconfig you have some spyware onboard that needs to be first taken care of. First download , update then scan with spybot search and destroy. Have it fix all it finds, then if the problems persist post a Hijackthis log for someone to look at.

Faithful one

Discussion Starter · #3 · Sep 5, 2003

I do spybot every morning afternoon and eve AND i did do HJT and posted it.

My spybot says COngrats all clean. I ALWAYS do an updat first then scan.

So I am confused????

which ones did you have in question??

Faithful one

Faithful one

Discussion Starter · #4 · Sep 5, 2003

Here is after I spybot

Logfile of HijackThis v1.96.2
Scan saved at 9:59:49 AM, on 9/5/2003
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMKEYBD.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSRTE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\KEYBDMGR.EXE
C:\PROGRAM FILES\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMUSBKB2.EXE
C:\PROGRAM FILES\MCAFEE.COM\AGENT\MCAGENT.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHLD.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSESCN.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZAPRO.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\HP PSC 700 SERIES\FRU\REMIND32.EXE
C:\PROGRAM FILES\WEBSHOTS\WEBSHOTSTRAY.EXE
C:\PROGRAM FILES\ADSGONE\ADSGONE.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSFTSN.EXE
C:\MY DOCUMENTS\AIM.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\TEMP\TD_0001.DIR\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.foxnews.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.cox.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer Provided by Cox High Speed Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;localhost;<local>
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHL.DLL
O4 - HKLM\..\Run: [MCAgentExe] C:\PROGRA~1\MCAFEE.COM\AGENT\mcagent.exe
O4 - HKLM\..\Run: [VirusScan Online] "C:\PROGRA~1\MCAFEE.COM\VSO\mcvsshld.exe"
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\MCAFEE.COM\VSO\MCMNHDLR.EXE" /checktask
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\MCAFEE.COM\AGENT\MCUPDATE.EXE
O4 - HKLM\..\RunServices: [Keyboard Manager] c:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKLM\..\RunServices: [McVsRte] C:\PROGRA~1\MCAFEE.COM\VSO\mcvsrte.exe /embedding
O4 - Startup: HPAiODevice.lnk = C:\Program Files\Hewlett-Packard\hp psc 700 series\bin\hpodev07.exe
O4 - Startup: Hewlett-Packard Recorder.lnk = C:\Program Files\Hewlett-Packard\hp psc 700 series\FRU\Remind32.exe
O4 - Startup: AdsGone 2003.lnk = C:\Program Files\AdsGone\adsgone.exe
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\WebshotsTray.exe
O4 - Startup: AdsGone.lnk = C:\Program Files\AdsGone\adsgone.exe
O4 - Global Startup: ZoneAlarm Pro.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zapro.exe
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: AIM (HKLM)
O14 - IERESET.INF: START_PAGE_URL=http://www.cox.net
O16 - DPF: {0713E8D2-850A-101B-AFC0-4210102A8DA7} (Microsoft ProgressBar Control, version 5.0 (SP2)) - http://download.mcafee.com/molbin/shared/comctl32.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DA28C54E-D95C-11D3-9A01-005004677EF4} - http://download.mcafee.com/molbin/clinic/CDM/McCDM.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {9F0F185C-B50B-11D2-B53F-00A0C98684AC} (McAfee PC Clinic OilChange Class) - http://download.mcafee.com/molbin/OilChange/MGOcCtl_new.cab
O16 - DPF: {13E39F7E-FDA8-11D2-99DC-00C04FF40D52} (McAfee OilChange Multi-Product Support Filter) - http://download.mcafee.com/molbin/OilChange/MGOcFilt.cab
O16 - DPF: {BF31FA5E-AE8A-11D2-A1BD-0800300004C2} (McAfee PC Clinic Internet Class) - http://download.mcafee.com/molbin/Shared/MCInet_new.cab
O16 - DPF: {CDB74794-A3BA-4733-B6F6-59BF16D6C15A} (McAfee Smart Shop - Update Class) - http://download.mcafee.com/molbin/mcaeng/mcsmtshp.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {C3498BF0-2C07-43C8-99D0-434B038334A6} (VDLaunch Class) - http://www.catharon.com/download/plugins/ievdl2.ocx
O16 - DPF: {23047A90-8511-11D2-87A5-20C252C10000} (McAfee Clinic TreeView Class) - http://download.mcafee.com/molbin/Shared/MGTree.cab
O16 - DPF: {17163BB4-107E-11D4-9B76-006097DF2317} (EABootStrap Class) - http://www.ea.com/downloads/games/common/boot_strap/iegils.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,73/mcinsctl.cab
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://usercenter.cox.net/rsuite/sdccommon/download/tgctlcm.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37868.2263310185
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://bin.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,15/mcgdmgr.cab

See less See more

mobo

· #5 · Sep 5, 2003

I see new.net and stc loader on a quick glance ther so perhaps do a windows search for any traces and see what you come up with.

Faithful one

Discussion Starter · #6 · Sep 5, 2003

Aweeeeeee..I see those. How can I rid of them if spybot says I am clean???

Faithful one

mobo

· #7 · Sep 5, 2003

I f you're not showing as still having them then you may have had them and the entry is remaining. Compare this list with your msconfig listings to see what can be safely shut down. i will give you a link in a minute on how to remove those from the list.

Faithful one

Discussion Starter · #8 · Sep 5, 2003

when click on new.net I get a zip folder with NDNunistall.

I have about 5 of these newnet folders >

mobo

· #9 · Sep 5, 2003

Uninstall them....run don't walk

As well did you update spybot ?

Faithful one

Discussion Starter · #10 · Sep 5, 2003

what is C:\programfiles\PLUS!\themes

it says network neighborhood as the name??? what the heck are these..Ihave about 20???

mobo

· #11 · Sep 5, 2003

They would be themes like window blinds etc..Also here is how to remove msconfig listings.

Remove the Duplicate Entries from Msconfig, Startup:

This is how you do it without using msconfig, win 95, win 98 and ME you will use the msconfig program to remove them.

NOTE: Scroll down and I have a link set up do you do not have to use this for win 95 anymore. There is a msconfig program out for win95 now.
Go to start, run type in (copy and paste if you like)
regedit
Then hit okay
A window will open and you will see something that looks like the line below.
Before the HKEY will be a plus sign, click on it and the window will expand and then look for Software, click on the plus sign and it will expand again and then look for Microsoft. Keep doing this till you get to Current Version, once you click on that scroll down till you see the "runs" they may not be worded exactly the same but look in each one that starts with the word RUN
Click on the runs and look in the right pane, do you see either of them, if so right click on the name and click delete.
Search each of the following keys for programs and delete them.
It looks like a lot of keys but actually it is just two. Will take you about 5 minutes to do this.
There is a list of most of the program that you will find here listed here.
HKEY_CURRENT_USER \ Software\ Microsoft\ Windows\ Current Version\ Run
HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ Current Version\ RunOnce
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current VersionRunOnceEx
HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ Current Version\ RunOnceEx
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\RunOnce
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\RunOnceEx
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\RunServices
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Current Version\RunServicesOnce

See less See more

Faithful one

Discussion Starter · #12 · Sep 5, 2003

so delete ALL the newnet zip folders...correct?

What about that UNDunistall???

Faithful one

Discussion Starter · #13 · Sep 5, 2003

AND the PLUS THEMES...correct??? I feel like an idiot! But am scared ot death to delete anything! Just so we are on the same page:

Delete all the newnet zip folders?
Delete the PLUS themes?
Delete the UNDunistall ?

I did an update to spybot and nothing shows! Should I try the Stinger one too??

mobo

· #14 · Sep 5, 2003

YEP...Not sure about the themes though

Faithful one

Discussion Starter · #15 · Sep 5, 2003

Got it...also I have IGETNET ZIP folders...do thse too???

Faithful one

Discussion Starter · #16 · Sep 5, 2003

ALso I jsut found this:

C;\windows\INF

the folders say:
NET ( then some letters and numbers)

mobo

· #17 · Sep 5, 2003

Originally posted by Faithful one:
ALso I jsut found this:

C;\windows\INF

the folders say:
NET ( then some letters and numbers)

Have to investigat that one a little more first.

mobo

· #18 · Sep 5, 2003

Originally posted by Faithful one:
Got it...also I have IGETNET ZIP folders...do thse too???

Say good bye to those as well.

Faithful one

Discussion Starter · #19 · Sep 5, 2003

Oh GEEEZE! Ok I iwll do! Why does my spybot NOT show these as a problem?

Wish me luck deleteing!! YIKES

Faithful one

Discussion Starter · #20 · Sep 5, 2003

NLNunistall as well?

1 - 20 of 94 Posts

Status: Not open for further replies.