Help with folders in XP home edition.

[torontoguy]

I have a P4 2.8 Ghz cpu with HT Technology..with 1 gb RAM which runs on Xp home edition. (Dell) For the past one week Ive noticed that its taking time (for ever) for me to open folders in my system. I tried so much..Cant figure out what is causing it. It was never like that, the moment i double click, it used to open and now its taking its sweet time...some time more than 15-20 secs. Could some one help me to fix this??Looking for your valuable suggestions and advices and Thanks in advance for your time and effort to reply.Good day.
George.

[DrBroccoli]

More than likely you've installed many programs over the days or surfed the web. It may all seem harmless but if you look at the little stuff of what it really does:

When you install a new program, most, if not all, install some kind of "autostart" feature where it will start automatically when you turn your computer on, or it will run in the tray (area near the clock) 24/7. One or two of these are harmless, but if you really add them up, they're all sucking RAM and CPU power down there.

Common programs that do this are:
AIM (Y!, MSN, ICQ, mostly all Instant Messengers)
Quicktime
Many unneeded Dell services
P2P programs
All kinds of Camera software and what not.

Also, while you are surfing the web if you don't have any kind of protection you're probably just catching all the spyware you can with a giant net. Spyware basically just runs in the background and sucks more RAM and slows your system down.

To fix these problems it would help to have a little bit more understanding of them. Here's a pretty basic run-through of what spyware is and a good way to remove it that I've found.

So your computer slowing down? Getting ads? Being redirected to unknown sites? Then please, continue to read on. Because I'm going to show you in this guide how to remove it. And how to stop it from happening again.

First off, lets get a basic definition of spyware/adware/malware. Those things can simply be defined as this, any software that covertly gathers information about a user while he/she navigates the Internet and transmits the information to an individual or company that uses it for marketing or other purposes. There's many different variations, some are hijackers witch basically mean they take over your computer. Some are stealthy, meaning they secretly operate and slow down your computer gathering information and the likes. However the most popular are the ad banners, this is the kind of spyware/adware that's most annoying. It just displays completely random and useless ads when your Internet browser isn't even open. Very Very Annoying. If you have any of these symptoms, unknown re directions. Slowing of your computer. Random banner ads, then you have spyware/adware.

Now that you have a basic understanding of what it is, lets get on to removing.

Commonly, when you get spyware the first thing it does is add itself to the registry and to the start up database. The start up database is a list of items that are to load when you start up your computer, this is so the software will start up every time you load your computer so it doesn't miss anything. So the first thing were going to do is clear the start up database of any unknown items. To find the start up database, do the following.

Click start -> click run -> in the dialog box that pops up, type MSCONFIG -> A small box will pop up with a few different tabs.
Since these are used mostly for advanced users leave these alone. The one we need in start up, on the far right, click this tab. You will then be presented with a list of start up items. Usually it looks like this:


The start up item(Example) The Command (C:\Windows\Example.exe) Location In registry (Software..

Now there will be a few checks next to the items that are to start up every boot. Now lets go through the list. Since every user has a different computer and preference, I cant list every item in the list. But if you know what it is, or installed it yourself and like it. Keep it. If you don't know what it is, look through a start up database. They can tell you whether the item should stay, or should go. Here's a few example ones.

Bleeping Computer - Startup Programs Database Just type the name of the item in the list and BC will attempt to find it.
CastleCops - StartupList Again type the name of the object and this will search for your object and verify it.

If it shows up as bad, uncheck it. Once you have unchecked all bad/unknown items. Click apply then ok, it will prompt you to reboot, but dont. Some spyware adds itself to start up every time. So don't reboot.

Now were going to go through some steps that will help you show a trained professional a log of what is running on your system. So they can help you remove certain bad things. This is accomplished with the aid of a tool called Hijack this, HJT is a great tool used to give an up to date log of everything that is happening on your system, It is very simple and easy to use to help you get results. Go here, http://www.merijn.org/files/hijackthis.zip and download a free copy. Its in zip file form so you ll need winzip or winrar to extract it. Once the download is completed, extract Hijack this to its own working directory. Ex. C:\HJT Just make sure its alone in a folder by itself.

Run Hijack this, youll be presented with this menu.


Were looking for do a system scan and save log file, click it. Hijack this will now scan your system. Once it is completed, (takes a few seconds) A notepad will popup with the details of the hijack this scan. Copy the ENTIRE contents of the notepad to a post in the ARP forums, the thread this was written in, or e-mail it to me at mastr.jedi@gmail.com or Webmaster@techsomething.net for analyzing. Since Hijack this is a very powerful tool, it should only be analyzed by a trained professional. Usually getting your log analyzed by a trained person, will remove the greater of the security threat. Leaving only a few more steps for removal. Please read on...

Now that your a little cleaner (hopefully) Were going to do some last minute removal and quarantine procedures. This requires the function of a few programs.

First off, before we get to the actual programs, were going to run some online scans from well known antivirus venders. These venders have online scans, that will detect and remove any threats on your computer online and completely free. See below for list.

Panda Active Scan online - Panda ActiveScan – Free online antivirus to combat viruses, spyware and other Internet threats.
Internet Explorer only. Requires email address. Requires Active-X components to be installed. Approx 12MB download.

BitDefender online scan - http://www.bitdefender.com/scan/licence.php
Internet Explorer only. Must agree to a EULA. Need to allow installation of an Active X component.Some of the options are not clearly explained.

Trend Micro Housecall - Trend Micro™ HouseCall
(European version, supports Netscape, Mozilla, Firefox and Opera)

Kaspersky - Virus File Scanner

Now to the programs, you should be well on your way home to being spyware free.
Please go to the following sites and download and install the following programs.

(if you don't have a virus scanner, ex norton/zonelabs or other, then download and install this program.) AVG Anti virus home. A Free widely used virus scanner. get it here
AVG Anti Virus: HOME

(if you currently do not have a firewall. Ex zone labs, Norton Internet security, or other. lets get a free one from zone labs.
Zone Labs by Check Point Software Technologies - Download & Buy

Ad-aware : A spyware/adware/malware scanner. Very popular, and very good.
Ad-Aware SE Personal Edition - Free Software Downloads and Software Reviews - Download.com

Spyware Blaster : A tool used to immunize yourself against bad active x controls and cookies, that can cause easy access to your system by bad software.
SpywareBlaster Download

CCleaner : A tool used to clean out the very pit of your computer of all that crap piling up, not exactly anti spyware, but it will save you a few steps of the cleanup process.
Ccleaner.com

Once the above tools are downloaded and installed, Run spyware blaster first.

You will be presented with the main program menu, or sometimes the tutorial for getting started. Since it comes with a tutorial already, just follow it. Its very useful. If you dont see the tutorial or dont know what to do, Ill explain. First, click updates on the left hand side navigation menu.


Then click check for updates. Spyware blaster will connect to the Internet and download the latest immunizations. Once it is completed, click the protection button. You will be presented with a list. On the bottom of which will say, Internet explorer, mozilla, restricted sites. Then spyware blaster database. Next to the database it should say, 4xxx items are unprotected. Right under that there's a section called quick tasks. Under that, click enable all protection. This will add all the active x controls, and all the bad cookies to the denied list or un-trusted sections of your web browser. This will make sure that those bad sites wont be able to download anything to your computer, even if you do go there. After everything is immunized, exit spyware blaster.

Now run Ccleaner. In the left hand side, check everything that you want ccleaner to clean when it runs on your computer. I recommend checking everything. Then click the applications tab right above that. Again check everything you want to, I recommend it all. Now, click run cleaner in the bottom right hand corner once everything is checked. Ccleaner will now clean up your system, it can take anywhere from 1 minute to 10 minutes depending on how junked up your pc is. Once it is finished cleaning, a list will be presented of all the crap cleaned off. Go ahead, take a gander. Amazing isn't it? Close ccleaner once it is finished cleaning.


Now don't run ad-aware yet, we have a few more steps.

If your still using Internet explorer, stop. Its one of Microsoft's worst products, so many security holes and glitches un-patched. We need to get you running a much more secure web browser.

Go to mozilla.org and download a copy of the Mozilla web browser. I believe the latest version is 4.07. Now Mozilla is an open source, web browser with far less vulnerabilities and potential than Internet explorer. Its also much more user friendly and can accomplish much more. The best part is, you can import all your settings and bookmarks in from Internet explorer if you wish. Meaning you don't lose any data or work. Install it, run it. It will prompt you to set as your default browser, click yes and dont show this message again. Mozilla will start up, usually it will be set to Mozilla.org as your homepage. If you'd like to change this, click tools -> options. It should be the first tab. Now after you change your homepage, go through the other configuration options as well and configure it to your liking. It takes a few minutes to orient yourself.

Now, start up ad-aware. When started you ll see the main program menu with a navigational menu to the left.

The first step you should do is update Ad-Aware SE so it is using the latest Spyware/Hijacker definitions. This will enable the software to recognize as much of these types of programs that it can. You should click on the Web Update button found in the bottom left corner of the scan menu. Once clicked youll be presented with this menu


Connect and let it download and install the latest updates.

Once completed updating, were going to perform a full system scan. This clean up your registry and anything we missed in the previous removal steps. Hopefully this should be the final step of the cleanup. So, click the start button. You should be presented with this menu


Make sure you select perform a full system scan, and make sure search for negligible risk entries and search for low risk threats is checked. Now click next, this will lead you to the actual scan which will begin scanning your system. Is can take a while, so now's the time to take a break check back occasionally.

Once completed you ll be presented with a screen similar to this.


Click on the next button in the right hand corner, You will then be presented with a screen that shows all the objects found that are flagged as Spyware or Hijackers.

At this point you should either right click on the screen and and choose the Select All Objects option or individually put a check mark in each objects check box, designated by the area surrounded by the red box in Figure 10, that you would like quarantined. When all the objects that you would like quarantined are checked, you should click on the Next button. Ad-Aware SE will now present you with a confirmation box as to whether or not you would like to remove the objects you have just selected. If you would like to do so, press the OK button. You ll will then be taken back to the original scan screen. Now were going to clear the quarantined items. So click open quarantine list and then select the quarantines and delete them off your hard drive forever. You may close the program.

Now earlier, I asked if you did not have already to install an anti virus program, and a firewall. To stop hackers/viruses in their tracks. Zonelabs firewall, And AVG home free anti virus. Since these are 2 varying programs, there are to separate guides written for configuration and use here.

AVG: AVG Anti Virus: FAQ

Zonelabs:
Zone Labs by Check Point Software Technologies - Service & Support

By now your computer should be pretty clean. Immunized and ready for use again. If you still have a few problems, Reboot your computer and please submit another fresh HJT log and that should do it.

However, if your computer is still horribly riddled with spyware, here's the truth, sometimes spyware is just to difficult to recover from, or just cant be removed. Right now though, if its only a little problem another HJT log can save you. But if you've tried and tried and its still there...In those cases which is semi-rare, you need to reinstall windows xp and start brand new again. A guide if you really need to, is found here on my site.

http://techsomething.net/SupportMisc...urComputer.htm

Now after your reinstall, make sure and follow the steps above for immunization and safeguarding to prevent this from happening again.


Conclusion/tips

That's it people, hope you've learned a few things about keeping your computer clean. And were eventually able to remove what was causing you so many problems.

Send all questions or comments to mastr.jedi@gmail.com

Tips:
-Always have an antivirus/firewall these are a must to keep your computer clean. Always have them updated and ready for use.

-Always have a few antispyware programs, Ad-aware and spyware blaster being a couple.

-Try to be safe, don't go to unknown sites and randomly download games and software. Programs cant protect you forever, it takes your cooperation to.

[dvelez1985]

I noticed that you pointed out the system specs. It doesn't matter how fast or how great it is or the way DELL makes it sound. Your computer like any other is prone to those issues.

[torontoguy]

Thank you guys for your time, esp to Shadowdog.Really appreciate that.Im sorry I forgot to mention that I have symantec AV and Spysweeper and zone alarm firewall installed, for protection against most of the stuff you mentioned. Plus I dont download any games from the internet and I have McAfee site advisor installed to be on guard. My system is not slow at all...If that's what you guys are pointing at. Any programs will start and run immediately after I click open them.Have only 3 programs in my startup, Ashampoo Magic defrag, Spysweeper and Webshots! My problem is Its taking time to Open folders in my computer. Any folder in my system is taking at least 15-18 secs to open since a week. It was never like that. This problem doesnt affect any of the programs installed...Its specific to Folders and I dont know why. As shadow dog suggested, Im posting a log file...May be you can suggest some thing by which I can clear this problem. Once again, Thank you so much for your valuable time.
George.
Log File:
======
Logfile of HijackThis v1.99.1
Scan saved at 11:01:29 PM, on 11/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
E:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Ashampoo Magic Defrag\bin\aDefragService.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exe
C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Ashampoo Magic Defrag\bin\aDefragCtrl.exe
E:\Program Files\Webshots\webshots.scr
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\SiteAdvisor\4144\SiteAdv.exe
D:\Internet Downloads\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://www.sympatico.ca"); (C:\Documents and

Settings\George\Application Data\Mozilla\Profiles\default\8ze44tn5.slt\prefs.j s)
N3 - Netscape 7: user_pref("browser.search.defaultengine",

"engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csea rchplugins%5CSBWeb_01.src");

(C:\Documents and Settings\George\Application Data\Mozilla\Profiles\default\8ze44tn5.slt\prefs.j s)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program

Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -

C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program

Files\SiteAdvisor\4144\SiteAdv.dll
O2 - BHO: IE 4.x-6.x BHO for Internet Download Accelerator -

{2A646672-9C3A-4C28-9A7A-1FB0F63F28B6} - E:\PROGRA~1\IDA\idaiehlp.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program

Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program

Files\SiteAdvisor\4144\SiteAdv.dll
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - Startup: Webshots.lnk = E:\Program files\Webshots\Launcher.exe
O4 - Global Startup: Ashampoo Magic Defrag.lnk = C:\Program Files\Ashampoo Magic

Defrag\bin\aDefragCtrl.exe
O8 - Extra context menu item: Download ALL with IDA - E:\Program Files\IDA\idaieall.htm
O8 - Extra context menu item: Download with IDA - E:\Program Files\IDA\idaie.htm
O8 - Extra context menu item: E&xport to Microsoft Excel -

res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -

C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Internet Download Accelerator - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} -

E:\Program Files\IDA\ida.exe
O9 - Extra 'Tools' menuitem: &Internet Download Accelerator -

{9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - E:\Program Files\IDA\ida.exe
O9 - Extra button: Pop up Blocker Pro - {B968ADC9-A2EC-40BE-8679-F0A75FBE296E} - E:\Program

Files\Pop up Blocker Pro\pdie.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network

Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -

%windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program

Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} -

C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation

Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -

http://update.microsoft.com/microsof...?1137256951546
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -

http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {D57262F5-9637-4E67-BC59-88C53EA76FC3} (ULcontrol Control) -

http://imagelab.bestbuy.ca/en/ulcontrolxp.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -

"C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program

Files\SiteAdvisor\4144\SiteAdv.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} -

C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe Active File Monitor V5 (AdobeActiveFileMonitor5.0) - Unknown owner - E:\Program

Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
O23 - Service: AshampooDefragService - - C:\Program Files\Ashampoo Magic

Defrag\bin\aDefragService.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common

Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program

Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common

Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program

Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program

Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common

files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common

Files\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: LiveShare P2P Server (RoxLiveShare) - Sonic Solutions - C:\Program Files\Common

Files\Roxio Shared\SharedCOM8\RoxLiveShare.exe
O23 - Service: RoxMediaDB - Sonic Solutions - C:\Program Files\Common Files\Roxio

Shared\SharedCOM8\RoxMediaDB.exe
O23 - Service: RoxUpnpRenderer (RoxUPnPRenderer) - Sonic Solutions - C:\Program Files\Common

Files\Roxio Shared\SharedCom\RoxUpnpRenderer.exe
O23 - Service: RoxUpnpServer - Sonic Solutions - E:\Program Files\Roxio\Easy Media Creator 8\Digital

Home\RoxUpnpServer.exe
O23 - Service: Roxio Hard Drive Watcher (RoxWatch) - Sonic Solutions - C:\Program Files\Common

Files\Roxio Shared\SharedCOM8\RoxWatch.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program

Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common

Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec

AntiVirus\Rtvscan.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH -

C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC -

C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. -

C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe