cursor lags noticeably

Discussion in 'Dell' started by bullseye, Mar 29, 2006.

  1. bullseye

    bullseye Guest

    Thank you for offering to look at this.

    As I posted a version of this before, I shall explain some of the items:

    1. the CDilla comes from one application (the Oxford English
    Dictionary). They use it to prevent duplication.

    2. Several of the MSN moneycentral,, WON, IBD, links have
    applets that I use.

    3. I notice your sentiment about ZoneAlarm and McAfee. I have used
    ZoneAlarm (the firewall only) for about 5 years now and have only had
    one or two problems in the past that Zone Labs identified and patched.
    I tried Kerios once but found it too complicated. Would you recommend
    another free and simple firewall?

    The same with McAfee (even though I realize there are several McAfee
    related tasks; I suspect I can do without one or two of them but I have
    been unable to identify which ones; and McAfee support is too lazy to say).

    Having said all that, I paste the log file from HijackThis:

    Logfile of HijackThis v1.99.1
    Scan saved at 8:59:26 AM, on 3/31/2006
    Platform: Windows 2000 SP4 (WinNT 5.00.2195)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\Program Files\PalickSoft\HDD Temperature\HDDTSvc.exe
    C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
    C:\Program Files\\VSO\mcvsshld.exe
    C:\Program Files\\VSO\oasclnt.exe
    c:\program files\\agent\mcagent.exe
    C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\\GoGoData Toolbar\GoGoTray.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\PalickSoft\HDD Temperature\HDDTemperature.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Mozilla Thunderbird\thunderbird.exe
    C:\Program Files\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
    O2 - BHO: Adobe PDF Reader Link Helper -
    {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat
    O2 - BHO: Popup Manager - {08E74C67-99A6-45C7-94DA-A397A8FD8082} -
    C:\Program Files\Popup Manager\PopupMgr_1.0.2.1P.dll
    O2 - BHO: GoGoData AdBuster - {3EB9C349-7473-48AC-A59B-42F31751974B} -
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} -
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
    C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655}
    - c:\progra~1\\vso\mcvsshl.dll
    O3 - Toolbar: GoGoData AdBuster -
    {3EB9C349-7473-48AC-A59B-42F31751974B} -
    O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft
    O4 - HKLM\..\Run: [VSOCheckTask]
    "C:\PROGRA~1\\VSO\mcmnhdlr.exe" /checktask
    O4 - HKLM\..\Run: [VirusScan Online] C:\Program
    O4 - HKLM\..\Run: [OASClnt] C:\Program Files\\VSO\oasclnt.exe
    O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\\agent\mcagent.exe
    O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\\agent\mcupdate.exe
    O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone
    O4 - HKCU\..\Run: [internat.exe] internat.exe
    O4 - HKCU\..\Run: [GoGoTray.exe] C:\Program Files\\GoGoData
    O4 - Startup: HDD temperature.lnk = C:\Program Files\PalickSoft\HDD
    O4 - Global Startup: Launch Internet Explorer Browser.lnk = C:\Program
    Files\Internet Explorer\IEXPLORE.EXE
    O4 - Global Startup: Mozilla Firefox.lnk = C:\Program Files\Mozilla
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
    C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console -
    {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
    O9 - Extra button: (no name) - {7B6E4BB4-8464-47CF-9A5B-F82F6B408A6E} -
    O9 - Extra 'Tools' menuitem: GoGoData AdBuster -
    {7B6E4BB4-8464-47CF-9A5B-F82F6B408A6E} -
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} -
    C:\Program Files\AIM\aim.exe
    O9 - Extra button: Yahoo! Messenger -
    {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} -
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger -
    {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} -
    O16 - DPF: {0C568603-D79D-11D2-87A7-00C04FF158BB} -
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine
    Advantage Validation Tool) -
    O16 - DPF: {1DD81666-F3AD-11D3-BA86-00500487B4EC} (WonSearchX Control) -
    O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight
    Class) -
    O16 - DPF: {2ED9BC2B-4DF1-472E-9B5E-55477D2C97F5} (Microsoft Data
    Collection Control) -
    O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} ( Operating
    System Class) -,0,0,101/
    O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} -
    O16 - DPF: {6AE4CC6E-999C-11D4-A3F0-009027427750} (NSAuto Class) -
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
    O16 - DPF: {712D42CD-3513-473E-96E8-019C9AD78F1A} -
    O16 - DPF: {78267546-F2AC-11D2-A278-005004676C44} (WonList Control) -
    O16 - DPF: {89A9F739-8F34-40E1-BCD3-62BABEAD3C6F} (MSN Money QuickList)
    O16 - DPF: {963BE66B-121D-4E6C-BF9F-1A774D9A2E41} -
    O16 - DPF: {AECD14A8-F662-11D1-A395-00805F535788} (Plotwon Control) -
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF}
    (MsnMessengerSetupDownloadControl Class) -
    O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) -
    O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class)
    O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer
    Wrapper) -
    O16 - DPF: {EE2589EB-7FC8-44DB-A892-573F2C4B41E0} -
    O16 - DPF: {EE3CD402-69EB-4B53-819D-0CA2F95AD7DA} (PFMngr Control) -
    O17 -
    NameServer =
    O23 - Service: Ati HotKey Poller - Unknown owner -
    C:\WINNT\system32\Ati2evxx.exe (file missing)
    O23 - Service: ATI Smart - Unknown owner -
    C:\WINNT\system32\ati2sgag.exe (file missing)
    O23 - Service: C-DillaSrv - C-Dilla Ltd -
    O23 - Service: Creative Service for CDROM Access - Creative Technology
    Ltd - C:\WINNT\System32\CTsvcCDA.exe
    O23 - Service: Logical Disk Manager Administrative Service (dmadmin) -
    VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
    O23 - Service: HDD Temperature (HDDTService) - PalickSoft - C:\Program
    Files\PalickSoft\HDD Temperature\HDDTSvc.exe
    O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown
    owner - C:\WINNT\system32\drivers\KodakCCS.exe (file missing)
    O23 - Service: McShield (McShield) - McAfee Inc. -
    O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc -
    O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) -
    McAfee, Inc - C:\PROGRA~1\\Agent\mcupdmgr.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA
    Corporation - C:\WINNT\system32\nvsvc32.exe
    O23 - Service: Super Ad Blocker Service (SABSVC) - -
    C:\Program Files\\Super Ad Blocker\SABSVC.EXE
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC -
    bullseye, Mar 31, 2006
    1. Advertisements

  2. bullseye

    Jay B Guest

    i looked thru your files.
    the biggest thing that jumps out at me is the gogodata stuff. take it
    all out immediately.
    didnt i review this for you weeks ago??
    i didnt remember your name, but i recognize the hijacklog.
    do you think my comments will be any different?
    i also dont like adbuster.
    also take out the WON stuff.

    you have to eliminate as much as you can from memory and from the
    startup. everyone of those explorer addons are sitting in memory
    intercepting what's going on there, spying on you!!
    some are doing good things, others are just plan wasteful on resources.
    if you cant see my response from last time, i can repost it.
    Jay B, Mar 31, 2006
    1. Advertisements

  3. bullseye

    Jay B Guest

    your problem has nothing to do with mouse software
    Jay B, Mar 31, 2006
  4. bullseye

    bullseye Guest

    yes it's me from last time; I use GoGodata because the site with WON
    ( has an extremely annoying number of banner ads.
    Would you recommend of an anti-ad application? I may uninstall GoGoData
    for now just to check performance. How else can we fight banner

    thanks again for looking at the log
    bullseye, Mar 31, 2006
  5. bullseye

    Jay B Guest

    use a safe browser like firefox!!
    get rid of all popup blockers, you dont need them.
    if you have SP2, then explorer has some built in stuff as wel, but not
    as good as firefox.
    Jay B, Mar 31, 2006
  6. bullseye

    Colin Wilson Guest

    How else can we fight banner advertising?

    One possibility is to use Spybot Search & Destroy and install their
    hosts file (if nothing else, it will stop "malicious" advertisers)

    Another might be to install PeerGuardian2...

    This is recommended for anyone who uses filesharing sites, but it also
    has a good list of advertising websites, and it acts like a "second"
    firewall and prevents your machine from connecting to anything on its
    block lists (you can choose from as many of the lists as you like -
    p2p, adware, spyware, advertising, government etc).

    You can enable / disable http blocking (or the entire block list) if
    you have problems with any site / app using a couple of simple buttons
    which toggle the service on/off.
    Colin Wilson, Mar 31, 2006
  7. bullseye

    bullseye Guest

    I also use FireFox and like it very much; the site
    unfortunately conflicts with it.

    I may test by getting rid of the pop up blockers, GoGoData and whatever
    else anti-ad I have and I shall report back.

    The other gentleman recommended Peer Guardian (which I downloaded);
    :). Would that also fall on the list of apps you recommend I
    uninstall? (I have a strong aversion to ads and annoying distraction on

    Thank you again for the feedback.

    bullseye, Apr 1, 2006
  8. bullseye

    Jay B Guest

    i never heard of peer guardian before.
    that means it is new or not effective.
    i dont think you need it.
    my few searchs on google about it show signs of embedded spyware and
    other nasty issues, i would stay far away from it.

    you only need 1 antivirus program, 1 firewall if you want, (i use
    windows firewall that comes with sp2 and the firewall built into my
    router) and i use spybot and spwareblaster to check and take care of any
    spyware issues. each time i run spybot, i get nothing found.

    the microsoft antispyware product was the only other free product that
    did any good, but i still dont use it ever. i simply dont need it.
    i certainly wouldnt pay for any spyware protection.

    i use firefox for all general browsing, and IE anytime firefox doesnt
    work. all my systems are lean and mean. i dont like anything resident
    in memory that isnt really helpful and i know why its there. i start
    with a base of only about 20 processes. very simple.
    Jay B, Apr 1, 2006
  9. bullseye

    Colin Wilson Guest

    i never heard of peer guardian before.
    Its a free app, open source, so you (if you had the inclination) can
    delve through and check the source for anything nasty lurking.

    With it being a sourceforge hosted program, its a fairly safe bet that
    it does not - and will not - contain any spyware or malicious payload
    of any sort, either now or in the future. The visibility of the source
    and the ability to compile the program independantly tends to ensure
    the code stays "clean".
    Please feel free to comment further on this - its the first i`ve heard
    of it, and I like to keep my ear to the ground on security issues.

    My website is dedicated to trying to help new users understand and
    provide links to trusted free spyware removal apps:

    Please note that on the second link from the main page, one of the
    first links I give is to the list of rogue / suspect anti-spyware
    utilities at spywarewarrior.

    I spend enough time helping others remove crap from their systems (for
    free) to stop me recommending software I don`t trust.

    Amongst apps I no longer recommend is AVG - i`ve spent time trying to
    clean up a few systems recently that were infested / infected heavily
    while relying on it. Same goes for Norton, although I believe their
    corporate AV is very good, and the detection rate far surpasses that
    of their "home" product.
    Spybot & Spywareblaster are both superb products, the one issue I have
    with your last sentence is your choice of firewall. You are aware that
    the windows firewall only stops "most" things from coming in, and
    stops NOTHING that goes out from your machine ? - as such, any malware
    you may have goes completely unchecked if not found by Spybot S&D.

    Spywareblaster locks down activex exploits, so although it helps lock
    down one source of "infection", it isn`t directly a spyware detection
    app in the normal sense. Think of it as a screen door, rather than a
    fly spray.
    Microsoft can NOT be trusted when it comes to any security app - if
    they knew how to write a secure OS the floodgates would not need
    closing by third party applications.

    Microsoft bought another company (Giant) in order to rebrand their
    antispyware as their own - possibly out of shame, possibly as a PR
    exercise. Some detection from the original product has beed disabled
    because Microsoft got cosy with the "reformed" advertiser that needed
    blocking in the first place.

    As for not paying for any spyware protection - you generally shouldn't
    need to. The only app I link to that is "paid for" is Pest Patrol (and
    it isn`t an affiliate link) - but it can be annoying in that it
    reports things like VNC as malicious, when it isn`t.

    On that very subject (VNC) - if the op would like to contact me via my
    sig, I can arrange to let them log into my machine remotely using VNC
    and see Peerguardian in use without them having to "risk" installing
    it on their own machine. How`s that for an offer ?
    Colin Wilson, Apr 1, 2006
  10. bullseye

    Colin Wilson Guest

    Some detection from the original product has beed disabled because
    In case anyone wants to look up more on this, the company was Claria,
    formerly known as Gator.

    Gator was the cause of the worst dose of malware i`ve *ever* seen on
    any system - the PC involved took 6 hours to boot up, and each mouse
    click took 10-15 minutes to register. Obviously, running a program by
    double-clicking took 20-30 minutes to register them before it would
    think about doing something.
    Colin Wilson, Apr 1, 2006
  11. and in information week this week there is an article about
    suing for having paid "adware purveyor claria to deliver
    pop-up ads to consumers when that are about to make a purchase at rival" in a related article they say that claria revealed plans to
    exit the controversial adware business. i would not trust anything that
    they make, whether you consciously installed it or it was installed without
    your knowledge.
    Christopher Muto, Apr 1, 2006
  12. bullseye

    Notan Guest

    It's not a matter of only *needing* 1 antivirus program, it's a matter of
    running more than 1, simultaneously, can lead to conflicts and result in
    poor detection rates.

    Notan, Apr 1, 2006
  13. bullseye

    Jay B Guest

    Hi Colin,
    i respect your site and your recommendations,

    however i still cannot endorse peer guardian.
    there is a lot of question about its validity.
    here is one article i easily found. a search turned up others, i dont
    have time to review them myself.
    right now, i cant take that risk recommending something like that.

    i am fully aware of the shortcomings of the windows firewall.
    since there are no rogue monsters running thru my system, it is not a
    problem. i had a lot of trouble with other firewall products with
    stability and performance. i run too many apps to have problems.

    i consider myself a spyware expert as well, perform removals every day
    from various clients. My systems are completely clean all the time. I
    sit around 5 computers running 24x7 at my desk, servers, mail &
    newsgroups, client support, and software development. at any point in
    time, each will have 20 windows open with various apps, development
    programs, firefox browsers, sql server, etc. I dont need or want
    anything else to slow me down.

    dont underestimate the power of spywareblaster. locking down is the
    best preventative you can get. i can go on the raunchiest of sites and
    i wont get anything. no problems yet.

    the fact is that there is no ONE program that will do everything. and a
    lot of companies are tryingto be the all supreme product that will sovle
    everything and they are just becoming bloaty and noneffective. because
    you will still need more than one program. that's why i look at the
    hijack logs that i come across, including one recently from bullseye nad
    that's a common thing to see numerous programs running trying to combat
    things. all working against each other to screw up your system,
    including known bad spy programs that people refuse to take out.

    Jay B, Apr 1, 2006
  14. bullseye

    Colin Wilson Guest

    i respect your site and your recommendations

    Thanks :-}
    That story is dated 19th August 2004 - Methlabs are quite open in
    admitting that they were once hijacked and fake versions of their apps
    distributed via non-sourceforge channels.

    There`s actually nothing stopping you preventing Peerguardian from
    accessing the internet completely if you so wish (the auto-update
    facility) - you can download the blocklists manually and simply add
    them from the list manager.

    The lists themselves can be found at and
    more can be found within the list manager built into the program (the
    URLs are shown so you can copy and paste them into a browser to get
    them without allowing Peerguardian "out")
    Colin Wilson, Apr 1, 2006
  15. bullseye

    Jay B Guest

    i just read that symantec just purchased peerguardian.
    oh geez, now for sure i wont be using it.
    they'll be screwing it up.

    you're probably right that it is probably fine now.
    but it is not something that the average person needs as a firewall.
    i read it to be specfic to help when using peer to peer programs, which
    are notoriously bad in the first place and is illegal to be using, and i
    certainly dont use.
    Jay B, Apr 1, 2006
  16. bullseye

    Colin Wilson Guest

    i just read that symantec just purchased peerguardian.
    You did notice the date though ? :p
    I use p2p, there are plenty of legit uses for it - i've seeded linux
    distros for months with bittorrent !
    Colin Wilson, Apr 1, 2006
  17. bullseye

    Colin Wilson Guest

    How else can we fight banner advertising?
    A further thought on this - if its particular sites that annoy you
    with adverts, there`s nothing stopping you making a note of the
    domains used to aggregate the adverts and putting them into your own
    hosts file...

    These are what i`ve manually added to mine in addition to the Spybot
    host entries, but obviously the sites you visit may well use different
    Colin Wilson, Apr 2, 2006
  18. bullseye

    Jay B Guest

    i noticed that you have several zonelabs entries in your hosts file!
    if they are such a great product, why are you blocking out some of their
    zones?? see my point.
    Jay B, Apr 2, 2006
  19. bullseye

    Colin Wilson Guest

    i noticed that you have several zonelabs entries in your hosts file!
    Yes - it was to disable the "phone home" capability, as reported on about 4 months ago - there was some doubt
    at the time as to who "home" was in this instance

    ....Zone Alarm 6.0 was sneakily sending off data to four different
    Zone Labs (acquired by Checkpoint in March of 2004) at first denied
    the activity for a couple of months before deciding the software had a
    "bug" even though, as he points out, "the instructions to contact the
    servers were set out in the program=3Fs XML code."
    Colin Wilson, Apr 2, 2006
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.