Member Avatar for Grinder

Note from DMR: I've moved this thread from the Viruses, Spyware, etc. forum into this forum due to the fact that malicious infections do not seem to be the cause of this member's problems

IE 6 SP1 and Outlook Express 6 running very slow. 1 1/2 minutes to open OE, and another 1.5 minutes to open an email after it downloads. In IE 30 seconds between clicking on a link and loading the link. When moving from field to field it takes 10-20 seconds to move the cursor to the new field.
I've run Ad-Adware, SpyBot S&D, SpywareBlaster, Housecall, and tried many settings changes from the postings on this and other sites. I've checked it with all Startup programs unselected. None of these have helped. I'm on a cable modem, Win 98SE, ZoneAlarm, Norton AV.

Thanks for your advice.

HijackThis log below.
Logfile of HijackThis v1.99.1
Scan saved at 9:06:12 PM, on 2/19/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\ATI2EVXX.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SYMTRAY.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON ANTIVIRUS\IWP\NPFMNTOR.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON UTILITIES\NPROTECT.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON GOBACK\GBPOLL.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\SUPPORT.COM\BIN\TGCMD.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATIPTAXX.EXE
C:\WINDOWS\SYSTEM\USBMONIT.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\PROGRAM FILES\LOGITECH\ITOUCH\ITOUCH.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\PROGRAM FILES\3B SOFTWARE\WINDOWS REGISTRY REPAIR PRO\REGISTRYREPAIRPRO.EXE
C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\OSA.EXE
C:\PROGRAM FILES\SONY CORPORATION\PICTURE PACKAGE\PICTURE PACKAGE APPLICATIONS\RESIDENCE.EXE
C:\PROGRAM FILES\SONY CORPORATION\PICTURE PACKAGE\PICTURE PACKAGE MENU\SONYTRAY.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON GOBACK\GBTRAY.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SNDSRVC.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\OUTLOOK EXPRESS\MSIMN.EXE
C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE
C:\UNZIPPED\HIJACKTHIS\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\OOBE\BLANK.HTM
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Cox High Speed Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;Ezekiel;;zechariah;<local>
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\Support.com\bin\tgcmd.exe" /server
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Gene USB Monitor] C:\WINDOWS\SYSTEM\USBMonit.exe
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe -osboot
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [NPROTECT] C:\Program Files\Norton SystemWorks\Norton Utilities\Nprotect.exe
O4 - HKLM\..\Run: [mdac_runonce] C:\WINDOWS\SYSTEM\runonce.exe
O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\RunServices: [ATIPOLL] ati2evxx.exe
O4 - HKLM\..\RunServices: [ATISmart] C:\WINDOWS\SYSTEM\ati2s9ag.exe
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [SymTray - Norton SystemWorks] C:\Program Files\Common Files\Symantec Shared\SymTray.exe "Norton SystemWorks"
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKLM\..\RunServices: [NPFMonitor] C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [NPROTECT] C:\Program Files\Norton SystemWorks\Norton Utilities\Nprotect.exe
O4 - HKLM\..\RunServices: [GBPoll] C:\Program Files\Norton SystemWorks\Norton GoBack\GBPoll.exe
O4 - HKCU\..\Run: [Norton SystemWorks] "C:\Program Files\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz
O4 - HKCU\..\Run: [Windows Registry Repair Pro] C:\PROGRAM FILES\3B SOFTWARE\WINDOWS REGISTRY REPAIR PRO\REGISTRYREPAIRPRO.EXE 4
O4 - Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Startup: Picture Package VCD Maker.lnk = C:\Program Files\Sony Corporation\Picture Package\Picture Package Applications\Residence.exe
O4 - Startup: Picture Package Menu.lnk = C:\Program Files\Sony Corporation\Picture Package\Picture Package Menu\SonyTray.exe
O4 - Startup: InControl Desktop Manager.lnk = C:\Program Files\Diamond\InControl Tools 99\DMHKEY.EXE
O4 - Startup: Norton GoBack.lnk = C:\WINDOWS\Installer\{1F76ACFA-22FE-49F6-BC05-F4EC835F48CC}\NewShortcut1_1F76ACFA22FE49F6BC05F4EC835F48CC.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.
O16 - DPF: {9059F30F-4EB1-4BD2-9FDC-36F43A218F4A} (Microsoft RDP Client Control (redist)) -
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/activedata/ActiveData.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/en/check/qdiagh.cab?323
O16 - DPF: {99B6E512-3893-4155-9964-8EB8E06099CB} (WebSpyWareKiller Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/WebSWK.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.
O16 - DPF: {9B03C5F1-F5AB-47EE-937D-A8EDA626F876} (Anonymizer Anti-Spyware Scanner) - http://download.zonelabs.com/bin/promotions/spywaredetector/WebAAS.cab

  • 2 Contributors
  • 7 Replies
  • 282 Views
  • 4 Days Discussion Span
  • Latest Post Latest Post by DMR

Dani AI

Generated

Brief summary and next steps (builds on ’s checks and ’s observation that Firefox is fast): because a non‑IE browser works normally the problem is almost certainly IE/OE/WinINet-related (extensions, mail store, or security hooks) rather than the router or general connectivity. The checklist below orders quick, reversible tests first so you can determine whether IE/OE themselves (or a third‑party component) are causing the lag.

  1. Quick IE tests — disable third‑party extensions and test proxy auto‑detect
  • Turn off third‑party browser extensions (Internet Options → Advanced → clear “Enable third‑party browser extensions”) and restart IE. This prevents BHOs/toolbars from loading and is a fast, safe test. (support.microsoft.com)
  • In Internet Options → Connections → LAN Settings, make sure no proxy or “Automatically detect settings” is enabled (WPAD can cause timeouts). Disable it, then retest. (learn.microsoft.com)
  1. Outlook Express store and message files (common cause of slow opens)
  • In OE go to Tools → Options → Maintenance → Store Folder to find your .dbx files. Close OE, check the .dbx file sizes in Explorer, and compact all folders while OE is offline (File → Work Offline → File → Folder → Compact All Folders). Backup the store first; very large or corrupted DBX files slow OE dramatically and may require rebuilding. (learn.microsoft.com)
  1. Security software / mail‑scanning and script‑blocking
  • Temporarily disable mail‑scanning and any “script blocking” features in Norton/SystemWorks (or similar AV) and retest IE/OE. Script‑blocking / mail scanners are known to stall page loads and message opens; testing with them off isolates that layer. If performance improves, adjust AV settings or reinstall that component. (fogbugz.kayako.com)
  1. Deeper inspection and repairs
  • Use msconfig (check both Startup and RunServices on Win98) or Autoruns to see what actually loads at boot; use Process Explorer to watch which process is pegging CPU or disk during the slow periods. These tools make it easy to disable suspects without guessing. If the above tests fail, repair/reinstall IE (Add/Remove Programs / Windows Components) or consider reinstalling TCP/IP. (learn.microsoft.com)

If any step produces a measurable change, report which step and result — that narrows the fix quickly. If nothing helps after those tests, rebuilding the OE store (export/import mail) or a clean OS/IE reinstall is the practical next move.

Recommended Answers

All 7 Replies

Member Avatar for DMR

Your log is pretty clean.

1. Have Hijackthis fix:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\OOBE\BLANK.HTM

and then delete the "C:\WINDOWS\SYSTEM\OOBE\BLANK.HTM" file.


2. Tell us whatever you can about this Proxy setting:

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;Ezekiel;;zechariah;<local>

Member Avatar for Grinder

Thanks for the report that things look pretty clean.

I let HijackThis fix/delete those two items, deleted C:\WINDOWS\SYSTEM\OOBE\BLANK.HTM and restarted, but it didn't change the function of anything.

I have no idea what the ProxyOverride = ;Ezekiel;;zechariah;<local> was.

I failed to mention that my machine is connected to a home network through a gateway router.

Still looking for solutions.

Member Avatar for DMR

I have no idea what the ProxyOverride = ;Ezekiel;;zechariah;<local> was.

Definitely an indication of infection by the new Biblical Prophet Virus. Say 5 Hail Marys, 3 Our Fathers, and go to confession. It should be gone by the time you get back from church.

:D


OK, seriously:

I failed to mention that my machine is connected to a home network through a gateway router. Still looking for solutions.

Since you're just using Cox Internet through a broadband router, have HJT fix the "ProxyOverride" entry.

I pretty much doubt that fixing the proxy setting will help your "slowdown" problems though; I've got a feeling the cause lies elsewhere. A couple of suggestions:

1. Have you used Windows Update to make sure you have all of the most current updates for IE and OE installled? If not, do so.

2. Is there possibly a more global problem with your network/Internet connection? Do you have any other computers connected to the router, and if so, are experiencing the same sort of delays?

3. Download and install another web browser such as Netscape, Mozilla, or Firefox and see if that suffers from the same problem.

4. Clean out all of the cruft that can build up in different areas of your system:

Reboot into safe mode (you get to the safe mode boot option by hitting the F8 key as your computer is starting up)

- Open Windows Explorer, and in the Folder Options settings under the View menu, go to the View tab and select "show all files". Hit OK.

- Delete the entire contents of the following folders:

C:\Windows\Cookies
C:\Windows\History
C:\Windows\Temp
C:\Windows\Temporary Internet Files

- Empty your Recycle Bin.

- Reboot normally.

Member Avatar for Grinder

I have verified that IE and OE are latest versions through Windows Update.

There are other computers attached to the network - they run fine.

I cleaned out the junk and rebooted. No improvement.

Running Firefox the net works as I remember things are supposed to.

No improvement to Outlook Express.

Thanks for the help... Next idea?

Member Avatar for Grinder

The good news is, no nasties found.

The bad news is I still don't know what's wrong.

Which forum should I try next?

Member Avatar for DMR

... Which forum should I try next?

I'll take care of that for you now- I'm moving this to the Internet Explorer forum. Although your issues also involve Outlook, I think you'll get the best responses/suggestions in the IE forum.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.