Is it time to admit defeat and buy a new PC

closed

uninstall rapport,


none of these need running at startup, which can be stopped with msconfig/startup tab - they can be run manually when or if you need them

O4 - HKLM\..\Run: [AppleSyncNotifier] N:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "N:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [SSBkgdUpdate] "N:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [IndexSearch] "N:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
O4 - HKLM\..\Run: [PPort11reminder] "N:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "N:\Documents and Settings\All Users\Application Data\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini"
O4 - HKLM\..\Run: [BrMfcWnd] N:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [ControlCenter3] N:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun

O4 - HKLM\..\Run: [Iomega Home Storage Manager] N:\Program Files\Iomega\Home Storage Manager\Iomega Discovery.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "N:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "N:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Start WingMan Profiler] N:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] N:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] N:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] N:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] N:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = N:\Program Files\Microsoft Office\Office\OSA9.EXE




post a fresh log

do you use retrospective backup?

Gratis

Expending time and effort restoring, to a condition that only Microsoft could regard as normal, the software on a hard drive that is showing signs of impending failure, is an exercise in correct prioritising and futility that is somewhat akin to earnestly doing the laundry, post iceberg collision, on the Titanic.

You know its hard drive shouldn’t be making “clunking” noises.

Coveredinbees!!!! wrote: »

... when I try to play games it starts making a clunking noise from inside(not worked out what yet)

Coveredinbees!!!! wrote: »

I think the clunking is oner of the disc drives doing what ever disc drive do that make a clink clunking noise, heads doing something possibly but I'm sure it shouldn't be doing it

Coveredinbees!!!! wrote: »

Still don't know what is clunking but it sounded like a disc drive but it seems to have stopped doing it.

Address the hardware issue first. You will otherwise end up with squeaky clean software on a dead hard drive.

Coveredinbees!!!!

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:14:22, on 21/12/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
N:\WINDOWS\System32\smss.exe
N:\WINDOWS\system32\winlogon.exe
N:\WINDOWS\system32\services.exe
N:\WINDOWS\system32\lsass.exe
N:\WINDOWS\system32\Ati2evxx.exe
N:\WINDOWS\system32\svchost.exe
N:\WINDOWS\System32\svchost.exe
N:\WINDOWS\system32\Ati2evxx.exe
N:\Program Files\Alwil Software\Avast5\AvastSvc.exe
N:\WINDOWS\system32\spoolsv.exe
N:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
N:\Program Files\Bonjour\mDNSResponder.exe
N:\Program Files\Java\jre6\bin\jqs.exe
N:\PROGRA~1\RETROS~1\RETROS~1.5\retrorun.exe
N:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
N:\WINDOWS\System32\svchost.exe
N:\WINDOWS\system32\wuauclt.exe
N:\WINDOWS\Explorer.EXE
N:\Program Files\Analog Devices\SoundMAX\SMTray.exe
N:\Program Files\Alwil Software\Avast5\avastUI.exe
N:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
N:\Program Files\Brother\Brmfcmon\BrMfimon.exe
N:\Documents and Settings\Steve\My Documents\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - N:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - N:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - N:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [smapp] N:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [PPort11reminder] "N:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "N:\Documents and Settings\All Users\Application Data\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini"
O4 - HKLM\..\Run: [avast5] "N:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] N:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] N:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] N:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] N:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Status Monitor.lnk = N:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O9 - Extra button: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - N:\Program Files\EmpirePokerMaster\EmpirePoker\RunEPoker.exe
O9 - Extra 'Tools' menuitem: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - N:\Program Files\EmpirePokerMaster\EmpirePoker\RunEPoker.exe
O9 - Extra button: PacificPoker4 - {94EDF7B4-4272-4af3-8F8B-4E2F68E225B7} - N:\PROGRA~1\PACIFI~1\pacificpoker.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - N:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - N:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - N:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - N:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - N:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - N:\WINDOWS\System32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - N:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - N:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - N:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - N:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - N:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - N:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - N:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - N:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: QSCopyEngine - Unknown owner - N:\Program Files\Iomega\QuikProtect\QpMonitor.exe
O23 - Service: Retrospect Express HD Launcher (RetroExpLauncher) - EMC Corporation - N:\PROGRA~1\RETROS~1\RETROS~1.5\retrorun.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - N:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 5612 bytes

I can't work out how to get rid of the ctfmon I don't think I need it.

Gratis

closed

re ctfmon, tick and fix in hijackthis