Help! Too many programs!

[Tarun]

StartupLite listed all of the applications that it knows. You will definitely want to remove Digital Patrol and FreeRAM XP. Digital Patrol is a trojan remover, but you have to buy it to remove what it finds. You'd be better off with avast, RogueRemover, AVG AntiSpyware, etc. FreeRAM XP is just like all RAM optimizers, they degrade performance rather than improve it.

Generated by Tarun of Lunarsoft's HijackThis Converter v0.53 Beta.

Default-color items are optional, red are known to be malicious.

Created registry value

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul...rch/search.html

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul...rch/search.html

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.com

Changed registry value

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/

Created registry value

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!

Enumeration of existing IE's BHO's

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

Enumeration of suspicious auto-loading registry entries

O4 - HKLM\..\Run: [intelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"

O4 - HKLM\..\Run: [intelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless

O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe

O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP

O4 - HKLM\..\Run: [sVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL

O4 - HKLM\..\Run: [Tvs] C:\Program Files\Toshiba\Tvs\TvsTray.exe

O4 - HKLM\..\Run: [TPSMain] TPSMain.exe

O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe

O4 - HKLM\..\Run: [ZoomingHook] ZoomingHook.exe

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [Digital Patrol Update 5] C:\Program Files\Proantivirus Lab\Digital Patrol Scanner 5.0\update.exe /autoupdate

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win

O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - Startup: Microsoft Office OneNote 2003 Quick Launch.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE

Extra IE context menu items

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

Extra "Tools" menu items and buttons

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll

O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe

O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe

Changing of IERESET.INF

O14 - IERESET.INF: START_PAGE_URL=http://www.toshibadirect.com/dpdstart

Downloaded Program Files item

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll

O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {AF2E62B6-F9E1-4D4F-A10A-9DC8E6DCBCC0} - http://update.videoegg.com/Install/Windows...ggPublisher.exe

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab

[goofogle]

I don't see any red. Is that a good thing?

I also forgot to mention that I recently nearly filled my hard drive...would that be playing a part in my problem? ^^:

[Tarun]

I don't see any red. Is that a good thing?

I also forgot to mention that I recently nearly filled my hard drive...would that be playing a part in my problem? ^^:

Though there are no items marked in red, that means there is nothing malicious. Everything listed is optional for you to remove.

Definitely free up some more space and you'll see a huge improvement.

[goofogle]

I deleted a load of stuff and my hard drive is over 50% free but I'm still getting choppy sound/performance...any other suggestions...? I'm pretty desperate right now, so I'll do anything short of taking it to a compy shop...

Edit: Do you think I'm facing a possible hard drive crash...? :/ I'm trying to move a few things to my external hard drive, but I keep getting this cyclic redundancy message. I googled it and every forum I checked said that that error message said hard drive might crash soon...I'm starting to freak out now...lol.

Edited September 6, 2007 by goofogle

[cluberti]

Have you tried uninstalling any antivirus, antispyware, backup, and/or firewall software installed on the machine to see if that helps at all?

[goofogle]

Nope...but how would that help?

[Tarun]

I deleted a load of stuff and my hard drive is over 50% free but I'm still getting choppy sound/performance...any other suggestions...? I'm pretty desperate right now, so I'll do anything short of taking it to a compy shop...

Edit: Do you think I'm facing a possible hard drive crash...? :/ I'm trying to move a few things to my external hard drive, but I keep getting this cyclic redundancy message. I googled it and every forum I checked said that that error message said hard drive might crash soon...I'm starting to freak out now...lol.

HDTune will be able to tell you the condition of your drive. Since you freed up a lot of space you are bound to have a high number of contigious/fragmented files, so you may want to defrag at a later time. For now I would not defrag until we see if your drive is failing or if it's alright.

Also, if you like you can use another computer with a cd burner and burn a few drive checking tools. HDTune will tell you who the manufacturer of your drive is and from there we can get you the proper diagnostic software.

[cluberti]

Nope...but how would that help?

Antivirus software, backup software, antispyware software, and firewall applications all install things into the Windows kernel called "filter drivers", and these capture all I/O on disk (or on the network interface, or both) and parse them (scanning for viruses, checking packets, allowing the backup software to back up open files, etc). Since *every single I/O request on the system* goes through every filter driver installed, this can severely slow your system down if one (or more) is misbehaving. Unfortunately, you cannot simply disable the application, as the kernel driver stays loaded - you need to uninstall these types of applications to remove the kernel filter driver (and reboot) for it to be gone.

If you're complaining of a slow system and your disk is fairly well defragmented and you haven't made any changes you're aware of other than patching, then you could have a faulty hard disk, or a much more likely scenario is that you have a filter driver (or two, or three....) causing issues that removing the software would address.

[goofogle]

Hey guys. Sorry it took me so long to respond. Last week was very busy for me. But yeah...I had HDTune scan my drive for any problems and it says that everything is healthy, but somehow I don't believe that...so I'm trying to find the diagnostic software that came with my laptop.