Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Slow after reformat


  • This topic is locked This topic is locked
7 replies to this topic

#1 vox345

vox345

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:03:51 AM

Posted 27 May 2012 - 02:02 PM

This is right after a full reformat.Before this one, I did a full reformat and the PC got very slow all of a sudden.It had the same stuff installed plus much more before the reformat that cased the slowness.The hardware problems people suggested that could be causing the problem all checked out working so far xcept I haven't changed the CMOS battery.
More details in this thread: http://www.bleepingcomputer.com/forums/topic450714.html/page__gopid__2704374
Please help solve this. THANK YOU.

DDS log:.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by name at 21:47:32 on 2012-05-24
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.298 [GMT -4:00]
.
AV: Norton Security Suite *Enabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton Security Suite *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\TCAUDIAG.exe
C:\Program Files\SFT\GuardedID\gidd.exe
C:\Program Files\Constant Guard Protection Suite\IDVault.exe
svchost.exe
C:\Program Files\Norton Security Suite\Engine\5.2.1.3\ccSvcHst.exe
C:\Program Files\Constant Guard Protection Suite\IDVaultSvc.exe
C:\Program Files\Norton Security Suite\Engine\5.2.1.3\ccSvcHst.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\rundll32.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
uInternet Connection Wizard,ShellNext = hxxp://www.google.com/
BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\norton security suite\engine\5.2.1.3\coIEPlg.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton security suite\engine\5.2.1.3\ips\IPSBHO.DLL
BHO: Constant Guard Protection Suite (COM): {b84cdbe7-1b46-494b-a188-01d4c52deb61} - c:\documents and settings\all users\application data\white sky, inc\id vault\iebho1.1.517.3\NativeBHO.dll
TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\norton security suite\engine\5.2.1.3\coIEPlg.dll
uRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NVMCTRAY.DLL,NvTaskbarInit
mRun: [TCASUTIEXE] TCAUDIAG.exe -on
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [GIDDesktop] c:\program files\sft\guardedid\gidd.exe /s
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\consta~1.lnk - c:\program files\constant guard protection suite\IDVault.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1337383557867
TCP: DhcpNameServer = 75.75.75.75 75.75.76.76
TCP: Interfaces\{92C9035A-AA78-4F8C-B068-2AB47ED42C07} : DhcpNameServer = 75.75.75.75 75.75.76.76
Notify: GIDLogonXP - GIDLogonXP.dll
mASetup: {9191979D-821C-4EA8-B021-2DA1D859A7C5}-3Reg - c:\program files\sft\guardedid\gidi.exe /v
.
============= SERVICES / DRIVERS ===============
.
R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\n360\0502010.003\symds.sys [2012-5-20 340088]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\n360\0502010.003\symefa.sys [2012-5-20 744568]
R1 BHDrvx86;BHDrvx86;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_5.0.0.125\definitions\bashdefs\20120517.001\BHDrvx86.sys [2012-5-23 821880]
R1 GIDv2;GIDv2;c:\windows\system32\drivers\gidv2.sys [2012-5-18 25232]
R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\n360\0502010.003\ironx86.sys [2012-5-20 136312]
R2 IDVaultSvc;CGPS Service;c:\program files\constant guard protection suite\IDVaultSvc.exe [2012-5-18 65648]
R2 N360;Norton Security Suite;c:\program files\norton security suite\engine\5.2.1.3\ccsvchst.exe [2012-5-20 130008]
R2 tcaicchg;tcaicchg;c:\windows\system32\TCAICCHG.SYS [2000-6-6 21233]
R2 TCAITDI;TCAITDI Protocol;c:\windows\system32\drivers\TCAITDI.SYS [2001-9-4 19534]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2012-5-23 106104]
R3 IDSxpx86;IDSxpx86;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_5.0.0.125\definitions\ipsdefs\20120524.001\IDSXpx86.sys [2012-5-24 356792]
R3 NAVENG;NAVENG;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_5.0.0.125\definitions\virusdefs\20120524.019\NAVENG.SYS [2012-5-24 87928]
R3 NAVEX15;NAVEX15;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_5.0.0.125\definitions\virusdefs\20120524.019\NAVEX15.SYS [2012-5-24 1589752]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-5-20 257696]
.
=============== Created Last 30 ================
.
2012-05-21 02:46:47 25992 ----a-w- c:\windows\system32\pgdfgsvc.exe
2012-05-21 02:04:44 116224 -c--a-w- c:\windows\system32\dllcache\xrxwiadr.dll
2012-05-21 02:04:43 23040 -c--a-w- c:\windows\system32\dllcache\xrxwbtmp.dll
2012-05-21 02:04:40 27648 -c--a-w- c:\windows\system32\dllcache\xrxftplt.exe
2012-05-21 02:04:40 18944 -c--a-w- c:\windows\system32\dllcache\xrxscnui.dll
2012-05-21 02:04:39 4608 -c--a-w- c:\windows\system32\dllcache\xrxflnch.exe
2012-05-21 02:04:20 99865 -c--a-w- c:\windows\system32\dllcache\xlog.exe
2012-05-21 02:04:18 16970 -c--a-w- c:\windows\system32\dllcache\xem336n5.sys
2012-05-21 02:04:16 19455 -c--a-w- c:\windows\system32\dllcache\wvchntxx.sys
2012-05-21 02:04:11 19200 -c--a-w- c:\windows\system32\dllcache\wstcodec.sys
2012-05-21 02:04:09 12063 -c--a-w- c:\windows\system32\dllcache\wsiintxx.sys
2012-05-21 02:04:06 8192 -c--a-w- c:\windows\system32\dllcache\wshirda.dll
2012-05-21 02:02:58 604253 -c--a-w- c:\windows\system32\dllcache\vmodem.sys
2012-05-21 02:01:59 31744 -c--a-w- c:\windows\system32\dllcache\tp4.dll
2012-05-21 02:00:59 9600 -c--a-w- c:\windows\system32\dllcache\sonymc.sys
2012-05-21 01:59:59 98080 -c--a-w- c:\windows\system32\dllcache\sgiulnt5.sys
2012-05-21 01:58:57 19584 -c--a-w- c:\windows\system32\dllcache\rasirda.sys
2012-05-21 01:57:59 5504 -c--a-w- c:\windows\system32\dllcache\perc2hib.sys
2012-05-21 01:56:59 15872 -c--a-w- c:\windows\system32\dllcache\ne2000.sys
2012-05-21 01:55:44 15232 -c--a-w- c:\windows\system32\dllcache\mpe.sys
2012-05-21 01:54:59 26442 -c--a-w- c:\windows\system32\dllcache\lanepic5.sys
2012-05-21 01:53:56 45632 -c--a-w- c:\windows\system32\dllcache\ip5515.sys
2012-05-21 01:52:41 488383 -c--a-w- c:\windows\system32\dllcache\hsf_v124.sys
2012-05-21 01:51:59 320384 -c--a-w- c:\windows\system32\dllcache\g200m.sys
2012-05-21 01:50:59 61952 -c--a-w- c:\windows\system32\dllcache\eqnloop.exe
2012-05-21 01:49:59 21606 -c--a-w- c:\windows\system32\dllcache\digiisdn.sys
2012-05-21 01:48:55 10240 -c--a-w- c:\windows\system32\dllcache\compbatt.sys
2012-05-21 01:46:57 13824 -c--a-w- c:\windows\system32\dllcache\bulltlp3.sys
2012-05-21 01:45:59 17152 -c--a-w- c:\windows\system32\dllcache\atitvsnd.sys
2012-05-21 01:44:59 96256 -c--a-w- c:\windows\system32\dllcache\ac97intc.sys
2012-05-20 23:55:01 744568 ----a-w- c:\windows\system32\drivers\n360\0502010.003\symefa.sys
2012-05-20 23:55:01 50168 ----a-w- c:\windows\system32\drivers\n360\0502010.003\srtspx.sys
2012-05-20 23:55:01 369784 ----a-w- c:\windows\system32\drivers\n360\0502010.003\symtdi.sys
2012-05-20 23:55:01 340088 ----a-w- c:\windows\system32\drivers\n360\0502010.003\symds.sys
2012-05-20 23:55:01 331384 ----a-w- c:\windows\system32\drivers\n360\0502010.003\symtdiv.sys
2012-05-20 23:55:01 299640 ----a-w- c:\windows\system32\drivers\n360\0502010.003\symnets.sys
2012-05-20 23:55:00 516216 ----a-w- c:\windows\system32\drivers\n360\0502010.003\srtsp.sys
2012-05-20 23:55:00 136312 ----a-r- c:\windows\system32\drivers\n360\0502010.003\ironx86.sys
2012-05-20 23:54:38 -------- d-----w- c:\windows\system32\drivers\n360\0502010.003
2012-05-20 23:27:09 -------- dc-h--w- c:\windows\ie8
2012-05-20 23:06:45 70304 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-05-20 23:06:45 419488 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-05-20 06:02:15 -------- d-----w- C:\38a8e71ae0c771ee12
2012-05-20 05:32:04 552960 ----a-w- c:\windows\system32\nviewimg.dll
2012-05-20 05:32:04 290816 ----a-w- c:\windows\system32\keystone.exe
2012-05-20 05:32:04 225280 ----a-w- c:\windows\system32\nvnt4cpl.dll
2012-05-20 05:32:03 741376 ----a-w- c:\windows\system32\nwiz.exe
2012-05-20 05:32:03 73728 ----a-w- c:\windows\system32\nvtuicpl.cpl
2012-05-20 05:32:03 430152 ----a-w- c:\windows\system32\nvshell.dll
2012-05-20 05:32:02 393216 ----a-w- c:\windows\system32\nvappbar.exe
2012-05-20 05:32:02 35328 ----a-w- c:\windows\system32\nvwddi.dll
2012-05-20 05:32:02 1470537 ----a-w- c:\windows\system32\nvwdmcpl.dll
2012-05-20 05:32:02 1126400 ----a-w- c:\windows\system32\nview.dll
2012-05-20 05:32:01 49152 ----a-w- c:\windows\system32\nvmctray.dll
2012-05-20 05:31:59 5058560 ----a-w- c:\windows\system32\nvcpl.dll
2012-05-20 05:31:58 3551232 ----a-w- c:\windows\system32\nvoglnt.dll
2012-05-20 05:31:39 4274816 -c--a-w- c:\windows\system32\dllcache\nv4_disp.dll
2012-05-20 05:31:39 4274816 ----a-w- c:\windows\system32\nv4_disp.dll
2012-05-20 05:31:36 27136 ----a-w- c:\windows\system32\nvcod.dll
2012-05-20 05:31:35 81920 ----a-w- c:\windows\system32\nvsvc32.exe
2012-05-20 05:31:31 131072 ----a-w- c:\windows\system32\nvinstnt.dll
2012-05-20 05:31:30 1897408 -c--a-w- c:\windows\system32\dllcache\nv4_mini.sys
2012-05-20 05:31:30 1897408 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2012-05-19 03:06:33 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2012-05-19 03:06:28 60872 ----a-w- c:\windows\system32\S32EVNT1.DLL
2012-05-19 03:06:28 126584 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2012-05-19 03:06:27 -------- d-----w- c:\program files\Symantec
2012-05-19 03:06:27 -------- d-----w- c:\program files\common files\Symantec Shared
2012-05-19 03:05:57 106928 ----a-w- c:\windows\system32\GEARAspi.dll
2012-05-19 03:05:31 -------- d-----w- c:\windows\system32\drivers\N360
2012-05-19 03:05:25 -------- d-----w- c:\program files\Norton Security Suite
2012-05-19 02:39:11 -------- d-----w- c:\program files\NortonInstaller
2012-05-19 02:39:11 -------- d-----w- c:\documents and settings\all users\application data\NortonInstaller
2012-05-19 02:32:16 -------- d-----w- c:\documents and settings\all users\application data\Norton
2012-05-19 02:09:30 -------- d-----w- c:\documents and settings\all users\application data\IsolatedStorage
2012-05-19 02:09:21 -------- d-----w- c:\documents and settings\name\local settings\application data\ID Vault
2012-05-19 02:08:30 -------- d-----w- c:\documents and settings\name\application data\ID Vault
2012-05-19 02:08:17 25232 ------w- c:\windows\system32\drivers\gidv2.sys
2012-05-19 02:08:10 -------- d-----w- c:\documents and settings\all users\GID
2012-05-19 02:08:08 -------- d-----w- c:\program files\SFT
2012-05-19 02:07:49 -------- d-----w- c:\program files\Constant Guard Protection Suite
2012-05-19 01:59:51 -------- d-----w- c:\windows\system32\XPSViewer
2012-05-19 01:59:03 89088 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
2012-05-19 01:58:51 14048 ------w- c:\windows\system32\spmsg2.dll
2012-05-19 01:53:00 -------- d-----w- c:\documents and settings\all users\application data\White Sky, Inc
2012-05-19 01:51:52 -------- d-sh--w- c:\documents and settings\name\IECompatCache
2012-05-19 01:50:41 -------- d-sh--w- c:\documents and settings\name\PrivacIE
2012-05-19 01:47:04 -------- d-sh--w- c:\documents and settings\name\IETldCache
2012-05-19 01:29:42 6144 -c----w- c:\windows\system32\dllcache\iecompat.dll
2012-05-19 01:29:16 -------- d-----w- c:\windows\ie8updates
2012-05-19 01:29:07 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2012-05-19 01:29:07 602112 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2012-05-19 01:29:07 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2012-05-19 01:29:07 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2012-05-19 01:29:07 2000384 -c----w- c:\windows\system32\dllcache\iertutil.dll
2012-05-19 01:29:07 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2012-05-19 01:29:07 11082752 -c----w- c:\windows\system32\dllcache\ieframe.dll
2012-05-19 01:02:16 3072 -c----w- c:\windows\system32\dllcache\iacenc.dll
2012-05-19 01:02:16 3072 ------w- c:\windows\system32\iacenc.dll
2012-05-19 00:30:04 -------- d-----w- c:\windows\system32\scripting
2012-05-19 00:30:04 -------- d-----w- c:\windows\l2schemas
2012-05-19 00:30:03 -------- d-----w- c:\windows\system32\en
2012-05-19 00:30:03 -------- d-----w- c:\windows\system32\bits
2012-05-19 00:27:04 -------- d-----w- c:\windows\network diagnostic
2012-05-19 00:16:12 73216 -c--a-w- c:\windows\system32\dllcache\atintuxx.sys
2012-05-18 23:52:06 -------- d-----w- c:\windows\ServicePackFiles
2012-05-18 23:47:33 98304 ----a-w- c:\windows\system32\nvudisp.exe
2012-05-18 23:47:32 -------- d-----w- c:\windows\nview
2012-05-18 23:35:53 2148352 -c--a-w- c:\windows\system32\dllcache\ntkrnlmp.exe
2012-05-18 23:35:51 2026496 -c--a-w- c:\windows\system32\dllcache\ntkrpamp.exe
2012-05-18 23:35:47 5120 ----a-w- c:\windows\system32\xpsp4res.dll
2012-05-18 23:35:46 689152 -c--a-w- c:\windows\system32\dllcache\xpsp3res.dll
2012-05-18 23:34:26 272128 -c--a-w- c:\windows\system32\dllcache\bthport.sys
2012-05-18 23:34:26 272128 ------w- c:\windows\system32\drivers\bthport.sys
2012-05-18 23:28:23 -------- d-----w- c:\windows\system32\PreInstall
2012-05-18 23:28:22 26144 ----a-w- c:\windows\system32\spupdsvc.exe
2012-05-18 23:28:21 -------- d--h--w- c:\windows\$hf_mig$
2012-05-18 23:26:17 21728 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-05-18 23:26:17 17632 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-05-18 23:26:17 15072 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-05-18 23:26:17 15064 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-05-18 23:26:17 -------- d-----w- c:\windows\system32\SoftwareDistribution
2012-05-18 23:19:24 -------- d-sh--w- c:\documents and settings\name\UserData
2012-05-18 23:17:27 -------- d-----w- c:\windows\system32\ReinstallBackups
2012-05-18 23:17:10 -------- d-----w- c:\windows\OPTIONS
2012-05-18 23:17:05 41852 ----a-r- c:\windows\system32\UpdDrv2K.exe
2012-05-18 23:17:04 573440 ----a-r- c:\windows\system32\UN3CDiag.exe
.
==================== Find3M ====================
.
2012-04-11 13:12:06 1862272 ----a-w- c:\windows\system32\win32k.sys
2012-04-11 13:10:58 2192640 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-04-11 12:35:52 2069120 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-03-01 11:01:32 916992 ----a-w- c:\windows\system32\wininet.dll
2012-03-01 11:01:32 43520 ------w- c:\windows\system32\licmgr10.dll
2012-03-01 11:01:32 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-02-29 14:10:16 177664 ----a-w- c:\windows\system32\wintrust.dll
2012-02-29 14:10:16 148480 ----a-w- c:\windows\system32\imagehlp.dll
2012-02-29 12:17:40 385024 ------w- c:\windows\system32\html.iec
.
=================== ROOTKIT ====================
.
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 5.1.2600
.
CreateFile("\\.\PHYSICALDRIVE0"): The process cannot access the file because it is being used by another process.
device: opened successfully
user: error reading MBR
.
Disk trace:
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys atapi.sys hal.dll intelide.sys PCIIDEX.SYS
1 nt!IofCallDriver[0x804E37D5] -> \Device\Harddisk0\DR0[0x86F9CAB8]
3 CLASSPNP[0xF752FFD7] -> nt!IofCallDriver[0x804E37D5] -> \Device\Ide\IdeDeviceP0T0L0-3[0x86F96D98]
kernel: MBR read successfully
_asm { XOR AX, AX; MOV SS, AX; MOV SP, 0x7c00; STI ; PUSH AX; POP ES; PUSH AX; POP DS; CLD ; MOV SI, 0x7c1b; MOV DI, 0x61b; PUSH AX; PUSH DI; MOV CX, 0x1e5; REP MOVSB ; RETF ; MOV BP, 0x7be; MOV CL, 0x4; CMP [BP+0x0], CH; JL 0x2e; JNZ 0x3a; }
user != kernel MBR !!!
.
============= FINISH: 21:48:33.25 ===============

Attached Files



BC AdBot (Login to Remove)

 


#2 KarstenHansen

KarstenHansen

    The Dane


  • Members
  • 1,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:51 AM

Posted 30 May 2012 - 09:13 AM

Hi vox345,
I will be handling your log to help you get cleaned up. Please give me some time to look it over and I will get back to you as soon as possible.

#3 KarstenHansen

KarstenHansen

    The Dane


  • Members
  • 1,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:51 AM

Posted 30 May 2012 - 11:08 AM

Hi vox345 :)

:welcome: to BleepingComputer.

My name is Karsten and I'll help you with the cleanup of malware from your computer.

Please be aware of the following:
  • Please complete all steps in the specified order.
  • Even if tools don't find malware, I want you to post the logfiles anyway.
  • Please copy and paste the logfiles directly into your posts. Please do not attach them unless you are instructed to do so.
  • Read the instructions carefully. If you have problems, stop what you were doing and describe the problems you encountered as precisely as you can.
  • Don't install or uninstall software during the cleanup unless you are told to do so.
  • If you can't answer for the next few days, please let me know. If you haven't answered within 3 days, I am assuming that you don't need help anymore and your topic will be closed.
  • I can not guarantee that we will find and be able to remove all malware. Formatting is usually faster and always the safest way.
  • If you decide to clean your PC, work with us until a team member tells you that you are clean.
  • As my first language is not English, please do not use slang or idioms. It could be hard for me to understand.

:step1: As you are having performance issues and I see no malware, in most cases such issues are caused by having too much security running at the same time on the PC, so let's start by lessen the load for your PC. Please, do the following:

Click "start" on the taskbar and then click on the "Control Panel" icon.
Please doubleclick the "Add or Remove Programs" icon
A list of programs installed will be "populated" this may take a bit of time.
If they exist, uninstall the following by clicking on the following entries and selecting "remove":

Norton Security Suite

Additional instructions can be found here if needed.

After this I would like you to reboot the PC and start using it as you normally would and then report to me how you think it is running now.

#4 vox345

vox345
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:03:51 AM

Posted 30 May 2012 - 05:37 PM

I donít need to do uninstall Norton, because I already saw how it got slow all of a sudden when I reformatted recently and started installing things that brought on the slowness. It got slow after I installed all the windows updates and updated from SP2 to SP3 etc. Then I installed Nortons and it was still slow.
The whole chain of events and details are in the thread I linked in my 1st post.
Whatís odd is that I had everything I do now plus more installed on the computer before it got really slow. It was always a slow computer, but I reformatted and it got slow right afterwards. All hardware related things are posted in the thread I linked, and they all are fine except I havenít tried a new CMOS battery. Maybe reformatting puts a strain on the battery? I reformatted this PC like 10 times. Should I try a new one like someone suggested?
I have windows updates set to auto, so itís not like there was some updates released that choked my CPU and I never installed them.
Thank you so much for your help.

#5 KarstenHansen

KarstenHansen

    The Dane


  • Members
  • 1,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:51 AM

Posted 31 May 2012 - 08:18 AM

Hi vox345 :)
There is a very sound reason as to why I say that a person should never use more than one AV Suite at any one time. I need you to follow my directions or it will make it truly hard to help you with this. I want you to read the following:

I do not recommend that you have more than one anti virus product installed and running on your computer at a time. The reason for this is that if both products have their automatic (Real-Time) protection switched on, then those products which do not encrypt the virus strings within them can cause other anti virus products to cause "false alarms". It can also lead to a clash as both products fight for access to files which are opened again this is the resident/automatic protection. In general terms, the two programs may conflict and cause:
  • False Alarms: When the anti virus software tells you that your PC has a virus when it actually doesn't.
  • System Performance Problems: Your system may lock up due to both products attempting to access the same file at the same time.

These are the problems you came to us with, System Performance Problems and these are the reasons as to why you need to uninstall One of your Security Suite's, I will even let you decide which one you want to let go, please report back to me what actions you have taken, so our work to make your PC run normal again can continue.

With high regards,
Karsten

#6 vox345

vox345
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:03:51 AM

Posted 02 June 2012 - 03:14 PM

Thanks.
I uninstalled Constant Guard, and everythingís faster.
This is strange though because like said, I had CG & Norton plus more programs than I do now installed before the reformat that made it slow.

Anyone wanna take a shot at how it got slow so I can get some closure?
Only thing I can think of now is that install files were changed since I reformatted and caused it to choke vs updating and updating an older install files version?

Sorta OT: I reinstalled CG for now and will deal with slowness until I get a computer fast enough to handle it plus Norton. This thread http://forums.comcast.com/t5/Security-and-Anti-Virus/Constant-Guard-VS-Norton/td-p/938333 tells what it can do that Norton canít, but then someone says the Comcast support personís basically wrong.

#7 KarstenHansen

KarstenHansen

    The Dane


  • Members
  • 1,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:51 AM

Posted 03 June 2012 - 08:37 AM

Hi vox345
I gave you advice, you tried it and it worked, nevertheless you choose to reinstall the second security suite. Your PC is clean from malware, and we found the cause of the problem. It is up to you what you do with this solution, however if you insist in keeping two security suites installed at a time, then indeed you will have to accept the slowness and related issues, there is nothing we can do about that.

If you decide to keep both security programs installed please let me know and I will request this topic to be closed.

With high regards,
Karsten

#8 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,929 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:11:51 AM

Posted 03 June 2012 - 09:50 AM

As you do not seem to be interested in our advice regarding installed security suites although uninstalling one obviously fixes your problem and keeps your computer a lot safer on top of that, it seems pointless to continue this topic.

Therefore I am closing this and will move your other topic to the internal hardware forum.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users