System Crawling !!!!

[dreams]

Hi all..

Me writin this wit a loooong face..First of all i am havin 2 issues..

1. I got BSNL UL 900 plan and after this event i changed my Antivirus to Kaspersky AV 6.0 and also installed AVG Anti-Spyware 7.5..And here starts my prob..After this my system crawls every minute..not even My Computer opens fast..and each and every application is getting slower down..total crap..

2. And due to this i used to hibernate my system always..and here comes another problem..in the night b4 goin to off wil hibernate and after comin frm off wil start computer..and if i switch on the computer my power light goes orange(Default Yellow) and all the settings light wil start blinkin in unison..this wil happen for 2-5 minutes and then my monitor powers on..and goes to the problem 1.

I need this to be fixed ASAP. Before i was usin only NAV 03 without any issues..shal i revert bac to this settin ??

Cum on techies help me out..

TIA

 

[s18000rpm]

post a "HijackThis" log @ this thread-> Hijack This

do a little experiment(s)...
=>disable the Kaspersky AV from "msconfig" & restart the PC.
=>see if the PC is working fine or not.

=>if YES, then some corrupted updates might have caused this problem, open Kaspersky & in the left panel, select "Services"->"Update"-> & then select "RollBack". (this'll rollback the KAV's update files to previous updates).

=>If No, disable AVG AntiSpyware as above & test.


by any chance, did you download the Cracked version of KAV, if you did, then thats the problem, its really not KAV but a very complicated Trojan.

 

[dreams]

Here it is..

Logfile of HijackThis v1.99.1
Scan saved at 7:07:42 PM, on 12/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
D:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
D:\Program Files\CursorXP\CursorXP.exe
D:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
D:\Program Files\LClock\LClock.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
D:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Opera\Opera.exe
D:\Setups\Hijack This\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = *go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = *go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = *go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = *go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchURL = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [kav] "D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CursorXP] D:\Program Files\CursorXP\CursorXP.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "D:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [LClock Application] D:\Program Files\LClock\LClock.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: Download All by FlashGet - D:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - D:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_10\bin\npjpi142_10.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_10\bin\npjpi142_10.dll
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - D:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} - *yax-download.yazzle.net/YazzleActiveX.cab?refid=1123
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) -
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in 1.4.2_10) -
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://D:\Program Files\AutoCAD 2002\InstBanr.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://D:\Program Files\AutoCAD 2002\InstFred.ocx
O16 - DPF: {CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA} (Java Plug-in 1.4.2_10) -
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://D:\Program Files\AutoCAD 2002\AcPreview.ocx
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\PROGRA~1\MICROS~1\Office12\GR99D3~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\System32\klogon.dll
O20 - Winlogon Notify: WBSrv - D:\WINDOW~1\wbsrv.dll (file missing)
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
O23 - Service: GhostStartService - Symantec Corporation - D:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - D:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe

Hope this might help..

 

[weary_wanderer]

Hi all..

Me writin this wit a loooong face..First of all i am havin 2 issues..

1. I got BSNL UL 900 plan and after this event i changed my Antivirus to Kaspersky AV 6.0 and also installed AVG Anti-Spyware 7.5..And here starts my prob..After this my system crawls every minute..not even My Computer opens fast..and each and every application is getting slower down..total crap..

2. And due to this i used to hibernate my system always..and here comes another problem..in the night b4 goin to off wil hibernate and after comin frm off wil start computer..and if i switch on the computer my power light goes orange(Default Yellow) and all the settings light wil start blinkin in unison..this wil happen for 2-5 minutes and then my monitor powers on..and goes to the problem 1.

I need this to be fixed ASAP. Before i was usin only NAV 03 without any issues..shal i revert bac to this settin ??

Cum on techies help me out..

TIA

First off, why on earth do you have two Antivirus softwares installed? That in itself is a reall bad idea!! I suggest you install any one... whatever gives you the most confidence...

Also, people underestimate the power of msconfig.exe...

Run msconfig, disable all startup items and all services AFTER checking Hide All Microsoft Services and reboot your PC... see if this resolves your issue... if it does enable the 3rd party stuff one-by-one... and make the AV software the last to enable

This simple test should show you what you need to get rid of!!

 

[s18000rpm]

^^his not using two AntiVirus, but one AntiVirus (KAV) & a AntiSpyware (AVG 7.5 AntiSpyware)

@dreams, what your PC config??? if it has 256MB RAM then disable some strat-ups permanently.

some members here @digit forum had problem with Kaspersky slowing down the PC, so i suggest you to experiment with the disabling KAV Start-Up.

start-up entry for KAV-> avp

 

[dreams]

^^his not using two AntiVirus, but one AntiVirus (KAV) & a AntiSpyware (AVG 7.5 AntiSpyware)

@dreams, what your PC config??? if it has 256MB RAM then disable some strat-ups permanently.

some members here @digit forum had problem with Kaspersky slowing down the PC, so i suggest you to experiment with the disabling KAV Start-Up.

start-up entry for KAV-> avp

Yes i jus triggered the task manager and checked which is eatin all my resources and its AVP..so now uninstallin it and gonna install NAV 2007.

Is this a gud idea ??

 

[manas]

NAV 2007 is not good either...

Try NOD32. Its the best

 

[Arsenal_Gunners]

nav is resource hungary as well.i use avast free-light-secure.nav nearly killed my machine when i had it

 

[dreams]

but i didnt hv any prob wit nav 2003 for years..so only thought of movin..but it proved fatal so willin 2 revert bac.

 

[QwertyManiac]

Forget Norton till next year.

Try Avast/NOD 32/AVG

 

[Arsenal_Gunners]

hey man what are your system specs.

 

[s18000rpm]

give us details, on how much KAV is eating the resources (MB),

try to disable the start up of KAV & confirm whether KAV is the problem.

btw, Norton is bad idea.

why not try the AVG 7.5 AV (the AntiSpyware is integrated, but its paid version).,

=>Avast. (free)

 

[anandk]

pls run ur kav and avg anti-spy in SAFE MODE. ur hlt logfile indicates ayazzle.net rogue anti-spyware activex on ur pc. also clear up ur pc junk with ccleaner.

remove avg anti-spy from ur startups. i find kav much lighter on the resources than norton, but u decide and choose what suits u best.

 

[dreams]

System Specs -

P4 2.4Ghz..256 MB RAM, Intel MOB, XP Pro SP2.

 

[Choto Cheeta]

System Specs -

P4 2.4Ghz..256 MB RAM, Intel MOB, XP Pro SP2.

well 256MB may not be enough...

well to me u need 512MB as todays appliction needs RAM... and with WinXP SP2 512MB is what u need to run smothly...

conside getting more RAM for the system...

 

[arun77574]

Dude. get it from me. antispywares do slow down your computer to a greater extend, it doesn't matter even if it is the best of the best. this is because of the heavily loaded resourseful search engine they have. besides this your AV also takes its share on the RAM however, kaspersky bags only a little of the memory space in RAM. if i'm right kaspersky takes only 30 MB of RAM approx.

(i belive kaspersky internet security suite has both AV & a antispyware too.) anyway no problem in having them both together. all you have to do is make sure that the anti spyware does not load when the OS is loaded. for that you have to remove the antispyware from startup components in MSCONFIG.

 

[n2casey]

I m using KAV for last 1 month on a P-4 1.7 GHz, 256 MB RAM, Win XP SP2 & it is still very fast (No loss of resources). KAV is much lighter than NAV.
NOD32 on same system with Win 98 SE & it's also very fast. NOD32 is also very light.
I have tested some AV on various systems for one month (last 40 days) & the results are:

(Every * is used for resource hunger).

NAV 2003 - ****
NAV 2005 - *******
NAV 2006 - ******
NAV 2007 - *******
KAV 6.0 - **
NOD32 - ** [Win XP] & * [Win 98]
McFee - ** (unable to detect some viruses)
AVG - **

Avast - Not tested

I don't know it will make any sense or not but just sharing what results I got.

 

[dreams]

I guys..thnx 4 all the responses..nw i hv uninstalled Kaspersky and installed AVG AV 7.5..and now it seems to be fine..all programs seem to load quickly..

And jus takin Spyware frm startup is enough..and after windows boots we hv to start it ??