XP is Extremely Sluggish

[Searcher7]

I'm having a problem with my PC which is running Windows XP. It has
become very sluggish, and I even had to re-boot a couple times when
the Icons wouldn't show up on my Desktop. (I might have opened
something I shouldn't have).

As it gets to the desktop I briefly see a box that I think references
updating the PC settings. And I managed to write down the following: C:
\WINDOWS\system32\WinDir\svchost.exe.

When I open task manager CPU usage is extremely high, and in
"Processes" there are about seven or eight instances of Svchost.exe,
along with the following:

avast.setup
msmsgs.exe
ctfmon.exe
jusched.exe
wuauclt.exe
realsched.exe
zlclient.exe
AvastUI.exe
alg.exe
wscntfy.exe
ForceField.exe
taskmgr.exe
AvastSvc.exe
ISWSVC.exe
explorer.exe
vsmon
wdfmgr.exe
jqs.exe
lsass
services.exe
winlogon.exe
csrss.exe
smss.exe
spoolsv.exe
System
System Idle Process

A Zone Alarm Security Alert said the following: "SFX Cabinet Self-
Extractor is trying to access the trusted zone". But I clicked "Deny"
because I'm not sure what that is.

Things are almost normal as I type this, but I'm sure that will
change. Any ideas on what to do would be appreciated.

Thanks a lot.

Darren Harris
Staten Island, New York.

 

[MyNews]

I'm having a problem with my PC which is running Windows XP. It has
become very sluggish, and I even had to re-boot a couple times when
the Icons wouldn't show up on my Desktop. (I might have opened
something I shouldn't have).

As it gets to the desktop I briefly see a box that I think references
updating the PC settings. And I managed to write down the following: C:
\WINDOWS\system32\WinDir\svchost.exe.

When I open task manager CPU usage is extremely high, and in
"Processes" there are about seven or eight instances of Svchost.exe,
along with the following:

avast.setup
msmsgs.exe
ctfmon.exe
jusched.exe
wuauclt.exe
realsched.exe
zlclient.exe
AvastUI.exe
alg.exe
wscntfy.exe
ForceField.exe
taskmgr.exe
AvastSvc.exe
ISWSVC.exe
explorer.exe
vsmon
wdfmgr.exe
jqs.exe
lsass
services.exe
winlogon.exe
csrss.exe
smss.exe
spoolsv.exe
System
System Idle Process

A Zone Alarm Security Alert said the following: "SFX Cabinet Self-
Extractor is trying to access the trusted zone". But I clicked "Deny"
because I'm not sure what that is.

Things are almost normal as I type this, but I'm sure that will
change. Any ideas on what to do would be appreciated.

Thanks a lot.

Darren Harris
Staten Island, New York.

Who is ForceField.exe? << look it up!

And how manly Firewalls do you need?
You have us Firewalls
zlclient.exe
AvastSvc.exe
and do old Microsoft Firewall
Running at the some time not good!

 

[Skybuck Flying]

I'm having a problem with my PC which is running Windows XP. It has
become very sluggish, and I even had to re-boot a couple times when
the Icons wouldn't show up on my Desktop. (I might have opened
something I shouldn't have).

As it gets to the desktop I briefly see a box that I think references
updating the PC settings. And I managed to write down the following: C:
\WINDOWS\system32\WinDir\svchost.exe.

When I open task manager CPU usage is extremely high, and in
"Processes" there are about seven or eight instances of Svchost.exe,
along with the following:

avast.setup

strange, could be an installation program trying to install ?
avast = anti virus usually.

msmsgs.exe

msn messenger

ctfmon.exe

window part

jusched.exe

java schedular not required.

wuauclt.exe

not sure, but it's a window part, maybe for audio

realsched.exe

real player schedular, not necessary (audio related)

zlclient.exe

zone alarm client, probably gui

AvastUI.exe

avast anti virus scanner

alg.exe

windows part, application layer gateway or something, required
for internet connection sharing/windows firewall.

wscntfy.exe

some kind of windows part.

ForceField.exe

Highly suspicious. Could be trojan/virus ? Never heard of it.

But apperently zone alarm related.

taskmgr.exe

Task manager

AvastSvc.exe

Probably avast server

ISWSVC.exe

Hmm maybe internet connection sharing.

explorer.exe

Explorer/my computer/desktop.

vsmon

zone alarm virus monitor (part of zone alarm)

wdfmgr.exe

Windows driver manager thingy.

jqs.exe

Java related I think..

lsass

Windows part

services.exe

Windows part

winlogon.exe

Windows part

csrss.exe

Windows terminal services, important part for windows gui.

smss.exe

Windows part

spoolsv.exe

Printer spooler service, required for printing onlu.

System

Windows part

System Idle Process

Windows part.

A Zone Alarm Security Alert said the following: "SFX Cabinet Self-
Extractor is trying to access the trusted zone". But I clicked "Deny"
because I'm not sure what that is.

Could be the avast.setup trying to run continously.

Also ForceField seems highly suspicious.

Apperently it's part of zone alarm... hmm.

Things are almost normal as I type this, but I'm sure that will
change. Any ideas on what to do would be appreciated.

Avast is probably cause of slow down.

Also shutdown all the schedulars.

Starts->Run-msconfig

Then startup tab, uncheck the schedular related stuff.

Make sure indexing service is not running, this is a common slown down on xp
but it doesn't
seem to be running.

Bye,
Skybuck.

 

[Searcher7]

Who is ForceField.exe? << look it up!

And how manly  Firewalls do you need?
You have us Firewalls
zlclient.exe
AvastSvc.exe
and do old Microsoft Firewall
Running at the some time not good!

--http://mynews.ath.cx

I'm not sure what you wrote, but the only Firewall I'm aware of on my
system is ZoneAlarm. Avast! is the anti virus app. ForceField is part
of ZoneAlarm.(But it is not shown in my Add/Remove programs box, so I
wouldn't know how to get rid of it).

Anyway, I took several tries over several hours today but I'm back
online, for now.

The last couple of times Avast! was not on when I got to my desktop,
and I was forced to manually start it. Now I can't get it to work at
all.

I also wanted to clear a few things in "Add/Remove" Programs and doing
this always makes me nervous. I know most of what I can get rid of,
but would appreciate pointers on what *not* to touch.(See below)...

Adobe Download Manager
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.4.1
avast! Free Antivirus
Belarc Advisor 8.1
Camfrog Video Chat
Creative PCI Audio Drivers
Debut Video Capture Software
FrostWire 4.21.3
BIMP 2.6.11
Google Chrome
JAVA(TM) 6 Update 20
JAVA(TM) 6 Update 23
Microsoft .NET Framework 1.1 SP1 with KB886903 Hotfix
Microsoft .NET Framework 2.0 with Security Updates
Microsoft .NET Framework 3.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.307.29.4148
Mozilla Firefox (3.6.13)
Mozilla Thunderbird(2.0.0.6)
MSXML 6.0 Parser
OpenOffice.org 3.2
PCFriendly
Prism Video File Converter
The KM{layer (remove only)
Uniblue SpeedUpMyPC
VAIOXP
VLC media player
Winamp
Winamp Detector Plug-in
Windows Sidebar
Yahoo Messenger
Yahoo! Software Update
ZoneAlarm
ZoneAlarm Toolbar

I'd like to point out that when I boot up the first theing I get on my
Desktop, even before the Icons are visible is a message stating that
personal settings are being loaded for C:\WINDOWS\system32\WinDir
\svchost.exe.

Whatever Svchost.exe there is not only has multiple instances of it
showing in Task Manager, but is seems to be ing trouble starting up. I
say this because when things take too long or freeze and I power off,
I always get a "DLL Initialization Failed message".

Thanks.

Darren Harris
Staten Island, New York.

 

[Searcher7]

What does MBAM say ?

http://en.wikipedia.org/wiki/Malwarebytes

    Paul

?!?

I have no idea what that is.

Darren Harris
Staten Island, New York.

 

[Paul]

?!?

I have no idea what that is.

Darren Harris
Staten Island, New York.

Malwarebytes or MBAM, is a malware removal program.
Download a copy, and scan your system with it. It
finds many malwares and removes them.

It comes in a free and a pay version. The free
version is used for scanning and removal. The
pay version is a resident install that
monitors the system in real time. They have
different uses. The free one is all you need
in this case.

The only problem with running the program, is many
malware packages will actively look out for MBAM,
and attempt to stop you from running it. If that
happens, then you *know* you're infected. There
are various suggested responses, when that happens,
and someone here may be able to help you with that.

Paul

 

[Searcher7]

strange, could be an  installation program trying to install ?
avast = anti virus usually.


msn messenger


window part


java schedular not required.


not sure, but it's a window part, maybe for audio


real player schedular, not necessary (audio related)


zone alarm client, probably gui


avast anti virus scanner


windows part, application layer gateway or something, required
for internet connection sharing/windows firewall.


some kind of windows part.


Highly suspicious. Could be trojan/virus ? Never heard of it.

But apperently zone alarm related.


Task manager


Probably avast server


Hmm maybe internet connection sharing.


Explorer/my computer/desktop.


zone alarm virus monitor (part of zone alarm)


Windows driver manager thingy.


Java related I think..


Windows part


Windows part


Windows part


Windows terminal services, important part for windows gui.


Windows part


Printer spooler service, required for printing onlu.


Windows part


Windows part.


Could be the avast.setup trying to run continously.

Also ForceField seems highly suspicious.

Apperently it's part of zone alarm... hmm.


Avast is probably cause of slow down.

Also shutdown all the schedulars.

Starts->Run-msconfig

Then startup tab, uncheck the schedular related stuff.

Make sure indexing service is not running, this is a common slown down onxp
but it doesn't
seem to be running.

Bye,
  Skybuck.

I think that "SFX Cabinet Self-Extractor is trying to access the
trusted zone" has something to do with Acast also. I clicked ok, and
now no longer get that, but I can't get Avast! to work now anyway. So
I don't know if Avast! could be part of the slow down. It seems like
more of a victim of the problem.

ForceField is part of ZoneAlarm. It has something top do with a
ZoneAlarm toolbar and protects from Phishing. But I have no such
toolbar visible. I always uncheck those kind of installs when setting
up an app.

Also, I "Starts -> Run -> msconfig" all the time so I can go to
Startup and uncheck boxes before I re-boot and run system maintenance
and defragmentation.

I just when there and it seems like there are more things checked than
usual. (See below)...

avastUI
zlclient
realsched
jusched
svchost
cfmon
msmsgs
svchost
shortcut to autoru...
shortcut to rocket...

Thanks.

Darren Harris
Staten Island, New York.

 

[Searcher7]

Reformat your system and start all over again.  Don't waste time.
Windows is supposed to get sluggish over time.

"Supposed to", huh?

I do the reformat/re-install thing about twice a year...

Darren Harris
Staten Island, New York.

 

[milt]

"Supposed to", huh?

I do the reformat/re-install thing about twice a year...

Darren Harris
Staten Island, New York.

Ignore the troll, they don't know what they are talking about, they also
think MS updates are spyware!

 

[glee]

I'm having a problem with my PC which is running Windows XP. It has
become very sluggish, and I even had to re-boot a couple times when
the Icons wouldn't show up on my Desktop. (I might have opened
something I shouldn't have).

As it gets to the desktop I briefly see a box that I think references
updating the PC settings. And I managed to write down the following:
C:
\WINDOWS\system32\WinDir\svchost.exe.

When I open task manager CPU usage is extremely high, and in
"Processes" there are about seven or eight instances of Svchost.exe,
along with the following:

avast.setup
msmsgs.exe
ctfmon.exe
jusched.exe
wuauclt.exe
realsched.exe
zlclient.exe
AvastUI.exe
alg.exe
wscntfy.exe
ForceField.exe
taskmgr.exe
AvastSvc.exe
ISWSVC.exe
explorer.exe
vsmon
wdfmgr.exe
jqs.exe
lsass
services.exe
winlogon.exe
csrss.exe
smss.exe
spoolsv.exe
System
System Idle Process

A Zone Alarm Security Alert said the following: "SFX Cabinet Self-
Extractor is trying to access the trusted zone". But I clicked "Deny"
because I'm not sure what that is.

Things are almost normal as I type this, but I'm sure that will
change. Any ideas on what to do would be appreciated.

Thanks a lot.

You have malware, based on what you stated you saw on-screen and wrote
down:
"C:\WINDOWS\system32\WinDir\svchost.exe"

svchost.exe a standard Windows file when located in C:\Windows\system32
There is normally no sub-folder of System32 named WinDir, except when
created by malware, and any copy of svchost.exe there is likely an
infected file.

 

[Searcher7]

Malwarebytes or MBAM, is a malware removal program.
Download a copy, and scan your system with it. It
finds many malwares and removes them.

It comes in a free and a pay version. The free
version is used for scanning and removal. The
pay version is a resident install that
monitors the system in real time. They have
different uses. The free one is all you need
in this case.

The only problem with running the program, is many
malware packages will actively look out for MBAM,
and attempt to stop you from running it. If that
happens, then you *know* you're infected. There
are various suggested responses, when that happens,
and someone here may be able to help you with that.

    Paul

Ok, I've used that years ago.

I downloaded a copy and it found 27 infected files.

After it finished and I re-booted it still took a long time for my
icons to appear once I reached the Desktop, so I'm not sure how much
it helped.

Windows did inform me that I ran out of "virtual memory" when I was
shutting down.

The next time I have to re-boot hopefully things will be better.

Thanks.

Darren Harris
Staten Island, New York.

 

[Roger Hunen]

This may be malware. Genuine WinXP svchost.exe is in C:\WINDOWS\System32.

This is normal (my WinXP Pro has 11 of them!). However, there may be one
that does not belong there (see above).

Regards,
-Roger

 

[Jan Alter]

Malwarebytes or MBAM, is a malware removal program.
Download a copy, and scan your system with it. It
finds many malwares and removes them.

It comes in a free and a pay version. The free
version is used for scanning and removal. The
pay version is a resident install that
monitors the system in real time. They have
different uses. The free one is all you need
in this case.

The only problem with running the program, is many
malware packages will actively look out for MBAM,
and attempt to stop you from running it. If that
happens, then you *know* you're infected. There
are various suggested responses, when that happens,
and someone here may be able to help you with that.

Paul

Ok, I've used that years ago.

I downloaded a copy and it found 27 infected files.

After it finished and I re-booted it still took a long time for my
icons to appear once I reached the Desktop, so I'm not sure how much
it helped.

Windows did inform me that I ran out of "virtual memory" when I was
shutting down.

The next time I have to re-boot hopefully things will be better.

Thanks.

Darren Harris
Staten Island, New York.

The best way to run MBAM is to start the computer in safe mode (hit the F8
key on bootup to choose from the menu), then run it. Running it in that
manner avoids having infected files and programs that could be infected from
starting in the first place.

 

[glee]

Ok, I've used that years ago.

I downloaded a copy and it found 27 infected files.

After it finished and I re-booted it still took a long time for my
icons to appear once I reached the Desktop, so I'm not sure how much
it helped.

Windows did inform me that I ran out of "virtual memory" when I was
shutting down.

The next time I have to re-boot hopefully things will be better.

Thanks.

Darren Harris
Staten Island, New York.

The best way to run MBAM is to start the computer in safe mode (hit
the F8 key on bootup to choose from the menu), then run it. Running it
in that manner avoids having infected files and programs that could be
infected from starting in the first place.

Although the makers of MBAM say to run it in normal mode, I sometimes
run it in Safe Mode to remove the most stubborn malware processes that
interfere with it running in normal mode. BUT....it must be run again
in Normal mode doing a Full Scan or it will not find and remove all the
malware on the system.

 

[The poster formerly known as 'The Poster Formerly]

On 2/8/2011 5:19 PM, Skybuck Flying wrote:

not sure, but it's a window part, maybe for audio

Windows automatic updates

Java related I think..

Correct, java related
<snip>

 

[Tim Meddick]

I can see that this thread is still active.

I also cannot be bothered to go through all previous posts in this thread
(for which I apologise).

But Since the thread is still being posted to, I will add my
two-penny-worth to it;

Have you gone through the usual little list of routines one does when a PC
slows down?


The things in this little list would include :

1). Running CHKDSK.EXE on the system drive (usually the [C:] drive).
(Type " chkdsk c: /f " at a [cmd.exe] command prompt - then answer
[Y] when asked
- Reboot ).

2). Run the Disk Defragmenter on the system drive (type [dfrg.msc] in the
"Run" box on
the Start Menu and select [C:] and press the "Defragment" button).

3). Run the Desktop Cleanup Manager (type [cleanmgr.exe] in the "Run" box
on the
Start Menu and select [C:] ). After it's finished scanning the
drive, click on
the [ok] button to delete the selected file-types. The
pre-selected boxes are the
ones that are safe to get rid of - the remaining boxes are left
un-checked and
can be included if chosen.

4). Run the System Configuration Utility (type [msconfig.exe] into the
"Run" box on
the Start Menu). Select the "Startup" (tab) from across the top
then look
down the list of start-up items to see if there are any programs
that you have
installed and that you know are not absolutely necessary -
"uncheck" the boxes
next to such items to disable them (you may re-instate them at any
time by
reversing this procedure and "re-check" the previously disabled
items"


Item no. (4)., in this little list, is probably the single most important
of them!

In that one major reason why XP installations run more slowly is that some
recently installed software has parts that start together with system
startup.

Quite often, one can easily do without many such user-installed programs'
add-ons like a program's associated "taskbar application" (for example
WinZip's try-app - WZQKPICK.EXE does not need to be active for the rest of
that program's normal operation).

While the stopping of that particular tray-app will not have great impact
on system start-up times, when a good many superfluous items are added to
the auto-load "Run-List", it can indeed interfere with quicker Operating
System loading.

==

Cheers, Tim Meddick, Peckham, London.

 

[Roger Hunen]

Correct, java related

Indeed: Java Quick Starter. I usually uncheck this in the Java control
panel (Advanced->Miscellaneous->Java Quick Starter) to improve startup
performance a little bit.

Caveat: JQS is re-enabled when installing a Java update

Regards,
-Roger

 

[Jim]

"Supposed to", huh?

I do the reformat/re-install thing about twice a year...

Darren Harris
Staten Island, New York.

Why ?

 

[(PeteCresswell)]

Per Searcher7:

I do the reformat/re-install thing about twice a year...

Use any one of many utilities to take an image of your next
re-install.

Then, next time the mood strikes, it will be 20-30 minutes to
re-image instead of hours and hours to re-install.

 

[Paul]

I also cannot be bothered to go through all previous posts in this
thread (for which I apologise).

That's generally a dangerous thing to do. There might be
some clues hidden in the other posts. You never know.
Where is your sense of curiosity ?

Paul