Reply
Sat 29 Jul, 2006 02:07 am
I have used spybot to disable some programs that automatically start when i log in. I wonder if someone would care to peruse the attatched list and comment on those programs still starting at start up.
Please note that although this entry below says disabled I get a spybot message to tell me spybot is unable to make changes to this program
Located: HK_LM:Run, Zone Labs Client (DISABLED)
with regard to the system files I have no clue as to wheather I need these running or in fact what they do. I have highlighted the entries I dont know about.
If you can advise please do so.
--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---
Located: HK_LM:Run, iTunesHelper (DISABLED)
command: "C:\Documents and Settings\All Users\Documents\iTunesHelper.exe"
file: C:\Documents and Settings\All Users\Documents\iTunesHelper.exe
size: 278528
MD5: 00d20b701816bdd2cc2445e6c388ef70
Located: HK_LM:Run, QuickTime Task (DISABLED)
command: "C:\Program Files\QuickTime\qttask.exe" -atboottime
file: C:\Program Files\QuickTime\qttask.exe
size: 282624
MD5: 383145864f6543c97a7e1b78505d2f1c
Located: HK_LM:Run, Zone Labs Client (DISABLED)
command: "C:\Program Files\CA\eTrust Internet Security Suite\eTrust Personal Firewall\ca.exe"
file: C:\Program Files\CA\eTrust Internet Security Suite\eTrust Personal Firewall\ca.exe
size: 943880
MD5: 45db690cecd68335ee4263ba15301d1c
Located: HK_LM:Run, ATIPTA (DISABLED)
command: "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
file: C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
size: 344064
MD5: ea1490b820c75217f8e95e0d265c6464
Located: HK_LM:Run, CaAvTray
command: "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe"
file: C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe
size: 230952
MD5: ec70f6d86d3b8e9cd1afff20e51d9541
Located: HK_LM:Run, CaISSDT
command: "C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe"
file: C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe
size: 165416
MD5: ceab5588d18bf765daf10d6c2619e15f
Located: HK_LM:Run, CAVRID
command: "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe"
file: C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe
size: 185896
MD5: 4cc3d9394e35365f88cd3eb0605c9654
Located: HK_LM:Run, eTrustPPAP
command: "C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe"
file: C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe
size: 258048
MD5: 0f0bf2db9ae8658220e832d9fcb5194f
Located: HK_LM:Run, QOELOADER
command: "C:\Program Files\CA\eTrust Internet Security Suite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe"
file: C:\Program Files\CA\eTrust Internet Security Suite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe
size: 7168
MD5: 0386dc071a98680ed6c4811fbeebf05d
Located: HK_LM:Run, snpstd (DISABLED)
command: C:\WINDOWS\vsnpstd.exe
file: C:\WINDOWS\vsnpstd.exe
size: 40960
MD5: f14bd811617d3485ef3a8b6bff880024
Located: HK_LM:Run, Zone Labs Client (DISABLED)
command: "C:\Program Files\CA\eTrust Internet Security Suite\eTrust Personal Firewall\ca.exe"
file: C:\Program Files\CA\eTrust Internet Security Suite\eTrust Personal Firewall\ca.exe
size: 943880
MD5: 45db690cecd68335ee4263ba15301d1c
Located: HK_CU:Run, MSMSGS (DISABLED)
command: "C:\Program Files\Messenger\msmsgs.exe" /background
file: C:\Program Files\Messenger\msmsgs.exe
size: 1694208
MD5: 74e6e96c6f0e2eca4edbb7f7a468f259
Located: HK_CU:Run, msnmsgr (DISABLED)
command: "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
file: C:\Program Files\MSN Messenger\msnmsgr.exe
size: 7094272
MD5: b83e12b5341c5dcecc5c217a824ffeb1
Located: HK_CU:Run, Yahoo! Pager (DISABLED)
command: "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
file: C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
size: 4617720
MD5: 5d9f8bb695fb8add233e50ff4a4bc3c0
Located: Startup (common), Adobe Reader Speed Launch.lnk (DISABLED)
command: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
file: C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
size: 29696
MD5: 43362b96870ce8649f4f2ec893da93f0
Located: Startup (common), hp psc 1000 series.lnk (DISABLED)
command: C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
file: C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
size: 147456
MD5: 032a9526b5cf926ab9e5177c58e08816
Located: Startup (common), hpoddt01.exe.lnk (DISABLED)
command: C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
file: C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
size: 28672
MD5: ca7e928c4a34f10898c941b05968be6f
Located: System.ini, AtiExtEvent
command: Ati2evxx.dll
file: Ati2evxx.dll
Located: System.ini, crypt32chain
command: crypt32.dll
file: crypt32.dll
Located: System.ini, cryptnet
command: cryptnet.dll
file: cryptnet.dll
Located: System.ini, cscdll
command: cscdll.dll
file: cscdll.dll
Located: System.ini, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
Located: System.ini, Schedule
command: wlnotify.dll
file: wlnotify.dll
Located: System.ini, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
Located: System.ini, SensLogn
command: WlNotify.dll
file: WlNotify.dll
Located: System.ini, termsrv
command: wlnotify.dll
file: wlnotify.dll
Located: System.ini, WgaLogon
command: WgaLogon.dll
file: WgaLogon.dll
Located: System.ini, winwly32
command: winwly32.dll
file: winwly32.dll
It appears you have both ZoneAlarm and eTrust Personal Firewall installed,with ZoneAlarm disabled. I recommend you uninstall one or the other firewall. Since eTrust evidently is your active security/privacy suite, get rid of ZoneAlarm, including its shared files and its containing folder.
Located: HK_LM:Run, snpstd (DISABLED)
command: C:\WINDOWS\vsnpstd.exe
file: C:\WINDOWS\vsnpstd.exe
size: 40960
MD5: f14bd811617d3485ef3a8b6bff880024 is related to your webcam (assuming you have one) and may be needed for full functionality of the cam. If you do have a webcam, I suggest you leave this alone.
Located: Startup (common), hp psc 1000 series.lnk (DISABLED)
command: C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
file: C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
size: 147456
MD5: 032a9526b5cf926ab9e5177c58e08816
Located: Startup (common), hpoddt01.exe.lnk (DISABLED)
command: C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
file: C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
size: 28672
MD5: ca7e928c4a34f10898c941b05968be6f - these entries are related to the functioning of features particular to HP printers - if you have one, its prolly not a good idea to disable these.
Located: System.ini, crypt32chain
command: crypt32.dll
file: crypt32.dll
Located: System.ini, cryptnet
command: cryptnet.dll
file: cryptnet.dll
Located: System.ini, cscdll
command: cscdll.dll
file: cscdll.dll
Located: System.ini, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
Located: System.ini, Schedule
command: wlnotify.dll
file: wlnotify.dll
Located: System.ini, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
Located: System.ini, SensLogn
command: WlNotify.dll
file: WlNotify.dll
Located: System.ini, termsrv
command: wlnotify.dll
file: wlnotify.dll
Located: System.ini, WgaLogon
command: WgaLogon.dll
file: WgaLogon.dll
Located: System.ini, winwly32
command: winwly32.dll
file: winwly32.dll - these all are critical system files and appear to be as they should be; leave 'em alone.
Thanks Timber for your advice.
I have had Zone Alarm on this computer in the past, however I "believed" I had deleted it via windows add/remove programs.
Zone alarm does not currently appear in the add/remove programs list.
Any further comments?