slow performance & system restore prob

Mut68

Fledgling Freddie
Joined
Jan 8, 2004
Messages
112
ok for some reson my pc is beying slow as fook and ALL my games are crashing all the time :( iv tryed system resore and it faild or somthing about a system shut down, i read some whare that ses i should use driver roll back but i dont know wot 1 is not working properly? plz help
 

Jonty

Fledgling Freddie
Joined
Dec 22, 2003
Messages
1,411
hehe, I didn't think anyone actually read that, WPKenny :D

As for your problem, Mut68, WPKenny is right in that we need more information. If a system restore failed part way through then I *think* any changes applied should have been removed. Regardless, try starting system restore again (which includes driver rollback in a fashion) and choose a restore point on the calendar when your computer was working correctly and start the restore process. Your newly created files (documents, downloads etc.) should remain safe but Windows' drivers and settings will revert to their previous state.

Other than that, what problems do you get in games? Do you get specific error messages? Corrupt or missing drivers could well cause problems, so if the system restore doesn't resolve the trouble try visiting ATI or nVidia and grabbing the latest drivers appropriate for your card, and WindowsUpdate for any other patches and updates you may need.

Without more specifics, though, these are only fairly general points.

Kind Regards
 

Mut68

Fledgling Freddie
Joined
Jan 8, 2004
Messages
112
pc spex are:

win xp
athlon 2400+
geforece 4 mx 440
512 ddr ram

and also iv tryed most of the restore points and it just ses the same thing and everthing is up to date. no error messages come up in game but when iv got my win media player playing away and when i click on firefox the music seens to sip and crakle for some reson. any other information u need just ask
 

phlash

Fledgling Freddie
Joined
Dec 24, 2003
Messages
195
Have a look in task manager - see if anything is using up all your CPU? If possible close it down, maybe find out what it was doing (like IE running a virus / trojan / backdoor / etc.!!)
 

Mut68

Fledgling Freddie
Joined
Jan 8, 2004
Messages
112
no nothing just the unusual just the normal stuff
 

Jonty

Fledgling Freddie
Joined
Dec 22, 2003
Messages
1,411
Hi Mut68

Have you tried WindowsUpdate and updating your other drivers?

That said, it seems odd things should just go. Perhaps you should run a thorough spyware and antivirus scan just to make sure your computer hasn't become infected. Microsoft Antispyware is free and very reliable, as is AdAware or Spybot etc. As for anti-virus, if you don't have a package then AVG is a free solution.

Kind Regards

Jonty

P.S. For those interested, Microsoft is planning Windows OneCare, a package of utilities to protect users against spyware, viruses and other nasties as well as assisting with firewall protection, backups and system optimisations. At the moment it seems it will be subscription-based, but existing elements of this package (presumably like Microsoft AntiSpyware) are currently available for free.
 

Mut68

Fledgling Freddie
Joined
Jan 8, 2004
Messages
112
nope prob still there i tryed them all before (microsoft 1 is prety gd :D) but pc is still slow and fooked and system wont restore :(
 

Mut68

Fledgling Freddie
Joined
Jan 8, 2004
Messages
112
Logfile of HijackThis v1.99.1
Scan saved at 19:07:26, on 15/05/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\DOCUME~1\Scott\LOCALS~1\Temp\Rar$EX00.109\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://shared.blueyonder.co.uk/bygames/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://shared.blueyonder.co.uk/bygames/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0C815DED-D5CB-A822-300F-EE12B9258ADD} - C:\PROGRA~1\ENCSET~1\Thunk cool.exe (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\RunOnce: [__GSCAdditionalInstallation__] "C:\DOCUME~1\Scott\LOCALS~1\Temp\SetupDemo.exe" -AdditionalInstall
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by16fd.bay16.hotmail.msn.com/activex/HMAtchmt.ocx
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: System Idle Service (sysidleserv) - Unknown owner - c:\windows\system32\adprot.exe (file missing)
 

xane

Fledgling Freddie
Joined
Dec 22, 2003
Messages
1,695
What I can see as suspects from that list:

1. adprot.exe is known spyware, get rid of it using HiJackThis, although I suspect it has already been disabled.
2. OSA9.EXE, this is Office Startup, try and disable it from the Startup folder as its a know CPU hog.
3. thunkcool.exe - no idea, can't find anything on google, you could try removing it using HiJackThis.
4. The setupdemo.exe being run from the temp folder looks highly suspicious, remove using HiJackThis.
5. ptspk.exe is for your modem, if you are not using a modem then disable it.

To remove using HiJackThis simply check the box and then "fix".

Create a system restore point before you do any of the above.
 

Jonty

Fledgling Freddie
Joined
Dec 22, 2003
Messages
1,411
As a last resort you could always format your computer and start afresh, which virually guarantees to fix any problems. It is drastic, but if you're prepared to backup all your stuff, and spend a few hours reinstalling everything (the format itself is quite easy, it's just everything else which takes the time) then it's something you may want to consider.

Kind Regards
 

Users who are viewing this thread

Top Bottom