4 replies to this topic

[mbyuser]

i have a few questions about things on my comp i dont think i need.
could anyone tell me if i do or dont?

heres a list off start up programs,i dont think i need them all;


Located: HK_LM:Run, SoundMan
command: "SOUNDMAN.EXE"
file: C:\WINDOWS\SOUNDMAN.EXE
size: 577536

Located: HK_LM:Run, SpySweeper
command: C:\Program Files\Webroot\WebrootSecurity\SpySweeperUI.exe /startintray
file: C:\Program Files\Webroot\WebrootSecurity\SpySweeperUI.exe
size: 6345840

Located: HK_LM:Run, ZoneAlarm Client
command: "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
file: C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
size: 981384


Located: HK_CU:Run, ctfmon.exe
where: S-1-5-21-1614895754-884357618-839522115-1004...
command: "C:\WINDOWS\system32\ctfmon.exe"
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360

Located: WinLogon, crypt32chain
command: crypt32.dll
file: crypt32.dll
size:0

Located: WinLogon, cryptnet
command: cryptnet.dll
file: cryptnet.dll
size:0

Located: WinLogon, cscdll
command: cscdll.dll
file: cscdll.dll
size:0


Located: WinLogon, dimsntfy
command: %SystemRoot%\System32\dimsntfy.dll
file: %SystemRoot%\System32\dimsntfy.dll
size:0

Located: WinLogon, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
size:0

Located: WinLogon, Schedule
command: wlnotify.dll
file: wlnotify.dll
size:0

Located: WinLogon, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
size:0

Located: WinLogon, SensLogn
command: WlNotify.dll
file: WlNotify.dll
size:0

Located: WinLogon, termsrv
command: wlnotify.dll
file: wlnotify.dll
size:0

Located: WinLogon, wlballoon
command: wlnotify.dll
file: wlnotify.dll
size:0

i know i dont need ctfom but dont know how to stop it reapering on reboot.

___________________________

also i have some winstock questions,i dont know if its safe to post the list i have or if thats not a good idea?


_________________

again another thing i am not sure i need is this bho

location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name: AcroIEHelperStub
CLSID name: Adobe PDF Link Helper
Path: C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\

___________________

lastly i updated my update program but now am left with two do i need both?


{6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class)
DPF name:
CLSID name: WUWebControl Class
Installer: C:\WINDOWS\Downloaded Program Files\wuweb.inf
Codebase: http://www.update.mi...b?1235536745111]http://www.update.mi...b?1235536745111[/url]
description:
classification: Legitimate
known filename: wuweb.dll
info link:
info source: Safer Networking Ltd.
Path: C:\WINDOWS\System32\
Long name: wuweb.dll
Short name:
Date (created): 16/10/2008 15:12:24
Date (last access): 12/04/2009 23:47:44
Date (last write): 16/10/2008 15:12:24
Filesize: 202776
Attributes: archive
MD5: 0006DE8037F5A562F96B461B3C557C3C
CRC32: 9B107DED
Version: 7.2.6001.788

{6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class)
DPF name:
CLSID name: MUWebControl Class
Installer: C:\WINDOWS\Downloaded Program Files\muweb.inf
Codebase: http://update.micros...b?1236469625250
description:
classification: Legitimate
known filename: muweb.dll
______________

i know this list a long list however if anyone could help me i would be gratefull for there free time they give to this subject.

[exile360]

You should leave both Windows Update/Microsoft Update entries, the BHO you asked about is for Adobe Reader so you can view PDF files in your browser. As far as the other entries, I don't see anything that you should get rid of, save perhaps CTFMON. I know how to disable it, but it's a bit trickier than most and I'm not sure that it would be advisable unless you really know what you're doing. It requires replacing the file ctfmon.exe with a dummy file so that when the computer boots and tries to run, nothing gets executed. That being said, ctfmon uses very little resources and generally doesn't hurt system performance so it's probably not worth the trouble disabling it. I see you're using SpySweeper, it's a pretty big resource hog in it's own right, but since that's you're security software, you don't want to disable it unless you found something lighter on resources to replace it with. The same thing goes for ZoneAlarm.

[mbyuser]

exile360, on Apr 16 2009, 12:02 AM, said:

You should leave both Windows Update/Microsoft Update entries, the BHO you asked about is for Adobe Reader so you can view PDF files in your browser. As far as the other entries, I don't see anything that you should get rid of, save perhaps CTFMON. I know how to disable it, but it's a bit trickier than most and I'm not sure that it would be advisable unless you really know what you're doing. It requires replacing the file ctfmon.exe with a dummy file so that when the computer boots and tries to run, nothing gets executed. That being said, ctfmon uses very little resources and generally doesn't hurt system performance so it's probably not worth the trouble disabling it. I see you're using SpySweeper, it's a pretty big resource hog in it's own right, but since that's you're security software, you don't want to disable it unless you found something lighter on resources to replace it with. The same thing goes for ZoneAlarm.

thanks for clearning that up.
i could replace ctfmon with a dummy useing killbox but as you say its not useing much resources,so imo i dont think i should,i know spysweeper is a hog but it does seem to be worth it as for za i would like to use something other than za but i cant seem to get my head around setting up the rules on most others firewalls and use za because off that reason,that being said i am having issiues with za and i wish i could learn how to use somthing else,still thank you for your free time,i do appricate it.

[exile360]

Yes, using something like killbox is exactly what I was talking about. I'm glad the info was helpful (perhaps not for the speed of your PC, but at least for information ).

[evilfantasy]

Quote

http://support.microsoft.com/kb/282599
Can I Remove the Ctfmon.exe File?
Removing the Ctfmon.exe might cause problematic behavior in your Office XP programs, so removing it is not recommended.

Microsoft KB including how to disable Ctfmon. Needs to be done on each user account. Frequently asked questions about Ctfmon.exe