35 processes, need to trim the fat

[steosaur(oWn)]

I think the fact that 35 processes are running is slowing my laptop slightly, is there anything I could/should get rid of in this log?

Logfile of HijackThis v1.97.7
Scan saved at 6:33:18 PM, on 5/6/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\carpserv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\HPQ\One-Touch\OneTouch.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\gearsec.exe
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\PeerGuardian pr14\PeerGuardian_1.99b_pr14.exe
C:\WINDOWS\System32\dllhost.exe
C:\WINDOWS\System32\msdtc.exe
C:\Documents and Settings\Steven\Desktop\PrimaryFolder\Applications\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://webmail.bgsu.edu/smms
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus8l.hpwis.com
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - c:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PreloadApp] c:\hp\drivers\printers\photosmart\hphprld.exe c:\hp\drivers\printers\photosmart\setup.exe -d
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [Display Settings] C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /s
O4 - HKLM\..\Run: [QT4HPOT] C:\Program Files\HPQ\One-Touch\OneTouch.EXE
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: AIM (HKLM)
O9 - Extra button: MoneySide (HKLM)
O14 - IERESET.INF: START_PAGE_URL=http://qus8l.hpwis.com
O16 - DPF: Yahoo! Euchre - http://download.games.yahoo.com/games/clients/y/et1_x.cab
O16 - DPF: Yahoo! Poker - http://download.games.yahoo.com/games/clients/y/pt0_x.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

[kc0arf]

Hello,

You might want to open up your Task manager, and see what processes might be bogging you down. You can also open up the Performance Monitor, and examine the various CPU information. But I would also look at the swap information.

I am guessing your laptop is slightly slow, and you want to tweak it. You might find a bunch of little processes slowing your computer ever so slightly, and then one process out there taking the lion's share of the time.

For example, on Mac OS X, I found that the Palm Desktop USB monitor was taking about 10 percent of my avail CPU time. (side note for neat Mac/Unix/Linux feature called top: you can see how much time your processes have consumed the processor). I don't need the USB monitor running 24 x 7, so I optimized my computer to launch that transport monitor when I really need it, and to kill it once the Palm application closes.

Take a look at your Task Manager, and let us know.

Christian

[killians45]

Well, here is one thing to try in your services. Here is a listing of the most common stuff, what its for and to disable. Just go into its properties and choose disable. Anyhow, sorry for the long post but there is alot of info:

This is a guide for information only with plain english descriptions of the services real function. Please make your own mind up over which services to disable on your system.

Alerter
Function - Good for big brother corporate networks. Home PCs do not need to send/receive administrative alerts.

home PC - Manual

-

Application Layer Gateway Service
Function - Good if the system is a gateway/client on a NAT LAN, also (attempts to) protect nasty script kiddies from turning you and your friends' computers into their pawns in the quest for world domination. XP's Firewall is about as useful as a chocolate Teapot. Disable this service unless you are on a home LAN and use Microsoft's Internet Connection Sharing.

home PC - Disabled

-

Application Management
Function - Provides software installation services such as Assign, Publish, and Remove.

home PC - Manual

-

Automatic Updates
Function - Allows Windows XP free reign to contact the Microsoft servers and download a whole host of "critical" updates. No
thanks Bill, think I can connect to WindowsUpdate by myself

home PC - Disabled

-

Background Intelligent Transfer Service
Function - A sneaky way of doing Automatic Updates - Windows XP will judge whether you are using your bandwidth or just sat
there motionless looking at your screen. If not it will happily download away.

home PC - Disabled

-

ClipBook
Function - "exactly what it says on the tin"
Why do you want to share your random cut'n'pastes with your fellow LAN chums? If you feel this is an important contribution to your life leave it on Manual. Otherwise kill this resource eating service!

home PC - Disabled

-

COM+ Event System
Function - Kind of like a communication method between different modules in Windows.

home PC - Manual

-

COM+ System Application
Function - If COM+ Event System is the car then this service is the driver

home PC - Manual

-

Computer Browser
Function - Like it says, needed to keep tracks of computers on your network. If you're on a LAN, leave it to manual, if you're a standalone system then disable it.

home PC - Disabled

-

Cryptographic Services
Function - Among other things, this service authenticates WHQL drivers (i.e. for graphics cards)

home PC - Manual

-

DHCP Client
Function - Under Windows managed networks DCHP is useful in assigning IP/DNS addresses.

home PC - Manual

-

Distributed Link Tracking Client
Function - Good for databases that rely on networked files for updating. Do you share files that lots of people work on? Do you even use NTFS as a home user?

home PC - Disabled

-

Distributed Transaction Coordinator
Function - Related to Distributed Link Tracking Client
The service sounds like a job title for a pointless middle manager somewhere. For home users it's the same story for our
Distributed Transaction Coordinator; going nowhere fast.

home PC - Disabled

-

DNS Client
Function - Needed by windows

home PC - Automatic

-

Error Reporting Service
Function - When something crashes (quite frequently) and Windows pops up and advises you to tell Microsoft all about it,
that is the fruit of this service's loins. One of my pet hates, If something crashes I will scream at the monitor and stamp my feet as I please; I don't need to tell Microsoft that I'm doing it.

home PC - Disabled

-

Event Log
Function - Exactly what it says on the tin

home PC - Manual

-

Fast User Switching Compatibility
Function - For home users this functions as "switch user" when the logoff option is used. If you want it you can have it.

home PC - Manual

-

Help and Support
Function - Description is self-explanitory

home PC - Disabled

-

Human Interface Device Access
Function - allows you to use a usb mouse/keyboard in Windows. If you have one set this to automatic

home PC - Disabled

-

IMAPI CD-Burning COM Service
Function - Controls the in-built CD-burning software in XP
If you don't use the in-built software then disable the service. Incidentally disabling this makes NERO Burning ROM open quicker.

home PC - Disabled

-

Indexing Service
Function - Works like an advanced search feature. This can search through files and index keywords for rapid searching.
Thanks, but no thanks. If I want to search I will use the "dog feature".

Recommended for home PC - Disabled

-

Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS)
Function - Related to Application Layer Gateway Service

home PC - Disabled

-

IPSEC Services
Function - Authenticates hosts before transfer of data, Encryption of IP traffic, Prevention of reply attacks

home PC - Manual

-

Logical Disk Manager
Function - Updates records to do with hard disk volumes.

home PC - Automatic

-

Logical Disk Manager Administrative Service
Function - Related to Logical Disk Manager it is infrequently used

home PC - Manual

-

Messenger
Function - Allows network administrators the ability to pop a little prompt on your screen with information. Although hilarious for the first 25 seconds in forcing your non-computer literate friends to think their machine has been hacked into this service is pretty much pointless.

home PC - Disabled

-

MS Software Shadow Copy Provider
Function - Like the man said, it allows shadow copying.

home PC - Disabled

-

Net Logon
Function - Domain Authentication, if you have a Domain

home PC - Disabled

-

NetMeeting Remote Desktop Sharing
Function - Why use the bloated netmeeting when VNC does it about 10 times faster and is free?

Recommended for home PC - Disabled

-

Network Connections
Function - Controls your internet connection details basically.

home PC - Manual

-

Network DDE
Function - DDE functions are usually restricted to business applications.

home PC - Disabled

-

Network DDE DSDM
Function - Related to Network DDE

home PC - Disabled

-

Network Location Awareness (NLA)
Function - Installation of some hardware requires usage of RPC.

home PC - Manual

-

NVIDIA Driver Helper Service
Function - Provides help and support for NVIDIA graphics cards. Disabling this service seems to significantly reduce the time Windows XP takes to shut down.

home PC - Disabled

-

Performance Logs and Alerts
Function - Hardly useful for a home PC now is it? Unless they start assigning the equivalent of 3DMarks I doubt anyone is really interested.

home PC - Disabled

-

Plug and Play
Function - Commonly referred to as Plug'n'Pray this service is perhaps one feature of Windows XP worth having.

home PC - Automatic

-

Portable Media Serial Number
Function - Quite possibly the most pointless and utterly useless service known to human kind. Why memory is allocated to the
retrieval of a needless serial number from your MP3 player is beyond me and I'm sure it's a joke.

home PC - Disabled

-

Print Spooler
Function - A must if you have a printer

home PC - Manual

-

Protected Storage
Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users.
Function - Stop those 1337 h4X0)2 skr1p7 |<1dd135 knocking around with your files. Trouble is, if they are already past your firewall you've had it anyway. Leave on Manual just in case.

home PC - Manual

-

QoS RSVP
Function - Quality Of Service - quite useful for services that use it used for network balancing and other nifty things to make "your internet experience as wonderful as possible". Quite good then that this service eats 25% of your bandwidth doing it and hardly anything actually makes use of it.

home PC - Disabled

-

Remote Access Auto Connection Manager
Function - Makes use of embedded links in programs such as Office, also is used in autodial functions

home PC - Manual

-

Remote Access Connection Manager
Function - Involved in dial-up.

home PC - Manual

-

Remote Desktop Help Session Manager
Function - Allows incoming Remote Desktop connections.
If you don't use this feature of Windows XP (Remote Desktop) then disable this service.

home PC - Disabled

-

Remote Procedure Call (RPC)
Function - Needed for some installations nice vague Microsoft description. Leave as manual.

home PC - Manual

-

Remote Procedure Call (RPC) Locator
Function - Related to Remote Procedure Call (RPC)

home PC - Manual

-

Remote Registry
Function - Allow people to modify local registry settings via remote desktop or similar. Allowing your registry to be edited remotely? Come on....

home PC - Disabled

-

Removable Storage
Function - Zip Drives, USB pens etc...

home PC - Manual

-

Routing and Remote Access
Function - used on business networks

home PC - Disabled

-

Secondary Logon
Function - allow multiple users on one machine.

home PC - Automatic

-

Security Accounts Manager
Function - Related to Secondary Logon

home PC - Automatic

-

Server
Function - Supports file sharing and other basic LAN functions.
If you're not on a network you don't need this.

home PC - Disabled

-

Smart Card
Function - If you don't use smart media, disable this service.

home PC - Disabled

-

Smart Card Helper
Function - Related to Smart Card

home PC - Disabled

-

SSDP Discovery Service
Function - UPnP = Universal Plug'n'Play If you don't have a LAN then disable this service.

home PC - Disabled

-

System Event Notification
Function - Can notify programs such as Outlook when an internet connection is established so that it can send its mail. This service manages a lot of processes

home PC - Automatic

-

System Restore Service
Function - Allows "rollback" to previous configurations in order to solve hardware/software problems.

home PC - Automatic

-

Task Scheduler
Function - Depends on the individual. Task Scheduler uses a fair amount of resources. Any program I wish to run, I run when I want, not at 4.37am on a Friday morning.

home PC - Disabled

-

TCP/IP NetBIOS Helper
Function - Helper for Internet traffic. Useful if you're fascinated by the intrinsic features of TCP/IP.

home PC - Disabled

-

Telephony
Function - it starts when a connection is made to the internet.

home PC - Manual

-

Telnet
Function - Big Security Hole - If you're not on a LAN this is well worth disabling to bounce those 13 year old hackers.

home PC - Disabled

-

Terminal Services
Function - Remote Desktop features.If you disabled Remote Desktop earlier then do the same with this.

home PC - Disabled

-

Themes
Function - Most people use the themes

home PC - Automatic

-

Uninterruptible Power Supply
Function - Most users (unless you live in California) do not have UPS backups.

home PC - Disabled

-

Universal Plug and Play Device Host
Function - You'll need this

home PC - Manual

-

Upload Manager
Function - Fundemental to Windows

home PC - Automatic

-

Volume Shadow Copy
Function - Set the same as MS Software Shadow Copy Provider

home PC - Disabled

-

WebClient
Function - Fundemental to Windows

For home PC - Automatic

-

Windows Audio
Function - Fundemental to Windows

home PC - Automatic

-

Windows Image Acquisition (WIA)
Function - In-built scanner and camera features.If you don't have a scanner/camera then disable this service. Also if you use a 3rd party image aquisition program then disable this.

home PC - Disabled

-

Windows Management Instrumentation
Function - Fundemental to Windows

home PC - Automatic

-

Windows Management Instrumentation Driver Extensions
Function - Fundemental to Windows

home PC - Automatic

-

Windows Time
Function - Fine if you need to have exactly the same time as the administrator on your network

home PC - Disabled

-

Windows Zero Configuration
Function - Wireless networking auto-configuration Wireless unless you have wireless having this resident in memory is
pointless.

home PC - Disabled

-

WMI Performance Adapter
Function - Provides information about your system to system components that require it.

home PC - Manual

-

Workstation
Function - Needed by Windows to provide functionality on the internet.

home PC - Automatic

[steosaur(oWn)]

aight thanks, i already know about the task manager, i just don't want to delete anything im not familair with, ive done that in the past and regreted it. I'll look at this list and see if i cant learn something
~thanks

[crunchie]

www.blackviper.com