My pc is being slow as crap

[p4r4d0x]

So, i just joined this forum today, after reading the book little brother, i decided i wanted to learn more about computers.
I know the basics, such as images of hard drives. cracks and keygens, but mostly i just play mmo's.
Anyway, i was on facebook today, and youtube at the same time, with only firefox open, with only 2 tabs open, and every single time i got a message on facebook my computer froze for like 30 full seconds. I dont really know if thats just face book or not, but i defragged my computer about a week ago, did a disk clean up, cleared my history and caceh and cookies, and i am still not making any progress at all. my computer specs should be in the signature, and i only have about half or less of my 300gb hard drive filled. any suggestions? thanks in advance!

 

[deanj20]

Hi p4r4d0x! Welcome to Computer Forum!

Please see my "Slow Computer Rant" for suggestions on how to improve your PCs performance. Post back and let us know how it works out for you.

When a client tells me his computer is "running slow":

The first thing I do is completely uninstall anything that says Norton or Symantec. It's a major resource hog, not to mention all-around pain in the ass IMHO. Follow the steps in this post, and we'll replace it with something equally effective and less demanding.

Next, run Malwarebyte's Antimalware in Safe Mode with Networking and remove anything it finds.

After that, download and install Piriform CCleaner. Run the program, and on the left hand side select Registry. Scan and Fix Issues. Continue scanning for/repairing issues until it doesn't find anymore.

Then, if you're like 90% of Windows users, you probably have a ton of extra programs starting up automatically when Windows starts up. You can disable unneeded processes from starting up by doing the following:
Go to Start-->Run-->type in 'msconfig' and hit <enter>

In the Startup tab, uncheck everything that you do not need running in the background at
startup and click "Apply." Then, in the Services tab, check Hide All Microsoft
Services, uncheck everything that you do not need running in the background at startup and click "Apply." Restart the computer.

Next, download and run the executable for TrendMicro HijackThis!.
Press the button labeled "Open the Misc Tools Section". Then check both the check boxes next to the "Generate StartupList Log" button and click the button. Click the button to generate the list, save it and upload it as an attachment to your next post, and I or some other forum member will advise you on what else to disable, if anything.

Then run HijackThis! in normal mode and
post your scan log here and we'll see if there's anything else that needs to be looked at.

Finally, you can install a free anti-virus to help keep you protected (these aren't nearly as taxing on your memory as Norton). I prefer AVG Free Edition, but I've heard good things about Microsoft Security Essentials as well. Avira AntiVir and Avast! are two more options. Please install one of these programs to help keep you virus free.

After you've done all of these things, please wait until the computer is idle (no programs loading/scanning/etc), and hit ctrl+alt+delete and make note of your CPU usage at the bottom of the popup window.

On your next post, please include both the HijackThis! Logs I've requested, your idle CPU usage, any steps you left out, the make/model of your computer, and let us know how your it is running now.

 

[p4r4d0x]

Okay, so i was running avg already, and this is the log from hijack this:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:18:54 PM, on 4/9/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Sony\Reader\Data\bin\launcher\Reader Library Launcher.exe
C:\Program Files\VMware\VMware Player\hqtray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\VirtuaWin\VirtuaWin.exe
C:\Program Files\VirtuaWin\modules\WinList.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\TrueCrypt\TrueCrypt.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Users\James\Downloads\HijackThis.exe
C:\Windows\system32\taskmgr.exe
C:\Windows\system32\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware player\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware player\vsocklib.dll
O13 - Gopher Prefix:
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GRA32A~1.DLL
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVG E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: AVG Firewall (avgfws9) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgfws9.exe
O23 - Service: AVG9IDSAgent (AVGIDSAgent) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: Sony SCSI Helper Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:\Program Files\VMware\VMware Player\vmware-ufad.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Player\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe

--
End of file - 7280 bytes

I just used piriform, and scanned and repaired all of the issues, and i just wanted to post this when i had the log open, in a moment i will run malwarebytes, although i could have sworn i ahd it installed when installed windows 7, i just downloaded the freeware version of it, and ill see how it works out, but it already seem smuch faster! thank you very much!

 

[deanj20]

Well, glancing through your log, I would suggest the following:

Completely uninstall (via Control Panel-->Add and Remove Programs or Programs in CCleaner) or disable the following from starting up automatically (via msconfig or Startup in CCleaner):

Anything affiliated w/ Adobe (Use Foxit Reader to view pdf files - be sure to uninstall the Ask.com crapware that comes bundled with it!)
QuickTime
iTunes
Bonjour
DaemonTools
Google Toolbar
Windows Sidebar
LimeWire (use a BitTorrent client like uTorrent if you're going to d/l "stuff")
VMWare
AppleMobileDeviceService.exe(just start iTunes manually if you have an iPod)
GameGuard
Steam

Also - these two look like malware to me:

O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe

Run HijackThis! again after running Malwarebytes Antimalware in Safe Mode. If these entries are still there, remove them, reboot into safe mode, and see if they "reappear" - if so, let me know in your next post and we'll investigate further.

[edit]
Also, while I do recommend AVG Free, I do NOT recommend having it running 24/7 or installing the toolbars and other "extras" - these can and will seriously slow down your system. I recommend that you completely uninstall AVG Free, then run CCleaner to clean up registry entries. Then download the latest AVG Free and update it, but DO NOT install the extras - go to "Advanced Install" or whatever it is, and select for it to not automatically scan, etc. Then, run a scan once a week or so manually, and always scan files that you do not FULLY TRUST after you download them - before you open/run them. You can do this by choosing "Open Conaining Folder" by right clicking on your download in the download manager, then right click the file and select "Scan with AVG".
[/edit]

 

[johnb35]

Deanj20,

Those two 023 entries are from Punkbuster and are required for the games to play correctly, its an anticheat program mainly for online games. Those 2 entries must remain in order to play games that installed them. You just can't remove a service anyway using hijackthis, you would have to uninstall the program in order to remove it, or disable the service using services.msc.

Also, please do not recommend torrent software as that is just as illegal as using limewire for the purpose they are using it for.

 

[deanj20]

Those two 023 entries are from Punkbuster and are required for the games to play correctly

Sorry John - should've Googled those. Certainly looked malicious - oddly spelled entries in System32 sets off a red flag for me. I'll try to be more thorough.

You just can't remove a service anyway using hijackthis

It would certainly stop it from starting up though, right? If it were malware, which I suspected it to be?

Also, please do not recommend torrent software as that is just as illegal as using limewire for the purpose they are using it for.

Point taken.