CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Applications launching encredibly slow
Goto page 1, 2  Next
 
Post new topic   This topic is locked you cannot edit posts or make replies       All -> FavForums -> Operating Systems [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
IP: 24.77.*.*

Guest






PostPosted: Sun Nov 09, 2003 1:34 am    Post subject: Applications launching encredibly slow
Reply with quote

just last couple of weeks, applications (iexplore, etc.), "my computer" , task manager started taking about 20 seconds to launch, this happened to me before and the only solution i know is complete system restore(CD)

are there any alternate solution?

Back to top
ergibbs

Captain
Captain


Joined: Dec 10, 2002
Posts: 343
Location: Florida

PostPosted: Sun Nov 09, 2003 4:20 am    Post subject:
Reply with quote

While I know there are a number of people here that would love to help you, we can't really do so without some additional info. OS, RAM, CPU, HD size, does the problem persist if you reboot the PC - the more info you can provide, the better.

Back to top
View users profile Send private message
IP: 24.77.*.*

Guest






PostPosted: Sun Nov 09, 2003 2:22 pm    Post subject:
Reply with quote

Its a sony VAIO PCV-RX540

OS - MS Windows XP home Edition
RAM - 256 MB PC-133 SDRAM
CPU - 1.20 GHz Intel Celeron Processor
HD Size - 60 GB ( C: FAT 32 9.96/15.6 ......D: NTFS 40.04/40.27 )

Back to top
IP: 24.77.*.*

Guest






PostPosted: Sun Nov 09, 2003 2:23 pm    Post subject:
Reply with quote

Yes the problem persist if I reboot the PC

Back to top
parputt

Forums Admin
Premium Member

Joined: Mar 08, 2002
Posts: 1406

Premium

PostPosted: Sun Nov 09, 2003 4:10 pm    Post subject:
Reply with quote

Well, this could be any number of things. If you have the time and inclination to stick around here for a few days I am sure we can sort this out, but it will take some time. This could be anything: Virus, Low System Resources, Failing Hardware, etc. Let's start with a few more basics.

1. Do you have an Anti Virus Program on your computer and if so is it up to date? Have you done a complete system scan lately?
2. Do you have a firewall?
3. Do you have any anti-sypware software on your computer: AdAware or SpyBot Search and Destroy?
4. When is the last time you Defragged your Hard Drive?

Whatever it is it is definitely bogging your system down real bad. So let's take this step by step and see what we can figure out.


_________________
"Never argue with an idiot. They will only bring you down to their level and beat you with experience".
Back to top
View users profile Send private message
IP: 24.77.*.*

Guest






PostPosted: Sun Nov 09, 2003 6:50 pm    Post subject:
Reply with quote

1. Do you have an Anti Virus Program on your computer and if so is it up to date? Have you done a complete system scan lately?
I got a PC-cillin 2000 and yes its up to date (its got auto updater, everytime a startup it checks for updates) - I did a full scan just this morning and no viruses were found.

2. Do you have a firewall?

no firewall just the one on my "Lan or highspeed internet" connection

3. Do you have any anti-sypware software on your computer: AdAware
or SpyBot Search and Destroy?


I have "SpyBot Search and Destroy" currently installed and i just removed AdAware just yesterday

4. When is the last time you Defragged your Hard Drive?

I completely defragged it yesterday

Back to top
parputt

Forums Admin
Premium Member

Joined: Mar 08, 2002
Posts: 1406

Premium

PostPosted: Sun Nov 09, 2003 8:31 pm    Post subject:
Reply with quote

OK, so I think we can be pretty sure your system is clean as far as viri etc. are concerned. Could it possible be a process running in the background that is eating up resources.

Let's have a look at your Task Manager and see if anything is sucking a lot of resources. Right click on your taskbar and hit Task Manager. When it opens click on the Processes tab. Look down the CPU column an see if anything is using cpu cycles. If you see "System Idle Process 99" that is normal. All that means is that only 1% of your cpu is being used at that particular moment. What we are looking for are any processes using the CPU while your are not really doing anything.

After that go ahead an open msconfig. Stat/run/msconfig. Click the startup tab and tell me everything listed that has a check mark in a box next to it.


_________________
"Never argue with an idiot. They will only bring you down to their level and beat you with experience".
Back to top
View users profile Send private message
IP: 24.77.*.*

Guest






PostPosted: Sun Nov 09, 2003 9:50 pm    Post subject:
Reply with quote

when i opened up "task manager"

taskmgr with avrage of 03 CPU usage
system idle process at 97
most of them are 00

-----

msconfig
all items w/ check mark

Pop3trap
WebTrapNT
server
an item with no name (its blank) "no command (its blank too)
Real-time monitor
Alarm++

Back to top
parputt

Forums Admin
Premium Member

Joined: Mar 08, 2002
Posts: 1406

Premium

PostPosted: Sun Nov 09, 2003 11:25 pm    Post subject:
Reply with quote

OK, now I think we are getting somewhere. Unfortunately it looks like you have a Virus. "Server" is an entry added by at least 4 known viruses. I am getting my information from this site: http://www.pacs-portal.co.uk/startup_content.php Specifically the S entries: http://www.pacs-portal.co.uk/startup_pages/startup_s.php Scroll down to "Server". I trust this site and have used it numerous times to track msconfig entries. I suggest you go here: http://security.symantec.com/default.asp?productid=symhome&langid=ie&venid=sym and run the free online Virus and Security scans. I am not at all familiar with PC-chillin so I can not explain how it missed this virus, but it seems to have. If the Symantec virus check comes back "dirty" search their site for a fix. You can download tools to fix most viruses from their site. Or you may want to invest in new virus protection. Let me know if this was the problem.


_________________
"Never argue with an idiot. They will only bring you down to their level and beat you with experience".
Back to top
View users profile Send private message
IP: 24.77.*.*

Guest






PostPosted: Mon Nov 10, 2003 2:55 am    Post subject:
Reply with quote

35618 files scanned, 0 file(s) infected on your disk drives.
No viruses were detected in memory.

= At Risk!

Hacker Exposure Check
Antivirus Product Check

Back to top
parputt

Forums Admin
Premium Member

Joined: Mar 08, 2002
Posts: 1406

Premium

PostPosted: Mon Nov 10, 2003 3:06 am    Post subject:
Reply with quote

Anonymous wrote:
35618 files scanned, 0 file(s) infected on your disk drives.
No viruses were detected in memory.

= At Risk!

Hacker Exposure Check
Antivirus Product Check


And that was using the virus scanner from Symantec?


_________________
"Never argue with an idiot. They will only bring you down to their level and beat you with experience".
Back to top
View users profile Send private message
parputt

Forums Admin
Premium Member

Joined: Mar 08, 2002
Posts: 1406

Premium

PostPosted: Mon Nov 10, 2003 4:15 am    Post subject:
Reply with quote

OK, let's try a few more things. Go here: http://www.pandasoftware.com/activescan/com/activescan_principal.htm and run Pandas virus scanner. If that comes back clean go here: http://www.tomcoyote.org/hjt/ and download and run HijackThis. Just post the log and we will have a look at them.


_________________
"Never argue with an idiot. They will only bring you down to their level and beat you with experience".
Back to top
View users profile Send private message
CalamityJane

Security Expert
Microsoft MVP

Joined: Oct 05, 2002
Posts: 4004

MVP Premium Security Experts

PostPosted: Mon Nov 10, 2003 5:08 am    Post subject:
Reply with quote

This is an odd entry:

Quote:
an item with no name (its blank) "no command (its blank too)


The HiJackThis scan might give us some insight Smile Please do both suggestions (Panda Scan and run a HiJackThis scan....post the results here) that parputt suggested.

shameless post here for me, just to get into this thread to help rule out some sort of malware as the cause Very Happy

Am going to bed now but will see what may have developed here first thing in the morning.


_________________
Microsoft MVP/Windows Security 2003-2008
Back to top
View users profile Send private message Visit posters website
IP: 24.77.*.*

Guest






PostPosted: Mon Nov 10, 2003 2:28 pm    Post subject:
Reply with quote

PANDA SCAN
keeps saying an error has occured right after i click what oblect to scan





HIJACKTHIS
Logfile of HijackThis v1.97.3
Scan saved at 8:32:23 AM, on 11/10/2003
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\PC-cillin 2000\Tmntsrv.exe
C:\Program Files\Trend Micro\PC-cillin 2000\Pop3trap.exe
C:\Program Files\Trend Micro\PC-cillin 2000\WebTrapNT.exe
C:\Program Files\Trend Micro\PC-cillin 2000\PNTIOMON.exe
C:\Program Files\Trend Micro\PC-cillin 2000\pccntupd.exe
c:\progra~1\Support.com\client\bin\tgcmd.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\notepad.exe
C:\Documents and Settings\Victor Conte\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.shaw.ca/
O2 - BHO: Ipswitch.WsftpBrowserHelper - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\Program Files\WS_FTP Pro\wsbho2K0.dll
O4 - HKLM\..\Run: [Pop3trap.exe] "C:\Program Files\Trend Micro\PC-cillin 2000\Pop3trap.exe"
O4 - HKLM\..\Run: [WebTrapNT.exe] "C:\Program Files\Trend Micro\PC-cillin 2000\WebTrapNT.exe"
O4 - HKLM\..\Run: [ZTgServerSwitch] c:\program files\support.com\client\lserver\server.vbs
O4 - Global Startup: Real-time Monitor.lnk = ?
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37933.7104513889
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://active.macromedia.com/flash2/cabs/swflash.cab
O16 - DPF: {FF054BED-D972-4215-897E-726C3488DDBB} (sonyctl.sonycm) - http://supportcentral4.sel.sony.com/sdccommon/download/sonyctl.CAB

Back to top
CalamityJane

Security Expert
Microsoft MVP

Joined: Oct 05, 2002
Posts: 4004

MVP Premium Security Experts

PostPosted: Mon Nov 10, 2003 4:54 pm    Post subject:
Reply with quote

Thanks for posting that log Smile Some others might be able to see more, but I don't think you have a virus or malware causing any problems. However, the log does show a couple of things that might help explain the slowdown problem.

Looking at your Hijack this log we can identify the *server* question. It turns out to be this:

O4 - HKLM\..\Run: [ZTgServerSwitch] c:\program files\support.com\client\lserver\server.vbs

Which is explained here:
http://www.pacs-portal.co.uk/startup_pages/startup_z.php

Quote:
X(Definitely not required - typically viruses, spyware, adware and "resource hogs")
ZtgServerSwitch server.vbs ZTGServerswitch is part of Sony's Vaio support agent - designed by Support.com. Not required if the user does not wish to use the Vaio support agent and regarded as spyware


If you decide you do not wish to use it, you can put an x in the box next to that item in the HijackThisscan and hit the *fix* button. (You can even restore the item from HijackThis if you later decide you did not want to remove it)
..................................
These are in your programs list of Running Processes (comments from packman's portal)

Quote:
N( Not required - typically infrequently used tasks that can be started manually if necessary)
TgAddServer tgfix.exe Software from SupportSoft (aka Support.com) provided to manufacturers (such as Sony (Vaio Support Agent) and Toshiba ( Virtual Tech )) and ISPs (such as Comcast, Cox and Charter (Pipeline Support Agent)) that allows them to offer on-line support - to update drivers, fix faults, etc. Can cause a deterioration in a PC's peformance (see here ). This part does the protection and "self-healing". Uninstallation is recommended by most people - especially for System Restore users (WinME/XP). If not available via Add/Remove, Charter offer some uninstallation instructions involving a registry patch that you may be able to modify for your proivder or try here

U( User's choice - depends whether a user deems it necessary)
Tgcmd or tgcmdprovidersbc tgcmd.exe
See above. This part ensures the software is installed correctly (similar to an installation wizard) as reported by Cox . Regarded as spyware by some as it has the ability to retrieve user information. Whether it does so depends upon the provider. "tgcmdprovidersbc" is for SBC Yahoo DSL. One Toshiba user reports problems with hibernate on his laptop if disabled - hence the "U" recommendation

.....................
Lastly, this one found at http://www.answersthatwork.com/Tasklist_pages/tasklist_w.htm

I am not sure I agree with them, but you can try disabling it and see if that fixes your problem and you decide if you want this feature to run or not. It actually looks like it may be of benefit and worth the trade off, even if it is the culprit.

Quote:
WebTrapNT.exe

(Trend Micro) WebTrap is a feature of Trend Micro's PC-Cillin antivirus software which integrates with your web browser and attempts to protect your PC from malicious Java or ActiveX code on the Internet pages that you access. WebTrap also enables you to block out specific URLs (web page addresses) which you do not want to access, whether wilfully or unknowingly. WEBTRAP runs on Win9x/ME while WEBTRAPNT runs on WinNT4/2000/XP.

Recommendation :
We have seen or received too many reports of intractable Internet browsing problems with this feature enabled, including from AOL Tech Support Engineers amongst others, so our advice has to be that you disable this feature from within your PC-Cillin antivirus software.


_________________
Microsoft MVP/Windows Security 2003-2008
Back to top
View users profile Send private message Visit posters website
Display posts from previous:   
Post new topic   This topic is locked you cannot edit posts or make replies       All -> FavForums -> Operating Systems All times are GMT
Goto page 1, 2  Next
Page 1 of 2

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer