Intermittent slowdown

[Murphie]

Hello everybody, I haven't been around here in a while...
This 1 year old HP Compaq dx2300, (P4 3.2 ghz, 512 RAM, Win XP SP2 set to automatically update, NOD32 anti-virus and Outpost firewall), keeps intermittently slowing W-A-Y down when using the Internet--to the point that people give up.

The only other PC on the network--older but very similar in capabilities and programs being used--doesn't have any of these problems, and neither do any of the Macs.

During the day this problem machine is used for shipping and invoicing, so usually they have UPS, Stamps.com and Access 97 open all the time, because they're all used.

I've run Disk Cleanup, Defragmented, used JV16 registry cleaner, removed everything extra from the start up. Spy Bot and Adaware just seem to find tracking cookies. The last time I tried to do a TrendMicro Housecall scan it was in one of its slowdowns and I gave up when I couldn't get to the actual scanning part after about 2 hours. (I'm not joking.) Last night I uninstalled some of the HP programs which are probably useless. This morning they told me they couldn't open a web page for 5 minutes. A little later it got better.

I though maybe the problem was related to Stamps.com. Sometimes even closing that won't help, though, and even restarting the computer doesn't always help.

This has been going on for 6 months or so.(I've been really busy and I have to admit the people who use it have been patient.)

Does this sound like a Windows problem or a security problem?

Any ideas? Should I do a Hijack This scan?

Thanks in advance!
Murphie

[Ajmukon]

sounds like overheating.

what is the CPU temp? www.cpuid.com
or, take a infrared thermometer to it and check. OR you could take a regular thermometer to the Heatsink (after static discharge on the grounded case) and see how hot its getting.

OR

Does taking off the side panel help? Aim a fan into it and see if that helps.

[mjc]

Actually, I would probably add another 512 MB of RAM, wipe the hard drive, run the HP system restore, disable all the added HP crap and see how it runs then.

If it is still acting a bit sluggish, then I would start looking at hardware...

[Murphie]

Thank you MJC, but Access 97 won't recognize a GB of RAM. It just won't work with it in. I've tried that, it's an early release and I was never able to jump through the hoops necessary to upgrade it to the point of being able to recognize the RAM. I could try using 786 of RAM though, I think that works.

Why are we still using an app written for Access 97? That's a really good question. I know just enough about Access to know I can't handle upgrading and converting this "solution". I keep looking at Filemaker. But that's another story.

Wipe the drive, huh? Well, I'd better get the backup drive working first!:o That's next on my list actually.

Maybe I'll try getting rid of all the rest of the HP programs first and see if that helps.

Today: no overheating showing up, the highest temperature is 80F. Stamps.com worked well for a few hours but later slowed way down. Opening a web page--Apple.com, with Firefox--just now took several minutes--literally. I gave up. But PCGuide is working OK.

So, I'm confused.

Murphie

[mjc]

OK...that gives us a bit more to go on.

Yeah, it looks like the Service packs for that version of Office fixed it...but there are hoops involved.

One of the things to check is what version of Java is on this machine. An HJT log would be helpful in pinpointing something like that...

PCGuide doesn't use much resources when loading, so a site that uses a lot of scripting, Flash or something like that could be the problem.

What are the cache settings for the browser(s) and how often are they cleared out?

What kind of firewall is it behind, if any?

What versions of the browsers are on there? (IE and FF)

Exactly how critical is this machine? Is any sensitive data kept on it?

How regular are the backups?

[Murphie]

Hi MJC, thanks for your help!
Browsers: IE 7, FF 2.0.0.13
cache cleaned within last 24 hrs.
FF cache--the only setting I could find is how big and it's set to 50 Mb
IE settings--the temporary files was too big according to a message that came up, I don't remember how or why, I reduced it to 250 MB, security is set to medium-high and privacy to medium.

Critical--yeah, especially if it gets lost, and especially during high volume shipping times, like now. Backup--working on that right now.
There's a USB backup drive. When I changed cables and turned it on the computer went into a major slowdown, which lasted even after I turned it off. Could that be an aspect of this problem? But it's been off and unplugged for a month or two, until this evening.

Software firewall is Agnitum Outpost. The network is behind a Linksys WRT300N wired/wireless router and an ActionTec DSL modem.

Speed: now, it's OK. Half and hour ago I went and got HJT on another computer and put it on my flash drive because this one was taking so long.

Temperature: it did go up a bit. The CPUTID was 154 F. I don't know how hot is too hot.

Here's the HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:23:16 PM, on 4/14/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\UPS\WSTD\MSSQL$UPSWSDBSERVER\Binn\sqlservr.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Agnitum\Outpost Firewall\outpost.exe
C:\Program Files\PDF Complete\pdfsvc.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Eset\nod32kui.exe
C:\UPS\WSTD\PolicyMgr\NA1Msgr.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\UPS\WSTD\Messages\WSTDMessaging.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.hp.com/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\Sminst\Recguard.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [OutpostFeedBack] C:\Program Files\Agnitum\Outpost Firewall\feedback.exe /dump:os_startup
O4 - HKLM\..\Run: [NA1Messenger] C:\UPS\WSTD\PolicyMgr\NA1Msgr.exe
O4 - HKLM\..\Run: [Reminder] C:\WINDOWS\Creator\Remind_XP.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O4 - Global Startup: UPS WorldShip Messaging Utility.lnk = C:\UPS\WSTD\Messages\WSTDMessaging.exe
O4 - Global Startup: UPS WorldShip PLD Reminder Utility.lnk = C:\UPS\WSTD\wstdPldReminder.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {315B0BFB-2BD4-481B-80A3-A9B80727C61B} (WebIQ Engine Application Object) - http://webiq005.webiqonline.com/WebIQ/DataServer/Pub/DataServer.dll?Handler=GetEngineDistribution&EDID={896A23A1-5821-4609-A6C6-6D5536C585C9}
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.costcophotocenter.com/CostcoActivia.cab
O16 - DPF: {FE28FA1A-E046-42DC-9DE7-605DC53A1B61} (Link3f Class) - https://www.patientgateway.org/ptgw/ptcomp3f.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum Ltd. - C:\Program Files\Agnitum\Outpost Firewall\outpost.exe
O23 - Service: PC Angel (PCA) - SoftThinks - C:\WINDOWS\SMINST\PCAngel.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe

--
End of file - 4997 bytes

Thank you very much!
Murphie

[mjc]

Java is several updates behind...jre1.5.0_09. i think the latest is 1.6.0_05 (Uninstall the old version before installing the new.)

There is evidence of both AdAware and Spybot being on this...I'd uninstall AdAware.

Also, make sure that Acrobat Reader is up to date, as the latest update fixes a number of security issues.

[Ajmukon]

this has been recommended, but i will post some instructions:
Hello and welcome to the PCguide forums. Please go here (http://www.pcguide.com/vb/showthread.php?t=60009) for information on what to do.

Post a highjack this Log. Do not post it as an attachment, and use as many posts as needed!

Download Hijackthis from here ( http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis)

Remember, Hijack this is a powerful tool that can be both good and bad…

DO NOT do anything unless a certified malware expert tells you to!!!!

A malware expert will come by and have look at it. Unfortunately I am not one of them.

[PrntRhd]

Ummm,
He already posted it?

[Ajmukon]

i must have missed that. (it might not have loaded by the time i got to the bottom)

sorry!

[Murphie]

I'm sorry for dropping this for so long, been extra busy. I did just about everything suggested and nothing really helped, so tonight I wiped it out and reinstalled Windows, using the OEM CD burned when the computer was first set up about 1 year ago. Then I installed Service Pack 3 right away, (previously downloaded) and then used Autopatcher to add the updates.

Now, I can't get online. In Device Manager, instead of "Network Adapters" as usual, there's an entry of "other devices" with big yellow question marks--the audio adapter, and "ethernet controller" among them. And each time I restart it tries to install the audio adapter and can't find a driver for it, and I can't any further.

I tried doing a System Restore to before Service Pack 3 but it says "cannot be restored..."

I'm going to try reinstalling Windows again--and I won't put on SP3 until I'm sure things are working---but does this sound like a Windows problem or a hardware problem?

It's 11 p.m. here, I have to get some PC set up with UPS, Stamps.com, a printer and Office in less than 10 hours or I'm going to be very unpopular, and several people are going to be very nervous. Coffee anyone?

Any ideas? I don't feel particularly intelligent right now....

Thanks in advance!
Murphie

[Murphie]

Just to finish this up, after I finally got it reinstalled (it turned out the drivers were on a different CD) and set up it is performing much better. Too bad it's such a hassle to do.
Many thanks to everyone who answered!
Murphie