Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Too Many Programs Running In Background


  • Please log in to reply
41 replies to this topic

#1 patop

patop

  • Members
  • 65 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:San Francisco
  • Local time:04:44 AM

Posted 22 April 2007 - 07:15 PM

Since the last windows update, my computer has slowed down in the booting process significantly. I had already cleaned things up using msconfig before, so there was little left to uncheck. I called Dell Support, and they tell me it's a software problem, maybe malware. As far as I can tell after numerous scans in safe and regular mode, there's no virus or spywared. When I open the windows task manager, I see that there are 73 processes running. This does sound a bit excessive, but then, maybe I just don't know . . . .

Also, down on the task bar, the quick launch is not right. There is no "arrow" that opens up the usual applications, and some of them that I expect to be there, like hotsync manager, is not there, even though it IS checked in the startup. Moreover, while I can sync my palm, I am unable to open the application.

I use ZoneAlarm Security Suite, though I have shut off the firewall and use Window XP, because the firewall interferred with my use of Adobe products. As far as anti-spyware programs go, I use adware, spybot, windows defender, spyware guard, and spyware blaster. I update regularly.

Thanks for your help, Pat

BC AdBot (Login to Remove)

 


#2 rigel

rigel

    FD-BC


  • Members
  • 12,944 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:South Carolina - USA
  • Local time:05:44 AM

Posted 22 April 2007 - 07:26 PM

Try this hotfix from Microsoft. MS Help and Support

The above hotfix address problems that were caused by a Microsoft update.

Hope this helps.

rigel

"In a world where you can be anything, be yourself." ~ unknown

"Fall in love with someone who deserves your heart. Not someone who plays with it. Will Smith


#3 patop

patop
  • Topic Starter

  • Members
  • 65 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:San Francisco
  • Local time:04:44 AM

Posted 22 April 2007 - 10:46 PM

Thank you for your reply Rigel,

Tried it (the hotfix for my version of xp), but it didn't make any difference. It used to be that my computer was done booting 1minute and 40 after the wallpaper came up (I know this, because that's how long the Star Wars DS9 music was for starting windows - when the music was done, it was ready). It's been a couple of weeks now that I've been fighting with this - looks like it started around April 6th from the Restore point that I set. Anyway, since then it takes a little over 4 minutes for it to finish booting after the wallpaper shows up.

There is no arrow in the quick launch section right now. But the next time I reboot it might be there, only to disappear the next day.

Does this make any sense? Is this ringing any bells? :thumbsup:

Thanks, Pat

#4 tg1911

tg1911

    Lord Spam Magnet


  • Members
  • 19,274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Louisiana
  • Local time:03:44 AM

Posted 22 April 2007 - 11:37 PM

To try and troubleshoot if it's a hot fix causing the problem, do a System Restore, to a day, before the problems started.
Then, install the fixes one at a time, rebooting after the installation of each fix, and see which fix, if any, is causing the problem.
MOBO: GIGABYTE GA-MA790X-UD4P, CPU: Phenom II X4 955 Deneb BE, HS/F: CoolerMaster V8, RAM: 2 x 1G Kingston HyperX DDR2 800, VGA: ECS GeForce Black GTX 560, PSU: Antec TruePower Modular 750W, Soundcard: Asus Xonar D1, Case: CoolerMaster COSMOS 1000, Storage: Internal - 2 x Seagate 250GB SATA, 2 x WD 1TB SATA; External - Seagate 500GB USB, WD 640GB eSATA, 3 x WD 1TB eSATA

Become a BleepingComputer fan: Facebook

#5 rigel

rigel

    FD-BC


  • Members
  • 12,944 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:South Carolina - USA
  • Local time:05:44 AM

Posted 23 April 2007 - 07:38 AM

Welcome back!

I suggest printing these instructions out. This is the procedure I used to fix my computer. The HOTFIX works "sometimes" so I like to try that method first :thumbsup:

1. Click Start->Run, type "services.msc" (without quotation marks) in the
open box and click OK.
2. Double click the service "Automatic Updates".
3. Click on the Log On tab, please ensure the option "Local System account"
is selected and the option "Allow service to interact with desktop" is
unchecked.

4. Check if this service has been enabled on the listed Hardware Profile. If
not, please click the Enable button to enable it.
5. Click on the tab "General "; make sure the "Startup Type" is "Automatic".
Then please click the button "Start" under "Service Status" to start the
service.
6. Repeat the above steps with the other service: Background Intelligent
Transfer Service (BITS)

Step 4: Re-register Windows Update components and Clear the corrupted
Windows Update temp folder

1. Click on Start and then click Run,
2. In the open field type "REGSVR32 WUAPI.DLL" (without quotation marks) and
press Enter.
3. When you receive the "DllRegisterServer in WUAPI.DLL succeeded" message,
click OK.
4. Please repeat these steps for each of the following commands:

REGSVR32 WUAUENG.DLL
REGSVR32 WUAUENG1.DLL
REGSVR32 ATL.DLL
REGSVR32 WUCLTUI.DLL
REGSVR32 WUPS.DLL
REGSVR32 WUPS2.DLL
REGSVR32 WUWEB.DLL

After the above steps are finished. Sicne temporary folder of Windows Update
may be corrupted. We can refer to the following steps to rename this folder
that

1. Click Start, Run, type: cmd and press Enter. Please run the following
command in the opened window.

net stop WuAuServ
(note, you might need to reboot before the net stop command will work)

2. Click Start, Run, type: %windir% and press Enter.
3. In the opened folder, rename the folder SoftwareDistribution to SDold.
4. Click Start, Run, type: cmd and press Enter. Please run the following
command in the opened window.

net start WuAuServ


Good luck

rigel

"In a world where you can be anything, be yourself." ~ unknown

"Fall in love with someone who deserves your heart. Not someone who plays with it. Will Smith


#6 patop

patop
  • Topic Starter

  • Members
  • 65 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:San Francisco
  • Local time:04:44 AM

Posted 23 April 2007 - 06:47 PM

Well, first I tried the system restore back to the date of 4/6, and that caused a bigger problem. I got the error message: "Your SQL Server installation is either corrupt or has been tampered with (Could not open SQLEVN70.RLL). Please uninstall then re-run setup to correct this problem." And I was unable to access wireless.

So I undid the system restore and brought it back to current settings. (I also save everything I could think of on an external hard drive, just in case. But I'll bet I forgot something!)

Then I followed the directions in the last reply from rigel. I didn't have any problems in following the steps. But nothing has changed.

I'm open to suggestions!

Thanks, Pat :thumbsup:

#7 rigel

rigel

    FD-BC


  • Members
  • 12,944 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:South Carolina - USA
  • Local time:05:44 AM

Posted 23 April 2007 - 08:17 PM

Ok let's try this tool. SecondScan

Run SecondChance.exe and select option <1>

Post that log here please.

One note. You have to have the .net framework installed. If you don't have this installed - from the IE tool menu - select Windows Update - select Custom Update - select the Software Optional - choose the .net updates.

You will also see a few critical updates to install as well.

Thanks patop

rigel

Edited by rigel, 23 April 2007 - 08:35 PM.

"In a world where you can be anything, be yourself." ~ unknown

"Fall in love with someone who deserves your heart. Not someone who plays with it. Will Smith


#8 patop

patop
  • Topic Starter

  • Members
  • 65 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:San Francisco
  • Local time:04:44 AM

Posted 23 April 2007 - 10:08 PM

Here it is. Thank you for looking through it. Pat

SecondScan by Omerr

Log for edited
Taken on 4/23/2007 8:02:33 PM

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
Information on all Hard Drives:

Drive C:\
File system: NTFS
Available space to current user: 70035746816 bytes
Total available space: 70035746816 bytes
Total size of drive: 245730238464 bytes
Free Space in %: 28%
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
All information on Internet Explorer:

Version: 7.0.5730.11
The IE's cache limit is: 252 MB
WARNING!!! IE's cache size is greater than 100MB
HTTP1.1 is enabled!
Proxy is disabled!
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
All information on HardWare:

Physical Memory: Total Capacity: -2048
WARNING!!! The Physical Memory's capacity is less than 384MB!
MotherBoard: Model: 0YC523 *** Manufacturer: Dell Inc.
BIOS version: DELL - 7
Processors:
Processor #1 - Current speed of processor (in MHZ): 2793 *** Manufacturer: GenuineIntel *** Level: 15 *** ProcessorId: BFEBFBFF00000F44
Processor #2 - Current speed of processor (in MHZ): 2793 *** Manufacturer: GenuineIntel *** Level: 15 *** ProcessorId: BFEBFBFF00000F44
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
All running processes:



C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe

C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe


C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\PRISMSVR.EXE
C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\SM1BG.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\palmOne\Hotsync.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Dell Wireless\PRISMCFG.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\StickyNote\StickyNote.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Xdrive\Xdrive Desktop\XdriveService.exe
C:\WINDOWS\system32\mqsvc.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\WINDOWS\system32\Tablet.exe
C:\WINDOWS\system32\WTablet\TabUserW.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\WINDOWS\system32\Tablet.exe
C:\Program Files\Adobe\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe

C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Uniblue\ProcessLibrary\qaccess.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\edited\Desktop\New Folder\SecondScan.exe

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
All Startup Tasks:

Creative Detector, ["C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R]
DellSupport, ["C:\Program Files\DellSupport\DSAgnt.exe" /startup]
ctfmon.exe, [C:\WINDOWS\system32\ctfmon.exe]
swg, [C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe]
Uniblue Quick Access, ["C:\Program Files\Uniblue\ProcessLibrary\qaccess.exe" /startup]
ZoneAlarm Client, ["C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"]
Windows Defender, ["C:\Program Files\Windows Defender\MSASCui.exe" -hide]
SM1BG, [C:\WINDOWS\SM1BG.EXE]
SBDrvDet, [C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r]
MsmqIntCert, [regsvr32 /s mqrt.dll]
IAAnotif, [C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe]
DLA, [C:\WINDOWS\System32\DLA\DLACTRLW.EXE]
CTSysVol, [C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe /r]
NvCplDaemon, [RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup]
P17Helper, [Rundll32 P17.dll,P17Helper]
DMXLauncher, [C:\Program Files\Dell\Media Experience\DMXLauncher.exe]
Adobe Version Cue CS2, [C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe]
Acronis Scheduler2 Service, ["C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"]
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
System information:

Operating System's Version: Microsoft Windows XP Professional
CSD's Version: Service Pack 2
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

Edited posting to protect privacy

Edited by rigel, 23 April 2007 - 10:29 PM.


#9 rigel

rigel

    FD-BC


  • Members
  • 12,944 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:South Carolina - USA
  • Local time:05:44 AM

Posted 23 April 2007 - 10:30 PM

Let me do some digging. Thanks for posting the log!

rigel

"In a world where you can be anything, be yourself." ~ unknown

"Fall in love with someone who deserves your heart. Not someone who plays with it. Will Smith


#10 patop

patop
  • Topic Starter

  • Members
  • 65 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:San Francisco
  • Local time:04:44 AM

Posted 23 April 2007 - 10:31 PM

You are speedy! :thumbsup:

#11 rigel

rigel

    FD-BC


  • Members
  • 12,944 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:South Carolina - USA
  • Local time:05:44 AM

Posted 24 April 2007 - 12:29 PM

Hi patop,

On the surface, I don't see anything that appears to be malware. You can use msconfig and stop the dell entries. Can we go back to the beginning for a moment. besides doing MS updates, did you load/remove any hardware or software. Had anything changed?

I am looking for the changes now - cause and effect.

I suggest downloading ATF - Cleaner from atribune.com. It is a great way to do file house cleaning. :thumbsup: When you run the program, I would check the select all box and then uncheck the cookies box. Then select Empty Selected. If you are comfortable logging in to all your websites that require a password, check cookies as well.
I would also recommend defragging your hard drive.

Try that and let us know how things went.

rigel

Edited by rigel, 24 April 2007 - 12:30 PM.

"In a world where you can be anything, be yourself." ~ unknown

"Fall in love with someone who deserves your heart. Not someone who plays with it. Will Smith


#12 patop

patop
  • Topic Starter

  • Members
  • 65 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:San Francisco
  • Local time:04:44 AM

Posted 24 April 2007 - 01:02 PM

The most recent programs that I added were
- My Wallet (to keep track of passwords),
- DayNotez (which I could live without if it is a problem), and
- FontAgent Pro (which I loaded after the problem because I was having trouble with too many fonts and Adobe Illustrator). I have uninstalled that program because it wasn't working properly (it's a beta, most of the company's programs are written for Mac) . . . there seemed to be some conflicts.

I followed your instructions, and will next defrag the drive, though I do it fairly regularly. I think I did it before I wrote the initial email about this problem. But . . . . my memory :flowers:

Thanks, Rigel, and I will get back after I see the results.

Pat :thumbsup:

#13 patop

patop
  • Topic Starter

  • Members
  • 65 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:San Francisco
  • Local time:04:44 AM

Posted 24 April 2007 - 08:33 PM

Well, I've done that. And the first reboot seemed to be a little faster than previously, but Roxio Easy Media Creator 7 wants to install the Napster client. And keeps on wanting to when other programs are opened. I kind of recall running into something like this with Roxio before. But I don't remember what I did.

I have a new version of Napster than the one on the disk. But it's easy enough to update. So when I finish dinner I will come back and uninstall, then reinstall Roxio, and see where that takes me. :thumbsup:

#14 rigel

rigel

    FD-BC


  • Members
  • 12,944 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:South Carolina - USA
  • Local time:05:44 AM

Posted 24 April 2007 - 08:58 PM

Honestly Pat, Napster isn't the best thing to have on your computer. P2P sites are notorious for their malware found on them. From what you are saying, I think it is "phoning home" for something.

It is time to post an HJT log and let the malware guys look deeper into your computer. Use this guide to post a HJT log. You have mentioned already running through the scans, so just post a HJT log. Be sure to post in that forum - not here.

When you post, please reference this topic.

Please allow me to say - well done so far. :thumbsup: Good luck and I will be watching to see what is done on the HJT side. If you have any questions just ask!

rigel

"In a world where you can be anything, be yourself." ~ unknown

"Fall in love with someone who deserves your heart. Not someone who plays with it. Will Smith


#15 patop

patop
  • Topic Starter

  • Members
  • 65 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:San Francisco
  • Local time:04:44 AM

Posted 24 April 2007 - 10:08 PM

Hi Rigel, I am replying to you on my laptop while doing scanning on my desktop as per the instructions on the link. I have a question about Napster. I don't use it for P2P sharing - as far as I know. I have an MP3 player, and am able to download music to it from Napster - much like MusicMatch or iTunes. Napster seems to be a regularly offered application on computers and commercial software programs. If used in that way, is it a problem?

Thanks, Pat




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users