Starting With A Clean Machine
From CastleCopsWiki
| Caution | The article below is currently in beta and has not been reviewed for factual errors. |
Contents |
[edit] General
It's common that, when people purchase a new computer from companies like Dell, IBM, or HP, they are under the misconception that because the system is new, there are no applications on the system which might be considered Adware, Spyware or other forms of Malware. Unfortunately that is not the case. These large companies included bundled software on your system quite often even if you have opted to not have it included because they are hoping that you will either continue to use the free applications and/or purchase the paid applications when the trial runs out. These applications are unnecessary to the running of your system, and are only present because the hardware company you bought the system from gets a kickback if you continue to use the application.
We would like to provide you with the necessary information to be able to make informed decisions about what applications you would like to continue to run on your computer. Some free alternatives to the paid trial applications which come pre-installed, and also ways to better secure your new system and prevent infection in the future.
[edit] Used Systems
If attempting to remove malware from a system which is not brand new out of the box please refer to the Malware Removal and Prevention series of articles.
[edit] New Branded Machines
[edit] Dell
[edit] Pre-bundled Software
Including all the drivers and utilities for all the hardware that can ship with that model computer
- Dell Media Experience
- Dell My Way Search Assistant
- Wild Tangent
- Google Toolbar
- Google Desktop Search
- PowerDVD (if you have a DVD player installed)
- Adobe Acrobat Reader
- Earthlink Total Access software
- AOL 9.0
- JASC Paint Shop Pro Trial
- JASC Paintshop Photo Album Trial
- Musicmatch JukeBox (branded by Dell)
- Network Associates McAfee Security Center
- Symantec Norton Internet Security
- Symantec PC Restore Recovery System
- Trend Micro
- United Online Netzero
- Viewpoint Manager
- WordPerfect Lite
[edit] Protecting Your Investment
Dell does not ship the software CDs with your new system. You need to contact them directly and request your software be shipped. Please ensure when you get your system you retain your receipt so you can confirm your O/S in the event they ship you the wrong version.
Here's one user's experience:
| I recently purchased a Brand New Dell 8400. When I purchased it, I specified that I only wanted Windows XP Pro installed, and nothing else.
When it showed up, Windows was the least of what was installed. There was virus scanners, Dell Proprietary software, trial versions of software, and demo's of others. Removing all of the trial and demo versions was straight forward and easy. In fact, everything was straight forward and easy to remove UNTIL I ran into the Dell software. I fought with this stuff for months. But it had embedded itself into windows ad was impossible to remove. When I would remove parts, the computer would slow down. My final solution was this:
I chose to install Windows only, and when I did, there was nothing to be seen of anything from Dell. I know this is a pain, but it was the easiest way that I found to get all the foistware off the Dell machine.
|
[edit] Hewlet Packard
- WordPerfect 10
- WinDVD
- Easy CD & DVD Creator 6 Basic Edition
- McAfee VirusScan trial
- Britannica Enciclopedia Trial Version
- MusicMatch 8
[edit] IBM
[edit] Sony
[edit] Pre-bundled Software
- America Online - Trial
- Click to DVD (DVD R/RW)
- DVgate Plus
- Giga Pocket (for TV Tuner)
- Image Converter (for Playstation Portable (PSP))
- Microsoft Office 2003 (Student/Teacher 60 day trial)
- Microsoft Works
- Photoshop Album Starter
- Quicken New User Edition
- Quicktime Player
- Roxio Digital Media SE
- SonicStage
- SpySubtract
- Symantec Norton Internet Security
- Trend Micro
- Vaio Media
- Vaio Recovery Wizard
- Vaio Security Center
- Vaio Support Center
- Vaio Update
- WinDVD
- Discover Games - Game
- Jeopardy (60 Min. Trial) - Game
- Wheel of Fortune (60 Min. Trial) - Game
[edit] Toshiba
[edit] Pre-Bundled Software -- Toshiba Satellite A105-S1014 (March, 2006)
- Adobe Acrobat Reader
- America Online
- AOL Coach Version 2.0(Build:20041026.5 en)
- AOL Connectivity Services
- AOL Spyware Protection
- AOL You've Got Pictures Screensaver
- ArcSoft Software Suite -- trial software
- Atheros Client Utility (for built-in 802.11b/g wireless)
- Atheros Wireless LAN MiniPCI card Driver
- ATI Control Panel (for built in graphics card)
- ATI Software Uninstall Utility
- ATI Display Driver
- CD/DVD Drive Acoustic Silencer
- DVD-RAM Driver
- Google Toolbar for Internet Explorer
- High Definition Audio Driver Package - KB888111
- InterVideo WinDVD for TOSHIBA
- J2SE Runtime Environment 5.0 Update 4 (needs to be updated manually to latest version)
- Macromedia Flash Player 8
- McAfee SecurityCenter
- McAfee VirusScan
- Metamail (Toshiba Registration Utility)
- Microsoft .NET Framework 1.1
- Microsoft .NET Framework 1.1 Hotfix (KB886903)
- Microsoft Office OneNote 2003
- Microsoft Office Standard Edition 2003
- Microsoft Works
- MyConnect Special Offer
- Office 2003 Trial Assistant
- Pure Networks Port Magic
- Quicken 2005
- QuickTime
- RealPlayer Basic
- REALTEK Gigabit and Fast Ethernet NIC Driver
- Realtek High Definition Audio Driver
- sat_screensaver_30mb (sceensaver with video about the laptop)
- Sonic DLA
- Sonic RecordNow!
- Synaptics Pointing Device Drive
- Bundled TOSHIBA PC Management Programs:
- TOSHIBA Assist
- TOSHIBA ConfigFree
- TOSHIBA Controls
- TOSHIBA Hotkey Utility
- TOSHIBA PC Diagnostic Tool
- TOSHIBA Power Saver
- TOSHIBA Software Modem
- TOSHIBA Software Upgrades
- TOSHIBA Speech System Applications
- TOSHIBA Speech System SR Engine(U.S.) Version1.0
- TOSHIBA Speech System TTS Engine(U.S.) Version1.0
- TOSHIBA TouchPad ON/Off Utility
- TOSHIBA Utilities
- TOSHIBA Virtual Sound
- TOSHIBA Zooming Utility
- Touch and Launch
- Viewpoint Media Player
- Windows Media Format Runtime
- Windows Media Player 10
- Yahoo! Music Engine
NOTE: The above list does not include the set of Windows patches and Hotfixes included in the default install.
[edit] Pre-bundled software -- European -- TOSHIBA Satellite M-70 (march 2006)
- Adobe Acrobat Reader 7.0.3
- InterVideo WinDVD for TOSHIBA
- InterVideo WinDVD Creator 2
- J2SE Runtime Environment 5.0 Update 3 (needs to be updated manually to latest version)
- Macromedia Flash Player 8
- Microsoft .NET Framework 1.1
- Microsoft .NET Framework 1.1 Hotfix (KB886903)
- Microsoft Office OneNote 2003
- Microsoft Works
- MSN Desktop Search
- REALTEK Gigabit and Fast Ethernet NIC Driver
- Sonic DLA
- Sonic RecordNow!
- Symantec Norton Internet Security 2005 (installed)
- TOSHIBA Assist
- TOSHIBA ConfigFree
- TOSHIBA Controls
- TOSHIBA CD/DVD player noise reduction utility
- TOSHIBA DVD-RAM Tool
- TOSHIBA Hotkey Utility
- TOSHIBA Modem On-Hold V.92
- TOSHIBA PC Diagnostic Tool
- TOSHIBA Power Saver
- TOSHIBA SUMMIT
- TOSHIBA SD-Card Utility
- TOSHIBA Touch-and-launch
- TOSHIBA TouchPad ON/Off Utility
- TOSHIBA Utilities
- TOSHIBA Virtual Sound
- TOSHIBA Zooming Utility
- Various ISP Offers (different for Countries)
________________________________
A lot of theses software are running in the background, although it's not necessary at all for the computer to work properly.
The result is that you've 50 + processes running on your computer (with Windows's own processes) right when you turn your computer ON for the first time.
Theses TOSHIBA processes are :
- smoothview.exe (TOSHIBA zooming utility)
- TPSMain.exe (TOSHIBA Power Saver)
- TCtrlIOHook.exe
- ZoomingHook.exe (TOSHIBA zooming utility)
- TPTray.exe (TOSHIBA Touchpad configuration utility)
- CEEkey.exe (TOSHIBA HotKey utility)
- ltmoh.exe (LUCENT modem utility)
- igfxpers.exe (INTEL Common User Interface)
- hkcmd.exe (INTEL Video configuration utility)
- igfxtray.exe (Intel Graphics configuration)
- TPSBottM.exe (TOSHIBA power saver)
- TOSCDSPD.exe (TOSHIBA CD/DVD driver)
- tfswctrl.exe (TOSHIBA CD burning from explorer)
- NDSTray.exe (TOSHIBA ConfigFree)
- TVSTray.exe (TOSHIBA virtual sound)
- PadExe.exe (TOSHIBA Touchpad configuration)
- TfNcky.exe (TOSHIBA quick-access touch)
- CFSvcs.exe (TOSHIBA Configfree service)
* A fairly large amount of theses 18 processes can be safely disabled from startup, to prevent them from running in the background while it's unnecessary:
Most of theses processes are configuration tools, that means that you don't lose any functionalities as disabling it from startup : you just have to launch them manually when you need to adjust their settings; what can be done with their shortcut in Start > All programs, or in Control Panel.
- Some can be disabled with MSConfig (Start > Run > msconfig > enter), if you uncheck the lines for theses filenames :
- CEEkey
- tfswctrl (if you burn your CDs with third-party burning software)
- HWSetup (TOSHIBA Hardware setup - configuration utility)
- PadExe (it doesn't alter the use of the Touchpad, you just loose some Touchpad-hotkeys features)
- SmoothView
- SVPWUTIL
- TctrlIOHook
- TPTray (it doesn't alter the use of the Touchpad, it's just used for it's settings : you can access it from Control Panel when needed)
- TVSTray
- ZoomingHook
- Some can be disabled with a right-click on their taskbar icon :
- TOSCDSPD (noise reduction utility : open it's menu, set it on "unload", and uncheck the "show in taskbar" box)
- igfxcfg/igfxTray (INTEL Graphics configuration : right-click on it's taskbar icon, and set it on "unload", from it's menu)
- The last one can be disabled from the Services Management Console (Start > Control Panel > Administration Tools > Services) :
- ConfigFree (you can find the ConfigFree service in the list; right-click on it Properties : you can set the service on "manual", in the "startup type" line.
