1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

My startup log, please advise what to take out.

Discussion in 'Windows XP' started by FuzzyWuzzy, Sep 19, 2004.

Thread Status:
Not open for further replies.
Advertisement
  1. FuzzyWuzzy

    FuzzyWuzzy Thread Starter

    Joined:
    Jan 24, 2004
    Messages:
    753
    Logfile of HijackThis v1.97.7
    Scan saved at 11:54:15 PM, on 9/18/2004
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\S24EvMon.exe
    C:\WINDOWS\system32\ZCfgSvc.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\System32\RegSrvc.exe
    C:\Program Files\Norton AntiVirus\SAVScan.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\System32\00THotkey.exe
    C:\WINDOWS\system32\TFNF5.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
    C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
    C:\WINDOWS\System32\1XConfig.exe
    C:\Program Files\SigmaTel\SigmaTel AC97 Audio Drivers\stacmon.exe
    C:\WINDOWS\System32\ezSP_Px.exe
    C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINDOWS\system32\TPSBattM.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\RAMASST.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\regedit.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Documents and Settings\S\Desktop\HijackThis.exe

    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\System32\00THotkey.exe
    O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
    O4 - HKLM\..\Run: [TFNF5] TFNF5.exe
    O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [TouchED] C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
    O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
    O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
    O4 - HKLM\..\Run: [SigmaTel StacMon] C:\Program Files\SigmaTel\SigmaTel AC97 Audio Drivers\stacmon.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
    O4 - HKLM\..\Run: [PRONoMgr.exe] c:\Program Files\Intel\PROSetWireless\NCS\PROSet\PRONoMgr.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
    O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1095552114291
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
     
  2. etaf

    etaf Moderator

    Joined:
    Oct 2, 2003
    Messages:
    65,294
    First Name:
    Wayne
    you need very little in startup to run te PC however, its a compromise between running the program and having the resource available.

    if you goto
    for 98, ME, XP
    start>
    run>
    msconfig>
    startup tab
    have a look at the programs listed - details available from here

    http://www.pacs-portal.co.uk/startup_content.php
    http://www.windowsstartup.com/wso/browse.php?l=1

    These sites list what the program does - if its really required and then you can remove from startup tab.

    IE things like hotkeys - if you use them you want them in startup - if you do not use then you dont have to have it running

    You have an obsolete version of hjt download version 1.98.2 from one of these sites

    http://www.tomcoyote.org/hjt/
    http://209.133.47.200/~merijn/downloads.html
    http://www.thespykiller.co.uk/
    http://aumha.org/downloads/hijackthis.exe
    http://www.majorgeeks.com/download3155.html
    http://www.thewhities.com/

    also do not put hjt onto the desktop or temp files.
    create a directory say my documents/hjt


    you can also get to startups and copy from here
    run msinfo32
    software environment
    startup programs
    highlight them all
    control C [this will copy to clipboard]
    then you can control V [this will paste from clipboard] into this post
     
  3. FuzzyWuzzy

    FuzzyWuzzy Thread Starter

    Joined:
    Jan 24, 2004
    Messages:
    753
    ok here is my new log. Im only worried about the toshiba startup files and drivers. I knw toshiba loads alot of gunk into the startup and i dont know what everythng is. Its really slowing down my laptop.

    Logfile of HijackThis v1.98.2
    Scan saved at 8:34:54 AM, on 9/19/2004
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\S24EvMon.exe
    C:\WINDOWS\system32\ZCfgSvc.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\System32\RegSrvc.exe
    C:\Program Files\Norton AntiVirus\SAVScan.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\System32\00THotkey.exe
    C:\WINDOWS\system32\TFNF5.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
    C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
    C:\WINDOWS\System32\1XConfig.exe
    C:\Program Files\SigmaTel\SigmaTel AC97 Audio Drivers\stacmon.exe
    C:\WINDOWS\System32\ezSP_Px.exe
    C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINDOWS\system32\TPSBattM.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\RAMASST.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\PROGRA~1\WINZIP\winzip32.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Documents and Settings\Steven Quon\My Documents\Unzipped\hijackthis\HijackThis.exe

    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\System32\00THotkey.exe
    O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
    O4 - HKLM\..\Run: [TFNF5] TFNF5.exe
    O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [TouchED] C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
    O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
    O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
    O4 - HKLM\..\Run: [SigmaTel StacMon] C:\Program Files\SigmaTel\SigmaTel AC97 Audio Drivers\stacmon.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
    O4 - HKLM\..\Run: [PRONoMgr.exe] c:\Program Files\Intel\PROSetWireless\NCS\PROSet\PRONoMgr.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1095552114291
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
     
  4. etaf

    etaf Moderator

    Joined:
    Oct 2, 2003
    Messages:
    65,294
    First Name:
    Wayne
    all that stuff will start to use up memory resourses - how much memory have you


    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    part of norton

    C:\Program Files\Norton AntiVirus\navapsvc.exe

    C:\WINDOWS\System32\RegSrvc.exe

    C:\Program Files\Norton AntiVirus\SAVScan.exe

    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    part of norton


    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    part of norton


    C:\WINDOWS\System32\00THotkey.exe
    For Toshiba Satellite notebook series to use the front buttons, play, stop, next, prev.


    C:\WINDOWS\system32\TFNF5.exe
    Toshiba Hotkey Utility for Display Devices. By pressing <FN> + <F5>, a window appears showing the displays that can be chosen – LCD, LCD + CRT, CRT, TV


    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    Synaptics touchpad driver helper. Required for touchpad features to work


    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    Synaptics touchpad tray icon. Displays status and provides quick launch to touchpad features such as scrolling and tap zones. Required on IBM Thinkpads with UnltraNav (pointstick and touchpad combo) if you don't want to loose the advanced pointstick features such as scroll


    C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
    TouchPad On/Off Utility on a Toshiba laptop

    C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
    Deals with the <Fn> - <Function> key combinations on a Toshiba laptop

    C:\WINDOWS\System32\1XConfig.exe

    C:\Program Files\SigmaTel\SigmaTel AC97 Audio Drivers\stacmon.exe
    Appears to be audio related

    C:\WINDOWS\System32\ezSP_Px.exe
    Engine that allows PrimoDVD from Veritas (was Prassi) and Drag'n Drop CD from Easy Systems (and maybe others) to record and protects against other software overwriting the settings

    C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
    ConfigFree™ Tray on a Toshiba laptop

    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    part of norton

    C:\WINDOWS\system32\TPSBattM.exe

    C:\WINDOWS\system32\ctfmon.exe
    CTFMon is involved with the language/alternative input services in Office XP. CTFMON.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don't need these features. For more info on ctfmon see here

    C:\WINDOWS\system32\RAMASST.exe
    Optionally installed with some DVD drives (LG, Panasonic, etc). Disables Windows XP's CD-burning abilities because they cause some incompatibilities. It does not affect your ability to burn CDs. If you do not have this program running, you may have some compatibility issues with burnt DVDs


    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\PROGRA~1\WINZIP\winzip32.exe

    C:\Program Files\Messenger\msmsgs.exe
    Windows Messenger utility. If you don't use Windows Messenger, this can be annoying. Available via Start -> Programs. Go to Windows Messenger > Tools > Options > Preferences and uncheck "Run this program when Windows starts"

    C:\Documents and Settings\Steven Quon\My Documents\Unzipped\hijackthis\HijackThis.exe
     
  5. FuzzyWuzzy

    FuzzyWuzzy Thread Starter

    Joined:
    Jan 24, 2004
    Messages:
    753
    thanks for the reply.

    could you please go a bit more detail about how to disable the office xp speech to text feeature (ctfsmon).

    what else do you think i can take out. if i remove from msconfig, wont i get that stupid popup everytime i boot saying that the startup has been altered.
     
  6. etaf

    etaf Moderator

    Joined:
    Oct 2, 2003
    Messages:
    65,294
    First Name:
    Wayne
    yes you will get the popup - but theres a box to tick to stop it coming up -
    goto the websites i posted and find ctfmon it has a link about disconnecting and if you should or not
     
  7. FuzzyWuzzy

    FuzzyWuzzy Thread Starter

    Joined:
    Jan 24, 2004
    Messages:
    753
    sorry i dont see the link.
     
  8. etaf

    etaf Moderator

    Joined:
    Oct 2, 2003
    Messages:
    65,294
    First Name:
    Wayne
    i used pacs - go about halfway/ 3/4 down the page and you will see a zip link - open and run the htm page
     
  9. etaf

    etaf Moderator

    Joined:
    Oct 2, 2003
    Messages:
    65,294
    First Name:
    Wayne
  10. FuzzyWuzzy

    FuzzyWuzzy Thread Starter

    Joined:
    Jan 24, 2004
    Messages:
    753
    i did what the instructions said and it still keeps enabling itself wtf
     
  11. etaf

    etaf Moderator

    Joined:
    Oct 2, 2003
    Messages:
    65,294
    First Name:
    Wayne
  12. FuzzyWuzzy

    FuzzyWuzzy Thread Starter

    Joined:
    Jan 24, 2004
    Messages:
    753
    ok so what is safe to remove from my startup then of all those i listed
     
  13. etaf

    etaf Moderator

    Joined:
    Oct 2, 2003
    Messages:
    65,294
    First Name:
    Wayne
    well you stop most things in startup
    its difficult to tell you what to switchoff because it depends on how you use the system

    - clearly you want the norton virus checker - when i looked up i got 2004 and 2003 - not sure if both are needed or if you have 2 versions installed.
    the toshiba keys - do you want to use them if not switch them off - but read the links and full descriptions.

    do you use the touchpad ? - if so you need that
    you need the fn key

    whats the cd burner

    do you use the drop and drag facility for CD writing - if not you can turn that off - although i have found if thats off you cant open/close CD with out using an eject command

    do you use windows messenger?

    As I say its difficult to advise and most are not required but lots of the functions people use.

    are you running low on resources when using laptop?
     
  14. FuzzyWuzzy

    FuzzyWuzzy Thread Starter

    Joined:
    Jan 24, 2004
    Messages:
    753
    im not running low but i notice that at times about half or bit more than half of my ram is used up and thats only running web, msger etc.

    and sometimes my windows will get choppy when opening and closing, and navigating between them. it basically delays in the response from wheni click on it.

    i have no spyware, i defraged and no viruses.
     
  15. etaf

    etaf Moderator

    Joined:
    Oct 2, 2003
    Messages:
    65,294
    First Name:
    Wayne
    i have 20 windows open - loads of stuff in startup and a 1.8g 512m laptop -- using 351mb memory.

    mmmmm dont know centrinos
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/275644

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice