Poor performance and HJT log. Help please

smodestino

There are two questions (or pleas for help) here! First, internet exploser keeps shutting down on me. Click on link, get it for a second or two and then it is gone. I have run adaware and spybot and they all come up clean.

My HJT log is appended below

Second question, which my not be appropriate here, but I will ask anyway. I am running windows NT on an older machine that has served many roles in its life time. The primary hard diskpartition is about 5/6ths full and I'm sure this is hurting performance. Is there an easy way to tell what things are required on the C drive and what things can be deleted?

Thanks in advance. You guys are doing a great job. Maybe when I learn enough, I can help someone else...

Sherry

Logfile of HijackThis v1.98.2
Scan saved at 1:58:14 PM, on 11/19/04
Platform: Windows NT 4 SP6 (WinNT 4.00.1381)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\spoolss.exe
C:\WINNT\System32\nddeagnt.exe
C:\PROGRA~1\Navnt\navapsvc.exe
C:\PROGRA~1\Navnt\npssvc.exe
C:\WINNT\system32\RpcSs.exe
D:\Diskeeper\DkService.exe
c:\winnt\system32\pstores.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\Explorer.EXE
C:\WINNT\System32\SysTray.Exe
C:\WINNT\System32\loadwc.exe
C:\WINNT\System32\starter.exe
C:\Program Files\Navnt\navapw32.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
D:\acrobat\Distillr\AcroTray.exe
C:\PROGRA~1\Navnt\alertsvc.exe
C:\Program Files\Outlook Express\MSIMN.EXE
C:\WINNT\System32\taskmgr.exe
C:\PROGRA~1\Plus!\MICROS~1\iexplore.exe
C:\WINNT\system32\sndvol32.exe
C:\WINNT\system32\tapisrv.exe
C:\PROGRA~1\Plus!\MICROS~1\iexplore.exe
C:\WINNT\System32\ddhelp.exe
D:\hjt\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://my.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
F2 - REG:system.ini: UserInit=userinit,nddeagnt.exe
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [Norton Program Scheduler Event Checker] C:\PROGRA~1\Navnt\npscheck.exe
O4 - HKLM\..\Run: [BrowserWebCheck] loadwc.exe
O4 - HKLM\..\Run: [EnsoniqMixer] C:\WINNT\System32\starter.exe
O4 - Startup: Diskeeper 9 Professional Edition Registration.lnk = D:\Diskeeper\ESIRegister.exe
O4 - Global Startup: Norton AntiVirus AutoProtect.lnk = C:\Program Files\Navnt\navapw32.exe
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: Acrobat Assistant.lnk = D:\acrobat\Distillr\AcroTray.exe
O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Windows Messaging\NEWPROF.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O13 - WWW. Prefix: http://
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {860D5AAC-D059-4C9F-93D3-3FD6FBB6872F} (AuroraCtrl Class) - http://www.icebergradio.com/aurora/1.0.2.259/client.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab27513.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://zone.msn.com/bingame/zuma/default/popcaploader_v6.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab

SpywareShooter

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O13 - WWW. Prefix: http://

Fix those entries and you should be all set. Are you having any problems?

smodestino

Thanks.. I will let you know if it helps.

Sherry

smodestino

Still experiencing browser shut down. Did install latest updates from microsoft. Perhaps that will help.

Thanks...

Sherry