Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

dell inspiron 1011 choppy and slow


  • Please log in to reply
7 replies to this topic

#1 jesus420monkey

jesus420monkey

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:06:19 AM

Posted 27 January 2012 - 07:47 PM

Hi there! hopefully you can help me...

My buddies Inspiron 1011 is acting a bit annoying and I need help please.

Initially, it was thought to have some nasty malware, and malwarebytes took care of the popups and it would seem everything else, per the latest scans.

It is running XP Home version 2002 sp3, Intel Atom CPU n280 @1.66ghz with .99gb ram

I have done a chkdisk, sfc, disk cleanup, malware bytes, avast antivirus, disabled unnecessary startup items in msconfig, run a rootkit analyser, deleted the .DMP & .TMP files, and still experience the following:

slow boot up
audio crackles and is choppy
windows load scrolling down slow and choppy
OS lags when switching or opening programs

What else could this be?!

Any assistance is appreciated, and if I should be referred to a malware forum, I'll go there, but thought I should try here first.

Thanks!!
B.

Edited by hamluis, 07 February 2012 - 07:13 AM.
Moved from XP to Am I Infected.


BC AdBot (Login to Remove)

 


#2 mark1956

mark1956

  • Security Colleague
  • 271 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Spain
  • Local time:11:19 AM

Posted 28 January 2012 - 06:50 AM

Please post the SFC and Disk Check logs as follows:

Go to Start > Run and type: eventvwr.msc /s , and hit Enter.
When Event Viewer opens, click on "Application", then scroll
down to "Winlogon" and double-click on it. This is the log
created after running Checkdisk.
Copy and paste it into your next post.

In XP it does not create a log just a single report for any/every file replaced and one to say the scan finished.
Start | Run | Type: eventvwr | Click OK |
Click on System in the left hand pane.
Double click on the Windows File Protection entry in the right hand pane. Copy and paste it into your next post.

Did this problem suddenly start to happen or has it been a gradual reduction in performance?

Please also look in Task Manager and see what the CPU usage is running at when the PC is idle (no software or browser running). If it is much above 8% look down the list of running processes and see what is using the CPU. Post the process name/s exactly as written in the list.

Edited by mark1956, 28 January 2012 - 06:54 AM.


#3 jesus420monkey

jesus420monkey
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:06:19 AM

Posted 06 February 2012 - 04:36 PM

Mark, my apologies for the delay in replying. I will obtain the information you ask for and reply ASAP.
Brandon

#4 mark1956

mark1956

  • Security Colleague
  • 271 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Spain
  • Local time:11:19 AM

Posted 06 February 2012 - 05:03 PM

No problem, whenever you're ready.

#5 jesus420monkey

jesus420monkey
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:06:19 AM

Posted 06 February 2012 - 05:13 PM

Here is the chkdsk log:
Event Type: Information
Event Source: Winlogon
Event Category: None
Event ID: 1001
Date: 1/27/2012
Time: 1:01:05 PM
User: N/A
Computer: DELL_NETBOOK01
Description:
Checking file system on C:
The type of the file system is NTFS.
Volume label is OS.

A disk check has been scheduled.
Windows will now check the disk.
Cleaning up minor inconsistencies on the drive.
Cleaning up 770 unused index entries from index $SII of file 0x9.
Cleaning up 770 unused index entries from index $SDH of file 0x9.
Cleaning up 770 unused security descriptors.
CHKDSK is verifying Usn Journal...
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
Free space verification is complete.
The upcase file content is incorrect.
Correcting errors in the uppercase file.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
Windows has made corrections to the file system.

146008919 KB total disk space.
26732892 KB in 49306 files.
31292 KB in 6233 indexes.
0 KB in bad sectors.
180855 KB in use by the system.
65536 KB occupied by the log file.
119063880 KB available on disk.

4096 bytes in each allocation unit.
36502229 total allocation units on disk.
29765970 allocation units available on disk.

Internal Info:
c0 1e 01 00 ff d8 00 00 71 26 01 00 00 00 00 00 ........q&......
4d 18 00 00 02 00 00 00 a3 05 00 00 00 00 00 00 M...............
7a 83 8e 1e 00 00 00 00 d2 3a bf 65 00 00 00 00 z........:.e....
0a 0a 85 3e 00 00 00 00 5a 3d 7a b6 28 00 00 00 ...>....Z=z.(...
94 1a 8f 7b 05 00 00 00 f6 85 4a 37 2f 00 00 00 ...{......J7/...
99 9e 36 00 00 00 00 00 90 38 07 00 9a c0 00 00 ..6......8......
00 00 00 00 00 70 a5 5f 06 00 00 00 59 18 00 00 .....p._....Y...

Windows has finished checking your disk.
Please wait while your computer restarts.


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Here is the SVC log:

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64016
Date: 1/26/2012
Time: 11:05:14 PM
User: N/A
Computer: DELL_NETBOOK01
Description:
Windows File Protection file scan was started.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


When I shut down all programs and monitored the CPU usage it remained below 8% except for the very occasional spike to 11% (about twice in a 3 minute period). As soon as I opened Microsoft Word, the CPU usage spiked to 50% +

Attached is a screen shot of the processes running with all programs closed.

Thanks!!

Attached Files



#6 mark1956

mark1956

  • Security Colleague
  • 271 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Spain
  • Local time:11:19 AM

Posted 06 February 2012 - 05:44 PM

I don't see anything out of the ordinary in the Task Manager screenshot.

The disk check log looks fine.

You have only posted the first entry of the SFC log which only shows that it has started, as explained in my instructions there will be an entry for every file replaced (if it replaced any) and one more to say it has finished the scan.

Could you open up Malwarebytes and click on the log tab. Post the contents of the log it produced from the scan you did.

Please follow this instruction to run a test on the hard drive. Choose the extended test.

Identify the make of your hard drive and then use one of the links below to get the manufacturer's diagnostics for ISO (CD) not the one for Windows.

When the download is complete right click the file and select Extract Here and burn the image to a CD.

In Windows 7 right click the extracted file, select Open With, then select Windows Disc Image Burning Tool then follow the prompts. For all other versions of windows (if you do not have an ISO burner) download this free software. ImgBurn
Install the program and start the application. Select the top left hand option to burn image file to disk and then on the next window click on the small yellow folder icon and browse to the file you have downloaded from the links below. Then click on the two grey discs with the arrow in between (bottom left) and leave it to complete the operation.

Boot the PC into the Bios setup and set the CD/DVD drive to 1st in the boot sequence. Insert the disk in the drive then reboot and the disc will load into dos.

Excelstore Use EStest CD image
Hitachi/IBM Use the Drive Fitness Test - CD Image.
Seagate, Samsung, Maxtor & Quantum Follow links for SeaTools
Western Digital

Toshiba/Fujitsu
If you have a Toshiba/Fujitsu hard drive I would suggest the use of the diagnostics from the Seagate link as this will work on all makes of drive and on any OS.



#7 jesus420monkey

jesus420monkey
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:06:19 AM

Posted 06 February 2012 - 06:05 PM

Mark,

I am unable to do the Extended Test on the HDD as the Dell Mini's do not have CD drives.

Also, I failed to answer one earlier inquiry of yours - this started abruptly - coinciding with pop-ups and redirects that have since been taken care of. In addition, as an addendum to the original fault report - the sound on shutdown sounds normal, but during startup and while working, it crackles and cuts out.

As for the SFC log - there is only one from Windows File Protection under System. There are also a bunch of errors from Service Control Manager.

The latest Malware logs have been clean - no malicious items infected. But here is the one that was initially run and discovered an issue - maybe it's possible that something was not cleaned properly/completely?

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 6451
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
4/26/2011 9:38:35 PM
mbam-log-2011-04-26 (21-38-35).txt
Scan type: Full scan (C:\|)
Objects scanned: 183561
Time elapsed: 2 hour(s), 44 minute(s), 20 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 1
Files Infected: 4
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
c:\program files\adware professional (Rogue.AdwarePro) -> Quarantined and deleted successfully.
Files Infected:
c:\system volume information\_restore{64534b76-601d-4598-8429-4df73c537af3}\RP61\A0012279.dll (Rogue.Agent) -> Quarantined and deleted successfully.
c:\system volume information\_restore{64534b76-601d-4598-8429-4df73c537af3}\RP61\A0012280.exe (Rogue.AdwarePro) -> Quarantined and deleted successfully.
c:\system volume information\_restore{64534b76-601d-4598-8429-4df73c537af3}\RP63\A0012566.exe (Rogue.Installer) -> Quarantined and deleted successfully.
c:\program files\adware professional\noadware4_021011.na (Rogue.AdwarePro) -> Quarantined and deleted successfully.

#8 mark1956

mark1956

  • Security Colleague
  • 271 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Spain
  • Local time:11:19 AM

Posted 06 February 2012 - 07:41 PM

You have had a Rogue security program installed on your system (AdwarePro), I would recommend you start a new thread in the "Am I Infected" forum and post a link for this thread.

You will get the help in that forum to run scans on your system to check for any other infections which I would suspect you have. Malwarebytes is a great scanner but it can miss some infections that are deeper in the system.

Mod Edit: Moved topic to Am I Infected forum ~ Hamluis.

Edited by hamluis, 07 February 2012 - 07:12 AM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users