Please Help! - Dell Speed Problems

[DragonCowboy]

Ok guys, I've been having some problems with my Dell Inspiron Laptop. It's an Inspiron 6000.

There were 4 accounts on it: One for myself, one for my father, and so on for my mother and sister.

The laptop used to be very fast. However, my account started to slow down ALOT. It would take a long time to open up a program. I found the solution to my problem by switching to my father's account. Now, my father's account is very, very slow. I installed an anti-virus program (AVG Free Edition), and it's not finding anything, while I installed an anti-spyware program (Ewido 4.0). That's not finding anything either. I'm getting updates for the spyware and virus stuff, so apparently it's not due to spyware or viruses.

I checked my memory, and only a bit more than 50% is being used. Every 2 minutes or so, all the programs suddenly go into the "Not Responding" mode.

If anybody can help me out, that'd be great!

 

[Hiero]

maybe defrag and try adaware.

 

[GTaylor]

You checked for spyware, good! I'm not familiar with Ewido (Myself I use Spybot Search and Destroy)
You checked for viruses, good!

Methinks it could be a bit bloated, are all 4 accounts admin-rights or are some limited?

Aslo can you do me a favor and list what starts when you boot up? It'll give an idea what programs latch on as soon as the PC boots. The way to look it up:

- Start
- Run
- Type in 'msconfig' (Without the quotes)
- Last tap on right (I think it reads startup)

Most programs, real player, quicktime, WinDVD, etc. don't need to be running all the time. If they're checked you can go ahead and uncheck them.

Lastly, this isn't a big problem...yet but I'm afraid it's going that way, you may want to check for rootkits. What's a rootkit? It's name comes from unix (Root is their version of admin) and a rootkit would allow a hacker to take over your PC as root. Windows-wise rootkit is similar to the cloak Harry Potter uses, when he's wearing it he's in the room but you have no idea he's there. The rootkit itself isn't bad, it's what it can hide (Trojans/viruses/keyloggers/spyware) that is. Spyware scum Coolwebsearch has been confirmed to use rootkit technology, you can bet others will follow.

F-Secure has a beta program called Blacklight that will scan for you (Free until Sept 1). Their site: http://www.f-secure.com/blacklight/
- Another scanner that I personally love is Mark Russinovich's Rootkit revealer: http://www.sysinternals.com/Utilities/RootkitRevealer.html It's free but Mark's company was recently bought out by Microsoft so I'd grab this app now before it gets put behind the Windows Genuine Advantage junk (Ugh!)

 

[DragonCowboy]

You checked for spyware, good! I'm not familiar with Ewido (Myself I use Spybot Search and Destroy)
You checked for viruses, good!

Methinks it could be a bit bloated, are all 4 accounts admin-rights or are some limited?

Aslo can you do me a favor and list what starts when you boot up? It'll give an idea what programs latch on as soon as the PC boots. The way to look it up:

- Start
- Run
- Type in 'msconfig' (Without the quotes)
- Last tap on right (I think it reads startup)

Most programs, real player, quicktime, WinDVD, etc. don't need to be running all the time. If they're checked you can go ahead and uncheck them.

Lastly, this isn't a big problem...yet but I'm afraid it's going that way, you may want to check for rootkits. What's a rootkit? It's name comes from unix (Root is their version of admin) and a rootkit would allow a hacker to take over your PC as root. Windows-wise rootkit is similar to the cloak Harry Potter uses, when he's wearing it he's in the room but you have no idea he's there. The rootkit itself isn't bad, it's what it can hide (Trojans/viruses/keyloggers/spyware) that is. Spyware scum Coolwebsearch has been confirmed to use rootkit technology, you can bet others will follow.

F-Secure has a beta program called Blacklight that will scan for you (Free until Sept 1). Their site: http://www.f-secure.com/blacklight/
- Another scanner that I personally love is Mark Russinovich's Rootkit revealer: http://www.sysinternals.com/Utilities/RootkitRevealer.html It's free but Mark's company was recently bought out by Microsoft so I'd grab this app now before it gets put behind the Windows Genuine Advantage junk (Ugh!)

Thank you Hiero and Gtaylor for replying.
These are the items that start up.

ehtray
Apoint
igfxtray
hkcmd
igfxpers
jusched
(some unnamed thing)
ifrmewrk
quickset
dvdlauncher(i unchecked it)
qttask
tfswctrl
isuspm
issch
mimboot
mm_tray
pccguide
AOLSoftware (i unchecked it)
realsched
MediaDetect
avgcc
ewido
DSAgnt
TMAS_OEMon
ctfmon
Digital Line Detect
QuckBooks Update
aim (i unchecked it)
AOLLaunch (I unchecked it)
America Online 9.0 (I unchecked it)

I'm checking out the Rootkit Revealer as we speak.

Thanks!

 

[Yeagermeister]

Thank you Hiero and Gtaylor for replying.
These are the items that start up.

ehtray
Apoint
igfxtray
hkcmd
igfxpers
jusched
(some unnamed thing)
ifrmewrk
quickset
dvdlauncher(i unchecked it)
qttask
tfswctrl
isuspm
issch
mimboot
mm_tray
pccguide
AOLSoftware (i unchecked it)
realsched
MediaDetect
avgcc
ewido
DSAgnt
TMAS_OEMon
ctfmon
Digital Line Detect
QuckBooks Update
aim (i unchecked it)
AOLLaunch (I unchecked it)
America Online 9.0 (I unchecked it)

I'm checking out the Rootkit Revealer as we speak.

Thanks!

All of the bolded ones are spyware

 

[DragonCowboy]

All of the bolded ones are spyware

Haha wow. What do I do about that, just uncheck them?

 

[Yeagermeister]

Haha wow. What do I do about that, just uncheck them?

Yes or remove them from the registry but unless you know how to do that I wouldn't suggest it. You can seriously hose the machine by screwing up the registry.

 

[BrAinPaiNt]

Yes or remove them from the registry but unless you know how to do that I wouldn't suggest it. You can seriously hose the machine by screwing up the registry.

Yes it can be bad if someone does not know much about the registry however getting a free program like RegCleaner may make it a tad easier on a person.

 

[Khartun]

All of the bolded ones are spyware

No they aren't. Most of those are for his graphics card. Actually none of the bolded ones are spyware.

 

[Yeagermeister]

I know for a fact most maybe not all are spyware. I have to deal with it every day.

 

[BrAinPaiNt]

I know for a fact most maybe not all are spyware. I have to deal with it every day.

The first four bolded are not, not sure about the other ones.

Two of the first four are indeed graphic card related. (the ones with IG in the title) Intel Graphic.

One is a Hot Key program

The other one is an intel framework exe

But like I said, don't know about the other ones.

I need to make a notation on this.

Some spy ware will use the same names and put them in different folders on windows.
This may be the case with what you have dealt with and or the person in question is dealing with.

I think the

 

[Yeagermeister]

The first four bolded are not, not sure about the other ones.

Two of the first four are indeed graphic card related.

One is a Hot Key program

The other one is an intel framework exe

But like I said, don't know about the other ones.

The hotkey is spyware. I'll admit I am probably wrong about the others. The only way to know for sure is to look at the program path. If it's loading from the windows\system32 folder it's spyware. If he removes the machine will function properly.

 

[BrAinPaiNt]

The hotkey is spyware. I'll admit I am probably wrong about the others. The only way to know for sure is to look at the program path. If it's loading from the windows\system32 folder it's spyware. If he removes the machine will function properly.

You are correct...if it is in the System32 folder than chances are it is spyware.

That was the folder I was talking about but had a brain cramp.

However if it is not than Hotkey Command EXE is not a spyware.

It is a program that goes along with some of the intel graphic systems.

 

[Khartun]

I know for a fact most maybe not all are spyware. I have to deal with it every day.

as do I and not a single one is spyware:

Description:
igfxtray.exe is a process which allows you to access the Intel Graphics configuration and diagnostic application for the Intel 810 series graphics chipset. This program is a non-essential system process, and is installed for ease of use via the desktop tray.
Security Risk (0-5): 0
Spyware: No
Virus: No
Trojan: No

Description:
hkcmd.exe is installed alongside Intel multimedia devices and allows configuration and diagnostic options for these devices. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.
Security Risk (0-5): 0
Spyware: No
Virus: No
Trojan: No

Description:
igfxpers.exe is a process installed alongside NVidia graphics cards and provides additional configuration options for these devices. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.
Security Risk (0-5): 0
Spyware: No
Virus: No
Trojan: No


Description:
ifrmewrk.exe is a process associated with the Intel PRO/Set Wireless software and provides additional configuration options for these devices. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.
Security Risk (0-5): 0
Spyware: No
Virus: No
Trojan: No

Description:
tfswctrl.exe is an essential process for HP's packet writing software which burns data to CD's using Microsoft Windows explorer. This program is a non-essential system process, but should not be terminated unless suspected to be causing problems.
Security Risk (0-5): 0
Spyware: No
Virus: No
Trojan: No

Description:
isuspm.exe is a process that belongs InstallShield from Macrovision. The process automatically checks for the latest updates online. By removing this process you will not get informed about the latest updates for InstallShield.
Security Risk (0-5): 0
Spyware: No
Virus: No
Trojan: No

Description:
issch.exe is an update service relating to the InstallShield utility which keeps this software up to date. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.
Security Risk (0-5): 0
Spyware: No
Virus: No
Trojan: No

 

[Yeagermeister]

as do I and not a single one is spyware:

Description:
igfxtray.exe is a process which allows you to access the Intel Graphics configuration and diagnostic application for the Intel 810 series graphics chipset. This program is a non-essential system process, and is installed for ease of use via the desktop tray.
Security Risk (0-5): 0
Spyware: No
Virus: No
Trojan: No

Description:
hkcmd.exe is installed alongside Intel multimedia devices and allows configuration and diagnostic options for these devices. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.
Security Risk (0-5): 0
Spyware: No
Virus: No
Trojan: No

Description:
igfxpers.exe is a process installed alongside NVidia graphics cards and provides additional configuration options for these devices. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.
Security Risk (0-5): 0
Spyware: No
Virus: No
Trojan: No


Description:
ifrmewrk.exe is a process associated with the Intel PRO/Set Wireless software and provides additional configuration options for these devices. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.
Security Risk (0-5): 0
Spyware: No
Virus: No
Trojan: No

Description:
tfswctrl.exe is an essential process for HP's packet writing software which burns data to CD's using Microsoft Windows explorer. This program is a non-essential system process, but should not be terminated unless suspected to be causing problems.
Security Risk (0-5): 0
Spyware: No
Virus: No
Trojan: No

Description:
isuspm.exe is a process that belongs InstallShield from Macrovision. The process automatically checks for the latest updates online. By removing this process you will not get informed about the latest updates for InstallShield.
Security Risk (0-5): 0
Spyware: No
Virus: No
Trojan: No

Description:
issch.exe is an update service relating to the InstallShield utility which keeps this software up to date. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.
Security Risk (0-5): 0
Spyware: No
Virus: No
Trojan: No

I have had plenty of machines that have had problems when that hotkey program is installed and it goes away when I remove. I admitted I was wrong about the others.

 

[DragonCowboy]

ok so Windows/system32 are spyware?

These are the ones in taht folder:

igfxtray
hkcmd
igfxpers
tfswctrl
ctfmon

btw, thanks guys for helping me out. I really appreciate it.

 

[Yeagermeister]

ok so Windows/system32 are spyware?

These are the ones in taht folder:

igfxtray
hkcmd
igfxpers
tfswctrl
ctfmon

btw, thanks guys for helping me out. I really appreciate it.

Not always....I was corrected on that.

 

[BrAinPaiNt]

ok so Windows/system32 are spyware?

These are the ones in taht folder:

igfxtray
hkcmd
igfxpers
tfswctrl
ctfmon

btw, thanks guys for helping me out. I really appreciate it.

You can uncheck the hotkey on your start up list.

If it will then not load back into windows you can go into safemode and check them to startup again.

Out of curiosity are you using a graphics card or are you using the board integrated graphics port?

One other thing to look at is how much free space you have on your hard drive.

I DOUBT this is the problem but in rare cases I have seen people who have never cleaned out there temp internet folder (if using IE, cashe folder if using firefox) and it just fills up the hard drive and makes it hard to surf.

Once again that is rare but it does happen.

 

[DragonCowboy]

Not always....I was corrected on that.

hmm ok.

I scanned them individually in the folder, and they showed up to be unaffected.

So now I guess I should use Rootkit Revealer.

I think I fixed the problem though. My Aim thing was showing up once the computer starts up. I guess that's starting alot of traffic, because right now, everything is full speed...

 

[BrAinPaiNt]

hmm ok.

I scanned them individually in the folder, and they showed up to be unaffected.

So now I guess I should use Rootkit Revealer.

I think I fixed the problem though. My Aim thing was showing up once the computer starts up. I guess that's starting alot of traffic, because right now, everything is full speed...

AIM is really bad.

Anytime the wife or her little sister would load it on my puter I would delete it off and finally told them NOT to load it.

However my mother keeps it on her computer no matter how many times I have told her to remove it.

That on top of the MS buddy or whatever it is called. I ALWAYS remove those from any computer I work on unless someone specifically tells me not to remove it.