Slow startup process

[Chris12m]

-- My computer is slow to startup. I am running Wndows XP Pro 2002 with
SP3. Hardware is Dell with Intel Core2 Duo CPU @ 3.16GHz and 3gb RAM. My
startup programs are Norton, SuperAntiSpyware,Goodgle desktop, Spybot. What
can I read to really understand the startup process. I would like to
eliminate non essential programs from startup. Right now I do not know what
startup programs are essential and I do not want to disable something that
the computer needs. I would also like to know what you consider a fast time
for startup to be completed. My startup is almost 3 minutes. Thank you for
your help!
chris

 

[Gerry]

Chris

Is your system free from error?

Have a look in the System and Application logs in Event Viewer for
Errors and Warnings and post copies here. Don't post any more than 48
hours ago.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

What Norton product is installed?

Try Ctrl+Alt+Delete to select Task Manager and click the Performance
Tab. Under Commit Charge what is the Total, the Limit and the Peak?

You should be able to gather more information from Task Manager. With
the Processes tab open select View, Select, Columns and check the boxes
before Peak Memory Usage and Virtual Memory size. What are the figures
for the 6 processes using the largest amounts?

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[M.I.5¾]

-- My computer is slow to startup. I am running Wndows XP Pro 2002 with
SP3. Hardware is Dell with Intel Core2 Duo CPU @ 3.16GHz and 3gb RAM. My
startup programs are Norton, SuperAntiSpyware,Goodgle desktop, Spybot.
What
can I read to really understand the startup process. I would like to
eliminate non essential programs from startup. Right now I do not know
what
startup programs are essential and I do not want to disable something that
the computer needs. I would also like to know what you consider a fast
time
for startup to be completed. My startup is almost 3 minutes. Thank you for
your help!

Anti virus and firewall software is notorious for slowing down the start up
process (and Norton is worse than most).

3 minutes is about right (I have known systems take as long as 7 minutes).

Have you tried hibernating rather than shutting down? If it works properly
in your PC (not always guaranteed), it will wake up far quicker than start
up takes.

 

[Chris12m]

--
chris

Chris

Is your system free from error?

Have a look in the System and Application logs in Event Viewer for
Errors and Warnings and post copies here. Don't post any more than 48
hours ago.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

What Norton product is installed?

Try Ctrl+Alt+Delete to select Task Manager and click the Performance
Tab. Under Commit Charge what is the Total, the Limit and the Peak?

You should be able to gather more information from Task Manager. With
the Processes tab open select View, Select, Columns and check the boxes
before Peak Memory Usage and Virtual Memory size. What are the figures
for the 6 processes using the largest amounts?

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~



Reply

Chris

Is your system free from error?

Have a look in the System and Application logs in Event Viewer for
Errors and Warnings and post copies here. Don't post any more than 48
hours ago.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

What Norton product is installed?

Try Ctrl+Alt+Delete to select Task Manager and click the Performance
Tab. Under Commit Charge what is the Total, the Limit and the Peak?

You should be able to gather more information from Task Manager. With
the Processes tab open select View, Select, Columns and check the boxes
before Peak Memory Usage and Virtual Memory size. What are the figures
for the 6 processes using the largest amounts?

--


Hope this helps.



Thanks for the help Gerry. Here is the answer and data.
Event Viewer. Here is what I see, to be followed by the data:
Application log app error recorde 512.0kb
Security log Security audit rec 64.0kb
system log system errors 512.kb
ACEEvent Log log custom log --
Internet Exp log custom log --
Msft Office Diagnost log custom log errors 64.0kb
Msft Office Sessions log custom log errors 64.0 kb

There are quite a few errors. I will post some of them!
Application log errors
Event Type: Information
Event Source: HHCTRL
Event Category: None
Event ID: 1904
Date: 6/30/2009
Time: 8:44:12 AM
User: N/A
Computer: DENCOMPUTER
Description:
The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found.
The local computer may not have the necessary registry information or message
DLL files to display messages from a remote computer. You may be able to use
the /AUXSOURCE= flag to retrieve this description; see Help and Support for
details. The following information is part of the event: about:blank,
http://go.microsoft.com/fwlink?LinkID=45840.

Event Type: Information
Event Source: gupdate1c9dd4159254fc0
Event Category: None
Event ID: 0
Date: 6/30/2009
Time: 8:37:03 AM
User: N/A
Computer: DENCOMPUTER
Description:
The description for Event ID ( 0 ) in Source ( gupdate1c9dd4159254fc0 )
cannot be found. The local computer may not have the necessary registry
information or message DLL files to display messages from a remote computer.
You may be able to use the /AUXSOURCE= flag to retrieve this description; see
Help and Support for details. The following information is part of the event:
Service stopped.

Event Type: Information
Event Source: MsiInstaller
Event Category: None
Event ID: 11728
Date: 6/30/2009
Time: 8:36:26 AM
User: NT AUTHORITY\SYSTEM
Computer: DENCOMPUTER
Description:
Product: Google Update Helper -- Configuration completed successfully.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 7b 41 39 32 44 41 42 33 {A92DAB3
0008: 39 2d 34 45 32 43 2d 34 9-4E2C-4
0010: 33 30 34 2d 39 41 42 36 304-9AB6
0018: 2d 42 43 34 34 45 36 38 -BC44E68
0020: 42 35 35 45 32 7d B55E2}


Event Type: Information
Event Source: Outlook
Event Category: None
Event ID: 32
Date: 6/30/2009
Time: 8:35:44 AM
User: N/A
Computer: DENCOMPUTER
Description:
The store C:\Documents and Settings\JanChris\Local Settings\Application
Data\Microsoft\Outlook\archive.pst has detected a catalog checkpoint.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Information
Event Source: IAANTmon
Event Category: None
Event ID: 7500
Date: 6/30/2009
Time: 8:22:43 AM
User: N/A
Computer: DENCOMPUTER
Description:
Intel RAID Controller: Unknown Controller
Number of Serial ATA ports: 5

RAID Option ROM Version: Unknown
Driver Version: 7.8.0.1012
RAID Plug-In Version: 7.8.0.1013
Language Resource Version of the RAID Plug-In: File not found
Create Volume Wizard Version: 7.8.0.1013
Language Resource Version of the Create Volume Wizard: File not found
Create Volume from Existing Hard Drive Wizard Version: 7.8.0.1013
Language Resource Version of the Create Volume from Existing Hard Drive
Wizard: File not found
Modify Volume Wizard Version: 7.8.0.1013
Language Resource Version of the Modify Volume Wizard: File not found
Delete Volume Wizard Version: 7.8.0.1013
Language Resource Version of the Delete Volume Wizard: File not found
ISDI Library Version: 7.8.0.1013
Event Monitor User Notification Tool Version: 7.8.0.1013
Language Resource Version of the Event Monitor User Notification Tool: File
not found
Event Monitor Version: 7.8.0.1013

Hard Drive 0
Usage: Unknown hard drive usage
Status: Normal
Device Port: 0
Device Port Location: Internal
Current Serial ATA Transfer Mode: Generation 2
Model: ST3250310AS
Serial Number: 6RYB91EZ
Firmware: 3.ADA
Native Command Queuing Support: Yes
System Hard Drive: Yes
Size: 232.8 GB
Physical Sector Size: 512 Bytes
Logical Sector Size: 512 Bytes

Unused Port 0
Device Port: 3
Device Port Location: Internal

Unused Port 1
Device Port: 5
Device Port Location: External

CD/DVD Drive 0
Device Port: 1
Device Port Location: Internal
Current Serial ATA Transfer Mode: Generation 1
Model: TSSTcorpDVD-ROM TS-H353B
Serial Number: Data not reported
Firmware: D500

CD/DVD Drive 1
Device Port: 2
Device Port Location: Internal
Current Serial ATA Transfer Mode: Generation 1
Model: HL-DT-ST DVD+/-RW GSA-H73N
Serial Number: Data not reported
Firmware: C106


Event Type: Warning
Event Source: Microsoft Fax
Event Category: Initialization/Termination
Event ID: 32068
Date: 6/30/2009
Time: 8:22:07 AM
User: N/A
Computer: DENCOMPUTER
Description:
The outgoing routing rule is not valid because it cannot find a valid
device. The outgoing faxes that use this rule will not be routed. Verify that
the targeted device or devices (if routed to a group of devices) is connected
and installed correctly, and turned on. If routed to a group, verify that the
group is configured correctly. Country/region code: '*' Area code: '*'

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Information
Event Source: ESENT
Event Category: General
Event ID: 102
Date: 6/30/2009
Time: 8:21:54 AM
User: N/A
Computer: DENCOMPUTER
Description:
Windows (720) Windows: The database engine started a new instance (0).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: SQLBrowser
Event Category: None
Event ID: 3
Date: 6/30/2009
Time: 8:21:40 AM
User: N/A
Computer: DENCOMPUTER
Description:
The configuration of the AdminConnection\TCP protocol in the SQL instance
MSSMLBIZ is not valid.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 6/30/2009
Time: 2:23:49 AM
User: NT AUTHORITY\SYSTEM
Computer: DENCOMPUTER
Description:
Windows saved user DENCOMPUTER\JanChris registry while an application or
service was still using the registry during log off. The memory used by the
user's registry has not been freed. The registry will be unloaded when it is
no longer in use.

This is often caused by services running as a user account, try configuring
the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.



SECURITY

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 6/30/2009
Time: 2:23:49 AM
User: NT AUTHORITY\SYSTEM
Computer: DENCOMPUTER
Description:
Windows saved user DENCOMPUTER\JanChris registry while an application or
service was still using the registry during log off. The memory used by the
user's registry has not been freed. The registry will be unloaded when it is
no longer in use.

This is often caused by services running as a user account, try configuring
the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.



SYSTEM



Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 6/30/2009
Time: 8:46:26 AM
User: N/A
Computer: DENCOMPUTER
Description:
The Windows Installer service entered the stopped state.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


....many messages about "entered the running state"


ACEEvent Log


Event Type: Information
Event Source: ACEEventLogSource
Event Category: None
Event ID: 0
Date: 6/30/2009
Time: 8:23:09 AM
User: N/A
Computer: DENCOMPUTER
Description:
0000000001: 2009-06-30 08:23:09:281 Exception <atixcode.dll>: COM object
with CLSID {981145A7-E08E-48F3-A1C4-52C28BCAAAF9} is either not valid or not
registered.
Exception Called by:
ATI.ACE.CLI.Aspect.TransCode.Local.Shared.TC_Component::CheckTrancodeComObject
processID:03044 threadIDCLIWizard )
domainNamecli.exe )
assemblyNameCLI.Aspect.TransCode.Local.Shared, Version=1.2.0.0,
Culture=neutral, PublicKeyToken=null)
************************************************************************************************************************


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

....more messages just like this one with different times


Internet Explorer no problems


MS Office Diagnostics


Event Type: Information
Event Source: Microsoft Office 12 Diagnostics
Event Category: None
Event ID: 999
Date: 4/19/2009
Time: 11:31:53 AM
User: N/A
Computer: DENCOMPUTER
Description:
Office Diagnostics is closing.

....this is followed by ...OFf Diagnostics ..no evidence of repeted problems
threshold version is 12.0.4407.0


MS Office sessions...all msgs say 'ended normally'


2) Norton

I have Norton Internet Security
version 16.5.0.134


3) Task Manager Performance Tab
Commit Charge
Total 958032
Limit 5073200
Peak 1132956

Process Tab
Peak Memory Usage top 8
image name mem usage peak mem usage VM Size
scchost.exe 36,664 211,812 26,800
TeaTimer.exe 86,048 202,412 84,072
firefox.exe 116,712 119,036 98,032
SuperAntispywear 840 107,116 104,980
Outlook.exe 19,272 91,304 53,448
Bloomberg.UIServ 22,892 56,880 45,272
ccSvcHst.exe 4,644 55,084 24,896
CLI.exe 6,360 53,204 40,412


That's the information you requested. I hope this helps. Thanks again for
your time! Chris

 

[Daave]

-- My computer is slow to startup. I am running Wndows XP Pro 2002
with SP3. Hardware is Dell with Intel Core2 Duo CPU @ 3.16GHz and 3gb
RAM. My startup programs are Norton

<snip>

And there's your problem.

 

[Ken Blake, MVP]

-- My computer is slow to startup. I am running Wndows XP Pro 2002 with
SP3. Hardware is Dell with Intel Core2 Duo CPU @ 3.16GHz and 3gb RAM. My
startup programs are Norton, SuperAntiSpyware,Goodgle desktop, Spybot. What
can I read to really understand the startup process. I would like to
eliminate non essential programs from startup. Right now I do not know what
startup programs are essential and I do not want to disable something that
the computer needs. I would also like to know what you consider a fast time
for startup to be completed. My startup is almost 3 minutes. Thank you for
your help!

My standard message on this follows below, but before that, let me
state two things:

1. *No* startup programs are essential, unless they are essential to
you (for example, an anti-virus program should be essential to you).

2. Three minutes is not a unusually long startup time.



My personal view is that the attention many people pay to how long it
takes to boot is unwarranted. Assuming that the computer's speed is
otherwise satisfactory, it may not be worth worrying about. Most
people start their computers once a day or even less frequently. In
the overall scheme of things, even a few minutes to start up isn't
very important. Personally I power on my computer when I get up in the
morning, then go get my coffee. When I come back, it's done booting. I
don't know how long it took to boot and I don't care.

However if you do want to address it, it may be because of what
programs start automatically, and you may want to stop some of them
from starting that way. On each program you don't want to start
automatically, check its Options to see if it has the choice not to
start (make sure you actually choose the option not to run it, not
just a "don't show icon" option). Many can easily and best be stopped
that way. If that doesn't work, run MSCONFIG from the Start | Run
line, and on the Startup tab, uncheck the programs you don't want to
start automatically.

However, if I were you, I wouldn't do this just for the purpose of
running the minimum number of programs. Despite what many people tell
you, you should be concerned, not with how *many* of these programs
you run, but *which*. Some of them can hurt performance severely, but
others have no effect on performance.

Don't just stop programs from running willy-nilly. What you should do
is determine what each program is, what its value is to you, and what
the cost in performance is of its running all the time. You can get
more information about these with google searches and asking about
specifics here.

Once you have that information, you can make an intelligent informed
decision about what you want to keep and what you want to get rid of.

 

[DL]

You appear to be running 2 malaware apps, if these are both running
processes they can cause conflicts

 

[Gerry]

Chris

Let's start with your security arrangements. You seem to have starting
when you boot:

Norton Internet Security 2009
Tea Timer (the Spybot Real Time protection component)
Super AntiSpyware.

This means you have you have three anti-spyware products running
continually. You only need one anti-virus and one anti-spyware programme
to run. Two extra anti-spyware programmes are helpful to have around if
your front line lets malware in. The simplest solution is to rely on
Norton Internet Security 2009 and to stop Super AntiSpyware loading at
start-up. You will need to look in Super AntiSpyware to find the setting
to make the change so that it loads on demand.

Tea Timer needs a different approach. I have Spybot S & D and I do not
think Tea Timer can be disabled from within Spybot. When you install
Spybot S & D, Tea Timer is an optional component. Therefore you could
uninstall Spybot.and reinstall without Tea Timer. Another option is to
disable Tea Timer from starting using Autoruns. Please note I said
disable not remove the start up item.

..To identify what loads when you boot use Autoruns (freeware from
Microsoft).
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/Autoruns.mspx

With Autoruns you can uncheck an item, which disables it from
starting,or you can right click an item and then delete it. If you
uncheck you can recheck to re-enable the item. It is a much safer
approach than editing the Registry and better than using msconfig..
Another useful feature of the programme is that you can right click an
item and select Search Online to get information about the item
selected.

Apart from Event Viewer I have identified two other event loggers

Intel Matrix Storage Event Monitor which seems to come with a Dell
computer.

ACE Event Log which would appear to have a connection with software for
an ATI Rage Graphics Card.

If these are running during the boot process ( I think they are ) then
they will increase the workload whilst the computer is booting.

Most anti-virus programmes run scheduled full scans daily. What time is
Norton scheduled to do a complete scan or does it do so every time the
computer is booted.

I will now deal with the Reports occurring during the boot process.

Event ID: 3 Event Source: SQLBrowser
http://snurl.com/l6zgi [www_eventid_net]
How to configure an instance of SQL Server to listen on a specific TCP
port or a dynamic port
http://support.microsoft.com/kb/823938/en-us

Event ID: 32068 Event Source: Microsoft Fax
http://snurl.com/l6zfa [www_eventid_net]
Are you using Microsoft Fax? If not remove the software. Start, Control
Panel, Add / Remove Programs, Windows Components, scroll down the list
and uncheck Fax Services, click on Next and follow the on screen
instructions. You will need to restart the computer to complete
removal.

For now I am ignoring Information reports.

Select Start, Control Panel, Administrative Tools, Services and right
click on Computer Browser and select Properties. The StartUp
type should be Automatic. Is it?

The next suggestion will help with the two problems reported on
Shutdown.

Download and install the User Profile Hive Cleanup Service
Download details: User Profile Hive Cleanup Service
http://snipurl.com/5b61

UPHClean v1.6d readme.txt
http://snipurl.com/ko8m

Let's see what difference these suggestions make.

 

[Dallas]

Hey Chris,

I have a site here that may help; from Run>msconfig>Startup, you can see
your start up programs & since I know so little, I can easily look them up
using this site below.
That said, even tho' I clear all but one which I want, I still get a Dell
support program, Gadwin Print Screen, a Windows Office Suite & an Apple
QuickTime task no matter how many times I uncheck, Apply & Ok these items;
they are always there each & every time I check !

Good luck

http://www.processlibrary.com/directory/files/wkcalrem/

 

[Dallas]

I also set mine to start up automatically, so when I do get up, it's up &
running already.