Houzz Logo Print
zep516

Nice tool for helpers

16 years ago

A very small program that simply lists the processes that Task Manager lists, including the full path name so you can see what program they are part of. You can easily copy and paste the list into a text file for before/after comparisons, or to email/forum when asking for computer help. You may be surprised at what is running on your computer! Some processes waste a lot of computer resources and make your computer sluggish.

click here To download Lists processes.

Now the user can copy and paste the list to the forum so we can see it..

Comments (65)

  • 16 years ago
    last modified: 9 years ago

    "Why does Explorer exe run?"

    It's part of the Windows operating system. If it's not running, neither will your computer.

  • 16 years ago
    last modified: 9 years ago

    Should I do something with the 'system 32'? I run plenty of various scans. I don't think I have any bugs.

    Any way I can check why there are so many system 32's running?

    Jane

  • Related Discussions

    Small gift for garden helper

    Q

    Comments (11)
    Thanks for the ideas. Unfortunately, cash or gift cert. is not going to work in this situation. You'll just have to trust me that I know what I'm talking about. And I don't think a "teach-y" kind of publication is the ticket either. But it's good to gather these ideas together here because who knows what will be helpful to others in the future. Keep 'em coming! Anyone have a favorite book of essays or (I don't know exactly how to describe it) "mood" or "philosophical" writing (ruminations?) about gardening. You know, something that just meanders around and goes off on tangents but is all connected by the personality of the writer and the general topic of nature/gardens/gardening. Hmm, I just remembered "A Sand County Almanac"...that might be a possibility.
    ...See More

    My little greenhouse with my little helper. (lots pics)

    Q

    Comments (17)
    tkaye - Unfortunately this greenhouse is no longer made. It was made by the PBM-GROUP. The last time they made it was 2003. I got it used and had to replace a third of the glass panels. Check Craigslist for used ones or if you have a Harbor Freight close by they sell greenhouses for a very reasonable price. It is a kit that you put together. Check out the GW Greenhouse Forum. It is a great place to get information on buying and using a greenhouse. Good luck. Clare Here is a link that might be useful: Harbor Freight greenhouse
    ...See More

    cool kitchen/cooking helpers

    Q

    Comments (39)
    Can't say that I saw one item there that intrigued me enough to want to get it. I like to go with multi-function whenever possible. I bought a lot of gadgets when I was starting out on my own but finding I use fewer and fewer as time goes on. People told me I "needed" an electric kettle. But I have a coffeemaker. That replaces an electric kettle and for that matter an instant hot water dispenser. I can wait a couple minutes to get a couple cups of hot water. I bought a ricer but the only time I use it is for making lefse and not always then either. I have a potato masher that does the same job, often better and cleans up much more easily. Don't need special jar openers (though an electric one is interesting...) since I keep a strap wrench on the refrigerator that works pretty much the same.
    ...See More

    A good helper is wonderful

    Q

    Comments (8)
    Our helper not only does an amazing amount of work, he is fast and meticulous and has very high standards. My DH lets the fallen leaves from our many trees and large bushes sit on our very long (about 100 ft) driveway for long periods of time, only raking them to the side a bit, until it starts raining a lot this time of year (we have had 15 inches so far since Dec 1!). Around this time of year he usually puts the already half composted mess into his compost pile. Our helper came yesterday, and my DH asked him to do that. WOW! Our driveway has never been so clean. The entire length of it has been shoveled, raked, and then swept with a broom - all of every bit of anything on it, gone into the compost pile. He even moved all of our pots in order to sweep under them, even the very large ones on the patio. My DH never does that! Also I was pruning a couple of roses I could reach from hardscape (the beds were way too wet to walk on, which is why we asked the helper to work on the driveway), and the helper made sure to put all of my rose clippings into our green recycling cans, without being asked, almost as soon as they hit the ground. I have decided he is a neat freak, in a good way. When I ask him to weed a bed, he never leaves a leaf showing, except plants I want (and he always asks if he is not sure). Jackie
    ...See More
  • 16 years ago
    last modified: 9 years ago

    Jane, System32 is a folder and it contains many needed .dll files. Don't play in that folder as too much stuff is vital to the well being of the computer and your peace of mind.

  • 16 years ago
    last modified: 9 years ago

    Looks like I've done something wrong. I downloaded the program, but when I click on it I get a blank screen except for the word copy at the bottom of the page. Is there an install step that I missed?

  • 16 years ago
    last modified: 9 years ago

    Granniek,

    It is a standalone program that doesn't need to be installed. When you run it, on the top left there should be a box that says "Get List."
    When you click on that, it will scan and then show what processes are running. To get them to your Windows clipboard, you click on the box at the bottom left that says "Copy List."
    Hope this helps.

    Terry

  • 16 years ago
    last modified: 9 years ago

    Thx Terry. I didn't see 'Get List'. Duhhh, just had to scroll up and there it was. I have a couple strange entries I'll google when I have time. What concerns me more is what is NOT listed. I use AVG and there are no listings for it. Windows Defender is there. Should AVG not be running?

  • 16 years ago
    last modified: 9 years ago

    AVG should be running Granniek. I use AVG 8, look above at my entry.

    Pam

  • 16 years ago
    last modified: 9 years ago

    I did see that Pam, that's what made me look a second time at my list. I clicked on AVG and it's been scanning daily. It does tell me the email scanning is not functioning. I'll go to their webpage and see if I'm missing an update.

  • 16 years ago
    last modified: 9 years ago

    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
    C:\Program Files\AVG\AVG8\avgtray.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    C:\Program Files\RocketDock\RocketDock.exe
    C:\Program Files\System Explorer\SystemExplorer.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Users\joe\Downloads\ListProcesses.exe
    C:\Windows\Explorer.EXE
    C:\Windows\RtHDVCpl.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Windows\ehome\ehtray.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskeng.exe

    There is mine from Vista, I only have 1 Avg entry and I know my e-mail scanner is working, On mine I don't see all the System 32 files:

    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\winlogon.exe

    It seems like I should see some of these above..
    Why is windows Media player running no clue.
    jusched.exe and the java update is running again??????

    I really did expect to see all 3 avg files like in Janes list not sure why and I know there all running

  • 16 years ago
    last modified: 9 years ago

    All right here's my list.

    :\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\PeoplePC Accelerated\PeoplePC.exe
    C:\Program Files\PeoplePC\ISP6400\Browser\Bartshel.exe
    C:\Program Files\PeoplePC\ISP6400\Browser\Bartshel.exe
    C:\Program Files\PeoplePC\ISP6400\Browser\PPShared.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Synaptics\SynTP\SynToshiba.exe
    C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe
    C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
    C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
    C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
    C:\Program Files\Toshiba\SmoothView\SmoothView.exe
    C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\Windows Media Player\WMPNSCFG.exe
    C:\Program Files\ltmoh\ltmoh.exe
    C:\Toshiba\IVP\ISM\ivpsvmgr.exe
    C:\Windows\Explorer.EXE
    C:\Windows\RtHDVCpl.exe
    C:\Windows\System32\hkcmd.exe
    C:\Windows\System32\igfxpers.exe
    C:\Windows\System32\igfxtray.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Windows\ehome\ehtray.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\wuauclt.exe

  • 16 years ago
    last modified: 9 years ago

    I was going to say what's the difference between this and Process Viewer on Win2k, or the Process Explorer I put on my WinMe, but I see it is SOOOOO much easier to copy and paste. Perfect for copying and pasting into the forum.

    I know every process running on my WinMe pc, but Win2k is relatively knew for me. I did research and kill some processes at start up, but some seem ambiguous to me as I found both yes and no recommendations on the web. If you see anything here that I can delete from start up, I'd be much obliged.

    My brother put the Norton/Symantec on the pc before he gave it to me (Grrrh), and I guess you can see why it is such a resource hog - look at all those entries!

    C:\Documents and Settings\Rick\Desktop\Utilities and Apps\ListPorcesses\ListProcesses.exe
    C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
    C:\Program Files\CFAITH Online 3.0\Netsurf.exe
    C:\Program Files\Common Files\Symantec Shared\SymTray.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
    C:\Program Files\Microsoft IntelliPoint\ipoint.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartService.exe
    C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
    C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
    C:\Program Files\Sygate\SPF\smc.exe
    C:\Program Files\UPHClean\uphclean.exe
    C:\WINNT\Explorer.EXE
    C:\WINNT\System32\WBEM\WinMgmt.exe
    C:\WINNT\System32\nvsvc32.exe
    C:\WINNT\System32\svchost.exe
    C:\WINNT\System32\svchost.exe
    C:\WINNT\system32\MSTask.exe
    C:\WINNT\system32\MsPMSPSv.exe
    C:\WINNT\system32\RUNDLL32.EXE
    C:\WINNT\system32\lsass.exe
    C:\WINNT\system32\regsvc.exe
    C:\WINNT\system32\services.exe
    C:\WINNT\system32\spoolsv.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\system32\winlogon.exe
    \SystemRoot\System32\smss.exe

  • 16 years ago
    last modified: 9 years ago

    C:\WINNT ----Yes that tells us it's windows 2000, and it looks like you had firefox open when you ran it (C:\Program Files\Mozilla Firefox\firefox.exe)

    You have 2 Norton programs, the Anti Virus and Norton Ghost, as long as the computer runs ok Nothing wrong with norton.

    The log above yours look at all the stuff Toshiba adds. And that is a Vista Machine I think.

  • 16 years ago
    last modified: 9 years ago

    but some seem ambiguous to me.

    Which ones?

  • 16 years ago
    last modified: 9 years ago

    That's really fast. Does this look right? It says IE5 but I know I'm using IE6--or is this something different, because its in the AVG program?

    C:\Documents and Settings\Owner\Local Settings\Temporary Internet
    C:\PROGRA~1\AVG\AVG8\avgemc.exeFiles\Content.IE5\81QJ492J\ListProcesses[1].exe
    C:\PROGRA~1\AVG\AVG8\avgrsx.exe
    C:\PROGRA~1\AVG\AVG8\avgtray.exe
    C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe
    C:\Program Files\BigFix\BigFix.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\WINDOWS\system32\VTTimer.exe
    C:\WINDOWS\system32\VTtrayp.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\winlogon.exe
    \SystemRoot\System32\smss.exe

  • 16 years ago
    last modified: 9 years ago

    no that IE5content is not indicative to your current browser we all have that IEcontent somewhere. You can definitely have IE 6 browser and still see that. Looks fine

  • 16 years ago
    last modified: 9 years ago

    Thank you.

  • 16 years ago
    last modified: 9 years ago

    Hi Zep, yes, my Toshiba runs Vista Premium. My question is the duplicate file.....can that be removed? Both PeoplePC(my server) files.

  • 16 years ago
    last modified: 9 years ago

    Here is my list does everything look ok.
    C:\Documents and Settings\Gillian\Desktop\ListProcesses.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
    C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
    C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe
    C:\Program Files\Sony\VAIO Zone Remote Commander\AvRmtCtr.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\agrsmsvc.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\hphmon05.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\winlogon.exe
    \SystemRoot\System32\smss.exe

  • 16 years ago
    last modified: 9 years ago

    C:\Program Files\PeoplePC\ISP6400\Browser\Bartshel.exe
    C:\Program Files\PeoplePC\ISP6400\Browser\Bartshel.exe

    Hi granniek, Not sure why those are duplicates like that but I wouldn't remove it sometimes if you reboot and run the scan (with no other windows open) it may not show like that.

    Don't forget to use google to look them up some information can usually be found on the file (Bartshel.exe) this one tells me you are on a dial up connection? As long as no errors occur associated with the file leave them.

    Gillian is that a sony laptop? looks good I would leave everthing as is.

  • 16 years ago
    last modified: 9 years ago

    No Zep its a desktop Sony Vaio 3yrs old.
    Thank for for checking my list.
    Gillian.

  • 16 years ago
    last modified: 9 years ago

    C:\Documents and Settings\Sallie.CASS-C67359357A\Desktop\ListProcesses.exe
    C:\PROGRA~1\AVG\AVG8\avgemc.exe
    C:\PROGRA~1\AVG\AVG8\avgrsx.exe
    C:\PROGRA~1\AVG\AVG8\avgtray.exe
    C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
    C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\WINXP\Explorer.EXE
    C:\WINXP\System32\dmadmin.exe
    C:\WINXP\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
    C:\WINXP\System32\svchost.exe
    C:\WINXP\system32\cidaemon.exe
    C:\WINXP\system32\cisvc.exe
    C:\WINXP\system32\clipsrv.exe
    C:\WINXP\system32\dllhost.exe
    C:\WINXP\system32\lsass.exe
    C:\WINXP\system32\netdde.exe
    C:\WINXP\system32\pctspk.exe
    C:\WINXP\system32\services.exe
    C:\WINXP\system32\spoolsv.exe
    C:\WINXP\system32\svchost.exe
    C:\WINXP\system32\svchost.exe
    C:\WINXP\system32\winlogon.exe
    C:\WINXP\system32\wuauclt.exe
    \SystemRoot\System32\smss.exe
    this is mine. Is it all ok?
    salbwil

  • 16 years ago
    last modified: 9 years ago

    It's all ok you have a few different programs but they appear ligit.

    You can google these to get an Idea of what they are if you care to. There all legit files
    netdde.exe
    pctspk.exe
    cidaemon.exe

    C:\WINXP\System32\svchost.exe (Everyone usually has several of these running and it's ok)

    SUPERAntiSpyware.exe That does not have to run at start up unless it is the paid version, but I would not worry about it so much.

    It's good to get an Idea of what is running on the pc and check it once in a while as you look at a few times you become familiar with it and then you will be able to notice anything different as you go back and check..

  • 16 years ago
    last modified: 9 years ago

    salbwil have you noticed by any chance that your computer is slow or that it seems to using 100% cpu usage? You have a search indexer, cidaemon.exe running and it has been known to cause some problems including using 100% cpu. This is a link to a microsoft bulletin about that.
    Cidaemon.exe
    If you are not having problems with it that is good but just keep this in mind should you start to experience it. It can become corrupt and start causing problems. As the article points out you can turn it off.
    Also part of the same indexing service is cisvc.exe which can also go wacky and start causing 100% cpu usage.

    Other than that you look fine, just keep that in mind and if you suddenly notice your cpu usage jump look and see if it is those processes hogging it if so you can follow the MS bulletin and disable it.
    To see your cpu usage and what is using it just do a control+alt+delete to bring up your task manager, and view processes.

  • 16 years ago
    last modified: 9 years ago

    Thank you,
    salbwil

  • 16 years ago
    last modified: 9 years ago

    Thanks raven always good to have extra eyes, I had not noticed that cidaemon.exe

    zep

  • 16 years ago
    last modified: 9 years ago

    Hi,

    I'm having trouble with my laptop. Below is the list. Please take a look and let me know if all is good. Thank you.

    C:\Documents and Settings\user\Desktop\ListProcesses.exe
    C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
    C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
    C:\Program Files\BroadJump\Client Foundation\CFD.exe
    C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
    C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
    C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
    C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
    C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
    C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
    C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
    C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
    C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
    C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
    C:\Program Files\Toshiba\Tvs\TvsTray.exe
    C:\Program Files\Windows Desktop Search\WindowsSearch.exe
    C:\Program Files\Windows Desktop Search\WindowsSearchIndexer.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\RTHDCPL.EXE
    C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\DVDRAMSV.exe
    C:\WINDOWS\system32\RAMASST.exe
    C:\WINDOWS\system32\TPSBattM.exe
    C:\WINDOWS\system32\TPSMain.exe
    C:\WINDOWS\system32\acs.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\winlogon.exe
    \SystemRoot\System32\smss.exe
    c:\TOSHIBA\IVP\swupdate\swupdtmr.exe

  • 16 years ago
    last modified: 9 years ago

    Please describe the problem..

  • 16 years ago
    last modified: 9 years ago

    Sorry I didn't mention that....web pages are very slow to open sometimes. I'm using a cable high speed internet, through a router. I'm losing the internet connection, sometimes. This trouble has been getting gradually worse over the past couple of months. And now it's very annoying!

    Does this help? I'm not good at explaining! I used to be able to turn this laptop on and had no hesitation or issues. I would like those days back!!!

  • 16 years ago
    last modified: 9 years ago

    Lets scan for malware take your time and follow these instructions,

    You also have a lot running that can be turned off we can get to that, do this first.

    Please download Malwarebytes' Anti-Malware to your desktop. Click here
    * Double-click mbam-setup.exe and follow the prompts to install the program.
    * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    * If an update is found, it will download and install the latest version.
    * Once the program has loaded, select Perform full scan, then click Scan.
    * When the scan is complete, click OK, then Show Results to view the results.
    * Be sure that everything is checked, and click Remove Selected.
    The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
    The log can also be found here: C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt

    Â Copy and Paste the entire report in your next reply.
    Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.

  • 16 years ago
    last modified: 9 years ago

    Then run this program take your time..

    Download ATF Cleaner by Atribune to your Desktop.


    Note: Vista users must use Run As Administrator
    Under Main: Select Files to Delete choose: Select All.
    Click the Empty Selected button.
    If you use Firefox browser click Firefox at the top and choose: Select All
    Click the Empty Selected button.
    If you would like to keep your saved passwords click No at the prompt.
    If you use Opera browser click Opera at the top and choose: Select All
    Click the Empty Selected button.
    If you would like to keep your saved passwords click No at the prompt.
    Click Exit on the Main menu to close the program.

  • 16 years ago
    last modified: 9 years ago

    "Copy and Paste the entire report in your next reply", I'm hoping this is the report you wanted, after the remove selected was done after the full scan.

    Malwarebytes' Anti-Malware 1.32
    Database version: 1616
    Windows 5.1.2600 Service Pack 3

    1/11/2009 7:34:22 PM
    mbam-log-2009-01-11 (19-34-22).txt

    Scan type: Full Scan (C:\:)
    Objects scanned: 123759
    Time elapsed: 48 minute(s), 28 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 23
    Registry Values Infected: 1
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 2

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    HKEY_CLASSES_ROOT\Interface\"2e9937fc-cf2f-4f56-af54-5a6a3dd375cc> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\"741de825-a6f0-4497-9aa6-8023cf9b0fff> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\"cf54be1c-9359-4395-8533-1657cf209cfe> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\"147a976f-eee1-4377-8ea7-4716e4cdd239> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Typelib\"d518921a-4a03-425e-9873-b9a71756821e> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\"b64f4a7c-97c9-11da-8bde-f66bad1e3f3a> (Rogue.WinAntivirus) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\"07b18ea9-a523-4961-b6bb-170de4475cca> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\"07b18ea1-a523-4961-b6bb-170de4475cca> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\"07b18eab-a523-4961-b6bb-170de4475cca> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\"25560540-9571-4d7b-9389-0f166788785a> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\"3dc201fb-e9c9-499c-a11f-23c360d7c3f8> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\"9ff05104-b030-46fc-94b8-81276e4e27df> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\"00a6faf1-072e-44cf-8957-5838f569a31d> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\"56256a51-b582-467e-b8d4-7786eda79ae0> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\"56256a51-b582-467e-b8d4-7786eda79ae0> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\"59c7fc09-1c83-4648-b3e6-003d2bbc7481> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\"68af847f-6e91-45dd-9b68-d6a12c30e5d7> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\"9170b96c-28d4-4626-8358-27e6caeef907> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\"d1a71fa0-ff48-48dd-9b6d-7a13a3e42127> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\"ddb1968e-ead6-40fd-8dae-ff14757f60c7> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\"f138d901-86f0-4383-99b6-9cdd406036da> (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWay) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.

  • 16 years ago
    last modified: 9 years ago

    Adware.MyWebSearch) Glad that is gone..

    Right click the MY Computer Icon on the desktop or in the start menu CHOOSE PROPERTIES now tell me how much RAM is listed.

    Is the pc running any better?

  • 16 years ago
    last modified: 9 years ago

    Zep,

    Yes the pc seems to be better. The RAM is 448.

  • 16 years ago
    last modified: 9 years ago

    You need to add more ram to this and bring it up to 1 gig a byte at least of installed ram because of all the Toshiba stuff running:

    C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
    C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
    C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
    C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
    C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
    C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
    C:\WINDOWS\system32\TPSBattM.exe
    C:\WINDOWS\system32\TPSMain.exe
    C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
    c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
    C:\Program Files\Toshiba\Tvs\TvsTray.exe

    And Norton Antivirus:

    C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

    Adding more ram is the most cost effective way to increase the performance of the computer.

    Go to (crucial.com) and it will scan your computer and tell what kind of ram to get or take it to a shop you will very surprised of the results from simply adding more.

  • 16 years ago
    last modified: 9 years ago

    Scan for ram at the link this will tell you what kind of ram.

    Ask if you have questions.

  • 16 years ago
    last modified: 9 years ago

    Here is what Mine showed...

    C:\Acer\Empowering Technology\eRecovery\Monitor.exe
    C:\PROGRA~1\AVG\AVG8\avgemc.exe
    C:\PROGRA~1\AVG\AVG8\avgrsx.exe
    C:\PROGRA~1\AVG\AVG8\avgtray.exe
    C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe
    C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Java\jre6\bin\java.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\Program Files\Secunia\PSI\psi.exe
    C:\Program Files\Weather Watcher\ww.exe
    C:\Program Files\Wireless 802.11g USB Adapter\ZDWlan.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\WINDOWS\ehome\ehtray.exe
    C:\WINDOWS\system32\HPZipm12.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\winlogon.exe
    E:\new download\ListProcesses.exe
    \SystemRoot\System32\smss.exe

  • 16 years ago
    last modified: 9 years ago

    This is my list

    C:\Documents and Settings\Elaine\Desktop\ListProcesses.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Active Desktop Calendar\ADC.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\Program Files\FireTrust\MailWasher Pro\MailWasher.exe
    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Orbitdownloader\orbitdm.exe
    C:\Program Files\Orbitdownloader\orbitnet.exe
    C:\Program Files\Outlook Express\msimn.exe
    C:\Program Files\Pando Networks\Pando\pando.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\Skype\Plugin Manager\skypePM.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\WINDOWS\ehome\ehtray.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\winlogon.exe
    \SystemRoot\System32\smss.exe

    Elaine

  • 16 years ago
    last modified: 9 years ago

    both look good,
    Elaine,
    you should update java soon from sun java the current version is 1.6 update 11.

    here is how:

    Udating Java


    1Download the latest version of Java from:
    Click Here
    2 Scroll down to where it says " Java SE Runtime Environment (JRE) 6 Update 11
    allows end-users to run Java applications".

    3 Click the "Download" button to the right.
    4 Check the box that says: "Accept License Agreement".
    The page will refresh.
    5 Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
    6 Close any programs you may have running - especially your web browser.
    7 Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
    8 Check any item with Java Runtime Environment (JRE or J2SE) in the name.
    - Examples of older versions in Add or Remove Programs:
    Java 2 Runtime Environment, SE v1.4.2
    J2SE Runtime Environment 5.0
    J2SE Runtime Environment 5.0 Update 6
    J2SE Runtime Environment 6.0 Update 6
    Repeat as many times as necessary to remove each Java versions.
    Reboot your computer once all Java components are removed.
    Then from your desktop double-click on jre-6u11-windows-i586-p.exe to install the newest version.

    As with any download take your time pay attention and make sure you only get what you download java in this case.

    Sometimes it wants to install open office along with it.

  • 16 years ago
    last modified: 9 years ago

    Zep, Thank you very much for your help. Other than the ram, I'm assuming the remainder of the computer is ok?

  • 16 years ago
    last modified: 9 years ago

    "I'm losing the internet connection, sometimes, web pages are very slow to open sometimes.

    If the above problems are gone your ok, Mywebsearch relates to all those problems.

    If you wanted to double check post a hijackthis log I'll look at.

    Download hijackthis to your desktop,double click the hijackthis Icon, do a (system scan and save a log file), post the log in your next reply.

    The hijacklog will auto open in Note Pad, copy the entire contents and paste it into a reply.

  • 16 years ago
    last modified: 9 years ago

    Thank you Zep - I followed your instructions and after rebooting, went back to Add/Remove and it now says I have Java 6 update 11. I appreciate your taking the time to help all of us.

    Elaine

  • 16 years ago
    last modified: 9 years ago

    Your very welcome Elaine, as the instructions say remove any old versions.

    And Happy surfing..

  • 16 years ago
    last modified: 9 years ago

    The hijacklog will auto open in Note Pad, copy the entire contents and paste it into a reply.

    Here it is:

    Logfile of Trend Micro HijackThis v2.0.
    Scan saved at 3:05:40 PM, on 1/12/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16762)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\acs.exe
    C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
    C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
    C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    C:\WINDOWS\system32\DVDRAMSV.exe
    C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
    C:\WINDOWS\system32\svchost.exe
    c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
    C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
    C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
    C:\Program Files\Toshiba\Tvs\TvsTray.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
    C:\WINDOWS\system32\TPSMain.exe
    C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
    C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
    C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
    C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
    C:\Program Files\BroadJump\Client Foundation\CFD.exe
    C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\TPSBattM.exe
    C:\WINDOWS\system32\RAMASST.exe
    C:\Program Files\Windows Desktop Search\WindowsSearch.exe
    C:\Program Files\Windows Desktop Search\WindowsSearchIndexer.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.toshiba.com/search
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = sympatico.ca
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R3 - URLSearchHook: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\yt.dll
    O2 - BHO: &Yahoo! Toolbar Helper - (02478D38-C3F9-4EFB-9B51-7695ECA05670) - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: dsWebAllowBHO Class - (2F85D76C-0569-466F-A488-493E6BD0E955) - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
    O2 - BHO: Yahoo! IE Services Button - (5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897) - C:\Program Files\Yahoo!\Common\yiesrvc.dll
    O2 - BHO: (no name) - (5C255C8A-E604-49b4-9D64-90988571CECB) - (no file)
    O2 - BHO: DriveLetterAccess - (5CA3D70E-1895-11CF-8E15-001234567890) - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
    O2 - BHO: NCO 2.0 IE BHO - (602ADB0E-4AFF-4217-8AA1-95DAC4DFA408) - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coIEPlg.dll
    O2 - BHO: Symantec Intrusion Prevention - (6D53EC84-6AAE-4787-AEEE-F4628F01010C) - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
    O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: NOW!Imaging - (9AA2F14F-E956-44B8-8694-A5B615CDF341) - C:\Program Files\Netscape Accelerator\components\NOWImaging.dll (file missing)
    O3 - Toolbar: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\yt.dll
    O3 - Toolbar: Show Norton Toolbar - (7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA) - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [SynTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
    O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
    O4 - HKLM\..\Run: [THotkey] "C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe"
    O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
    O4 - HKLM\..\Run: [Tvs] "C:\Program Files\Toshiba\Tvs\TvsTray.exe"
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
    O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
    O4 - HKLM\..\Run: [PadTouch] "C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe"
    O4 - HKLM\..\Run: [SmoothView] "C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe"
    O4 - HKLM\..\Run: [Pinger] "c:\toshiba\ivp\ism\pinger.exe" /run
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
    O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
    O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
    O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
    O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
    O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton 360\osCheck.exe"
    O4 - HKCU\..\Run: [TOSCDSPD] "C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
    O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
    O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
    O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
    O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
    O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra button: Yahoo! Services - (5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897) - C:\Program Files\Yahoo!\Common\yiesrvc.dll
    O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Real.com - (CD67F990-D8E9-11d2-98FE-00C0F0318AFE) - C:\WINDOWS\system32\Shdocvw.dll
    O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.toshibadirect.com/dpdstart
    O16 - DPF: (0006F063-0000-0000-C000-000000000046) (Microsoft Outlook View Control) - http://activex.microsoft.com/activex/controls/office/outlctlx.CAB
    O16 - DPF: (00B71CFB-6864-4346-A978-C0A14556272C) (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: (14B87622-7E19-4EA8-93B3-97215F77A6BC) (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: (2917297F-F02B-4B9D-81DF-494B6333150B) (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
    O16 - DPF: (5D6F45B3-9043-443D-A792-115447494D24) (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab
    O16 - DPF: (8E0D4DE5-3180-4024-A327-4DFAD1796A8D) (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: (97E71027-0BA2-44F2-97DB-F84D808ED0B6) (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab55762.cab
    O16 - DPF: (B8BE5E93-A60C-4D26-A2DC-220313175592) (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab55579.cab
    O16 - DPF: (C3F79A2B-B9B4-4A66-B012-3EE46475B072) (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: (F5A7706B-B9C0-4C89-A715-7A0C6B05DD48) (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
    O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe
    O23 - Service: Adobe Active File Monitor V5 (AdobeActiveFileMonitor5.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
    O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
    O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
    O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
    O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: Swupdtmr - Unknown owner - c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
    O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
    O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

    --
    End of file - 12090 bytes

  • 16 years ago
    last modified: 9 years ago

    Close all browser windows including this one open hijackthis only, do a (system scan only) place a check mark in the following entries only and no others:

    O2 - BHO: (no name) - (5C255C8A-E604-49b4-9D64-90988571CECB) - (no file)
    (Description: A hidden or missing adware entry.)

    O2 - BHO: NOW!Imaging - (9AA2F14F-E956-44B8-8694-A5B615CDF341) - C:\Program Files\Netscape Accelerator\components\NOWImaging.dll (file missing)
    (Description: File of this BHO is missing -- probably a remnant of adware or spyware. OK to remove this entry.)

    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    (Description: Realtek AC97 Audio - Event Monitor. "Sypware" file used surreptitiously monitor one's actions. It is not a sinister one, like remote control programs, but it is being used by Realtek to gather data about customers )

    The following are not necessarily spyware/malware, but we suggest you place a check mark next to the following entries, as these programs may be taking up system resources.

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] \"C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe\"
    (Description: Adobe reader startup - unnecessarily uses system resources.)

    Now click (fixed checked), close hijackthis.

    2) Search for and delete the file ALCMTR.EXE you may or may not find it.

    3) Empty your recycle bin.

    4) Run Windows Update and install all critical updates.

    5) Make sure your anti-virus program is up to date with the latest patches.

    6) Reboot one last time. Your PC should now be free from spyware!

    We suggest that you run HijackThis again, just to make sure that none of the entries that you removed suddenly reappeared. If they haven't, print out our HijackThis log and put it somewhere safe. You can refer to it later if your PC starts acting up.

    Best to print this out so you can refer to it as you follow the instructions or bring this screen up on another pc if you have 1.

  • 16 years ago
    last modified: 9 years ago

    I do have access to another computer and printer so I'll print your list out, just won't happen tonight as the teenager in the house is using that one. If I try to pry her away, it's just not a wonderful scene!!!

    The first chance I have tomorrow after errands, I'll do the tasks.

    I would like to take this opportunity to thank you very much for this wonderful assistance. I hope others may try some of the links you have posted.

  • 16 years ago
    last modified: 9 years ago

    Good decision you want to take you time when using that program and do it correctly.

    Uninstall hijackthis when you finish.

    Never use the program unassisted if I see something in it I can't handle I direct the user to another forum.

  • 16 years ago
    last modified: 9 years ago

    zep516: Whew! I did all the steps above that you suggested. Once again, thank you very much. The computer is running much better. I still have to add ram, and this will be done very soon.

  • 16 years ago
    last modified: 9 years ago

    Great,

    I will not be answering any more questions here it has gone beyond what the original topic was.

    If there is a question about any entries start a new topic.

    I was certainly glad to help, but feel it is gone beyond the scope of the forum.

    Thanks,

    zep516

  • 16 years ago
    last modified: 9 years ago

    What a great idea! My comp. has been 'slagging' for a while now. Can someone find anything with this list:

    C:\Documents and Settings\HP_Owner\Local Settings\Temporary Internet
    C:\HP\KBD\KBD.EXEFiles\Content.IE5\4UVC5CM1\ListProcesses[1].exe
    C:\PROGRA~1\Ahead\Ahead\data\Xtras\mssysmgr.exe
    C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
    C:\PROGRA~1\Yahoo!\browser\ycommon.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
    C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Hewlett-Packard\HP PrecisionScan\PrecisionScan Pro\hplamp.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
    C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
    C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
    C:\Program Files\Network Associates\VirusScan\Mcshield.exe
    C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
    C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
    C:\Program Files\Winamp\winampa.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\WINDOWS\ALCMTR.EXE
    C:\WINDOWS\ALCWZRD.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\explorer.exe
    C:\WINDOWS\system32\MsPMSPSv.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\hphmon06.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\windows\system\hpsysdrv.exe
    \SystemRoot\System32\smss.exe
    c:\Program Files\Common Files\LightScribe\LSSrvc.exe

  • 16 years ago
    last modified: 9 years ago

    Ok I work on this a bit, later.

    Open My computer from the desktop or start menu, click properties tell me how much ram is installed,

    Then open my computer hold the mouse over local disk a window will pop up please provide that information about disc space.

    Thank you

Sponsored
Best of Houzz 2025: The results are in!