Win XPSpybot start up log, could you check to see if I can uncheck anything Also ther

35 entries on my PC wouldn't be a problem. Your CPU seems okay. Just that the RAM that is in your PC is a "potential" for the slowdown.

The recommended minimum amount of RAM installed in the Windows Operating System is 512MB. Half of that might be problem... if you're running a lot of processes (just my guess).

Do you mind if you explain a little more on the "hog"? Like how is your computer slowing down?

Have you cleared the cache, and cookies from your browsers? How about the temp. files on the computer? Will a disk defragment do?
 
If you did disable anything from startup,could you post a startup log,so I can check to see that nothing needed was disabled.Thanks.
 
As far as the cp running slow when I turn it on I get to the screen to choose which user in under a min which is fine, when I select mine my desk top pops right up along with the icons but if I click on IE it takes forever to get to my homepage, 4 to 5 min sometimes before I can get going, it seems that my cp is trying to download updates or at least check for them evrytime and avg is also trying to update, could that be it? thanks



--- Spybot - Search & Destroy version: 1.6.0 (build: 20080707) ---

2008-07-07 blindman.exe (1.0.0.8)
2008-07-07 SDFiles.exe (1.6.0.4)
2008-07-07 SDMain.exe (1.0.0.6)
2008-07-07 SDShred.exe (1.0.2.3)
2008-07-07 SDUpdate.exe (1.6.0.8)
2008-07-07 SDWinSec.exe (1.0.0.12)
2008-07-07 SpybotSD.exe (1.6.0.30)
2008-08-18 TeaTimer.exe (1.6.2.23)
2008-08-12 unins000.exe (51.49.0.0)
2008-07-07 Update.exe (1.6.0.7)
2008-07-07 advcheck.dll (1.6.1.12)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2008-07-07 SDHelper.dll (1.6.0.12)
2008-06-19 sqlite3.dll
2008-07-07 Tools.dll (2.1.5.7)
2008-08-05 Includes\Adware.sbi
2008-08-19 Includes\AdwareC.sbi
2008-06-03 Includes\Cookies.sbi
2008-06-03 Includes\Dialer.sbi
2008-08-05 Includes\DialerC.sbi
2008-07-23 Includes\HeavyDuty.sbi
2008-08-19 Includes\Hijackers.sbi
2008-08-19 Includes\HijackersC.sbi
2008-08-05 Includes\Keyloggers.sbi
2008-08-12 Includes\KeyloggersC.sbi
2004-11-29 Includes\LSP.sbi
2008-08-20 Includes\Malware.sbi
2008-08-19 Includes\MalwareC.sbi
2008-08-05 Includes\PUPS.sbi
2008-08-19 Includes\PUPSC.sbi
2007-11-07 Includes\Revision.sbi
2008-06-18 Includes\Security.sbi
2008-08-19 Includes\SecurityC.sbi
2008-06-03 Includes\Spybots.sbi
2008-06-03 Includes\SpybotsC.sbi
2008-08-12 Includes\Spyware.sbi
2008-08-12 Includes\SpywareC.sbi
2008-06-03 Includes\Tracks.uti
2008-08-05 Includes\Trojans.sbi
2008-08-20 Includes\TrojansC.sbi
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll

Located: HK_LM:Run, AVG8_TRAY
command: C:\PROGRA~1\AVG\AVG8\avgtray.exe
file: C:\PROGRA~1\AVG\AVG8\avgtray.exe
size: 1232152
MD5: 348A781AEF0870A56549F53BB37A233A

Located: HK_LM:Run, IgfxTray
command: C:\WINDOWS\system32\igfxtray.exe
file: C:\WINDOWS\system32\igfxtray.exe
size: 155648
MD5: 093D3EE722542BA2E7AD929AA3CA6ABC

Located: HK_LM:Run, PCTVOICE (DISABLED)
command: pctspk.exe
file: C:\WINDOWS\system32\pctspk.exe
size: 163840
MD5: 0B86BC4C123D3CD08817B1848DB07AC6

Located: HK_LM:Run, PD0620 STISvc
command: RunDLL32.exe P0620Pin.dll,RunDLL32EP 513
file: C:\WINDOWS\system32\P0620Pin.dll
size: 36864
MD5: 64780CE5DC0815647A1167E5CCD034A9

Located: HK_LM:Run, SynTPLpr
command: C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
file: C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
size: 110592
MD5: B437E814DC6AA842C482F64D9D2AFA1C

Located: HK_LM:Run, WlanUtilAB
command: C:\Program Files\LanExpress\WirelessAS\Utility\Wlan11ag.exe -hide
file: C:\Program Files\LanExpress\WirelessAS\Utility\Wlan11ag.exe
size: 454656
MD5: 917220C599A012018BEC929DBDC0F184

Located: HK_LM:Run, Adobe Reader Speed Launcher (DISABLED)
command: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
file: C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
size: 39792
MD5: 8B9145D229D4E89D15ACB820D4A3A90F

Located: HK_LM:Run, HotKeysCmds (DISABLED)
command: C:\WINDOWS\system32\hkcmd.exe
file: C:\WINDOWS\system32\hkcmd.exe
size: 126976
MD5: E4CF942A4AEA9D27C87F190F65E7D0F6

Located: HK_LM:Run, SynTPEnh (DISABLED)
command: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
file: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
size: 610304
MD5: 634DC62870B9E0C6C6AE25A75AC9895A

Located: HK_CU:Run, ctfmon.exe
where: PE_C_DONNA...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 24232996A38C0B0CF151C2140AE29FC8

Located: HK_CU:Run, MSMSGS
where: PE_C_DONNA...
command: "C:\Program Files\Messenger\msmsgs.exe" /background
file: C:\Program Files\Messenger\msmsgs.exe
size: 1694208
MD5: 74E6E96C6F0E2ECA4EDBB7F7A468F259

Located: HK_CU:Run, SpybotSD TeaTimer
where: PE_C_DONNA...
command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 1832272
MD5: FFB5BAC9C29303904365640A2E2A6D0C

Located: HK_CU:Run, Yahoo! Pager
where: PE_C_DONNA...
command: C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
file: C:\Program Files\Yahoo!\Messenger\ypager.exe
size: 2502656
MD5: C4F15909D8EACBFD7AB5EF8BC992D735

Located: HK_CU:Run, ctfmon.exe
where: S-1-5-21-789336058-764733703-1060284298-1004...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 24232996A38C0B0CF151C2140AE29FC8

Located: HK_CU:Run, SpybotSD TeaTimer
where: S-1-5-21-789336058-764733703-1060284298-1004...
command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 1832272
MD5: FFB5BAC9C29303904365640A2E2A6D0C

Located: HK_CU:Run, Creative WebCam Tray (DISABLED)
where: S-1-5-21-789336058-764733703-1060284298-1004...
command: "C:\Program Files\Creative\Shared Files\CamTray.exe"
file: C:\Program Files\Creative\Shared Files\CamTray.exe
size: 258048
MD5: 3C1F1E471308E688C51B2184FD6E3ABD

Located: WinLogon, crypt32chain
command: crypt32.dll
file: crypt32.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cryptnet
command: cryptnet.dll
file: cryptnet.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cscdll
command: cscdll.dll
file: cscdll.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, GoToAssist
command: C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll
file: C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll
size: 10792
MD5: 3D6FD4FFDE6DE32C34DC280D0BE781C2

Located: WinLogon, igfxcui
command: igfxsrvc.dll
file: igfxsrvc.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, Schedule
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, SensLogn
command: WlNotify.dll
file: WlNotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, termsrv
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, wlballoon
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
 
Okay,everything you disabled looks fine. :)

drragostea said:
The recommended minimum amount of RAM installed in the Windows Operating System is 512MB. Half of that might be problem
Click to expand...
I agree,more RAM might be better.

Have you experienced the slowdown since downloading/upgrading to AVG 8,or was the problem there before?
 
I believe it was there before, should I set teh update check for windows to once a week instead of daily? avg 8 does not have many options and if I set it so I check in manualy the icon in the tray is always it a problem state.
 
Check updates for what? AVG or Windows Update?

If you're talking about the AVG 8.0 icon in the taskbar (place next to the clock) then it is normal.
 
the icon in the task bar is for avg, avg and windows both update daily should I change that? So when ever I turn my cp on for the first time they are both trying to search for updates, could that be slowing things down?

Should I install hijackthis? thanks
 
There is no point in installing HiJack This if you do not know how to utilize it. HJT is not a anti-malware tool, but a diagnostic tool which presents you with a log upon a scan.

I don't suggest disabling Automatic Updates (that might as well use the Internet Connection, but not System Resources.

With 256MB of RAM, it would be best to configure AVG not to automatic update. You might come up with a gray icon later... :scratch:
And I have to say so too... when avast! anti-virus updates my computer will "lag" for a few moments, and then avast! will pop-up telling me that my database has been updated.
 
Hijackthis logs are never done in this section of the forum.

I don't suggest disabling automatic windows updates,or avg's automatic updates,either.

Do things speed up after all the checking for updates is done?

I was just wondering,has your computer been rebooted since you posted your last startup log?
 
Yes I believe it speeds up after it has finished checking for updates, I figured I could run HJT and then post the log so others could look at it and tell me what is going on, is there a spot on this site to do that?

Thanks for your help so far guys. yes I have rebooted it why? Also I can not get the tea timer icon to stop moveing the lock in circles.
 
Zenobia said:
Hijackthis logs are never done in this section of the forum.
Click to expand...

JOE.G said:
I figured I could run HJT and then post the log so others could look at it and tell me what is going on, is there a spot on this site to do that?
Click to expand...

Yes, HJT logs are not to be posted in this section of the forum.

I'm suspecting that AVG's automatic updates are the cause of "slowing" down your startup. I can relate to this because I've also noticed that my system was a bit 'slow' to warm up during boot, and from my observations, it was most likely due to avast!'s automatic updates (the auto updates took a bite out of the machine's CPU).

Joe, the choice is yours to make. You can test out if disabling automatic updates will "speed" up your machine's startup (and that will also confirm my suspicions :santa:), or you can leave it as it is. And if you have the sufficient fiances you can consider upgrading the amount of RAM that is installed (add more) in your computer.

There is "tweak" to stop TeaTimer from moving in "circles", because there is not a significant amount of reports. Is it a bother?

:laugh: One thing I find good about the "moving" is that TeaTimer is telling the user that it's 'working'.
 
I figured I could run HJT and then post the log so others could look at it and tell me what is going on, is there a spot on this site to do that?
Click to expand...

Yes,there is,but in most cases your problem has to be related to malware problems if posting a hijack this log in the malware removal section.

Could you post a new startup log,please?I'd like to look at something,if you don't mind.
 
drragostea said:
There is "tweak" to stop TeaTimer from moving in "circles", because there is not a significant amount of reports. Is it a bother?

:laugh: One thing I find good about the "moving" is that TeaTimer is telling the user that it's 'working'.
Click to expand...

Sorry. Tweak:

There is no "tweak" to stop TeaTimer...
 
My 98 se cp the tea timer does not move and I have 1.6 in that.

What is the best way to disable the avg updater?

Should I have win update once a week instead of daily?

Should i install and run HJT?

Here is a up to date log.

How much a ram what type and what is the price I have a dell insprion 1100 thanks

--- Spybot - Search & Destroy version: 1.6.0 (build: 20080707) ---

2008-07-07 blindman.exe (1.0.0.8)
2008-07-07 SDFiles.exe (1.6.0.4)
2008-07-07 SDMain.exe (1.0.0.6)
2008-07-07 SDShred.exe (1.0.2.3)
2008-07-07 SDUpdate.exe (1.6.0.8)
2008-07-07 SDWinSec.exe (1.0.0.12)
2008-07-07 SpybotSD.exe (1.6.0.30)
2008-08-18 TeaTimer.exe (1.6.2.23)
2008-08-12 unins000.exe (51.49.0.0)
2008-07-07 Update.exe (1.6.0.7)
2008-07-07 advcheck.dll (1.6.1.12)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2008-07-07 SDHelper.dll (1.6.0.12)
2008-06-19 sqlite3.dll
2008-07-07 Tools.dll (2.1.5.7)
2008-08-05 Includes\Adware.sbi
2008-08-19 Includes\AdwareC.sbi
2008-06-03 Includes\Cookies.sbi
2008-06-03 Includes\Dialer.sbi
2008-08-05 Includes\DialerC.sbi
2008-07-23 Includes\HeavyDuty.sbi
2008-08-19 Includes\Hijackers.sbi
2008-08-19 Includes\HijackersC.sbi
2008-08-05 Includes\Keyloggers.sbi
2008-08-12 Includes\KeyloggersC.sbi
2004-11-29 Includes\LSP.sbi
2008-08-20 Includes\Malware.sbi
2008-08-19 Includes\MalwareC.sbi
2008-08-05 Includes\PUPS.sbi
2008-08-19 Includes\PUPSC.sbi
2007-11-07 Includes\Revision.sbi
2008-06-18 Includes\Security.sbi
2008-08-19 Includes\SecurityC.sbi
2008-06-03 Includes\Spybots.sbi
2008-06-03 Includes\SpybotsC.sbi
2008-08-12 Includes\Spyware.sbi
2008-08-12 Includes\SpywareC.sbi
2008-06-03 Includes\Tracks.uti
2008-08-05 Includes\Trojans.sbi
2008-08-20 Includes\TrojansC.sbi
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll

Located: HK_LM:Run, AVG8_TRAY
command: C:\PROGRA~1\AVG\AVG8\avgtray.exe
file: C:\PROGRA~1\AVG\AVG8\avgtray.exe
size: 1232152
MD5: 348A781AEF0870A56549F53BB37A233A

Located: HK_LM:Run, IgfxTray
command: C:\WINDOWS\system32\igfxtray.exe
file: C:\WINDOWS\system32\igfxtray.exe
size: 155648
MD5: 093D3EE722542BA2E7AD929AA3CA6ABC

Located: HK_LM:Run, PD0620 STISvc
command: RunDLL32.exe P0620Pin.dll,RunDLL32EP 513
file: C:\WINDOWS\system32\P0620Pin.dll
size: 36864
MD5: 64780CE5DC0815647A1167E5CCD034A9

Located: HK_LM:Run, SynTPLpr
command: C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
file: C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
size: 110592
MD5: B437E814DC6AA842C482F64D9D2AFA1C

Located: HK_LM:Run, WlanUtilAB
command: C:\Program Files\LanExpress\WirelessAS\Utility\Wlan11ag.exe -hide
file: C:\Program Files\LanExpress\WirelessAS\Utility\Wlan11ag.exe
size: 454656
MD5: 917220C599A012018BEC929DBDC0F184

Located: HK_LM:Run, Adobe Reader Speed Launcher (DISABLED)
command: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
file: C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
size: 39792
MD5: 8B9145D229D4E89D15ACB820D4A3A90F

Located: HK_LM:Run, HotKeysCmds (DISABLED)
command: C:\WINDOWS\system32\hkcmd.exe
file: C:\WINDOWS\system32\hkcmd.exe
size: 126976
MD5: E4CF942A4AEA9D27C87F190F65E7D0F6

Located: HK_LM:Run, PCTVOICE (DISABLED)
command: pctspk.exe
file: C:\WINDOWS\system32\pctspk.exe
size: 163840
MD5: 0B86BC4C123D3CD08817B1848DB07AC6

Located: HK_LM:Run, SynTPEnh (DISABLED)
command: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
file: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
size: 610304
MD5: 634DC62870B9E0C6C6AE25A75AC9895A

Located: HK_CU:Run, ctfmon.exe
where: PE_C_DONNA...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 24232996A38C0B0CF151C2140AE29FC8

Located: HK_CU:Run, MSMSGS
where: PE_C_DONNA...
command: "C:\Program Files\Messenger\msmsgs.exe" /background
file: C:\Program Files\Messenger\msmsgs.exe
size: 1694208
MD5: 74E6E96C6F0E2ECA4EDBB7F7A468F259

Located: HK_CU:Run, SpybotSD TeaTimer
where: PE_C_DONNA...
command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 1832272
MD5: FFB5BAC9C29303904365640A2E2A6D0C

Located: HK_CU:Run, Yahoo! Pager
where: PE_C_DONNA...
command: C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
file: C:\Program Files\Yahoo!\Messenger\ypager.exe
size: 2502656
MD5: C4F15909D8EACBFD7AB5EF8BC992D735

Located: HK_CU:Run, ctfmon.exe
where: S-1-5-21-789336058-764733703-1060284298-1004...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 24232996A38C0B0CF151C2140AE29FC8

Located: HK_CU:Run, SpybotSD TeaTimer
where: S-1-5-21-789336058-764733703-1060284298-1004...
command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 1832272
MD5: FFB5BAC9C29303904365640A2E2A6D0C

Located: HK_CU:Run, Creative WebCam Tray (DISABLED)
where: S-1-5-21-789336058-764733703-1060284298-1004...
command: "C:\Program Files\Creative\Shared Files\CamTray.exe"
file: C:\Program Files\Creative\Shared Files\CamTray.exe
size: 258048
MD5: 3C1F1E471308E688C51B2184FD6E3ABD

Located: WinLogon, crypt32chain
command: crypt32.dll
file: crypt32.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cryptnet
command: cryptnet.dll
file: cryptnet.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cscdll
command: cscdll.dll
file: cscdll.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, GoToAssist
command: C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll
file: C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll
size: 10792
MD5: 3D6FD4FFDE6DE32C34DC280D0BE781C2

Located: WinLogon, igfxcui
command: igfxsrvc.dll
file: igfxsrvc.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, Schedule
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, SensLogn
command: WlNotify.dll
file: WlNotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, termsrv
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, wlballoon
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
 
I am not sure what may be causing the animation not to occur in Windows 98 SE. Is that becoming a problem?

The best way to disable AVG's automatic updates is simply to disable it.

There is an option to for Windows XP to check for updates daily?! And every week?!

Even if you did run HJT there would be no point, unless you can utilize it (information in the log). What it will simply do is provide information about the running processes, services, and start up for basics.

The log does not provide how much RAM is installed on the PC. You can check my going to Control Panel>Performance and Maintenance.
--
There seems to be two entries of "ctfmon.exe". Have you disabled it?

There is a hotkey process that uses resources, if you wish to disable it...

You run Windows Messenger?
 
If you prefer it,you could set Automatic Updates to search for updates every Tuesday,at a time that would be convenient for you.A lot of times,that is the day Windows Updates happen.

You should not install and run Hijackthis unless you have a qualified antispyware expert analyzing it for you.

I wanted to look at a new startup log because I was interested in these:
where: PE_C_DONNA...
Click to expand...
But,that should be okay,from what I found on it.

Instead of disabling automatic updates for avg just yet,let's try something a little different.
Let's disable teatimer temporarily instead,just to see what happens.
Open Spybot,click mode,advanced mode,tools,Resident,and then uncheck Resident "Teatimer."
Reboot your computer,then after you're logged into your computer,try opening your browser.
Once you're done,you can reenable Teatimer by going to tools,then resident,and checkmarking Resident "Teatimer."
Please let me know whether you got to your homepage quicker with Teatimer disabled.

You can return Spybot to normal mode by opening Spybot,clicking mode,then selecting default mode.
 
I disabled teatimer and things seemed to have picked up, it still is a little slow but faster then before,

Win I set to update only on Tue.

AVG says auto update is disabled but it still seems to be updating anyideas?

I post a hijackthis thread in the malware section if you like to look.

Instantmessenger is on the other users loggin not on mine, the 2 ctfmon you see was I disabled it and then when I restarted it it came back the one was unchecked and then the new one was there, can I get rid of one?

I disabled ctfmon what will I not be able to do now?

Here is a new spybot start log, I see that is is still listed under the other users name, will that efect my start up?


--- Spybot - Search & Destroy version: 1.6.0 (build: 20080707) ---

2008-07-07 blindman.exe (1.0.0.8)
2008-07-07 SDFiles.exe (1.6.0.4)
2008-07-07 SDMain.exe (1.0.0.6)
2008-07-07 SDShred.exe (1.0.2.3)
2008-07-07 SDUpdate.exe (1.6.0.8)
2008-07-07 SDWinSec.exe (1.0.0.12)
2008-07-07 SpybotSD.exe (1.6.0.30)
2008-08-18 TeaTimer.exe (1.6.2.23)
2008-08-12 unins000.exe (51.49.0.0)
2008-07-07 Update.exe (1.6.0.7)
2008-07-07 advcheck.dll (1.6.1.12)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2008-07-07 SDHelper.dll (1.6.0.12)
2008-06-19 sqlite3.dll
2008-07-07 Tools.dll (2.1.5.7)
2008-08-05 Includes\Adware.sbi
2008-08-26 Includes\AdwareC.sbi
2008-06-03 Includes\Cookies.sbi
2008-06-03 Includes\Dialer.sbi
2008-08-05 Includes\DialerC.sbi
2008-07-23 Includes\HeavyDuty.sbi
2008-08-19 Includes\Hijackers.sbi
2008-08-26 Includes\HijackersC.sbi
2008-08-05 Includes\Keyloggers.sbi
2008-08-26 Includes\KeyloggersC.sbi
2004-11-29 Includes\LSP.sbi
2008-08-27 Includes\Malware.sbi
2008-08-26 Includes\MalwareC.sbi
2008-08-05 Includes\PUPS.sbi
2008-08-26 Includes\PUPSC.sbi
2007-11-07 Includes\Revision.sbi
2008-06-18 Includes\Security.sbi
2008-08-26 Includes\SecurityC.sbi
2008-06-03 Includes\Spybots.sbi
2008-06-03 Includes\SpybotsC.sbi
2008-08-12 Includes\Spyware.sbi
2008-08-26 Includes\SpywareC.sbi
2008-06-03 Includes\Tracks.uti
2008-08-05 Includes\Trojans.sbi
2008-08-27 Includes\TrojansC.sbi
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll

Located: HK_LM:Run, AVG8_TRAY
command: C:\PROGRA~1\AVG\AVG8\avgtray.exe
file: C:\PROGRA~1\AVG\AVG8\avgtray.exe
size: 1235736
MD5: B95536F0B568C4476A78966CFA7BA006

Located: HK_LM:Run, IgfxTray
command: C:\WINDOWS\system32\igfxtray.exe
file: C:\WINDOWS\system32\igfxtray.exe
size: 155648
MD5: 093D3EE722542BA2E7AD929AA3CA6ABC

Located: HK_LM:Run, PD0620 STISvc
command: RunDLL32.exe P0620Pin.dll,RunDLL32EP 513
file: C:\WINDOWS\system32\P0620Pin.dll
size: 36864
MD5: 64780CE5DC0815647A1167E5CCD034A9

Located: HK_LM:Run, SynTPLpr
command: C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
file: C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
size: 110592
MD5: B437E814DC6AA842C482F64D9D2AFA1C

Located: HK_LM:Run, WlanUtilAB
command: C:\Program Files\LanExpress\WirelessAS\Utility\Wlan11ag.exe -hide
file: C:\Program Files\LanExpress\WirelessAS\Utility\Wlan11ag.exe
size: 454656
MD5: 917220C599A012018BEC929DBDC0F184

Located: HK_LM:Run, Adobe Reader Speed Launcher (DISABLED)
command: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
file: C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
size: 39792
MD5: 8B9145D229D4E89D15ACB820D4A3A90F

Located: HK_LM:Run, HotKeysCmds (DISABLED)
command: C:\WINDOWS\system32\hkcmd.exe
file: C:\WINDOWS\system32\hkcmd.exe
size: 126976
MD5: E4CF942A4AEA9D27C87F190F65E7D0F6

Located: HK_LM:Run, PCTVOICE (DISABLED)
command: pctspk.exe
file: C:\WINDOWS\system32\pctspk.exe
size: 163840
MD5: 0B86BC4C123D3CD08817B1848DB07AC6

Located: HK_LM:Run, SynTPEnh (DISABLED)
command: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
file: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
size: 610304
MD5: 634DC62870B9E0C6C6AE25A75AC9895A

Located: HK_CU:Run, ctfmon.exe
where: PE_C_DONNA...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 24232996A38C0B0CF151C2140AE29FC8

Located: HK_CU:Run, MSMSGS
where: PE_C_DONNA...
command: "C:\Program Files\Messenger\msmsgs.exe" /background
file: C:\Program Files\Messenger\msmsgs.exe
size: 1694208
MD5: 74E6E96C6F0E2ECA4EDBB7F7A468F259

Located: HK_CU:Run, SpybotSD TeaTimer
where: PE_C_DONNA...
command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 1832272
MD5: FFB5BAC9C29303904365640A2E2A6D0C

Located: HK_CU:Run, Yahoo! Pager
where: PE_C_DONNA...
command: C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
file: C:\Program Files\Yahoo!\Messenger\ypager.exe
size: 2502656
MD5: C4F15909D8EACBFD7AB5EF8BC992D735

Located: HK_CU:Run, Creative WebCam Tray (DISABLED)
where: S-1-5-21-789336058-764733703-1060284298-1004...
command: "C:\Program Files\Creative\Shared Files\CamTray.exe"
file: C:\Program Files\Creative\Shared Files\CamTray.exe
size: 258048
MD5: 3C1F1E471308E688C51B2184FD6E3ABD

Located: WinLogon, crypt32chain
command: crypt32.dll
file: crypt32.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cryptnet
command: cryptnet.dll
file: cryptnet.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cscdll
command: cscdll.dll
file: cscdll.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, GoToAssist
command: C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll
file: C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll
size: 10792
MD5: 3D6FD4FFDE6DE32C34DC280D0BE781C2

Located: WinLogon, igfxcui
command: igfxsrvc.dll
file: igfxsrvc.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, Schedule
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, SensLogn
command: WlNotify.dll
file: WlNotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, termsrv
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, wlballoon
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

-----------------------------

http://forums.spybot.info/showthread.php?t=33563
 
Last edited by a moderator:
@Zenobia, here is my question... :scratch:
where: PE_C_DONNA...
Click to expand...
Hm. What does it mean? Another user?

Joe, I'll try to help you out the best that I can, but I need that question to be answered from Zenobia. What hits me, that I've never encountered a startup log, that is booting processes from another user... well from my experience.

ctfmon.exe is used for Foreign Languages. So it will start regardless if you disable it (and when you open IE). So follow the instructions to disable it in this thread.
 
drragostea:

DONNA is the name of another user on the system and the startup entries marked "where: PE_C_DONNA" are in that users registry hive.
 
Please see the note from tashi in your malware forum topic.Unless you believe the computer is infected,we can continue on here.If you plan on continuing in the malware forum,we need to stop the topic here,so we don't interfere with a helper. :)

I don't think its a good idea to leave AVG's Automatic Updates permanently disabled.If you just want to disable them temporarily just to see if things are any faster,try going to Components->Update Manager.Untick Start Automatic Updates,then click Save Changes.It should then say database update is disabled.I think that would do it,I've never disabled my AVG auto updates before.
You can reenable automatic updates by going to Components->Update Manager,then checking Start Automatic Updates,then click Save Changes.
You can adjust the times the updates download,to when your computer will be on but you aren't using it much,if that would help.
Also,try going to Tools,Advanced Settings....,open Schedules.Look at Virus database Update Schedule,and Program Update Schedule.What is checkmarked there?

Here is a new spybot start log, I see that is is still listed under the other users name, will that efect my start up?
Click to expand...
ctfmon and Instant Messenger in the other users startup shouldn't affect your startup.

How did you disable ctfmon.exe?

I have a slight delay on IE with Teatimer,but not as long as you do.
You can reenable Teatimer now,unless you don't plan on using it anymore.Open Spybot,click mode,Advanced Mode,Tools,Resident,checkmark Resident "Teatimer".
 
You must log in or register to reply here.
Back
Top