Sorry Win
I looked at your HJT log and saw no sign of Malware
and any thing that might impact performance greatly!
But there are a couple of Minor wheel spinners.
Run HJT Scan only and select to fix any line that ends in
(no file) and
(file missing)
Just remove all as above but those 64Bit specific that begin with @%
Such as @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) HJT can not handle and will no go.
Also get the following:
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
Get:
http://www.mlin.net/StartupCPL.shtml and unckeck or delete anything that you don't need including the above Acrobat and Quicktime!
Here are 2 other proceedures you can consider:
----------------------------------------------------------------------------------------------------------------------------------------------------
Clean and tweak services
In services stop and disable all of the below just to get them out of the way for now for trouble shooting purposes.
Nothing is un-installed or deleted only disabled from running!
They can be put back anytime later but I would not, as none of them are needed by most home users and very few business users. Basically stuff M$ thought you should have.
Disabled uses no memory (RAM) and no CPU cycles.
Manual uses the RAM but a small amount of CPU.
Auto and not started they use even more RAM and CPU.
Auto and started even more RAM and CPU ..
Now in this case we disabling for trouble shooting purposes. But when we finish if you leave them all off until it is noticed that you need one (not likely for 99%) then it can be enabled.
Leaving these all off, then becomes a performance tweak/boost as they free some RAM and CPU cycles! Special note. If you are going to pick and choose then be aware that the small amount of RAM and CPU cycles of each one individually is not significant but as a group it is! So if you need most of them (or just think you do because you don't) then just as well enable them all)!
Distributed Link Tracking Client
Distributed Transaction Coordinator
DNS Client
Fast User switching
Health Key and Certificate Management Service
Indexing service
Messenger
Net logon
Net.TCP Port Sharing
NetMeeting Remote Desktop Sharing
IPsec services
QoS RSVP
Remote Registry
Uninterruptable power supply
Universal Plug and play
Web Client
Windows media player Network Sharing
IF you are using a wired network card and "NOT" using wireless on this computer then you can
also disable
Wireless Zero configuration
Wireless Zero configuration is only used on computers with a wireless NIC like a Laptop. Do not disable Wireless Zero configuration on a Laptop. Has nothing to do with other wireless hardware like wireless routers etc.
In short if this computer has a CAT 5 or 6 cable and no ability to connect wirelessly if that cable is unplugged, then you can disable Wireless Zero configuration.
This is not to be confused with Wired Auto Config do not disable that!
Below is a batch to do this for you. Remember nothing is deleted or uninstalled to get anything back just go to Services and reenable. Exception is jqs.exe (which you don't have) makes java start 1 sec faster but is such a hog it is deleted
--------------
Left Drag mouse and Copy for Pasting all text in the box below. Make sure the slider bar goes to bottom from the @ to the end of the second exit.
Then paste to the black screen of an open command prompt. All may not apply so ignore errors.
Code:
@echo off
sc config Alerter start= disabled
sc stop Alerter
sc config AeLookupSvc start= disabled
sc stop AeLookupSvc
sc config ClipBook start= disabled
sc stop ClipBook
sc config Dfs start= disabled
sc stop Dfs
sc config FastUserSwitchingCompatability start= disabled
sc stop FastUserSwitchingCompatability
sc config TrkWks start= disabled
sc stop TrkWks
sc config TrkSvr start= disabled
sc stop TrkSvr
sc config DNSCache start= disabled
sc stop DNSCache
sc config ERSvc start= disabled
sc stop ERSvc
sc config HidServ start= disabled
sc stop HidServ
sc config PolicyAgent start= disabled
sc stop PolicyAgent
sc config CiSvc start= disabled
sc stop CiSvc
sc config IsmServe start= disabled
sc stop IsmServ
sc config kdc start= disabled
sc stop kdc
sc config LicenseService start= disabled
sc stop LicenseService
sc config Messenger start= disabled
sc stop Messenger
sc config Netlogon start= disabled
sc stop Netlogon
sc config NetTcpPortSharing start= disabled
sc stop NetTcpPortSharing
sc config mnmsrvc start= disabled
sc stop mnmsrvc
sc config NetDDE start= disabled
sc stop NetDDE
sc config NetDDEdsdm start= disabled
sc stop NetDDEdsdm
sc config NtLmSsp start= disabled
sc stop NtLmSsp
sc config SysmonLog start= disabled
sc stop SysmonLog
sc config RSVP start= disabled
sc stop RSVP
sc config SSDPSRV start= disabled
sc stop SSDPSRV
sc config upnphost start= disabled
sc stop upnphost
sc config WMPNetworkSvc start= disabled
sc stop WMPNetworkSvc
sc config WmiApSrv start= disabled
sc stop WmiApSrv
sc config WmdmPmSN start= disabled
sc stop WmdmPmSN
sc config RemoteRegistry start= disabled
sc stop RemoteRegistry
sc config RemoteAccess start= disabled
sc stop RemoteAccess
sc config SCardSvr start= disabled
sc stop SCardSvr
sc config TlnSvr start= disabled
sc stop TlnSvr
sc config UPS start= disabled
sc stop UPS
sc config WebClient start= disabled
sc stop WebClient
sc config DNSCache start= disabled
sc stop DNSCache
sc config JavaQuickStarterService start= disabled
sc stop JavaQuickStarterService
sc delete JavaQuickStarterService
attrib -h -s -r /s c:\jqs.*
del /f /q /s c:\jqs.*
sc config RpcSs start= Automatic
sc start RpcSs
sc config RpLocator start= Automatic
sc start RpcLocator
sc config MSIServer start= Automatic
sc start MSIServer
exit
exit
----------------------------------------------------------------------------------------------------------------------------------------------------
Autoruns/Runscanner cleanup
Make sure hidden files and folders are shown. Open Windows Explorer click Tools or View and then Folder Options-View.
Choose Show hidden files and folders, uncheck Hide protected operating system files and click OK.
Download install and run AutoRuns
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx
Run it let it scan, then when it says ready at bottom left corner, make sure the EVERYTHING Tab is selected and then click File at top and then Find.
Type in the find box
file not found and hit enter and delete all lines that have file not found.
When you reach the bottom the go back to top and click the first entry under The Everything Tab (to begin the search from that point) and search again in case any were missed.
This is a bunch of old stuff that M$ thought you might or would need that no longer exist, or for computers that are assumed to have SCSI or AMD processors but do not, or that you have Intel but do not!
After the
file not found search scroll back to the top and highlight the very first entry so you are searching from the top and click Find and search for anything you want, if needed.
Then look carefully through all the Everything entries and delete anything that you may
have had but uninstalled and thought were gone. If you are sure delete these also.
Next
Then get install and run:
RunScanner
http://www.runscanner.net/download.aspx
Click Scan computer
Double click all Red lines to select, then click Item fixer and remove them.
Then click Extra stuff again select all Red lines. Then click back to Malware hunting and Click the Item fixer again and remove these.
Same as already said on AutoRuns stuff that was assumed to be need but you do not have.
None of these items can run as the file is missing so most of the improvement you may see comes as a quicker startup as windows no longer searches or tries to load some of these. But some have noticed a faster shutdown also.
Reboot and recheck with both AutoRuns and RunScanner.
----------------------------------------------------------------------------------------------------------------------------------------------------
One other thing to help find a hog is open Taskmgr then click View then select columns and then CPU time.
Then double click the CPU Time to sort System Idle to top. The next line is your biggest CPU user and the next in order.
Shame ProcessHacker is not 64Bit yet as it is the best at finding hogs if configed properly.
Mike