XP Performance Problem

[Guest]

Greetings All-

I am having serious XP SP2 performance issues for some unknown reason. I
have always had my firewall running, and I run Mcafee virus scan daily. I
have the most current updates and multiple scans have found no viruses. My
system works fine inSafe mode. I have no adware or spyware problems (I also
keep SpySweeper up to date). My registry has been cleaned and has no problems.

My problems go back 1 week. I tried multiple system restores, which failed
to resolve the problem.

My problems are as follows:

1) My Computer icon responds very slowly. When clicked on, the flashlight
goes for 10-15 seconds before returning results

2) Programs hang/ respond slowly. When trying to End Task, they sometimes
take 1-2 minutes to cancel closed.

3) PC is very slow to install or remove programs.

4) Task bar intermittently disappears for 1-2 minutes (does this very
infrequently though)

5) Some applications load very slowly and/or wont function at all.

I have noticed that my system has the SVCHOST.EXE file running in several
instances (5 or so) and they have various file sizes.

I don't want to reformat my whole system and reinstall windows unless i
absolutely have to. Since safe mode is runnign fine, I am getting along for
now.

Can anyone recommend a diagnostic program for something like this?

I am in a country that doesnt speak native English, and I'm afraid to drop
my Toshiba laptop off for resolution.

Thanks

 

[DL]

If it runs fine in Safe Mode, that might indicate a driver or start up app
causing a problem.
You haven't used winupdate for drivers have you? If you have roll back the
drivers.

Try initially msconfig.exe
Disable all start-ups and test

Also, some malaware may not be detected with your current scans
Download update and run Adaware, SpyBot, MS Defender
PS using a registry cleaner is fraught with danger.

 

[Shenan Stanley]

<anipped>

Brian Q wrote:

As far as spyware removal, I am comfortable with spysweeper
although you have suggested others, I'm thinking I don't want too
many spy/adware apps on my system as i'm thinking they might
conflict with each other.

They won't - most Spyware Cleaner applications doe *not* run resident - they
only run when you tell them to - and there is not *one* that finds
everything.

I haven't updated any of my drivers, but come to think of it before
this all happened I did get a bonafide windows alert that one of my
drivers was goofy or something and to either leave as is or
otherwise accept it to revert to i think system default or
something. I can't remember what damn driver it was though. Any
idea on how I would figure this out now?

Don't worry about it and just go to the manufacturer's web page for each
hardware component and get their latest driver... Motherboard chipset,
sound, video, network, etc...

Also, this is a stupid question, but how would I start the
Msconfig.exe you mentioned. I remember that from Windows 98 days,
so I simply try running it in XP from the command prompt, but it
couldn't find it...

Start button --> RUN --> msconfig --> OK

 

[Gerry Cornell]

Brian

The symptoms described point to something taking available CPU and /
or memory. Malware is commonly the cause..

As safe mode is running normally this mostly likely rules out basic
services and drivers. Some drivers do not load in Safe Mode and an
Event Viewer Report in the System log much like this will tell you
the extra drivers loading in normal mode that may be problematic.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 07/01/2007
Time: 13:20:20
User: N/A
Computer: GERALD-SKQPK3W8
Description:
The following boot-start or system-start driver(s) failed to load:
AFD
BANTExt
Fips
intelppm
IPSec
MRxSmb
NetBIOS
NetBT
RasAcd
Rdbss
Tcpip

Are there any yellow question marks in Device Manager? Right click on
the My Computer icon on your Desktop and select Properties. Hardware,
Device Manager. If yes what is the Device Error code?

Try Start, Run, type "sigverif.exe" without quotes and hit OK. What
drivers are listed as unsigned? Disregard those which are not checked.

Does your Windows XP CD incorporate the SP2 update. If yes I can
suggest another way to check drivers. If no the procedure becomes more
complicated.

However, given that most malware does not run in Safe Mode then the
probability is that it is a malware problem and this needs to be
eliminated as a cause. The best way to do this, given that you think
your system is clean, is to use HijackThis. However many anti-spyware
programmes you run there can always be one that they miss. Also there
are specialist anti-spyware programmes for types of malware which are
often not detected by their bigger brothers.

Install and run HijackThis:
Download HijackThis (Freeware)
http://tomcoyote.com/hjt/

Finally run HijackThis and post the HijackThis log to the HijackThis
forum here:
http://aumha.net/

You will need to register with Aumha to be able to post.

Another useful site for advice is:
http://www.elephantboycomputers.com/page2.html#Removing_Malware

The procedure for using msconfig is described in greater detail here:
How to perform a clean boot in Windows XP
http://support.microsoft.com/kb/310353

Whenever you get a problem you should always examine the System and
Application logs in Event Viewer. You are really only interested in
Warning and Error Reports and NOT Information Reports. It is also best
to concentrate on the last boot or the latest completed session.
However, errors whch occur in every session are more likely to be a
real problem than a single instance error.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us

Part of the Description of the error will include a link, which you
should double click for further information. You can copy using copy
and paste. Often the link will, however, say there is no further
information.
http://go.microsoft.com/fw.link/events.asp
(Please note the hyperlink above is for illustration purposes only)

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event Viewer.
Now start your message (email) and do a paste into the body of the
message. Make sure this is the first paste after exiting from Event
Viewer.


--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Ken Blake, MVP]

Greetings All-

I am having serious XP SP2 performance issues for some unknown
reason. I
have always had my firewall running,

Good.


and I run Mcafee virus scan
daily.

Bad. Next to Norton, McAfee is the worst anti-virus product on the market.
That doesn't mean you are infected, but I wouldn't be so sure you aren't.

I have the most current updates and multiple scans have found
no viruses. My system works fine inSafe mode. I have no adware or
spyware problems (I also keep SpySweeper up to date).

I also wouldn't be so sure that you "have no adware or spyware problems." A
single anti-spyware product is not enough to protect you. None is good
enough and you need at least two. Note what Eric Howes, who has done
extensive testing on Anti-Spyware products, states:

"No single anti-spyware scanner removes everything. Even the best-performing
anti-spyware scanner in these tests missed fully one quarter of the
"critical" files and Registry entries" See
http://spywarewarrior.com/asw-test-guide.htm

My registry has
been cleaned and has no problems.

Of all the things you say, that's the one that scares me the most. I always
recommend *against* the routine use of
registry cleaners. Routine cleaning of the registry isn't needed and is
dangerous. Leave the registry alone and don't use a registry cleaner.
Despite what many people think, and what vendors of registry cleaning
software try to convince you of, having unused registry entries doesn't
really hurt you.

The risk of a serious problem caused by a registry cleaner erroneously
removing an entry you need is far greater than any potential benefit it may
have.

I can't be sure of course, but this is possibly the cause of the problems
you are now experiencing. But also see below.

My problems go back 1 week. I tried multiple system restores, which
failed
to resolve the problem.

My problems are as follows:

1) My Computer icon responds very slowly. When clicked on, the
flashlight goes for 10-15 seconds before returning results

2) Programs hang/ respond slowly. When trying to End Task, they
sometimes take 1-2 minutes to cancel closed.

3) PC is very slow to install or remove programs.

4) Task bar intermittently disappears for 1-2 minutes (does this very
infrequently though)

5) Some applications load very slowly and/or wont function at all.

I have noticed that my system has the SVCHOST.EXE file running in
several instances (5 or so) and they have various file sizes.

Multiple instances of SVCHOST.EXE running is perfectly normal. This has
nothing to do with your problem.

You are reporting a sudden slowdown that started one week ago. That strongly
suggests to me the possibility that you picked up a malware infection a week
ago. I recommend that you go to Malke's Malware Removal site at
http://www.elephantboycomputers.com/page2.html#Removing_Malware and follow
the instructions there.

 

[Ron Martell]

Greetings All-

I am having serious XP SP2 performance issues for some unknown reason. I
have always had my firewall running, and I run Mcafee virus scan daily. I
have the most current updates and multiple scans have found no viruses. My
system works fine inSafe mode. I have no adware or spyware problems (I also
keep SpySweeper up to date). My registry has been cleaned and has no problems.

My problems go back 1 week. I tried multiple system restores, which failed
to resolve the problem.

My problems are as follows:

1) My Computer icon responds very slowly. When clicked on, the flashlight
goes for 10-15 seconds before returning results

2) Programs hang/ respond slowly. When trying to End Task, they sometimes
take 1-2 minutes to cancel closed.

3) PC is very slow to install or remove programs.

4) Task bar intermittently disappears for 1-2 minutes (does this very
infrequently though)

5) Some applications load very slowly and/or wont function at all.

I have noticed that my system has the SVCHOST.EXE file running in several
instances (5 or so) and they have various file sizes.

I don't want to reformat my whole system and reinstall windows unless i
absolutely have to. Since safe mode is runnign fine, I am getting along for
now.

Can anyone recommend a diagnostic program for something like this?

I am in a country that doesnt speak native English, and I'm afraid to drop
my Toshiba laptop off for resolution.

Thanks

Here is something else you can try.

Open Task Manager (Ctrl+Alt+Delete) and go to the Processes tab. Click
twice on the CPU column header to sort the list into descending order
based on CPU usage. Make note of the 4 or 5 processes with the
highest CPU usage (ignore the "System Idle Process" which just keeps
track of the time the CPU has nothing to do) and post those names back
here.

Good luck

Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2006)
On-Line Help Computer Service
http://onlinehelp.bc.ca
Syberfix Remote Computer Repair

"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."

 

[Guest]

Hey Again-

Thanks for your info.

I am running XP SP2.

I ran the malware program somebody mentioned (spybot), and updated it and
immunized my system. Unfortunately it didn't find any problems, not even one.
darn it I guess for a simple solution.

I ran the Hijack program and posted my log file to that website as you
mentioned. We'll see what happens.

In the interim, I did check my System Event Viewer file from the unsafe
(normal) mode, and it found one error that repeatedly occurs during startup.
The error is only found in the log, not actually an error message of any sort
during startup.

The error is as below. I click on the link to get a resolution from
microsoft, but unfortunately it didn't have a resolution so I have no idea
what to do next.
---

The COM+ Event System detected a bad return code during its internal
processing. HRESULT was 8007043C from line 44 of
d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp. Please contact
Microsoft Product Support Services to report this error.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Thanks,
Brian