help me lol

i dont know what gives seems to be more startup stuff on my startup list probly more of microsoft ram rapeing me when i update there so called critical updates.

here have a look and pleas tell me on my ms config what i can do with out

with out giveing up my security but geting rid of useless start ups or things behind the senes i dont need

TrojanCheck Report
   Compact report from 1/2/2003 11:17:19 AM

Registry run sections

   [HKEY_LOCAL_MACHINE]

   [Run]
   ScanRegistry   C:\WINDOWS\scanregw.exe /autorun
   TaskMonitor   C:\WINDOWS\taskmon.exe
   PCHealth   C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
   SystemTray   SysTray.Exe
   LoadPowerPro...   Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
   Hidserv   Hidserv.exe run
   WorksFUD   C:\Program Files\Microsoft Works\wkfud.exe
   NAV Agent   C:\PROGRA~1\NORTON~1\NAVAPW32.EXE
   Hot Key Kbd ...   SK9910DM.EXE
   POINTER   point32.exe
   dla   C:\WINDOWS\system\dla\tfswctrl.exe
   IgfxTray   C:\WINDOWS\SYSTEM\igfxtray.exe
   HotKeysCmds   C:\WINDOWS\SYSTEM\hkcmd.exe
   BOCleanautos...   C:\PROGRA~1\NSCLEAN\BOCLEAN\BOCLEAN.EXE
   RealTray   C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
   Microsoft Wo...   C:\Program Files\Microsoft Works\WkDetect.exe
   HP CD-DVD   C:\Program Files\HP CD-DVD\Umbrella\hpcdtray.exe
   CrazyTalk Se...   rundll32.exe C:\WINDOWS\SYSTEM\CRAZYTALK.DLL,DllServeMediaFile
   AdaptecDirec...   "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
   CreateCD50   C:\PROGRA~1\COMMON~1\ADAPTE~1\CREATECD\CREATE~1.EXE -r
   HPCDRW Remin...   "C:\Program Files\HP CD-DVD\Webreg\Navbrowser.exe" /r /i "C:\Program Files\HP CD-DVD\Webreg\NavLoad.ini"
   MMTray   C:\Program Files\MusicMatch\MusicMatch Jukebox\mm_tray.exe
   TkBellExe   C:\Program Files\Common Files\Real\Update_OB\realsched.exe -osboot
   Microsoft Wo...   C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
   IW Controlce...   C:\PROGRA~1\INSTAN~1\INSTAN~1\IWCTRL.EXE

   [RunOnce]

   [RunOnceEx]

   [RunServices]
   LoadPowerPro...   Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
   SchedulingAg...   mstask.exe
   SSDPSRV   C:\WINDOWS\SYSTEM\ssdpsrv.exe
   *StateMgr   C:\WINDOWS\System\Restore\StateMgr.exe
   ScriptBlocki...   "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
   GoBack Polli...   C:\Program Files\Adaptec\GoBack\GBPoll.exe
   ProtectBOC   BOCSEC.EXE

   [RunServicesOnce]


   [HKEY_CURRENT_USER]

   [Run]
   Eraser   C:\PROGRAM FILES\ERASER\ERASER.EXE -hide

   [RunOnce]



INI Dateien

   [WIN.INI]

   [load]

   [run]


   [SYSTEM.INI]

   [shell]
   Explorer.exe


Autostart Gruppen

   [Standard]
   Microsoft Office.lnk » C:\Program Files\Microsoft Office\Office\OSA9.EXE
   Adobe Gamma Loader.lnk » C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
   Encoder Agent.lnk » C:\Program Files\Windows Media Components\Encoder\WMENCAGT.EXE

   [All Users]


Shell-Open

   EXE   "%1" %*
   COM   "%1" %*
   BAT   "%1" %*
   PIF   "%1" %*

StartupList report, 1/2/2003, 11:18:49 AM
StartupList version: 1.35.0
Started from : C:\MY DOCUMENTS\SECURE\STARTUPLIST\STARTUPLIST.EXE
Detected: Windows ME (Win9x 4.90.3000)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\PROGRAM FILES\ADAPTEC\GOBACK\GBPOLL.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\INTERNAT.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\WINDOWS\SYSTEM\SK9910DM.EXE
C:\PROGRAM FILES\MICROSOFT HARDWARE\MOUSE\POINT32.EXE
C:\WINDOWS\SYSTEM\DLA\TFSWCTRL.EXE
C:\PROGRAM FILES\WINDOWS MEDIA COMPONENTS\ENCODER\WMENCAGT.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\NOTEPAD.EXE
C:\MY DOCUMENTS\SECURE\STARTUPLIST\STARTUPLIST.EXE

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\WINDOWS\Start Menu\Programs\StartUp]
Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Encoder Agent.lnk = C:\Program Files\Windows Media Components\Encoder\WMENCAGT.EXE

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
TaskMonitor = C:\WINDOWS\taskmon.exe
PCHealth = C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
SystemTray = SysTray.Exe
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
Hidserv = Hidserv.exe run
WorksFUD = C:\Program Files\Microsoft Works\wkfud.exe
NAV Agent = C:\PROGRA~1\NORTON~1\NAVAPW32.EXE
Hot Key Kbd 9910 Daemon = SK9910DM.EXE
POINTER = point32.exe
dla = C:\WINDOWS\system\dla\tfswctrl.exe
IgfxTray = C:\WINDOWS\SYSTEM\igfxtray.exe
HotKeysCmds = C:\WINDOWS\SYSTEM\hkcmd.exe
BOCleanautostart = C:\PROGRA~1\NSCLEAN\BOCLEAN\BOCLEAN.EXE

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SchedulingAgent = mstask.exe
SSDPSRV = C:\WINDOWS\SYSTEM\ssdpsrv.exe
*StateMgr = C:\WINDOWS\System\Restore\StateMgr.exe
ScriptBlocking = "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
GoBack Polling Service = C:\Program Files\Adaptec\GoBack\GBPoll.exe
ProtectBOC = BOCSEC.EXE

--------------------------------------------------

Enumerating Active Setup stub paths:
HKLM\Software\Microsoft\Active Setup\Installed Components
(* = disabled by HKCU twin)

[{89820200-ECBD-11cf-8B85-00AA005B4395}] *
StubPath = regsvr32.exe /s /n /i:U shell32.dll

[>PerUser_MSN_Clean] *
StubPath = C:\WINDOWS\msnmgsr1.exe

[PerUser_LinkBar_URLs] *
StubPath = C:\WINDOWS\COMMAND\sulfnbk.exe /L

[{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] *
StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {44BBA840-CC51-11CF-AAFA-00AA00B6015C}

[{7790769C-0471-11d2-AF11-00C04FA35D02}] *
StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {7790769C-0471-11d2-AF11-00C04FA35D02}

[{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}] *
StubPath = C:\WINDOWS\SYSTEM\updcrl.exe -e -u C:\WINDOWS\SYSTEM\verisignpub1.crl

[>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] *
StubPath = C:\WINDOWS\inf\unregmp2.exe /ShowWMP

[{89820200-ECBD-11cf-8B85-00AA005B4383}] *
StubPath = C:\WINDOWS\SYSTEM\ie4uinit.exe

--------------------------------------------------

Load/Run keys from C:\WINDOWS\WIN.INI:

load=
run=

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=Explorer.exe
SCRNSAVE.EXE=
drivers=mmsystem.dll power.drv

--------------------------------------------------

Checking for EXPLORER.EXE instances:

C:\WINDOWS\Explorer.exe: PRESENT!

C:\Explorer.exe: not present
C:\WINDOWS\Explorer\Explorer.exe: not present
C:\WINDOWS\System\Explorer.exe: not present
C:\WINDOWS\System32\Explorer.exe: not present
C:\WINDOWS\Command\Explorer.exe: not present

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 1/1/2003, 23:18:10)

[rename]
NUL=C:\WINDOWS\TEMP\PFT122~1\DISK1\SETUP.EXE
NUL=C:\WINDOWS\TEMP\PFT122~1\DISK1
NUL=C:\WINDOWS\TEMP\PFT122~1

--------------------------------------------------

C:\AUTOEXEC.BAT listing:

SET PATH=C:\WINDOWS\SYSTEM;C:\WINDOWS;C:\WINDOWS\COMMAND;C:\PROGRA~1\COMMON~1\ULEADS~1\MPEG
SET windir=C:\WINDOWS
SET winbootdir=C:\WINDOWS
SET COMSPEC=C:\WINDOWS\COMMAND.COM
SET PROMPT=$p$g
SET TEMP=C:\WINDOWS\TEMP
SET TMP=C:\WINDOWS\TEMP

--------------------------------------------------

C:\WINDOWS\WINSTART.BAT listing:

@C:\WINDOWS\tmpcpyis.bat

--------------------------------------------------

C:\WINDOWS\DOSSTART.BAT listing:

LH C:\PROGRA~1\MICROS~5\MOUSE\MOUSE.EXE

--------------------------------------------------

Checking for superhidden extensions:

.lnk: HIDDEN! (arrow overlay: yes)
.pif: HIDDEN! (arrow overlay: yes)
.exe: not hidden
.com: not hidden
.bat: not hidden
.hta: not hidden
.scr: not hidden
.shs: HIDDEN!
.shb: HIDDEN!
.vbs: not hidden
.vbe: not hidden
.wsh: not hidden
.scf: HIDDEN! (arrow overlay: NO!)
.url: HIDDEN! (arrow overlay: yes)
.js: not hidden
.jse: not hidden

--------------------------------------------------

Enumerating Browser Helper Objects:

NAV Helper - C:\Program Files\Norton AntiVirus\NavShExt.dll - {BDF3E430-B101-42AD-A544-FADC6B084872}
(no name) - C:\PROGRAM FILES\COMMON FILES\JUSTDO\JD2002.DLL - {A44CBB0B-C77D-4BF5-87CC-B4EE79AD1B7E}
(no name) - C:\PROGRAM FILES\E-BOOK SYSTEMS\FLIPALBUM 5 PRO\FPLAUNCH.DLL - {4401FDC3-7996-4774-8D2B-C1AE9CD6CC25}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Tune-up Application Start.job
PCHealth Scheduler for Data Collection.job
Symantec NetDetect.job

--------------------------------------------------

Enumerating Download Program Files:

[CV3 Class]
InProcServer32 = C:\WINDOWS\SYSTEM\WUV3IS.DLL
CODEBASE = http://windowsupdate.microsoft.com/R1024/V31Controls/x86/mil/en/actsetup.cab

[ForumChat]
InProcServer32 = C:\WINDOWS\SYSTEM\MSJAVA.DLL
CODEBASE = http://objects.compuserve.com/chat/RTCChat.cab

[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\DIRECTOR\SWDIR.DLL
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

[Update Class]
InProcServer32 = C:\WINDOWS\SYSTEM\IUCTL.DLL
CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37593.496087963

--------------------------------------------------
End of report, 8,052 bytes
Report generated in 0.372 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

 

Hi MRBLAZE,

Actually you´re the best person to decide what needs to start up. If it were my computer I´d dump the Office and Works entries for starters. You on the other hand, may like it when they are handy to start with.
Here is a very nice page where you can find what all these things do: http://www.pacs-portal.co.uk/startup_pages/startup_full.htm
When in doubt don´t hesitate to let us know.

Regards,

Pieter

 

Hi Mr Blaze

You might want to disable your APM, it eats system resources in vain, the instructions how to do it :
http://www.pureperformance.com/js/showtip.asp?id=100
if it´s win98 ??

be well *Ari*

Now I see it is win 98 for sure

 

I'll add a few of others, Sir Blaze:

Do you use Power Saving measures at all? If not, lose both registry refs to "Load Power Profiles"

That WorksFUD really made me mad until I stopped it - it does nothing but nag you if you want to check to see if there's an update for Works - argggh. (All that M$oft stuff has already been mentioned, but that WorksFUD is the most worthless thing.)

Do you ever use the Scheduling Agent? If you never schedule anything, keep the scheduling agent from loading into the sys tray.

Hope 2003 treats you well Blaze!

John
Luv2BSecure

 

Fabulous link, Pieter. Very, very helpful.
Thanks,
Douglas

 

Hi John

APM is exactly that "Load Power Profile" isn´t it ? It must be checked that it is not running in bios either, if it is, disable it. More details and instructions on
www.pureperformance.com
I apologize if I keep on dumbing tweak sites here, but may I say they help alot

friendliest *Ari*

 

=) yes yes oh god yes it been so long i been waiting for something like this forever cause im a newby with out a clue.

i think it unfair that these things get put into my start up menue with out me knowing what it does or worst with out asking me f i want it.

ok heres more info.

im runing windows me gate way essthinal pc with gateway start up discks millinume keybord ect ect.

i only do the following

go to internet and start my security manuealy and thats it

everything else is useless to me lol

so if i dont need any of the stuff you guys mention in the albolve on my windows me system i will gladly take it off my startup thank god lol

you guys have no clue how happy this makes me im almost in tears with joy i been geting system crashes cause to much stuff active and me not knowing what i can do with out

and no i dont schdueal stuffs all by hand manuealy including updates manuely.

so i hope that helps out so i can get more info from you guys to go ahead and kill this useless stuff.

be wating eagerly mawhaaaaaaaa

 

Mr Blaze ....how do you do.....

At first ....you can disable both players from their own settings, was it a box " load from start up" , uncheck them.

LoadPowerProfile, disable it as pureperformance.com says. The link above.

I really don´t know what are the others but one rule ok, leave just systray.exe and antivirus and firewall at start up. If I was you, I went unchecking them at msconfig first, experience how everything works....sure you can remove them permanently if you want, afterwards.

Scanregw.exe is a good tool, it backups your registry automatically, I would leave it OR disable it, you can run it manually everyday by hitting it on run field.

And for sure without any hesitation I would disable OSA9.exe, thats just one more jewel from M$

Maybe someone else has further suggestions

be well *Ari*

 

holly molly my pc is a speed demon now what you guys do=)

thers still more stuffs i hadnt look at hey this stuff is great newbys should realy know this stuff cause its very need to know stuff.

i hope if your a newby youre reading this cause im sure youre geting the low on resources warning right about now lol

keep it comeing guys

 

Hi Mike,

I know Blaze has Port Explorer from DiamondCS, so I guess that would be easy to find out whether such ports are listening.

 

LowWaterMark
Is either 5000 or 1900 listed there

FanJ
Hi Mike,

I know Blaze has Port Explorer from DiamondCS, so I guess that would be easy to find out whether such ports are listening.


yup
ssdpsrv.exe | 21:12 03/01/2003 | - | TCP | 0.0.0.0 | 5000 | 0.0.0.0 | 0 | LISTENING | 0/0 | 0/0 |
| ssdpsrv.exe | 21:14 03/01/2003 | - | UDP | =) he he he | 1900 | *.*.*.* | * | LISTENING | 0/0 | 0/0 |

yup can i get rid of it whats it for

 

ok so basicly i have these 3 left

SchedulingAgent
SSDPSRV ssdpsrv.exe
PCHealth

he he he more ram

 

wow this is great i like this i wish i would had knowen sooner

 

this is sooooooooooooooo coollllllllllllllllllll

 

holly molly i been here how long and low watter got 144 karmah and -0 bad cookies wow thats extreamy impresive

 

And the system still up and running after reboot?
I was told by MS we can in fact close all the autostart and start things manually, but we like some comfort too, don't we? Like at least a timer to wake us up with fresh coffee and croissants and baking fresh karma cookies for us if we can get that windows task scheduler make some program active to do that all for us
And some programs are really started for our real security so very very few are needed and allowed to start with reboot and i think Blaze found the way by now.
And we all have now those informative and practicle URLs for our info to check on our own systems if all is still ok, so thank you for starting this thread.

 

lol that would be cool

i love this bord its the greatest

 

Jooske

Mr Blaze....

You can have extra power (free memory), alot of, if you tweak virtual memory settings too. Easy to do, step by step. Have you looked around at pureperformance.com yet ?

*Ari*

 

Krusty,

There's one thing that is important to remember about tweaking a computer. There are probably 50 ways to accomplish the same task. All these tweaking sites all give their opinion - that's all.

As for your Power Profile - with so many programs set to execute upon boot through registry entries (Yes, don't we all long for the days when it was all in the "start-up" folder?) we have to remember not to neglect all of these different ways to accomplish things. Like - preventing the booting of the power profile - especially in XP.

Pureperformance has an opinion - that's it.

For me, I would simply remove the start-ups and there is more to it than just the one file you mentioned. You ALSO have to stop:
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme

Then, in Control Panel if you have all Power Option settings set to "NEVER" and Hibernation turned off - that accomplishes the same thing.

My point is rather simple: Just because one "tweak site" -- of which there are dozens and dozens -- says to do something one way does not make that the "right" way. No matter how much they insist that it is. With some things there is a consensus - with most things there are all kinds of ways to do just about anything.

Have a good one!

John
Luv2BSecure

 

Hi John

All opinions respectfully taken , This is exactly I like very much in good forum.
I never tell must be done something. Those tweaks itself - like we inviduals make tweaks - we then know how we make them backwards. Sure almost all computers are like fingertips, hard to find exactly similar ones, and furthermore exactly for similar purpous.
The one I do not recommend is some fuzzy program for example "Cacheman". It can really mess up much, if you do not know what it did. And this example just because of I suffered for the particular app once.
Summa summarum.....I always forget to say those unforgetable words : Make back ups before doing anything else.

be well
*Ari*