win GAV,XP SP3,KB951784,KB951978,KB15597, updatesJuly 9th, sys bog

[Bulldog TWB]

I have gone over all the posts regarding the new updates and have not read
any that fit my problem(s)...

I ve figured out and seen the ZA issue...

but my system as a whole has boggedown... it is running like a 286... (EX:
slower then explitive)...

I know I have installed the updates... windows update pages shows I have
them installed... yet when I go to my add/remove programs with show updates
box (checked) the updates in question do not show...

regrettably, my backrack files only go back 2 days.. since it took me a
while to figue out that one of the updates interacted with ZA.. I am beyond
the 2 day back track to remove the updates...

has anyone else seen system slow down since the update?

for added info..

I ve run my virus programs and spyware programs to ensure I did not in some
way pick up somthing...(this was after installing the updates and trying to
understand the slow down as well as the loss of internet)

as far as the boggdown goes... as a furher example:...while typing this post
up I was typing faster then the system could show it... to the point where
some key strokes were not registering and thus words were not being fully
spelled... I have had go back and insert letters that I know I tyed but did
not registered to the system for posting here (rolls eyes what a pain)....
--
Matt

[Shenan Stanley]

Control Panel --> Add or Remove programs in Safe Mode as the built in
administrator?

System Restore?

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

[PA Bear [MS MVP]]

Windows version is...?

===========================

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://aumha.net/viewforum.php?f=30,
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html, or other appropriate forums for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

[Bulldog TWB]

Bear, Shenan,

Thanks for the replies... because I have not had a lot of problems over the
years (almost 20, and almost 8 with XP) I forgot about the MS version of
backtrack... this seems to have helped greatly....

I took the system to just before the updates were installed...

The system seems to be almost 100% back to normal... I had to do some
tweaking...

(Bear) sorry about the confusion I thought (my lack of thought here) by
including the XP SP3 n the subject line would indicate XP.. BTW it is XP Pro
I am running...

I am currently running ZA (well not yet, I have uninstalled it for the
tweaking of the system) Spy bot, Adware Dr, Norton's SW, and NAV, NIS (all
were updated and ran because of this issue...) that is why it took me a few
days to get here, read and post... As an added note I think I found a
portion of the cause... all of it seems to be due to ZA.

ZA appeared to be in a loop to load up at start up... but would not load,
thus, looping... this loop would slow the system down...

I will be reinstalling the updates but one at a time, and then I will
re-install ZA... I will be observing the results of each install and reboot...

the only latent effect I am still seeing is the typing issue still... here
in the browser for posting...

Ill keep you posted.

Thanks again..

Matt

[PA Bear [MS MVP]]

Your running Norton System Works, Norton AntiVirus, *and* Norton Internet
Security? No wonder the machine is "bogged down." I'm surprised it even
starts!

What is "Adware Dr [Doctor?]"? If it's "Doctor Adware", see its listing
here: http://www.spywarewarrior.com/rogue_anti-spyware.htm

--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

[Bulldog TWB]

ROFL.... yes the system starts... as you can see I am a bit anal about
protecting my systems (but when you have kids and wife on the comps who
sometimes refuse to scan files etc... better safe then sorry)... I am sorry
I meant to say spyware doctor... which is on the list of good programs from
the link you provided.

other then the boot time being slowed down (I let them all run and do their
thing.. once done I then use the system.. it takes about 5-10 minutes)
because of NSW,NAV,NIS,spy bot, SWDr. and ZA... the system and programs etc..
themselves run fine after boot up 8-) ...

however, since this last batch of upates is where the problem started...
(I'm still seeing a slow down) on MSIE, and pages loading... and a IMHO bit
of prograqm load times...

(I have looked at your hijackthis... spy bot has a similar function... I
have looked the file(s) over and I do not see anythng I do not know... not to
mention that all my scans have come up negative...)

I have not decided what I will do at this time... Because my main HD holds
Windows and basic install info I may just format the HD and do a clean
install... It will take me almost the same if not less time then searchig for
the issue.

all of my other programs and files are always installed to a second drive...
I have also scanned the 2nd drive....

what I will add to this is that the other systems do not run XP Pro but XP
home ed... the updates only seem to have interacted with the connection to
the network and internet via ZA... I have not installed the ZA update on
these systems but disabled ZA... (I also did not run the backtrack on them as
well and this too may have been a cause to the slow down issue) they run
fine...
--
Matt

[PA Bear [MS MVP]]

Your multiple AV apps and firewalls afford you less protection, not more.
Repeat this mantra after me: One (only) fireall and one (only) anti-virus
app loading at boot and running in the backgrounf at any given time.

My recommendations are as follows:

1. If SpyBot Tea Timer is enabled, disable it. See
http://aumha.net/viewtopic.php?t=32409

NB: If you don't fully understand what Tea Timer does and how it does it,
leave it permanently disabled.

2a. After making certain you have a copy of your Product Key for NAV and/or
NIS, uninstall all Norton software (including LiveUpdate) via Add/Remove
Programs & reboot.

2b. Uninstall ZA & reboot again.

3. Enable the Windows Firewall.

NB: You're "working without a net" now: Don't to ANYTHING else online (e.g.,
browsing; reading email; chatting) except #4 thru #6 below until your
anti-virus application has been installed and fully updated!

4. Download & run this removal tool:
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039

5. Reboot and run Disk Cleanup.

6a. /Immediately/ install Avira AntiVir (free): http://www.free-av.com/

6b. Manually update your new anti-virus application then run a full system
scan, prefarably in Safe Mode, then reboot one last time.

Do your problems persist now?

[Bulldog TWB]

Bear,

I have not done what you have suggested yet... I did want to add more info
and update...

The NAV is a part of NSW... and it is a part of NIS.. what I would do is
stager my purchases so that the NAV would be a part of the purchase vs. just
renewing my sub...

so for example I would buy NSW in 2006... in 2007 the NAV sub would expire
or be due to expire. As such in 2007 I woud get NIS.... this would give me
the NIS and access to the new sub to virus defs... then like now I am due on
my subscription... I could renew for say 49.99 or for 10.00 more get NSW
2008...(thought I am investigating norton 360)

during boot up I do not have Spy bot running but I do have spyware Dr.... I
do have Tea time load... I do understand what it does... and that is why I
like it...

lastley I (did) have ZA load up...(but that is uninstalled now)

I have scrubed a few files and temp files... I have seen vast improvment
almost to normal speed as far as normal programs go..

my current issue (and I am trying to find the logs now) web pages are
loading slower then they were... (more on that in a second)...

becasue I used MS sys restore. to prior to july 9th (and the updates)... I
would assume that the updates would be considered not installed...

I go to the update page to go in and select one at a time... when windows
update is done scanning my system it shows all of my updates as being
installed...

(as a side note) I do not have the system set up to install updates.. I have
it set up to just down load and let me install...

As for web pages (I dont know if this would be a cuase or not)... in C
prompt the day this all started I flushed the DNS..

ipconfig /flushdns
then I registered

ipconfig /registerdns

As I type this I just did it again and I also ran ipconfig/all
I can not state this a fact but I do not recall it saying (the last time I
checked)
IP Routing Enabled..... No (I think last time it was yes)
WINS Proxy Enabled.... No (I want to say last time this to was yes)

but now they are reading no...

--
Matt

"PA Bear [MS MVP]" wrote:

[PA Bear [MS MVP]]

You're putting a big team of horses before the cart. Please do Steps #1
through #6 first and tell me if your problems persist, Bulldog. If they do
not, we'll move on to everything you've posted in your last reply.
--
~PA Bear

[Bulldog TWB]

Bear,

I have gone through the steps you had suggest... thus the time it took to
reply now...

I have seen improvement but am still seeing a few issues and a few new...

The avira program found 2 instances if heur/html.malware on my wifes side of
the log on (docs../wifes name/local/temp (or temp internet files)... I had
quarantind the files and then deleted them...

so I do see less lagg on loading web page etc... (FF's speed is back to what
it was MS IE is still slow in most casses) but here is the twist...

for example the reply (java script here...) took several times of clicking
for the script to respond... Also now I find on both MS IE and FF If I mouse
over a JPG link (or almost any other link) and click on it, there is no
responce... so I remove the mouse and then place it back over the JPG link
(or regular link) and it will now respond... Or for example if I want to
click the web page back button the first time it will not respond (EX: you do
not the page load indicated on the browser)... If I move the mouse off and
then back over the btton and click it the page loa will activate and the
prior page will load... this is also seen on both MSIE and FF...

as an added note I feel so Naked without my NSW, NAV,NIS spy bot, spayware
dr. and ZA.

--
Matt

"PA Bear [MS MVP]" wrote:

[PA Bear [MS MVP]]

1. Install all 3 of these free applications:

Windows Defender
http://www.microsoft.com/windows/products/winfamily/defender/default.mspx

BOClean
http://www.comodo.com/boclean/boclean.html

SpywareBlaster
http://www.javacoolsoftware.com/spywareblaster.html

2. Manually update each one of them, if necessary (BOClean will update
itself when installed, IIRC).

3. After updating SpywareBlaster, make sure you enable all Protections.

4. Both Defender and BOClean will run in the background, providing real-time
protection and notifying you if anything untoward is found.

5. Empty AntiVir's Quarantine folder.

6. Run Disk Cleanup.

7. After updating Defender, run a full system scan (in Safe Mode, if need
be).

8. Give me an update in a reply to this thread. You might have more work to
do.
--
~PA Bear

Bulldog TWB wrote:
> Bear,
>

> I have gone through the steps you had suggest... thus the time it took to
> reply now...
>
> I have seen improvement but am still seeing a few issues and a few new...
>
> The avira program found 2 instances if heur/html.malware on my wifes side
> of
> the log on (docs../wifes name/local/temp (or temp internet files)... I
> had
> quarantind the files and then deleted them...
>
> so I do see less lagg on loading web page etc... (FF's speed is back to
> what
> it was MS IE is still slow in most casses) but here is the twist...
>
> for example the reply (java script here...) took several times of clicking
> for the script to respond... Also now I find on both MS IE and FF If I
> mouse
> over a JPG link (or almost any other link) and click on it, there is no
> responce... so I remove the mouse and then place it back over the JPG link
> (or regular link) and it will now respond... Or for example if I want to
> click the web page back button the first time it will not respond (EX: you
> do not the page load indicated on the browser)... If I move the mouse off
> and then back over the btton and click it the page loa will activate and
> the
> prior page will load... this is also seen on both MSIE and FF...
>
> as an added note I feel so Naked without my NSW, NAV,NIS spy bot, spayware
> dr. and ZA.
>
>

[Bulldog TWB]

ok I have done all of it... nothing has ben found...
MSIE is runng slow... but I dont normally use it anyway...

I use FF

I have been watching the mouse issue and KB issue with slow typing... and it
is also doing it in programs as well...

for example I can have a wod doc open and decide to close it... I move the
mouse over the X button.. the color will change to indicate the mouse is over
it... I click on it... It will turn dark to indicate I have clicked on it...

no joy... I will move the mouse off click on the doc and back to the button...

sometimes I have to do this several times... this is the same for other
programs, buttons, drop down menus etc...

I have not tried updating or reinstaling my keyboard and mouse drivers yet..
but as an FYI...

KB = MS model 1045 wireless 1.0A
Mouse= wireless laser 6000 Model 1052
all batteries are new...

--
Matt

"PA Bear [MS MVP]" wrote:

[PA Bear [MS MVP]]

Thread history:
http://groups.google.com/group/microsoft.public.windowsupdate/browse_frm/thread/1401309f17a2dd49

Recap: You're running WinXP SP3, fully patched.

Are you running IE6 or IE7? If IE7, was it installed before or after SP3
was installed?

Did all/most of these problems start after you'd installed SP3?

Meanwhile, please see...

Help! My Computer is slow!:
http://miekiemoes.blogspot.com/2008/02/help-my-computer-is-slow.html

<snip>

[Bulldog TWB]

yes I am running win xp prowith sp3... the subject line showse updates I got
that day...

IE 7 was on the sysbefore these update..

all of the issues manifasted after these updates...

--
Matt

"PA Bear [MS MVP]" wrote:

[PA Bear [MS MVP]]

The fact that Norton System Works, Norton AntiVirus, *and* Norton Internet
Security were all installed and most likely running in the background when
you installed WinXP SP3, let alone KB951784, KB951978, and KB15597, may have
led to a "horked" install of them all.

I can offer you 2 suggestions:

1. Open a free WinXP SP3 Installation and Compatibility support incident:

Free unlimited installation and compatibility support is available for
Windows XP, but only for Service Pack 3 (SP3), until 14 Apr-09. Chat and
e-mail support is available only in the United States and Canada.

• US:
http://support.microsoft.com/oas/default.aspx?ln=en-us&prid=11273&gprid=522131

• CA:
http://support.microsoft.com/oas/default.aspx?ln=en-ca&prid=11273&gprid=522131

• UK:
http://support.microsoft.com/oas/default.aspx?ln=en-gb&prid=11273&gprid=522131

• AU:
http://support.microsoft.com/oas/default.aspx?ln=en-au&prid=11273&gprid=522131

• Other: http://support.microsoft.com/oas/default.aspx?gprid=1173 | select
Windows XP | select Windows XP Service Pack 3

2a. Stop the Automatic Updates service:

Start > Run > (type in) services.msc > [OK]
Double-click Automatic Updates > Click on Stop
(Stopping the service will take a moment)

2b. Delete the contents of the Download folder:

Start > Run > (type in) %windir%\SoftwareDistribution > [OK]
Open the Download folder and delete its contents
Close the window.

2c. Reboot into Safe Mode then uninstall WinXP SP3 via Add/Remove Programs.

How to remove Windows XP Service Pack 3 from your computer
http://support.microsoft.com/kb/950249

2d. After rebooting into normal (Windows) mode, reboot a second time.

2e. Read & heed:
http://msmvps.com/blogs/harrywaldron/archive/2008/05/08/windows-xp-sp3-read-all-prerequisites-for-a-successful-installation.aspx

2f. Go to Windows Update website | Select CUSTOM and allow the scan to
complete | Opt to install WinXP SP3 | Follow all prompts (and keeping #2e
above in mind).

2g. After rebooting, reboot a second time.

2h. Go to Windows Update website | Select CUSTOM and allow the scan to
complete | Install any security updates offered | Follow all prompts.

=> If a Root Certificates update is available (Optional Software Updates
category), opt to install it to take full advantage of IE7's enhanced
security.

2i. Finally, re-start the Automatic Updates service:

Start > Run > (type in) services.msc > [OK]
Double-click Automatic Updates > Click on Start
(Starting the service will take a moment)

Good luck!

--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

Bulldog TWB wrote:
> yes I am running win xp prowith sp3... the subject line showse updates I
> got
> that day...
>
> IE 7 was on the sysbefore these update..
>
> all of the issues manifasted after these updates...
>

> PA Bear wrote:
>> Thread history:
>> http://groups.google.com/group/microsoft.public.windowsupdate/browse_frm/thread/1401309f17a2dd49
>>
>> Recap: You're running WinXP SP3, fully patched.
>>
>> Are you running IE6 or IE7? If IE7, was it installed before or after SP3
>> was installed?
>>
>> Did all/most of these problems start after you'd installed SP3?
>>
>> Meanwhile, please see...
>>
>> Help! My Computer is slow!:
>> http://miekiemoes.blogspot.com/2008/02/help-my-computer-is-slow.html
>>

[Bulldog TWB]

Bear,

Sorry for the late reply...

I have been out of state...

here is where I am at, at this time...

you may have noticed in one of my first posts I tried to use the
add/remove.... but the updates were not showing...(I had the show windows
updates box checked)

However, this time when I went to add remove all the updates I had
installed on the 9th including sp 3 were showing....

I have removed the updates... the only thing I wish I had done was removed
them one at a time and rebooted to test the system...to see what may have
been the culprate.

as of right now my speed, the browsers opening, loading and the curser issue
as well as the typing issue are now gone...

I have not deleted the download files as yet...

If I may ask the download file seems to be a repository of update files for
windows that I have installed... by me deleting these files will the records
of what I have installed be lost?

--
Matt

"PA Bear [MS MVP]" wrote:

[PA Bear [MS MVP]]

Is the machine now running WinXP SP2 without the July 2008 updates
installed? Is Automatic Updates still enabled?

The only consequence of deleting the contents of
%windir%\SoftwareDistribution\Download <=this folder is that the updates
(including SP3) will have to be downloaded again. (This folder is often
"purged" automatically so don't worry about deleting the contents manually.)

References:

WinXP SP3 - Read all prerequisites for a successful installation
http://msmvps.com/blogs/harrywaldron/archive/2008/05/08/windows-xp-sp3-read-all-prerequisites-for-a-successful-installation.aspx

Steps to take before you install WinXP SP3
http://support.microsoft.com/kb/950717
--
~PA Bear

Bulldog TWB wrote:
> you may have noticed in one of my first posts I tried to use the
> add/remove.... but the updates were not showing...(I had the show windows
> updates box checked)
>
> However, this time when I went to add remove all the updates I had
> installed on the 9th including sp 3 were showing....
>
> I have removed the updates... the only thing I wish I had done was removed
> them one at a time and rebooted to test the system...to see what may have
> been the culprate.
>
> as of right now my speed, the browsers opening, loading and the curser
> issue
> as well as the typing issue are now gone...
>
> I have not deleted the download files as yet...
>
> If I may ask the download file seems to be a repository of update files
> for
> windows that I have installed... by me deleting these files will the
> records
> of what I have installed be lost?
>

[Bulldog TWB]

Bear,

here is an update...

I uninstalled sp3, and the other updates from july 9th...(listined in the
sub line)

I was fearfull of deleting the download files.. so I made a new folder and
copied them there before deleing the files from the download folder...

I did read the link you provided...

I rebooted did a disk clean up and rebooted again...

even though my auto update is set to download only ( I can pick what files
to install...)

I did shut that down...

I rebooted...

when all of the files were removed... I then posted here.. and my MSIE load
time (for the browser was instant... page load was almost instant as well....

I went to windows update page and downloaded and installed sp3... proir to
DL and install I closed any programs that were running including boclean and
avira....

I have only installed sp 3...

now msie is bogged again... I have rebooted to ensure all is well so to
speak...

I click on the IE link... and it takes IE 2.5 min. to come up..and another
30 sconds for MSN (www.msn.com) to load... I do have some more testing to do
but I have to take care of some business... Ill post again in a few hours
after more testing...

--
Matt

"PA Bear [MS MVP]" wrote:

[PA Bear [MS MVP]]

Did you install WinXP SP3 *exactly* per
http://msmvps.com/blogs/harrywaldron/archive/2008/05/08/windows-xp-sp3-read-all-prerequisites-for-a-successful-installation.aspx
??

Have you rebooted at least twice since installing SP3?

What third-party toolbars (e.g., Google; Yahoo; MSN; Windows Live; Roboform;
Skype) are installed?

Have you reinstalled any Norton applications? Is Avira AntiVir still
installed?
--
~PA Bear

[Bulldog TWB]

bear,

did all that was in the link regarding installing sp 3..

I only had one 3rd party install on IE and FF I have now removed it as well...

I have not installed any Norton programs or ZA as of yet...

I did not remove Avira but I did disable it for the install as well as
disable boclean.

the only other oddity since removing sp 3 and freinds is that now my system
claims to have found a pci device but can't locate the drivers... the MoBo
has everything intergrated but the sound card (the original failed while
under warr but I did not want to mail the unit out... and wiat ten days... So
I bought a SB card... which is working, as is everything else... I am at a
bit of a loss...

but I will now try to install sp 3...

--
Matt

"PA Bear [MS MVP]" wrote:

[PA Bear [MS MVP]]

Enough already! I can't begin to keep track of everything that's transpired
in this thread since 14 Jul-08.

Please open a free support incident. Good luck.

Bulldog TWB wrote:
> bear,
>
> did all that was in the link regarding installing sp 3..
>
> I only had one 3rd party install on IE and FF I have now removed it as
> well...
>
> I have not installed any Norton programs or ZA as of yet...
>
> I did not remove Avira but I did disable it for the install as well as
> disable boclean.
>
> the only other oddity since removing sp 3 and freinds is that now my
> system
> claims to have found a pci device but can't locate the drivers... the
> MoBo
> has everything intergrated but the sound card (the original failed while
> under warr but I did not want to mail the unit out... and wiat ten days...
> So I bought a SB card... which is working, as is everything else... I am
> at
> a bit of a loss...
>
> but I will now try to install sp 3...
>
>
>