IE5 Add-ins and scripts

Hi,

Hoping someone can help me .....

The problem I have is IE is trying to contact aim1.adsoftware.com every 20 seconds or so. I noticed this when I installed Sygate Personal Firewall. Is this normal or the result of some script which has installed itself?

I have already removed another program which was contacting the same site - windows\loadqm.exe. It had been loading at startup.

Cheers, Phli

 

And loadqm.exe is associated with MSN Messenger.

 

Phil Welcome to WindowsBBS

What your firewall is seeing is the rotating spam that comes with AIM.

The items will still end up in your cache, however you never have to see any of the spam. Dead AIM is a free and all the worthwhile features of AIM (still the best message program) will continue to function. Get Dead AIM here

 

Hi guys,

Thanks for the advice ... but I don't have AOL running. I've looked for the aim software and don't have that either. Something must have hooked itself into IE as the firewall reports the application trying to contact aim1.ad.... as IE, not MSN or AIM.

Any more hints? If you were to make IE do this, how would it be done and where would it be registered?

Cheers, Phil

 

Stopping AIM1 traffic

Hi again - problem solved!

Gozilla (download manager) had put advert.dll in windows\system. Removing this file stopped IE trying to contact the aim1 site.

When I run Gozilla it still tries to contact aim1 but my firewall stops it being successful ). Trying to remove the copy of advert.dll from the Gozilla directory caused Gozilla to stop working. It was also necessary to leave windows\system\amcis.dll (another file used by gozilla).

Cheers, Phil

 

Hiya

I see you're running Gozilla. Thats spyware, not agood thing to have.

Go here and download AddAware http://tomcoyote.com/lsindex.html
Install and run, ensuring that Deep Registry Scan is enabled. Remove all except any references to Web3000. Also, uninstall Gozilla. If you/re unsure, copy/paste the list here.

Whilst you're there, download and install RefUpdate. Install and run to get the latest updates. Just press Connect.

Also, go to Run and type MSINFO32
On the left choose Software Enviroment, then Startup Programs. Copy/paste the list here.

Regards

eddie

 

It doesn't answer this question, but I suggest Due to the SPYWARE ISSUE, you dump Gozilla, and try this Prog instead.


all the best

dan
http://www.getright.com/

 

Hiya dan

hate to say it, but GetRight is spyware:

http://www.tom-cat.com/cgi-bin/spyb...t&mh=10&keyword=&bool=and&view_records=Submit

Download Accelerator isn't...yet:

http://www.speedbit.com/

eddie

 

Hi Eddie,

Thanks heaps for your help. All done and running clean of spyware!! I also downloaded pop-up stopper and love it!!

Here's the results of msinfo32 - startup programs. All looks reasonable to me - am I missing anything?

Microsoft Office Startup Group "C:\Program Files\Microsoft Office\Office\OSA9.EXE" -b -l
HotSync Manager Startup Group "C:\Program Files\Palm\hotsync.exe "
EPSON Status Monitor 3 Environment Check 2 Startup Group C:\WINDOWS\SYSTEM\E_SRCV02.EXE
UMAX VistaAccess Startup Group C:\VSTASCAN\vsaccess.exe
Reminder Registry (Per-User Run) C:\Program Files\Microsoft Money\System\reminder.exe
ScanRegistry Registry (Machine Run) C:\WINDOWS\scanregw.exe /autorun
TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe
SystemTray Registry (Machine Run) SysTray.Exe
IrMon Registry (Machine Run) IrMon.exe
LoadPowerProfile Registry (Machine Run) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
Control Panel Registry (Machine Run) smctrlw.exe
SynTPLpr Registry (Machine Run) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
SynTPEnh Registry (Machine Run) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
EM_EXEC Registry (Machine Run) C:\PROGRA~1\LOGITECH\MOUSEW~1\SYSTEM\EM_EXEC.EXE
StillImageMonitor Registry (Machine Run) C:\WINDOWS\SYSTEM\STIMON.EXE
SmcService Registry (Machine Run) C:\PROGRA~1\SYGATE\SPF\SMC.EXE -startgui
Pop-Up Stopper Registry (Machine Run) "C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER\DPPS2.EXE "
LoadPowerProfile Registry (Machine Service) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SAgent2ExePath Registry (Machine Service) C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
SmcService Registry (Machine Service) C:\PROGRAM FILES\SYGATE\SPF\SMC.EXE

Cheers, Phil

 

Hiya

Microsoft Office Startup: Resource hog that launches common Microsoft Office components to help speed up the launch of Office programs.

HotSync Manager: Installed when connecting a Palm HotSync cradle up to a USB port. The Blue and Red Arrow Icon that enables Palm / Handspring Synchronizing. Available via Start -> Programs - not needed

EPSON Status Monitor 3 Environment Check: According to the Epson info: "Use this utility to automatically check for errors and also check the level of ink remaining." This utility can also be started on demand when about to print as follows: File menu > Print to bring up the print dialog box. Click on the Properties button which will bring up a display with 4 tabs. Click the Utility tab to get a list of utilities that can be executed including the Status Monitor 3 Environment Check. Not required

UMAX VistaAccess Startup: your scanner. maybe.

Reminder: From Microsoft Money. Reminds you of your bills. Not required

ScanRegistry: keep

TaskMonitor: The Task Monitor the disk-access patterns of programs when they are started and stores this information in log files in the Applog folder. Task Monitor also records the number of times you use a program. The Disk Defragmenter tool uses this information to optimize your hard disk so that programs that you use frequently are loaded faster. Not required - but can be useful. Note: for Norton Anti-Virus 2002 users, loading TaskMonitor will typically solve many, if not most, of those annoying IE scripting errors

SystemTray: keep

IrMon: System Tray access to infra-red devices. Not required unless you use infra-red devices

LoadPowerProfile: Power management specifics such as monitor shut-off, system standby, etc. Associated with power management and is listed twice. keep

Control Panel: ???

SynTPLpr: On Laptops "“ Required for touchpad features to work

SynTPEnh: On Laptops "“ Required for touchpad features to work

EM_EXEC: Logitech Mouseware driver. Needed to support some additional functionality of Logitech mice/trackballs

StillImageMonitor: If your scanner does not have a button to initiate scanning you kill stimon. Even if it does have a button, you can still manually launch the scanning application. If unavailable via Start -> Programs

SmcService: Sygate Firewall. I you're connected to the net via cable/ASDL/LAN or connect for long periods of time I recommend you leave it enabled if this is your firewall software

Pop-Up Stopper: Automatically closes pop-up windows in you browser - optional

SAgent2ExePath: Seiko Epson printer status agent. Disable if printer is not used often

Okay, for the ones that you don't want, go to Run and type MSCONFIG, startup tab. Uncheck the ones you don't want, apply and restart. If you're unsure, do seperately, but apply and restart after each one.

Regards

eddie