This list is "Designed for Windows XP", although I didn't receive the logo.... :-)

1. Defrag your hard drive.  Use the built in XP defragmenter (dfrg.msc).  It's the 
only one that properly optimizes your system's prefetching to speed up boot time.

2. Go to Microsoft's website and download BootVis.exe.  It will optimize your prefetching 
even further than the built in defragmenter.  Use both to get the best results: dfrg.msc 
first, then BootVis.exe->Tools menu->Optimize.  Also, you can use it to benchmark 
your boot time before and after system tweaks and software installations.

3. Go to Start->Run... and type or paste "Rundll32.exe advapi32.dll,ProcessIdleTasks". 
 This will start a built in optimization routine that runs in the System Idle Process 
and shows up as "rundll32.exe" in task manager.  It normally runs automatically every 
3 days.  It will run for 15 mins to half an hour, so don't try to do anything too 
intensive while its running.  If you get sick of it running, you should probably 
log off or restart to be safe, rather than killing the process.

4. Delete anything that you don't need in the Start->Programs->Startup folder, and 
in the Registry under HKLM->Software->Microsoft->Windows->Run and HKCU->Software->Microsoft->Windows->Run.

5. Go to Start->Control Panel->Administrative Tools->Services or go to Start->Run... 
and type "services.msc" to display services running on your machine.  About 1/3 should 
be automatic, 1/3 should be manual, and 1/3 should be disabled, IMHO.  If you don't 
know which to change, search google for "XP services" and read one of the many webpages 
that describe each service.

6. Use a partition manager to create a separate partition for your swap-file.  Set 
its size to about 2.5 times the amount of physical RAM you have.  You can do this 
by right-clicking my computer and selecting Properties->Advanced tab->Performance 
section->Settings button->Advanced tab again->Virtual Memory section->Change button. 
 Whew! They don't make that one easy to get to.  Just don't completely remove your 
swap file, cause your system might not boot after that, unless you have a lot of 
physical RAM.

7. Repeat steps 1-3.

Ideally, XP on a clean install should boot in about 12 seconds from the time that 
you see the XP logo to useable (can open a program).  With all my device drivers 
and third-party utilities, the best I can acheive so far is 18 seconds on my Dell. 
 Don't use Norton SpeedDisk!--It may slow your XP system boot time by about 6 seconds.

I have messed around with this a lot, to say the least, and I plan to build some 
utilities to make it easier and give them away for free in the future.  Wish I had 
a web address to post here, but I'll be around here in the future, so check back 
in this discussion forum if you are really interested, or look for my utilities in 
the next few months on download.com in the Utilities section.

Good luck,
Ben

[Reply or follow-up to this message]

Followed your great advice. Got my startup down to 11 secs!.Thanx.


On Friday, January 3, 2003 at 1:51 pm, Ben wrote:

>This list is "Designed for Windows XP", although I didn't receive the logo.... :-)
>
>1. Defrag your hard drive.  Use the built in XP defragmenter (dfrg.msc).  It's the 
>only one that properly optimizes your system's prefetching to speed up boot time.
>
>2. Go to Microsoft's website and download BootVis.exe.  It will optimize your prefetching 
>even further than the built in defragmenter.  Use both to get the best results: 
dfrg.msc 
>first, then BootVis.exe->Tools menu->Optimize.  Also, you can use it to benchmark 
>your boot time before and after system tweaks and software installations.
>
>3. Go to Start->Run... and type or paste "Rundll32.exe advapi32.dll,ProcessIdleTasks". 
> This will start a built in optimization routine that runs in the System Idle Process 
>and shows up as "rundll32.exe" in task manager.  It normally runs automatically 
every 
>3 days.  It will run for 15 mins to half an hour, so don't try to do anything too 
>intensive while its running.  If you get sick of it running, you should probably 
>log off or restart to be safe, rather than killing the process.
>
>4. Delete anything that you don't need in the Start->Programs->Startup folder, and 
>in the Registry under HKLM->Software->Microsoft->Windows->Run and HKCU->Software->Microsoft->Windows->Run.
>
>5. Go to Start->Control Panel->Administrative Tools->Services or go to Start->Run... 
>and type "services.msc" to display services running on your machine.  About 1/3 
should 
>be automatic, 1/3 should be manual, and 1/3 should be disabled, IMHO.  If you don't 
>know which to change, search google for "XP services" and read one of the many webpages 
>that describe each service.
>
>6. Use a partition manager to create a separate partition for your swap-file.  Set 
>its size to about 2.5 times the amount of physical RAM you have.  You can do this 
>by right-clicking my computer and selecting Properties->Advanced tab->Performance 
>section->Settings button->Advanced tab again->Virtual Memory section->Change button. 
> Whew! They don't make that one easy to get to.  Just don't completely remove your 
>swap file, cause your system might not boot after that, unless you have a lot of 
>physical RAM.
>
>7. Repeat steps 1-3.
>
>Ideally, XP on a clean install should boot in about 12 seconds from the time that 
>you see the XP logo to useable (can open a program).  With all my device drivers 
>and third-party utilities, the best I can acheive so far is 18 seconds on my Dell. 
> Don't use Norton SpeedDisk!--It may slow your XP system boot time by about 6 seconds.
>
>I have messed around with this a lot, to say the least, and I plan to build some 
>utilities to make it easier and give them away for free in the future.  Wish I had 
>a web address to post here, but I'll be around here in the future, so check back 
>in this discussion forum if you are really interested, or look for my utilities 
in 
>the next few months on download.com in the Utilities section.
>
>Good luck,
>Ben

[Reply or follow-up to this message]

Hi I have a question, Running XP Home , 1800 MHz p4, 40gb hard drive - just added 256MB to the 128 original ram..total of 384MB RAM. Should I adjust these swap file settings and where to? advice much appreciated! TIA


On Friday, January 3, 2003 at 1:51 pm, Ben wrote:

>This list is "Designed for Windows XP", although I didn't receive the logo.... :-)
>

>6. Use a partition manager to create a separate partition for your swap-file.  Set 
>its size to about 2.5 times the amount of physical RAM you have.  You can do this 
>by right-clicking my computer and selecting Properties->Advanced tab->Performance 
>section->Settings button->Advanced tab again->Virtual Memory section->Change button. 
> Whew! They don't make that one easy to get to.  Just don't completely remove your 
>swap file, cause your system might not boot after that, unless you have a lot of 
>physical RAM.
>

[Reply or follow-up to this message]

I had the 6.5 minute startup for XP Home. I have an HP Pavilion 325C with USB Zip , USB scanner, HP 6122 printer. The following helped me to get power down/ boot up cycle down to 1 min 45 sec, with all 73 services still enabled: Start/Programs/Administrative Tools/Microsoft.Net Framework Wizards/"Fix an Application" (told it to fix mmc.exe, the only one in the list) Start/Programs/Accessories/"Program Compatibility Wizard" (fixed "6122 Printer Assistant" - the first one in the list) - this is what was hanging as programs were appearing in the system tray.


On Friday, January 3, 2003 at 1:51 pm, Ben wrote:

>This list is "Designed for Windows XP", although I didn't receive the logo.... :-)
>
>1. Defrag your hard drive.  Use the built in XP defragmenter (dfrg.msc).  It's the 
>only one that properly optimizes your system's prefetching to speed up boot time.
>
>2. Go to Microsoft's website and download BootVis.exe.  It will optimize your prefetching 
>even further than the built in defragmenter.  Use both to get the best results: 
dfrg.msc 
>first, then BootVis.exe->Tools menu->Optimize.  Also, you can use it to benchmark 
>your boot time before and after system tweaks and software installations.
>
>3. Go to Start->Run... and type or paste "Rundll32.exe advapi32.dll,ProcessIdleTasks". 
> This will start a built in optimization routine that runs in the System Idle Process 
>and shows up as "rundll32.exe" in task manager.  It normally runs automatically 
every 
>3 days.  It will run for 15 mins to half an hour, so don't try to do anything too 
>intensive while its running.  If you get sick of it running, you should probably 
>log off or restart to be safe, rather than killing the process.
>
>4. Delete anything that you don't need in the Start->Programs->Startup folder, and 
>in the Registry under HKLM->Software->Microsoft->Windows->Run and HKCU->Software->Microsoft->Windows->Run.
>
>5. Go to Start->Control Panel->Administrative Tools->Services or go to Start->Run... 
>and type "services.msc" to display services running on your machine.  About 1/3 
should 
>be automatic, 1/3 should be manual, and 1/3 should be disabled, IMHO.  If you don't 
>know which to change, search google for "XP services" and read one of the many webpages 
>that describe each service.
>
>6. Use a partition manager to create a separate partition for your swap-file.  Set 
>its size to about 2.5 times the amount of physical RAM you have.  You can do this 
>by right-clicking my computer and selecting Properties->Advanced tab->Performance 
>section->Settings button->Advanced tab again->Virtual Memory section->Change button. 
> Whew! They don't make that one easy to get to.  Just don't completely remove your 
>swap file, cause your system might not boot after that, unless you have a lot of 
>physical RAM.
>
>7. Repeat steps 1-3.
>
>Ideally, XP on a clean install should boot in about 12 seconds from the time that 
>you see the XP logo to useable (can open a program).  With all my device drivers 
>and third-party utilities, the best I can acheive so far is 18 seconds on my Dell. 
> Don't use Norton SpeedDisk!--It may slow your XP system boot time by about 6 seconds.
>
>I have messed around with this a lot, to say the least, and I plan to build some 
>utilities to make it easier and give them away for free in the future.  Wish I had 
>a web address to post here, but I'll be around here in the future, so check back 
>in this discussion forum if you are really interested, or look for my utilities 
in 
>the next few months on download.com in the Utilities section.
>
>Good luck,
>Ben

[Reply or follow-up to this message]

Bootvis is no longer available from microsoft http://www.microsoft.com/whdc/hwdev/platform/performance/fastboot/bootvis.mspx


On Sunday, February 9, 2003 at 10:03 am, kane wrote:
>
>Followed your great advice. Got my startup down to 11 secs!.Thanx.
>

[Reply or follow-up to this message]

Microsoft has indeed removed the tool from their website. You can do an internet search for "bootvis" and find it elsewhere (e.g., www.google.com). After doing a search, just make sure you don't choose one of the microsoft sites from the result list and you should find it. The tool worked great for me. I cut my boot time down by 45% ...


On Thursday, January 15, 2004 at 10:59 am, topio wrote:
>Bootvis is no longer available from microsoft
>
>http://www.microsoft.com/whdc/hwdev/platform/performance/fastboot/bootvis.mspx
>
>

[Reply or follow-up to this message]

Hi Ben, your suggestions seem great however I haven't been able to try them out yet. My computer (Dell Dimension 8100) was working great (well in my opinion) and it would boot up in about 45 seconds from the XP logo. Three days back I was trying to fix the 'Unmountable Boot Volume' error on a friend's computer and had to switch the monitor, mouse and keyboard between the computers a few times (and I was doing so after shutting down each machine). I had too boot my computer several times during this troubleshooting / fixing process. However, at then end of this 4 hour ordeal I put the cables back into my computer .....and tried it boot it......it took close 20 minutes to do so...the computer was pretty much stuck at 'starting windows XP' for almost 15 minutes....and then was stuck again at 'loading personal settings for 3-4 minutes' Even after it got to the desktop it took another 2-3 minutes for the icons to load up...and the start bar dissappeared....all the network connections dissappeared...and finally a message popped up saying 'something tried to change the Noton Anti Virus settings...this is eminent of a Virus Attack...please hit OK to revert the setting changes'. After hitting OK a message popped up saying 'Norton Anti Virus auto protection could not be enabled'. I tried to set up my dial up connection and after the process no icon would show up. When I tried to repeat the process it would give me the message ' A connection in that name already exists'. Other programs were working ...however at 1/5 the speed at which they normally do. I rebooted the machine several times and saw the same behavior pattern everytime. Then I tried to uninstall Noton Anti Virus but it kept giving me the message 'Windows or other applications is using this program and cannot be uninstalled now'. I then took out all Symantec application from 'msconfig' and still got similar messages while trying to uninstall. I tried to do a 'chkdsk', 'fixboot' and 'fixmbr' from the recovery console and nothing helped. I also tried to boot up the machine in the safe mode and still things were equally slow. I did a few other things and nothing has worked. I have a dual boot system and when I try to boot with the Windows Me OS things work just fine. Please help in any way you can. Thank you, Raj (anand101@hotmail.com)


On Friday, January 3, 2003 at 1:51 pm, Ben wrote:

>This list is "Designed for Windows XP", although I didn't receive the logo.... :-)
>
>1. Defrag your hard drive.  Use the built in XP defragmenter (dfrg.msc).  It's the 
>only one that properly optimizes your system's prefetching to speed up boot time.
>
>2. Go to Microsoft's website and download BootVis.exe.  It will optimize your prefetching 
>even further than the built in defragmenter.  Use both to get the best results: 
dfrg.msc 
>first, then BootVis.exe->Tools menu->Optimize.  Also, you can use it to benchmark 
>your boot time before and after system tweaks and software installations.
>
>3. Go to Start->Run... and type or paste "Rundll32.exe advapi32.dll,ProcessIdleTasks". 
> This will start a built in optimization routine that runs in the System Idle Process 
>and shows up as "rundll32.exe" in task manager.  It normally runs automatically 
every 
>3 days.  It will run for 15 mins to half an hour, so don't try to do anything too 
>intensive while its running.  If you get sick of it running, you should probably 
>log off or restart to be safe, rather than killing the process.
>
>4. Delete anything that you don't need in the Start->Programs->Startup folder, and 
>in the Registry under HKLM->Software->Microsoft->Windows->Run and HKCU->Software->Microsoft->Windows->Run.
>
>5. Go to Start->Control Panel->Administrative Tools->Services or go to Start->Run... 
>and type "services.msc" to display services running on your machine.  About 1/3 
should 
>be automatic, 1/3 should be manual, and 1/3 should be disabled, IMHO.  If you don't 
>know which to change, search google for "XP services" and read one of the many webpages 
>that describe each service.
>
>6. Use a partition manager to create a separate partition for your swap-file.  Set 
>its size to about 2.5 times the amount of physical RAM you have.  You can do this 
>by right-clicking my computer and selecting Properties->Advanced tab->Performance 
>section->Settings button->Advanced tab again->Virtual Memory section->Change button. 
> Whew! They don't make that one easy to get to.  Just don't completely remove your 
>swap file, cause your system might not boot after that, unless you have a lot of 
>physical RAM.
>
>7. Repeat steps 1-3.
>
>Ideally, XP on a clean install should boot in about 12 seconds from the time that 
>you see the XP logo to useable (can open a program).  With all my device drivers 
>and third-party utilities, the best I can acheive so far is 18 seconds on my Dell. 
> Don't use Norton SpeedDisk!--It may slow your XP system boot time by about 6 seconds.
>
>I have messed around with this a lot, to say the least, and I plan to build some 
>utilities to make it easier and give them away for free in the future.  Wish I had 
>a web address to post here, but I'll be around here in the future, so check back 
>in this discussion forum if you are really interested, or look for my utilities 
in 
>the next few months on download.com in the Utilities section.
>
>Good luck,
>Ben

[Reply or follow-up to this message]

I had been having problems with XP taking several minutes while "loading personal settings" I tried all the usual suggestions eg taking all unneeded items out of start up, and checking I wasn't having any DHCP problems. Then I discovered this Reg Hack which shows which files are actually being executed while windows is loading (rather than just saying loading personal settings):- *************************************************************************** Show Verbose Security Status Messages (Windows 2000/XP) This setting allows you to configure Windows so that you receive verbose startup, shutdown, logon, and logoff status messages. This may be helpful to in troubleshooting slow startup, shutdown, logon, or logoff behaviour. Open your registry and find or create this key:- HKEY_LOCAL_MACHINESOFTWARE -> Microsoft -> Windows -> CurrentVersion -> Policies -> System To enable verbose status messages create a new DWORD value called "verbosestatus" and set it to "1". (verbosestatus REG_DWORD 0x00000001 (1)) An additional value called "DisableStatusMessages" forces status messages to be disabled, make sure this value does not exist or is set to "0". (DisableStatusMessages REG_DWORD 0x00000000 (0)) Restart Windows for the change to take effect. Registry Settings System Key: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPolicies System] Value Name: verbosestatus Data Type: REG_DWORD (DWORD Value) Value Data: (0 = default, 1 = enable verbose status) System Key: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPolicies System] Value Name: disablestatusmessages Data Type: REG_DWORD (DWORD Value) Value Data: (1 = default, 0 = enable verbose status) **************************************************************************** Once I enabled this I found that my computer was taking several minutes to load a file called msg117.dll, so I googled that and found it was a rather perisitant piece of spyware! See this link for removal instructions http://www.kephyr.com/spywarescanner/library/look2me/index.phtml You will have to remove it manually as while some anti spyware software (ad aware etc) will detect it, they cannot actually remove it. Just a brief note on this I found that I couldn't delete the msg117.dll file from my computer (even in safe mode) as it kept coming up access denied (I guess because it was loaded by windows during start up), however I could rename it so that it wouldn't load on the next boot. Having done that I rebooted and could then delete it no problems. It's also worth checking the registry again as I had to delete the keys several times, as they kept reappearing. So after all that I've finally got my boot time down from several minutes to about 10 seconds! :) I hope this helps! Josie


On Friday, January 3, 2003 at 1:51 pm, Ben wrote:

>This list is "Designed for Windows XP", although I didn't receive the logo.... :-)
>
>1. Defrag your hard drive.  Use the built in XP defragmenter (dfrg.msc).  It's the 
>only one that properly optimizes your system's prefetching to speed up boot time.
>
>2. Go to Microsoft's website and download BootVis.exe.  It will optimize your prefetching 
>even further than the built in defragmenter.  Use both to get the best results: 
dfrg.msc 
>first, then BootVis.exe->Tools menu->Optimize.  Also, you can use it to benchmark 
>your boot time before and after system tweaks and software installations.
>
>3. Go to Start->Run... and type or paste "Rundll32.exe advapi32.dll,ProcessIdleTasks". 
> This will start a built in optimization routine that runs in the System Idle Process 
>and shows up as "rundll32.exe" in task manager.  It normally runs automatically 
every 
>3 days.  It will run for 15 mins to half an hour, so don't try to do anything too 
>intensive while its running.  If you get sick of it running, you should probably 
>log off or restart to be safe, rather than killing the process.
>
>4. Delete anything that you don't need in the Start->Programs->Startup folder, and 
>in the Registry under HKLM->Software->Microsoft->Windows->Run and HKCU->Software->Microsoft->Windows->Run.
>
>5. Go to Start->Control Panel->Administrative Tools->Services or go to Start->Run... 
>and type "services.msc" to display services running on your machine.  About 1/3 
should 
>be automatic, 1/3 should be manual, and 1/3 should be disabled, IMHO.  If you don't 
>know which to change, search google for "XP services" and read one of the many webpages 
>that describe each service.
>
>6. Use a partition manager to create a separate partition for your swap-file.  Set 
>its size to about 2.5 times the amount of physical RAM you have.  You can do this 
>by right-clicking my computer and selecting Properties->Advanced tab->Performance 
>section->Settings button->Advanced tab again->Virtual Memory section->Change button. 
> Whew! They don't make that one easy to get to.  Just don't completely remove your 
>swap file, cause your system might not boot after that, unless you have a lot of 
>physical RAM.
>
>7. Repeat steps 1-3.
>
>Ideally, XP on a clean install should boot in about 12 seconds from the time that 
>you see the XP logo to useable (can open a program).  With all my device drivers 
>and third-party utilities, the best I can acheive so far is 18 seconds on my Dell. 
> Don't use Norton SpeedDisk!--It may slow your XP system boot time by about 6 seconds.
>
>I have messed around with this a lot, to say the least, and I plan to build some 
>utilities to make it easier and give them away for free in the future.  Wish I had 
>a web address to post here, but I'll be around here in the future, so check back 
>in this discussion forum if you are really interested, or look for my utilities 
in 
>the next few months on download.com in the Utilities section.
>
>Good luck,
>Ben

[Reply or follow-up to this message]

I would try using Ad-Aware and/or SpyBot Search & Destroy to check for spyware running on your computer. Then, if you can't get your anti-virus program running, go to www.antivirus.com and click the Scan Now button to run an online virus scan. You might also try Josie's registry hack to find out what else might be starting up when you start up your computer. If you can't solve it too easily, I'd recommend backing up your files to a CD or separate partition and reformatting your XP partition (I hope your WinME is on a different partition than WinXP).


On Friday, January 23, 2004 at 12:10 pm, Raj wrote:
>Hi Ben,
> your suggestions seem great however I haven't been able to try them out
>yet. My computer (Dell Dimension 8100) was working great (well in my opinion) and
>it would boot up in about 45 seconds from the XP logo.
>Three days back I was trying to fix the 'Unmountable Boot Volume' error on a friend's
>computer and had to switch the monitor, mouse and keyboard between the computers
>a few times (and I was doing so after shutting down each machine). I had too boot
>my computer several times during this troubleshooting / fixing process. However,
>at then end of this 4 hour ordeal I put the cables back into my computer .....and
>tried it boot it......it took close 20 minutes to do so...the computer was pretty
>much stuck at 'starting windows XP' for almost 15 minutes....and then was stuck again
>at 'loading personal settings for 3-4 minutes' Even after it got to the desktop it
>took another 2-3 minutes for the icons to load up...and the start bar dissappeared....all
>the network connections dissappeared...and finally a message popped up saying 'something
>tried to change the Noton Anti Virus settings...this is eminent of a Virus Attack...please
>hit OK to revert the setting changes'. After hitting OK a message popped up saying
>'Norton Anti Virus auto protection could not be enabled'. I tried to set up my dial
>up connection and after the process no icon would show up. When I tried to repeat
>the process it would give me the message ' A connection in that name already exists'.
>Other programs were working ...however at 1/5 the speed at which they normally do.
> I rebooted the machine several times and saw the same behavior pattern everytime.
>Then I tried to uninstall Noton Anti Virus but it kept giving me the message 'Windows
>or other applications is using this program and cannot be uninstalled now'. I then
>took out all Symantec application from 'msconfig' and still got similar messages
>while trying to uninstall. I tried to do a 'chkdsk', 'fixboot' and 'fixmbr' from
>the recovery console and nothing helped. I also tried to boot up the machine in the
>safe mode and still things were equally slow. I did a few other things and nothing
>has worked.
>I have a dual boot system and when I try to boot with the Windows Me OS things work
>just fine.
>
>Please help in any way you can.
>
>Thank you,
>
>Raj (anand101@hotmail.com)
>
>

[Reply or follow-up to this message]

Wow! I can't believe Microsoft removed BootVis from their site. I wonder if my first message qualifies as a "published report". Well, it definitely reduced my boot time--that's for sure. It was also helpful in identifying which drivers and applications were taking the longest to start and which services should be removed to improve boot time. Oh well, thanks to the internet it's probably available from several other mirrors. I think I'll snag another copy now while I still can.


On Friday, January 16, 2004 at 12:34 pm, Rick wrote:
>Microsoft has indeed removed the tool from their website. You can do an internet
>search for "bootvis" and find it elsewhere (e.g., www.google.com). After doing a
>search, just make sure you don't choose one of the microsoft sites from the result
>list and you should find it.
>
>The tool worked great for me. I cut my boot time down by 45% ...
>
>

[Reply or follow-up to this message]

I would recommend at least 512MB to 1 GB for a swap-file on an XP system with 384 MB of physical RAM. My earlier formula of 2.5 times the physical RAM may have been a little too firm of a statement. Just make your total (physical+virtual) memory equal to 1-2 GB for most systems, and you'll be fine. Just decide what's more important to you--disk space or application performance--and adjust accordingly.


On Tuesday, March 25, 2003 at 6:22 pm, guitar wrote:
>Hi I have a question, Running XP Home , 1800 MHz p4, 40gb hard drive - just added
>256MB to the 128 original ram..total of 384MB RAM. Should I adjust these swap file
>settings and where to? advice much appreciated! TIA
>
>

[Reply or follow-up to this message]

Those printer helper applications and status monitors can take a long time to load. I have disabled Canon's C555 Status Monitor in the past (it's used to handle faxes, I believe) to reduce my startup time. BootVis.exe is also helpful in identifying the services that take the longest to load.


On Thursday, June 26, 2003 at 4:25 am, Robert Bishop wrote:
>I had the 6.5 minute startup for XP Home. I have an HP Pavilion 325C with USB Zip
>, USB scanner,
>HP 6122 printer. The following helped me to get power down/ boot up cycle down to
>1 min 45 sec,
>with all 73 services still enabled:
>
>Start/Programs/Administrative Tools/Microsoft.Net Framework Wizards/"Fix an Application"
>(told it to fix mmc.exe, the only one in the list)
>
>Start/Programs/Accessories/"Program Compatibility Wizard"
>(fixed "6122 Printer Assistant" - the first one in the list) - this is what was hanging
>as programs
>were appearing in the system tray.
>
>
>

[Reply or follow-up to this message]

ben, i tried everything but partition my hd, and my desktop still takes a few minutes to appear. the computer takes a while to get out of the loading personal files screen. how would i get the time down? i dont even kno what personal files i have! Khalil


On Friday, January 3, 2003 at 1:51 pm, Ben wrote:

>This list is "Designed for Windows XP", although I didn't receive the logo.... :-)
>
>1. Defrag your hard drive.  Use the built in XP defragmenter (dfrg.msc).  It's the 
>only one that properly optimizes your system's prefetching to speed up boot time.
>
>2. Go to Microsoft's website and download BootVis.exe.  It will optimize your prefetching 
>even further than the built in defragmenter.  Use both to get the best results: 
dfrg.msc 
>first, then BootVis.exe->Tools menu->Optimize.  Also, you can use it to benchmark 
>your boot time before and after system tweaks and software installations.
>
>3. Go to Start->Run... and type or paste "Rundll32.exe advapi32.dll,ProcessIdleTasks". 
> This will start a built in optimization routine that runs in the System Idle Process 
>and shows up as "rundll32.exe" in task manager.  It normally runs automatically 
every 
>3 days.  It will run for 15 mins to half an hour, so don't try to do anything too 
>intensive while its running.  If you get sick of it running, you should probably 
>log off or restart to be safe, rather than killing the process.
>
>4. Delete anything that you don't need in the Start->Programs->Startup folder, and 
>in the Registry under HKLM->Software->Microsoft->Windows->Run and HKCU->Software->Microsoft->Windows->Run.
>
>5. Go to Start->Control Panel->Administrative Tools->Services or go to Start->Run... 
>and type "services.msc" to display services running on your machine.  About 1/3 
should 
>be automatic, 1/3 should be manual, and 1/3 should be disabled, IMHO.  If you don't 
>know which to change, search google for "XP services" and read one of the many webpages 
>that describe each service.
>
>6. Use a partition manager to create a separate partition for your swap-file.  Set 
>its size to about 2.5 times the amount of physical RAM you have.  You can do this 
>by right-clicking my computer and selecting Properties->Advanced tab->Performance 
>section->Settings button->Advanced tab again->Virtual Memory section->Change button. 
> Whew! They don't make that one easy to get to.  Just don't completely remove your 
>swap file, cause your system might not boot after that, unless you have a lot of 
>physical RAM.
>
>7. Repeat steps 1-3.
>
>Ideally, XP on a clean install should boot in about 12 seconds from the time that 
>you see the XP logo to useable (can open a program).  With all my device drivers 
>and third-party utilities, the best I can acheive so far is 18 seconds on my Dell. 
> Don't use Norton SpeedDisk!--It may slow your XP system boot time by about 6 seconds.
>
>I have messed around with this a lot, to say the least, and I plan to build some 
>utilities to make it easier and give them away for free in the future.  Wish I had 
>a web address to post here, but I'll be around here in the future, so check back 
>in this discussion forum if you are really interested, or look for my utilities 
in 
>the next few months on download.com in the Utilities section.
>
>Good luck,
>Ben

[Reply or follow-up to this message]

THese apply to XP. Are there also tips for speeding up boot / resume under 2000 professional?


On Sunday, February 9, 2003 at 10:03 am, kane wrote:
>
>Followed your great advice. Got my startup down to 11 secs!.Thanx.
>

[Reply or follow-up to this message]

I found the BootVis.exe utility at Microsoft, but they are likely to remove it soon from here soon: http://download.microsoft.com/download/whistler/BTV/1.0/WXP/EN-US/BootVis-Tool.exe , since they said it wasn't available at all anymore! I found the above link via this link: http://www.usbman.com/winxpusbguide.htm Cheers.

[Reply or follow-up to this message]

http://www.filemirrors.com Search for BootVis.exe - download from one of the mirrors.

[Reply or follow-up to this message]

Here are the problems that I have while trying to follow your instructions 2. I have downloaded bootvis and when I try to open the file I get an error message saying that "The procedure point wmiopentracewithcursor could not be loacated in the dynamoc link library ADVAPI32.dll 3. I typed in Rundll32.exe advapi32.dll, Rundll32.exe ProcessIdleTasks yet i cannot find Rundll32.exe in the task manager 6. I have 512mb of Ram so by multiplying it by 2.5, I should assign virtual memory to 1280


On Friday, January 3, 2003 at 1:51 pm, Ben wrote:
>
>This list is "Designed for Windows XP", although I didn't receive the logo.... :-)
>
>1. Defrag your hard drive. Use the built in XP defragmenter (dfrg.msc). It's the
>only one that properly optimizes your system's prefetching to speed up boot time.
>
>2. Go to Microsoft's website and download BootVis.exe. It will optimize your prefetching
>even further than the built in defragmenter. Use both to get the best results: dfrg.msc
>first, then BootVis.exe->Tools menu->Optimize. Also, you can use it to benchmark
>your boot time before and after system tweaks and software installations.
>
>3. Go to Start->Run... and type or paste "Rundll32.exe advapi32.dll,ProcessIdleTasks".
> This will start a built in optimization routine that runs in the System Idle Process
>and shows up as "rundll32.exe" in task manager. It normally runs automatically every
>3 days. It will run for 15 mins to half an hour, so don't try to do anything too
>intensive while its running. If you get sick of it running, you should probably
>log off or restart to be safe, rather than killing the process.
>
>4. Delete anything that you don't need in the Start->Programs->Startup folder, and
>in the Registry under HKLM->Software->Microsoft->Windows->Run and HKCU->Software->Microsoft->Windows->Run.
>
>5. Go to Start->Control Panel->Administrative Tools->Services or go to Start->Run...
>and type "services.msc" to display services running on your machine. About 1/3 should
>be automatic, 1/3 should be manual, and 1/3 should be disabled, IMHO. If you don't
>know which to change, search google for "XP services" and read one of the many webpages
>that describe each service.
>
>6. Use a partition manager to create a separate partition for your swap-file. Set
>its size to about 2.5 times the amount of physical RAM you have. You can do this
>by right-clicking my computer and selecting Properties->Advanced tab->Performance
>section->Settings button->Advanced tab again->Virtual Memory section->Change button.
> Whew! They don't make that one easy to get to. Just don't completely remove your
>swap file, cause your system might not boot after that, unless you have a lot of
>physical RAM.
>
>7. Repeat steps 1-3.
>
>Ideally, XP on a clean install should boot in about 12 seconds from the time that
>you see the XP logo to useable (can open a program). With all my device drivers
>and third-party utilities, the best I can acheive so far is 18 seconds on my Dell.
> Don't use Norton SpeedDisk!--It may slow your XP system boot time by about 6 seconds.
>
>I have messed around with this a lot, to say the least, and I plan to build some
>utilities to make it easier and give them away for free in the future. Wish I had
>a web address to post here, but I'll be around here in the future, so check back
>in this discussion forum if you are really interested, or look for my utilities in
>the next few months on download.com in the Utilities section.
>
>Good luck,
>Ben

[Reply or follow-up to this message]

Hi, I have 4 partitions; c: 29,2 GB (windows xp and some important files) d: 27, 9 GB (all essential files) g: 1,99 GB (install and setup files downloaded & My Documents) h: 17,1 GB (personal not-important files and windows and office setup files) Should I create a separate swap-file to each partition or just one for all and in this case, where should I create it? Thanks a lot :-) Maurice R.


On Sunday, February 22, 2004 at 3:15 pm, Ben wrote:
>I would recommend at least 512MB to 1 GB for a swap-file on an XP system with 384
>MB of physical RAM. My earlier formula of 2.5 times the physical RAM may have been
>a little too firm of a statement. Just make your total (physical+virtual) memory
>equal to 1-2 GB for most systems, and you'll be fine. Just decide what's more important
>to you--disk space or application performance--and adjust accordingly.
>
>

[Reply or follow-up to this message]

>I have 4 partitions (...)

>Should I create a separate swap-file to each partition or just one for all and in 

>this case, where should I create it?

4 partitions on how many drives?

A swap file on a different partition on the SAME disk as your windows folder will 
slow your system down, so if all your partitions are on a single HD just leave the 
swap file on your windows partition.

If you have two or more drives, put the swap file on one or more of the disks without 
windows.

Splitting your swap file only makes sense if all the parts are on different physical 
drives, otherwise your HD read head will jump all over the drive and you're system 
will run like traffic on monday morning.

[Reply or follow-up to this message]

I have 2 disks: "Disk 0" containing C (29,29 GB) and D (27,97 GB) & "Disk 1" containing G (2 GB) and H (17,14 GB) but my XPPRO Computer Management console says that D + G are the primary partition while C + H are the extended partition and the logical drive.... I'm confused now!!! But if I understood you right maybe i shouldn't bother with the above details but put the swap file on, let's say, H? 1G will do it (I have 512 MB RAM but my System Properties show only 480 MB...)? Thanks :-) Maurice


On Sunday, September 12, 2004 at 5:37 pm, 666 wrote:
>

>>I have 4 partitions (...)
>>Should I create a separate swap-file to each partition or just one for all and in
>>this case, where should I create it?
>
>4 partitions on how many drives?
>
>A swap file on a different partition on the SAME disk as your windows folder will
>slow your system down, so if all your partitions are on a single HD just leave the
>swap file on your windows partition.
>
>If you have two or more drives, put the swap file on one or more of the disks without
>windows.
>
>Splitting your swap file only makes sense if all the parts are on different physical
>drives, otherwise your HD read head will jump all over the drive and you're system
>will run like traffic on monday morning.
>

[Reply or follow-up to this message]

Where does this show the names of what's loading? I made the reg changes but can't find/see anything different.


On Monday, February 16, 2004 at 5:27 pm, Josie wrote:
>I had been having problems with XP taking several minutes while "loading personal
>settings" I tried all the usual suggestions eg taking all unneeded items out of start
>up, and checking I wasn't having any DHCP problems.
>
>Then I discovered this Reg Hack which shows which files are actually being executed
>while windows is loading (rather than just saying loading personal settings):-
>
>***************************************************************************
>Show Verbose Security Status Messages (Windows 2000/XP)
>This setting allows you to configure Windows so that you receive verbose startup,
>shutdown, logon, and logoff status messages. This may be helpful to in troubleshooting
>slow startup, shutdown, logon, or logoff behaviour.
>
>Open your registry and find or create this key:-
>HKEY_LOCAL_MACHINESOFTWARE -> Microsoft -> Windows -> CurrentVersion -> Policies
>-> System
>
>To enable verbose status messages create a new DWORD value called "verbosestatus"
>and set it to "1". (verbosestatus REG_DWORD 0x00000001 (1))
>
>An additional value called "DisableStatusMessages" forces status messages to be disabled,
>make sure this value does not exist or is set to "0". (DisableStatusMessages REG_DWORD
>0x00000000 (0))
>
>Restart Windows for the change to take effect.
>
>
>Registry Settings
>
>System Key: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPolicies
>System]
>Value Name: verbosestatus
>Data Type: REG_DWORD (DWORD Value)
>Value Data: (0 = default, 1 = enable verbose status)
>
>System Key: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPolicies
>System]
>Value Name: disablestatusmessages
>Data Type: REG_DWORD (DWORD Value)
>Value Data: (1 = default, 0 = enable verbose status)
>
>
>****************************************************************************
>
>Once I enabled this I found that my computer was taking several minutes to load a
>file called msg117.dll, so I googled that and found it was a rather perisitant piece
>of spyware! See this link for removal instructions
>
>http://www.kephyr.com/spywarescanner/library/look2me/index.phtml
>
>You will have to remove it manually as while some anti spyware software (ad aware
>etc) will detect it, they cannot actually remove it.
>
>Just a brief note on this I found that I couldn't delete the msg117.dll file from
>my computer (even in safe mode) as it kept coming up access denied (I guess because
>it was loaded by windows during start up), however I could rename it so that it wouldn't
>load on the next boot. Having done that I rebooted and could then delete it no problems.
> It's also worth checking the registry again as I had to delete the keys several
>times, as they kept reappearing.
>
>So after all that I've finally got my boot time down from several minutes to about
>10 seconds! :)
>
>I hope this helps!
>Josie
>
>

[Reply or follow-up to this message]

I followed all the advice and yet my Dell Inspirion takes over 3 minutes to startup. Two of those minutes are spent after I login and XP is "loading personal settings." I added the verbose option and after I login it says that it is "restoring network connections". There are no errors that I can find and I don't have any offline content that I know of. Any ideas? I do have SP 2 installed and have XP Pro.


On Friday, January 3, 2003 at 1:51 pm, Ben wrote:
>
>This list is "Designed for Windows XP", although I didn't receive the logo.... :-)
>
>1. Defrag your hard drive. Use the built in XP defragmenter (dfrg.msc). It's the
>only one that properly optimizes your system's prefetching to speed up boot time.
>
>2. Go to Microsoft's website and download BootVis.exe. It will optimize your prefetching
>even further than the built in defragmenter. Use both to get the best results: dfrg.msc
>first, then BootVis.exe->Tools menu->Optimize. Also, you can use it to benchmark
>your boot time before and after system tweaks and software installations.
>
>3. Go to Start->Run... and type or paste "Rundll32.exe advapi32.dll,ProcessIdleTasks".
> This will start a built in optimization routine that runs in the System Idle Process
>and shows up as "rundll32.exe" in task manager. It normally runs automatically every
>3 days. It will run for 15 mins to half an hour, so don't try to do anything too
>intensive while its running. If you get sick of it running, you should probably
>log off or restart to be safe, rather than killing the process.
>
>4. Delete anything that you don't need in the Start->Programs->Startup folder, and
>in the Registry under HKLM->Software->Microsoft->Windows->Run and HKCU->Software->Microsoft->Windows->Run.
>
>5. Go to Start->Control Panel->Administrative Tools->Services or go to Start->Run...
>and type "services.msc" to display services running on your machine. About 1/3 should
>be automatic, 1/3 should be manual, and 1/3 should be disabled, IMHO. If you don't
>know which to change, search google for "XP services" and read one of the many webpages
>that describe each service.
>
>6. Use a partition manager to create a separate partition for your swap-file. Set
>its size to about 2.5 times the amount of physical RAM you have. You can do this
>by right-clicking my computer and selecting Properties->Advanced tab->Performance
>section->Settings button->Advanced tab again->Virtual Memory section->Change button.
> Whew! They don't make that one easy to get to. Just don't completely remove your
>swap file, cause your system might not boot after that, unless you have a lot of
>physical RAM.
>
>7. Repeat steps 1-3.
>
>Ideally, XP on a clean install should boot in about 12 seconds from the time that
>you see the XP logo to useable (can open a program). With all my device drivers
>and third-party utilities, the best I can acheive so far is 18 seconds on my Dell.
> Don't use Norton SpeedDisk!--It may slow your XP system boot time by about 6 seconds.
>
>I have messed around with this a lot, to say the least, and I plan to build some
>utilities to make it easier and give them away for free in the future. Wish I had
>a web address to post here, but I'll be around here in the future, so check back
>in this discussion forum if you are really interested, or look for my utilities in
>the next few months on download.com in the Utilities section.
>
>Good luck,
>Ben

[Reply or follow-up to this message]

My XP Pro took around 1-2 minutes to load up due to the network DHCP discovering. It is well when it is first rebooted but having problems after several days. No custom software is installed. Any way I can check it ?


On Thursday, January 15, 2004 at 10:59 am, topio wrote:
>Bootvis is no longer available from microsoft
>
>http://www.microsoft.com/whdc/hwdev/platform/performance/fastboot/bootvis.mspx
>
>

[Reply or follow-up to this message]

I've done all the things recommended in this thread, and still have the following problem.

According to bootvis, the system is doing Logon+Serv from +25 to +108 secs, with no disk or cpu activity after around +30. Also, another pc on the LAN discloses no network activity in this period.

Can anyone advise me how to proceed to get this down please?

System is XP. It used to load ok; then I had a virus, needed to do a big repair, and am now back on SP1. This problem is the one residue of my virus problems. (I am pretty sure I've got rid of all viruses and other pests - I've used AVG, Trend, Stinger and Ad-Aware, and uset sytem restore, and all now report the system is clean)

Tony

[Reply or follow-up to this message]

Found the root of the problem - A service called DCOM Server Process Launcher had status "Starting", and presumbly was holding everything up while it tried..


On Tuesday, November 30, 2004 at 10:00 am, Tony MS wrote:
>I've done all the things recommended in this thread, and still have the following
>problem.

>
>
>According to bootvis, the system is doing Logon+Serv from +25 to +108 secs, with
>no disk or cpu activity after around +30. Also, another pc on the LAN discloses no
>network activity in this period.

>
>
>Can anyone advise me how to proceed to get this down please?

>
>
>System is XP. It used to load ok; then I had a virus, needed to do a big repair,
>and am now back on SP1. This problem is the one residue of my virus problems. (I
>am pretty sure I've got rid of all viruses and other pests - I've used AVG, Trend,
>Stinger and Ad-Aware, and uset sytem restore, and all now report the system is clean)
>

>
>Tony

[Reply or follow-up to this message]

I had a problem where my machine took about 3 to 5 minutes to boot up with XP. It turned out that the problem occurred with a conflict in my network connections between the broadband connection (created when installing software provided by my internet provider) and a network connection associated with my ethernet card. I solved the problem by going into device manager, right clicked on the ethernet card under network adapters and properties. I then deselected the all the boxes that were checked that contained TCP protocols etc. Now rebooting takes less than 30 seconds! I believe the problem developed following one of the XP updates.

[Reply or follow-up to this message]

Thanks for the solution! At first I didn't bother doing the registry key alterations, rather I searched for the spyware directly in system 32 found it, renamed it, rebooted, then deleted it just as you suggested. I then amended the registry key just to see if there were any other nasties slowing down the user login - there were none others. Yay -- my PC now logs in like a charm (less than 1 or 2 seconds) !! cheers, chivdog
>
>
>

[Reply or follow-up to this message]

I also would like to voice my gratitude for the instructions contained in these postings. I have had the slow shutdown problem for some time now and I have tried everything that I could find on the web and at Microsoft but to no avail. Implementing the changes posted in the previous notes has solved my problem!!! :) Finally!! My system now reboots like lightning. Thanks, Gracias, Merci, etc.


On Saturday, January 22, 2005 at 5:25 pm, chivdog wrote:
>
>
>Thanks for the solution! At first I didn't bother doing the registry key alterations,
>rather I searched for the spyware directly in system 32 found it, renamed it, rebooted,
>then deleted it just as you suggested. I then amended the registry key just to see
>if there were any other nasties slowing down the user login - there were none others.
>Yay -- my PC now logs in like a charm (less than 1 or 2 seconds) !!
>
>cheers,
>chivdog
>>
>>
>>

[Reply or follow-up to this message]

Maurice, If it isn't too late... The primary/extended is just the file system's way of addressing your information: The first partition on each disk will always be primary, with the others being extended. 1. Your swap file should be on a separate physical disk from the one windows is on. 2. Your swap file should be on the most used partition. In your case, this would be G or H, whichever you use most.


On Sunday, September 12, 2004 at 11:01 pm, mimteatr wrote:
>I have 2 disks: (...) but my XPPRO Computer Management console says that D +
>G are the primary partition while C + H are the extended partition and the logical
>drive
>But if I understood you right maybe i shouldn't bother with the above details but
>put the swap file on, let's say, H?

[Reply or follow-up to this message]

Hey, Ben! Thanks for the advice...I've learned a lot about my system. However, I tried everything you mentioned and did spyware removal and hijackThis, and still my system still boots only half as fast as it used to. BootVis was the only thing that seemed to do anything. Might you have any more advice, especially in relation to the XP logo screen?

[Reply or follow-up to this message]

Post your HijackThis log.

The Wereotter

[Reply or follow-up to this message]

>Post your HijackThis log.

Well ok sez I, but I don' think you'll get anythin' outta it...
Besides, it was still havin' this problem when I had no startup entries and indexing 
was disabled...                                      
                                                                        
Logfile of HijackThis v1.99.1
Scan saved at 10:00:29 AM, on 2/22/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
E:\WINDOWS\Explorer.EXE
E:\Program Files\Spy Cleaner Gold Trial\SpyWatcher.exe
E:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
E:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe
E:\WINDOWS\system32\cisvc.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\nvsvc32.exe
E:\Program Files\Mozilla Firefox\firefox.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\cidaemon.exe
E:\WINDOWS\Explorer.EXE
D:\Downloads and Drivers\Utilities\Internet\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///D:/Justin/My%20Documents/college/cal%20poly/OpenMail%20Logon.htm 
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program 
Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE E:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Spy Watcher] "E:\Program Files\Spy Cleaner Gold Trial\SpyWatcher.exe" 
-S
O4 - HKLM\..\Run: [WinPatrol] E:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
O4 - HKLM\..\Run: [CTSysVol] E:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe 
/r
O4 - HKLM\..\Run: [EPoXUSDM] "E:\Program Files\EPOX\USDM\USDM.EXE" "5000"
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) 
- http://www.creative.com/su/ocx/15009/CTSUEng.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support 
Package) - http://www.creative.com/su/ocx/15010/CTPID.cab
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - E:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\WINDOWS\system32\nvsvc32.exe

[Reply or follow-up to this message]

Please note that is in one rogue antispyware list. You should uninstall it. Next, if the problem still occurs, please run HijackThis->Config->Misc Tools->Check the two boxes to include minor and empty sections and press Generate StartupList Log. Post that.

The Wereotter

[Reply or follow-up to this message]

That Spy Cleaner is in, that is... Forgot to type it. :-)

The Wereotter

[Reply or follow-up to this message]

Well, actually, I installed the SpyCleaner because of the boot speed problem, and 
it didn't seem to slow anything down. Nevertheless, I uninstalled it and ran a Spybot 
SD on the machine->no problems. HJT minor sections are clean too.

The only thing that seems to work is bootVis, and only on the "optimize the system" 
reboot. However, once bootVis isn't running, the system goes back to its normal state. 
(According to the helpfile on my version, though it does its thing on reboot, ?it 
doesn't actually permanently change anything?)

I've even tried the msconfig route of disabling .ini files and  startup items, then 
services. I'm beginning to get the feeling that I've got some excess or buggy drivers 
(that I can't get at, unless you can help) bogging down the system.

NEWays, -tanks- 4 the help.

(PS-Recently I developed an issue involving the welcome screen hanging around unitil 
the network connection is made on my LAN. Also, when I try to disable some services, 
the machine hangs on loading system32\wlnotify.dll; someone else posted this problem 
on a forum, but it was never resolved.)

[Reply or follow-up to this message]

Please run HijackThis->Config->Misc Tools->Check the two boxes to include minor and empty sections and press Generate StartupList Log. Post that.

The Wereotter

[Reply or follow-up to this message]

So, yeah, check the drivers section especially because 
I have a lot of stuff there, some which I know I don't 
need but am not quite sure how to get rid of safely.


StartupList report, 3/1/2005, 2:39:37 PM
StartupList version: 1.52.2
Started from : D:\Downloads and Drivers\Utilities\Internet\hijackthis.EXE
Detected: Windows XP SP2 (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180)
* Using default options
* Including empty and uninteresting sections
* Showing rarely important sections
==================================================

Running processes:

E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
E:\WINDOWS\Explorer.EXE
E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
E:\WINDOWS\System32\svchost.exe
E:\Program Files\Mozilla Firefox\firefox.exe
D:\Downloads and Drivers\Utilities\Internet\hijackthis.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[E:\Documents and Settings\Justin\Start Menu\Programs\Startup]
*No files*

Shell folders AltStartup:
*Folder not found*

User shell folders Startup:
*Folder not found*

User shell folders AltStartup:
*Folder not found*

Shell folders Common Startup:
[E:\Documents and Settings\All Users\Start Menu\Programs\Startup]
*No files*

Shell folders Common AltStartup:
*Folder not found*

User shell folders Common Startup:
*Folder not found*

User shell folders Alternate Common Startup:
*Folder not found*

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = E:\WINDOWS\system32\userinit.exe,

[HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon]
*Registry key not found*

[HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
*Registry value not found*

[HKCU\Software\Microsoft\Windows\CurrentVersion\Winlogon]
*Registry key not found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

*No values found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce

*No values found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

*No values found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

*No values found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

*No values found*

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

SpybotSD TeaTimer = E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce

*No values found*

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

*Registry key not found*

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices

*No values found*

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

*No values found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run

*Registry key not found*

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run

*Registry key not found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

[OptionalComponents]
*No values found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
*No subkeys found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
*No subkeys found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
*No subkeys found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
*No subkeys found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
*No subkeys found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
*No subkeys found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
*Registry key not found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices
*No subkeys found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
*No subkeys found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run
*Registry key not found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run
*Registry key not found*

--------------------------------------------------

File association entry for .EXE:
HKEY_CLASSES_ROOT\exefile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .COM:
HKEY_CLASSES_ROOT\comfile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .BAT:
HKEY_CLASSES_ROOT\batfile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .PIF:
HKEY_CLASSES_ROOT\piffile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .SCR:
HKEY_CLASSES_ROOT\scrfile\shell\open\command

(Default) = "%1" /S

--------------------------------------------------

File association entry for .HTA:
HKEY_CLASSES_ROOT\htafile\shell\open\command

(Default) = E:\WINDOWS\system32\mshta.exe "%1" %*

--------------------------------------------------

File association entry for .TXT:
HKEY_CLASSES_ROOT\txtfile\shell\open\command

(Default) = %SystemRoot%\system32\NOTEPAD.EXE %1

--------------------------------------------------

Enumerating Active Setup stub paths:
HKLM\Software\Microsoft\Active Setup\Installed Components
(* = disabled by HKCU twin)

[>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
StubPath = E:\WINDOWS\inf\unregmp2.exe /ShowWMP

[>{26923b43-4d38-484f-9b9e-de460746276c}] *
StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE

[>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS] *
StubPath = RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

[>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] *
StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

[{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] *
StubPath = %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

[{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] *
StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user 
/install

[{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] *
StubPath = rundll32.exe advpack.dll,LaunchINFSection E:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT

[{4b218e3e-bc98-4770-93d3-2731b9329278}] *
StubPath = %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection MarketplaceLinkInstall 
896 %systemroot%\inf\ie.inf

[{5945c046-1e7d-11d1-bc44-00c04fd912be}] *
StubPath = rundll32.exe advpack.dll,LaunchINFSection E:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser

[{6BF52A52-394A-11d3-B153-00C04F79FAA6}] *
StubPath = rundll32.exe advpack.dll,LaunchINFSection E:\WINDOWS\INF\wmp10.inf,PerUserStub

[{7790769C-0471-11d2-AF11-00C04FA35D02}] *
StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user 
/install

[{89820200-ECBD-11cf-8B85-00AA005B4340}] *
StubPath = regsvr32.exe /s /n /i:U shell32.dll

[{89820200-ECBD-11cf-8B85-00AA005B4383}] *
StubPath = %SystemRoot%\system32\ie4uinit.exe

--------------------------------------------------

Enumerating ICQ Agent Autostart apps:
HKCU\Software\Mirabilis\ICQ\Agent\Apps

*Registry key not found*

--------------------------------------------------

Load/Run keys from E:\WINDOWS\WIN.INI:

load=*INI section not found*
run=*INI section not found*

Load/Run keys from Registry:

HKLM\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKLM\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKLM\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKCU\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKCU\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\Windows: load=
HKCU\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: AppInit_DLLs=

--------------------------------------------------

Shell & screensaver key from E:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=E:\WINDOWS\system32\logon.scr
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------

Checking for EXPLORER.EXE instances:

E:\WINDOWS\Explorer.exe: PRESENT!

C:\Explorer.exe: not present
E:\WINDOWS\Explorer\Explorer.exe: not present
E:\WINDOWS\System\Explorer.exe: not present
E:\WINDOWS\System32\Explorer.exe: not present
E:\WINDOWS\Command\Explorer.exe: not present
E:\WINDOWS\Fonts\Explorer.exe: not present

--------------------------------------------------

Checking for superhidden extensions:

.lnk: HIDDEN! (arrow overlay: yes)
.pif: HIDDEN! (arrow overlay: yes)
.exe: not hidden
.com: not hidden
.bat: not hidden
.hta: not hidden
.scr: not hidden
.shs: HIDDEN!
.shb: HIDDEN!
.vbs: not hidden
.vbe: not hidden
.wsh: not hidden
.scf: HIDDEN! (arrow overlay: NO!)
.url: HIDDEN! (arrow overlay: yes)
.js: not hidden
.jse: not hidden

--------------------------------------------------

Verifying REGEDIT.EXE integrity:

- Regedit.exe found in E:\WINDOWS
- .reg open command is normal (regedit.exe %1)
- Company name OK: 'Microsoft Corporation'
- Original filename OK: 'REGEDIT.EXE'
- File description: 'Registry Editor'

Registry check passed

--------------------------------------------------

Enumerating Browser Helper Objects:

(no name) - E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll - 
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - E:\PROGRA~1\SPYBOT~1\SDHelper.dll - {53707962-6F74-2D53-2644-206D7942484F}

--------------------------------------------------

Enumerating Task Scheduler jobs:

*No jobs found*

--------------------------------------------------

Enumerating Winsock LSP files:

NameSpace #1: E:\WINDOWS\System32\mswsock.dll
NameSpace #2: E:\WINDOWS\System32\winrnr.dll
NameSpace #3: E:\WINDOWS\System32\mswsock.dll
NameSpace #4: E:\WINDOWS\System32\nwprovau.dll
Protocol #1: E:\WINDOWS\system32\mswsock.dll
Protocol #2: E:\WINDOWS\system32\mswsock.dll
Protocol #3: E:\WINDOWS\system32\mswsock.dll
Protocol #4: E:\WINDOWS\system32\rsvpsp.dll
Protocol #5: E:\WINDOWS\system32\rsvpsp.dll
Protocol #6: E:\WINDOWS\system32\mswsock.dll
Protocol #7: E:\WINDOWS\system32\mswsock.dll
Protocol #8: E:\WINDOWS\system32\mswsock.dll
Protocol #9: E:\WINDOWS\system32\mswsock.dll
Protocol #10: E:\WINDOWS\system32\mswsock.dll
Protocol #11: E:\WINDOWS\system32\mswsock.dll
Protocol #12: E:\WINDOWS\system32\mswsock.dll
Protocol #13: E:\WINDOWS\system32\mswsock.dll
Protocol #14: E:\WINDOWS\system32\mswsock.dll
Protocol #15: E:\WINDOWS\system32\mswsock.dll
Protocol #16: E:\WINDOWS\system32\mswsock.dll
Protocol #17: E:\WINDOWS\system32\mswsock.dll
Protocol #18: E:\WINDOWS\system32\mswsock.dll
Protocol #19: E:\WINDOWS\system32\mswsock.dll
Protocol #20: E:\WINDOWS\system32\mswsock.dll
Protocol #21: E:\WINDOWS\system32\mswsock.dll
Protocol #22: E:\WINDOWS\system32\mswsock.dll
Protocol #23: E:\WINDOWS\system32\mswsock.dll
Protocol #24: E:\WINDOWS\system32\mswsock.dll

--------------------------------------------------

Enumerating Windows NT/2000/XP services

Microsoft ACPI Driver: system32\DRIVERS\ACPI.sys (system)
Microsoft Kernel Acoustic Echo Canceller: system32\drivers\aec.sys (manual start)
AFD: \SystemRoot\System32\drivers\afd.sys (system)
Alerter: %SystemRoot%\system32\svchost.exe -k LocalService (manual start)
Application Layer Gateway Service: %SystemRoot%\System32\alg.exe (manual start)
AMD K7 Processor Driver: system32\DRIVERS\amdk7.sys (system)
Application Management: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start)
1394 ARP Client Protocol: system32\DRIVERS\arp1394.sys (manual start)
RAS Asynchronous Media Driver: system32\DRIVERS\asyncmac.sys (manual start)
Standard IDE/ESDI Hard Disk Controller: system32\DRIVERS\atapi.sys (system)
ATM ARP Client Protocol: system32\DRIVERS\atmarpc.sys (manual start)
Windows Audio: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Audio Stub Driver: system32\DRIVERS\audstub.sys (manual start)
Background Intelligent Transfer Service: %SystemRoot%\system32\svchost.exe -k netsvcs 
(manual start)
Computer Browser: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
CDAWDM: system32\DRIVERS\CDAWDM.sys (disabled)
CD-ROM Driver: system32\DRIVERS\cdrom.sys (system)
Indexing Service: %SystemRoot%\system32\cisvc.exe (manual start)
ClipBook: %SystemRoot%\system32\clipsrv.exe (disabled)
C-Media WDM Audio Interface: system32\drivers\cmuda.sys (manual start)
COM+ System Application: E:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} 
(manual start)
Cryptographic Services: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Creative SBLive! Gameport: system32\DRIVERS\ctljystk.sys (manual start)
Creative SoundFont Management Device Driver: system32\DRIVERS\ctsfm2k.sys (manual 
start)
DCOM Server Process Launcher: %SystemRoot%\system32\svchost -k DcomLaunch (autostart)
DHCP Client: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Disk Driver: system32\DRIVERS\disk.sys (system)
Logical Disk Manager Administrative Service: %SystemRoot%\System32\dmadmin.exe /com 
(manual start)
dmboot: System32\drivers\dmboot.sys (disabled)
Logical Disk Manager Driver: System32\drivers\dmio.sys (system)
dmload: System32\drivers\dmload.sys (system)
Logical Disk Manager: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Microsoft Kernel DLS Syntheiszer: system32\drivers\DMusic.sys (manual start)
DNS Client: %SystemRoot%\system32\svchost.exe -k NetworkService (autostart)
Microsoft Kernel DRM Audio Descrambler: system32\drivers\drmkaud.sys (manual start)
Creative SB Live! (WDM): system32\drivers\emu10k1m.sys (manual start)
Creative Interface Manager Driver (WDM): system32\drivers\ctlfacem.sys (manual start)
ENTECH: \??\E:\WINDOWS\system32\DRIVERS\ENTECH.sys (manual start)
Error Reporting Service: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Event Log: %SystemRoot%\system32\services.exe (autostart)
COM+ Event System: E:\WINDOWS\system32\svchost.exe -k netsvcs (manual start)
Fast User Switching Compatibility: %SystemRoot%\System32\svchost.exe -k netsvcs (manual 
start)
Floppy Disk Controller Driver: system32\DRIVERS\fdc.sys (manual start)
Floppy Disk Driver: system32\DRIVERS\flpydisk.sys (manual start)
FltMgr: system32\DRIVERS\fltMgr.sys (system)
Volume Manager Driver: system32\DRIVERS\ftdisk.sys (system)
Game Port Enumerator: system32\DRIVERS\gameenum.sys (manual start)
Generic Packet Classifier: system32\DRIVERS\msgpc.sys (manual start)
gsplittm: \??\E:\DOCUME~1\Justin\LOCALS~1\Temp\gsplittm.sys (manual start)
Help and Support: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Microsoft Hid to Joystick Port Enabler: system32\DRIVERS\hidgame.sys (manual start)
HID Input Service: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Microsoft HID Class Driver: system32\DRIVERS\hidusb.sys (manual start)
HTTP: System32\Drivers\HTTP.sys (manual start)
HTTP SSL: %SystemRoot%\System32\svchost.exe -k HTTPFilter (autostart)
i8042 Keyboard and PS/2 Mouse Port Driver: system32\DRIVERS\i8042prt.sys (system)
CD-Burning Filter Driver: system32\DRIVERS\imapi.sys (system)
IMAPI CD-Burning COM Service: E:\WINDOWS\system32\imapi.exe (disabled)
IPv6 Windows Firewall Driver: system32\DRIVERS\Ip6Fw.sys (manual start)
IP Traffic Filter Driver: system32\DRIVERS\ipfltdrv.sys (manual start)
IP in IP Tunnel Driver: system32\DRIVERS\ipinip.sys (manual start)
IP Network Address Translator: system32\DRIVERS\ipnat.sys (manual start)
IPSEC driver: system32\DRIVERS\ipsec.sys (system)
IR Enumerator Service: system32\DRIVERS\irenum.sys (manual start)
PnP ISA/EISA Bus Driver: system32\DRIVERS\isapnp.sys (system)
Keyboard Class Driver: system32\DRIVERS\kbdclass.sys (system)
Keyboard HID Driver: system32\DRIVERS\kbdhid.sys (system)
Microsoft Kernel Wave Audio Mixer: system32\drivers\kmixer.sys (manual start)
Server: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Workstation: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
TCP/IP NetBIOS Helper: %SystemRoot%\system32\svchost.exe -k LocalService (autostart)
Messenger: %SystemRoot%\system32\svchost.exe -k netsvcs (disabled)
NetMeeting Remote Desktop Sharing: E:\WINDOWS\system32\mnmsrvc.exe (manual start)
Unimodem Streaming Filter Device: system32\drivers\MODEMCSA.sys (manual start)
Mouse Class Driver: system32\DRIVERS\mouclass.sys (system)
Mouse HID Driver: system32\DRIVERS\mouhid.sys (manual start)
WebDav Client Redirector: system32\DRIVERS\mrxdav.sys (manual start)
MRXSMB: system32\DRIVERS\mrxsmb.sys (system)
Distributed Transaction Coordinator: E:\WINDOWS\system32\msdtc.exe (manual start)
Windows Installer: E:\WINDOWS\system32\msiexec.exe /V (manual start)
Microsoft Streaming Service Proxy: system32\drivers\MSKSSRV.sys (manual start)
Microsoft Streaming Clock Proxy: system32\drivers\MSPCLOCK.sys (manual start)
Microsoft Streaming Quality Manager Proxy: system32\drivers\MSPQM.sys (manual start)
Microsoft System Management BIOS Driver: system32\DRIVERS\mssmbios.sys (manual start)
Microsoft MPU-401 MIDI UART Driver: system32\drivers\msmpu401.sys (manual start)
Remote Access NDIS TAPI Driver: system32\DRIVERS\ndistapi.sys (manual start)
NDIS Usermode I/O Protocol: system32\DRIVERS\ndisuio.sys (manual start)
Remote Access NDIS WAN Driver: system32\DRIVERS\ndiswan.sys (manual start)
NetBIOS Interface: system32\DRIVERS\netbios.sys (system)
NetBios over Tcpip: system32\DRIVERS\netbt.sys (system)
Network DDE: %SystemRoot%\system32\netdde.exe (manual start)
Network DDE DSDM: %SystemRoot%\system32\netdde.exe (manual start)
Net Logon: %SystemRoot%\system32\lsass.exe (autostart)
Network Connections: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
1394 Net Driver: system32\DRIVERS\nic1394.sys (manual start)
Network Location Awareness (NLA): %SystemRoot%\system32\svchost.exe -k netsvcs (manual 
start)
NT LM Security Support Provider: %SystemRoot%\system32\lsass.exe (manual start)
Removable Storage: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start)
IPX Traffic Filter Driver: system32\DRIVERS\nwlnkflt.sys (manual start)
IPX Traffic Forwarder Driver: system32\DRIVERS\nwlnkfwd.sys (manual start)
NWLink IPX/SPX/NetBIOS Compatible Transport Protocol: system32\DRIVERS\nwlnkipx.sys 
(autostart)
NWLink NetBIOS: system32\DRIVERS\nwlnknb.sys (autostart)
NWLink SPX/SPXII Protocol: system32\DRIVERS\nwlnkspx.sys (autostart)
OHCI Compliant IEEE 1394 Host Controller: system32\DRIVERS\ohci1394.sys (system)
Creative OS Services Driver: system32\drivers\ctoss2k.sys (manual start)
Sound Blaster Live! 24-bit: system32\drivers\P17.sys (manual start)
Parallel port driver: system32\DRIVERS\parport.sys (manual start)
PCI Bus Driver: system32\DRIVERS\pci.sys (system)
PCIIde: system32\DRIVERS\pciide.sys (system)
Plug and Play: %SystemRoot%\system32\services.exe (autostart)
IPSEC Services: %SystemRoot%\system32\lsass.exe (autostart)
WAN Miniport (PPTP): system32\DRIVERS\raspptp.sys (manual start)
Protected Storage: %SystemRoot%\system32\lsass.exe (autostart)
QoS Packet Scheduler: system32\DRIVERS\psched.sys (manual start)
Direct Parallel Link Driver: system32\DRIVERS\ptilink.sys (manual start)
W2K Pctel Serial Device Driver: system32\DRIVERS\ptserial.sys (manual start)
Remote Access Auto Connection Driver: system32\DRIVERS\rasacd.sys (system)
Remote Access Auto Connection Manager: %SystemRoot%\system32\svchost.exe -k netsvcs 
(manual start)
WAN Miniport (L2TP): system32\DRIVERS\rasl2tp.sys (manual start)
Remote Access Connection Manager: %SystemRoot%\system32\svchost.exe -k netsvcs (manual 
start)
Remote Access PPPOE Driver: system32\DRIVERS\raspppoe.sys (manual start)
Direct Parallel: system32\DRIVERS\raspti.sys (manual start)
Rdbss: system32\DRIVERS\rdbss.sys (system)
RDPCDD: System32\DRIVERS\RDPCDD.sys (system)
Terminal Server Device Redirector Driver: system32\DRIVERS\rdpdr.sys (manual start)
Remote Desktop Help Session Manager: E:\WINDOWS\system32\sessmgr.exe (manual start)
Digital CD Audio Playback Filter Driver: system32\DRIVERS\redbook.sys (system)
Routing and Remote Access: %SystemRoot%\system32\svchost.exe -k netsvcs (disabled)
Remote Registry: %SystemRoot%\system32\svchost.exe -k LocalService (manual start)
Remote Procedure Call (RPC) Locator: %SystemRoot%\system32\locator.exe (manual start)
Remote Procedure Call (RPC): %SystemRoot%\system32\svchost -k rpcss (autostart)
QoS RSVP: %SystemRoot%\system32\rsvp.exe (manual start)
Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver: system32\DRIVERS\RTL8139.SYS 
(manual start)
Security Accounts Manager: %SystemRoot%\system32\lsass.exe (autostart)
Smart Card: %SystemRoot%\System32\SCardSvr.exe (manual start)
Task Scheduler: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Secdrv: system32\DRIVERS\secdrv.sys (autostart)
Secondary Logon: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
System Event Notification: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Serenum Filter Driver: system32\DRIVERS\serenum.sys (manual start)
Serial port driver: system32\DRIVERS\serial.sys (system)
Creative SoundFont Manager Driver (WDM): system32\drivers\sfmanm.sys (manual start)
Windows Firewall/Internet Connection Sharing (ICS): %SystemRoot%\system32\svchost.exe 
-k netsvcs (autostart)
Shell Hardware Detection: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Silicon Image SiI 3112 SATARaid Controller: system32\DRIVERS\si3112r.sys (system)
SATALink driver accelerator: system32\DRIVERS\SiWinAcc.sys (system)
Microsoft Kernel Audio Splitter: system32\drivers\splitter.sys (manual start)
Print Spooler: %SystemRoot%\system32\spoolsv.exe (autostart)
System Restore Filter Driver: \SystemRoot\system32\DRIVERS\sr.sys (disabled)
System Restore Service: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Srv: system32\DRIVERS\srv.sys (manual start)
SSDP Discovery Service: %SystemRoot%\system32\svchost.exe -k LocalService (disabled)
Windows Image Acquisition (WIA): %SystemRoot%\system32\svchost.exe -k imgsvc (manual 
start)
Software Bus Driver: system32\DRIVERS\swenum.sys (manual start)
Microsoft Kernel GS Wavetable Synthesizer: system32\drivers\swmidi.sys (manual start)
MS Software Shadow Copy Provider: E:\WINDOWS\system32\dllhost.exe /Processid:{CA6C24DD-FE9C-4361-BD78-571EA278B131} 
(manual start)
Microsoft Kernel System Audio Device: system32\drivers\sysaudio.sys (manual start)
Performance Logs and Alerts: %SystemRoot%\system32\smlogsvc.exe (manual start)
Telephony: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
TCP/IP Protocol Driver: system32\DRIVERS\tcpip.sys (system)
Terminal Device Driver: system32\DRIVERS\termdd.sys (system)
Terminal Services: %SystemRoot%\System32\svchost -k DComLaunch (manual start)
Themes: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Telnet: E:\WINDOWS\system32\tlntsvr.exe (disabled)
Distributed Link Tracking Client: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Windows User Mode Driver Framework: E:\WINDOWS\system32\wdfmgr.exe (autostart)
Microcode Update Driver: system32\DRIVERS\update.sys (manual start)
Universal Plug and Play Device Host: %SystemRoot%\system32\svchost.exe -k LocalService 
(manual start)
Uninterruptible Power Supply: %SystemRoot%\System32\ups.exe (manual start)
Microsoft USB Generic Parent Driver: system32\DRIVERS\usbccgp.sys (manual start)
Microsoft USB 2.0 Enhanced Host Controller Miniport Driver: system32\DRIVERS\usbehci.sys 
(manual start)
USB2 Enabled Hub: system32\DRIVERS\usbhub.sys (manual start)
Microsoft USB Open Host Controller Miniport Driver: system32\DRIVERS\usbohci.sys 
(manual start)
USB Scanner Driver: system32\DRIVERS\usbscan.sys (manual start)
USB Mass Storage Driver: system32\DRIVERS\USBSTOR.SYS (manual start)
VgaSave: \SystemRoot\System32\drivers\vga.sys (system)
W2K Vmodem: system32\DRIVERS\vmodem.sys (system)
W2K Vpctcom: system32\DRIVERS\vpctcom.sys (system)
Virtual Serial Bus Enumerator: system32\DRIVERS\vsb.sys (manual start)
ELTIMA Virtual Serial Ports Driver: System32\DRIVERS\vserial.sys (manual start)
Volume Shadow Copy: %SystemRoot%\System32\vssvc.exe (manual start)
W2K Vvoice: system32\DRIVERS\vvoice.sys (system)
Windows Time: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Remote Access IP ARP Driver: system32\DRIVERS\wanarp.sys (manual start)
Microsoft WINMM WDM Audio Compatibility Driver: system32\drivers\wdmaud.sys (manual 
start)
WebClient: %SystemRoot%\system32\svchost.exe -k LocalService (autostart)
Windows Management Instrumentation: %systemroot%\system32\svchost.exe -k netsvcs 
(autostart)
WMDM PMSP Service: E:\WINDOWS\system32\MsPMSPSv.exe (manual start)
Portable Media Serial Number Service: %SystemRoot%\System32\svchost.exe -k netsvcs 
(disabled)
Windows Management Instrumentation Driver Extensions: %SystemRoot%\System32\svchost.exe 
-k netsvcs (manual start)
WMI Performance Adapter: E:\WINDOWS\system32\wbem\wmiapsrv.exe (manual start)
Windows Socket 2.0 Non-IFS Service Provider Support Environment: \SystemRoot\System32\drivers\ws2ifsl.sys 
(disabled)
Security Center: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Automatic Updates: %systemroot%\system32\svchost.exe -k netsvcs (autostart)
Wireless Zero Configuration: %SystemRoot%\System32\svchost.exe -k netsvcs (manual 
start)
Network Provisioning Service: %SystemRoot%\System32\svchost.exe -k netsvcs (manual 
start)


--------------------------------------------------

Enumerating Windows NT logon/logoff scripts:
*No scripts set to run*

Windows NT checkdisk command:
BootExecute = autocheck autochk *

Windows NT 'Wininit.ini':
PendingFileRenameOperations: *Registry value not found*

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: E:\WINDOWS\system32\SHELL32.dll
CDBurn: E:\WINDOWS\system32\SHELL32.dll
WebCheck: E:\WINDOWS\system32\webcheck.dll
SysTray: E:\WINDOWS\system32\stobject.dll

--------------------------------------------------
Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

*Registry key not found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

*Registry key not found*

--------------------------------------------------

End of report, 30,779 bytes
Report generated in 0.031 seconds

Command line options:
   /verbose  - to add additional info on each section
   /complete - to include empty sections and unsuspicious data
   /full     - to include several rarely-important sections
   /force9x  - to include Win9x-only startups even if running on WinNT
   /forcent  - to include WinNT-only startups even if running on Win9x
   /forceall - to include all Win9x and WinNT startups, regardless of platform
   /history  - to list version history only

[Reply or follow-up to this message]

Start by trimming down your networking components. Go to your connection's properties. Uninstall everything but TCP/IP. Then, see if you can disable these services, and see if that helps your bootup time, or if it just generates the error message again:

(autostart) Automatic Updates: %systemroot%\system32\svchost.exe -k netsvcs 
(autostart) Computer Browser: %SystemRoot%\system32\svchost.exe -k netsvcs
(autostart) Distributed Link Tracking Client: %SystemRoot%\system32\svchost.exe -k
(autostart) Error Reporting Service: %SystemRoot%\System32\svchost.exe -k netsvcs 
(autostart) Help and Support: %SystemRoot%\System32\svchost.exe -k netsvcs 
(autostart) Server: %SystemRoot%\system32\svchost.exe -k netsvcs 
(autostart) TCP/IP NetBIOS Helper: %SystemRoot%\system32\svchost.exe -k LocalService 
(autostart) WebClient: %SystemRoot%\system32\svchost.exe -k LocalService 
(autostart) Workstation: %SystemRoot%\system32\svchost.exe -k netsvcs 

The Wereotter

[Reply or follow-up to this message]

Well, the good news: The network starts much faster and the welcome screen isn't 
causing any problems.

The bad news: just this afternoon, the Computer Browser, Server, and Workstation 
services flat out disappeared, even from hijackThis and the registry.

I think I'm just gonna reformat this weekend...that is, unless you have a better 
solution by then.

[Reply or follow-up to this message]

This was to be expected when you uninstalled the Client for MS Networks. Those services are related to that network service provider.

The Wereotter

[Reply or follow-up to this message]

So about how long is your startup time now?

The Wereotter

[Reply or follow-up to this message]

After going through the optimization process on the front page again I'm about about 
2-3 seconds faster on the logo and, actually, much faster on the network start than 
when I started this whole mess (but that's probably only because of the things you 
just had me disable). Total time from logo: ~30 seconds, when with a fresh install 
+ essential drivers I was getting about 20-22.

Unfortunately, I think I will still need some of those services I just got rid of 
as I use file sharing to share files and IPX for older programs on my LAN.

One interesting note, though: Safe Mode loads the account selection screen in about 
20 secs, so I tried the selective boot options in msconfig. Running Diagnostic (all 
check boxes off) got me that "executing: ...\wlnotify.dll" message and long delay 
again. Other than that, no change in speed.

Got any more tricks up your sleeve?

-Justin (pointmanx)

Oh, and thanks for all the help so far.

[Reply or follow-up to this message]

30 seconds is about average. Would you be able to use an alternative to Windows File Sharing, such as FTP?

The Wereotter

[Reply or follow-up to this message]

Only if it will allow others on my Lan to have the same functionality as before.







On Thursday, March 3, 2005 at 6:46 pm, Otter wrote:

>30 seconds is about average. Would you be able to use an alternative to Windows 
File 

>Sharing, such as FTP? 

[Reply or follow-up to this message]

Nope, not exactly the same.

The Wereotter

[Reply or follow-up to this message]

Just want to say that the below suggestion worked for me too...my bootup time was 
normal, but when I tried to go online, it took forever. Deselected the below and 
now it works like a charm. Thanks..







On Friday, December 10, 2004 at 8:01 am, ziha79 wrote:

>I had a problem where my machine took about 3 to 5 minutes to boot up with XP.  
It 

>turned out that the problem occurred with a conflict in my network connections between 

>the broadband connection (created when installing software provided by my internet 

>provider) and a network connection associated with my ethernet card.

>

>I solved the problem by going into device manager, right clicked on the ethernet 

>card under network adapters and properties.  I then deselected the all the boxes 

>that were checked that contained TCP protocols etc.  Now rebooting takes less than 

>30 seconds!  

>

>I believe the problem developed following one of the XP updates.

>
 

[Reply or follow-up to this message]

Regarding hanging on wlnotify.dll during Windows XP startup / logon, and slow startup: on my XPPRO SP2 machine I have been working on an unrelated issue concerning my USB drivers. I noticed that when I disabled my USB drivers that my machine no longer took forever to reboot. When enabled, the long boot time returns. During boot with the USB drivers enabled I noticed that during wlnotify.dll processing that my external USB drives were being accessed for long periods. I have 5 external USB drives, and Im about to upgrade to a USB2.0 / Firewire controller as USB V1.x is a bit too slow for such a large drive field.


On Wednesday, March 2, 2005 at 1:05 pm, pointmanx wrote:
>After going through the optimization process on the front page again I'm about about
>2-3 seconds faster on the logo and, actually, much faster on the network start than
>when I started this whole mess (but that's probably only because of the things you
>just had me disable). Total time from logo: ~30 seconds, when with a fresh install
>+ essential drivers I was getting about 20-22.
>
>Unfortunately, I think I will still need some of those services I just got rid of
>as I use file sharing to share files and IPX for older programs on my LAN.
>
>One interesting note, though: Safe Mode loads the account selection screen in about
>20 secs, so I tried the selective boot options in msconfig. Running Diagnostic (all
>check boxes off) got me that "executing: ...\wlnotify.dll" message and long delay
>again. Other than that, no change in speed.
>
>Got any more tricks up your sleeve?
>
>-Justin (pointmanx)
>
>Oh, and thanks for all the help so far.

[Reply or follow-up to this message]

i am having the same slow login problme .. startup is OK, but login takes 256 seconds+ followed as many of the steps here as i could .. pretty sure no trojans .. (just reinstalled from an image made 12/04 shortly after i set up teh system .. but before SP2 and all fixes since 12/28/04 ... got hijacked a couple of months ago). not sure when the slow start started ... defragged, increased swap space , got bootvis and ran optimize, etc etc ... i still have bad login .. (everything else is fine) .. BOOTVIZ tells me there is a NETWORK DELAY of 138 sec (has been up to 256_) .. from svchost (968) using driver mrxsmb.sys. this is sony vir s170 laptop that goes between the lan at work and DSL at home .. i also note that the disk is being used 100% of the time a LOT .. probably 80% of teh time from 149 sec to 280 sec .. a lot of the activity is generated by symevent.sys (i have norton system works loaded .. use DiskKeeper to defrag) ..the %usage is pegged at 100% a lot when this starts .. all on disk 0. i have searech on all combinations of the above key words and ended up here several times ... i would appreciate any advice you can give. thanks in advance for your time .. tom


On Monday, February 14, 2005 at 1:49 pm, pointmanx wrote:
>Hey, Ben!
>
>Thanks for the advice...I've learned a lot about my system.
>
>However, I tried everything you mentioned and did spyware removal and hijackThis,
>and still my system still boots only half as fast as it used to. BootVis was the
>only thing that seemed to do anything.
>
>Might you have any more advice, especially in relation to the XP logo screen?

[Reply or follow-up to this message]

Control Panel->Folder Options->View tab->Uncheck "Automatically search for network folders and printers". If that does not fix it, do you use Windows File Sharing to share files between computers?

My Malware Removal Instructions

Perform the following:

1. Disable System Restore ^*
2. Perform an online virus scan ^{* * * *} .
3. Download, update, and run these tools:
   • Spybot Search & Destroy ^*
   • Lavasoft Adaware ^*
   • CWShredder ^*
   Repeat as necessary until clean.
4. If you still experience problems after doing these steps, download HijackThis ^* and post a log to this forum.
5. To protect against reinfection, download and use these:
   If at all possible, I recommend that you use alternative software, particularly web browsers and email clients:
   • Web Browsers ^{* * *}
   • Email Clients ^{* *}
   If this is not a viable option, or for additional protection, use these:
   • Javacool's SpywareBlaster ^*