System cache leak.

Discussion in 'Software' started by M332, Mar 27, 2010.

  1. M332

    M332 Guest

    When running big programs such as antivirus and spyware scans the system cache will max out where the system becomes lagged and a restart is needed. All windows security updates are installed. No viruses detected but full scan closes before finished in Avast where I can only complete full scan during scheduled boot scan. HouseCall will complete quick scan but full scan closes before finished. Spyware Terminator will complete full scan but then it is time to restart computer since cache is maxed out.

    No malware was found after getting help in the malware forum and running all their scans so I was led to post here.

    No registry errors were detected with Ccleaner 2.29.1111.

    The processor and memory are both set to run for best performance of programs, not system cache.

    The problem did not go away when I uninstalled Avast and Spyware Terminator.

    Here's what I have running:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Avast4\aswUpdSv.exe
    C:\Avast4\ashServ.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Spyware Terminator\sp_rsser.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\ehome\ehtray.exe
    C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
    C:\WINDOWS\zHotkey.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\Avast4\ashDisp.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\Avast4\ashWebSv.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\Program Files\NetPal\NetPal.exe
    C:\Program Files\POP Peeper\POPPeeper.exe

    Computer details:
    Gateway 838GM Desktop
    Operating System: Windows XP Media Pro (5.1, Build 2600) Service Pack 3
    Motherboard: Augsburg Intel D915GAG, 800MHz bus, GMA900 graphics, 196MB ram
    Processor: (2)Intel P4 630HT, 3GHz cpu, 800MHz FSB, 2MB L2 cache
    Hard Drive: Seagate Barracuda 200GB, 7200RPM, SATA, 8MB buffer
    Physical Memory: Crucial 4GB, DDR400, PC3200, 128M bit x 64, used 600MB
    Power Supply: Antec 430W
    Virtual Memory: 2GB, available 1.95GB
    Page File: 4.6GB, used 440MB

    Antivirus: Avast 4.8.1368(had errors with 5.0 so I uninstalled)
    Spyware: Spyware Terminator 2.6.6.196
     
  2. brandypeppy

    brandypeppy MajorGeek

    Your process list does not show how much CPU is being used by each of these programs. A more useful list would be a copy of your startup programs from the tools/startup section of cCleaner, which you can find here.

    Two items however caught my attention, and I would disable them both from the startup; POP peeper and Net Pal. I don't know what they are but they would still run when needed. Otherwise, your system has sufficient resources, should be running fine.:wave:wave
     
  3. M332

    M332 Guest

    Those two you listed are not in startup though, I just posted what I usually have running after startup. Netpal is a dialup helper tool, and pop peeper is a email previewer.

    Here are pics with better info on memory usage and startup items.
     

    Attached Files:

  4. brandypeppy

    brandypeppy MajorGeek

    According to their website, Spyware Terminator has an integrated antivirus built in, and you have avast, meaning you are running 2 antivirus programs. This can cause serious performance.

    Try uninstalling one or the other, me, I'd keep avast. Reboot, how is it then?:wave:wave
     
  5. M332

    M332 Guest

    The Spyware Terminator AV program is optional and I have it disconnected. Avast is the only AV program that I'm using.

    I dont know that this below could be one of the causes since the problem remained after I uninstalled Avast but I deleted 3 files from the Avast virus chest to see if one or more of these drivers being held in the virus chest were a cause of the leak:

    kernel32.dll
    winsock.dll
    wsock32.dll

    The files appeared in the chest again after restart as if I never deleted them. I do not know how to keep them out of the chest so tell me if you believe this could be a potential cause of the problem, and if no then I'll just leave it alone.
     
  6. brandypeppy

    brandypeppy MajorGeek

    You say you "disconnected" Spyware Terminator and you also uninstalled Avast?

    Don't worry about the files in Avast, upon installation, it copies some system files to monitor for possible infections.

    And how is it running now?:wave:wave
     
  7. M332

    M332 Guest

    Spyware Terminator is running but it's optional AV is disconnected. Avast is installed and running. A month or so ago I uninstalled both programs to see if they were a cause of the problem and they were not since the problem remained, so I reinstalled both programs.

    Ok I will disregard the files in the Avast virus chest thanks.
     
  8. M332

    M332 Guest

    Any more ideas from anyone in diagnosing the problem?
     
  9. brandypeppy

    brandypeppy MajorGeek

    Well, two more things to try.

    From a command prompt, type SFC /scannow
    Note the space before the /, you may be prompted for an install disk.

    Set a restore point and try dialafix, put a check in everything;
    http://majorgeeks.com/Dial-a-fix_d4899.html

    I've personally only had good luck with this program but others have reported problems, :-o, hence the restore point.

    Do you need that ehome program running?:wave:wave
     
  10. M332

    M332 Guest

    The sfc scan did not work because I do not have a xp cd, and I don't know anyone who has one.

    I made a registry restore point and ran dialafix. It found some errors. The log is attached.

    I do not need ehome. I deleted the ehtray startup entry using ccleaner.
     

    Attached Files:

  11. brandypeppy

    brandypeppy MajorGeek

    The fact that you were asked for the disk indicates a system file corruption/need.

    Do you have a folder called i386. It may be hidden so first select show hidden files and select show system files. If yes, copy this to a CD and insert same when prompted.

    This or you can do a system repair, either from a recovery partition or recovery disk, you may have both. This SHOULD not destroy your data, but save the data first!

    Any improvement from the dialafix? The logs look normal.:wave:wave

    Oops, just looked at the log again. It did install some dll files. The other error messages may or may not be significant, I see these all the time, never can tell which is significant.
     
  12. M332

    M332 Guest

    No the problem remains after running dialafix.

    I copied the folder to a cd but sfc wouldn't accept it since it's not a valid ms xp cd.

    The recovery disk I have from years back is sp2 and I have sp3 now. If I did a system repair from the recovery partition it wouldn't help since I have no recovery points from before the problem began.
     
  13. M332

    M332 Guest

    Thanks for all your help I appreciate it but please close this thread as I've been getting help elsewhere and they don't want outside help interfering with their processes.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds