No Problems... Yet!

[CharlieFat69]

I do not have any problems I know about but in the course of trying to optimise my laptop I have found several items and processes which I can't identify or have confusing information on the web. I have ran Hijack This.

What is the appropriate forum to request help to identify the unknown items and get explainations of what they are for?

Regards
Charlie

[evilfantasy]

Welcome to H2G.

You can ask about processes here.

If you think it's malware then start a new thread in the Spyware Help forum and post a fresh HijackThis log.

[CharlieFat69]

Thanks Evil Fantasy,

I've included the Hijack This log as an attachment.

The line I am most interested in is

O4 - HKLM\..\Run: [Unattend0000000001{B4857EC1-4EA0-4B8F-BAB5-D18975EE87AA}] c:\dell\cfi\RunGo.lnk - A very similar entry to this shows on google as a problem


There are several other entries I am unsure about deleting. Any advice on what I can safely delete and what I should steer clear off would be appreciated

Regards
Charlie

[evilfantasy]

The log looks fine as far as malware is concerned, but the line you pointed out is a mystery to me. I own a Dell (not Vista) and have never seen that entry before. Looks like something dell factory installed.

I did a Google search on c:\dell\cfi and found this Dell page. Dell's Custom Factory Integration. Does this look like something that was included with your PC?

If you Google Dell CFI then you get multiple results on the Custom Factory Integration as well.

[CharlieFat69]

Good to know ef.

I googled 'c:\dell\cfi\RunGo.lnk' and found this link

http://forums.majorgeeks.com/showthread.php?t=156340

and on page 1
"
chaslang
MajorGeeks Admin - Malware Expert
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 51,367
Thanks: 7
Thanked 381 Times in 225 Posts


Re: Working through R+RMF guide prob with spybot administrator rights
Do you have any idea what the heck the below is? Is it really something for Dell? It looks more like malware than your malware!

O4 - HKLM\..\Run: [Unattend0000000001{EFB9856D-F923-4656-93CB-7493BB7D0A5A}] c:\dell\cfi\RunGo.lnk

Is there a reason that you did not attach the ComboFix log? Did it not run properly for you?"

caused me to panic.

Your links have helped explain away my worries, thanks a lot..

Now can you recomend where I can find out which of my running programs and services I can safely stop/remove to improve boot speed and conserve memory and resources.

regards
A happy Charlie

[evilfantasy]

There are a few free software applications you may want to check out. They are lightweight and do a good job.

First StartUpLite by MalwareBytes.

StartUpLite is a lightweight application that will allow you to speed up your system startup. It provides a safe and efficient way to disable or remove unnecessary startup entries from your computer.

Next The PC Decrapifier.

Simply download the file. Open up the zip file and run the EXE. There is no installer necessary. If you have anti-virus software installed, it may complain about this program because it is written with a scripting language. These warnings can be safely ignored.


You may then pick and choose what you want to remove. It will not begin removing anything without prompting you first!

Last but definately not least is CCleaner (Crap Cleaner). This is good for daily use, run it to clean out the junk files that Windows creates. CCleaner (download software / view tutorial)

Let us know if you have any questions and we will do our best to answer.

[tallin]

I do not have any problems I know about but in the course of trying to optimise my laptop I have found several items and processes which I can't identify or have confusing information on the web. I have ran Hijack This.
What is the appropriate forum to request help to identify the unknown items and get explainations of what they are for?
Regards
Charlie

Hi Charlie,

QuickAccess is a great little program that attaches itself to TaskManager which is an easy way to identify all processes running.
Online source for Process Information.

Hope this helps,

kind regards,