View original (French)

My computer is slow.
mister1616 -  
Hello,

for some time now there has been a slowness either when opening my email box or a web page

Thank you for your help

Configuration: Windows 7 / Chrome 47.0.2526.111

23 answers

  1.  fabul Moderator
    With Process Explorer you can visualize the processes that are making the CPU work hard

    chkdsk /f to perform a disk check
    sfc /scannow to perform a system file check.

    All this is not absolutely necessary and can be disabled, unchecked:

    You can remove Google and Auslogics tasks.

    SoundMax depends on whether you need it.

    What I have bolded belongs to Microsoft Security Essentials, but you have Avira, uninstall or uncheck it, then a file not found, delete it

    In logon

    SoundMan Realtek Sound Manager Realtek Semiconductor Corp. c:\windows\soundman.exe 3/09/2009 05:29

    OneNote 2007 - Screenshot and launch.lnk Microsoft Office OneNote Quick Launcher Microsoft Corporation c:\program files\microsoft office\office12\onenotem.exe 2/26/2009 16:07

    Google Chrome Google Chrome Installer Google Inc. c:\program files\google\chrome\application\48.0.2564.97\installer\chrmstp.exe 1/27/2016 07:55

    In Scheduled tasks
    \Auslogics\BoostSpeed\Scan and Repair File not found: TaskSchedulerHelper.dll
    \Auslogics\BoostSpeed\Start BoostSpeed ?n Mister Glair logon BoostSpeed Auslogics c:\program files\auslogics\boostspeed\boostspeed.exe 1/06/2016 07:47

    \\CCleanerSkipUAC CCleaner Piriform Ltd c:\program files\ccleaner\ccleaner.exe 1/15/2016 21:18

    \GoogleUpdateTaskMachineCore Google Installer Google Inc. c:\program files\google\update\googleupdate.exe 11/20/2015 17:55

    \GoogleUpdateTaskMachineUA Google Installer Google Inc. c:\program files\google\update\googleupdate.exe 11/20/2015 17:55

    <bold>\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Windows Live Social Object Extractor Engine Microsoft Corporation c:\program files\windows live\soxe\wlsoxe.dll 4/01/2014 05:28</bold>

    \Microsoft\Windows\Windows Media Sharing\UpdateLibrary Windows Media Player Network Sharing Service configuration application Microsoft Corporation c:\program files\windows media player\wmpnscfg.exe 7/14/2009 01:09

    \{5B5B8E2A-5B87-4E12-A5CC-E7C797796003} Google Chrome Google Inc. c:\program files\google\chrome\application\chrome.exe 1/27/2016 09:02

    \{AD21BCC7-1E4C-4135-BD43-DB4B16048EFD} Google Chrome Google Inc. c:\program files\google\chrome\application\chrome.exe 1/27/2016 09:02

    \{BE6F6806-065D-4906-A04E-A9EC2A2F41FD} Google Chrome Google Inc. c:\program files\google\chrome\application\chrome.exe 1/27/2016 09:02
    1. mister1616 Author
      For the rest of your question

      Look at what is running with Process Explorer

      Then you can run a CHKDSK /F and an SFC /SCANNOW with CMD

      I don't understand...
      1. mister1616 Author
        In longon
        avgnt Avira system tray application Avira Operations GmbH & Co. KG c:\program files\avira\antivirus\avgnt.exe 4/11/2015 12:12

        Avira SystrayStartTrigger Avira Launcher Avira Operations GmbH & Co. KG c:\program files\avira\launcher\avira.systraystarttrigger.exe 8/12/2015 10:26

        SoundMan Realtek Sound Manager Realtek Semiconductor Corp. c:\windows\soundman.exe 9/03/2009 05:29

        OneNote 2007 - Screenshot and Launch.lnk Microsoft Office OneNote Quick Launcher Microsoft Corporation c:\program files\microsoft office\office12\onenotem.exe 26/02/2009 16:07

        Google Chrome Google Chrome Installer Google Inc. c:\program files\google\chrome\application\48.0.2564.97\installer\chrmstp.exe 27/01/2016 07:55

        Microsoft Windows Windows Mail Microsoft Corporation c:\program files\windows mail\winmail.exe 14/07/2009 00:42

        In Scheduled tasks
        \Auslogics\BoostSpeed\Scan and Repair File not found: TaskSchedulerHelper.dll
        \Auslogics\BoostSpeed\Start BoostSpeed on Mister Glair logon BoostSpeed Auslogics c:\program files\auslogics\boostspeed\boostspeed.exe 6/01/2016 07:47

        \Avira Browser Safety Updater Task Avira Browser Safety Updater Avira Operations GmbH & Co. KG c:\program files\avira\browser safety\avirabrowsersafetyupdater.exe 11/03/2015 16:06

        \CCleanerSkipUAC CCleaner Piriform Ltd c:\program files\ccleaner\ccleaner.exe 15/01/2016 21:18

        \GoogleUpdateTaskMachineCore Google Installer Google Inc. c:\program files\google\update\googleupdate.exe 20/11/2015 17:55

        \GoogleUpdateTaskMachineUA Google Installer Google Inc. c:\program files\google\update\googleupdate.exe 20/11/2015 17:55

        \Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Windows Live Social Object Extractor Engine Microsoft Corporation c:\program files\windows live\soxe\wlsoxe.dll 1/04/2014 05:28

        \Microsoft\Windows\Windows Media Sharing\UpdateLibrary Windows Media Player Network Sharing Service Configuration Application Microsoft Corporation c:\program files\windows media player\wmpnscfg.exe 14/07/2009 01:09

        \{5B5B8E2A-5B87-4E12-A5CC-E7C797796003} Google Chrome Google Inc. c:\program files\google\chrome\application\chrome.exe 27/01/2016 09:02

        \{AD21BCC7-1E4C-4135-BD43-DB4B16048EFD} Google Chrome Google Inc. c:\program files\google\chrome\application\chrome.exe 27/01/2016 09:02

        \{BE6F6806-065D-4906-A04E-A9EC2A2F41FD} Google Chrome Google Inc. c:\program files\google\chrome\application\chrome.exe 27/01/2016 09:02
        1. fabul Moderator
          What programs do you have checked under "Logon" and "Scheduled tasks" in Autoruns?

          Check what is running with Process Explorer

          Then you can run a CHKDSK /F and an SFC /SCANNOW with CMD.
          6. mister1616 Author
            Just defragmented, I didn't do it because I downloaded the software but I didn't continue because I didn't know what to do and then I forgot to mention it.
            1. fabul Moderator
              Analyze and perform a defragmentation with optimization of drive C: using Auslogics Disk Defrag

              Then defrag the registry with Registry Defrag, a restart is required for the registry.
          7. fabul Moderator
            Did you skip any steps somewhere, defragmented and all?

            The PC should be working better now?

            Resolved?
            2. fabul Moderator
              Look with Autoruns, it seems you have scheduled tasks pointing to Chrome files that do not exist.

              In "Scheduled tasks", these lines should normally be yellow, delete them.

              PS: You should not delete everything that is yellow in Autoruns.

              Then you can keep RegRun Reanimator, it can be useful for finding and eliminating malware, click on "False positive" for the healthy items when there are any, it will no longer detect them.

              If you uninstall RegRun Reanimator, just before, you can click on "Uninstall Partizan" (in the program).

              And you can click on this .reg file that restores the Bootexecute key to default if it is not:

              https://www.cjoint.com/c/DIwp0hjRA6Y

              You can click on the .reg file even if you keep RegRun Reanimator.
              1. mister1616 Author
                In Scheduled tasks, I have one line in pink and one in yellow.
              2. fabul Moderator
                Rose means that the file is not digitally signed.

                If it's a trusted source file, it's fine.

                But uncheck things like Adobe, Piriform, most unnecessary ones, etc...
            4. fabul Moderator
              Not much, no surprise.

              You can uninstall Spybot, it's unnecessary

              Install ZHPFix

              Import the following script and click on GO

              Script ZHPFix
              O87 - FAEL: "{0D971C18-BFF1-49DA-895B-E4D0FF5E14DD}" [In-None-P6-TRUE] .(...) -- C:\Program Files\GoforFiles\goforfilesdl.exe (.not file.) =>PUP.Optional.YourFileDownloader
              O87 - FAEL: "{42B553E6-A6E9-410B-8408-E533E93640FA}" [In-None-P17-TRUE] .(...) -- C:\Program Files\GoforFiles\goforfilesdl.exe (.not file.) =>PUP.Optional.YourFileDownloader
              O87 - FAEL: "{B7412CEE-BE5E-4497-B3E3-10B5FFBA6406}" [In-None-P6-TRUE] .(...) -- C:\Program Files\GoforFiles\GoforFiles.exe (.not file.) =>PUP.Optional.YourFileDownloader
              O87 - FAEL: "{D2FC2CC4-7839-4E97-A6B3-C6CD1FCDC654}" [In-None-P17-TRUE] .(...) -- C:\Program Files\GoforFiles\GoforFiles.exe (.not file.) =>PUP.Optional.YourFileDownloader
              EmptyPrefetch
              EmptyCLSID
              EmptyFlash
              EmptyTemp

              You can then remove these tools with DelFix

              You can keep RegRun Reanimator, it can be useful for finding and eliminating malware, click on "False positive" for the safe items when there are any, it won't detect them anymore.

              If you uninstall RegRun Reanimator, just before, you can click on "Uninstall Partizan" (in the program).

              And you can click on this .reg file that resets the Bootexecute key to default if it's not:

              https://www.cjoint.com/c/DIwp0hjRA6Y

              You can click on the .reg file even if you keep RegRun Reanimator.
              2. mister1616 Author
                ZHPDiag finished and it's not creating a log on the desktop

                I hosted the image because it doesn't work via this forum

                http://tinypic.com/images/goodbye.jpg
                1. fabul Moderator
                  Click on Report,

                  Once the report is open, go to File -> Save As -> Desktop.
                2. mister1616 Author
                  @fabulI had already tried, but when I click on report, nothing happens.
                3. fabul Moderator
                  It's not normal, there might be a software conflict, disable your antivirus and relaunch the program as an administrator if UAC is enabled.
              3. fabul Moderator
                According to what I've seen, your PC doesn't seem infected at first glance.

                After a quick check with Autoruns, to disable unnecessary things, especially in the "Logon" and "Scheduled Tasks" tabs.

                Do some cleaning:

                ATF-Cleaner files

                Files, Registry CCleaner Portable < - Disable its monitoring.

                Registry Wise Registry Cleaner < - Check if it has added any scheduled task with Autoruns and disable it.

                Defragment:

                Files Auslogics Disk Defrag Portable

                Registry Auslogics Registry Defrag

                If you still have browser issues, or any others, if you want me to investigate further with ZHPDiag,

                Download ZHPDiag https://nicolascoolman.eu

                Install it.

                Click on "Scan"

                Wait during the analysis.

                It creates a log on the desktop.

                Post it on Cjoint and give us the Cjoint link.
                1. mister1616 Author
                  I just posted and I can't see my response anymore.
                  1. fabul Moderator
                    I don't see it either. It might be a bug or the bot blocking something; you can send it to me in a private message.
                2. mister1616 Author
                  re
                  I restored and had to open IE because I couldn't open Google Chrome anymore.
                  However, I'm having a bit of trouble following your tutorial when you talk about an item, sorry but I'm a novice at this.

                  Do I need to redo RegRun Reanimator??
                  1. fabul Moderator
                    The 6 items need to be detected again,

                    Can you copy the results for me?
                3. mister1616 Author
                  There were 6 if I remember correctly, but I don't quite understand the tutorial.
                  1. fabul Moderator
                    Had?

                    If you deleted something you shouldn't have, press Windows+R, and type: RSTRUI

                    Restore to the date of the RegRun analysis.

                    If you only deleted the bad ones, that's OK,

                    If you didn't delete anything, you can give me the list contained in the text files you create by "Save to file" by default in "Documents"

                    Otherwise, to proceed, check with Autoruns as I said, what's possibly excessive during a session, keep the list minimal, uncheck what's good and unnecessary, delete what's bad or obsolete.
                  2. fabul Moderator
                    When you see an item, you have the choice, by clicking on Copy to clipboard to copy the result to the clipboard, or Save to file, to copy the result to a text file.

                    You do this for each detected item so that I can see what there is and tell you if it is safe to delete.

                    Navigate with the arrow from the first to the last. (do not choose an action in the meantime)
                • 1
                • 2