Windows really really slow to start

  • Thread starter Thread starter espee2
  • Start date Start date
E

espee2

I have XP sp3, fairly new, (notebook for Christmas) not allot of crap
loaded. It has worked fine up until about 2-3 weeks ago. When I turn
it on in the morning (cold start) it will load the desktop image, I
hear the stupid music, then it sits for over a minute before anything
pops up, then it's instant. I can look at the task manager while it's
loading and only about 23-25 of a normal 38-40 processes running but
no cpu activity so I can't tell whats hanging. I tried to do a system
restore but before I did that, I tried the "Diagnostic Startup" in
msconfig and that erased all my restore points (there should be a
warning for that by the way)

I have disabled all the items I think of that could cause it to hang,
like Diskeeper, update services, including Avast, google updater, and
I have checked the logs in everything I can (event viewer etc...)
I do have Process Explorer installed, how can I use that to see whats
going on while windows is starting up? any other ideas on how to track
down the culprit? oh yea, did check for viruses and maleware.
 
Done a disk cleanup recently? Defrag? Do you have DSL? Try it with modem
disconnected?
Try changing what's in startup folder?
 
I have XP sp3, fairly new, (notebook for Christmas) not allot of crap
loaded. It has worked fine up until about 2-3 weeks ago. When I turn
it on in the morning (cold start) it will load the desktop image, I
hear the stupid music, then it sits for over a minute before anything
pops up, then it's instant. I can look at the task manager while it's
loading and only about 23-25 of a normal 38-40 processes running but
no cpu activity so I can't tell whats hanging. I tried to do a system
restore but before I did that, I tried the "Diagnostic Startup" in
msconfig and that erased all my restore points (there should be a
warning for that by the way)

I have disabled all the items I think of that could cause it to hang,
like Diskeeper, update services, including Avast, google updater, and
I have checked the logs in everything I can (event viewer etc...)
I do have Process Explorer installed, how can I use that to see whats
going on while windows is starting up? any other ideas on how to track
down the culprit? oh yea, did check for viruses and maleware.

You can use PE to figure it out and I have some instructions for how
to do that since I have explained it so many times! I can give you
those if you want to learn how to do it (which is not hard), but here
is another way that I am starting to use as a starting point and then
if needed, we can still use PE to do some fine tuning.

My ideas do not involve trying things, finding things, tinkering, dust
bunnies or generalities like a "good malware scan" and then wondering
what to do next. You need to do things, not try things.

We can see exactly what is going on and fix the problems with
certainty. Not counting the scans, this whole process should only
take a small amount of your time.

This will not quite show you everything you can see in PE (like
Services which we will do next), but it is a good place to start, less
complicated than PE and there will be fewer back and forth messages
that include words like "try" and "maybe". Then we can fix what is
left.

Reduce the possibility of a malware infection.

Download, install, update and do a full scan with these free malware
detection programs:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

They can be uninstalled later if desired.


Here are three things we need, how to do it and then some examples
from my system.

1. Supply msinfo32 information about your system
2. Supply a screenshot of Task Manager information
3. Supply a screenshot of startup information available from CCleaner

1. Click Start, Run and in the box enter:

msinfo32

Click OK, and when the System Summary info appears, click Edit, Select
All, Copy and then paste the information back here.

There will be some personal information (like System Name and User
Name), and whatever appears to be private information to you, just
delete it from the pasted information.

2. Right click the Taskbar, choose Task Manager and select the
Processes tab.

Click View, Select Columns, check the box that says: Virtual Memory
Size. Expand the width of the Task Manager box so you can see all the
columns and processes.

Double click a column heading in TM to sort by the column. For
example, sort Task Manager by the CPU column.

3. Download CCleaner, install it, run it, click Tools, Startup and
drag the columns around so all the Startup items are easy to see.

CCleaner is good for this since it shows the Startup information in a
bigger display and has other useful functions. You can uninstall it
later if you don't use it.

Get CCleaner here:

http://www.ccleaner.com/

Post a screenshot of your Task Manager and CCleaner Startup
information screen.

When you are done, we will be able to see what you are seeing.

Here is how to create and post a screenshot:

Press the Print Scrn button to copy your entire screen to the Windows
clipboard.

Press Alt Print Scrn to copy just the active window to the Windows
clipboard.

Open MS Paint:

Start, Program Accessories, Paint

When Paint opens, press CTRL-V to paste the clipboard, save the new
Paint file to your desktop or someplace you can remember. JPG files
take up less hard disk space than BMP files and just as readable.

Make as many screenshots as you need. Practice makes perfect. Be
careful your screenshot does not contain any personal information.
Practice viewing your images before you upload them to be sure they
are okay.

If you cannot upload or attach screenshot to your post (you can't
here), you can use a free third party image hosting WWW site.

Create a free account on some free picture hosting web site. You can
always remove your account later if you want.

Here are some free image hosting sites:

http://www.imageshack.us/
http://photobucket.com/

Using your free account, upload your screenshot(s) (the JPG or BMP
files) to the site and it will return to you a URL web address (a
Direct Link) for your new image(s) which you can paste the Direct Link
in a message post, email, etc.

When you are done, what you post for others to use should look
something like this:

http://img163.imageshack.us/img163/6428/taskmanagerr.jpg <- Task
Manager
http://img100.imageshack.us/img100/6969/ccleanerstartup.jpg <-
CCleaner Startup

If you click those example links, you can see some examples. Yours
will be similar. As you can see, mine are pretty boring, but I don't
have much of a performance problem either.

Post that Direct Link web address back here in your response and we
can click on the link address and see your screenshots. Post as many
as you need - the sites are free.

Three things are needed from you after the MBAM and SAS scans run
clean:

1. Supply msinfo32 information about your system
2. Supply a screenshot of Task Manager information
3. Supply a screenshot of startup information available from CCleaner
 
OS Name Microsoft Windows XP Home Edition
Version 5.1.2600 Service Pack 3 Build 2600
OS Manufacturer Microsoft Corporation
System Name ***
System Manufacturer SAMSUNG ELECTRONICS CO., LTD.
System Model NC10
System Type X86-based PC
Processor x86 Family 6 Model 28 Stepping 2 GenuineIntel ~1596 Mhz
BIOS Version/Date Phoenix Technologies Ltd. 07CA.M002.20090414.KTW,
4/14/2009
SMBIOS Version 2.5
Windows Directory C:\WINDOWS
System Directory C:\WINDOWS\system32
Boot Device \Device\HarddiskVolume2
Locale United States
Hardware Abstraction Layer Version = "5.1.2600.5512 (xpsp.
080413-2111)"
User Name ****
Time Zone Pacific Standard Time
Total Physical Memory 1,024.00 MB
Available Physical Memory 558.19 MB
Total Virtual Memory 2.00 GB
Available Virtual Memory 1.96 GB
Page File Space 2.85 GB
Page File D:\pagefile.sys


more to follow:
_____________________________-----------
_______________________------------------__________________
 
espee2 said:
I tried the "Diagnostic Startup" in msconfig and that erased all
my restore points (there should be a warning for that by the way)

Trying Diagnostic Startup in msconfig does *not* erase any Restore
Points. You seem to be leaving out some important information. Perhaps
you are referring to Disk Cleanup? If so, you would still need to click
on the More Options tab and then click the "Clean up" button in the
System Restore section, the one that says:

"You can free more disk space by removing all but the most recent
restore point."

Are you positive your Restore Points are erased? Has System Restore ever
worked? You should know that there are some programs that interfere with
SR. Some of these include Zone Alarm, Norton, and McAfee. One way around
this is to run SR from Safe Mode or Safe Mode with Command Prompt.
 
From your screenshots: "Setpoint.EXE" with uppercase extension is the
Logitec keyboard & Mouse driver, but "SetPoint.exe" (with lower case
extension), according to Bleepingcomputer is probably a virus, and so is
"igfxpers.exe" and the two under it.

Explorer.exe seems to be using up to much memory, so is one istance of
"svchost.exe" and also SetPoint.exe, and you are also running about twice
the normal processes. You should count a total in the mid twenties in the
Taskmanager.. because most programs don't need to be running when the
computer starts, and you seem to have many programs running in the Startup
(third image)... you should see the same number of programs in "msconfig" as
in the Run keys of the Registry, and according to your third image, the Run
key seems to have quite a few processes where two or three should be
running.

A few processes like your mouse and touchpad, bluetooth, battery manager,
display manager, may not need to be running... drivers don't usually show in
the taskmanager so you could try them disabled to test how the system works
and enable them back on if you find they need to be running.



Suspicious processes:
SetPoint.exe
http://www.bleepingcomputer.com/startups/bttray.exe-660.html
igfxpers.exe and other "igx-etc."
http://www.bleepingcomputer.com/startups/bttray.exe-660.html


Check the processes i marked on the image on the bleepingcomputer search
bar, and disable those that show to be suspicious or don't show any
results... disable them in "msconfig" and/or in the "Run" registry keys. And
to check/delete the suspicious processes pointed out in the image, run an
online viral scan, or scan your system with a portable antivirus like
ClamWin or Dr Web. and if they don't detect the processes as malware,
download A Squared Free... this application has removed docens of trojans
from my system on several occasions when other security software had failed
to detect anything.

http://img685.imageshack.us/img685/2621/processes.jpg


Delete unnecessary and suspicious startup items here:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run



-------------------------------------
 
I,m sure it did (Diagnostic Startup) I had plenty of restore points, I
checked before as that was my next move. I have the setting to save
space at 1% that's 1.5 gig, about 20 restore points, after doing a
diag startup, I had none at all and it pegged my slider back to 100%.
that was the only drastic setting change I had done in weeks (doing
the diag-startup)

anyway, so where do I find this boot log as discussed above?
 
From your screenshots: "Setpoint.EXE" with uppercase extension is the
Logitec keyboard & Mouse driver, but "SetPoint.exe" (with lower case
extension), according to Bleepingcomputer is probably a virus, and so is
"igfxpers.exe" and the two under it.

Explorer.exe seems to be using up to much memory, so is one istance of
"svchost.exe" and also SetPoint.exe, and you are also running about twice
the normal processes. You should count a total in the mid twenties in the
Taskmanager.. because most programs don't need to be running when the
computer starts, and you seem to have many programs running in the Startup
(third image)... you should see the same number of programs in "msconfig"as
in the Run keys of the Registry, and according to your third image, the Run
key seems to have quite a few processes where two or three should be
running.

A few processes like your mouse and touchpad, bluetooth, battery manager,
display manager, may not need to be running... drivers don't usually showin
the taskmanager so you could try them disabled to test how the system works
and enable them back on if you find they need to be running.

Suspicious processes:
SetPoint.exehttp://www.bleepingcomputer.com/startups/bttray.exe-660.html
igfxpers.exe and other "igx-etc."http://www.bleepingcomputer.com/startups/bttray.exe-660.html

Check the processes i marked on the image on the bleepingcomputer search
bar, and disable those that show to be suspicious or don't show any
results... disable them in "msconfig" and/or in the "Run" registry keys. And
to check/delete the suspicious processes pointed out in the image, run an
online viral scan, or scan your system with a portable antivirus like
ClamWin or Dr Web. and if they don't detect the processes as malware,
download A Squared Free... this application has removed docens of trojans
from my system on several occasions when other security software had failed
to detect anything.

http://img685.imageshack.us/img685/2621/processes.jpg

Delete unnecessary and suspicious startup items here:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

they're not viruses, the setppoint is correct (advanced mouse settings
quit when I disable it) I've checked the igfx... they're all
associated with Intel Graphics... I've been experimenting around, I
eventually disabled everything in my startup tab (msconfig) and the
non windows services (services tab) and it still starts slow. almost
1min-35sec every time. It does it every restart (not just in the
morning as I originally stated) but not during safe mode. that one
time I put it in diagnostic startup (msconfig) it started fine
 
I am sorry that I doubted you, espee2. I was so sure of myself!

I agree with you that XP should warn you of such a thing. I did find
that information here:

http://support.microsoft.com/kb/310560

.... but how many people look at this KB article before configuring a
Diagnostic Startup? I mean, come on, Microsoft!

For future reference, if you ever need to configure the equivalent of a
diagnostic startup (while keeping your Restore Points!), you may
configure a Clean Boot:

http://support.microsoft.com/kb/310353

If DL doesn't answser your question, I'll see if I can find an answer
for you.
 
That information is in the KB article DL cited:

http://support.microsoft.com/kb/315222

"The Boot Logging text is recorded in the Ntbtlog.txt file in the
%SystemRoot% folder."

Another way to enable boot logging is to use msconfig. Click on the
boot.ini tab and then check the BOOTLOG box under Boot Options.

Did you ever use Windows Update to install hardware drivers?
 
Trying Diagnostic Startup in msconfig does *not* erase any Restore
Points. You seem to be leaving out some important information. Perhaps
you are referring to Disk Cleanup? If so, you would still need to click
on the More Options tab and then click the "Clean up" button in the
System Restore section, the one that says:

"You can free more disk space by removing all but the most recent
restore point."


It should be noted, though, that that freeing of disk space is really
very temporary. It doesn't take long to create more restore points and
reuse the disk space that was freed.

The only real way to save disk space used by restore points is to
reduce the total amount of space System Restore uses.
 
espee2 said:
I have XP sp3, fairly new, (notebook for Christmas) not allot of crap
loaded. It has worked fine up until about 2-3 weeks ago. When I turn
it on in the morning (cold start) it will load the desktop image, I
hear the stupid music, then it sits for over a minute before anything
pops up, then it's instant. I can look at the task manager while it's
loading and only about 23-25 of a normal 38-40 processes running but
no cpu activity so I can't tell whats hanging. I tried to do a system
restore but before I did that, I tried the "Diagnostic Startup" in
msconfig and that erased all my restore points (there should be a
warning for that by the way)

I have disabled all the items I think of that could cause it to hang,
like Diskeeper, update services, including Avast, google updater, and
I have checked the logs in everything I can (event viewer etc...)
I do have Process Explorer installed, how can I use that to see whats
going on while windows is starting up? any other ideas on how to track
down the culprit? oh yea, did check for viruses and maleware.

Once everything is finished loading, are you satisfied with your
performance?

After configuring a Clean Boot, does your startup time decrease
dramatically? To configure a Clean Boot:

http://support.microsoft.com/kb/310353

I know that Google addons have caused sluggishness for some. Also, when
I Googled DkService.exe (DiskKeeper), I noticed that others complained
about this service slowing things down.

What significant event or events took place in the last two to three
weeks? Did you install any programs or updates (including Windows
updates)?
 
Once everything is finished loading, are you satisfied with your
performance?

After configuring a Clean Boot, does your startup time decrease
dramatically? To configure a Clean Boot:

http://support.microsoft.com/kb/310353

I know that Google addons have caused sluggishness for some. Also, when
I Googled DkService.exe (DiskKeeper), I noticed that others complained
about this service slowing things down.

What significant event or events took place in the last two to three
weeks? Did you install any programs or updates (including Windows
updates)?

Once it's started it runs like a dream, I tried some stuff last night
and every time I restarted it was almost exactly 1 min 35 sec then
boom everything popped up. gonna go check the boot log, will post it
here
 
espee2 said:
Once it's started it runs like a dream, I tried some stuff last night
and every time I restarted it was almost exactly 1 min 35 sec then
boom everything popped up. gonna go check the boot log, will post it
here

If it's only 95 seconds, I'd say there's nothing wrong.
 
If it's only 95 seconds, I'd say there's nothing wrong.

95 seconds of HELL!! -JK-:-) I checked the windows update history and
the only hardware I updated was my Atheros wireless network driver,
and the KME usb human interface device. the bootlog is wat to huge to
post here (never saw one before) and makes no sense to me... :-) It
is only 95 second, but it used to start instantly, and so the first
couple times, until I figured out what was going on it seemed like an
eternity and I thought it was broke.
 
95 seconds of HELL!! -JK-:-) I checked the windows update history and
the only hardware I updated was my Atheros wireless network driver,
and the KME usb human interface device. the bootlog is wat to huge to
post here (never saw one before) and makes no sense to me... :-) It
is only 95 second, but it used to start instantly, and so the first
couple times, until I figured out what was going on it seemed like an
eternity and I thought it was broke.


My personal view is that the attention many people pay to how long it
takes to boot is unwarranted. Assuming that the computer's speed is
otherwise satisfactory, it is not generally worth worrying about. Most
people start their computers once a day or even less frequently. In
the overall scheme of things, even a few minutes to start up isn't
very important. Personally I power on my computer when I get up in the
morning, then go get my coffee. When I come back, it's done booting. I
don't know how long it took to boot and I don't care.
 
Back
Top