Svchost and nod32 2.7 trial are eating all my resources

Discussion in 'NOD32 version 2 Forum' started by R.m4n, Dec 10, 2006.

Thread Status:
Not open for further replies.
  1. R.m4n

    R.m4n Registered Member

    Joined:
    Dec 10, 2006
    Posts:
    17
    Hello ,
    I've instaled nod32 2.7 , a trial version , and the windows start-up is quite slow . Also svchost has a mem usage that never drops below 35 000 k . The problem gets worse when I scan the PC or update . I've scanned my PC with nod in depth mode and said that the system was infected , but that type of scan was taking to much time and I've canceled it . With the normal scan , no virus or spyware was detected . I've also scaned the PC with Spyware S&D and several copies of a trojan were found ( I can't remember the name right now ) were found .
    Please help me .:D
     
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,376
  3. R.m4n

    R.m4n Registered Member

    Joined:
    Dec 10, 2006
    Posts:
    17
    Do you have the same software as me ?
     
  4. ASpace

    ASpace Guest

    Did you remove the infections ?

    The in-depth scan takes longer than the other because they scan deeper and with Advanced-heuristics . Check your settings as per Blackspear's tutorial here .

    Update Spybot S&D
    Make sure your NOD32 is up-to-date , too , the latest version is 1913.

    Boot in Safe Mode http://support.microsoft.com/kb/315222
    In Safe Mode , goto Start->Programs->ESET->NOD32
    Goto the Profiles tab and make sure you use Control Center Profile
    When so , make sure your set NOD32 to scan all your hard drives and push Scan&Clean

    NOD32 will automatically take care of everything ;)

    Also Scan with Spybot S&D and remove the threats found .
    Reboot in Normal Mode.

    How is it now ?
     
  5. R.m4n

    R.m4n Registered Member

    Joined:
    Dec 10, 2006
    Posts:
    17
    Thanks for the reply . I will use the instrucions you gave me . The S&D program removed all the spyware .
    Nod32 and S&D are up to date .
    Do you think that the windows FW is a good one ? If not , what should I use ?
    PS : In safe mode , what type of scan should I use ? Normal or Depth ?
     
  6. ASpace

    ASpace Guest

    Windows Firewall is an excellent one . It does what it ha been made for , I use it :thumb:
     
  7. ASpace

    ASpace Guest

    Read Blackspear's tutorial . It will change the Control Center profile (Run NOD32) in order to max the settings to very high (deep) , use Control Center profile as per the tutorial ;)
     
  8. R.m4n

    R.m4n Registered Member

    Joined:
    Dec 10, 2006
    Posts:
    17
    Ok .
    I've configured my AV as in the tutorial .
    i will start my win in safe mode and make a depth scan then tell you the results . Do you think svchost eats resources becouse of a virus or spyware ?
    Thanks for the info
     
  9. ASpace

    ASpace Guest

    Not sure , make sure you are virus/malware-free and then we'll see .Security should the first to do . Viruses can do everything and until you are sure there are none , I can't say for sure . Might also be what Marcos pointed out
     
  10. R.m4n

    R.m4n Registered Member

    Joined:
    Dec 10, 2006
    Posts:
    17
    I will try your solution 1st and then tell you the results .
     
  11. R.m4n

    R.m4n Registered Member

    Joined:
    Dec 10, 2006
    Posts:
    17
    I've done the deep scan and nothing suspicious was discovered . SpyBot S&D didn't detected anything too in safe mode . Ad Aware detected a tracking cookie and a toolbar and removed them . Now svchost has a 25 000 k mem usage almost the same as nod32krn.exe . The startup process ( the part when the wallpaper apears ) is quite slow too .
     
  12. Rob E

    Rob E Registered Member

    Joined:
    Jan 17, 2005
    Posts:
    16
    Wilders is a great place for help! And so... your system is slow. How old is it, and how fast should it be? What is your CPU? How much RAM do you have?. Maybe your system is running as it should. Performance does degrade over time without the proper maintenance. Regarding svchost: it typically runs multiple processes, and the memory usage you're seeing isn't out of line at all!

    When was the last time you defragged your HD's? Or.. ran a registery checker / cleaner? or even did a chkdsk on your system?

    Wish I could be more helpful. On a good clean well-configured PC, NOD32 usually runs without flaw - light & fast. But... there are many other reasons a PC can exhibit less than optimal performance and they're not necessarily virus or malware related.

    Robert
     
  13. ASpace

    ASpace Guest

    Boy , we have an improvement . From your first post where you write for 35000k to now 25000k :D

    Your system is now clean . On my computers svchost.exe is ~25000k , too , NOD32 is about 20000 and the system is so fast that you can't even imagine ;)

    Have you tried the normal things :
    1) Make sure you have no other antivirus in real time
    2) What was your previous AV ?
    3) Try repairing Winsock
    4) Make NOD32 scan not all files by default extensions

    About 3
    About 4
    Open AMON -> Setup -> Press the Extensions... button and uncheck Scan all files . Press OK and Restart . How is it now ? ;)
     
  14. R.m4n

    R.m4n Registered Member

    Joined:
    Dec 10, 2006
    Posts:
    17
    My system is an AMD 2200+ (1.8 hz ) DDRam 768 .Should I give more details ?
    I've defragmentated my hard drive a few days ago and I've runned some registry cleaning programs a few days ago too .
    I've had KIS , KAV and avast but none were efficient .
    I am sorry but what is real time antivirus ?
    If I repair hat winsock do I have to enter my dial-up details again ? I don't remember that password so I will wait for your reply !
    Thanks a lot for all your help .
    PS : Bulgaria is really close to Romania :D
     
    Last edited: Dec 10, 2006
  15. ASpace

    ASpace Guest

    I don't trust there reg cleaners , I have seen some that easily damanged the machine , anyway...


    You should have only 1 antivirus software installed at the same time . Having more that one will lead to conflicts between the softwares . Real Time antivirus is antivirus having real-time protection , performing on-acess resident scanning


    No , you will not need to . Since IMON works in the early Winsock level , it needs the Winsock in perfect condition . Repair it and see how is it going . Make sure you have uninstalled all previous antivirus software-Kaspersky, Avast , other ...
     
  16. ASpace

    ASpace Guest

    Are you from Romania , buddy ?
     
  17. R.m4n

    R.m4n Registered Member

    Joined:
    Dec 10, 2006
    Posts:
    17
    I've done the repair and the PC is geting better and better . I am not sure about the real time protection : should I disable nod32 AMON or IMON . IMON didn't start after the winsock repair . Should I start it ?
    Off topic : do you live near the romanian border ? :D
     
  18. R.m4n

    R.m4n Registered Member

    Joined:
    Dec 10, 2006
    Posts:
    17
    Yes I live in Constanta
     
  19. ASpace

    ASpace Guest

    No , in no way should you disable AMON . AMON is the most important part of NOD32 and if you happen to turn it off , you risk of being infected . What do you mean by the PC is geting better and better ?

    Yes , recommened , in order to have the better protect.

    No , I don't . Far from the border
     
  20. R.m4n

    R.m4n Registered Member

    Joined:
    Dec 10, 2006
    Posts:
    17
    Well the PC starts quicker now . ( Do you think my PC is old ?)
    I live in Romania . I've been to Bulgaria too while traveling to Greece
     
  21. ASpace

    ASpace Guest

    It is very good the PC starts quicker . Do you feel the difference , is it faster than it was with other AVs? I don't think your PC is old , there is no such thing , your PC is OK , mine is much worse than yours :)
     
  22. R.m4n

    R.m4n Registered Member

    Joined:
    Dec 10, 2006
    Posts:
    17
    Ok .
    Another problem now : I have to many network connection icons on the task bar : a hamachi one and a bluetooth one . How can I remove them when they are inactive ? Not hide them : remove them for good :D . I've seen that meny programs leave folders or files when uninstaled and I think they are occuping my hard disk space .Is there a way to scan my PC for those files ?
    Is chdsk safe ? What does it do ?
     
  23. ASpace

    ASpace Guest

    Well , from there wonderful two letters (o and k) it seems your problem is sorted out


    This question may be moved in another thread because it is not related to NOD32 . What do you mean by hamachi one ? Can you make a screenshot and attach the picture with the forum options ? Generally network connections are created or removed from Control Panel -> Network Connetions -> Right click the connection and remove/delete
     
  24. ASpace

    ASpace Guest

    Unfortunately , no automated way , only manually .

    This starts MS Windows Check disk utility ; it scans the hard drive(s) for errors
     
  25. R.m4n

    R.m4n Registered Member

    Joined:
    Dec 10, 2006
    Posts:
    17
    And what do I do after chkdsk finishes ? How do I check the 2nd drive ?
    I don't want to remove the connections , just the icons :D . When windows loads they take a long time to load . I also have some genius mouse and KB utilities running on startup . Should I disable them ? Hamachi is a virtual network for lan playing .
    PS : Thanks a lot , my problem is solved . Balkan aliance :))
     
Thread Status:
Not open for further replies.