Very Slow Windows XP

Hi Tamie - Sorry for the slight delay, I wanted to get some second opinions on how best to address this machine. I don't believe the root cause of the problems are related to malware, but I would like to try and help you get to where the machine is a bit more secure and updated. Obviously, with the performance at this time, that is difficult at best. This post is going to have quite a few instructions in it, and I'll try to explain why we are doing what we are doing so that you can explain it to the computer owner.

I'd like to suggest that with the cost of RAM being relatively cheap and easy to install, the owner may want to consider upgrading the amount of RAM. 256 MB is on the very low end of what most programs today require to run. When you have the operating system, antivirus programs, internet browsers and other software all competing for the small amount of RAM, the machine simply cannot process everything at once. When there isn't enough RAM to process all the requests, the system uses virtual memory - or memory created by using the hard disk to simulate additional RAM. But this is not terribly efficient, is slower, and puts additional load onto the hard drive. It is this combination of low RAM and lots of demand on the memory that is causing the low virtual memory errors to appear.

Please download the following to a flash drive to take with you:
1. Avast Free Version!
2. Java Runtime Environment (JRE) 23

• .
• Scroll down to where it says JDK 6 Update 23 (JDK or JRE)
• Click the Download JRE button to the right
• Select the Windows platform from the dropdown menu.
• Read the License Agreement and then check the box that says: "I agree to the Java SE Runtime Environment 6u23 with JavaFX 1 License Agreement". Click on Continue.The page will refresh.
• Click on the link to download Windows Offline Installation and save the file to your flash drive

3. Adobe reader.


When you are at the machine, I'd like you to do the following in this order:
1. Please go ahead and run Malwarebytes and remove any items it finds as per the previous instructions. This will take care of the adware items it found.

2. Run OTL.exe

• Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL
  
  

  :Services
  
  :Commands
  [emptytemp]
  [emptyflash]
  [createrestorepoint]

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot when it is done
• In your next reply, please be sure to post the log it generates

This will clear out the temporary files and the caches.

3. Please make sure you are disconnected from the internet and then fully uninstall AVG. AVG is known for being very resource intensive. As per your first post, this machine only has 256 MB of RAM and 1 processor. AVG is most likely one of the factors in the slowness of the machine. After you have uninstalled AVG, if you are not prompted to do so, please reboot the machine. Then using the flash drive - please install Avast. Avast is less resource intensive. (Ideally, I'd recommend Microsoft Security Essentials for this machine in terms of resource use - but we need to get SP3 on the machine to install that and I don't want to have the machine unprotected in the mean time.)

4, Defragment the hard drive:
* Open My Computer.
* Right-click the local disk volume that you want to defragment (C:\), and then click Properties.
* On the Tools tab, click Defragment Now.
* Click Defragment
Note: This could take a bit of time and may be something that you want to run at a time when no one will be using the computer Over time, files become fragmented through use and running a defrag periodically can help improve the performance of the machine.

5. Using the files you downloaded, please update Java by doing the following:
[external image: Posted Image]
Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update.

• Close any programs you may have running - especially your web browser.
• Go to Start > Control Panel, double-click on Add or Remove Programs and remove all older versions of Java.
• Check (highlight) any item with Java Runtime Environment (JRE or J2SE or Java™ 6) in the name.
• Click the Remove or Change/Remove button.
• Repeat as many times as necessary to remove each Java versions.
• Reboot your computer once all Java components are removed.
• Then transfer the file from your flash drive to the desktop and from your desktop double-click on jre-6u23-windows-i586-p.exe to install the newest version.

• After the install is complete, go into the Control Panel (using Classic View) and double-click the Java Icon. (looks like a coffee cup)
  • On the General tab, under Temporary Internet Files, click the Settings button.
  • Next, click on the Delete Files button
  • There are two options in the window to clear the cache - Leave BOTH CheckedApplications and Applets
    Trace and Log Files
• Click OK on Delete Temporary Files Window
  Note: This deletes ALL the Downloaded Applications and Applets from the CACHE.
• Click OK to leave the Temporary Files Window
• Click OK to leave the Java Control Panel.

6. Use the file you downloaded to update Adobe Reader. Older versions of Adobe Reader also contain security vulnerabilities and it is very important to keep it up to date.


After you have completed these steps please let me know and we'll address getting SP3 onto the machine. Also please let me know if there was any speed improvement by switching to Avast. I suspect you will see at least slight improvement with it.

2/15/2011 2:18:38 PM mbam-log-2011-02-15 (14-18-37).txt Scan type: Quick scan Objects scanned: 133210 Time elapsed: 16 minute(s), 10 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)

Please let me know when you've finished the rest of the steps, or if you have any questions.

Doris, I will not be able to do anything until Monday. I am very sick. So, do we close this and reopen on Monday. How does this work.? Sorry for the delay. Been in bed for the last day and half. Tamie

I hope you feel better soon Tamie! There is no need to close this thread. As long as I know you are still working on it I will leave it open.

Doris, I did up to # 5. Tried to reply with the log with no success. Will go back tomorrow and complete and forward the OTL log to you. I did not see the Low Virtual Memory today. Thank you, Tamie

All processes killed ========== SERVICES/DRIVERS ========== ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Barbara Lander ->Temp folder emptied: 647358625 bytes ->Temporary Internet Files folder emptied: 16537431 bytes ->Java cache emptied: 0 bytes ->Flash cache emptied: 2013442 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 300 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 2577 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 67098 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 34318 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 635.00 mb [EMPTYFLASH] User: All Users User: Barbara Lander ->Flash cache emptied: 0 bytes User: Default User Here is the OLT log requested, working on getting Adobe updated. Tamie User: LocalService ->Flash cache emptied: 0 bytes User: NetworkService Total Flash Files Cleaned = 0.00 mb Restore point Set: OTL Restore Point (0) OTL by OldTimer - Version 3.2.20.6 log created on 02212011_140708 Files\Folders moved on Reboot… C:\Documents and Settings\Barbara Lander\Local Settings\Temp\MSIC.tmp moved successfully. Registry entries deleted on Reboot…

Glad to see it's coming along!

After the Adobe update, the next feat will be getting the machine up to date for SP3 and the subsequent updates that will follow. With the specs on this machine, it will be easier to create an installation CD from another machine. SP3 is a very large install. Combine low RAM and dial up - and it would not be an undertaking I'd advise as a direct download on this machine. Can you please verify for me that the computer you've been using for downloading the programs for transfer to the user's machine does indeed have a CD burner? As long as I know you can burn a CD for them, I'll get the instructions to you this evening on how to create it for SP3.

Has there been any improvement in the speed of the machine with Avast?

Yes. I have been running things through my husband computer since it is the same set-up as the couples Windows XP. I can not use my Computer for some reason when I tried it would not except anything from Windows 7. That's neither here nor there but, interesting. I was able to open two windows in Internet Explorer. And, yesterday I did not see the error "Virtual Low Memory." It was still very slow, but never the less I was able to use both windows in slow motion. Thanks, Tamie

Good evening Tamie! I'm glad to hear things are at least marginally better on the machine.

Let's start with SP3. You can download it and burn a CD from here . I know it says this is for IT professionals, but it will be fine for you to download it. I would suggest installing it in Safe mode so that anti-virus programs do not interfere with the installation.

After SP3 is installed, there may be a better option available for anti-virus. Microsoft Security Essentials is a very good free anti-virus program that is a little lighter on resources than some of the other anti-virus options. I didn't tell you about MSE previously because it requires SP3 to run. If the computer user wants to switch to this, you would want to uninstall Avast, reboot the machine if it does not do so as a part of the uninstall, and then install Microsoft Security Essentials.

Even after SP3 is installed, there are going to be many Windows Updates to apply. As you may be aware, Windows Updates build upon each other. So you might visit the update site and see only a couple of updates, but after installing them - suddenly more appear as available to you. It is important that you visit http://www.windowsupdate.com again each time you install updates to see if more become available. I would suggest since this machine is low on resources anyway that you might want to consider both critical and optional updates to get the performance to the best level you can. You certainly don't have to do all the updates in one sitting, but SP3 has been around for quite awhile now, and there have been quite a number of security updates released since that time. I would strongly suggest that the user make sure all the updates get installed over the coming weeks for security reasons. Being on a slow internet connection isn't going to make this a quick process, but they can be done a little at a time until the machine is up to date. At that point, maintenance of it should be a lot easier.

I'll leave this topic open for a few days in case you have any questions or problems with the updates. Below are some tips you can give to the user for future reference.

==================================================================
Please follow these simple steps in order to keep your computer malware free and secure:

Visit Microsoft's Windows Update Site Frequently
It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.

Use and Update your AntiVirus Software
It is very important that your computer has an anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future. It is imperitive that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.

Use a Firewall
Your log doesn't appear to show a third-party software firewall installed - if you have one, and I've missed it, please ignore this. I can not stress how important it is that you use a Firewall on your computer. Without a firewall your computer is susceptible to being hacked and taken over. I am very serious about this. Simply using a Firewall in its default configuration can lower your risk greatly. There are free options available and if you need more information on them please let me know.

Use only one antivirus and one firewall on your machine
Having more than one anti-virus program and one firewall on your machine, even if only one is running, can cause conflicts and slowdowns in the performance of the machine.

Make your Internet Explorer more secure
This can be done by following these simple instructions:
1. From within Internet Explorer click on the Tools menu and then click on Options.
2. Click once on the Security tab
3. Click once on the Internet icon so it becomes highlighted.
4. Click once on the Custom Level button.
5. Change the Download signed ActiveX controls to Prompt
6. Change the Download unsigned ActiveX controls to Disable
7. Change the Initialize and script ActiveX controls not marked as safe to Disable
8. Change the Installation of desktop items to Prompt
9. Change the Launching programs and files in an IFRAME to Prompt
10. Change the Navigate sub-frames across different domains to Prompt
11. When all these settings have been made, click on the OK button.
12. If it prompts you as to whether or not you want to save the settings, press the Yes button.
13. Next press the Apply button and then the OK to exit the Internet Properties page.

Keep your Java, Adobe Reader and Adobe Flash Up to Date
Older versions of these programs can contain security vulnerabilities. It is very important to keep them updated.

Update and Run Malwarebytes Anti-Malware
Scan your computer with this program on a regular basis just as you would an antivirus software making sure you update definitions each time you scan.

To simplify making sure you have the latest version of many of your security programs and applications, you may want to consider:
Secunia's Personal Software Inspector (PSI). It is a free utility that scans your computer for installed applications and checks to see if they have the latest security patches and updates. If it finds any applications with possible security issues, links and/or instructions are provided for the necessariy updates.

Filehippo's Update Checker. It is free utilitiy that scan your computer for installed software, checks the versions and then sends this information to see if there are any newer releases. Available software updates are displayed and you can decide which ones to download and install. Among many other types of programs, they includes a number of the Anti-Spyware, Firewall/Security and Anti-Virus programs that have been recommended (though not all of them). Note: Definition files should be updated from within the programs themselves. The Update Checker look for newer versions of the software program, not definition files.

Doris, Will Secunia's Personal Software Inspector (PSI) and Filehippo's Update Checker eat up more space on the hard drive or only on C drive? Or are the Web-based software? Did you want me to report back? I did not find were they had been updating window's or dell. I bookmarked both and set-up reminders on outlook for them. I still do not understand why their windows updater was not working right? It was set-up for Mondays at 3:00 AM. Has there been a problem with DSL/or with the windows updater? Thanks, Tamie

Will Secunia's Personal Software Inspector (PSI) and Filehippo's Update Checker eat up more space on the hard drive or only on C drive? Or are the Web-based software?

These are programs that you install. However, I would probably disable them from running at startup on this computer and opt for running them say once every week or two - perhaps on the same schedule as they will be checking for Windows updates.

I still do not understand why their windows updater was not working right? It was set-up for Mondays at 3:00 AM.

Support for Windows XP with Service Pack 2 (SP2) ended on July 13, 2010. After that date, the user would not have received any security updates for Windows. Once SP3 is installed, I would verify the settings again and make sure their updates are working as anticipated.

Did you want me to report back?

You don't have to, but you can if you like. I want to leave this open for a few days at least to ensure that you don't have any issues getting SP3 installed and/or have any other issues you want to address once that is in.

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.