Ad-/Spyware?
Thread poster: Katja Vuorisalo
Katja Vuorisalo
Katja Vuorisalo  Identity Verified
Finland
Local time: 06:05
French to Finnish
+ ...
Sep 25, 2006

My computer has slowed down considerably lately. When I shut down my pc, it gives a notice: "Shutting down application HotKey App" that I don't even recognize what it is. When I run an antispyware-program, there are often plenty of ads that need to be fixed, new ones come up every day. After I have fixed these problems the pc is still very slow and there are many "processes" always running (such as HotkeyApp.exe and many others) when I check. Do you know how to get completely rid of these ad- ... See more
My computer has slowed down considerably lately. When I shut down my pc, it gives a notice: "Shutting down application HotKey App" that I don't even recognize what it is. When I run an antispyware-program, there are often plenty of ads that need to be fixed, new ones come up every day. After I have fixed these problems the pc is still very slow and there are many "processes" always running (such as HotkeyApp.exe and many others) when I check. Do you know how to get completely rid of these ad- or spywares if that's what they are called? Do they come through Yahoo and Google toolbars mostly? This slows down my work a lot and it's very annoying. Thanks in advance!Collapse


 
John Jory
John Jory  Identity Verified
Germany
Local time: 05:05
English to German
+ ...
Windows XP "Services" Sep 26, 2006

Have you shut down all those nasty 'services' which XP runs in the background, e.g. to send a report to Microsoft for every burp your PC makes?
Many add-ons make an entry in the "Services" tab, and are run in the background. You can get an impression of how many there are by selecting Start | Run, then enter 'msconfig' + hit OK.
The tab 'Services' shows them all.
Use the option to hide all Microsoft services. Then you can decide which of the remaining services you wish to disa
... See more
Have you shut down all those nasty 'services' which XP runs in the background, e.g. to send a report to Microsoft for every burp your PC makes?
Many add-ons make an entry in the "Services" tab, and are run in the background. You can get an impression of how many there are by selecting Start | Run, then enter 'msconfig' + hit OK.
The tab 'Services' shows them all.
Use the option to hide all Microsoft services. Then you can decide which of the remaining services you wish to disable. Don't disable your antivirus tool
Use the same procedure to re-enable any service that is really needed.

You can also check the Web along the lines of "services windows-xp unnecessary", where you are likely to find many articles on the subject.
There is also a very useful freeware tool called "XpAntispy" which helps you to disable the most questionable MS services.
Collapse


 
Isabel Booth
Isabel Booth  Identity Verified
Local time: 05:05
Italian to English
Spyware software Sep 26, 2006

I have a programme called Spybot - Search and Destroy. It was preinstalled on the PC but you can look at the website: http://www.spybot.info/en/home/index.html
which is good at finding this kind of stuff and removing it from your PC.
Isabel


 
Katja Vuorisalo
Katja Vuorisalo  Identity Verified
Finland
Local time: 06:05
French to Finnish
+ ...
TOPIC STARTER
I tried Sep 26, 2006

[John Jory wrote:

Have you shut down all those nasty 'services' which XP runs in the background, e.g. to send a report to Microsoft for every burp your PC makes?
Many add-ons make an entry in the "Services" tab, and are run in the background. You can get an impression of how many there are by selecting Start | Run, then enter 'msconfig' + hit OK.
The tab 'Services' shows them all.
Use the option to hide all Microsoft services. Then you can decide which of the rema
... See more
[John Jory wrote:

Have you shut down all those nasty 'services' which XP runs in the background, e.g. to send a report to Microsoft for every burp your PC makes?
Many add-ons make an entry in the "Services" tab, and are run in the background. You can get an impression of how many there are by selecting Start | Run, then enter 'msconfig' + hit OK.
The tab 'Services' shows them all.
Use the option to hide all Microsoft services. Then you can decide which of the remaining services you wish to disable. Don't disable your antivirus tool
Use the same procedure to re-enable any service that is really needed.]

Thank you, I tried this, let's see if it helps. Moreover, my Start-toolbar sometimes disappears, too, and all screen goes black for about a minute or so even if I try to activate it by pushing on keyboard. This hasn't happened before, either...Strange...
Collapse


 
Katja Vuorisalo
Katja Vuorisalo  Identity Verified
Finland
Local time: 06:05
French to Finnish
+ ...
TOPIC STARTER
I have Spybot Sep 26, 2006

[Isabel Booth wrote:

I have a programme called Spybot - Search and Destroy. It was preinstalled on the PC but you can look at the website: http://www.spybot.info/en/home/index.html
which is good at finding this kind of stuff and removing it from your PC.]



I have been using Spybot-Search and Destroy. It usually finds a couple of entries per day and fi
... See more
[Isabel Booth wrote:

I have a programme called Spybot - Search and Destroy. It was preinstalled on the PC but you can look at the website: http://www.spybot.info/en/home/index.html
which is good at finding this kind of stuff and removing it from your PC.]



I have been using Spybot-Search and Destroy. It usually finds a couple of entries per day and fixes them but the problem doesn't disappear. When I go Ctrl+Alt+Del, I see that HotkeyApp.exe and a whole bunch of other unknown processes are always running in the background. And my keyboard has started blocking more often now, too!
Collapse


 
Florence Bremond
Florence Bremond  Identity Verified
France
Local time: 05:05
Member (2002)
English to French
+ ...
Hijackthis Sep 26, 2006

I would advise trying Hijackthis
http://www.merijn.org/

then analysing the log with
http://www.hijackthis.de/en

and posting us about the results.

Now it could also be a hardware failure of some kind (memory etc.) in which case you would need to drive the dear thing to the shop.
... See more
I would advise trying Hijackthis
http://www.merijn.org/

then analysing the log with
http://www.hijackthis.de/en

and posting us about the results.

Now it could also be a hardware failure of some kind (memory etc.) in which case you would need to drive the dear thing to the shop.

Florence
Collapse


 
Uldis Liepkalns
Uldis Liepkalns  Identity Verified
Latvia
Local time: 06:05
Member (2003)
English to Latvian
+ ...
Be careful with shutting down Microsoft services Sep 26, 2006

It is true that many of them are not needed, however, shutting down needed ones you may loose your Internet connectivity, network, connection with a printer and like.

I can advise to look here... ooops, it is offline. But here is a cashed copy:

http://www.dead-eye.net/WinXP%20Services.htm

the guy offers good and comprehensive advice on that.

... See more
It is true that many of them are not needed, however, shutting down needed ones you may loose your Internet connectivity, network, connection with a printer and like.

I can advise to look here... ooops, it is offline. But here is a cashed copy:

http://www.dead-eye.net/WinXP%20Services.htm

the guy offers good and comprehensive advice on that.

Uldis
Collapse


 
Katja Vuorisalo
Katja Vuorisalo  Identity Verified
Finland
Local time: 06:05
French to Finnish
+ ...
TOPIC STARTER
Analysis Sep 26, 2006

[Oddie wrote:

I would advise trying Hijackthis
http://www.merijn.org/

then analysing the log with
http://www.hijackthis.de/en

and posting us about the results.]


These were considered as "unnecessary" or "nasty" according to HijackThis-analysis:

... See more
[Oddie wrote:

I would advise trying Hijackthis
http://www.merijn.org/

then analysing the log with
http://www.hijackthis.de/en

and posting us about the results.]


These were considered as "unnecessary" or "nasty" according to HijackThis-analysis:


O2 - BHO: (no name) - {7D0A2E0A-19CF-43D7-9673-6AFAD573CEBC} - C:\WINDOWS\system32\babsesrv.dll (file missing)
Unknown application.
Unnecessary (deactivated) entry that can be fixed.

O2 - BHO: Starware - {CA356D79-679B-4b4c-8E49-5AF97014F4C1} - C:\Program
Files\Starware\bin\Starware.dll (file missing)
Unnecessary (deactivated) entry that can be fixed.

O3 - Toolbar: Starware - {D49E9D35-254C-4c6a-9D17-95018D228FF5} - C:\Program Files\Starware\bin\Starware.dll (file missing)
Unnecessary (deactivated) entry that can be fixed.

O3 - Toolbar: (no name) - {C8A973DE-1408-4B51-8C5A-03FE9C281CCD} - (no file)
Unknown application.
Unnecessary (deactivated) entry that can be fixed.

O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fi-fi\msntb.dll/search.htm

O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} (Sinstaller Class) - http://dm.screensavers.com/dm/installers/si/1/sinstaller.cab
Should be fixed.

O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\Program Files\RXToolBar\sfcont.dll
Should be fixed.


BUT HOW DO I GO FOR FIXING THESE PROBLEMS NOW? Additionally, there were many others that were considered as "unknown". Should these also be fixed? Then, most of the entries were analyzed as "safe" also. Thanks a million for your help!!
Collapse


 
Florence Bremond
Florence Bremond  Identity Verified
France
Local time: 05:05
Member (2002)
English to French
+ ...
Registry entries Sep 26, 2006

HijackThis can correct the registry entries from the HT client itself - but now be careful with this it could do more harm than good if you do something wrong.
In any way - backup the registry (from the HT option) before doing anything. And backup your whole HD if you can (external HD).

I would start with deleting those two, which are obviously spyware:

O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} (Sinstaller
... See more
HijackThis can correct the registry entries from the HT client itself - but now be careful with this it could do more harm than good if you do something wrong.
In any way - backup the registry (from the HT option) before doing anything. And backup your whole HD if you can (external HD).

I would start with deleting those two, which are obviously spyware:

O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} (Sinstaller Class) - http://dm.screensavers.com/dm/installers/si/1/sinstaller.cab
Should be fixed.

O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\Program Files\RXToolBar\sfcont.dll
Should be fixed.

For the rest, wait for more advices or post about it on a specialized computing forum.
But you can safely start with those two and see if it improves anything.

Florence

[Edited at 2006-09-26 10:11]
Collapse


 
Katja Vuorisalo
Katja Vuorisalo  Identity Verified
Finland
Local time: 06:05
French to Finnish
+ ...
TOPIC STARTER
A reliable computing forum? Sep 27, 2006

[Oddie wrote:


For the rest, wait for more advices or post about it on a specialized computing forum.
But you can safely start with those two and see if it improves anything.]


Thank you Florence and all the rest for your help! Do you know any reliable computing forum where I could post my question about which other entries to delete? I never used those forums before...thanks!


 


To report site rules violations or get help, contact a site moderator:


You can also contact site staff by submitting a support request »

Ad-/Spyware?






Protemos translation business management system
Create your account in minutes, and start working! 3-month trial for agencies, and free for freelancers!

The system lets you keep client/vendor database, with contacts and rates, manage projects and assign jobs to vendors, issue invoices, track payments, store and manage project files, generate business reports on turnover profit per client/manager etc.

More info »
Trados Studio 2022 Freelance
The leading translation software used by over 270,000 translators.

Designed with your feedback in mind, Trados Studio 2022 delivers an unrivalled, powerful desktop and cloud solution, empowering you to work in the most efficient and cost-effective way.

More info »