What are these Isass processes?

"Gerry" wrote:

Terry

I have now realised where things have gone awry.

Your list came from the wrong page. Your list comes from Administative
Tools. You need to open Services to see DHCP Client.

OK, thanks Gerry. DHCP is in Services, with status of Auto Started.

--
Terry, East Grinstead, UK

Terry

I am not sure what the ipconfig result means. It gives the same address
as appear in the DHCP Event Viewer Report.

How many computers are connected to your router? Are you using an
Ethernet Hub or an Ethernet Switch?

I am using AVG 8.5 Free. I do not think AVG is causing your problem.

The SENS service on your computer is not right. The Registry entries are
wrong but I have not yet figured out how to correct them. Event ID 4356
is occuring because the the service is not starting. The Registry
entries telling the computer to load SENS when booting are damaged but I
have not yet figured out how to correct them. My feeling that your slow
performance is related to network and security issues and SENS is part
of the problem.

Some of your screenshots have helped. I cannot, however, get much from
those showing I/O bytes etc.

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Terry Pinnell wrote:
"Gerry" wrote:

Terry

http://www.eventid.net/display.asp?e...Dhcp& phase=1

The earlier link was based on the wrong version of the error. Just
shows guessing is not always best. However, I am not sure the
comments help over much.

Select Start, Run, type "cmd" without quotes and click on OK. Type
"ipconfig" without quotes and hit enter. What is the response?

The response I get is:

Windows IP Configuration
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : home
IP Address. . . . . . . . . . . . : 192.168.1.64
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.254

http://www.ncsu.edu/resnet/windows/ipconfig/

Gerry,

1) I get
Windows IP Configuration
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.1.33
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

What does that tell you?

---------

2) Re my earlier post about AVG. (Still interested to hear what AV you
use BTW.) I uninstalled AVG 8.5 (free) completely (with difficulty -
took a couple of hours). But to my disappointment my intermittent
performance problem is not changed.


3) As per my earlier post, do you think that the performance issue and
the missing System Event Notification Service (SENS) are unrelated?
Looks that way to me. Presumably SENS is nothing to do with the Error
Log service?

4) Did my various screenshots offer any further clues?

Terry

I thought it must be!


--


Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Terry Pinnell wrote:
"Gerry" wrote:

Terry

I have now realised where things have gone awry.

Your list came from the wrong page. Your list comes from
Administative Tools. You need to open Services to see DHCP Client.

OK, thanks Gerry. DHCP is in Services, with status of Auto Started.

"Gerry" wrote:

Terry

I am not sure what the ipconfig result means. It gives the same address
as appear in the DHCP Event Viewer Report.


How many computers are connected to your router? Are you using an
Ethernet Hub or an Ethernet Switch?

Just this one now. (As mentioned, I finally despatched the other to my
shed/workshop, some 15 months after installing this new PC!)

I am using AVG 8.5 Free. I do not think AVG is causing your problem.

Agreed! As you saw, it made no difference here. (But having
uninstalled it I'm now trying the alternative Avira Antivir.)

The SENS service on your computer is not right. The Registry entries are
wrong but I have not yet figured out how to correct them. Event ID 4356
is occuring because the the service is not starting. The Registry
entries telling the computer to load SENS when booting are damaged but I
have not yet figured out how to correct them.

OK Gerry, all understood and agreed.

My feeling that your slow
performance is related to network and security issues and SENS is part
of the problem.

This is the issue I'm not yet sure about, although I have no
conclusive evidence either way. I was hoping the System Restores I did
(going way back to 10th February at the earliest) would provide some
evidence. But that too is inconclusive because the earliest date in
Event Viewer is 28th Feb. So I don't know whether 4356 and 4343
appeared after the PC boot on 10th Feb (when the slow mode still
occurred). I'm reluctant to do any more SRs, as it was excruciatingly
slow. (BTW, has SR always been like that, i.e. always restoring
\Program Files to the state at the time?)

---------

One aspect that is a bit unsatisfactory is exactly how I'm *measuring*
'performance', to decide whether I am in 'slow' or 'fast' mode. This
has in practice been a mixture of factors, including the subjective
'feel' when things slow down a bit. And that had seemed to me to be
associated with all that Lsass.exe activity of the SECURITY/Policy
type (whatever that is!). But the most important factor, because it
seems to me to be objective and easily applied, is the time it takes
to run my macro. Under 1 second = fast mode, 6 secs = slow mode. To
remind you, the macro (which was written in a program called Macro
Express) is applied to any folder in List view, and changes it to
Detail view, altering column sizes if necessary so that they can be
seen properly and retaining its screen location. It takes a while
because the method I use to identify and drag column separators is
'pixel colour identification, involving moving the mouse cursor
progressively across the folder. Here's a rough movie clip of the slow
version (untrimmed, so it's a tad longer than the macro):
http://s154.photobucket.com/albums/s...=MacroTest.flv

However ... a minute ago I just tried ProcMon again and it was
displaying a *different* mix, not dominated by Lsass. Yet when I then
immediately ran my macro on an arbitrary folder, it was *still* slow.
So bang goes that working hypothesis!

I'd also thought that slow mode was associated with disk activity.
Because at times, when I wasn't actively doing anything much in any
application, my HD would be running for ages. And I'm pretty sure it
was neither Diskeeper doing its automatic 'smart schedule'
defragmenting, nor SecondCopy doing backups (which sometimes happens
if it didn't do them overnight). However ... that theory also bites
the dust. Because I've just found another neat SysInternals utility,
Disk Monitor, and set it so that it's a tray icon: red for writing,
green for reading, grey for no activity. And as I compose this it's
been grey - yet my macro test still reports 'slow'.


Some of your screenshots have helped. I cannot, however, get much from
those showing I/O bytes etc.

Not surprised, they are a bit heavy on detail!


I'm sure this will turn out to be something obvious - once we find it!
--
Terry, East Grinstead, UK

Terry Pinnell wrote:

I'd also thought that slow mode was associated with disk activity.
Because at times, when I wasn't actively doing anything much in any
application, my HD would be running for ages. And I'm pretty sure it
was neither Diskeeper doing its automatic 'smart schedule'
defragmenting, nor SecondCopy doing backups (which sometimes happens
if it didn't do them overnight). However ... that theory also bites
the dust. Because I've just found another neat SysInternals utility,
Disk Monitor, and set it so that it's a tray icon: red for writing,
green for reading, grey for no activity. And as I compose this it's
been grey - yet my macro test still reports 'slow'.

Gerry,

Please ignore that last point. There seems to be either a bug in
DiskMon or I'm not using it correctly. I got suspicious at seeing only
a grey icon for so long. Turned out have stopped working ;-(
I restarted DiskMon and icon is working again, but I haven't found the
cause of the failure.

So until I discover evidence to the contrary I'm returning to my
tentative assumption that my PC slowness may be associated with HD
activity.

--
Terry, East Grinstead, UK

Terry

Your SENS service problem goes back long before February 2009.
http://www.pcreview.co.uk/forums/thread-3655278.php

What is the router make and model?

What version of Macro Express are you using?

What is the CPU and how much RAM does the computer have? Right click on
the My Computer icon on ther Desktop and select Properties to get this
information.

Try Ctrl+Alt+Delete to select Task Manager and click the Performance
Tab. Under Commit Charge what is the Total, the Limit and the Peak?

http://bertk.mvps.org/html/description.html
http://bertk.mvps.org/html/filesfolders.html

You could send me a HijackThis report by email
) if you feel it might help.
HijackThis
http://www.trendsecure.com/portal/en...ols/hijackthis


--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Terry Pinnell wrote:
"Gerry" wrote:

Terry

I am not sure what the ipconfig result means. It gives the same
address as appear in the DHCP Event Viewer Report.


How many computers are connected to your router? Are you using an
Ethernet Hub or an Ethernet Switch?

Just this one now. (As mentioned, I finally despatched the other to my
shed/workshop, some 15 months after installing this new PC!)

I am using AVG 8.5 Free. I do not think AVG is causing your problem.

Agreed! As you saw, it made no difference here. (But having
uninstalled it I'm now trying the alternative Avira Antivir.)

The SENS service on your computer is not right. The Registry entries
are wrong but I have not yet figured out how to correct them. Event
ID 4356 is occuring because the the service is not starting. The
Registry entries telling the computer to load SENS when booting are
damaged but I have not yet figured out how to correct them.

OK Gerry, all understood and agreed.

My feeling that your slow
performance is related to network and security issues and SENS is
part of the problem.

This is the issue I'm not yet sure about, although I have no
conclusive evidence either way. I was hoping the System Restores I did
(going way back to 10th February at the earliest) would provide some
evidence. But that too is inconclusive because the earliest date in
Event Viewer is 28th Feb. So I don't know whether 4356 and 4343
appeared after the PC boot on 10th Feb (when the slow mode still
occurred). I'm reluctant to do any more SRs, as it was excruciatingly
slow. (BTW, has SR always been like that, i.e. always restoring
\Program Files to the state at the time?)

---------

One aspect that is a bit unsatisfactory is exactly how I'm *measuring*
'performance', to decide whether I am in 'slow' or 'fast' mode. This
has in practice been a mixture of factors, including the subjective
'feel' when things slow down a bit. And that had seemed to me to be
associated with all that Lsass.exe activity of the SECURITY/Policy
type (whatever that is!). But the most important factor, because it
seems to me to be objective and easily applied, is the time it takes
to run my macro. Under 1 second = fast mode, 6 secs = slow mode. To
remind you, the macro (which was written in a program called Macro
Express) is applied to any folder in List view, and changes it to
Detail view, altering column sizes if necessary so that they can be
seen properly and retaining its screen location. It takes a while
because the method I use to identify and drag column separators is
'pixel colour identification, involving moving the mouse cursor
progressively across the folder. Here's a rough movie clip of the slow
version (untrimmed, so it's a tad longer than the macro):
http://s154.photobucket.com/albums/s...=MacroTest.flv

However ... a minute ago I just tried ProcMon again and it was
displaying a *different* mix, not dominated by Lsass. Yet when I then
immediately ran my macro on an arbitrary folder, it was *still* slow.
So bang goes that working hypothesis!

I'd also thought that slow mode was associated with disk activity.
Because at times, when I wasn't actively doing anything much in any
application, my HD would be running for ages. And I'm pretty sure it
was neither Diskeeper doing its automatic 'smart schedule'
defragmenting, nor SecondCopy doing backups (which sometimes happens
if it didn't do them overnight). However ... that theory also bites
the dust. Because I've just found another neat SysInternals utility,
Disk Monitor, and set it so that it's a tray icon: red for writing,
green for reading, grey for no activity. And as I compose this it's
been grey - yet my macro test still reports 'slow'.


Some of your screenshots have helped. I cannot, however, get much
from those showing I/O bytes etc.

Not surprised, they are a bit heavy on detail!


I'm sure this will turn out to be something obvious - once we find it!

Terry Pinnell wrote:

Gerry wrote:

Try HD Tune only gives information and does not fix any
problems.

Download and run it and see what it turns up. You want HD Tune
(freeware) version 2.55 not HD Tune Pro (not Freeware) version 3.00.
http://www.hdtune.com/

Terry Pinnell wrote:

OK, I've installed it. But can you confirm that you're suggesting I
use the SCAN tab, not the default BENCHMARK? My main drive is 750 GB
and I also have another identical one for backups, plus an external
1TB drive. I suspect even the first (C will take a long time, so
I'll do that overnight.

Select the Info tabs and place the cursor on the drive under Drive
letter and then double click the two page icon ( copy to Clipboard )
and copy into a further message.

Select the Health tab and then double click the two page icon ( copy to
Clipboard ) and copy into a further message. Make sure you do a full
surface scan with HD Tune.

What is your motherboard make and model?

CPU is an Intel CoreT 2 Quad Core Q9450 (2.66 GHz, 12 MB cache, 1333
MHz) with PCI-Express Mainboard - SLI nForce 650i SLI(C55)

Meanwhile, before I do any scans, here are the pastes you requested
from the Info & Health tabs respectively. One initial query that's not
directly related to my post is why my two HDs are not running under
UDMA Mode 7. Whatever that is, I assume it's faster?

Any thoughts on that UDMA Mode point please Gerry?

--
Terry, East Grinstead, UK

Terry

Supported mode : UDMA Mode 7 (Ultra ATA/512)
Current mode : UDMA Mode 6 (Ultra ATA/133)

As far as I am aware it is quite common not to achieve the supported
mode. None of my drives do.

Here are two examples.

SATA 2
Supported mode : UDMA Mode 6 (Ultra ATA/133)
Current mode : UDMA Mode 5 (Ultra ATA/100)


SATA 1
Supported mode : UDMA Mode 6 (Ultra ATA/133)
Current mode : UDMA Mode 5 (Ultra ATA/100)

http://en.wikipedia.org/wiki/AT_Attachment
http://www.wisegeek.com/what-is-ultra-ata.htm

I am not sure what causes the difference. The motherboard / BIOS will
cause limitations as will the drive and cabling.

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Terry Pinnell wrote:
Terry Pinnell wrote:

Gerry wrote:

Try HD Tune only gives information and does not fix any
problems.

Download and run it and see what it turns up. You want HD Tune
(freeware) version 2.55 not HD Tune Pro (not Freeware) version
3.00. http://www.hdtune.com/

Terry Pinnell wrote:

OK, I've installed it. But can you confirm that you're suggesting I
use the SCAN tab, not the default BENCHMARK? My main drive is 750 GB
and I also have another identical one for backups, plus an external
1TB drive. I suspect even the first (C will take a long time, so
I'll do that overnight.

Select the Info tabs and place the cursor on the drive under Drive
letter and then double click the two page icon ( copy to
Clipboard ) and copy into a further message.

Select the Health tab and then double click the two page icon (
copy to Clipboard ) and copy into a further message. Make sure you
do a full surface scan with HD Tune.

What is your motherboard make and model?

CPU is an Intel CoreT 2 Quad Core Q9450 (2.66 GHz, 12 MB cache, 1333
MHz) with PCI-Express Mainboard - SLI nForce 650i SLI(C55)

Meanwhile, before I do any scans, here are the pastes you requested
from the Info & Health tabs respectively. One initial query that's
not directly related to my post is why my two HDs are not running
under UDMA Mode 7. Whatever that is, I assume it's faster?

Any thoughts on that UDMA Mode point please Gerry?

"Gerry" wrote:

Terry

Your SENS service problem goes back long before February 2009.
http://www.pcreview.co.uk/forums/thread-3655278.php

What is the router make and model?

What version of Macro Express are you using?

What is the CPU and how much RAM does the computer have? Right click on
the My Computer icon on ther Desktop and select Properties to get this
information.

Try Ctrl+Alt+Delete to select Task Manager and click the Performance
Tab. Under Commit Charge what is the Total, the Limit and the Peak?

http://bertk.mvps.org/html/description.html
http://bertk.mvps.org/html/filesfolders.html

You could send me a HijackThis report by email
) if you feel it might help.
HijackThis
http://www.trendsecure.com/portal/en...ols/hijackthis

Gerry,

Very good news on SENS! I asked last night over in the SysInternals
forum and its moderator 'molotov' this afternoon suggested a registry
import, which happily worked fine. Here's a paste of it for your
records.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SENS]
"DependOnService"=hex(7):45,00,76,00,65,00,6e,00,7 4,00,53,00,79,00,73,00,74,00,\
65,00,6d,00,00,00,00,00
"Description"="Tracks system events such as Windows logon, network,
and power events. Notifies COM+ Event System subscribers of these
events."
"DisplayName"="System Event Notification"
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,6 5,00,6d,00,52,00,6f,00,6f,00,\

74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d ,00,33,00,32,00,5c,00,73,\

00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00 ,78,00,65,00,20,00,2d,00,\
6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73 ,00,00,00
"ObjectName"="LocalSystem"
"Group"="Network"
"Start"=dword:00000002
"Type"=dword:00000020

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SENS\Parameters]
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00, 65,00,6d,00,52,00,6f,00,6f,\

00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00 ,6d,00,33,00,32,00,5c,00,\
73,00,65,00,6e,00,73,00,2e,00,64,00,6c,00,6c,00,00 ,00

And on re-booting I no longer get that cluster of 4356 & 4353 event
errors. So hopefully that's one complex issue out of the way. Of
course, as we still don't know what *caused* its loss, it could
reoccur ... but I'm going to be optimistic on that front ;-)

Unfortunately however it hasn't fixed the 'performance' problem that
prompted this thread. Strictly I should now call that 'my macro
performance' problem. Because as explained in my earlier post, I still
can't be sure this is a widespread performance drop. Any suggestions
on a more global benchmark? Ideally one we could both reproduce
easily. BTW, after the SENS registry update I rebooted and the macro
then ran at full speed. But after a subsequent reboot it's now back to
slow again ;-(

-------------

From My Computer Properties:

Computer:
Intel(R) Core(TM)2 Quad CPU
Q9450 @ 2.66GHz
2.67 GHz, 3.25 GB of RAM
Physical Address Extension

(I have 4 GB installed; gather this is limited because I chose XP not
Vista.)

Router is Prestige 600 Series ('ZyXEL' on front), connected by cable
to my PC. My son installed it for me a few years ago when I got
broadband on my old PC. As mentioned, it used to have another cable
connection to my old PC, removed recently.

I'm using Macro Express 4.0.3.1 (the latest release, out for a few
days). Why, do you have it too? That would be excellent... I also have
version 3 still installed.

Commit Charge (K)
Total 580032
Limit 7418276
Peak 583636

Let me know if you still think a HijackThis report would help.

---------

Another suggestion I had from molotov was to try my macro test in
another User Account. I had to create one and have now done that. The
macro still ran in its 6-second 'slow mode'.


--
Terry, East Grinstead, UK

Terry

That's good news on SENS. I had thought of suggesting an edit of the
Registry but my understanding of the mechanics is limited. Also I was
not sure where to get the import from. Can you post a link to the thread
where you got the advice from Molotov. Can you also post a pic of your
current list of services.

You did not give the RAM figure?

A HijackThis report could be helpful. Perhaps two -one when in slow mode
and one in fast mode?

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~



Terry Pinnell wrote:
"Gerry" wrote:

Terry

Your SENS service problem goes back long before February 2009.
http://www.pcreview.co.uk/forums/thread-3655278.php

What is the router make and model?

What version of Macro Express are you using?

What is the CPU and how much RAM does the computer have? Right click
on the My Computer icon on ther Desktop and select Properties to get
this information.

Try Ctrl+Alt+Delete to select Task Manager and click the Performance
Tab. Under Commit Charge what is the Total, the Limit and the Peak?

http://bertk.mvps.org/html/description.html
http://bertk.mvps.org/html/filesfolders.html

You could send me a HijackThis report by email
) if you feel it might help.
HijackThis
http://www.trendsecure.com/portal/en...ols/hijackthis

Gerry,

Very good news on SENS! I asked last night over in the SysInternals
forum and its moderator 'molotov' this afternoon suggested a registry
import, which happily worked fine. Here's a paste of it for your
records.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SENS]
"DependOnService"=hex(7):45,00,76,00,65,00,6e,00,7 4,00,53,00,79,00,73,00,74,00,\
65,00,6d,00,00,00,00,00
"Description"="Tracks system events such as Windows logon, network,
and power events. Notifies COM+ Event System subscribers of these
events."
"DisplayName"="System Event Notification"
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,6 5,00,6d,00,52,00,6f,00,6f,00,\

74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d ,00,33,00,32,00,5c,00,73,\

00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00 ,78,00,65,00,20,00,2d,00,\
6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73 ,00,00,00
"ObjectName"="LocalSystem"
"Group"="Network"
"Start"=dword:00000002
"Type"=dword:00000020

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SENS\Parameters]
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00, 65,00,6d,00,52,00,6f,00,6f,\

00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00 ,6d,00,33,00,32,00,5c,00,\
73,00,65,00,6e,00,73,00,2e,00,64,00,6c,00,6c,00,00 ,00

And on re-booting I no longer get that cluster of 4356 & 4353 event
errors. So hopefully that's one complex issue out of the way. Of
course, as we still don't know what *caused* its loss, it could
reoccur ... but I'm going to be optimistic on that front ;-)

Unfortunately however it hasn't fixed the 'performance' problem that
prompted this thread. Strictly I should now call that 'my macro
performance' problem. Because as explained in my earlier post, I still
can't be sure this is a widespread performance drop. Any suggestions
on a more global benchmark? Ideally one we could both reproduce
easily. BTW, after the SENS registry update I rebooted and the macro
then ran at full speed. But after a subsequent reboot it's now back to
slow again ;-(

-------------

From My Computer Properties:

Computer:
Intel(R) Core(TM)2 Quad CPU
Q9450 @ 2.66GHz
2.67 GHz, 3.25 GB of RAM
Physical Address Extension

(I have 4 GB installed; gather this is limited because I chose XP not
Vista.)

Router is Prestige 600 Series ('ZyXEL' on front), connected by cable
to my PC. My son installed it for me a few years ago when I got
broadband on my old PC. As mentioned, it used to have another cable
connection to my old PC, removed recently.

I'm using Macro Express 4.0.3.1 (the latest release, out for a few
days). Why, do you have it too? That would be excellent... I also have
version 3 still installed.

Commit Charge (K)
Total 580032
Limit 7418276
Peak 583636

Let me know if you still think a HijackThis report would help.

---------

Another suggestion I had from molotov was to try my macro test in
another User Account. I had to create one and have now done that. The
macro still ran in its 6-second 'slow mode'.

"Gerry" wrote:

Terry

That's good news on SENS. I had thought of suggesting an edit of the
Registry but my understanding of the mechanics is limited. Also I was
not sure where to get the import from. Can you post a link to the thread
where you got the advice from Molotov. Can you also post a pic of your
current list of services.

You did not give the RAM figure?

A HijackThis report could be helpful. Perhaps two -one when in slow mode
and one in fast mode?

OK Gerry, I'll get on the Hijack case tomorrow. I expect I'll have to
swot up on it a bit first ;-)

Your eyes must be as tired as mine! Quote from my last post:

"Computer:
Intel(R) Core(TM)2 Quad CPU
Q9450 @ 2.66GHz
2.67 GHz, 3.25 GB of RAM ----
Physical Address Extension

(I have 4 GB installed; gather this is limited because I chose XP not
Vista.)"

--
Terry, East Grinstead, UK

Sorry Terry I missed that.

What is the computer make and model? Was the computer one of those built
with Vista in mind? If yes did you encounter any problems getting XP
drivers for


--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


Terry Pinnell wrote:
"Gerry" wrote:

Terry

That's good news on SENS. I had thought of suggesting an edit of the
Registry but my understanding of the mechanics is limited. Also I was
not sure where to get the import from. Can you post a link to the
thread where you got the advice from Molotov. Can you also post a
pic of your current list of services.

You did not give the RAM figure?

A HijackThis report could be helpful. Perhaps two -one when in slow
mode and one in fast mode?

OK Gerry, I'll get on the Hijack case tomorrow. I expect I'll have to
swot up on it a bit first ;-)

Your eyes must be as tired as mine! Quote from my last post:

"Computer:
Intel(R) Core(TM)2 Quad CPU
Q9450 @ 2.66GHz
2.67 GHz, 3.25 GB of RAM ----
Physical Address Extension

(I have 4 GB installed; gather this is limited because I chose XP not
Vista.)"

"Gerry" wrote:

Sorry Terry I missed that.

What is the computer make and model? Was the computer one of those built
with Vista in mind? If yes did you encounter any problems getting XP
drivers for

Gerry,

It's a MESH 'GTS XTREME'. XP was an option instead of Vista. Don't
have any info about drivers.

--
Terry, East Grinstead, UK

Terry Pinnell wrote:

"Gerry" wrote:
Can you post a link to the thread where you got the advice from Molotov.

Gerry, Forgot this in my reply last night
http://forum.sysinternals.com/forum_posts.asp?TID=18939

Can you also post a pic of your current list of services.

http://i154.photobucket.com/albums/s...9-SlowMode.jpg

I'm in slow mode at present - which is unhappily the 'norm'. It seems
to take a reboot to stand a chance of getting fast mode (and then
that's typically lasted only briefly), although sometimes it has
switched suddenly. So far all totally unpredictable. So while I've
labelled the list 'SLOW' I still don't think the Services change when
I'm in fast mode. If I ever succeed in catching it quickly enough
again before it reverts to slow, I'll take another comparative
screenshot.

See also my last post in that SysInternals thread. I'll let you know
of my progress on that new macro test.

I'll postpone work on the Hijack front for a while. But I will run
Spybot, Adaware and my new AV program Antivir during today.

--
Terry, East Grinstead, UK

Terry Pinnell wrote:

... So while I've
labelled the list 'SLOW' I still don't think the Services change when
I'm in fast mode. If I ever succeed in catching it quickly enough
again before it reverts to slow, I'll take another comparative
screenshot.

Graham,

Macro test switched to fast mode. Here's the promised Services List.
http://i154.photobucket.com/albums/s...9-FastMode.jpg

At first glance they seem identical. (On reflection I shouldn't have
manually adjusted the columns, so I could then have just compared
their respective byte sizes.)

---------
Spybot just finished: no threats.

Ad-Aware 2008 next.


--
Terry, East Grinstead, UK