Ad-/Spyware?
Thread poster: KatjaV
KatjaV  Identity Verified
Finland
Local time: 21:53
French to Finnish
+ ...
Sep 25, 2006

My computer has slowed down considerably lately. When I shut down my pc, it gives a notice: "Shutting down application HotKey App" that I don't even recognize what it is. When I run an antispyware-program, there are often plenty of ads that need to be fixed, new ones come up every day. After I have fixed these problems the pc is still very slow and there are many "processes" always running (such as HotkeyApp.exe and many others) when I check. Do you know how to get completely rid of these ad- or spywares if that's what they are called? Do they come through Yahoo and Google toolbars mostly? This slows down my work a lot and it's very annoying. Thanks in advance!

Direct link Reply with quote
 

John Jory  Identity Verified
Germany
Local time: 20:53
Member (2004)
English to German
+ ...
Windows XP "Services" Sep 26, 2006

Have you shut down all those nasty 'services' which XP runs in the background, e.g. to send a report to Microsoft for every burp your PC makes?
Many add-ons make an entry in the "Services" tab, and are run in the background. You can get an impression of how many there are by selecting Start | Run, then enter 'msconfig' + hit OK.
The tab 'Services' shows them all.
Use the option to hide all Microsoft services. Then you can decide which of the remaining services you wish to disable. Don't disable your antivirus tool
Use the same procedure to re-enable any service that is really needed.

You can also check the Web along the lines of "services windows-xp unnecessary", where you are likely to find many articles on the subject.
There is also a very useful freeware tool called "XpAntispy" which helps you to disable the most questionable MS services.


Direct link Reply with quote
 

Isabel Booth  Identity Verified
Local time: 20:53
Italian to English
Spyware software Sep 26, 2006

I have a programme called Spybot - Search and Destroy. It was preinstalled on the PC but you can look at the website: http://www.spybot.info/en/home/index.html
which is good at finding this kind of stuff and removing it from your PC.
Isabel


Direct link Reply with quote
 
KatjaV  Identity Verified
Finland
Local time: 21:53
French to Finnish
+ ...
TOPIC STARTER
I tried Sep 26, 2006

[John Jory wrote:

Have you shut down all those nasty 'services' which XP runs in the background, e.g. to send a report to Microsoft for every burp your PC makes?
Many add-ons make an entry in the "Services" tab, and are run in the background. You can get an impression of how many there are by selecting Start | Run, then enter 'msconfig' + hit OK.
The tab 'Services' shows them all.
Use the option to hide all Microsoft services. Then you can decide which of the remaining services you wish to disable. Don't disable your antivirus tool
Use the same procedure to re-enable any service that is really needed.]

Thank you, I tried this, let's see if it helps. Moreover, my Start-toolbar sometimes disappears, too, and all screen goes black for about a minute or so even if I try to activate it by pushing on keyboard. This hasn't happened before, either...Strange...


Direct link Reply with quote
 
KatjaV  Identity Verified
Finland
Local time: 21:53
French to Finnish
+ ...
TOPIC STARTER
I have Spybot Sep 26, 2006

[Isabel Booth wrote:

I have a programme called Spybot - Search and Destroy. It was preinstalled on the PC but you can look at the website: http://www.spybot.info/en/home/index.html
which is good at finding this kind of stuff and removing it from your PC.]



I have been using Spybot-Search and Destroy. It usually finds a couple of entries per day and fixes them but the problem doesn't disappear. When I go Ctrl+Alt+Del, I see that HotkeyApp.exe and a whole bunch of other unknown processes are always running in the background. And my keyboard has started blocking more often now, too!


Direct link Reply with quote
 

Florence B  Identity Verified
France
Member (2002)
English to French
+ ...
Hijackthis Sep 26, 2006

I would advise trying Hijackthis
http://www.merijn.org/

then analysing the log with
http://www.hijackthis.de/en

and posting us about the results.

Now it could also be a hardware failure of some kind (memory etc.) in which case you would need to drive the dear thing to the shop.

Florence


Direct link Reply with quote
 

Uldis Liepkalns  Identity Verified
Latvia
Local time: 21:53
Member (2003)
English to Latvian
+ ...
Be careful with shutting down Microsoft services Sep 26, 2006

It is true that many of them are not needed, however, shutting down needed ones you may loose your Internet connectivity, network, connection with a printer and like.

I can advise to look here... ooops, it is offline. But here is a cashed copy:

http://www.dead-eye.net/WinXP%20Services.htm

the guy offers good and comprehensive advice on that.

Uldis


Direct link Reply with quote
 
KatjaV  Identity Verified
Finland
Local time: 21:53
French to Finnish
+ ...
TOPIC STARTER
Analysis Sep 26, 2006

[Oddie wrote:

I would advise trying Hijackthis
http://www.merijn.org/

then analysing the log with
http://www.hijackthis.de/en

and posting us about the results.]


These were considered as "unnecessary" or "nasty" according to HijackThis-analysis:


O2 - BHO: (no name) - {7D0A2E0A-19CF-43D7-9673-6AFAD573CEBC} - C:\WINDOWS\system32\babsesrv.dll (file missing)
Unknown application.
Unnecessary (deactivated) entry that can be fixed.

O2 - BHO: Starware - {CA356D79-679B-4b4c-8E49-5AF97014F4C1} - C:\Program
Files\Starware\bin\Starware.dll (file missing)
Unnecessary (deactivated) entry that can be fixed.

O3 - Toolbar: Starware - {D49E9D35-254C-4c6a-9D17-95018D228FF5} - C:\Program Files\Starware\bin\Starware.dll (file missing)
Unnecessary (deactivated) entry that can be fixed.

O3 - Toolbar: (no name) - {C8A973DE-1408-4B51-8C5A-03FE9C281CCD} - (no file)
Unknown application.
Unnecessary (deactivated) entry that can be fixed.

O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fi-fi\msntb.dll/search.htm

O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} (Sinstaller Class) - http://dm.screensavers.com/dm/installers/si/1/sinstaller.cab
Should be fixed.

O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\Program Files\RXToolBar\sfcont.dll
Should be fixed.


BUT HOW DO I GO FOR FIXING THESE PROBLEMS NOW? Additionally, there were many others that were considered as "unknown". Should these also be fixed? Then, most of the entries were analyzed as "safe" also. Thanks a million for your help!!


Direct link Reply with quote
 

Florence B  Identity Verified
France
Member (2002)
English to French
+ ...
Registry entries Sep 26, 2006

HijackThis can correct the registry entries from the HT client itself - but now be careful with this it could do more harm than good if you do something wrong.
In any way - backup the registry (from the HT option) before doing anything. And backup your whole HD if you can (external HD).

I would start with deleting those two, which are obviously spyware:

O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} (Sinstaller Class) - http://dm.screensavers.com/dm/installers/si/1/sinstaller.cab
Should be fixed.

O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\Program Files\RXToolBar\sfcont.dll
Should be fixed.

For the rest, wait for more advices or post about it on a specialized computing forum.
But you can safely start with those two and see if it improves anything.

Florence

[Edited at 2006-09-26 10:11]


Direct link Reply with quote
 
KatjaV  Identity Verified
Finland
Local time: 21:53
French to Finnish
+ ...
TOPIC STARTER
A reliable computing forum? Sep 27, 2006

[Oddie wrote:


For the rest, wait for more advices or post about it on a specialized computing forum.
But you can safely start with those two and see if it improves anything.]


Thank you Florence and all the rest for your help! Do you know any reliable computing forum where I could post my question about which other entries to delete? I never used those forums before...thanks!


Direct link Reply with quote
 


To report site rules violations or get help, contact a site moderator:


You can also contact site staff by submitting a support request »

Ad-/Spyware?

Advanced search






LSP.expert
You’re a freelance translator? LSP.expert helps you manage your daily translation jobs. It’s easy, fast and secure.

How about you start tracking translation jobs and sending invoices in minutes? You can also manage your clients and generate reports about your business activities. So you always keep a clear view on your planning, AND you get a free 30 day trial period!

More info »
Déjà Vu X3
Try it, Love it

Find out why Déjà Vu is today the most flexible, customizable and user-friendly tool on the market. See the brand new features in action: *Completely redesigned user interface *Live Preview *Inline spell checking *Inline

More info »



Forums
  • All of ProZ.com
  • Term search
  • Jobs
  • Forums