• Hi there and welcome to PC Help Forum (PCHF), a more effective way to get the Tech Support you need!
    We have Experts in all areas of Tech, including Malware Removal, Crash Fixing and BSOD's , Microsoft Windows, Computer DIY and PC Hardware, Networking, Gaming, Tablets and iPads, General and Specific Software Support and so much more.

    Why not Click Here To Sign Up and start enjoying great FREE Tech Support.

    This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Solved would like to make a really laptop (somewhat) functional

Status
Not open for further replies.
#41
Log: 'Application' Date/Time: 26/07/2017 11:57:21 PM
Type: warning Category: 0
Event: 1517 Source: Userenv
Windows saved user PMURPHY\Patricia Murphy registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.


Download UPHClean. To download and install UPHClean, visit http://www.majorgeeks.com/files/details/microsoft_user_profile_hive_cleanup_service.html
As soon as you have saved the UPHClean installer (UPHClean-Setup.msi), double-click the installer to begin the installation.
In the User Profile Hive Cleanup Service installation wizard, click Next.
In the License Agreement page, read the license agreement, select I Agree, and then click Next.
In the Select Installation Folder page, click Next.
In the Confirm Installation page, click Next.
When UPHClean is installed, click Close.

Note UPHClean runs as a service in Windows and will start automatically every time that Windows starts.
To confirm that UPHClean is installed and running, click Start, and then click Run.
In Open box, type the following text, and then click OK:

services.msc
In Services, in the Name column, locate User Profile Hive Cleanup. In the Status column, confirm that the User Profile Hive Cleanup service is Started.

That should clear up the only error.

XP does not defragment the disk automatically so it is best to manually do it every month or two. This speeds up access to the hard drive and makes it run faster:
Start, Run,
defrag c: /f
Enter
This will take a while depending on the size of the drive and how full it is. Do not attempt to use the PC until it finishes.

Now let's look at what is running and see if anything is slowing down the PC.
Get Process Explorer

http://live.sysinternals.com/procexp.exe
Save it to your desktop then run it

View, Select Column, check Verified Signer, OK
Options, Verify Image Signatures


Click twice on the CPU column header to sort things by CPU usage with the big hitters at the top.

Wait a full minute then:

File, Save As, Save. Note the file name. Open the file on your desktop and copy and paste the text to a reply.


Let's also get Speccy:
Get the free version of Speccy:
http://www.filehippo.com/download_speccy (Look in the upper right for the Download Latest Version button - Do NOT press the large Start Download button on the upper left!)
Download, Save and Install it. Tell it you do not need CCLEANER if it asks. Run Speccy. When it finishes (the little icon in the bottom left will stop moving),
File, Save as Text File, (to your desktop) note the name it gives. OK. Open the file in notepad and delete the line that gives the serial number of your Operating System.
(It will be near the top, 10-20 lines down.) Save the file. Attach the file to your next post. (Upload a File)
 
#44
Hi - quite sorry about the extended delay in responding. Here is the pasted text that has to do with the CPU usage:

Process CPU Private Bytes Working Set PID Description Company Name Verified Signer
MsMpEng.exe 50.00 58,208 K 52,780 K 1252 Service Executable Microsoft Corporation (Verified) Microsoft Corporation
System Idle Process 48.44 0 K 28 K 0
procexp.exe 0.78 17,888 K 9,004 K 2708 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation
Interrupts 0.78 0 K 0 K n/a Hardware Interrupts and DPCs
wuauclt.exe 6,700 K 8,124 K 2764 Windows Update Microsoft Corporation
wscntfy.exe 564 K 320 K 2724 Windows Security Center Notification App Microsoft Corporation (Verified) Microsoft Windows Component Publisher
wmiprvse.exe 2,020 K 2,760 K 3744 WMI Microsoft Corporation (Verified) Microsoft Windows Component Publisher
WLKEEPER.exe 3,084 K 804 K 1508 WLANKEEPER Intel(R) Corporation (No signature was present in the subject) Intel(R) Corporation
winlogon.exe 6,796 K 1,868 K 884 Windows NT Logon Application Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
VzDetectAgent.exe 2,412 K 3,392 K 2308 VzDetectAgent Verizon (The certificate is not valid for the requested usage) Verizon
Verizon_IHAMessageCenter.exe 32,228 K 5,888 K 672 IHA_MessageCenter Verizon (The certificate is not valid for the requested usage) Verizon
uphclean.exe 588 K 976 K 3156 User Profile Hive Cleanup Service Windows (R) Codename Longhorn DDK provider (No signature was present in the subject) Windows (R) Codename Longhorn DDK provider
System 0 K 64 K 4
svchost.exe 21,092 K 20,400 K 1300 Generic Host Process for Win32 Services Microsoft Corporation (Verified) Microsoft Windows Component Publisher
svchost.exe 2,104 K 1,468 K 1196 Generic Host Process for Win32 Services Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
svchost.exe 3,276 K 1,676 K 1124 Generic Host Process for Win32 Services Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
svchost.exe 1,928 K 1,680 K 1648 Generic Host Process for Win32 Services Microsoft Corporation (Verified) Microsoft Windows Component Publisher
svchost.exe 1,116 K 128 K 1740 Generic Host Process for Win32 Services Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
svchost.exe 1,228 K 172 K 256 Generic Host Process for Win32 Services Microsoft Corporation (Verified) Microsoft Windows Component Publisher
svchost.exe 10,760 K 536 K 340 Generic Host Process for Win32 Services Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
svchost.exe 1,044 K 276 K 700 Generic Host Process for Win32 Services Microsoft Corporation (Verified) Microsoft Windows Component Publisher
svchost.exe 1,040 K 272 K 1916 Generic Host Process for Win32 Services Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
svchost.exe 1,480 K 240 K 2456 Generic Host Process for Win32 Services Microsoft Corporation (Verified) Microsoft Windows Component Publisher
svchost.exe 2,424 K 360 K 2516 Generic Host Process for Win32 Services Microsoft Corporation (Verified) Microsoft Windows Component Publisher
svchost.exe 2,092 K 1,284 K 4060 Generic Host Process for Win32 Services Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
sprtsvc.exe 5,204 K 856 K 2324 SupportSoft Agent Service SupportSoft, Inc. (Verified) Comcast
spoolsv.exe 3,896 K 1,152 K 144 Spooler SubSystem App Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
smss.exe 172 K 100 K 812 Windows NT Session Manager Microsoft Corporation (Verified) Microsoft Windows Component Publisher
services.exe 1,872 K 1,584 K 928 Services and Controller app Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
S24EvMon.exe 2,856 K 1,000 K 1456 Wireless Management Service Intel Corporation (No signature was present in the subject) Intel Corporation
RegSrvc.exe 884 K 404 K 2156 Intel(R) PROSet/Wireless Registry Service Intel Corporation (No signature was present in the subject) Intel Corporation
nmsrvc.exe 7,240 K 2,688 K 1696 Network Magic Service Pure Networks, Inc. (Verified) PURE NETWORKS
NicConfigSvc.exe 3,432 K 796 K 1064 Internal Network Card Power Management Service Dell Inc. (No signature was present in the subject) Dell Inc.
msiexec.exe 2,584 K 1,968 K 1152 Windows® installer Microsoft Corporation (Verified) Microsoft Windows Component Publisher
MpCmdRun.exe 3,340 K 5,280 K 2688 Windows Defender Command Line Utility Microsoft Corporation
MDM.EXE 1,008 K 780 K 1968 Machine Debug Manager Microsoft Corporation (Verified) Microsoft Corporation
mcrdsvc.exe 852 K 452 K 3112 MCRD Device Service Microsoft Corporation (Verified) Microsoft Windows Publisher
lsass.exe 4,016 K 1,240 K 940 LSA Shell (Export Version) Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
issch.exe 344 K 364 K 1800 InstallShield Update Service Scheduler InstallShield Software Corporation (No signature was present in the subject) InstallShield Software Corporation
hpwuSchd2.exe 612 K 340 K 1856 hpwuSchd Application Hewlett-Packard (No signature was present in the subject) Hewlett-Packard
hpqtra08.exe 5,644 K 3,004 K 1316 HP Digital Imaging Monitor Hewlett-Packard Co. (Verified) Hewlett Packard
hpqste08.exe 4,076 K 1,948 K 3484 HP CUE Status Root Hewlett-Packard Co. (No signature was present in the subject) Hewlett-Packard Co.
hpqgpc01.exe 2,676 K 624 K 3700 GPCore COM object Hewlett-Packard (No signature was present in the subject) Hewlett-Packard
hpqbam08.exe 952 K 636 K 3560 HP CUE Alert Popup Window Objects Hewlett-Packard Co. (No signature was present in the subject) Hewlett-Packard Co.
firefox.exe 208,364 K 180,008 K 3188 Firefox Mozilla Corporation (Verified) Mozilla Corporation
explorer.exe 14,684 K 8,604 K 1828 Windows Explorer Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
EvtEng.exe 4,164 K 716 K 1364 Intel(R) PROSet/Wireless Event Log Intel Corporation (No signature was present in the subject) Intel Corporation
ehSched.exe 776 K 312 K 408 Media Center Scheduler Service Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
ehrecvr.exe 2,504 K 548 K 360 Media Center Receiver Service Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
dllhost.exe 2,296 K 960 K 3896 COM Surrogate Microsoft Corporation (Verified) Microsoft Windows Component Publisher
ctfmon.exe 968 K 1,476 K 1992 CTF Loader Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
csrss.exe 1,848 K 2,316 K 860 Client Server Runtime Process Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
alg.exe 1,200 K 388 K 2712 Application Layer Gateway Service Microsoft Corporation (Verified) Microsoft Windows Component Publisher
 
#45
Hi - many thanks again or your help- I have the Speccy file, but could not upload it. When I tried to upload it as a txt file (PMURPHY.txt), I got a message back which said "The uploaded file does not have an allowed extension." Maybe I did something wrong with saving it to a kind of file that could not be uploaded? Should I try something else"
 
#46
You would think txt would be an allowed extension. Can you zip up the file? Perhaps that will work.

The Process Explorer log shows Windows Defender is using up too much CPU. Perhaps it is running a scan? Some version of ZA would replace Defender with malware. Start FRST, Put MsMpEng.exe in the Search box and hit Search Files. You should get a notepad file showing what it found. Please Copy and Paste.
 
#47
Hi - ok, I tried something different for the Speccy file, and I think it worked - it should be attached here. Thanks -
 

Attachments

  • PMURPHY.txt
    450.9 KB · Views: 9
#48
Hi - ok, here is the latest FRST - seems pretty short, but what do I know -

Farbar Recovery Scan Tool (x86) Version: 06-08-2017
Ran by Patricia Murphy (06-08-2017 11:03:30)
Running from C:\Documents and Settings\Patricia Murphy\My Documents\Downloads
Boot Mode: Normal

================== Search Files: "MsMpEng.exe" =============

C:\Program Files\Windows Defender\MsMpEng.exe
[2006-11-03 19:19][2006-11-03 19:19] 000013592 _____ (Microsoft Corporation) F45DD1E1365D857DD08BC23563370D0E [File is digitally signed]

====== End of Search ======
 
#49
Speccy doesn't look too bad. It's running about normal temp for a laptop. Your hard drive has a few errors but loks like it's not too bad.

The search found what it was supposed to. msmpeng.exe is legit so perhaps it was only doing a scan when we looked with Process Explorer. Make a new processor explorer log and post it. Let's see if it still shows msmpeng.exe eating up the CPU.

You are going to need a new browser so check out
http://alternativeto.net/list/updated-web-browsers-for-windows-xp
and try one or two. Oracle is probably the closest to what you are used to.

As far as anti-virus I use Avast but I've heard that sometimes it doesn't work right on XP. I've seen Panda recommended:
http://www.pandasecurity.com/usa/homeusers/solutions/free-antivirus/
 
Status
Not open for further replies.
Top Bottom
Back
Forums
Resources
Menu