[SkullRobot]

Hello, I'm about at the end of my rope here. I've been trying to fix my sisters computer all day in attempts to figure out why it's running so slow. Since she has dial-up at home I brought the box to my place where I have cable in attempts to update her windows as well as virus scanners and such. Every windows update I try fails and just opening any window takes forever. Booting and shutting down seem to be normal speeds though. A couple times while more than one window was open I've gotten a DrWatson Postmotem Debugger error and then everything except the mouse stops responding. My sister has told me that this "slowness" started recently while trying to install a new printer as well as view a certain picture folder (she takes alot of digital pictures and that's what takes up most of the hard drive). I've also had a couple errors pop up saying

"The instruction at '0x7c918fea' referenced memory at '0x00000010'. The memory could not be 'written'."

The internet exporer problem is everytime I type an address into the address bar IE freezes then crashes yet if I just click on links inside the window I can manuver around the internet Anyway here are her system specs.
P4 3.00 GHz
1.00 GB RAM
Windows XP Service Pack 2
Internet Explorer 6

Sorry for the wall of text, just trying to give you as much information as possible. I was going to add a HijackThis file also but apparently her McAfee keeps deleting the file right as I unzip it. Thank you for your time.

 

[flavallee]

Turn off McAfee before you do anything with HijackThis.

--------------------------------------------------------------------------------------

Delete everything from inside these highlighted folders:

C:\WINDOWS\TEMP

C:\DOCUMENTS AND SETTINGS\(USERNAME\LOCAL SETTINGS\TEMP

--------------------------------------------------------------------------------------

A slow processor and lack of RAM definitely isn't the problem.

What size is the hard drive and how much free space is left?

--------------------------------------------------------------------------------------

 

[SkullRobot]

it's a 250 GB HD with 200 GB free

 

[SkullRobot]

ok got a hijackthis going and here it is.

Logfile of HijackThis v1.99.1
Scan saved at 5:42:06 AM, on 1/7/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell Support\DSAgnt.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\America Online 9.0\aoltray.exe
c:\program files\mcafee.com\agent\mcagent.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
F:\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://bfc.myway.com/search/de_srchlft.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - (no file)
O2 - BHO: Nothing - {edbf1bc8-39ab-48eb-a0a9-c75078eb7c8e} - C:\WINDOWS\system32\hp1056.tmp (file missing)
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [VirusScan Online] c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1112758863937
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,23/mcgdmgr.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown owner - C:\WINDOWS\system32\drivers\KodakCCS.exe (file missing)
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe

 

[flavallee]

This log entry:

O2 - BHO: Nothing - {edbf1bc8-39ab-48eb-a0a9-c75078eb7c8e} - C:\WINDOWS\system32\hp1056.tmp (file missing)

is a problem. I'm not a qualified Hijackthis expert, so someone else will have to help you deal with it.

-------------------------------------------------------------------------------------

Is McAfee VirusScan up-to-date with the latest definition files, and has a full scan of the hard drive been done with it?

-------------------------------------------------------------------------------------

 

[SkullRobot]

Well now I can't log into windows in any mode. It will reach the windows startup screen and just sit there. Windows will never open no matter how long I wait. I'm assumeing this could be a hardware problem. What are your thoughts? (also I hadn't taken out that one line yet in HijackThis) I actually haven't changed anything on it yet since I last posted

 

[schusterjo]

can you boot into safemode? if so then do the following
Windows recommends after a random reboot or freeze (a crash) to run chkdsk
Start, my computer, right click on your hard drive, select properties, select tools, error checking click "check now"(chkdsk).

Ad-Aware SE Personal
I run this daily

SpywareBlaster 3.5.1
I update once a week (keeps bad pages with known malware that cold cause damage from being displayed.)

Spybot - Search & Destroy
Daily or every other day

CwShredder
This is one I only use once a week or month lol but good to have

AVG Anti-Spyware
daily
A list of bad spyware programs
Rogue/Suspect Anti-Spyware Products & Web Sites

Download and update (update is very important before you scan) boot into safe mode (You do not need to boot into safe mode every time to run programs. Some malware cannot be fully removed or detected unless you are in Safemode, This is why I recommend running it the first time in safe mode then perhaps once a month in safe mode)

With some computers if you press and hold a key as the computer is booting you will get a stuck key message. If this occurs, instead of pressing and holding the "F8 key", tap the "F8 key" continuously until you get the startup menu.

Chose "safemode with networking" and you can get online.

Scan the computer,

1. From the Windows Start menu, go to Turn off computer and click Restart.
2. As the computer restarts, watch for a progress bar at the bottom of the screen. press F8 about once every second.
3. Immediately press F8 before the progress bar reaches the right side of the screen.
4. From the Windows Start-up menu, highlight Safe Mode and press Enter.
5. Wait for your desktop to appear, and then make the necessary repairs (for example, install programs or devices).
6. When the repairs are done, restart the computer, and allow it to boot normally.

Alternate:

1. From the Windows Start menu, click Run.
2. In the Open field, type MSCONFIG and click Ok.
3. On the BOOT.INI tab, check /SAFEBOOT.
4. Click Restart when prompted.
(if you use this option make sure you change the boot back to normal after finished)

Boot backup into Normal mode, download
CodeStuff Starter manage your startup programs

Disable all startup programs that you "do not" need running at startup.

A guide to hep keep a smooth system.
Maintain your system with Windows XP

Diskeeper
The best program to use for defragging