Avast question

buyorsell888September 17, 2011

Ok, while trying to restore my settings and shortcuts after the rogue HDD infection and my deletion of temp files I've been also taking a look at unnecessary settings as well as programs. I've always felt my computer ran too slow, especially starting programs.

Do I really need Avast to scan documents and files when I open them?

I am the only user of this computer. It is a home office computer and not networked with others.

I do not share MS Office documents with anyone.

I do not receive MS Office documents over the internet. 99.9% of the Excel and Word docs on my computer were created by me on this computer for my own personal use. Trying to reduce paper clutter, I tend to type up lots of info and save it rather than filing the papers. I use Word daily.

seems to me that it is safe to turn off the file system shield which should help excel and word to open faster.....

Thank you for reporting this comment. Undo
ravencajun Zone 8b TX

absolutely that is one of the best features of AVAST, you want it to catch it before it is on the pc and then find it.
For sure you want to leave that as it is set default, I would not mess with the AVAST settings, look elsewhere for why your pc might be slow like too many programs starting up.

    Bookmark   September 17, 2011 at 4:19PM
Thank you for reporting this comment. Undo
buyorsell888

If all of my office documents and files are created by me, on this computer, how would they get infected? It drives me crazy to wait for the scan every time I open a document, especially one that has been on my computer for years and scanned twenty or thirty times every time I open it...

    Bookmark   September 17, 2011 at 5:10PM
Thank you for reporting this comment. Undo
bbbluz

Also basic maintenance will help as well such as Disk CleanUp and Defragging.

Since Corrine is finished working her magic and if you would like, follow the instructions below and I'll take a look at your start ups that can be stopped with HiJackThis.

Click Here to download HJTInstall.exe
In the binary box that pops up click on Save File and
Save HJTInstall.exe to your desktop.
Doubleclick on the HJTInstall.exe icon on your desktop.
By default it will install to C:\Program Files\Trend Micro Click on Install.
It will create a HijackThis icon on the desktop.
Once installed, it will launch Hijackthis.
Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" and Paste the entire contents of the log into your next post.

DO NOT use the AnalyzeThis button, its findings are dangerous if misinterpreted.
DO NOT have Hijackthis fix anything yet. Most of what HJT lists will be harmless or even required by your Operating System.

    Bookmark   September 17, 2011 at 5:26PM
Thank you for reporting this comment. Undo
buyorsell888

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 4:52:07 PM, on 9/17/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\PCCloneEX\PCCloneEX.EXE
C:\PROGRA~1\EPSONS~1\EVENTM~1\EEventManager.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Documents and Settings\LeeAnne Goen\Application Data\Dropbox\bin\Dropbox.exe
C:\PROGRA~1\Webshots\Webshots.scr
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AGI\core\4.0\AGCoreService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\LeeAnne Goen\My Documents\Downloads\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Comcast
R3 - URLSearchHook: agihelper.AGUtils - (0BC6E3FA-78EF-4886-842C-5A1258C4455A) - mscoree.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: agihelper.AGUtils - (0bc6e3fa-78ef-4886-842c-5a1258c4455a) - mscoree.dll (file missing)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - (3CA2F312-6F6E-4B53-A66E-4E65E497C8C0) - (no file)
O2 - BHO: Groove GFS Browser Helper - (72853161-30C5-4D22-B7F9-0BBC1D38A37E) - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! WebRep - (8E5E2654-AD2D-48bf-AC2D-D17F00898D06) - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO:...

    Bookmark   September 17, 2011 at 7:54PM
Thank you for reporting this comment. Undo
bbbluz

Hi buyorsell888,

The program installed to the Documents and Settings folder. We need to move that to a permanent folder because if we don't we could lose the back up files if they are needed. We won't but I feel better knowing they are safe and secure.

First, we need to direct your downloads to the desktop so It can install properly.

Click on Tools in the Menu Bar of Firefox.
Click on Options
Then click on General at the top.
Under Downloads click the dial button left to Save files to
Then click on the Browse button and look for Desktop and click.
Click OK then click OK again.

Now to uninstall HiJackThis and get it in the correct folder.

I need you to click on Start > My Computer > Double click on Local Disk (C:) > click on Documents and Settings > LeeAnne Goen > My Documents > Downloads > then Right click on HijackThis.exe and delete. Click Yes

Click X to close that window.

Now let's install it into the programs folder. Here's how:

Click Here to download HJTInstall.msi

Click Save File
Double Click on the HiJackThis.msi icon placed on the desktop.
Click Run
Click Next
Click in the box to the left of where it says I accept the terms in the License Agreement
Click Next
Under where it says: Install HiJackThis to: it should say C:\Program Files\
Click Next
Click Install
Allow it time to install then click Finish

You will now find the icon on your desktop with the little guy in Red holding a magnifying glass.

Double click that icon.

Click on the Main Menu button at center bottom and click on Do a system scan and save a logfile.

Copy and paste the log as you did before in your next post. In the meantime I will be looking at the other log. The log is fine above, I just want to see the new log to confirm it is in the right folder.

Sorry about the delay. Back shortly.

    Bookmark   September 17, 2011 at 9:54PM
Thank you for reporting this comment. Undo
buyorsell888

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:02:52 PM, on 9/17/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\PCCloneEX\PCCloneEX.EXE
C:\PROGRA~1\EPSONS~1\EVENTM~1\EEventManager.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Documents and Settings\LeeAnne Goen\Application Data\Dropbox\bin\Dropbox.exe
C:\PROGRA~1\Webshots\Webshots.scr
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AGI\core\4.0\AGCoreService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Comcast
R3 - URLSearchHook: agihelper.AGUtils - "0BC6E3FA-78EF-4886-842C-5A1258C4455A> - mscoree.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - "06849E9F-C8D7-4D59-B87D-784B7D6BE0B3> - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: agihelper.AGUtils - "0bc6e3fa-78ef-4886-842c-5a1258c4455a> - mscoree.dll (file missing)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - "3CA2F312-6F6E-4B53-A66E-4E65E497C8C0> - (no file)
O2 - BHO: Groove GFS Browser Helper - "72853161-30C5-4D22-B7F9-0BBC1D38A37E> - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! WebRep - "8E5E2654-AD2D-48bf-AC2D-D17F00898D06> - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - "DBC80044-A445-435b-BC74-9C25C1C588A9> - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 -...

    Bookmark   September 17, 2011 at 10:03PM
Thank you for reporting this comment. Undo
bbbluz

C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe While TeaTimer is an excellent tool for the prevention of spyware, it can sometimes prevent HijackThis from fixing certain things.
Please disable TeaTimer for now until you are clean. TeaTimer can be re-activated once your HijackThis log is clean.

  • Open Spybot Search & Destroy.
  • In the Mode menu click "Advanced mode" if not already selected.
  • Choose "Yes" at the Warning prompt.
  • Expand the "Tools" menu.
  • Click "Resident".
  • Uncheck the "Resident "TeaTimer" (Protection of overall system settings) active." box.
  • In the File menu click "Exit" to exit Spybot Search & Destroy.

Next:
Best way to do this is to print it out or have another computer available to read as you go.
Please close all browser windows including this one, only have HiJackThis open. This time do System Scan only and place a check mark in front of the following entries.

  • O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - "3CA2F312-6F6E-4B53-A66E-4E65E497C8C0> - (no file)
  • O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
  • O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
  • O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
  • O4 - HKLM\..\Run: [EEventManager] C:\PROGRA~1\EPSONS~1\EVENTM~\EEventManager.exe
  • O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
  • O4 - Startup: Dropbox.lnk = C:\Documents and Settings\LeeAnne Goen\Application Data\Dropbox\bin\Dropbox.exe
  • O4 - Startup: Epson scanner Registration.lnk = D:\Common\EpsonReg\Ereg.exe
  • O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\3.1.5.761\Launcher.exe>li

Click Fix Checked.
Close HiJackThis.
Reboot the computer and post a fresh HiJackThis log in your next post.

The above is all I see that can be stopped at startup. Those programs can be started manually when needed and not interfere with your system running smoothly.

Please let me know how everything is running afterwards.

    Bookmark   September 17, 2011 at 10:51PM
Thank you for reporting this comment. Undo
bbbluz

Here's a few orphans that need to be tended to also. You can add them to be removed with the entries above.

R3 - URLSearchHook: agihelper.AGUtils - "0BC6E3FA-78EF-4886-842C-5A1258C4455A> - mscoree.dll (file missing)

O2 - BHO: agihelper.AGUtils - "0bc6e3fa-78ef-4886-842c-5a1258c4455a> - mscoree.dll (file missing)

Let me know how it goes.

    Bookmark   September 18, 2011 at 12:09AM
Thank you for reporting this comment. Undo
buyorsell888

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:54:26 AM, on 9/18/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\PCCloneEX\PCCloneEX.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Webshots\Webshots.scr
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AGI\core\4.0\AGCoreService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Comcast
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - (72853161-30C5-4D22-B7F9-0BBC1D38A37E) - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! WebRep - (8E5E2654-AD2D-48bf-AC2D-D17F00898D06) - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - (E7E6F031-17CE-4C07-BC86-EABFE594F69C) - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: avast! WebRep - (8E5E2654-AD2D-48bf-AC2D-D17F00898D06) - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [PCCloneEX] C:\Program Files\PCCloneEX\PCCloneEX.EXE
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE...

    Bookmark   September 18, 2011 at 10:56AM
Thank you for reporting this comment. Undo
bbbluz

Good morning buyorsell888,

Great job on those deletions! Did you intentionally leave the following entries?

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\3.1.5.7613\Launcher.exe

If not, they are accessible through other means and are unnecessary at startup.

Also the following is not required to startup as well and can be fixed.

O4 - HKLM\..\Run: [PCCloneEX] C:\Program Files\PCCloneEX\PCCloneEX.EXE

This program is not required to start automatically as you can run it when you need to. It is advised that you disable this program so that it does not take up necessary resources.

See --> HERE for more on that if you like.

A few more things:

Do you recognize the following entry? Specifically www.pacificsolutions.com

O14 - IERESET.INF: START_PAGE_URL=http://www.pacificsolutions.com

If you do not recognize the address, then you should also have it fixed. Otherwise leave it be.

For Java Quick Starter. It is running as a Service and is totally unnecessary.

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

Here are the Steps to disable Java Quick Starter.

I also wanted to point out something. The entry below shows that Adobe Reader is way out of date! Adobe is vulnerable to infection.

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

You should definitely update it to version 10.1 If I remember correctly Corrine had also addressed this issue.

As a side note: Adobe Reader has been having issues lately. I'd suggest uninstalling it and using FoxIt Reader. Adobe has become very vulnerable over the last couple of years and really uses up resources more than FoxIt Reader. It's 'footprint' is considerably smaller than Adobe's and consequently uses less resources (RAM as well as hard drive space). I believe there are a few things Foxit Reader cannot do compared to Adobe, but I haven't come across them.

If you choose to install Foxit Reader, please be advised that you may have to uncheck any pre-checked software. I believe it offers the FoxIt Toolbar which is actually the Ask Toolbar in disguise. Choose custom install.

If you'd like, you can download Foxit Reader from here.

The choice is yours.

Here's a basic maintenance program that I have been using for some time now. Run the following steps in the order I have them. Ccleaner and TFC are both cleaners. What one doesn't target at cleaning the other does. Then run Disk Cleanup to reduce the number of unnecessary files on your hard disk and Defrag will perform much better and faster if all the useless files are cleaned up and removed before using it.
1st: Ccleaner: This program you already have I believe.

NOTE:
Ccleaner includes a Registry cleaner, and we advise not to use this or any registry...

    Bookmark   September 18, 2011 at 11:41AM
Thank you for reporting this comment. Undo
bbbluz

Ooops! I just saw that you left webshots intentionally. Not a problem.

    Bookmark   September 18, 2011 at 12:35PM
Thank you for reporting this comment. Undo
buyorsell888

I left webshots but everything else you listed in the first message should have been fixed. I checked them against the list I printed out.

I updated Adobe using the link Corrine gave me several days ago, no idea why it isn't showing up as updated.

I never use the PC Clone software, I never could figure it out, it never worked as it was supposed to for one touch back up. I use Windows Explorer to back up to the external drive or when uploading photos I upload directly to that drive. I wasn't sure if it would be ok to remove the software completely or if the drive needed it to function? It is a Kingwin external hard drive.

yes, I have CCleaner.

I have no preference for Adobe reader or Foxit reader, if Foxit uses less resources and can read the same files that would be fine by me.

I have Adobe Flash Player 10 Active X and Adobe Flash Player 10 Plug In, do they do the same thing? or do I need both?

    Bookmark   September 18, 2011 at 7:27PM
Thank you for reporting this comment. Undo
buyorsell888

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 4:47:37 PM, on 9/18/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Webshots\Webshots.scr
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\AGI\core\4.0\AGCoreService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Comcast
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - (72853161-30C5-4D22-B7F9-0BBC1D38A37E) - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! WebRep - (8E5E2654-AD2D-48bf-AC2D-D17F00898D06) - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - (E7E6F031-17CE-4C07-BC86-EABFE594F69C) - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: avast! WebRep - (8E5E2654-AD2D-48bf-AC2D-D17F00898D06) - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe ...

    Bookmark   September 18, 2011 at 7:50PM
Thank you for reporting this comment. Undo
bbbluz

Boy! That booger doesn't want to stop running does it?

Try booting into Safe Mode and fix that entry. If it doesn't work then leave it be. It is classified as 'user's choice' meaning it is not essential.

The rest looks really good! You did a great job there. Makes it easy when the person I'm helping knows what they are doing.

How's your computer running? Any better? Little faster? Did you go over the basic maintenance tips I provided?

    Bookmark   September 18, 2011 at 9:28PM
Thank you for reporting this comment. Undo
buyorsell888

I'm sorry, I had some issues come up and wasn't able to get back to this thread. Thank you for all your help.

It is certainly restarting a lot faster. Not sure I'm noticing much speed elsewhere but I've been preoccupied.

    Bookmark   September 23, 2011 at 1:13PM
Thank you for reporting this comment. Undo
bbbluz

Hi buyorsell888,

I'm glad to hear that you have noticed a difference at boot time.

There are many causes as to why a computer is slow that go beyond just startups.

Below is a link to just one of the many blog entries by a specialist named miekiemoes. You and others here at the GW may find it very educating so I thought that I would share it.

It is a bit outdated but the same principles do apply.

Here is a link that might be useful: Help! My computer is slow!

    Bookmark   September 24, 2011 at 6:29PM
Sign Up to comment
More Discussions
Anyone else getting Lottery spam since HOUZZ took over?
Of my various e-mail accounts, only the one I use on...
lazy_gardens
'Unnetworking' a computer
Trying to help a friend with his Vista computer. Something...
jane__ny
Safe email emoticon download for FF or Chrome?
I don't find a "search" option in the new...
Evenshade 8a
Problem watching videos from Yahoo on Android tablet
Yahoo videos won't play on my Android tablet. Videos...
Lisa_in_Germany
XP backup reinstall
Back again, considering doing a XP backup (what's best...
jerry_nj
Sponsored Products
LifeSpan C3-DT5 Desktop Cycle - C3-DT5
Hayneedle
AICO Furniture - Bella Cera Home Office Desk - 38207-45
Great Furniture Deal
Foscarini | Tropico Bell Suspension Lamp
YLighting
Artificial Grass: RealGrass by Real Grass Lawns Flooring Deluxe Artificial
Home Depot
Abbey Amber/Purple Fusion Jack Satin Nickel Mini Pendant
$230.40 | Bellacor
AICO Furniture - Windsor Court Round Dining Table in Vintage...
Great Furniture Deal
People viewed this after searching for:
© 2015 Houzz Inc. Houzz® The new way to design your home™