XP - Very Slow on Start up...

[RickT]

Guys,

I have been having issues with my PC where its really slow on start up, around 10 mins from boot.

I have tried loads of things to no avil..

Anyway..

If any of you have any advice.. Please take a look at my active thread on another forum trying to solve this..

http://forums.techguy.org/windows-nt-2000-xp/672244-xp-very-slow-start-up.html

Please post any comments on here,

Cheers


Rick

[Sam]

What have you recently changed?

Any recent MS updates?

You're running AVG and Norton - bin Norton (in my opinion) and run only AVG.

How long does Safe Mode take to boot?

When did you last defrag?

etc

[Eshrules]

i'd point the finger on the HDD

what size HDD are you running? how close to capacity is it? as above, any virus scans or spyware scans been run?

[RickT]

What have you recently changed?

Any recent MS updates?

You're running AVG and Norton - bin Norton (in my opinion) and run only AVG.

How long does Safe Mode take to boot?

When did you last defrag?

etc

The issues has been present for the last 3 months... I have resorted in just not turning the pc off for the last month or so!!

Defragged it yesterday.. I tend to defrag it once a week..

Running Norton, Yes this can slow it down, but in the past its been fine..

Safe mode.. Going to boot it up in Safe mode again tonight and time it..


i'd point the finger on the HDD

what size HDD are you running? how close to capacity is it? as above, any virus scans or spyware scans been run?


HDD is a 80GB Drive, Running all core Applications with 40GB free, Slave Data drive is on IDE1 250GB.

Theres not Spyware / Adware present on the PC.

I have reviewed a Highjackthis log which shows no sign of adware...

I have spent hours trying to sort this!!

I will post the thread i created below so you can see what i have done..

Cheers guys!

Rick

[RickT]

Hi Guys,

Currently i am having an issue with the my PC where it is taking arrpox 8-10 minutes to boot from dead. Recycling / rebooting also takes the same time.

Spec Below.

Currently Installed Memory: 2GB
DDR PC3200
Available Memory Slots: 0
Number of Banks: 4
Dual Channel Support: Yes

CPU Manufacturer: AuthenticAMD
CPU Family: AMD Sempron Processor 3000+ Model 15, Stepping 2
CPU Speed: 1790 MHz
MB - HP-Compaq Ambermine
ATI RADEON XPRESS 200 Series.

OS - MS XP - SP2 (32bit)
(Not on a network, apart from the Router on RJ45)

I have completed numerous scans and repaired when advised to using the below apps.
AVG
Norton (no Spy ware or Ad ware found)
Spy bot
Reg Cure
Registry Mech
Windows Defender
CC Cleaner
Msconfig - Start up - Reduced to min..

http://i148.photobucket.com/albums/s13/RickT_album/Startup.jpg

Primary HDD Drive, IDE - 80GB - 40GB Free.
All applications are installed on Primary

Slave HDD Drive - IDE 250GB - (data drive)

I have completed a few CHKDISK's and Defrag's

Disabled MS Auto updates via services.

I have also done a few other stuff while looking for answers over the web, (i cant recall these at present)

As above, the PC takes around 8-10 minutes to boot, the XP logo screen comes and goes, hangs for around 2 minutes on a black (DOS like) screen, no commands etc present, then hangs on the desktop image for a few minutes, then get the Window media sound, a few minutes later explore.exe process starts bring up the tool bar... then a few more minutes, (may be 5) waiting for it to start and become active.

ONCE the PC is booted, there are no issues at all with it.... just the start up process..

I have also reduced the local profile to around 800mb from around 3GB.
This issue has been ongoing for the last 4 months at least, so i have resorted to just leaving it turned on, the other day i rebooted it for the first time in about 3-4 weeks.

But today i thought i need to get this sorted!!
If you have any ideas or tweaks, please can you advise, any comments would greatly be appreciated.


BELOW IS THE HIJACK LOG FILE.
Scan saved at 22:47:29, on 15/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\KService\KService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\NETGEAR\WG111v2\WG111v2.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: NETGEAR WG111v2 Smart Wizard.lnk = C:\Program Files\NETGEAR\WG111v2\WG111v2.exe
O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O8 - Extra context menu item: Lookup on Merriam Webster - file://C:\Program Files\ieSpell\Merriam Webster.HTM
O8 - Extra context menu item: Lookup on Wikipedia - file://C:\Program Files\ieSpell\wikipedia.HTM
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: Photobucket Publisher - http://s148.photobucket.com/csve/ie_plugin.php
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4A026B12-94F3-4D2F-A468-96AA55DE20A5} (NetCamPlayerWeb11g Control) - http://www.sm4wdq.com/webcam/NetCamPlayerWeb11g.ocx
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1166320821891
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1192311580000
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://194.23.40.122/activex/AxisCamControl.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762# # (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: KService - Kontiki Inc. - C:\Program Files\KService\KService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
--
End of file - 13357 bytes

FURTHER INFO BELOW
http://i148.photobucket.com/albums/s13/RickT_album/Startuplist2.jpg
http://i148.photobucket.com/albums/s13/RickT_album/Startuplist.jpg

Just to add on the end of this.. Onstartup.. once i get the desktop img, before the taskbark, if i view Task man, System idle Process is @ around 90 % taking the CPU usage....

Apart for that, no other process are taking over.



I have just ran a few other processor on, "Tune Xp"
ULTRA-FAST BOOTING

This is a multi-stage tweak. First, it moves the bootfile to the edge of the drive, after which it defrags the

system drive. Can reduce Windows boot time substantially, sometimes more than 300%

&
DEFRAG BOOT FILES

This function quickly assembles the bootfiles and stacks them together. Speeds up boot performance.

Which have made no differance what so ever..
Below i have enclosed a copy of the Task manger on start up.
I access Task Man as soon as the desktop img appeared. The logging is on Normal.

The points between the RED markers is the CPU @ around 0-5% for approx 3 minutes with the desktop img present only.

Following the Red markers, the Wondows log on tune was heared..
BETWEEN the blue markers, (approx 5 minutes later, from the red marker) is when the Task bar appeared..

As you will see there was a spike on CPU usage for approx 4 minutes..
Following the Final blue marker, the system continued to boot, and finally after around another 5-6 minutes i was able to work as normal.

http://i148.photobucket.com/albums/s13/RickT_album/TMFFINAL.jpg

As mentioned above, once the system is up and running i have no issues at all.

Any ideas?

if you require me to provide any further logs files etc.. please advise.

Thanks for reading.

Rick

[Eshrules]

how old's the HDD you've got windows running on Rick?

is there a chance it could be dying.... i had one drag it's tail for a couple of weeks, shortly before it died?

might be worth swapping the master with a new (perhaps spare, but ok) drive, with a clean install of windows, see how that goes?

[RickT]

how old's the HDD you've got windows running on Rick?

is there a chance it could be dying.... i had one drag it's tail for a couple of weeks, shortly before it died?

might be worth swapping the master with a new (perhaps spare, but ok) drive, with a clean install of windows, see how that goes?

Hi Carl,

The HDD is only 16months old and once the PC has booted i have no issues at all,
I think it must be due to the bootup.ini, Services, or some process failing on start up.

I am in 2 minds about reformatting, but can only do this as a least resort.. (due to not knowing where any of my build disc's are)

Cheers

Rick

[P0WERS160]

I thought I'd mentioned it as no-one else has yet..but have you run a full system scan recently? Never know.. Might be some SERIOUS virus

[RickT]

I thought I'd mentioned it as no-one else has yet..but have you run a full system scan recently? Never know.. Might be some SERIOUS virus


Yeah, i have been down that route and everthing is clean..

I have updated the TECH forum with further info if you would like to take a look..

http://forums.techguy.org/windows-nt...-start-up.html

Cheers Guys.

Rick

[Desertfish]

Hi Rick:

I know it might be difficult to recall since the problem started so long ago, but do you remember something that might have happened just before; Installed some software or Windows updates, etc...

Your highjack list is quite extensive (and there's a lot of multiple entries). I know you mentioned that your system is fine once it is fully booted. This has no doubt got to do with the amount of RAM you're running. I'm not sure though what the effects are at bootup.

On your startup tab in msconfig, take the tick away of any entry in there. Usually there is nothing in there that Windows really need to boot. These options are stored somewhere else.

This one is a long shot, but is there anything inn your Netgrear routerlog that might give you an idea as to what might be happening? A smurf attack might slow down the bootup process although it would also make your internet access slower than usual. Next time you reboot, try to unplug your ethernet cable first and see it it makes any difference (as I said it's a long shot but its still worth a try).

Try scaning for rootkits. These will usually not show Windows as your OS cannot see them. As such, all your antivirus software will not recognise the process either. You can find some rootkit scanners on http://www.fileheap.com/freesoftware/rootkit.html

Let us know how you're getting on. I'm sure there's some more brains hanging around here that can chip in with idea's.

[Clinterous]

What about re installing xp and starting afresh?
Have you adjusted the 'page filing' up? (not sure if this will help your issue)
I use something called 'speed up my pc' by 'uniblue' - this does a fairly aggresive clean up of files without harming the system.Where does it go slow - at posting or windows load up?

[Captain Answer]

Mine's been doing it too kidder, its driving me mad at the moment as I know everything is clean and setup properly and its only for about 5 mins on startup, my hardware setup's quite similar too, if i find it i will let you know

[RickT]

Hi Rick:

I know it might be difficult to recall since the problem started so long ago, but do you remember something that might have happened just before; Installed some software or Windows updates, etc...

As its been like this for some time I am unable to recall anything which may have slowed it down.

Your highjack list is quite extensive (and there's a lot of multiple entries). I know you mentioned that your system is fine once it is fully booted. This has no doubt got to do with the amount of RAM you're running. I'm not sure though what the effects are at bootup.



On your startup tab in msconfig, take the tick away of any entry in there. Usually there is nothing in there that Windows really need to boot. These options are stored somewhere else.

Below is the current Start up in MSCONFIG, I have already tweaked this down as far as i could. I will remove all options and disconnet the router to just test.

http://i148.photobucket.com/albums/s13/RickT_album/Startup.jpg


This one is a long shot, but is there anything inn your Netgrear routerlog that might give you an idea as to what might be happening? A smurf attack might slow down the bootup process although it would also make your internet access slower than usual. Next time you reboot, try to unplug your ethernet cable first and see it it makes any difference (as I said it's a long shot but its still worth a try).

I will give it a go..

Try scaning for rootkits. These will usually not show Windows as your OS cannot see them. As such, all your antivirus software will not recognise the process either. You can find some rootkit scanners on http://www.fileheap.com/freesoftware/rootkit.html

I have just downloaded this, I will run this once i have completed the above.

Let us know how you're getting on. I'm sure there's some more brains hanging around here that can chip in with idea's.


Thanks for the above tips.

I will let you know how i get on..

Cheers

Rick

[RickT]

Hi,

update..

Removed all items from Startup..

Disconneted Router..

Boot up time still the same..... :(

Below is the report from Rootkit..

http://i148.photobucket.com/albums/s13/RickT_album/Rootkit.jpg

I will be back..

Rick

[passat>sport]

Are you sure it isn't a program you've loaded recently!

Abode-reader and my kodak camera software make my pc as slow as hell on boot up. I always remove them and reload when needed.

[RickT]

Are you sure it isn't a program you've loaded recently!

Abode-reader and my kodak camera software make my pc as slow as hell on boot up. I always remove them and reload when needed.


All non related services and programs have all been disabled while troubleshooting..

I am thinking it has to be something with the registry or boot.ini

Rick

[paul b]

Could it be anything as obvious as a disk clean up needed? (I am sure you have thought of that). My PC did something like this about 18 months ago after I had just installed a Nero DVD burning suite. I uninstalled it, the PC speeded up again. Re-installed it, it ran at normal speed.

[dansansome]

dunno if this will be of any use, but for today only, you can get a startup manager program for free from "givaway of the day"

http://www.giveawayoftheday.com/

(hope this link is ok, apologies if not...)


there might be something useful in there that'll diagnose your problem.

[Desertfish]

Not sure if a startup manager is the right answer although it is still worth a try.

In my view, the fact that the system is running ok once it is fully booted rules out any hardware issues. Also, if there would be a hardware problem, I think that you would have more varying boot times which should gradually get worse and worse until the system doesn't want to boot at all.

Anyway, if you want real peace of mind, I would recommend a utility called Sisoft-Sandra (http://www.vnunet.com/vnunet/downloads/2129001/sisoft-sandra-lite-2005).

I also just stumbled upon a Microsolft utility called BootVis.exe. Apparently won't speed up your boot time but this it analyses what's happening on your system during bootup and can help identify any problems (haven't tried it myself so don't take my word for it...) http://www.soft32.com/download_19687.html
Well worth a try though.

If you still have no luck, or BootVis.exe is not returning any usable results, you can try the following:

- De-install all the software you don't really use that often anyway.
- De-install all double software (i.e. leave only one anti-virus program, one spyware program, etc... on your system)
- Make sure your anti-virus program is not loading at bootup.
- Turn off automaric updates for everything (i.e. Windows, spyware and anti-virus defenition files and all other software that want's to update itself from time to time.
- Defrag your harddrive using a 3rd party defrag tool (if you haven't already done so).

Good luck.

[RickT]

Not sure if a startup manager is the right answer although it is still worth a try.

In my view, the fact that the system is running ok once it is fully booted rules out any hardware issues. Also, if there would be a hardware problem, I think that you would have more varying boot times which should gradually get worse and worse until the system doesn't want to boot at all.

Anyway, if you want real peace of mind, I would recommend a utility called Sisoft-Sandra (http://www.vnunet.com/vnunet/downloads/2129001/sisoft-sandra-lite-2005).

I also just stumbled upon a Microsolft utility called BootVis.exe. Apparently won't speed up your boot time but this it analyses what's happening on your system during bootup and can help identify any problems (haven't tried it myself so don't take my word for it...) http://www.soft32.com/download_19687.html
Well worth a try though.

If you still have no luck, or BootVis.exe is not returning any usable results, you can try the following:

- De-install all the software you don't really use that often anyway.
- De-install all double software (i.e. leave only one anti-virus program, one spyware program, etc... on your system)
- Make sure your anti-virus program is not loading at bootup.
- Turn off automaric updates for everything (i.e. Windows, spyware and anti-virus defenition files and all other software that want's to update itself from time to time.
- Defrag your harddrive using a 3rd party defrag tool (if you haven't already done so).

Good luck.


Thanks for the info,

I have been looking into using BootVis.exe, i downloaded it last night, just need to run it now.

I have already uninstalled all applications which are not required,

I am going to contine looking into it tonight..

I will keep you posted!

Cheers

Rick

[sooty]

Rick,
I'm not sure if you know this but it is proven that running 2 anti-virus programs done not help stop viruses. I work in IT and come across this a lot, for some reason when 2 anti-virus programs are run the PC gets worse. I'd 100% stick with AVG even if it the free version, Norton in the IT industry is know to be rubbish even though it is a market leader.

Personally if you know you have had any kind of virus on your PC I'd recommend a full format and re-install.
If you do not have your PC restore CD's then I'll be able to get most drivers for you!

Gimme a shout!

[sooty]

Hi again,
I've had a look at your PC spec, you should not be getting anything longer a 4 min boot absolute MAX, its a good spec PC.

I have had a look at your high jack file, do you use MS remote assistance? If not you can see attempts when someone is trying to log into the back-end of your PC quite a few times. Serious mate do a full re-install. Also you are running a lot of different types of anit-spy software ETC, I am an IT analyst for the Abbey bank so have to deal a lot with security. At home all I use is AVG anti-virus and I setup the router to act as a hardware firewall and I've NEVER had any virus or attempted hacks.

[mobitune]

Don't mean to hijack, just a quick one...

I run the rootkit scanner "rootkit hook analyser 3.02" and found 7 kernel hooks - is this bad?

I tried exporting to a log file so I could paste it here, but it gives an error and wont write the file. Basically they are all connected to sptd.sys so I think its probably nothing to worry about, as I have daemon tools installed.

To the OP; try download your hdd manufacturer's disk utilities and run a non destructive test on your hard disk. I in the past have had hard disks which use excessive amounts of CPU time and transfer very slowly. I have then run analysis software from the manufacturer and found the drive to be in the first stages of failure. (one of the drives showed a SMART power on time of over 7 years, even though the drive was only 18 months old!)

[sooty]

Hi mobitune,
I found this online which might be able to help:
http://www.greatis.com/security/What%20is%20SPTD%23%23%23%23.sys.htm (http://www.greatis.com/security/What%20is%20SPTD%23%23%23%23.sys.htm)

kernel's generally are bad but not when it relates to some files (such as sptd.sys), the message your getting is apparently known when using RootKit Hook Analyser 3.02.
I've used AVG Anti-Rootkit in the past and its very good and very fast too, you can download it free at http://www.download.com

As for the SMART hard drive check, it is useful (when it works) but as we tend to run Windows XP or Vista these days most people tend to rely on applications and not BIOS information.

Do you have IDE hard drive's do you know?

[Ben]

i just sorted mine from booting unwanted items.

go to run and type msconfig then select the startup tab and un tic everything you dont want to start.

[sooty]

i just sorted mine from booting unwanted items.

go to run and type msconfig then select the startup tab and un tic everything you dont want to start.

Yep just make sure you dont untick something system critical

[RickT]

Cheers for the info,

AVG has been removed and running with Norton, (seen as though i have paid for it, )

Below is the link to the thread with further info..

http://forums.techguy.org/windows-nt-2000-xp/672244-xp-very-slow-start-up-3.html

I have got the boot time now down to around 6 mins..

Still got a few things to get rid of yet.

Cheers

Rick

[sooty]

Cheers for the info,

AVG has been removed and running with Norton, (seen as though i have paid for it, )

Below is the link to the thread with further info..

http://forums.techguy.org/windows-nt-2000-xp/672244-xp-very-slow-start-up-3.html

I have got the boot time now down to around 6 mins..

Still got a few things to get rid of yet.

Cheers

Rick


Glad you got it all sorted in the end mate... A few more tweeks and you'll get it running back to normal!

[RickT]

Glad you got it all sorted in the end mate... A few more tweeks and you'll get it running back to normal!


Still not 100% yet as start up is around 5mins... Ideally would like this back to around 2 minutes.. lol

Rick

[sooty]

Still not 100% yet as start up is around 5mins... Ideally would like this back to around 2 minutes.. lol

Rick

RE-INSTALL, RE-INSTALL, RE-INSTALL! LOL

[RickT]

RE-INSTALL, RE-INSTALL, RE-INSTALL! LOL


No... lol..

Got reboot down to 2 minute 45 seconds now...

Rick

[sooty]

No... lol..

Got reboot down to 2 minute 45 seconds now...

Rick

Well done for getting it down... But I'd still re-install to clear it up.
Would you get your car serviced and then use your old oil filter in it? - No I don’t think so.

Somehow I don’t think it is the same as servicing the car though!

[nickynibbles]

I had various pc issues until last year when I decided to upgrade various bits & bobs, went through a complete re-install at the same time and its run like a dream ever since! Thoroughly recommend doing this if you can get your hands on the reboot discs. I was going up to 1GB RAM & adding an additional 250GB HDD as a data disc leaving the original 80GB disc to hold program files. I installed the 250GB disc & transfered all my files I wanted to keep to the new disc, unplugged it and went through a complete re-install of XP, Mcafee etc etc. Its worked like a dream ever since. Do it Rick, just unplug your data disc during the re-install to make sure you dont lose anything you dont want to!!!

[RickT]

Well done for getting it down... But I'd still re-install to clear it up.
Would you get your car serviced and then use your old oil filter in it? - No I don’t think so.

Somehow I don’t think it is the same as servicing the car though!


lol...

Many its more like tidying your car... you have tidyied the cabin... but cant be bothered to do the boot....

So.. just got to get the boot clean and then its perfect ! LOL! (see what i did there!)

Rick

[RickT]

I had various pc issues until last year when I decided to upgrade various bits & bobs, went through a complete re-install at the same time and its run like a dream ever since! Thoroughly recommend doing this if you can get your hands on the reboot discs. I was going up to 1GB RAM & adding an additional 250GB HDD as a data disc leaving the original 80GB disc to hold program files. I installed the 250GB disc & transfered all my files I wanted to keep to the new disc, unplugged it and went through a complete re-install of XP, Mcafee etc etc. Its worked like a dream ever since. Do it Rick, just unplug your data disc during the re-install to make sure you dont lose anything you dont want to!!!


Hi,

i have got all the disc i need now and backed up the data.... but as its running pretty good i may just hold fire....

As said before.. yes i know a reboot is the best option.. but its got to the stage now where it will be good if i can sort it without.. even though is taken 1000 times longer!

Rick

[onzarob]

Rick is the swapfile fragmented?

[Desertfish]

I have had a look at your high jack file, do you use MS remote assistance? If not you can see attempts when someone is trying to log into the back-end of your PC quite a few times...

Missed that one... Where did you see that...? Anyway, can't you prevent this by shutting down MS Messenger? As far as I can remember, I read somewhere that MS Messenger is a propper security hole in your PC and the ideal backdoor for someone hijacking your system. If you're not using Remote assistance you're better off shutting MS Messenger down. Steps to follw in XP to do this are:


Click Start > Settings > Control Panel.
Click Administrative Tools.
Click Services.
Scroll down and highlight Messenger.
Right-click the highlighted line and choose Properties.
Click the STOP button.
Select Disable or Manual in the Statup Type scroll bar.
Click OK.

Unlike what most people might think, MS Messenger has got nothing to do with MSN...(lol).

Btw Rick... what exactly did you do in order to get this boot time down again?

[RickT]

MSN...(lol).



Btw Rick... what exactly did you do in order to get this boot time down again?


MS Mess is disabled,

in regards to getting the boot time down..

Take a look at all 6 pages here.
.
http://forums.techguy.org/windows-nt-2000-xp/672244-xp-very-slow-start-up.html

Rick

[j1n20]

i commented n realised how old the post is lol

[onzarob]

i commented n realised how old the post is lol
;)
No Problem :)