Computer Running Slow - Not Browser Related

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Journeyer, Jan 20, 2013.

  1. Journeyer

    Journeyer Private E-2

    Windows 7 computer has been "sluggish" for the last few days. The problem is similar with Microsoft IE and with Chrome ... so I do not think it is directly browser.

    I am seeing slower than usual Internet access (direct connect to a cable modem) and I see delayed keyboard response. I have used File Manager to check consistent CPU loading but nothing is obvious.

    I routinely run Microsoft Security Essentials with Webroot Secure Anywhere.
    Webroot Secure Anywhere detected and quarantined ...
    c:\users\<name>\appdata\local\microsoft\windows\temporary internet files\low\content.ie5\g1z72o8s\888poker_net[1].exe

    I ran through the Read Me First procedure and saved the logs.

    Note: CCleaner removed 6.3MB.

    Note: TDSSKiller did not detect anything and I didn't see any way to save the report available through the Report link in the upper right hand corner of the screen. All other logs are attached.

    Thanks for your assistance.
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You are not having malware problems. You are a victim of what you have installed on your PC. You have multiple antivirus programs installed which the Read & Run ME already told you that you should not do. Uninstall either Microsoft Security Essentials or Webroot SecureAnywhere and then reboot and see how things are working. If still having problems, uninstall Wise Care 365 and see how it is after another reboot.

    You could also use another GB of memory.
     
  3. Journeyer

    Journeyer Private E-2

    Thanks for the fast reply Chaslang. I appreciate your comments about installed programs, the additional memory suggestion, and the confirmation concerning no malware.

    Just one additional comment ... I've well aware of potential problems when running two antivirus programs at the same time; however, I did a little research prior to installing Webroot SecureAnywhere. It's my understanding that the program was specifically designed in a layered approach to stay out of the way and allow MSE to work normally without impacting system performance (unlike other antivirus programs). Webroot would only step in if something made it past MSE.

    I appreciate your experience in this area and value your opinion. Have you found that this Webroot design objective is not really effective?
     
  4. Journeyer

    Journeyer Private E-2

    Chaslang,

    After receiving your initial reply, I contacted Webroot support. Just after posting my reply to you, I received this response from Webroot. I would value your comment and experience concerning their reply to my question about compatibility with MSE.

    === begin ===

    Webroot Support (Jan 21, 2013 3:05)

    RE:Webroot SecureAnywhere Compatibility With Microsoft Security Essentials

    Hello,

    Thank you for contacting Webroot.

    Although security software companies have, traditionally, advised against running multiple antivirus programs on the same computer, this rule does not hold true for Webroot SecureAnywhere. The reason for such recommendations involved the way traditional antivirus programs run. SecureAnywhere is different.

    Most antivirus software is very aggressive. When an antivirus program scans a file, it accesses that file and locks it until the scan is complete, so other programs can’t access it. If multiple real-time antivirus scanners are installed on the same system, the secondary system will attempt to scan the file the moment it is accessed by the first scan. Now, both programs are competing to scan the file. Depending on the aggressiveness of each program, one may detect the conflict as an “attack” and attempt to block the offending process. Now, the two antivirus programs are not only competing for the same file, but are actively working against one another. This causes a strong struggle for resources on your computer that can drastically impact system performance, and can leave your system more vulnerable to malware attacks.

    Antispyware software, on the other hand, is non-aggressive toward antivirus software. While it may try to lock files being actively scanned, it will not compete with an antivirus program when the latter attempts to block or take control of a file. This is why antispyware applications can run alongside most antivirus protection without issue.

    As mentioned above, Webroot SecureAnywhere works differently from other virus protection. SecureAnywhere does not rely on the customary system of definition sets to make determinations. Instead, this new program examines file behavior and system interaction closely to determine if files are malicious or not. Only files that present risk are examined.

    Using the same advanced behavioral detection that determines which files are malicious, SecureAnywhere is able to recognize other virus protection software on your computer as one of “the good guys.” This means SecureAnywhere won’t block with on-access scanning or try to break through legitimate lockouts. In this way, potential software conflicts, and the resulting system slowness and vulnerability, can be avoided. You can run SecureAnywhere alongside another antivirus program safely.

    If you have any other questions, we encourage you join the Webroot Community to see what other security experts and customers are saying.

    Thank you,

    The Webroot Support Team

    ===== end ====
     
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Since I do not have any first hand experience with SecureAnywhere, I cannot comment on whether their claims are totally true or not. All I can say it that you are saying you are having problems with a slow PC and every program that actively runs uses memory and takes resources. And my observation is that you are not having malware problems, but you could be having problems due to what you are running. My suggestions still stand. And that is uninstall a few things and see what happens. If you don't want to uninstall Webroot, then uninstall MSE. Also I suggestion uninstalling Wise Care 365 and SUPERAntiSpyware. After you uninstall these, reboot and tell me if there is any change.
     
  6. Journeyer

    Journeyer Private E-2

    Chaslang,

    Thanks for the follow-up. I take your suggestions seriously and just wanted to know whether or not you have worked with Webroot SecureAnywhere to evaluate their compatibility claim. I've taken some action on your suggestions ...

    Concerning memory: I have added another 2GB of memory for a total of 4GB. This is an "acquired" Dell that originally shipped with minimum memory and Windows Vista. I increased memory to 2GB when I upgraded to Windows 7. Should have gone the full 4GB at that time.

    Concerning installed programs: I have uninstalled Wise Care365 (not of much value to me) and SUPERAntiSpyware. I had set the SUPERAntiSyware option not to load when Windows starts ... but perhaps there was a memory resident portion anyway.

    After taking these steps, I tested the computer and it is performing much better ... added memory is certainly a key. I then uninstalled MSE and really saw no real performance change. I reinstalled and will track things for a while.

    I also have Webroot SecureAnywhere and MSE running on a 4GB Asus notbeook with no problem. I would like to think that software development has finally reached the point that well designed programs can actually run in a very compatible mode and not hog resources. I think that's the SecureAnywhere objective.

    As a side note, I added SecureAnywhere to both computers and an Android tablet about a month ago. I see no problem on the notebook and the desktop slowdown has only been in the past week. As a matter of curosity, I continue to track these two programs running at the same time.

    Thanks again for your help, your confirmation that no malware is involved, and your suggestions.
     
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    No.

    Great.

    I would leave it uninstalled. If Webroot does its job properly, then you should not need MSE. If Webroot is not doing a good job then I would uninstall it and keep MSE. There is no reason why you should need both.

    As much as it may be SecureAnywhere objective, it was not the objective of MSE. It even tells you when installing it not to have another antivirus protection program installed.

    You're welcome.

    Since you are not having malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
    2. Go back to step 4 oof the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
    3. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
    4. If running Vista or Win 7, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    6. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    7. After doing the above, you should work thru the below link:
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds