Page 4 of 6 FirstFirst 123456 LastLast
Results 31 to 40 of 55

Thread: Win XPSpybot start up log, could you check to see if I can uncheck anything Also ther

  1. #31
    Senior Member drragostea's Avatar
    Join Date
    Jan 2008
    Location
    @Home
    Posts
    3,674

    Default

    Quote Originally Posted by Zenobia View Post
    Hijackthis logs are never done in this section of the forum.
    Quote Originally Posted by JOE.G View Post
    I figured I could run HJT and then post the log so others could look at it and tell me what is going on, is there a spot on this site to do that?
    Yes, HJT logs are not to be posted in this section of the forum.

    I'm suspecting that AVG's automatic updates are the cause of "slowing" down your startup. I can relate to this because I've also noticed that my system was a bit 'slow' to warm up during boot, and from my observations, it was most likely due to avast!'s automatic updates (the auto updates took a bite out of the machine's CPU).

    Joe, the choice is yours to make. You can test out if disabling automatic updates will "speed" up your machine's startup (and that will also confirm my suspicions ), or you can leave it as it is. And if you have the sufficient fiances you can consider upgrading the amount of RAM that is installed (add more) in your computer.

    There is "tweak" to stop TeaTimer from moving in "circles", because there is not a significant amount of reports. Is it a bother?

    One thing I find good about the "moving" is that TeaTimer is telling the user that it's 'working'.

  2. #32
    Spybot Advisor Team Zenobia's Avatar
    Join Date
    Oct 2005
    Posts
    5,489

    Default

    I figured I could run HJT and then post the log so others could look at it and tell me what is going on, is there a spot on this site to do that?
    Yes,there is,but in most cases your problem has to be related to malware problems if posting a hijack this log in the malware removal section.

    Could you post a new startup log,please?I'd like to look at something,if you don't mind.

  3. #33
    Senior Member drragostea's Avatar
    Join Date
    Jan 2008
    Location
    @Home
    Posts
    3,674

    Default

    Quote Originally Posted by drragostea View Post
    There is "tweak" to stop TeaTimer from moving in "circles", because there is not a significant amount of reports. Is it a bother?

    One thing I find good about the "moving" is that TeaTimer is telling the user that it's 'working'.
    Sorry. Tweak:

    There is no "tweak" to stop TeaTimer...

  4. #34
    Member
    Join Date
    Dec 2006
    Posts
    67

    Default

    My 98 se cp the tea timer does not move and I have 1.6 in that.

    What is the best way to disable the avg updater?

    Should I have win update once a week instead of daily?

    Should i install and run HJT?

    Here is a up to date log.

    How much a ram what type and what is the price I have a dell insprion 1100 thanks

    --- Spybot - Search & Destroy version: 1.6.0 (build: 20080707) ---

    2008-07-07 blindman.exe (1.0.0.8)
    2008-07-07 SDFiles.exe (1.6.0.4)
    2008-07-07 SDMain.exe (1.0.0.6)
    2008-07-07 SDShred.exe (1.0.2.3)
    2008-07-07 SDUpdate.exe (1.6.0.8)
    2008-07-07 SDWinSec.exe (1.0.0.12)
    2008-07-07 SpybotSD.exe (1.6.0.30)
    2008-08-18 TeaTimer.exe (1.6.2.23)
    2008-08-12 unins000.exe (51.49.0.0)
    2008-07-07 Update.exe (1.6.0.7)
    2008-07-07 advcheck.dll (1.6.1.12)
    2007-04-02 aports.dll (2.1.0.0)
    2008-06-14 DelZip179.dll (1.79.11.1)
    2008-07-07 SDHelper.dll (1.6.0.12)
    2008-06-19 sqlite3.dll
    2008-07-07 Tools.dll (2.1.5.7)
    2008-08-05 Includes\Adware.sbi
    2008-08-19 Includes\AdwareC.sbi
    2008-06-03 Includes\Cookies.sbi
    2008-06-03 Includes\Dialer.sbi
    2008-08-05 Includes\DialerC.sbi
    2008-07-23 Includes\HeavyDuty.sbi
    2008-08-19 Includes\Hijackers.sbi
    2008-08-19 Includes\HijackersC.sbi
    2008-08-05 Includes\Keyloggers.sbi
    2008-08-12 Includes\KeyloggersC.sbi
    2004-11-29 Includes\LSP.sbi
    2008-08-20 Includes\Malware.sbi
    2008-08-19 Includes\MalwareC.sbi
    2008-08-05 Includes\PUPS.sbi
    2008-08-19 Includes\PUPSC.sbi
    2007-11-07 Includes\Revision.sbi
    2008-06-18 Includes\Security.sbi
    2008-08-19 Includes\SecurityC.sbi
    2008-06-03 Includes\Spybots.sbi
    2008-06-03 Includes\SpybotsC.sbi
    2008-08-12 Includes\Spyware.sbi
    2008-08-12 Includes\SpywareC.sbi
    2008-06-03 Includes\Tracks.uti
    2008-08-05 Includes\Trojans.sbi
    2008-08-20 Includes\TrojansC.sbi
    2008-03-04 Plugins\Chai.dll
    2008-03-05 Plugins\Fennel.dll
    2008-02-26 Plugins\Mate.dll
    2007-12-24 Plugins\TCPIPAddress.dll

    Located: HK_LM:Run, AVG8_TRAY
    command: C:\PROGRA~1\AVG\AVG8\avgtray.exe
    file: C:\PROGRA~1\AVG\AVG8\avgtray.exe
    size: 1232152
    MD5: 348A781AEF0870A56549F53BB37A233A

    Located: HK_LM:Run, IgfxTray
    command: C:\WINDOWS\system32\igfxtray.exe
    file: C:\WINDOWS\system32\igfxtray.exe
    size: 155648
    MD5: 093D3EE722542BA2E7AD929AA3CA6ABC

    Located: HK_LM:Run, PD0620 STISvc
    command: RunDLL32.exe P0620Pin.dll,RunDLL32EP 513
    file: C:\WINDOWS\system32\P0620Pin.dll
    size: 36864
    MD5: 64780CE5DC0815647A1167E5CCD034A9

    Located: HK_LM:Run, SynTPLpr
    command: C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    file: C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    size: 110592
    MD5: B437E814DC6AA842C482F64D9D2AFA1C

    Located: HK_LM:Run, WlanUtilAB
    command: C:\Program Files\LanExpress\WirelessAS\Utility\Wlan11ag.exe -hide
    file: C:\Program Files\LanExpress\WirelessAS\Utility\Wlan11ag.exe
    size: 454656
    MD5: 917220C599A012018BEC929DBDC0F184

    Located: HK_LM:Run, Adobe Reader Speed Launcher (DISABLED)
    command: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    file: C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
    size: 39792
    MD5: 8B9145D229D4E89D15ACB820D4A3A90F

    Located: HK_LM:Run, HotKeysCmds (DISABLED)
    command: C:\WINDOWS\system32\hkcmd.exe
    file: C:\WINDOWS\system32\hkcmd.exe
    size: 126976
    MD5: E4CF942A4AEA9D27C87F190F65E7D0F6

    Located: HK_LM:Run, PCTVOICE (DISABLED)
    command: pctspk.exe
    file: C:\WINDOWS\system32\pctspk.exe
    size: 163840
    MD5: 0B86BC4C123D3CD08817B1848DB07AC6

    Located: HK_LM:Run, SynTPEnh (DISABLED)
    command: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    file: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    size: 610304
    MD5: 634DC62870B9E0C6C6AE25A75AC9895A

    Located: HK_CU:Run, ctfmon.exe
    where: PE_C_DONNA...
    command: C:\WINDOWS\system32\ctfmon.exe
    file: C:\WINDOWS\system32\ctfmon.exe
    size: 15360
    MD5: 24232996A38C0B0CF151C2140AE29FC8

    Located: HK_CU:Run, MSMSGS
    where: PE_C_DONNA...
    command: "C:\Program Files\Messenger\msmsgs.exe" /background
    file: C:\Program Files\Messenger\msmsgs.exe
    size: 1694208
    MD5: 74E6E96C6F0E2ECA4EDBB7F7A468F259

    Located: HK_CU:Run, SpybotSD TeaTimer
    where: PE_C_DONNA...
    command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    size: 1832272
    MD5: FFB5BAC9C29303904365640A2E2A6D0C

    Located: HK_CU:Run, Yahoo! Pager
    where: PE_C_DONNA...
    command: C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
    file: C:\Program Files\Yahoo!\Messenger\ypager.exe
    size: 2502656
    MD5: C4F15909D8EACBFD7AB5EF8BC992D735

    Located: HK_CU:Run, ctfmon.exe
    where: S-1-5-21-789336058-764733703-1060284298-1004...
    command: C:\WINDOWS\system32\ctfmon.exe
    file: C:\WINDOWS\system32\ctfmon.exe
    size: 15360
    MD5: 24232996A38C0B0CF151C2140AE29FC8

    Located: HK_CU:Run, SpybotSD TeaTimer
    where: S-1-5-21-789336058-764733703-1060284298-1004...
    command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    size: 1832272
    MD5: FFB5BAC9C29303904365640A2E2A6D0C

    Located: HK_CU:Run, Creative WebCam Tray (DISABLED)
    where: S-1-5-21-789336058-764733703-1060284298-1004...
    command: "C:\Program Files\Creative\Shared Files\CamTray.exe"
    file: C:\Program Files\Creative\Shared Files\CamTray.exe
    size: 258048
    MD5: 3C1F1E471308E688C51B2184FD6E3ABD

    Located: WinLogon, crypt32chain
    command: crypt32.dll
    file: crypt32.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, cryptnet
    command: cryptnet.dll
    file: cryptnet.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, cscdll
    command: cscdll.dll
    file: cscdll.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, GoToAssist
    command: C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll
    file: C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll
    size: 10792
    MD5: 3D6FD4FFDE6DE32C34DC280D0BE781C2

    Located: WinLogon, igfxcui
    command: igfxsrvc.dll
    file: igfxsrvc.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, ScCertProp
    command: wlnotify.dll
    file: wlnotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, Schedule
    command: wlnotify.dll
    file: wlnotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, sclgntfy
    command: sclgntfy.dll
    file: sclgntfy.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, SensLogn
    command: WlNotify.dll
    file: WlNotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, termsrv
    command: wlnotify.dll
    file: wlnotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, wlballoon
    command: wlnotify.dll
    file: wlnotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

  5. #35
    Senior Member drragostea's Avatar
    Join Date
    Jan 2008
    Location
    @Home
    Posts
    3,674

    Default

    I am not sure what may be causing the animation not to occur in Windows 98 SE. Is that becoming a problem?

    The best way to disable AVG's automatic updates is simply to disable it.

    There is an option to for Windows XP to check for updates daily?! And every week?!

    Even if you did run HJT there would be no point, unless you can utilize it (information in the log). What it will simply do is provide information about the running processes, services, and start up for basics.

    The log does not provide how much RAM is installed on the PC. You can check my going to Control Panel>Performance and Maintenance.
    --
    There seems to be two entries of "ctfmon.exe". Have you disabled it?

    There is a hotkey process that uses resources, if you wish to disable it...

    You run Windows Messenger?

  6. #36
    Spybot Advisor Team Zenobia's Avatar
    Join Date
    Oct 2005
    Posts
    5,489

    Default

    If you prefer it,you could set Automatic Updates to search for updates every Tuesday,at a time that would be convenient for you.A lot of times,that is the day Windows Updates happen.

    You should not install and run Hijackthis unless you have a qualified antispyware expert analyzing it for you.

    I wanted to look at a new startup log because I was interested in these:
    where: PE_C_DONNA...
    But,that should be okay,from what I found on it.

    Instead of disabling automatic updates for avg just yet,let's try something a little different.
    Let's disable teatimer temporarily instead,just to see what happens.
    Open Spybot,click mode,advanced mode,tools,Resident,and then uncheck Resident "Teatimer."
    Reboot your computer,then after you're logged into your computer,try opening your browser.
    Once you're done,you can reenable Teatimer by going to tools,then resident,and checkmarking Resident "Teatimer."
    Please let me know whether you got to your homepage quicker with Teatimer disabled.

    You can return Spybot to normal mode by opening Spybot,clicking mode,then selecting default mode.

  7. #37
    Member
    Join Date
    Dec 2006
    Posts
    67

    Default

    I disabled teatimer and things seemed to have picked up, it still is a little slow but faster then before,

    Win I set to update only on Tue.

    AVG says auto update is disabled but it still seems to be updating anyideas?

    I post a hijackthis thread in the malware section if you like to look.

    Instantmessenger is on the other users loggin not on mine, the 2 ctfmon you see was I disabled it and then when I restarted it it came back the one was unchecked and then the new one was there, can I get rid of one?

    I disabled ctfmon what will I not be able to do now?

    Here is a new spybot start log, I see that is is still listed under the other users name, will that efect my start up?


    --- Spybot - Search & Destroy version: 1.6.0 (build: 20080707) ---

    2008-07-07 blindman.exe (1.0.0.8)
    2008-07-07 SDFiles.exe (1.6.0.4)
    2008-07-07 SDMain.exe (1.0.0.6)
    2008-07-07 SDShred.exe (1.0.2.3)
    2008-07-07 SDUpdate.exe (1.6.0.8)
    2008-07-07 SDWinSec.exe (1.0.0.12)
    2008-07-07 SpybotSD.exe (1.6.0.30)
    2008-08-18 TeaTimer.exe (1.6.2.23)
    2008-08-12 unins000.exe (51.49.0.0)
    2008-07-07 Update.exe (1.6.0.7)
    2008-07-07 advcheck.dll (1.6.1.12)
    2007-04-02 aports.dll (2.1.0.0)
    2008-06-14 DelZip179.dll (1.79.11.1)
    2008-07-07 SDHelper.dll (1.6.0.12)
    2008-06-19 sqlite3.dll
    2008-07-07 Tools.dll (2.1.5.7)
    2008-08-05 Includes\Adware.sbi
    2008-08-26 Includes\AdwareC.sbi
    2008-06-03 Includes\Cookies.sbi
    2008-06-03 Includes\Dialer.sbi
    2008-08-05 Includes\DialerC.sbi
    2008-07-23 Includes\HeavyDuty.sbi
    2008-08-19 Includes\Hijackers.sbi
    2008-08-26 Includes\HijackersC.sbi
    2008-08-05 Includes\Keyloggers.sbi
    2008-08-26 Includes\KeyloggersC.sbi
    2004-11-29 Includes\LSP.sbi
    2008-08-27 Includes\Malware.sbi
    2008-08-26 Includes\MalwareC.sbi
    2008-08-05 Includes\PUPS.sbi
    2008-08-26 Includes\PUPSC.sbi
    2007-11-07 Includes\Revision.sbi
    2008-06-18 Includes\Security.sbi
    2008-08-26 Includes\SecurityC.sbi
    2008-06-03 Includes\Spybots.sbi
    2008-06-03 Includes\SpybotsC.sbi
    2008-08-12 Includes\Spyware.sbi
    2008-08-26 Includes\SpywareC.sbi
    2008-06-03 Includes\Tracks.uti
    2008-08-05 Includes\Trojans.sbi
    2008-08-27 Includes\TrojansC.sbi
    2008-03-04 Plugins\Chai.dll
    2008-03-05 Plugins\Fennel.dll
    2008-02-26 Plugins\Mate.dll
    2007-12-24 Plugins\TCPIPAddress.dll

    Located: HK_LM:Run, AVG8_TRAY
    command: C:\PROGRA~1\AVG\AVG8\avgtray.exe
    file: C:\PROGRA~1\AVG\AVG8\avgtray.exe
    size: 1235736
    MD5: B95536F0B568C4476A78966CFA7BA006

    Located: HK_LM:Run, IgfxTray
    command: C:\WINDOWS\system32\igfxtray.exe
    file: C:\WINDOWS\system32\igfxtray.exe
    size: 155648
    MD5: 093D3EE722542BA2E7AD929AA3CA6ABC

    Located: HK_LM:Run, PD0620 STISvc
    command: RunDLL32.exe P0620Pin.dll,RunDLL32EP 513
    file: C:\WINDOWS\system32\P0620Pin.dll
    size: 36864
    MD5: 64780CE5DC0815647A1167E5CCD034A9

    Located: HK_LM:Run, SynTPLpr
    command: C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    file: C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    size: 110592
    MD5: B437E814DC6AA842C482F64D9D2AFA1C

    Located: HK_LM:Run, WlanUtilAB
    command: C:\Program Files\LanExpress\WirelessAS\Utility\Wlan11ag.exe -hide
    file: C:\Program Files\LanExpress\WirelessAS\Utility\Wlan11ag.exe
    size: 454656
    MD5: 917220C599A012018BEC929DBDC0F184

    Located: HK_LM:Run, Adobe Reader Speed Launcher (DISABLED)
    command: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    file: C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
    size: 39792
    MD5: 8B9145D229D4E89D15ACB820D4A3A90F

    Located: HK_LM:Run, HotKeysCmds (DISABLED)
    command: C:\WINDOWS\system32\hkcmd.exe
    file: C:\WINDOWS\system32\hkcmd.exe
    size: 126976
    MD5: E4CF942A4AEA9D27C87F190F65E7D0F6

    Located: HK_LM:Run, PCTVOICE (DISABLED)
    command: pctspk.exe
    file: C:\WINDOWS\system32\pctspk.exe
    size: 163840
    MD5: 0B86BC4C123D3CD08817B1848DB07AC6

    Located: HK_LM:Run, SynTPEnh (DISABLED)
    command: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    file: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    size: 610304
    MD5: 634DC62870B9E0C6C6AE25A75AC9895A

    Located: HK_CU:Run, ctfmon.exe
    where: PE_C_DONNA...
    command: C:\WINDOWS\system32\ctfmon.exe
    file: C:\WINDOWS\system32\ctfmon.exe
    size: 15360
    MD5: 24232996A38C0B0CF151C2140AE29FC8

    Located: HK_CU:Run, MSMSGS
    where: PE_C_DONNA...
    command: "C:\Program Files\Messenger\msmsgs.exe" /background
    file: C:\Program Files\Messenger\msmsgs.exe
    size: 1694208
    MD5: 74E6E96C6F0E2ECA4EDBB7F7A468F259

    Located: HK_CU:Run, SpybotSD TeaTimer
    where: PE_C_DONNA...
    command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    size: 1832272
    MD5: FFB5BAC9C29303904365640A2E2A6D0C

    Located: HK_CU:Run, Yahoo! Pager
    where: PE_C_DONNA...
    command: C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
    file: C:\Program Files\Yahoo!\Messenger\ypager.exe
    size: 2502656
    MD5: C4F15909D8EACBFD7AB5EF8BC992D735

    Located: HK_CU:Run, Creative WebCam Tray (DISABLED)
    where: S-1-5-21-789336058-764733703-1060284298-1004...
    command: "C:\Program Files\Creative\Shared Files\CamTray.exe"
    file: C:\Program Files\Creative\Shared Files\CamTray.exe
    size: 258048
    MD5: 3C1F1E471308E688C51B2184FD6E3ABD

    Located: WinLogon, crypt32chain
    command: crypt32.dll
    file: crypt32.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, cryptnet
    command: cryptnet.dll
    file: cryptnet.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, cscdll
    command: cscdll.dll
    file: cscdll.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, GoToAssist
    command: C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll
    file: C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll
    size: 10792
    MD5: 3D6FD4FFDE6DE32C34DC280D0BE781C2

    Located: WinLogon, igfxcui
    command: igfxsrvc.dll
    file: igfxsrvc.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, ScCertProp
    command: wlnotify.dll
    file: wlnotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, Schedule
    command: wlnotify.dll
    file: wlnotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, sclgntfy
    command: sclgntfy.dll
    file: sclgntfy.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, SensLogn
    command: WlNotify.dll
    file: WlNotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, termsrv
    command: wlnotify.dll
    file: wlnotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, wlballoon
    command: wlnotify.dll
    file: wlnotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    -----------------------------

    http://forums.spybot.info/showthread.php?t=33563
    Last edited by tashi; 2008-09-03 at 02:17. Reason: added link

  8. #38
    Senior Member drragostea's Avatar
    Join Date
    Jan 2008
    Location
    @Home
    Posts
    3,674

    Default

    @Zenobia, here is my question...
    where: PE_C_DONNA...
    Hm. What does it mean? Another user?

    Joe, I'll try to help you out the best that I can, but I need that question to be answered from Zenobia. What hits me, that I've never encountered a startup log, that is booting processes from another user... well from my experience.

    ctfmon.exe is used for Foreign Languages. So it will start regardless if you disable it (and when you open IE). So follow the instructions to disable it in this thread.

  9. #39
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    drragostea:

    DONNA is the name of another user on the system and the startup entries marked "where: PE_C_DONNA" are in that users registry hive.

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz IntelŪ PentiumŪ 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  10. #40
    Spybot Advisor Team Zenobia's Avatar
    Join Date
    Oct 2005
    Posts
    5,489

    Default

    Please see the note from tashi in your malware forum topic.Unless you believe the computer is infected,we can continue on here.If you plan on continuing in the malware forum,we need to stop the topic here,so we don't interfere with a helper.

    I don't think its a good idea to leave AVG's Automatic Updates permanently disabled.If you just want to disable them temporarily just to see if things are any faster,try going to Components->Update Manager.Untick Start Automatic Updates,then click Save Changes.It should then say database update is disabled.I think that would do it,I've never disabled my AVG auto updates before.
    You can reenable automatic updates by going to Components->Update Manager,then checking Start Automatic Updates,then click Save Changes.
    You can adjust the times the updates download,to when your computer will be on but you aren't using it much,if that would help.
    Also,try going to Tools,Advanced Settings....,open Schedules.Look at Virus database Update Schedule,and Program Update Schedule.What is checkmarked there?

    Here is a new spybot start log, I see that is is still listed under the other users name, will that efect my start up?
    ctfmon and Instant Messenger in the other users startup shouldn't affect your startup.

    How did you disable ctfmon.exe?

    I have a slight delay on IE with Teatimer,but not as long as you do.
    You can reenable Teatimer now,unless you don't plan on using it anymore.Open Spybot,click mode,Advanced Mode,Tools,Resident,checkmark Resident "Teatimer".

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •