Windows Startup Stuff

Ok, my PF Usage at boot went up by 10MB and I'm trying to figure out what it is. I know they'res the 3 places in the registry, and then the startup folder(s), and then services. Is they're anywhere else to check for stuff that can take up MBs?

 

msconfig

 

...Huh?...

 

what.....? you know Max I''m reading confusion here too.I'll pass

 

Oh, haha, I'm dumb, I'm on Windows XP Pro.

 

Max do a Hijack and a CWshredder scan to chk for nastys

 

I stand corrected good point

 

Yea I did update to the newest spybot, what's this TeaRimer your talken about? And what's he mean by "do a Hijack and a CWshredder scan to chk for nastys"?

 

Hey thanks, I'll check it out, I'm guessing it's in that thread, but it's pretty long so what do you mean by "look in your startup" my startup folder, or msconfig, or what? Shouldent it be a seperate process if it is starting?

 

you'll find it in msconfig SpybotSD Tea Timer

 

Arg! They're is nothing IN the startup tab, thanks for tryen tho, I guess it could be anything, grr. Hey if I posted a screen of my task manager stuff could someone check and see if it all looks normal? Like, whatever sent up my PF Usage must be interegating with one of the processes I already had, since they're staying the same. Oh, and I only have 256MB of RAM which is why I'm so "obsessed" with all this junk.

 

you can do the same with Hijack and then post results here the guys could chk it out to see if anything is irregular.
http://www.majorgeeks.com/download3155.html

After do a scan with CWshredder
http://www.majorgeeks.com/download4086.html

 

Hey, no prob, cept I'm on spybot 1.2 which says their's no updates avalable, grr, this sux. Any chance this could still be it... somehow.. The shitty thing is it could be just about ANYTHING, arg. What was that stuff that other guy was talking about?

 

Here's the highjack log, tell me if I did anything wrong...

Logfile of HijackThis v1.97.7
Scan saved at 9:40:27 AM, on 4/19/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\MAXPOW~1.EVA\LOCALS~1\Temp\Rar$EX00.482\HijackThis.exe

O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...pple.com/mickey/us/win/QuickTimeInstaller.exe
O16 - DPF: {68BCE50A-DC9B-4519-A118-6FDA19DB450D} (Info Class) - http://www.blizzard.com/register/wowbeta/si.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004033001/housecall.antivirus.com/housecall/xscan53.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38006.8379166667
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by10fd.bay10.hotmail.msn.com/activex/HMAtchmt.ocx

 

Don't see anything unusual Max looks good.

 

Well, I always check my PF usage at boot and it's usually 65-69MBs in use, and now its more like 75-79Mbs in use at boot and I can't seem to find what is causing it.

 

Somewhat, I updated my drivers to omegas 4.4 from his 4.3s but I'm pretty sure that that didn't change it and it was after that. I Installed the DivX Codec for WMP, umm, I dled some ISOs I think and burned em with alcohol, this is all aroudn the time I noticed the PF goin up.. at boot. I've defragged the drive yea, I've cleaned the registry, scanned for spyware/adware, No error codes other then the norm (heh) from all the services I had to dhange to get it to my nice 65MB I once had.. uh, yea I used windows update after but that didn't change anything...

The main prob is that it went up without adding another process or adding anything new in any of the startup folders I usually check so it's either "hidden" or somehow "interegated" with one of the old processes which should mean that oen of em is 10MB higher, but, I can't figure out which one, if this is even true.

Haha, long post, sorry

 

Here ya go

 

Nope, I have openoffice tho, but I don't think I checked the quickstart stuff and I think that would show up in the startup stuff

 

I havn't read the thing yet but I wanna make a quick post i'll edit...

AV engine update?

 

AV's? lol.

EDIT: Benchmarking data.. other then 3DMark.. no. So what should I do then?

 

Oh and, app?

 

Come on man, I thought you could help me with this Altho, if you dunno what to do then that's alright...

 

Oh sry, I was asking what you ment by buggy app and av (I know you ment anti virus by av now..). I acually uninstalled my anti virus cause i couldent find anything that wouldent take up any memory unless I told it too. So now I just use that online trendmicro thing.

 

*Bump*... I'm confused, lol.

 

There can be several reasons for system taking more memory:
1. Installed program which installs new services (or reactivates previously disabled services)
2. Changed theme which makes explorer.exe consume more memory.
3. Installed "tweak"-application or applied registry tweaks, which tells the system to consume more memory (In trade for possible better performance)

You could try to hold shift-key down while starting windows, then you can exclude applications which have placed themselves in Windows automaticly-startup-places.

More about startup order in Windows:

Description of where and in what order programs are loaded at startup

 

Hey thanks, great stuff you've told me and could help me get closer to getting my 10MB back, haha. You don't happen to have MSN messenger do ya? I'd like to ask you some stuff and it would be easier on an IM.

 

Have updated my public profile, knock yourself out