Unnecessary Internet Explorer add-ons

This is related to a previous post I did back in March about add-ons slowing down my Aunt’s computers. I don’t use IE so I never payed attention to them before. After working on her computer I messed around with mine a bit to see how the add-ons impacted the application loading time and discovered that there are a handful of add-ons that are, more than likely, completely unnecessary for the typical user.

I went through the add-ons for IE on my computer and disabled 10 out of the 15 in there. I noticed a major difference in the loading time and haven’t had any issues since disabling them. Depending on what programs you have installed on your computer, you may have different add-ons and might have more that can be disabled without causing problems.

Go to the Tools menu -> Manage add-ons and wait a couple seconds for it to load the list. The ones I highlighted in the picture below I would say are perfectly safe to disable. If you later notice something weird, you can always go back in and enable them again. On the far right it shows you how long it takes each add-on to load. Some of them may not sound very long (.29 sec), but they add up and you definitely notice a difference even when you’re saving yourself only a few seconds.

disabled add-ons

disabled add-ons

If you’re noticing Internet Explorer being slow and can’t figure out what’s going on, try this, it made more of a difference than I expected it to.

  1. #1 by Kate on March 10, 2010 - 8:02 PM

    Thanks – I have used Malwarebytes Antimalware and cleaned huge amounts of gunk out. Also Spybot found a few more. It seems to have helped some but the emails are still not coming in – connection breaks even though I’ve ticked the redial if dropped boxes! The Microsoft Security essentials needed updating as well so I left that going and will see if I can get back tomorrow.
    Here is HiJackThis log from earlier this afternoon.
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 1:47:12 p.m., on 11/03/2010
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16981)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    c:\Program Files\Microsoft Security Essentials\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
    C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
    C:\Program Files\Microsoft Security Essentials\msseces.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    c:\Program Files\Microsoft Security Essentials\MpCmdRun.exe
    c:\windows\system\hpsysdrv.exe
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\Program Files\Outlook Express\msimn.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_NZ&c=64&bd=PRESARIO&pf=desktop
    R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_NZ&c=64&bd=PRESARIO&pf=desktop
    R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.nz/
    R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_NZ&c=64&bd=PRESARIO&pf=desktop
    R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    O2 – BHO: Adobe PDF Reader Link Helper – {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} – C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 – BHO: (no name) – {53707962-6F74-2D53-2644-206D7942484F} – C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 – BHO: Canon Easy Web Print Helper – {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} – C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
    O3 – Toolbar: Easy-WebPrint – {327C2873-E90D-4c37-AA9D-10AC9BABA46C} – C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
    O4 – HKLM\..\Run: [IMJPMIG8.1] “C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE” /Spoil /RemAdvDef /Migration32
    O4 – HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
    O4 – HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 – HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 – HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 – HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 – HKLM\..\Run: [HPBootOp] “C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe” /run
    O4 – HKLM\..\Run: [SSBkgdUpdate] “C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe” -Embedding -boot
    O4 – HKLM\..\Run: [OpwareSE4] “C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe”
    O4 – HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
    O4 – HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
    O4 – HKLM\..\Run: [Blubster] C:\Program Files\Blubster\Blubster.exe SILENT
    O4 – HKLM\..\Run: [QuickTime Task] “C:\Program Files\QuickTime\qttask.exe” -atboottime
    O4 – HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
    O4 – HKLM\..\Run: [MSSE] “c:\Program Files\Microsoft Security Essentials\msseces.exe” -hide
    O4 – HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 – HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘LOCAL SERVICE’)
    O4 – HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘NETWORK SERVICE’)
    O4 – HKUS\S-1-5-18\..\Run: [DWQueuedReporting] “c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe” -t (User ‘SYSTEM’)
    O4 – HKUS\.DEFAULT\..\Run: [DWQueuedReporting] “c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe” -t (User ‘Default user’)
    O4 – .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User ‘Default user’)
    O4 – Global Startup: Adobe Gamma Loader.lnk = ?
    O4 – Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 – Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O9 – Extra button: Connection Help – {E2D4D26B-0180-43a4-B05F-462D6D54C789} – C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 – Extra ‘Tools’ menuitem: Connection Help – {E2D4D26B-0180-43a4-B05F-462D6D54C789} – C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 – Extra button: Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:\Program Files\Messenger\msmsgs.exe
    O9 – Extra ‘Tools’ menuitem: Windows Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:\Program Files\Messenger\msmsgs.exe
    O14 – IERESET.INF: START_PAGE_URL=http://www.xtra.co.nz
    O17 – HKLM\System\CCS\Services\Tcpip\..\{1EC54CB3-E829-4938-93FD-10F313B6C4EE}: NameServer = 202.27.184.3 202.27.184.5
    O17 – HKLM\System\CS1\Services\Tcpip\..\{1EC54CB3-E829-4938-93FD-10F313B6C4EE}: NameServer = 202.27.184.3 202.27.184.5
    O23 – Service: Ati HotKey Poller – ATI Technologies Inc. – C:\WINDOWS\system32\Ati2evxx.exe
    O23 – Service: InstallDriver Table Manager (IDriverT) – Macrovision Corporation – C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 – Service: Kerio Personal Firewall 4 (KPF4) – Kerio Technologies – C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
    O23 – Service: LightScribeService Direct Disc Labeling Service (LightScribeService) – Hewlett-Packard Company – C:\Program Files\Common Files\LightScribe\LSSrvc.exe


    End of file – 6558 bytes
    Your help is appreciated.
    Thanks.

    • #2 by jen3ral on March 11, 2010 - 11:20 AM

      Before doing any of this I suggest creating a restore point. Just in case something you do messes something up. That way you can go back to the way it was before making the change.

      The only thing that jumps out at me that could potentially be a problem is this line:

      O4 – HKLM\..\Run: [Blubster] C:\Program Files\Blubster\Blubster.exe SILENT

      I looked around online and I saw some places that said Blubster is a file-sharing program used to download music, movies, etc. But I saw in other places that it’s a virus or spyware. So if you have no idea what that is I would definitely check that box and select fix to fix the problem. It might also be in the add/remove programs list, if it is then remove it. Even if it is a legitimate program that your friend uses I would suggest removing it and finding a program that’s a bit more well known.

      These other ones I’ll list aren’t anything bad, but I would say they aren’t necessary. They are all programs that run automatically whenever the computer is restarted and just take up memory. They check for updates, but I always disable them. If the computer runs just fine normally, then leave them alone. But if the computer is always slow (even before this problem started) then I would suggest checking these boxes along with the Blubster box.

      O4 – HKLM\..\Run: [SSBkgdUpdate] “C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe” -Embedding -boot

      O4 – HKLM\..\Run: [OpwareSE4] “C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe” (only keep if using omnipage through microsoft word)

      O4 – HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe

      O4 – HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

      O4 – HKLM\..\Run: [QuickTime Task] “C:\Program Files\QuickTime\qttask.exe” -atboottime

      O4 – Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

  2. #3 by Kate on March 9, 2010 - 8:48 PM

    I posted the below on PCWorld Press F1 forum. Got a couple of bits of advice but not all that helpful to my question. Can I send you the list from my friend’s computer to see if I can disable some of them? I use Chrome or Opera, friend uses INt Expl.
    Friend is using Int Explorer and cannot download emails as add-ons keep appearing and stop/interfere with, the receiving emails process. She is on dial-up. Have used various cleaning programmes and have ticked the “stop pop-ups” box in Internet Connections. I have checked the Manage Add-ons tab but am not sure which to disable or which to leave alone. I’m not sure whether or not to use the ‘Starting Int Exp with all add-ons disabled’ as it is not my computer.
    See attached lists. I have also advised her to use Opera, Mozilla or Google Chrome.
    Most of them have “http://adserve.cpxinteractive….” at the top. Help and advice as always will be much appreciated!

    • #4 by jen3ral on March 10, 2010 - 7:44 PM

      The first test would be to use that Internet Explorer with all add-ons disabled. That won’t hurt anything, it’s there for a situation exactly like this. If it works with all of them disabled then you know it’s one of the add-ons. So try that and if it works then post the list of add-ons or a link to a screen shot of them and I’ll try to help you out.

      That does sound like spyware or a virus could be interfering, but you said you already scanned so hopefully it’s one of the add-ons.

  1. Remove Blubster - Remove Spyware, Malware and Viruses

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: