PC problems

j.sprago

I'm not an expert - still learning but if you press control+alt+del and look at then click on processes tab at the top is anything can you see anything in the list which shows a high value in the CPU column?

Browntoa

I'd go to add remove programs and uninstall the Ashampoo stuff and the Google/MSN toolbar unless you REALLY use the toolbar


tick these items in the hijackthis log

O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [MSN Toolbar] "C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe"

O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume

O4 - HKLM\..\RunOnce: [AvgUninstallURL] cmd.exe /c start http://www.avg.com/ww.special-uninst..."ver=10.0.1170

O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe"

O4 - HKCU\..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe -all

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe


and then fix selected

nickyt

I have system idle process showing 42
KService.exe is showing 51

sorry don't know what these mean

Browntoa

kontiki is normally used by Sky Player or BBC Iplayer

I've fixed that item in hijackthis for you, run hijackthis again and tick the items I showed , then reboot

should boot a bit faster

I would remove the Ashampoo stuff as I suspect its running all the time

do you remember if you have EVER had Nortons or Macafee on the PC in the past ??

nickyt

Have done all the hijack bits, have removed the Ashampoo bits.

I have only had AVG but do not use that now as I use microsoft essentials

Shall I rebbot now?

RussJK

A lot running there

If you've recently uninstall AVG, you should also run the AVG removal tool (several times):
http://www.avg.com/gb-en/utilities

I'd uninstall Kontiki for many reasons, and use the Kontiki Cleaner to make sure it's all gone:
http://demo.kontiki.com/support/KClean.exe

Personally I'd uninstall Ashampoo, and just use Defragglerer from time to time: http://www.piriform.com/defraggler/download/portable


Autostarts
There are some autostarts you might consider disabling. The easiest method is to get CCleaner, and use the Startup manager.
http://www.piriform.com/ccleaner/download/portable

The startup manager is found via Tools > Startup as in this picture:
http://www.users.on.net/~russ/ccleanerstartup.png

Double clicking on an entry disables it. It'll take 'effect' after a reboot.


You seem to have software for two different keyboards.
Chicony:
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe

and Microsoft:
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"

Might be worth checking which keyboard you use, and disable the software for the one you don't.


This entry is for the internal modem, not needed if you don't use 56k dialup modem:
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe


Can be disabled: "Looks for known driver conflicts with Nero software [...] This is therefore not required if the Nero software is working correctly"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

Are you using a USB modem to connect to the internet? If so, I'd strongly advise getting a router for security reasons. If not, this can be safely disabled:
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon

Leave these Nvidia entries enabled:
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit


I would disable this entry, it's just there in case you uninstall Microsoft Security Essentials:
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide

This can be safely disabled, it just preloads Quicktime but is unnecessary and slows the computer:
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime


This can be safely disabled, it just preloads Adobe but is unnecessary and slows the computer. Might be worth uninstalling Adobe 9 for security reasons, and installing Adobe X or an alternative like Nitro, Foxit, etc:
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

This is the Adobe updater, can be disabled as long as you manually update it:
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

Can TICK and FIX this in Hijackthis:
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k


This is Microsoft Security Essentials, so leave this enabled:
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

I'd recommend uninstalling Java completely for security reasons, unless you have a program that absolutely requires it:
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

Better leave this alone as someone else had trouble after disabling it (although it's usually safe to disable). It's for HP printers/scanners:
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

I'd uninstall MSN toolbar personally, but it's up to you:
O4 - HKLM\..\Run: [MSN Toolbar] "C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe"

I'd uninstall the MS search enhancement pack, but it's up to you:
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume

Leave this, Malwarebytes trial autostart:
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

Can disable this entry:
O4 - HKLM\..\RunOnce: [AvgUninstallURL] cmd.exe /c start http://www.avg.com/ww.special-uninst..."ver=10.0.1170


I'd uninstall Google toolbar personally, but it's up to you:
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe"

Disable this if it's still there:
O4 - HKCU\..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe -all

Can get rid of CTFMON using this guide: http://www.howtogeek.com/howto/windows-vista/what-is-ctfmonexe-and-why-is-it-running/
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

This entry is only needed if you share music/media over the network using Windows Media Player:
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

Something to do with Blackberry devices, haven't really looked into it. Just leave it enabled:
O4 - HKCU\..\Run: [RIMDeviceManager] "C:\Program Files\Common Files\Research In Motion\RIMDeviceManager\RIMDeviceManager.exe" -RunServer

Disable both these or TICK and FIX in Hijackthis:
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe " -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe " -t (User 'Default user')


"System Tray access to HP Director. Required if you prefer to use the all-in-one buttons to manually scan documents or transfer photos froma camera, for example"
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

Western Digital auto backup
O4 - Global Startup: WDDMStatus.lnk = C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe

nickyt

what one do I click on to get rid of all the AGV bits as there a lot there?

RussJK

nickyt wrote: »

what one do I click on to get rid of all the AGV bits as there a lot there?

This one: http://download.avg.com/filedir/util/support/avg_remover_stf_x86_2011_1322.exe

nickyt

how do I know what to tick to stop them auto starting?

RussJK

nickyt wrote: »

how do I know what to tick to stop them auto starting?

What do you mean?

I've gone through each of the one by one, so you can decide for yourself which to disable.

You double click on an item to disable it, and it'll go grey to show as in this pictures, using CCleaner's startup manager:
http://www.users.on.net/~russ/ccleanerstartup.png