my computer runs slow on bootup and after sign in 1

[mobileman]

i just fixed a netsky virus that was on my computer 6days ago since than my computer has been running slow and and takes along time to boot up.

 

[kestrel1]

You need to make sure that there is nothing else running that could be affecting your machine. Run Ad-Aware, SpyBot S&D & delete what they find. go to the start menu & in the run box type 'msconfig' go to the startup tab & see if there is anything there runing at startup that shouldn't be.
Run hyjackthis & post the result here.

 

[mobileman]

Logfile of HijackThis v1.99.1
Scan saved at 3:42:49 PM, on 12/31/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\McAfee\Common Framework\FrameworkService.exe
C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
C:\Documents and Settings\Administrator\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

http://www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=2061217

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =

http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL =

http://www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=2061217

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan Enterprise\scriptcl.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O3 - Toolbar: (no name) - {0687766B-F048-43D1-B33B-DBE6FE9AE712} - (no file)
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in 1.6.0_03) -

http://javadl-esd.sun.com/update/1.6.0/jinstall-6u3-windows-i586-jc.cab

O20 - Winlogon Notify: NavLogon - C:\WINDOWS\
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O21 - SSODL: jetctrl - {D0EDE0DD-A52C-4CD9-B111-6C898601F5BA} - C:\WINDOWS\jetctrl.dll (file missing)
O21 - SSODL: kopmet - {668F4CF7-0796-4FF2-B1E8-BEF9864ACE83} - C:\WINDOWS\kopmet.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: COM Host (comHost) - CMD Technology, Inc. - (no file)
O23 - Service: McAfee Framework Service (McAfeeFramework) - Unknown owner - C:\Program Files\McAfee\Common Framework\FrameworkService.exe" /ServiceStart (file missing)
O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe

 

[kestrel1]

Okay, I think I can see a few problems there.
1) You have two anti-virus programs running. AVG & McAfee. This is not good. You need to remove one of them. Personally I would ditch McAfee in favour of AVG. McAfee does slow machines down, but not as bad as Symantec Norton AV.
2) There are two references in the log file about missing files. The two files that are missing would have been removed by the anti-virus removal process. You don't want the files, as they are related to viruses. Anyway, you can remove the entries if you run hyjackthis again. The files are jetctrl.dll & kopmet.dll
Look for these two lines:
O21 - SSODL: jetctrl - {D0EDE0DD-A52C-4CD9-B111-6C898601F5BA} - C:\WINDOWS\jetctrl.dll (file missing)
O21 - SSODL: kopmet - {668F4CF7-0796-4FF2-B1E8-BEF9864ACE83} - C:\WINDOWS\kopmet.dll (file missing)

Do you have a firewall running? If you only have the Windows firewall, I would be inclined to install ZoneAlarm (

http://www.download.com/3000-2092-10039884.html)

This is much better than the standard Windows firewall & is free.
Hope that helps.

 

[mobileman]

thank you for your help its finally back to normal again. been trying to fix it since i loan the computer to a friend to fix his. i'm really happy that you could help me with this problem
everyone that i talk to before wanted to charge alot to run and update my anti virus and i was already doing that so i want to thank you again

 

[kestrel1]

What was it that helped? Uninstalling the second AV program I expect.
Anyway, glad you are up & running again.

 

[PRPhx]

I would also downlaod, install, and run CCleaner (it's free from

http://www.ccleaner.com)

It will clean out unneeded files and registry entries. Then I would do a drfrag, followed by a check disk (chkdsk c. If check disk finds any problems re-run it with the /r option , press "Y" when asked about running at the next reboot and then finally do a reboot. Chkdsk will take a while to run, depending on how fast your drive is and how large it is.

 

[kestrel1]

I don't trust registry cleaners myself. They can cause more trouble than they are worth. Running checkdisk & defrag are always good options though. As the system seems to be running normally I would stay away from a reg cleaner.

 

[PRPhx]

I run a registry cleaner on a some what regular basis. Especially after I've removed an app with lots of registry entries. Then I go in and manually look for those entries.

And I've seen some applicatopns with hundreds of entries and a real pain to clean out. So registry cleaners do have their places.

 

[kestrel1]

If it works for you, then fair enough. I have had systems come to me that have been totally screwed because of bad registry cleaners.
Just my experience, I suppose, that puts me against them.

 

[gbaughma]

kestrel1:

Good job helping this user. Have a star.



Just my 2¢
-Cole's Law: Shredded cabbage

--Greg

http://parallel.tzo.com

 

[kestrel1]

Cheers gbaughma.