Do gift horses come with spyware and virusii?

[icarus]

I am deeply suspicious.

It's not that I'm not happy my spyware and virus protection software haven't picked up a single virus or spy-fly in two weeks. Oh, yes, that is good news. Who wants virusii and spies?

It just doesn't make sense that as of December 31, all of my programs suddenly declare a daily clean bill of health. Not so much as a tracking cookie. For as long as I can remember, I've picked up a daily clutter of adware.

Also, don't different virus protection packages detect different viruses and spyware? They shouldn't match.

Then, the date they all started declaring my system clean is suspicious. They all say the same thing as of December 31st.

Add to that my system is running at the speed of cold sludge.

...

Yeah. Maybe I should celebrate my good fortune. Or maybe I should take a closer look.

Comments

[amalthia]

that is kind of suspicious. What anti-virus/spyware are you using? I only spy-bot scan my computer when it's slowing down and use the Free AVG.

I always thought it was the anti-virus people who'd make the viruses so people would buy their products.

[icarusancalion.livejournal.com]

Ha. That would be a scam.

I'm using the free AVG, version 8. I'm reading some reviews (http://www.pcmag.com/article2/0,2817,2291383,00.asp) and it seems some people say it hogs system resources. I know it didn't protect me from that blasted mininova virus. I might switch to ClamAV since apparently it has some aspects of Trend Micro's virus protection (Trend Micro is suing Barracuda, the guys who've bundled the open source ClamAV with their software, and it's Trend Micro's short term trial version that cleaned up my mininova virus). Maybe switching virus software will help detect whatever's wrong.

Additionally, I'm running Spydoctor, Malwarebytes periodically, and SUPERAntiSpyware.

I may have become paranoid. :D But you're not paranoid if the spyware is really out to get you!

[amalthia]

The reason I use my laptop and save everything else off the computer is because even with all the stuff I have my computer gets the most annoying spyware/adware attacks ever and sometime it's just easier to reformat. (at least it was the last time) I'm really annoyed that there is no one product that can protect your computer against all the stupid threats floating around on the internet. And now there's this worm that can be transferred via usb sticks. :(

[icarusancalion.livejournal.com]

It looks like my system isn't loaded with virusii. Instead, I have unnecessary software bogging it down. Orbitdownloader. Bonjour. iTunes Helper. All kinds of useless crap that installed itself with my updates.

[amalthia]

That would do it. I check my processes from time to time and see what's running...it helps sometimes. I've seen computers with over 60 processes running while I"m trying to keep mine at 38 before I open any programs.

[icarusancalion.livejournal.com]

Can I just... turn these off? Tell it to end process? Because I always get a threatening message that says Horrible Things might happen if I do so.

[amalthia]

Well some processes are necessary and others you can turn off from the starup because there is no need for them to startup when your computer turns on. but if you don't know what you're doing you could mess up some programs. I think there are online guides that let you know what's safe to turn off and what you need to keep.

[icarusancalion.livejournal.com]

Let me pick your brain here a moment. How do I get something to not automatically on Start Up?

[dunv-i.livejournal.com]

First open your start menu, in the programs there should be a folder called "start up" - anything in there loads on start up. If you don't want it loading right away (or at all), right click and delete. Then, go to run and type msconfig, and again there's a tab called start up - although this one is more annoying to navigate. Some will be obvious, like the iTunes stuff, others you'll have to google to learn about.

(by the way, don't bother turning off any of the iTunes stuff in the msconfig, if you do it. It re-inserts itself as soon as you load iTunes next. One of the reasons I don't use iTunes - it's too insidious for a 4 year old mid-range laptop)

[amalthia]

go to start - run - type in msconfig and the startup options and services are listed there. Services is probably something you want to look in first and then startup.

[mad_maudlin]

I will second the claim that AVG is a memory hog--I simply cannot run anything else, except maybe Solitaire, while it's doing a scan. It also starts scanning every time I boot up, which makes it a joy to try to shut off while all the other start-when-Windows-starts programs are trying to do their thing.

Something you might want to test out is RunScanner, which tells you what programs are running on your computer and gives you a nice hyperlinked report to help identify any malware in disguise. I used it while trying to troubleshoot my driver issues. If there's something running in the background (aside from AVG) that's sucking up memory, RunScanner might suss it out.

[icarusancalion.livejournal.com]

Okay, I feel better now about my doubts.

(Psst. Have you seen amothea's rec of Heteronormativity?)

[mad_maudlin]

...now that you pointed it out to me, I have. Wow. No wonder that's still getting comments. I must've done something right...

[icarusancalion.livejournal.com]

I can't decide if my favorite line is "you weigh about as much as a balled up newspaper" or this:

"Hungry," John said, "food, dinner. Teyla, I think you should take Eldon to dinner, he's delicious. I mean he's hungry. Dinner is delicious and Eldon is here. And hungry."

[mad_maudlin]

Yeah, Mensa!John is skinny. And he has glasses. And ridiculous hair. In fact, I'm not entirely sure he's not really Dr. Who. :-)

But what I really meant was, well, I know that popularity of a fic has as much to do with being in the right place at the right time as quality and originality, and I can't figure out what bit of the fandom Zeitgeist I touched on with that one or the last one I posted at SGA flashfic. But they're both getting tons of comments (still) and that makes me happy.

[icarusancalion.livejournal.com]

I've always thought that Joe Flanigan would have made a great Harry Potter, if he were 22 years younger. He even wore glasses most of his life (got the laser surgery after he became an actor).

[mad_maudlin]

Hey, maybe when they film the epilogue...?

(I actually have a fully-outlined HP/SGA crossover fic in which Rodney refers to Harry as John's "mini-me." Then there's some spitting and flailing.)

[icarusancalion.livejournal.com]

*g*

You know what was great about Heteronormativity? It was fresh and different. I mean, it was also hilarious, but SGA has fallen into a rut lately.

[mad_maudlin]

You think so? I guess I don't notice these things off on my edge of the fandom. Maybe it's because the last season was such a disappointment; people weren't feeling the happy anymore and fell back on familiar and comfortable themes, like the eleventy jillion McShep tags/fixits for "Shrine." I know I stopped watching for a while after getting through "The Lost Tribe" because I was feeling burnt out on it, but I'm in Kazakhstan and nobody expects me to pay attention. ;-)

[amalthia]

This is the line where I almost died, "Somebody once told John he kissed like a gagging goldfish..." really I should have known better than to try eating while reading this story especially after being highly amused by all the other adjectives.

[wishwords.livejournal.com]

Ooo, that sounds useful. Thank you.

[whatifisaidno.livejournal.com]

Have you taken a hijack this log?

[icarusancalion.livejournal.com]

No. How does one do that?

[whatifisaidno.livejournal.com]

Well, you download the hijackthis program from their website or download.com or somewhere else. It's really powerful and picks up a bunch of normal stuff as well as viral stuff.

I have some experience with it-- i can look at the log and see if anything catches my eye if you like, but I suggest putting the log through the analyzer on the hijack this site, although I don't know how thorough it is, or posting it on a techforum that accepts them.

part one of ridiculously long log

[icarusancalion.livejournal.com]

The log is ridiculously long.

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\taskswitch.exe
C:\WINDOWS\system32\fast.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\iTunes\NewITunes\iTunesHelper.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\USB TV\EM28XX\BDARemote.exe
C:\Program Files\HOTALBUMMyBOX\MediaChecker.exe
C:\Program Files\Orbitdownloader\orbitdm.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Wireless 802.11g USB Adapter\ZDWlan.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Orbitdownloader\orbitnet.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\Fast.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Semagic\LiveJournalU.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Windows NT\Accessories\wordpad.exe
C:\Program Files\Microsoft Office\Office\WINWORD.EXE
C:\Program Files\Ares\Ares.exe
J:\Download\Misc Downloads\HijackThis\HijackThis.exe
J:\Download\Misc Downloads\HijackThis\HijackThis.exe

part 2 of ridiculously long log -- v. confusing

[icarusancalion.livejournal.com]

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.orbitdownloader.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdmcks.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [NapsterShell] C:\Program Files\napster.exe /systray
O4 - HKLM\..\Run: [AdwareAlert] C:\Program Files\AdwareAlert\AdwareAlert.exe -boot
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
O4 - HKLM\..\Run: [QUICKCARE] C:\Program Files\Qwest\QuickCare\bin\sprtcmd.exe /P QUICKCARE
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [MBBalloon] C:\Program Files\HOTALBUMMyBOX\MBBalloon.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe

part 3 of ridiculously long log

[icarusancalion.livejournal.com]

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [FastUser] C:\WINDOWS\system32\fast.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\NewITunes\iTunesHelper.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: BDARemote.lnk = ?
O4 - Global Startup: MediaChecker.lnk = C:\Program Files\HOTALBUMMyBOX\MediaChecker.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Orbit.lnk = C:\Program Files\Orbitdownloader\orbitdm.exe
O4 - Global Startup: Wireless 802.11g USB Adapter.lnk = C:\Program Files\Wireless 802.11g USB Adapter\ZDWlan.exe

Not expecting you to do all the work, although if something jumps out at you, that's great.

Next stop: Hijack this site.

part 4, no kidding

[icarusancalion.livejournal.com]

O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Copy to Semagic - C:\Program Files\Semagic\copy.htm
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Semagic - C:\Program Files\Semagic\link.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O11 - Options group: [TABS] Tabbed Browsing
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ares Chatroom server - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG8 E-mail Scanner - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) - Unknown - %ProgramFiles%\WinPcap\rpcapd.exe (file missing)
O23 - Service: PC Tools Auxiliary Service - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

Next stop: Hijack This site.

[icarusancalion.livejournal.com]

Okay, I found Hijack This on my system. It gave me a reeeeeeaaaaaalllly long log of what's running right now. Of course, I have a kajillion things open, but this still looks like a lot. Trouble is, I don't know what supposed to be running and what isn't.

I'm almost certain I don't want Bonjour running.
I don't have IE open so I don't know why it's running. I use Firefox.
I don't know why Unlocker is open. I bet it's not supposed to be. (I don't use it anyway.)
Hot Album is annoying and not needed.
Orbitdownloader, same deal.
I don't have iTunes open. Why is this iTunes helper running?
I don't need Apple Mobile Device either. What's that doing?

As for the rest, what is all this crap?

[whatifisaidno.livejournal.com]

It's a bunch of stuff, like start up processes and tool bars and other background systems. *not an expert*

Alot of it looks like nonsense and a lot of viruses come up as nonsense as well. If you don't know what anything is and it looks suspicious you can always google it.

Email at ash.seed at hotmail if you want me to take a look, but yeah, I'm so not an expert.

ETA: Zomg, okay, I just saw your log comment.

[icarusancalion.livejournal.com]

Holy shit, yeah. Time to look up the Hijack This site, yeah?

[icarusancalion.livejournal.com]

Okay, checked it. Everything was listed as Safe to Neutral. There are several unnecessary programs running (iTunes helper for one). There are two or three that were listed as safe but potentially nasty:

C:\Program Files\Wireless 802.11g USB Adapter\ZDWlan.exe - Possibly nasty! According to our database this process runs normally in c:\programme\zydas technology corporation\zydas_802.11g_utility\! Check if you know this process and arrange a viruscheck where required. Datel WiFi MAX USB-WLAN-Stick

This is probably okay.

C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -
Possibly nasty! According to our database this process runs normally in c:\programme\google\common\google updater\! Check if you know this process and arrange a viruscheck where required. This entry was classified from our visitors as good.

This is probably okay, but I don't think I need it.

Unknown R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.orbitdownloader.com - They didn't know how to classify this. It's annoying and I need to turn it off.

[icarusancalion.livejournal.com]

I'm hammering you with comments, so I'll stop after this. But thank you. It's good to know my problem is I'm (unknowingly) running too much useless crap in the background.

[whatifisaidno.livejournal.com]

Oh, it's okay-- glad I coyld help. I've been looking at it, and I don't see anything really nasty that I'm aware of. You do have a lot of stuff running XD

[wishwords.livejournal.com]

It's good advice. Every help forum I've been to has people run hijackthis and post the log so they can go through it. It's like Sanskrit to me, but at least there are people who understand it.

[quivo.livejournal.com]

I haven't seen someone rec CCleaner yet, so here's a rec for it. It's a program that helps you dust out all sorts of stuff that might be hogging system resources-- old or corrupted registry files, startup processes, etc.

Also, I remember using this Tweak3d guide (http://www.tweak3d.net/joomla/tweak-guides/windows-xp/15-minute-xp-tune-up) or something very like it when my sister asked for help cleaning up her system once. It worked like a charm, and didn't take as long as I expected. Not quite a 15-minute tuneup, but definitely not an hour or even thirty minutes, as far as I remember.

Lastly, re the referenced AVG-induced slowness, I have a bit of internet heresy for you: if you can afford it, paying for a good anti-virus program* might be the ticket. Still, if it isn't, I'd try getting hold of an older version of AVG, or checking out one of the free ones recommended here at lifehacker.com (http://lifehacker.com/395046/five-best-antivirus-applications). On one hand, there are some other decent free antivirus programs apart from AVG 8. On the other, there's a reason NOD32 and Kapersky's offerings are so widely recced.

*Be advised that anything Norton or Symantec-related does not qualify in my book as 'good'. I've heard their offerings have improved as far as system lag and performance go, but they've got a long way to go to earn my trust back.

[dunv-i.livejournal.com]

Although don't use the registry part of CCleaner. It works fine, better than a lot, in fact, but it's really not helpful to clean out your registry, and even a small mistake (and they're easy to make) can cause strange things to happen.

I use avast for virus scanning. It's never gotten in my way, so I like it. Norton and Symantec are worth keeping if you can ever get a corporate version. Any non-corporate versions are bad.

Honestly, though, the best way to clean up your computer is to reformat and reinstall. I aim (read:fail) to do it between each school term, but my computer's also unable to handle anything other than top-performance since it's so old.


One more thing you can do: go to control panel, open add/remove programs. Be vicious.

[quivo.livejournal.com]

Honestly, though, the best way to clean up your computer is to reformat and reinstall.
Sad fact, but I have found that this is true even on Macs. Unless you're really anal about putting stuff in the correct folders or you know where every file is, and know why its there and so forth, you will *never* be able to get rid of all kinds of weird crud on your computer. Which is why I am yet to just reinstall my hard drive clone backup on a new system. You find out very quickly what you actually need, and what files and applications you are lugging around for no good reason.

And lol, I just realized I recommended registry editing as a method of cleaning out someone's Windows machine. While it's true, it's also registry editing :P. dunv_i's got the right of it-- if you're going to do it at all, be extreeeemly careful. If possible, make it the last step you do, so that you might not find that you need to if everything else seems to do the job.

[terialk.livejournal.com]

I also use Avast! since it's not as annoying as some other antivirus programs I've tried in the past. If you're running a PC, I definitely recommend running Disk Cleanup and Disk Defragmenter under Accessories -> System Tools. Those two programs can totally help your computer run faster.