Dell Laptop Slowing Down

[martes]

Hi,

I have a Dell XPS M1710, about 2 years old, and recently it has been getting slower and slower until it is now painful to wait for some things to happen.

I have XP Pro, SP2. The machine is heavily used, it is my main development device, lots of software, and about 75% disk used.

My fear is some malware is slowing it down, so I hope you guys can help me resolve it.

Attached are the gmer.txt, dds.txt and attach.txt files as directed.

TIA


DDS (Version 1.0) - NTFSx86
Run by xld at 23:38:31.51 on 16/11/2008
Microsoft Windows XP Professional 5.1.2600.2.1252.44.1033.18.2046.1317 [GMT 0:00]

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
svchost.exe
svchost.exe
C:\Apps\Security\Lavasoft\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\security\AVG8\avgwdsvc.exe
C:\Program Files\Dell Network Assistant\hnm_svc.exe
C:\PROGRA~1\security\AVG8\avgrsx.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\PROGRA~1\security\AVG8\avgemc.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Corel\Corel Snapfire Plus\Corel Photo Downloader.exe
C:\Program Files\utilities\system\WinBackup\wbsched.exe
C:\Program Files\QuickTime\QTTask.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\multimedia\video\CyberLink\PowerDVD\PDVDServ.exe
C:\PROGRA~1\security\AVG8\avgtray.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Dell Support\DSAgnt.exe
C:\Documents and Settings\xld\Local Settings\Application Data\FolderShare\FolderShare.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\utilities\desktop\Microsoft Time Zone\TimeZone.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\security\SpamBayes\bin\sb_tray.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\system32\mdm.exe
c:\program files\common files\installshield\updateservice\isuspm.exe
C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Tools\system\KeePass\KeePass.exe
C:\Documents and Settings\xld\Desktop\gmer.exe
C:\Documents and Settings\xld\Desktop\dds.scr

============== Psuedo HJT Report ===============

uStart Page = hxxp://www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=1061125
uSearch Page = hxxp://www.google.co.uk/hws/sb/dell-usuk/en/side.html?channel=uk
uSearch Bar = hxxp://www.google.co.uk/hws/sb/dell-usuk/en/side.html?channel=uk
uDefault_Page_URL = http://www.google.co.uk/ig/dell?hl=e...uk&ibd=1061125
mDefault_Page_URL = hxxp://www1.euro.dell.com/content/default.aspx?c=uk&l=en&s=gen
mDefault_Search_URL = hxxp://www.google.com/ie
mStart Page = hxxp://www1.euro.dell.com/content/default.aspx?c=uk&l=en&s=gen
uInternet Connection Wizard,ShellNext = hxxp://www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=1061125
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://www.google.com/ie
BHO: {00C6482D-C502-44C8-8409-FCE54AD9C208} - c:\program files\techsmith\snagit 7\SnagItBHO.dll
BHO: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - c:\program files\security\avg8\avgssie.dll
BHO: {5CA3D70E-1895-11CF-8E15-001234567890} - c:\windows\system32\dla\DLASHX_W.DLL
BHO: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
BHO: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: {A057A204-BACC-4D26-9990-79A187E2698E} - c:\progra~1\security\avg8\AVGTOO~1.DLL
BHO: {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - c:\program files\google\googletoolbarnotifier\3.1.807.1746\swg.dll
BHO: {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - c:\program files\pdfcreator toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
BHO: {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\program files\bae\BAE.dll
TB: {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - c:\program files\techsmith\snagit 7\SnagItIEAddin.dll
TB: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
TB: {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - c:\program files\pdfcreator toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
TB: {A057A204-BACC-4D26-9990-79A187E2698E} - c:\progra~1\security\avg8\AVGTOO~1.DLL
TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
TB: {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - c:\program files\pdfcreator toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
TB: {A057A204-BACC-4D26-9990-79A187E2698E} - c:\progra~1\security\avg8\AVGTOO~1.DLL
uRun: [ModemOnHold] c:\program files\netwaiting\netWaiting.exe
uRun: [DellSupport] "c:\program files\dell support\DSAgnt.exe" /startup
uRun: [Windows Live FolderShare] "c:\documents and settings\xld\local settings\application data\foldershare\FolderShare.exe" /background
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [Timezone] "c:\program files\utilities\desktop\microsoft time zone\TimeZone.exe"
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRunOnce: [FlashPlayerUpdate] c:\windows\system32\macromed\flash\NPSWF32_FlashUtil.exe -p
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /installquiet
mRun: [NVHotkey] rundll32.exe nvHotkey.dll,Start
mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.6.0_07\bin\jusched.exe"
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [Dell QuickSet] c:\program files\dell\quickset\quickset.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [IntelZeroConfig] "c:\program files\intel\wireless\bin\ZCfgSvc.exe"
mRun: [IntelWireless] "c:\program files\intel\wireless\bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
mRun: [DLA] c:\windows\system32\dla\DLACTRLW.EXE
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [Corel Photo Downloader] c:\program files\corel\corel snapfire plus\Corel Photo Downloader.exe
mRun: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
mRun: [WinBackup Scheduler] c:\program files\utilities\system\winbackup\wbsched.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [RemoteControl] "c:\program files\multimedia\video\cyberlink\powerdvd\PDVDServ.exe"
mRun: [LanguageShortcut] "c:\program files\multimedia\video\cyberlink\powerdvd\language\Language.exe"
mRun: [MSConfig] c:\windows\pchealth\helpctr\binaries\MSConfig.exe /auto
mRun: [AVG8_TRAY] c:\progra~1\security\avg8\avgtray.exe
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\isuspm.exe -startup
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
dRunOnce: [RunNarrator] Narrator.exe
StartupFolder: c:\docume~1\xld\startm~1\programs\startup\spamba~1.lnk - c:\program files\security\spambayes\bin\sb_tray.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\digita~1.lnk - c:\program files\digital line detect\DLG.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office 2000\office\OSA9.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\snagit~1.lnk - c:\program files\techsmith\snagit 7\SnagIt32.exe
IE: E&xport to Microsoft Excel - c:\progra~1\mi699f~1\office12\EXCEL.EXE/3000
IE: Edit with Altova X&MLSpy - c:\program files\altova\xmlspy2008\spy.htm
IE: {2222EF56-F49E-4d07-A14E-8D2B08766958} - c:\program files\altova\xmlspy2008\spy.htm
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
IE: {2222EF56-F49E-4d07-A14E-8D2B08766958} - c:\program files\altova\xmlspy2008\spy.htm
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~4\office11\REFIEBAR.DLL
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
Filter: application/x-internet-signup - {A173B69A-1F9B-4823-9FDA-412F641E65D6} - c:\program files\tiscali\tiscali internet\dlls\tiscalifilter.dll
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\security\avg8\avgpp.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
AppInit_DLLs: avgrsstx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

============= SERVICES / DRIVERS ===============

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys
R2 {95808DC4-FA4A-4C74-92FE-5B863F82066B};{95808DC4-FA4A-4C74-92FE-5B863F82066B};\??\c:\program files\multimedia\video\cyberlink\powerdvd\000.fcl
R2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\security\avg8\avgemc.exe
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\security\avg8\avgwdsvc.exe
R2 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys

=============== Created Last 30 ================

2008-11-16 23:37 250 a------- c:\windows\gmer.ini
2008-11-16 13:58 <DIR> --d----- c:\program files\Altova
2008-11-16 13:58 <DIR> --d----- c:\program files\common files\Altova
2008-11-16 13:57 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Altova
2008-11-15 20:17 <DIR> --d----- c:\windows\Downloaded Installations
2008-11-12 10:25 <DIR> --d----- c:\windows\system32\NtmsData
2008-11-11 21:45 <DIR> --d----- C:\Apps
2008-11-11 21:45 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Lavasoft
2008-11-07 16:34 <DIR> --d----- c:\docume~1\xld\applic~1\SpamBayes
2008-11-02 22:36 602 a------- c:\windows\DisCat.ini
2008-11-02 22:18 458 a------- c:\windows\DisCat.udl
2008-11-02 22:18 35,840 a------- c:\windows\system32\MSADODC.oca
2008-10-31 10:45 <DIR> --d----- C:\9
2008-10-26 18:26 <DIR> --d----- c:\docume~1\xld\applic~1\MZTools Software
2008-10-24 11:22 <DIR> --d----- c:\windows\system32\CatRoot_bak
2008-10-22 15:33 <DIR> --d----- C:\PortQryV2
2008-10-22 10:20 <DIR> --d----- c:\program files\Desktop Restore
2008-10-20 14:26 <DIR> --d-h--- C:\$AVG8.VAULT$
2008-10-19 20:54 10,520 a------- c:\windows\system32\avgrsstx.dll
2008-10-19 20:54 <DIR> --d----- c:\windows\system32\drivers\Avg
2008-10-19 20:54 <DIR> --d----- c:\docume~1\xld\applic~1\AVGTOOLBAR
2008-10-19 20:53 76,040 a------- c:\windows\system32\drivers\avgtdix.sys
2008-10-19 20:53 97,928 a------- c:\windows\system32\drivers\avgldx86.sys
2008-10-19 20:53 <DIR> --d----- c:\program files\security
2008-10-19 20:53 <DIR> --d----- c:\program files\AVG
2008-10-19 20:53 <DIR> --d----- c:\docume~1\alluse~1\applic~1\avg8
2008-10-18 22:39 <DIR> --d----- c:\program files\WSP

==================== Find3M ====================

2008-11-13 20:06 <DIR> --d----- c:\docume~1\xld\applic~1\foobar2000
2008-11-11 21:43 <DIR> --d----- c:\program files\common files\Wise Installation Wizard
2008-11-08 12:47 81,569 a------- c:\windows\system32\nvModes.dat
2008-10-26 18:26 <DIR> --d----- c:\program files\Tools
2008-10-22 10:43 <DIR> --d----- c:\docume~1\xld\applic~1\ZoomBrowser EX
2008-10-22 10:17 <DIR> --d----- c:\program files\internet
2008-10-19 20:31 <DIR> --d----- c:\docume~1\alluse~1\applic~1\McAfee.com
2008-10-15 16:57 332,800 a------- c:\windows\system32\dllcache\netapi32.dll
2008-10-05 17:35 <DIR> --d----- c:\program files\Microsoft Visual Studio 8
2008-09-22 20:24 <DIR> --d----- c:\docume~1\xld\applic~1\Azureus
2008-09-15 11:57 1,846,016 a------- c:\windows\system32\win32k.sys
2008-09-15 11:57 1,846,016 -------- c:\windows\system32\dllcache\win32k.sys
2008-08-29 00:45 1,882,112 a------- c:\windows\system32\statfi.dll
2008-08-28 10:04 333,056 -------- c:\windows\system32\dllcache\srv.sys
2008-08-19 09:38 18,432 -------- c:\windows\system32\dllcache\iedw.exe
2008-08-16 23:52 <DIR> --d----- c:\docume~1\xld\applic~1\Canon
2008-08-02 11:17 <DIR> --d----- c:\docume~1\xld\applic~1\IcoFX
2008-08-02 10:00 <DIR> --d----- c:\docume~1\xld\applic~1\Audacity
2008-07-28 11:25 <DIR> -cd-h--- c:\docume~1\alluse~1\applic~1\{7D40A23F-4A98-48ED-AC55-24562215B6E9}
2008-07-23 22:51 <DIR> --d----- c:\docume~1\alluse~1\applic~1\ZoomBrowser
2008-07-20 21:18 <DIR> --d----- c:\docume~1\xld\applic~1\TextPad
2008-07-07 18:55 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Azureus
2008-07-06 18:03 <DIR> --d----- c:\docume~1\xld\applic~1\Mp3tag
2008-06-22 19:23 <DIR> --d----- c:\docume~1\xld\applic~1\McAfee.com Personal Firewall
2008-06-22 19:19 <DIR> --d----- c:\docume~1\alluse~1\applic~1\PreEmptive Solutions
2007-12-02 17:34 <DIR> --d----- c:\docume~1\alluse~1\applic~1\McAfee.com Personal Firewall
2007-10-29 16:16 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Applications
2007-05-08 22:01 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Tarma Installer
2007-04-16 17:48 <DIR> --d----- c:\docume~1\xld\applic~1\AOL
2007-02-27 10:08 <DIR> --d----- c:\docume~1\alluse~1\applic~1\SingleClick Systems
2006-11-25 14:30 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Dell
2006-11-25 14:23 <DIR> --d----- c:\docume~1\xld\applic~1\You've Got Pictures Screensaver
2006-11-25 14:23 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Viewpoint
2006-11-25 14:21 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Corel
2006-11-25 14:20 <DIR> --d----- c:\docume~1\xld\applic~1\Intel
2006-11-25 14:19 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Intel
2004-08-11 17:25 <DIR> --d----- c:\docume~1\alluse~1\applic~1\SBSI
2008-07-14 19:30 88 ---shr-- c:\windows\system32\89F1C1172B.sys
2008-07-23 22:44 88 ---shr-- c:\windows\system32\D8C8698105.sys
2008-07-23 22:47 5,486 a--sh--- c:\windows\system32\KGyGaAvL.sys

============= FINISH: 23:39:05.60 ===============

[martes]

<bump>

[martes]

<bump><bump>

Please help someone.

[Ried]

Hello martes and thank you for your patience.

I'm not seeing any malware. You recently installed AVG8--does it seem that your problems began around that time?

[martes]

Hi Ried,

No, not really, it had already started before that. It is much worse when AVG starts its scheduled scan, but it is still bad at other times.

Is AVG8 a known issue re performance?

[Ried]

Yes, it is known to bog down some systems. Let's get a look from the outside. Run this online scan and we'll see if it reveals anything for us.

Using Internet Explorer or Firefox, visit http://www.kaspersky.com/kos/eng/par...avwebscan.html

1. Click Accept, when prompted to download and install the program files and database of malware definitions.


2. To optimize scanning time and produce a more sensible report for review:

• Close any open programs
  
• Turn off the real time scanner of any existing antivirus program while performing the online scan

3. Click Run at the Security prompt. The program will then begin downloading and installing and will also update the database. Please be patient as this can take several minutes.

• Once the update is complete, click on My Computer under the green Scan bar to the left to start the scan.
• Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
• Do NOT be alarmed by what you see in the report. Many of the finds have likely been quarantined.
• Click View scan report at the bottom.
  
  
  
  
• Click the Save as Text button to save the file to your desktop so that you may post it in your next reply

[martes]

Hi Ried,

Took a long time to run, but it ended finally.

Here is the file

Bob

[Ried]

Hi Bob,

Nothing there that would cause performance issues. You can go ahead and empty your McAfee Spamkiller folder:

C:\Documents and Settings\All Users\Application Data\McAfee\SpamKiller\Users\2\Front

Also empty your Outlook Express Deleted Items folder. To do so:

• Open Outlook Express
• Right click on Deleted Items
• Select 'Empty Deleted Items folder'.
• Click 'Yes' at the next popup box to succesfully empty the Deleted Items folder.

Is it possible that the install of this program on Oct 5th may be the source of the system drain?

05/10/2008 18:33:27 - Installed Microsoft Expression Web 2

As I'm not seeing any malware in any of these logs, it appears to be OS related and you would be better served discussing these issues with the folks in the Windows Vista Support section. It would be a good idea to provide them with a link to this thread for reference.


As a side note, you can uninstall all the previous versions of java as they are no longer needed. This will free up some of that precious space you have left. : )

J2SE Runtime Environment 5.0 Update 11
J2SE Runtime Environment 5.0 Update 6
J2SE Runtime Environment 5.0 Update 9
Java(TM) 6 Update 2
Java(TM) 6 Update 3
Java(TM) 6 Update 5
Java(TM) SE Runtime Environment 6 Update 1

**Leave this version intact - Java(TM) 6 Update 7