Computer Help forum

Alert

Suspect Conflicting Programs

by reinventyou-20752869572539915956799509582991 / September 13, 2011 9:35 AM PDT

I will try this again, having loused up your site with a HijackThis log that looks like garbage under my original "Slow Computer" thread. Lately I suspect that my updated Windows Search and Windows Live conflict, since I get a popup of Windows closing them even if they are not in use. To my knowledge, MS Office 2003 and WP x3, both Student/Teacher editions never conflicted. According to emailed instructions, I will send the log to the moderator.

Post a reply
Discussion is locked
You are posting a reply to: Suspect Conflicting Programs
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: Suspect Conflicting Programs
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
Suspect Conflicting Programs
by reinventyou-20752869572539915956799509582991 / September 14, 2011 8:05 AM PDT

Bob, I hope that you had no problem reading my HijackThis log. This may be premature, but today is a routine debugging day where, on my Win 7 computer I ran Spybot while, on my XP-Pro, I ran first Malwarebytes Antispyware, Avira and SUPERAntiSpyware. SUPERAntiSpyware encountered a threat. I left the program box open on the screen showing a Continue button. What next step should I follow?

Collapse -
Sorry.
by R. Proffitt Forum moderator / September 14, 2011 8:08 AM PDT

I don't remember seeing that.

Post it here and REMEMBER TO CLICK the icon to the right of the SMILEY before you do.

Since I don't know what threat all I can offer is to let SAS fix it.
Bob

Collapse -
Suspect Conflicting Programs
by reinventyou-20752869572539915956799509582991 / September 14, 2011 9:06 AM PDT
In reply to: Sorry.

I do not want to post the wrong log. Is the one you want to see HijackThis or SUPERAntiSpyware?

Collapse -
Offline for now.
by R. Proffitt Forum moderator / September 14, 2011 9:11 AM PDT

Sorry but I have to run. I'll check either later.
Bob

Collapse -
Suspect Conflicting Programs
by reinventyou-20752869572539915956799509582991 / September 14, 2011 12:15 PM PDT
In reply to: Offline for now.

Bob, I would have pasted hours ago except I got logged off while doing it before. Pages also flipped on me. Anyway, here is the HijactThis log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 4:16:52 PM, on 9/11/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Online Armor\OAcat.exe
C:\Program Files\Online Armor\oasrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nero\Update\NASvc.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Secunia\PSI\PSIA.exe
C:\WINDOWS\system32\svchost.exe
c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Secunia\PSI\sua.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\Toshiba\Tvs\TvsTray.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\WINDOWS\system32\TPSBattM.exe
C:\WINDOWS\system32\ICO.EXE
C:\WINDOWS\system32\Pelmiced.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Online Armor\OAui.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hewlett-Packard\Marketsplash by HP\HPLocalWebPrintAgent.exe
C:\Program Files\Online Armor\OAhlp.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Program Files\Secunia\PSI\psi_tray.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\MSN Toolbar\Platform\6.3.2348.0\mswinext.exe
C:\toshiba\ivp\ism\ivpsvmgr.exe
C:\toshiba\ivp\netint\netint.exe
C:\WINDOWS\system32\dllhost.exe
C:\program files\real\realplayer\update\realsched.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HijackThis\HiJackThis.exe
C:\WINDOWS\system32\SearchProtocolHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://xfinity.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Elf 1.11 Toolbar - {313a832a-aaf3-4880-a8d0-c42bee319c02} - C:\Program Files\Elf_1.11\tbElf_.dll (file missing)
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Somoto Toolbar - {c3721e85-f0ac-4b7e-ae4c-3e738011dc9d} - C:\Program Files\somototoolbar\vmntemplateX.dll
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\6.3.2348.0\npwinext.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Elf 1.11 Toolbar - {313a832a-aaf3-4880-a8d0-c42bee319c02} - C:\Program Files\Elf_1.11\tbElf_.dll (file missing)
O3 - Toolbar: @C:\Program Files\MSN Toolbar\Platform\6.3.2348.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\6.3.2348.0\npwinext.dll
O3 - Toolbar: Somoto Toolbar - {c3721e85-f0ac-4b7e-ae4c-3e738011dc9d} - C:\Program Files\somototoolbar\vmntemplateX.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [Tvs] C:\Program Files\Toshiba\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [QuickFinder Scheduler] "C:\Program Files\WordPerfect Office X3\Programs\QFSCHD130.EXE"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [@OnlineArmor GUI] "C:\Program Files\Online Armor\OAui.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\program files\real\realplayer\update\realsched.exe" -osboot
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
O4 - Startup: Microsoft Office OneNote 2003 Quick Launch.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: Marketsplash Print Software.lnk = C:\Program Files\Hewlett-Packard\Marketsplash by HP\HPLocalWebPrintAgent.exe
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O4 - Global Startup: Secunia PSI Tray.lnk = ?
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open with WordPerfect - C:\Program Files\WordPerfect Office X3\Programs\WPLauncher.hta
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.toshibadirect.com/dpdstart
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/betapit/PCPitStop.CAB
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1289529905093
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1289530386640
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.3.13.0.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - Avira GmbH - (no file)
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - Avira GmbH - (no file)
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe
O23 - Service: Online Armor Helper Service (OAcat) - Unknown owner - C:\Program Files\Online Armor\OAcat.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files\Secunia\PSI\PSIA.exe
O23 - Service: Secunia Update Agent - Secunia - C:\Program Files\Secunia\PSI\sua.exe
O23 - Service: Online Armor (SvcOnlineArmor) - Unknown owner - C:\Program Files\Online Armor\oasrv.exe
O23 - Service: Swupdtmr - Unknown owner - c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

--
End of file - 13523 bytes

Since Malwarebytes Antimalware ran clean, I will not post the log for it. I fixed the detection in SUPERAntiSpyware, but here is the log. Sorry I failed to set it up so it would have kept a more detailed one:

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 09/14/2011 at 04:34 PM

Application Version : 5.0.1118

Core Rules Database Version : 7689
Trace Rules Database Version: 5501

Scan type : Complete Scan
Total Scan Time : 00:44:09

Operating System Information
Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned : 640
Memory threats detected : 0
Registry items scanned : 39180
Registry threats detected : 0
File items scanned : 32444
File threats detected : 1

Adware.Tracking Cookie
C:\Documents and Settings\Louis Paul Toscano\Cookies\UGOILR72.txt

Collapse -
SeaPort.exe
by Dango517 / October 5, 2011 11:10 AM PDT

C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

according to this link:

http://www.brighthub.com/computing/windows-platform/articles/25609.aspx

"The SeaPort service is setup as a Windows automatic service, which means that it runs at boot time on each and every start-up. This increases what may already be a painfully slow Windows boot-up sequence. Additionally, seaport.exe runs continuously in the background. Doing so costs you around 4.5 MB of RAM. And,
whenever SeaPort decides it is time to check for and download those
updates, it will soak up some of your bandwidth as well."

used as fairuse, educational from the link above.

Your call, however.

I would suggest you look for updating programs when your system seems especially slow this can be done with some effect if your version of XP has a task manager.

or maybe use this:

http://technet.microsoft.com/en-us/sysinternals/bb896653

Does that PC have a single core processor, by chance?

Good luck. Wink

Collapse -
That one has been resolved I believe
by MarkFlax Forum moderator / October 5, 2011 8:17 PM PDT
In reply to: SeaPort.exe
Collapse -
I wrote what I thought about this a while ago.
by R. Proffitt Forum moderator / September 14, 2011 1:06 PM PDT
Collapse -
Suspect Conflicting Programs

Unless you consider Secunia one of those applications and Spyware Blaster nonessential, I would not know which one to eliminate. My Win 7 computer has both, and still runs Spybot.

Collapse -
Your choice.
by R. Proffitt Forum moderator / September 15, 2011 1:19 AM PDT

Here I run with the stock firewall, one antivirus and scans on the monthly basis find a few cookies. I can't know why you have all these installed but some folk feel better with all those.

For the scans I use those noted by Grif in these forums.

If you are looking for me to tell you that you can do without, I can only share what I do.
Bob

Collapse -
Suspect Conflicting Programs
by reinventyou-20752869572539915956799509582991 / September 15, 2011 3:17 AM PDT
In reply to: Your choice.

Bob, while I research firewalls and antivirus programs further, can you provide a link to one of Grif's most helpful posts? Also, on this computer I tried to avoid suites that provide everything like antivirus and firewall together.

Collapse -
Sure.
by R. Proffitt Forum moderator / September 15, 2011 3:24 AM PDT

I can't find a post where you tell the forum why such a collection was installed. It's quite interesting to read why folk do this.

The best response so far was they heard that security was best in layers. So they promptly installed at least 2 of every anti-this, anti-that and firewalls. What a mess.

I am not going to discourage folk from trying that because how else would they learn? Maybe it's good for the industry as they install more then decide to get a new PC?
Bob

Collapse -
Suspect Conflicting Programs
by reinventyou-20752869572539915956799509582991 / September 15, 2011 12:29 PM PDT
In reply to: Sure.

Bob, I am keeping what I have, Malwarebytes, SUPERAntiSpy, Spyware Blaster, Avira and Online Armor. The last two are not such resource hogs as I suspected. In fact, I now have something similar on my new Win 7 system, except that I have McAfee Total Care, which probably will not renew. It occurred to me that there may be too many startup programs, for which I will run msconfig.

Collapse -
Try this.
by R. Proffitt Forum moderator / September 15, 2011 12:46 PM PDT

Ask for opinions in the CNET Spyware Forum. Sorry I couldn't "talk you down".

At least you didn't jump!
Bob

Collapse -
AOL
by R. Proffitt Forum moderator / September 16, 2011 1:42 AM PDT

Just noticed the AOL items. You may want to uninstall, remove those.

Collapse -
Suspect Conflicting Programs
by reinventyou-20752869572539915956799509582991 / September 16, 2011 10:33 AM PDT
In reply to: AOL

Thanks; but are you sure. I know from A+ class at DeVry what an involved process that is. I am asking because I never activated AOL, and never took it off because, at times I used WinAmp.

Collapse -
AOL may own WinAmp
by Jimmy Greystone / September 16, 2011 10:56 PM PDT

AOL may own WinAmp, but WinAmp can exist separately from the rest of the AOL software. That's at least one stupid move AOL has managed to avoid making all these years. No offense to you, but if it took an A+ certification class to teach even that much, my opinion of that whole certification system just went down several pegs, and it wasn't exactly that high to begin with.

Collapse -
Sorry but please try harder.
by R. Proffitt Forum moderator / September 17, 2011 4:34 AM PDT

O23 - Service: AOL Connectivity Service (AOL ACS) - Avira GmbH - (no file)
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - Avira GmbH - (no file)

There may be more but why not remove things that we know dog the machines?
Bob

Collapse -
Mind if I intrude?
by MarkFlax Forum moderator / September 16, 2011 9:40 PM PDT

I saw your post in the other forum and was going to reply there, but when I tracked back I found this one, so rather than ask you to repeat everything you said, I thought I would intrude here.

I see you have two computers, a Win 7 system and a Windows XP system. It seems the Win 7 computer is working reasonably well, so I won't be mentioning that as it will just confuse me, Happy

Your HJT log is for the Windows XP computer. You will probably know by now that these forums do not generally analyse HJT logs. They are complicated and time consuming analyses, and there are other forum sites dedicated to doing these. We are not one of those, but nevertheless they are often very useful in targeting particular problems.

In your case you mention in your first post in this discussion that this XP system is slow, and you suspect conflicting programs. I see you tried to post elsewhere before this, but being honest here I have not read your other discussions. I have come here fresh.

XP is an older OS of course. Mine still works well, I still have and use my XP system even though I now generally use my newer Win 7 computer. But I know that, as the OS gets older, it will start to struggle with today's newer software. Not only because the OS is ageing, but also because, generally, these XP computer systems have outdated hardware. The processors and motherboards are slower, RAM, (memory), is often smaller, graphics cards are less powerful, and hard drive connections are often the slower IDE type cables, or older SATA Controllers. That doesn't mean that it will stop working; it just means that we have to be more circumspect with what we install and what we use on these systems.

So, although we still want to protect them from malware and hacking if they are used on the internet, today's anti-malware software taxes the OS more than they did when XP was younger and said software was more suited to XP. That software is now more suited to the higher performing Vista and Win 7 systems. On my own XP system I now keep security software to a minimum to avoid taxing the OS as much as I can. On mine I have a 3rd party firewall which includes anti-virus. This is ZoneAlarm, and it runs in the background all the time. I have no other security software running in the background. However, I still have MBAM, (MalwareBytes Anti-Malware), and SAS, (SUPERAnti-spyware), installed and I run manual scans every so often. They do not run continuously, (in the background).

That works for me and I have no problems, but of course I take other precautions like watching which sites I visit, and being careful which emails I open. I am not saying that you must use the same utilities as me. All the recognised ones work well.

So, when I looked at your HJT log, what I could see immediately for what seems like security programs are the following;

Online Armor
AntiVir Desktop &
Avira\AntiVir Desktop\avguard.exe
SUPERAntiSpyware
Secunia\PSI\sua.exe

I also saw mention elsewhere of Spybot Search & Destroy and SpywareBlaster. I know you have now uninstalled Spybot.

I don't know much about all of the items in the list, so I have to ask?

What is OnlineArmor? Is it a firewall and an anti-virus, or just a firewall?
What is AntiVir? Is it an anti-virus, or a firewall and anti-virus?
Does SUPERAnti-spyware run in the background?
Why are you using Secunia PSI?

The general rule, for all Windows OSes, is this; Only one firewall. Only one Anti-Virus. They must both run in the background and the anti-virus must be kept up to date. If you have one security utility that 'combines' a firewall, an anti-virus, and, (perhaps), an anti-spyware, then you do not need any other.

Do not have any anti-spyware running in the background. By all means have an anti-spyware utility installed, (I have two, MBAM and SAS), but not running all the time. Instead, you can run your anti-spyware once a week or so to update its definitions and then run a manual scan.

Both Spybot and SpywareBlaster were great utilities in years gone by, along with Lavasoft's AdAware. But we find, sadly, nowadays that they often conflict with today's more comprehensive background running anti-virus scanners. In particular, Spybot's TeaTimer Advanced Mode scanning component, and Lavasoft's AdWatch scanning component. You don't have Lavasoft, and you have uninstalled Spybot. Good. Personally I would also uninstall Spywareblaster. It is no longer required. But if you do uninstall it, make sure you remove its inoculations first.

Can you consider all this and decide what you 'really' need on this computer? I believe that what you have may be the conflicting software you feel you have.

The next steps, to be considered later, will be to look at "Startup files", software that loads at startup. These are the 04 entries in the HJT log. I think you have too many, and unwanted;

AGRSMMSG.exe - http://www.neuber.com/taskmanager/process/agrsmmsg.exe.html
DivXUpdate.exe - DivX Player Updater
Java Update\jusched.exe - Java Updater
AdobeARM.exe
QTTask.exe - QuickTime Player Updater.
realsched.exe - RealPlayer Updater.
SUPERAntiSpyware.exe

Then we look at BHO's, (Internet Explorer Browser Helper Objects), 02 in the HJT.

But they are for later.

Mark

Collapse -
Suspect Conflicting Programs
by reinventyou-20752869572539915956799509582991 / September 16, 2011 10:02 PM PDT
In reply to: Mind if I intrude?

MarkFlax: Thanks for your participation. Avira is an antivirus. Online Armor is a firewall. From my research, neither is a resource hog but I am not sure how they compare with ZoneAlarm. Secunia draws recommendations from other troubleshooting sites; so I have used it on both computers. It keeps track of end-of-life and out-of-date programs. However, it does not have to run in the background and I took care of that with msconfig. SUPERAntiSpyware ran in the background until I used msconfig. This morning, taking Bob's advice, I used iobituninstall to remove all of AOL programs. Also, there was in my Word Perfect x3 suite a data base program called Paradox. I removed that since it seemed to be corrupted.

Collapse -
Ahh!
by MarkFlax Forum moderator / September 16, 2011 10:26 PM PDT

Before I comment further I have to say I groaned when I saw your mention of IOBit. This is one of those Optimizer/Registry Cleaner utilities that we see so much of in these forums, and they are never good news as far as we are concerned.

In fact on too many occasions we will tell the posters after seeing such use that "All bets are off", and suggest a reinstall of the OS, because the damage is so bad.

Hopefully your experience is better, and in an case removing AOL if you no longer use it is great.

So, has performance improved? I see you have removed SAS from the startup files and I assume you did that 'after' you posted the HJT log.

I was going to mention that WordPerfect Suite. It seemed a little incongruous in the startup folder.

Having Avira and Online Armor is fine. I am not sure if that Secunia application is required. It depends how much you depend on it, but I find end-of-life and out-of-date programs not to be something I concern myself with, and certainly not on an older OS like XP. But I see you have removed that from Startup as well.

How are we doing now? Any thoughts on the other Startup entries?

Mark

Collapse -
By the way
by MarkFlax Forum moderator / September 16, 2011 10:29 PM PDT
In reply to: Ahh!
Collapse -
Suspect Conflicting Programs
by reinventyou-20752869572539915956799509582991 / September 17, 2011 2:05 PM PDT
In reply to: By the way

MarkFlax: Thanks for your posts. I guess XP will never compare in performance with Win 7; but it is improved not that some things are off and that I now have IE8. Usually I try to keep media players from starting up, using them only as I desire. I still have a PDA that was new in 2001, which would explain the Hot Sync. Its purpose is to begin documents on the PDA during spare moments when I am away from home and later to sync them with Word. When that PDA dies completely, I will bite the bullet and purchase a cell phone with a similar app on it. That will give me more programs to uninstall on the XP laptop. Thanks again.

Collapse -
Final Detail
by reinventyou-20752869572539915956799509582991 / September 17, 2011 2:10 PM PDT

MarkFlax: I still have HijackThis on my XP computer, having reinstalled it thinking someone out there may want me to run it and create a log. That will go when I confirm that no one needs it. Of course, I will create a restore point before I make any changes like this.

Collapse -
This seems to be looking good.
by MarkFlax Forum moderator / September 17, 2011 7:29 PM PDT
In reply to: Final Detail

I see that XP is improving and that's good news.

You mention a PDA and HotSync. Can I assume that relates to what I asked, about the entry;
C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe ?

If so, then that's fine. I don't intend to make this machine unworkable or unsuitable for what 'you' want to do with it.

So let's continue. I can see this is going to be a 'step by step' process as we work our way down the HJT logs, only because I am cautious and don't want to get you deleting this that and the other all at once. I hope you don't mind.

Next step then. I note in your 2nd post way above that you ran SAS and it found a threat. Did you remove that at the time? If not, update SAS and run it again, and remove all threats.

Then can you run that HJT again and post a new log in reply to this post? Let's see how things are progressing, and in particular I see from Bob's post that he asked if AOL had really gone, and the new log will show that.

Mark

Collapse -
Suspect Conflicting Programs
by reinventyou-20752869572539915956799509582991 / September 18, 2011 6:39 AM PDT

MarkFlax, yes, I removed the threat with SAS without anyone analyzing it. Before I closed out of my Word and browser windows to run HJT, I noticed again one of those Windows boxes stating that an program encountered an error and needs to close. Again, the program was Windows Live Sign In. I thought yesterday I took it out of Startup which I ran msconfig. After checking it again, the program still was unchecked. I will paste my HJT log here, but that is the only problem I have related to the recent update of my XP and IE8.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 4:17:57 PM, on 9/18/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Online Armor\OAcat.exe
C:\Program Files\Online Armor\oasrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nero\Update\NASvc.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Secunia\PSI\PSIA.exe
C:\WINDOWS\system32\svchost.exe
c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Secunia\PSI\sua.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\Toshiba\Tvs\TvsTray.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\WINDOWS\system32\TPSBattM.exe
C:\WINDOWS\system32\ICO.EXE
C:\WINDOWS\system32\Pelmiced.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Online Armor\OAui.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Program Files\Online Armor\OAhlp.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\toshiba\ivp\ism\ivpsvmgr.exe
C:\toshiba\ivp\netint\netint.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\MSN Toolbar\Platform\6.3.2348.0\mswinext.exe
C:\Program Files\Trend Micro\HijackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://xfinity.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Elf 1.11 Toolbar - {313a832a-aaf3-4880-a8d0-c42bee319c02} - C:\Program Files\Elf_1.11\tbElf_.dll (file missing)
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Somoto Toolbar - {c3721e85-f0ac-4b7e-ae4c-3e738011dc9d} - C:\Program Files\somototoolbar\vmntemplateX.dll
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\6.3.2348.0\npwinext.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Elf 1.11 Toolbar - {313a832a-aaf3-4880-a8d0-c42bee319c02} - C:\Program Files\Elf_1.11\tbElf_.dll (file missing)
O3 - Toolbar: @C:\Program Files\MSN Toolbar\Platform\6.3.2348.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\6.3.2348.0\npwinext.dll
O3 - Toolbar: Somoto Toolbar - {c3721e85-f0ac-4b7e-ae4c-3e738011dc9d} - C:\Program Files\somototoolbar\vmntemplateX.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [Tvs] C:\Program Files\Toshiba\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [QuickFinder Scheduler] "C:\Program Files\WordPerfect Office X3\Programs\QFSCHD130.EXE"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [@OnlineArmor GUI] "C:\Program Files\Online Armor\OAui.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE /auto
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Microsoft Office OneNote 2003 Quick Launch.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open with WordPerfect - C:\Program Files\WordPerfect Office X3\Programs\WPLauncher.hta
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.toshibadirect.com/dpdstart
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/betapit/PCPitStop.CAB
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1289529905093
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1289530386640
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.3.13.0.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe
O23 - Service: Online Armor Helper Service (OAcat) - Unknown owner - C:\Program Files\Online Armor\OAcat.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files\Secunia\PSI\PSIA.exe
O23 - Service: Secunia Update Agent - Secunia - C:\Program Files\Secunia\PSI\sua.exe
O23 - Service: Online Armor (SvcOnlineArmor) - Unknown owner - C:\Program Files\Online Armor\oasrv.exe
O23 - Service: Swupdtmr - Unknown owner - c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

--
End of file - 12229 bytes

Collapse -
Why are you using the Netware Protocol?
by R. Proffitt Forum moderator / September 18, 2011 7:38 AM PDT
Collapse -
Suspect Conflicting Programs

MarkFlax, I think I know, but this is just a guess. This XP-Pro is a Toshiba Satellite A105-S4002 laptop. When I set up my wireless network, I went to the local Best Buy. They had also added RAM to this computer. When I bought my router, they tested F8. Since it did not turn on the wireless adapter, they assumed it was damaged. Then they sold me the Netgear WG111 v3 USB Wireless Adapter. Within the last three weeks or so I did some research. On Toshiba's F8 does not work except to inform the status of the wireless. Toshiba uses a separate switch, a tiny one which I found on on the front right. Not able to get anyone's attention in the store, I sent Best Buy an email. This was inexcusible because they sell Toshiba's. Geek Squad should have known where to look. So, I turned on the internal wireless adapter and connected through it. Then I also uninstalled the driver off which the USB adapter runs. I no longer use the unplugged Netgear adapter. Maybe this piece of the system was left over from that uninstall. What should I do with it? I hope my current set up does not depend on it.

Collapse -
Netware.
by R. Proffitt Forum moderator / September 18, 2011 10:28 AM PDT

This is one where your IT staff answers. Netware is rare today. I gave a link that noted that and how to remove.

I don't keep things like that since it's overhead and a possible malware attack vector.
Bob

Collapse -
Suspect Conflicting Programs
by reinventyou-20752869572539915956799509582991 / September 19, 2011 2:19 AM PDT
In reply to: Netware.

I am a private user, and an unemployed one at that. I don't remember if my profile reflects it, but I am having a rough time trying to return to work and get off disability. There is no IT staff.

Popular Forums
icon
Computer Help 47,885 discussions
icon
Computer Newbies 10,322 discussions
icon
iPhones, iPods, & iPads 3,188 discussions
icon
Security 30,333 discussions
icon
TVs & Home Theaters 20,177 discussions
icon
HDTV Picture Setting 1,932 discussions
icon
Phones 15,713 discussions
icon
Windows 7 6,210 discussions
icon
Networking & Wireless 14,510 discussions

Tech for the school year

Smart tech for smart students

Forget the pencils and notebooks. Gear up your students with these portable and powerful note-taking machines.