HELP PLEAS WITH START UP'S

Hi guys it me Blaze

I need help with a few things

i need help with these things

1.startups
2.runing process
3.services
4.how to disable this stuff like runing process from starting up algain

here some info on my pc so you can hopefully help me out better
im on a Gateway pc with windows xp

i mainly use this pc for dowenloading browseing the web e-mal and security applications

i mainly like manualy updating software
i have all dcs products but i update manually

i have norton 2003 system works i to update manualy

i need to kill or disable stuff i dont use at all

my internet provider is juno

so i need to really stop stuff i dont use

which is everything other then what i mentioned

ill post some pics and you guys tell me what and how to get rid of it or just disable it

also i dont use aol no more

 

here servicess

 

here my start up list any recomendations what i should turn back on or off

it seem to work fine as it is and it perty fast

 

here my hijack this log
Logfile of HijackThis v1.97.7
Scan saved at 9:43:34 AM, on 6/19/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Roxio\GoBack\GBPoll.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\God's Shild\pg_msgprot.exe
C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\HHVcdV5Sys\VC5SecS.exe
C:\Program Files\HHVcdV6Sys\VC6SecS.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Virtual CD v6 FS\System\vc6fserv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Juno6\zCast.exe
C:\Program Files\Juno6\chkras.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\AIM\aim.exe
C:\Program Files\FlashGet\flashget.exe
C:\Documents and Settings\GOD\My Documents\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://my.juno.com/s/search?r=minisearch
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.juno.com/s/search?r=minisearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.juno.com/s/search?r=minisearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://my.juno.com/s/search?r=minisearch
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://my.juno.com/s/search?r=minisearch
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://my.juno.com/s/search?r=minisearch
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank
R3 - URLSearchHook: URLSearchHook Class - {37D2CDBF-2AF4-44AA-8113-BD0D2DA3C2B8} - C:\Program Files\JUSearch\SearchEnh1.dll
O1 - Hosts: 64.91.255.87 www.dcsresearch.com
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {4401FDC3-7996-4774-8D2B-C1AE9CD6CC25} - C:\Program Files\E-Book Systems\FlipAlbum 5 Pro\FpLaunch.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O8 - Extra context menu item: &Check Spelling - res://C:\Program Files\ieSpell\ieSpell.dll/SPELLCHECK.HTM
O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\ieSpell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Save with Download Manager... - file://C:\Program Files\J River\Media Center\DMDownload.htm
O8 - Extra context menu item: Sothink SWF Decompiler - C:\Program Files\SourceTec\Sothink Glanda\InternetExplorer.htm
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: MoneySide (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/12119/CTSUEng.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://support.gateway.com/support/profiler/PCPitStop.CAB
O16 - DPF: {32634F75-03FF-11D4-B346-00C04FA06E32} (LifeFX Player, version 0. - http://betamirror2.lifefx.com/FaceOfTheInternet/lfxplr.cab
O16 - DPF: {9A57B18E-2F5D-11D5-8997-00104BD12D94} (compid Class) - http://support.gateway.com/support/serialharvest/gwCID.CAB
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37959.8340625
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/12119/CTPID.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{27C4F970-7DFF-4A93-9D5F-49222C4658E8}: NameServer = 64.136.20.121 64.136.20.133
O17 - HKLM\System\CS1\Services\Tcpip\..\{27C4F970-7DFF-4A93-9D5F-49222C4658E8}: NameServer = 64.136.20.121 64.136.20.133

 

so basicly im asking you how you guys configure this if this was your pc and you wanted speed and resourcess while still maintaining your security

 

heres a super start up list by a program that supose to detect secret start ups

StartupList report, 6/19/2004, 11:12:19 AM
StartupList version: 1.52
Started from : C:\Documents and Settings\GOD\Desktop\StartupList.EXE
Detected: Windows XP SP1 (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Roxio\GoBack\GBPoll.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\God's Shild\pg_msgprot.exe
C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\HHVcdV5Sys\VC5SecS.exe
C:\Program Files\HHVcdV6Sys\VC6SecS.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Virtual CD v6 FS\System\vc6fserv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Juno6\zCast.exe
C:\Program Files\Juno6\chkras.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\FlashGet\flashget.exe
C:\Documents and Settings\GOD\Desktop\StartupList.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

ccApp = "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
ccRegVfy = "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

Microsoft Works Update Detection = C:\Program Files\Microsoft Works\WkDetect.exe

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=*Registry value not found*
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - C:\Program Files\E-Book Systems\FlipAlbum 5 Pro\FpLaunch.dll - {4401FDC3-7996-4774-8D2B-C1AE9CD6CC25}
(no name) - C:\PROGRA~1\SPYBOT~1\SDHelper.dll - {53707962-6F74-2D53-2644-206D7942484F}
(no name) - C:\PROGRA~1\FlashGet\jccatch.dll - {A5366673-E8CA-11D3-9CD9-0090271D075B}
NAV Helper - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll - {BDF3E430-B101-42AD-A544-FADC6B084872}
(no name) - C:\Program Files\Microsoft Money\System\mnyviewer.dll - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC}

--------------------------------------------------

Enumerating Task Scheduler jobs:

FRU Task #Hewlett-Packard#hp psc 2170 series#1070768343.job
Norton AntiVirus - Scan my computer.job
Norton SystemWorks One Button Checkup.job
Symantec NetDetect.job

--------------------------------------------------

Enumerating Download Program Files:

[Creative Software AutoUpdate]
InProcServer32 = C:\WINDOWS\DOWNLO~1\CTSUEng.ocx
CODEBASE = http://www.creative.com/su/ocx/12119/CTSUEng.cab

[PCPitstop Utility]
InProcServer32 = C:\WINDOWS\DOWNLO~1\PCPITS~1.DLL
CODEBASE = http://support.gateway.com/support/profiler/PCPitStop.CAB

[LifeFX Player, version 0.8]
InProcServer32 = C:\PROGRA~1\LifeFX\LifeFX.dll
CODEBASE = http://betamirror2.lifefx.com/FaceOfTheInternet/lfxplr.cab

[compid Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\gwCID.dll
CODEBASE = http://support.gateway.com/support/serialharvest/gwCID.CAB

[Update Class]
InProcServer32 = C:\WINDOWS\System32\iuctl.dll
CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37959.8340625

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\System32\macromed\flash\Flash.ocx
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

[Creative Software AutoUpdate Support Package]
InProcServer32 = C:\WINDOWS\DOWNLO~1\CTPID.ocx
CODEBASE = http://www.creative.com/su/ocx/12119/CTPID.cab

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\System32\webcheck.dll
SysTray: C:\WINDOWS\System32\stobject.dll

--------------------------------------------------
End of report, 5,971 bytes
Report generated in 0.961 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

 

ouch no help

 

LOL blaze.. you certainly have some stuff running there mate.

No, I won't recommend any to stop, as some are needed on one machine but not on another...... depends.

Here is a site that gives very good info:


http://www.uksecurityonline.com/husdg/windowsxp/disableservices.htm

and.. I have attached my services.... highlighted what is running on mine.. there are maybe one or more I *could* stop, but that's good enough for me.

Couple that were recommended to stop, but were essential for me as I am on dial-up.

HTH, TAS

 

Looking at the machine name or the user name causes me say....Let God sort it out

 

dear Mr.Blaze, i think i forgot everything. its very long list and as far as i know you can make the following changes.

1. disable Hyper Snap and if you are not using any SCSI drive you can disable SCSI Access too.

2. if you are not developing .NET or using any .NET application you can disable that service.

3. disable Computer Browser, Smart Card services, Server, NLA, etc. if you use those things then leave them to start manually.

4. enable BOClean and ProcessGuard.

5. get rid of WildTangent and VirtualGirl. get rid of that DivX with GAIn and get the FREE version.

6. check your system with both Spybot and install SpywareBlaster.

it'd be wise to backup your settings. someone who can check out your system personally will have the wisest suggestion.

 

how do i set up the manual and auto and disable options like Tassie_Devils picture all i see is the turn off switch and thats it

 

omg it really is there but it was hidden


i couldnt find it the normal way

instead i had to right click on control panel and select option explore

then a side menue apear with hundreads of folder

i click on folder admistrativ tools

when i open it all there was lol short cut icons to the real icon where ever the real program is hidden

i click on services pc icon and now in in there with same screen as yours

man microsoft mean to newbies

thx guys big big hugs all around

i did a reg edit save of all my settings first of my puters registration

so now i can play right

 

Black Viper has a good guide for configuring XP services:

http://www.blackviper.com/WinXP/servicecfg.htm

Scroll down to "Black Viper's Windows XP Home and Professional Services Configurations:"

Nick

 

well lets see im on juno i only use this to dowenload files check e-mail play with security applications i manually update everything

i only use aim instant messenger to aim talk and chat with voice and upload and recive files everything i update or needs to be updated is manually im on windows xp

any of you guys just like me if so let me have a pic of your config all ill copy yours lol

seriosley thats all i do on this pc

so shouldnt there be alot i can turn off?

 

Blaze... 3 options to get to Services like mine...

1: Start/Program Files/Administrative Tools/Services.

2: Like LWM posted.. but... you must have your Control Panel "expanded view" otherwise you had to get to it like you did in your reply... long way round.

3: Once you actully get to the Services via one of above.. Right click on it.. Send to....Desktop [create shortcut]. I have it on my Quick Launch Bar

Now.. to expand Control Panel...

Right click on Task Bar/Properties/Start Menu TAB/and whichever view you are using click the Cutomise Button... then check the 'Expand Control Panel... see my pic.. I am using Classic View.

Click OK on way out.. and then when you go to Start/Settings/Control Panel.. it's fully expanded.. see all the options... see pic next post.. LOL...

 

this is how it looks expanded now..


TAS

 

well i went to both websites i first use the uk link after i did all that i went to black vipers and picked the 95% safe option and reconfig it and fine tune it

should be intresting to see what happends yes thx guys

 

thx taz thx guy my pc lot faster lol it faster then my dad and he has way more ram then me and 1ghz p4 processor lol i have 700mb celeron and mine starts upp way faster lol

i bet hes pisst lol

 

My pleasure MR BLAZE, my pleasure.. glad the guys and I could help...

Yep.. I can Shut Down/Reboot in under a minute.... and that's still starting up my Firewall, AV, AT, PG, SG.

TAS.

 

dear Mr.Blaze, Microsoft is not that mean. you can invoke those tools just by typing their name on START -> RUN. here are some common ones you should use.

COMPMGMT.MSC -- computer management
DEVMGMT.MSC -- device manager
DFRG.MSC -- defragmanter
SERVICES.MSC -- services manager
GPEDIT.MSC -- group policy editor
EVENTVWR.MSC -- event viewer ( yes its important to check it out regularly )
SECPOL.MSC -- local security settings