Computer slows down. Temperature or malaware issue? Or...?

[matitaccia]

Hello everyone.

I have been called today from a shop and they told me that they have a problem with this computer which got very slow. It runs Windows XP and his specs are as following:

MB: Asus P5KPL-AM
CPU: Intel Core 2 Duo E6550
RAM: 2 gigs
HDD: ST910021AS - Seagate - 100 GB - 2.5" - 7'500 RPM

The first strange thing happened saturday. When powered on the display wasn't showing anything beside the message "No signal". After shutting down and restarting everything was ok. Today, they call me, telling me that the PC is very very slow, that they can't open their software and it's a mess because they can't keep track of the items sold.

I went there today and at the beginning it was working normally. Computer was responsive. I thought temperatures could have been an issue, since the PC itself it's enclosed in some kind console. But no: I have used HWMonitor version 1.1.6.0 and I found out:

Hardware Monitors 
------------------------------------------------------------------------- 

Hardware monitor   HECI version 3.0.1E.43E 
   Voltage 0   12.18 Volts [0x2F93] (+12V) 
   Voltage 1   5.08 Volts [0x13DA] (+5V) 
   Voltage 2   3.34 Volts [0xD07] (+3.3V) 
   Voltage 3   1.22 Volts [0x4C4] (AUX) 
   Voltage 4   1.02 Volts [0x3FB] (CPU VCORE) 
   Temperature 0   51°C (123°F) [0x33] (CPU) 
   Temperature 3   52°C (125°F) [0x34] (ICH) 
   Temperature 4   81°C (177°F) [0x51] (MCH) 
   Temperature 5   77°C (170°F) [0x4D] (TMPIN5) 
   Fan 0      1206 RPM [0x4B6] (CPU) 
Register space      class = 0x15 

Hardware monitor   Intel Core 2 Duo E6550 
   Temperature 0   56°C (132°F) [0x2C] (Core #0) 
   Temperature 1   56°C (132°F) [0x2C] (Core #1) 

Hardware monitor   ST910021AS 
   Temperature 0   42°C (107°F) [0x2A] (Assembly) 
   Temperature 2   42°C (107°F) [0x2A] (Air Flow)

What are this tempearture values at "Temperature 4" and "Temperature 5"? I thought the rest were ok (CPU; HDD)

I used the Seagate Utility to check the HDD SMART status. It was ok.

Then there was this windows update icon blinkin' and telling that updates very ready to be installed. I tried and the PC slowed down. I was partially happy because I could see the slowing down and maybe understand some more. Went pressed the ctrl-alt-del sequence the task manager appeared after a while. But went away, again. Then after a second attempt I could used to kill some windows I had open. But after that the PC wasn't usable anymore. I had to kill it down pressing the power button for more than 4 sec.

Loading windows was ok. Until I was asked the password to access. I typed it, hit enter, and then it stayed there. I had to kill it again. Third time went better I could get onto the desktop. Fourth time I could even start the antivirus. I have left it that way now, hopefully it will find something. But I doubt (using AVG free).

I don't think it will be a virus: they are working behind a router and they don't open emails on that pc. The PC is in a network and strangely enough the other 3 pcs are working ok. I thought that if it would be a malaware/virus it would be already passed over to the others.

Now I would like to know what I should test. Memtest?

I have already looked for some instructions on the web for scanning an infected PC staying out of windows. It looks quite complicated but it's doable (takes time though): Link

I just would like to know if there are better ideas, I don't want to mess around a whole day with that cleaning and discover that there aren't any malaware or anything.

What else could it be? What other tests should I do?

Thank you all.

matitaccia

 

[Harvey]

Does the machine have up to date anti-virus and anti-spyware software? If so, when was it last run? If the answer isn't within the last few days, suspect malware.

If the machine is infected, scanning with currently installed software (if any) may not find or fix the problem because malware attacks AV and ASW programs.

If you suspect the machine is infected, do NOT allow it to go online. If you do, it could act like a cyber-Typhoid Mary, sending out malware to others or doing other malicious things such as being part of a DOS attack.

I know watching these programs run is as thrilling as watching paint dry, but it's the only way to be sure that isn't the problem. The best you can do is work on the machine apart from other tasks so you can get something done while the scans are running.

Good luck.

 

[matitaccia]

Hello, thanks for the answer.

If I remember well AVG (automagically updated everyday) scans everyday at 12:00. And for what I was able to see AVG hadn't reported anything special. It would have done something, people of the shop would have noticed something wrong. I doesn't have any antispyware program though.

What do you thing about those temperatures? You don't think they could be the issue?

 

[ronach]

The 0x51 [MCH] address if my memory hasn't failed me ( heaven forbid ) is representative of a memory control hub error. The system is clean right ? The heat sink is in place? The 0x4D address is used by some common sensor chips, if you find out what chip is in their sys..you could go on-line and scope out what location the 0x4D stands for. Have fun. For your info...that drive in there is not new, so it may be wise to check it out, or possibly throw in their backup drive for a test run. In my experience..some of these small shops pay little attention to their computers until they start to fail..rather than do periodic maintenance like the [ cough ] rest of us [ cough ]. Food for thought.

 

[matitaccia]

Hello everyone.

I will resume here the information I have gathered:

Temperature:

1. CPU, HDD, temperatures are in range;
2. HWMonitor tells that there are 2 sensors having 70° - 80°. Might be or might not be an issue. It might be that this values are referred to memory modules (I have seen that HWMonitor tells that values in the section for memory). Or it might be some misreading.
3. The problem presented himself also during a fresh start: the PC was turned of for the whole night, when started up it was already sluggish.

Virus

1. PC it's behing a firewall. Difficult for viruses to enter without people opening files infected;
2. mail, which could be a way of virus propagation, isn't read on that computer;
3. tonight the virusscan finished scanning without reporting any threat;

Malaware

1. I don't have any antimalaware software on that machine;
2. PC are on a network: if it is infected, why the others aren't?

Other:

1. The software they are using for the shop activities, once (takes a long time) is loaded, is working. Maybe because it's old and light. Or maybe because it's sending data to the server and not to the local HDD?!?

The 0x51 [MCH] address if my memory hasn't failed me ( heaven forbid ) is representative of a memory control hub error. The system is clean right ? The heat sink is in place?

I will go there and open the system to clean it up. I have changed case during spring time, though, And I don't think there will be much dust in the case.

The 0x4D address is used by some common sensor chips, if you find out what chip is in their sys..you could go on-line and scope out what location the 0x4D stands for.

What chip are you referring to? Northbridge/southbridge? Sorry, my competence isn't enough here. Anyhow northbridge is Intel G31 and southbridge is ICH7. I have read a little in asus forums that there are other people having ICH7 quite hot withouth having big issues. I don't know about those codes, where should I look for them? Is intel or Asus who give them or is a way of HWMonitor to express himself? Lol. I have already looked on HWMonitor but there isn't any documentation about the software.

Would a BIOS update do anygood? Not to the main issue for sure.

that drive in there is not new, so it may be wise to check it out, or possibly throw in their backup drive for a test run.

I have already checked for the SMART values and they are ok. I haven't done a very long test though, because it's working so slow.

Last question is: what if I take the drive out and take it home, install it on my pc and check for malaware? Will I get malaware on my disc too? What software should I use to scan (I would like to know one that works not all the crap google is throwing at me).

Thank you all!

 

[corkyg]

You might also consider a Registry scrub with CCleaner and defragging the HDD.

If you do have malware, then placing thast drive in another machine puts it at risk too Do you have Windows Defender active?

 

[matitaccia]

Hello everyone.

I found out that the problem was the HDD, which is full of bad sectors. It's time to buy a new one!

I have chosen following:

WESTERN DIGITAL Scorpio Black WD2500BEKT, 250GB, Bulk
2.5", 16MB cache, 7200 rpm, 12 ms • SATA II 3.0Gb/s

Should arrive next week. Hopefully.

Thanks again to everyone.

matitaccia