Computer Support Forum

Unknown infection, constant disk activity

Question: Unknown infection, constant disk activity

I'm pretty sure I have some sort of infection, although I am not sure. My disk is constantly active, grinding constantly every second even when the computer is idle, no matter how much I restart or how long I leave it on. This has been constant for almost two weeks now and it is driving me insane. I did some research, tried to turn off indexing in case it was that, but that did not change anything. I did some disk defragmentations as well, but that didn't help. I have Avast, Malwarebytes, ThreatFire and Online Armor installed, but none of those have detected anything. From what I can tell by looking at the task manager, there is a process called System that identifies itself as NT & Kernel system that seems to gobble up 20% of my cpu in concert with the disk activity I am doing. When I try to locate that particular process though, it takes me to my desktop on explorer with My Computer highlighted. I need help before I throw my laptop out of the window because that noise is driving me nuts. Here's the DDS log, and I've attached the other two logs required as well. Also, when I ran GMER the first time my computer got a blue screen, the second time GMER crashed unexpectedly, and finally the third time worked, but the log file is too big for me to be able to attach it...

Thank you for any help provided, it is greatly appreciated from me and my laptop!

.
DDS (Ver_11-05-19.01) - NTFSx86
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_25
Run by Guillaume at 19:12:01 on 2011-05-24
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.3070.1035 [GMT -7:00]
.
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Online Armor Firewall *Disabled* {32E71E58-6AAE-2557-2ABD-EA739069CE41}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\rundll32.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\Online Armor\OAcat.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_24288096a5cd99f6\aestsrv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Seagate\Seagate Dashboard\SeagateDashboardService.exe
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_24288096a5cd99f6\STacSV.exe
C:\Program Files\ThreatFire\TFService.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe
C:\Windows\OEM02Mon.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe
C:\Program Files\DellTPad\Apoint.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ThreatFire\TFTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\DellTPad\ApMsgFwd.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Seagate\Seagate Dashboard\MemeoDashboard.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\DellTPad\HidFind.exe
C:\Program Files\DellTPad\Apntex.exe
C:\Windows\system32\conhost.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\Guillaume\Downloads\dds.scr
C:\Windows\system32\WSCRIPT.exe
.
============== Pseudo HJT Report ===============
.
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - c:\progra~1\micros~3\office14\URLREDIR.DLL
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [Google Update] "c:\users\guillaume\appdata\local\google\update\GoogleUpdate.exe" /c
mRun: [OEM02Mon.exe] c:\windows\OEM02Mon.exe
mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe
mRun: [DELL Webcam Manager] "c:\program files\dell\dell webcam manager\DellWMgr.exe" /s
mRun: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe
mRun: [Apoint] c:\program files\delltpad\Apoint.exe
mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 10.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [@OnlineArmor GUI] "c:\program files\online armor\oaui.exe"
mRun: [ThreatFire] c:\program files\threatfire\TFTray.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [BCSSync] "c:\program files\microsoft office\office14\BCSSync.exe" /DelayServices
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [Seagate Dashboard] c:\program files\seagate\seagate dashboard\MemeoLauncher.exe --silent --no_ui
StartupFolder: c:\users\guilla~1\appdata\roaming\micros~1\windows\startm~1\programs\startup\magicd~1.lnk - c:\program files\magicdisc\MagicDisc.exe
StartupFolder: c:\users\guilla~1\appdata\roaming\micros~1\windows\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office14\ONENOTEM.EXE
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\blueto~1.lnk - c:\program files\widcomm\bluetooth software\BTTray.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\quickset.lnk - c:\program files\dell\quickset\quickset.exe
mPolicies-explorer: EnableShellExecuteHooks = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\micros~3\office14\ONBttnIE.dll/105
IE: Send image to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
SEH: OA Shell Helper: {4f07da45-8170-4859-9b5f-037ef2970034} - c:\progra~1\online~1\oaevent.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\guillaume\appdata\roaming\mozilla\firefox\profiles\h1bpn35p.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - plugin: c:\progra~1\micros~3\office14\NPAUTHZ.DLL
FF - plugin: c:\progra~1\micros~3\office14\NPSPWRAP.DLL
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\microsoft silverlight\4.0.60310.0\npctrlui.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - plugin: c:\users\guillaume\appdata\local\google\update\1.3.21.53\npGoogleUpdate3.dll
.
============= SERVICES / DRIVERS ===============
.
R0 SmartDefragDriver;SmartDefragDriver;c:\windows\system32\drivers\SmartDefragDriver.sys [2011-5-12 16184]
R0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys [2011-5-12 51984]
R0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys [2011-5-12 69392]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2011-5-12 441176]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2011-5-12 307928]
R1 OADevice;OADriver;c:\windows\system32\drivers\OADriver.sys [2011-5-12 205864]
R1 OAmon;OAmon;c:\windows\system32\drivers\OAmon.sys [2011-5-12 25192]
R2 AESTFilters;Andrea ST Filters Service;c:\windows\system32\driverstore\filerepository\stwrt.inf_x86_neutral_24288096a5cd99f6\AEstSrv.exe [2011-5-12 73728]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2011-5-12 19544]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-5-12 53592]
R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2011-5-12 42184]
R2 OAcat;Online Armor Helper Service;c:\program files\online armor\oacat.exe [2011-5-12 381512]
R2 SeagateDashboardService;Seagate Dashboard Service;c:\program files\seagate\seagate dashboard\SeagateDashboardService.exe [2010-7-6 14088]
R2 ThreatFire;ThreatFire;c:\program files\threatfire\tfservice.exe service --> c:\program files\threatfire\TFService.exe service [?]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [2010-4-14 45736]
R3 OAnet;OnlineArmor Service;c:\windows\system32\drivers\OAnet.sys [2011-5-12 29312]
R3 osppsvc;Office Software Protection Platform;c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\OSPPSVC.EXE [2010-1-9 4640000]
R3 PCDSRVC{E9D79540-57D5953E-06020101}_0;PCDSRVC{E9D79540-57D5953E-06020101}_0 - PCDR Kernel Mode Service Helper Driver;c:\program files\dell support center\pcdsrvc.pkms [2010-11-17 21744]
R3 TfNetMon;TfNetMon;c:\windows\system32\drivers\TfNetMon.sys [2011-5-12 33552]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\drivers\yk62x86.sys [2009-9-28 315392]
S1 oahlpXX;Online Armor helper driver;c:\windows\system32\drivers\oahlp32.sys [2011-5-12 39048]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 SvcOnlineArmor;Online Armor;c:\program files\online armor\oasrv.exe [2011-5-12 4326472]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 netw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\drivers\netw5v32.sys [2009-6-10 4231168]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2011-5-12 15872]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2011-5-12 52224]
.
=============== Created Last 30 ================
.
2011-05-24 19:22:46 -------- d-----w- c:\users\guillaume\appdata\local\{74A96F25-A2FE-4123-8592-90A59E4C10CB}
2011-05-24 18:20:05 6962000 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{efb927e5-15c5-4800-aea7-8e1e5e9be598}\mpengine.dll
2011-05-24 07:22:36 -------- d-----w- c:\users\guillaume\appdata\local\{C3BCAF25-9ED4-4491-904C-9F096F49F3EA}
2011-05-23 19:58:56 388096 ----a-r- c:\users\guillaume\appdata\roaming\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe
2011-05-23 19:58:54 -------- d-----w- c:\program files\Trend Micro
2011-05-23 18:35:45 -------- d-----w- c:\users\guillaume\appdata\local\{E67E3FD8-6E70-46C7-B474-C4773C88AC98}
2011-05-22 22:16:29 -------- d-----w- c:\users\guillaume\appdata\local\{4D83CBDE-D3A7-4D54-83E6-DC8546A45344}
2011-05-21 19:11:36 -------- d-----w- c:\users\guillaume\appdata\local\{454708B3-7B06-4260-83DB-9013439A0570}
2011-05-21 07:11:11 -------- d-----w- c:\users\guillaume\appdata\local\{60B7858B-ECC3-4C55-B686-C2FEAED996D5}
2011-05-20 19:10:58 -------- d-----w- c:\users\guillaume\appdata\local\{65281733-11E3-42EB-9374-BA4C710964A0}
2011-05-19 18:01:50 -------- d-----w- c:\users\guillaume\appdata\local\{8A8C7F6F-88E9-4E95-90B5-F4053742023C}
2011-05-19 06:22:25 -------- d-----w- c:\windows\en
2011-05-19 06:19:58 69464 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2011-05-19 06:19:58 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
2011-05-19 06:19:58 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2011-05-19 06:18:39 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll
2011-05-19 06:17:00 94040 ----a-w- c:\program files\common files\windows live\.cache\5b9d14a31cc15ec03\DSETUP.dll
2011-05-19 06:17:00 525656 ----a-w- c:\program files\common files\windows live\.cache\5b9d14a31cc15ec03\DXSETUP.exe
2011-05-19 06:17:00 1691480 ----a-w- c:\program files\common files\windows live\.cache\5b9d14a31cc15ec03\dsetup32.dll
2011-05-19 06:16:55 94040 ----a-w- c:\program files\common files\windows live\.cache\582fffd61cc15ec02\DSETUP.dll
2011-05-19 06:16:55 525656 ----a-w- c:\program files\common files\windows live\.cache\582fffd61cc15ec02\DXSETUP.exe
2011-05-19 06:16:55 1691480 ----a-w- c:\program files\common files\windows live\.cache\582fffd61cc15ec02\dsetup32.dll
2011-05-19 00:53:51 -------- d-----w- c:\users\guillaume\appdata\roaming\Seagate
2011-05-19 00:51:22 -------- d-----w- c:\program files\Seagate
2011-05-18 18:07:40 -------- d-----w- c:\users\guillaume\appdata\local\{64339460-D88C-4ABB-840E-E8537B49D89C}
2011-05-17 19:33:15 -------- d-----w- c:\users\guillaume\appdata\local\{6C769FC1-F54C-4332-8DA6-2352D8DFD67E}
2011-05-17 17:04:19 -------- d-----w- c:\users\guillaume\appdata\local\{48D50CEA-56B4-4B12-8F97-80FCACDA436F}
2011-05-17 01:30:13 14744 ----a-w- c:\users\guillaume\appdata\roaming\microsoft\identitycrl\production\ppcrlconfig.dll
2011-05-17 01:04:02 -------- d-----w- c:\program files\MSECache
2011-05-16 19:58:10 -------- d-----w- c:\users\guillaume\appdata\local\{ED353AFE-B5AB-4872-B6CD-EA38BF4963CF}
2011-05-16 07:10:23 -------- d-----w- c:\users\guillaume\appdata\local\{F57D178F-29A5-4A1C-9DDC-572C46E5C8C4}
2011-05-16 07:10:22 -------- d-----w- c:\users\guillaume\appdata\local\{196AF866-DD71-4531-AF70-AC0083973C9D}
2011-05-15 19:11:51 -------- d-----w- c:\users\guillaume\appdata\local\{4D92AA01-5D16-4BD2-A5D4-E0DCAFF4DD67}
2011-05-15 06:10:41 -------- d-----w- c:\users\guillaume\appdata\local\{03B9B3FD-A63F-4AF2-A97B-E63F310D986D}
2011-05-14 18:10:29 -------- d-----w- c:\users\guillaume\appdata\local\{A852AE56-E5BB-4594-BAC1-DD206C3CEBA6}
2011-05-13 23:12:37 -------- d-----w- c:\users\guillaume\appdata\local\Google
2011-05-13 20:52:58 -------- d-----w- c:\users\guillaume\appdata\local\{86818790-8078-4154-A53F-BB1E1307F443}
2011-05-13 06:19:22 -------- d-----w- c:\users\guillaume\appdata\local\Apple Computer
2011-05-13 06:18:49 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2011-05-13 06:18:49 107368 ----a-w- c:\windows\system32\GEARAspi.dll
2011-05-13 06:18:07 -------- d-----w- c:\program files\iPod
2011-05-13 06:18:06 -------- d-----w- c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2011-05-13 06:18:06 -------- d-----w- c:\program files\iTunes
2011-05-13 06:16:44 6962000 ----a-w- c:\programdata\microsoft\windows defender\definition updates\backup\mpengine.dll
2011-05-13 02:56:07 -------- d-----w- c:\program files\Microsoft Synchronization Services
2011-05-13 02:55:42 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2011-05-13 02:53:07 -------- d-----w- c:\program files\Microsoft Analysis Services
2011-05-13 02:52:26 -------- d-----w- c:\users\guillaume\appdata\local\Microsoft Help
2011-05-13 02:47:44 116736 ----a-w- c:\windows\system32\drivers\mcdbus.sys
2011-05-13 02:47:44 -------- d-----w- c:\program files\MagicDisc
2011-05-13 02:09:33 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin7.dll
2011-05-13 02:09:33 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin6.dll
2011-05-13 02:09:33 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin5.dll
2011-05-13 02:09:33 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin4.dll
2011-05-13 02:09:33 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin3.dll
2011-05-13 02:09:33 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin2.dll
2011-05-13 02:09:33 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin.dll
2011-05-13 02:08:55 -------- d-----w- c:\users\guillaume\appdata\local\Apple
2011-05-13 02:08:13 -------- d-----w- c:\program files\Bonjour
2011-05-13 01:39:40 -------- d-----w- c:\users\guillaume\appdata\local\Adobe
2011-05-13 01:19:48 -------- d-----w- c:\users\guillaume\appdata\roaming\Malwarebytes
2011-05-13 01:19:36 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-05-13 01:19:35 -------- d-----w- c:\programdata\Malwarebytes
2011-05-13 01:19:26 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-05-13 01:19:26 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-05-13 01:16:53 69392 ----a-w- c:\windows\system32\drivers\TfSysMon.sys
2011-05-13 01:16:53 51984 ----a-w- c:\windows\system32\drivers\TfFsMon.sys
2011-05-13 01:16:53 33552 ----a-w- c:\windows\system32\drivers\TfNetMon.sys
2011-05-13 01:16:50 -------- d-----w- c:\programdata\PC Tools
2011-05-13 01:16:50 -------- d-----w- c:\program files\ThreatFire
2011-05-13 00:59:16 -------- d-----w- c:\users\guillaume\appdata\roaming\OnlineArmor
2011-05-13 00:59:16 -------- d-----w- c:\programdata\OnlineArmor
2011-05-13 00:55:46 39048 ----a-w- c:\windows\system32\drivers\oahlp32.sys
2011-05-13 00:55:46 25192 ----a-w- c:\windows\system32\drivers\OAmon.sys
2011-05-13 00:55:45 29312 ----a-w- c:\windows\system32\drivers\OAnet.sys
2011-05-13 00:55:45 205864 ----a-w- c:\windows\system32\drivers\OADriver.sys
2011-05-13 00:55:38 -------- d-----w- c:\program files\Online Armor
2011-05-13 00:49:05 29008 ----a-w- c:\windows\system32\SmartDefragBootTime.exe
2011-05-13 00:49:05 16184 ----a-w- c:\windows\system32\drivers\SmartDefragDriver.sys
2011-05-13 00:49:05 -------- d-----w- c:\users\guillaume\appdata\roaming\IObit
2011-05-13 00:49:02 -------- d-----w- c:\program files\IObit
2011-05-13 00:39:09 -------- d-----w- c:\users\guillaume\appdata\local\{1EB506E4-83D2-4E18-B4D4-31121D4F2FEE}
2011-05-13 00:38:55 -------- d-----w- c:\users\guillaume\Tracing
2011-05-13 00:36:12 -------- d-----w- c:\windows\PCHEALTH
2011-05-13 00:32:23 -------- d-----w- c:\users\guillaume\appdata\local\Windows Live
2011-05-13 00:32:23 -------- d-----w- c:\program files\common files\Windows Live
2011-05-13 00:02:26 -------- d-----w- c:\windows\system32\SPReview
2011-05-13 00:01:26 -------- d-----w- c:\windows\system32\EventProviders
2011-05-12 23:53:59 712576 ----a-w- c:\windows\system32\drivers\ndis.sys
2011-05-12 23:52:59 739328 ----a-w- c:\windows\system32\WMSPDMOD.DLL
2011-05-12 23:51:45 189952 ----a-w- c:\windows\system32\wdscore.dll
2011-05-12 23:50:57 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-05-12 23:50:53 606208 ----a-w- c:\windows\system32\wbem\fastprox.dll
2011-05-12 23:50:53 363008 ----a-w- c:\windows\system32\wbemcomn.dll
2011-05-12 23:50:29 -------- d-----w- c:\users\guillaume\appdata\roaming\Azureus
2011-05-12 23:48:23 -------- d-----w- c:\program files\Vuze
2011-05-12 23:36:58 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-05-12 22:18:47 805376 ----a-w- c:\windows\system32\FntCache.dll
2011-05-12 22:18:47 123904 ----a-w- c:\windows\system32\poqexec.exe
2011-05-12 22:18:47 1076736 ----a-w- c:\windows\system32\DWrite.dll
2011-05-12 22:18:46 739840 ----a-w- c:\windows\system32\d2d1.dll
2011-05-12 22:00:20 -------- d-----w- c:\programdata\NVIDIA Corporation
2011-05-12 21:57:14 -------- d-----w- c:\program files\NVIDIA Corporation
2011-05-12 21:47:23 441176 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-05-12 21:47:22 53592 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-05-12 21:46:24 40112 ----a-w- c:\windows\avastSS.scr
2011-05-12 21:46:17 -------- d-----w- c:\programdata\AVAST Software
2011-05-12 21:46:17 -------- d-----w- c:\program files\AVAST Software
2011-05-12 21:35:29 219136 ----a-w- c:\windows\system32\d3d10_1core.dll
2011-05-12 21:35:29 161792 ----a-w- c:\windows\system32\d3d10_1.dll
2011-05-12 21:23:18 -------- d-----w- c:\program files\Protector Suite
2011-05-12 21:16:54 -------- d-----w- c:\program files\DellTPad
2011-05-12 21:16:47 252536 ----a-w- c:\windows\system32\drivers\Apfiltr.sys
2011-05-12 21:16:47 109122 ----a-w- c:\windows\system32\Vxdif.dll
2011-05-12 21:15:32 46592 ----a-w- c:\windows\system32\drivers\rimmptsk.sys
2011-05-12 21:15:31 90112 ----a-w- c:\windows\system32\snymsico.dll
2011-05-12 21:15:31 43008 ----a-w- c:\windows\system32\drivers\rimsptsk.sys
2011-05-12 21:15:31 38400 ----a-w- c:\windows\system32\drivers\rixdptsk.sys
2011-05-12 21:15:31 172032 ----a-w- c:\windows\system32\rixdicon.dll
2011-05-12 21:13:45 73728 ----a-w- c:\windows\system32\AEstSrv.exe
2011-05-12 20:57:53 -------- d-----w- c:\program files\Dell
2011-05-12 20:57:44 -------- d-----w- c:\program files\Creative
2011-05-12 20:55:43 -------- d-----w- c:\program files\Marvell
2011-05-12 20:55:03 31232 ----a-w- c:\windows\system32\prevhost.exe
2011-05-12 20:55:02 311808 ----a-w- c:\windows\system32\drivers\srv.sys
2011-05-12 20:55:02 310272 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-05-12 20:55:01 114176 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-05-12 20:54:59 28672 ----a-w- c:\windows\system32\dnscacheugc.exe
2011-05-12 20:54:59 132608 ----a-w- c:\windows\system32\dnsrslvr.dll
2011-05-12 20:54:57 70656 ----a-w- c:\windows\system32\fontsub.dll
2011-05-12 20:54:57 34304 ----a-w- c:\windows\system32\atmlib.dll
2011-05-12 20:54:57 294912 ----a-w- c:\windows\system32\atmfd.dll
2011-05-12 20:54:51 -------- d-----w- c:\users\guillaume\appdata\roaming\TMP
2011-05-12 20:54:13 -------- d-----w- c:\windows\Panther
2011-05-12 20:52:59 728448 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2011-05-12 20:52:59 219008 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2011-05-12 20:52:59 107520 ----a-w- c:\windows\system32\cdd.dll
2011-05-12 20:52:51 3967872 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-05-12 20:52:51 3912576 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-05-12 20:52:38 1164288 ----a-w- c:\windows\system32\mfc42u.dll
2011-05-12 20:52:38 1137664 ----a-w- c:\windows\system32\mfc42.dll
2011-05-12 20:52:36 96768 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-05-12 20:52:36 69632 ----a-w- c:\windows\system32\drivers\bowser.sys
2011-05-12 20:52:36 223232 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-05-12 20:52:36 123904 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-05-12 20:50:27 -------- d-----w- C:\Intel
2011-05-12 20:48:28 80176 ----a-w- c:\windows\system32\drivers\btwavdt.sys
2011-05-12 20:48:28 16560 ----a-w- c:\windows\system32\drivers\btwrchid.sys
2011-05-12 20:48:27 78128 ----a-w- c:\windows\system32\drivers\btwaudio.sys
2011-05-12 20:48:19 229376 ----a-w- c:\windows\system32\BtwRSupport.dll
2011-05-12 20:47:18 -------- d-----w- c:\windows\system32\es-MX
2011-05-12 20:47:18 -------- d-----w- c:\windows\system32\es-AR
2011-05-12 20:47:17 -------- d-----w- c:\program files\WIDCOMM
2011-05-12 20:44:59 -------- d-----w- c:\users\guillaume\Roaming
2011-05-12 20:44:59 -------- d-----w- c:\users\guillaume\appdata\roaming\Intel
2011-05-12 20:44:59 -------- d-----w- c:\programdata\Roaming
2011-05-12 20:44:36 -------- d--h--w- C:\$WINDOWS.~Q
2011-05-12 20:44:25 -------- d--h--w- C:\$INPLACE.~TR
2011-05-12 20:34:46 -------- d-----w- c:\users\guillaume\appdata\local\Deployment
2011-05-12 20:34:46 -------- d-----w- c:\users\guillaume\appdata\local\Apps
2011-05-12 20:29:51 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-05-12 20:28:59 -------- d-----w- c:\program files\Dell Support Center
2011-05-12 20:28:30 -------- d-sh--w- c:\windows\Installer
2011-05-12 20:27:23 -------- d-----w- c:\programdata\PCDr
2011-05-12 20:27:12 -------- d-----w- c:\users\guillaume\appdata\roaming\PCDr
2011-05-12 20:15:56 -------- d-----w- c:\windows\system32\wbem\Performance
2011-05-12 20:09:07 -------- d-sh--w- C:\Recovery
2011-05-12 20:07:37 -------- d-sh--w- C:\Boot
2011-05-12 20:07:18 -------- d-----w- c:\windows\system32\OEM
2011-05-12 19:21:41 -------- d-----w- c:\users\guillaume\appdata\local\VirtualStore
.
==================== Find3M ====================
.
2011-05-13 00:16:17 152576 ----a-w- c:\windows\system32\msclmd.dll
2011-04-06 23:20:16 91424 ----a-w- c:\windows\system32\dnssd.dll
2011-04-06 23:20:16 75040 ----a-w- c:\windows\system32\jdns_sd.dll
2011-04-06 23:20:16 197920 ----a-w- c:\windows\system32\dnssdX.dll
2011-04-06 23:20:16 107808 ----a-w- c:\windows\system32\dns-sd.exe
2011-03-12 11:23:45 870912 ----a-w- c:\windows\system32\XpsPrint.dll
2011-03-08 05:28:29 741376 ----a-w- c:\windows\system32\inetcomm.dll
2011-03-03 03:42:34 2333184 ----a-w- c:\windows\system32\win32k.sys
2011-02-25 05:30:54 2616320 ----a-w- c:\windows\explorer.exe
2011-02-24 05:38:54 288256 ----a-w- c:\windows\system32\XpsGdiConverter.dll
.
============= FINISH: 19:15:36.17 ===============

Relevance 100%
Preferred Solution: Unknown infection, constant disk activity

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: Unknown infection, constant disk activity

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appear Click OKDeFogger may ask you to reboot the machine, if it does - click OKDo not re-enable these drivers until otherwise instructed.Download DDS:Please download DDS by sUBs from one of the links below and save it to your desktop:
Download DDS and save it to your desktop

Link1
Link2
Link3

Please disable any anti-malware program that will block scripts from running before running DDS.

Double-Click on dds.scr and a command window will appear. This is normal.Shortly after two logs will appear:
DDS.txt Attach.txtA window will open instructing you save & post the logsSave the logs to a convenient place such as your desktopCopy the contents of both logs & post in your next replyScan With RKUnHookerPlease Download Rootkit Unhooker Save it to your desktop.Now double-click on RKUnhookerLE.exe to run it.Click the Report tab, then click Scan.Check (Tick) Drivers, Stealth,. Uncheck the rest. then Click OK.Wait till the scanner has finished and then click File, Save Report.Save the report somewhere where you can find it. Click Close.Copy the entire contents of the report and paste it in a reply here.Note** you may get this warning it is ok, just ignore"Rootkit Unhooker has detected a parasite inside itself!It is recommended to remove parasite, okay?""just click on Cancel, then Accept".information and logs:In your next post I need the following

.logs from DDSlog from RKUnHookerlet me know of any problems you may have hadGringo

5 more replies
Relevance 75.03%

I'm running XP Pro SP3 and there is constant disk activity even when the computer's idle. I've left it for well over 24 hours with nothing happening, and the disk was still whirring away.

My first thought was malware, but I've used the Spyware Warrior forums and they assure me that my PC appears to be clean, and recommended me to try here.

If it's any help I used Task Manager to look at I/O Reads, I/O Writes and I/O Other, and the processes where these values are changing rapidly are: lsass.exe, csrss.exe, ashServ.exe, ashmaiSv.exe.

I'd b egrateful for any idaes.
 

Answer:Constant disk activity

6 more replies
Relevance 75.03%

On my XP Pro 2002 SP3 box, there is constant disk activity even when the computer's idle.

This appears to be the same issue as reported by MorningGlow (2009-05-02)

I am running Panda Cloud AV, and have also run some on-line on-demand scans, but the problem remains.

In terms of I/O reads, the most activity seems to be coming from lsass.exe, csrss.exe as well as PSANHost.exe (Panda Cloud), but the PSANHost.exe activity is not constant, but it seems that lsass.exe is always constant and (most of the time) also csrss.exe.

I ran HijackThis (v2.0.4 downloaded from SourceForge) and the log is as below, help and advice most appreciated.

Thanks in advance...

--

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:05:24 AM, on 2012-08-19
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe
C:\Program Files\TELUS\TELUS Support Centre\bin\McciTrayApp.exe
C:\program files\real\realplayer\update\realsched.exe
C:\Program Files\Trend Micro\RUBotted\R... Read more

Answer:Constant disk activity

9 more replies
Relevance 75.03%
Relevance 74.21%

T520, 4 GB RAM, 500 GB hard drive, Win 7 Pro 64 bit,  Do any fellow T520 users see constant, about one flash per second, hard disk activity. I've turned off the usual suspects, including Windows Indexing Service and all the Intel security and management services and uninstalled Symantec Endpoint Protection 12, which has also been mentioned in certain articles about disk thrashing. The side effects of this constant disk activity is that the computer will not enter sleep or hibernate due to inactivity, although I can force it manually.I'm also worried about premature disk wear. Any hints would be gretly appreciated.

Answer:T520 Constant disk activity

Running resmon will certainly give you a much better picture of what is using the disk so often. Disabling the Windows 7 indexing service is going to create more issues than it solves. Running powercfg -energy in an elevated command console with create a report and show you what is hanging up sleep.  See http://msdn.microsoft.com/en-us/windows/hardware/gg463250 if you need some information on this program.

3 more replies
Relevance 74.21%

My pc runs an SSD for windows but I have a secondary internal mechanical 3 TB hard drive. Tonight it sounds like the mechanical hard drive is in constant activity. I checked task manager and it's not showing any usage, 0% as expected so I am wondering why it is busily whirring away? Could it be doing background tasks that do not show up in task manager when checking disk usage?

Over the last week I have installed a few steam games on it so downloaded a probably a couple hundred gigabytes so maybe it's something to do with that? Unfortunately my machine doesn't have hard disk lights on the front but I can hear the tell tale whirring which has been going on for a good couple hours now. But resource monitor and task manager show zero activity on the disk. Maybe it's optimising /defragmenting but surely that would show activity in task manager or resource monitor right? Besides which if open disk defragmenter app it says it was last run on the mechanical drive about an hour ago and status ok 0% fragmented

it seems to shut up if I play a movie stored on it. I stop the movie and can hear it's quiet. But after a while, some idle time it kicks into life again.

More replies
Relevance 74.21%

My wife has a month old Acer laptop. The disk activity light is almost constantly on, either solid or flickering. There are no apps running. Checking in task manager, no process seems to be using more than 2% of the CPU - but looking at the 'performance' tab, CPU usage is typically a minimum of 20% and often above 50% for several seconds. Sometimes, disk/CPU usage is so high that the laptop loses the pojnter - or it won't move. Like I said: this, despite there being (apparently) nothing running. Anyone have any thoughts? We're taking it with us on holiday tomorrow, so I don't have time to do anything other than 'quick and dirty' with it.

Answer:Constant disk and CPU activity mystery

It may be the indexing service, but it usually doesn't run that long. If you are using win 7, run the resource monitor. Check the CPU tab to find out which process is hogging up CPU cycles. Also check the disk tab and see which files are being read/written. Have you tried cold booting the computer?
Do you have superfetch on? If so it might be possible that feature is running erratically and thrashing your HDD. If you open up your services.msc in your run command - it should be listed as "Superfetch". If it's on - try disabling it. Some people have reported better performance with it off anyway.

10 more replies
Relevance 74.21%

I have a thinkpad 7658(CTO) with Vista Home Basic, 3GB of RAM (overkill I know), an 80GB 5400 rpm hard drive and a T8100 Core2Duo Processor clocked at 2.1 GHz. The problem is that after startup, all of my startup programs load (access connections, AVG, active protection system) and the harddisk activity stops. Then suddenly as the power manager loads, there is a constant disk thrashing that won't stop for around 10 mins. So therefore there is this gap in disk activity before power manager starts but I can't attribute it to this for sure. I have disabled everything HD intensive - superfetch, indexing,diskkeeper, etc. and the problem still exists. Any ideas? (btw I'm running Power Manager v. 2.11) My battery life is killed with this problem - changing power profiles does nothing.





_______Thinkpad T61 7658 (CTO): Vista Basic + (Puppy Linux)/1 GB RAM/ 80GB HDD / 6-cell / 14.1" WXGA

Answer:Constant Disk Activity, EVEN without SuperFetch

is your tvtscheduler always running???? How about your Rescue and Recovery backup, what time is it scheduled to run???Also there is no such thing as memory overkill with Vista, it is like Homer Simpson going to a buffet. 

4 more replies
Relevance 74.21%

I've installed Roxio's GoBack, version 3.11, which is a substitute for Windows Me's System Restore, and since I've done so, my hard disk is constantly being accessed - the activity light flashes all the time and I can hear the disk activity.Is this normal?

Answer:GoBack causes constant disk activity

pesumable so as its searching for any changes you make..to keep as logged entries for recovery.there should be a control page to enable you to set the frequency of scans..try searching its help files..

6 more replies
Relevance 73.39%

Hi guys! I'm having trouble lately with my current 64 bit install of Windows 7. It seems that the disk activity is just constant and rarely takes a break. I've taken a look using Procmon and identified that quite a bit of the activity stems from "-k DcomLaunch". I tried disabling Dcom, but failed. Here are the steps I've taken:

1. Run Microsoft Security Essential scan (Clean)
2. Run Spybot Search and Destroy (Removed a couple usual adware)
3. Run Dcombobulator (Procmon still reporting Registry read/writes from DcomLaunch)
4. Manually disabling Dcom using this guide (Procmon still reporting same Registry Activity)

When I tried step 4 and rebooted, I found that the box was still unchecked from step 4 of the technet guide, but Procmon still shows the same Registry activity.

Initial Google searches resulted in something related to my sound, possibly my onboard realtek.

Here are a few sample lines from Procmon:

Code:
4:46:02.9704947 PM svchost.exe 716 RegCreateKey C:\Windows\system32\svchost.exe -k DcomLaunch HKLM\System\CurrentControlSet\Control\DeviceClasses REPARSE Desired Access: All Access
4:46:02.9705288 PM svchost.exe 716 RegCreateKey C:\Windows\system32\svchost.exe -k DcomLaunch HKLM\System\CurrentControlSet\Control\DeviceClasses SUCCESS Desired Access: All Access
4:46:02.9705490 PM svchost.exe 716 RegOpenKey C:\Windows\system32\svchost.exe -k DcomLaunch HKLM\System\CurrentControlSet\Control\DeviceClasses\{ec87f1e3-c13b-4100-b5f7-8b84d54260c... Read more

Answer:Constant disk activity, DCOM not disabling

9 more replies
Relevance 73.39%

Hi,

My wife's HP desktop intermittently becomes very slow and / or unresponsive. When in this state I notice that the HDD activity LED is continuously on. After a time (up to 4-5 minutes) the LED flashes intermittently and the system becomes responsive again. When the HDD LED is on, I can't even bring up the Task Manager to see what processes are running.

Almost everything she does uses a web-based application (Gmail, Facebook, Pinterest, etc.) - Chrome is her browser of choice, but the intermittent slowdown seems to be independent of the browser (I've tried IE and Firefox). Here are the basics specs of the system:

150 GB HDD (99 GB free)
2 GB RAM
Win 7 Home Premium 32-bit
Microsoft Security Essentials
2.6 GHz Athlon CPU

There have been no new applications or hardware added to the PC that can be correlated with this behavior. I'd really appreciate suggestions as to what could be causing this issue, and how it might be resolved.

Answer:PC intermittently becomes unresponsive with constant disk activity

Hello basker1957 and welcome to Seven Forums.

The first thing I'd do is run a full scan with your installed anti-virus of choice. Even if it shows "no malware found" I'd run a second scan with the Forum recommended free Malwarebyes since no anti-malware product is 100% effective 100% of the time.

Malwarebytes | Antivirus, Anti-Spyware, & Anti-Malware Software

There are two free utilities called Process Explorer and Process Hacker. Both are like Task Manager but on steroids. They might be able to show you what process(es) is/are running.

https://technet.microsoft.com/en-us/.../bb896653.aspx

Overview - Process Hacker

If the problem just recently started you could try restoring your computer to an earlier date/time with System Restore. Especially if this problem started after the last Windows Update on April 14th. If a System Restore solves the issue then it was probably one of the updates. You could try installing the updates one at a time and reboot your computer after each install. You'd be more likely to figure out which is the problematic update.

System Restore

And you could also try performing a Clean Boot (aka Clean Startup) in case some application or service recently became damaged or corrupted.

Troubleshoot Application Conflicts by Performing a Clean Startup

And finally, one of the Forum experts prepared a troubleshooting guide that might help.

Troubleshooting Steps for Windows 7

1 more replies
Relevance 72.57%

Hey guys, this is my first post here. I hope some of the malware removal Gods on this forum can help me out.
 
Disclaimer: please forgive me if any of the description below is complete BS. I'm have some experience with removing malware and PUP's in the past but none that have resisted to this extent. 
 
Problem: 
Started Sunday, May 31st, 2015. My laptop was working fine all day, I put it in sleep mode and went home. When I came home the problems started. I can best describe it as: the computer takes ages to start up and load the windows explorer. When that finally happens. Everything is very slow. Programs like Word and Google Chrome do not open.
 
My Activity beforehand:
Before this date I did little out of the ordinary except for download Icecream Ebook Reader for reading .epub files. 
It seemed legit and worked fine. 
 
Security:
Before this problem I had no anti-virus. My Northon Internet Security had run out a few days ago. I was planning on switching to Kaspersky at the end of the month. I do have Malware Bytes PRO installed and activated. Also CCcleaner.
 
Why I think it's malware:
PC works pretty well in safe mode, almost none of the issues described above.
Something seems to be actively trying to prevent me from downloading any programs, even in Safe Mode.
It has blocked correct installation of antivirus programs (tried installing Panda Free Antivirus and afterwards Bitfender Free Antivirus).
Malware seemed to change lan... Read more

Answer:Suspected Idle Crawler & Runner infection, constant HDD activity in normal mode

Hi S-Works,
Welcome to BleepingComputer. My name is dbrisendine and I'll be helping you with this problem. Before I get into the removal of malware / correction of your problem, I need you to be aware of the following:
Please read all of my response through at least once before attempting to follow the procedures described.I would recommend printing them out, if you can, as you can check off each step as you complete it. Also, as some of the cleaning may be done in Safe Mode and there will be no internet connection then, you will find that having the steps printed for reference speeds the cleaning process along. If there's anything you don't understand or isn't totally clear to you, please come back to me for clarification before you start those steps.
All of the assistants and staff at BleepingComputer are here on a volunteer basis; please respect our time given to the cause of helping others.If you are going to be away for more than 4 days, please let me know here. (I will do the same for you.) We do realize that 'life happens' and situations arise unexpectedly; we just ask that you keep us up to date.
Malware removal is a complex, multiple step process; please stay with me on this thread (don't start another thread) until I declare that your logs are clean and you are good to go. The absence of apparent issues does not mean your system is clean; I will tell you when everything looks good for you to go and help you remove the tools we have used.
If any of the security prog... Read more

35 more replies
Relevance 72.57%

I seem to not be able to find the source that causes constant disk activity upon startup of Windows, is there any way to stop the constant disk thrashing?-edit-I seem to see Backup and Restore Center loading upon starting the desktop but currently are trying to prevent this from happening. It makes loading take too long.Message Edited by jasonhockeyguy on 04-08-2008 01:39 PM





Proud supporter of the Toronto Maple Leafs Hockey Club

Answer:Constant Disk activity on Lenovo J200 , how do I stop this?

Have you turned indexing off?

1 more replies
Relevance 72.57%

Hi,one thing drives me mad: when I leave my W500 (Win7 Ultimate 64x, 4 GB ram) in idle for hours without touching it, windows always writes to the harddisk once or twice a second. You can wach this with the resource monitor (accessible from the task manager). The process that writes and reads from my disk is "System" and the transfer rate is about 30KB/s, and the files being written to are system core components like: C:\$LogFile (System Volume Log) , $MFT or NTUSER.dat.This constant acitvity prefents my harddisk to enter power saving= spin down.As I said that happens if with zero user activity, and please don't tell me to disable Search Indexer, or SuperFetch or similar, since Windows is not indexing any files or preloading them, it looks like the NTSF file system is bussy with itself. How to stop that?? Any help appreciated!

More replies
Relevance 72.57%

Hi all.

My laptop is running Windows XP Home Edition Veresion 2002 SP2.
I have Kaspersky Anti Virus which seems to be working correctly. The problem I get is that after about 1 hour of using the laptop the system completely slows down and it can take around 1 minute to switch between tabs in Internet Explorer.

Also the disk activity light comes on constantly.

I have attached my Panda scan results to this post, My HJT Log file is bellow.

Thanks

JonnyDY2J

_______________________________________________________________

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 0633, on 18/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Real\Real... Read more

Answer:System slows down with constant disk activity light.

BUMP,Please

1 more replies
Relevance 72.16%

I have Norton on my system and have run several full system scans and various online virus scanners, yet still getting many ad pop-ups. I've also scanned with three different adware programs. Any assistance would be greatly appreciated!Deckard's System Scanner v20071014.68Run by Destin on 2008-07-04 12:23:29Computer is in Normal Mode.---------------------------------------------------------------------------------- Last 5 Restore Point(s) --8: 2008-07-04 12:29:53 UTC - RP227 - Installed SUPERAntiSpyware Free Edition7: 2008-07-04 09:36:28 UTC - RP226 - Scheduled Checkpoint6: 2008-07-03 05:04:37 UTC - RP225 - Scheduled Checkpoint5: 2008-07-02 16:05:41 UTC - RP224 - Scheduled Checkpoint4: 2008-07-01 19:38:48 UTC - RP223 - Restore Operation-- First Restore Point -- 1: 2008-06-29 20:33:29 UTC - RP220 - Last known good configurationBacked up registry hives.Performed disk cleanup.-- HijackThis (run as Destin.exe) ----------------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 12:26:17 PM, on 7/4/2008Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v7.00 (7.00.6001.18000)Boot mode: NormalRunning processes:C:\Windows\Explorer.EXEC:\Windows\system32\Dwm.exeC:\Windows\system32\taskeng.exeC:\Windows\System32\mobsync.exeC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.ex... Read more

Answer:Infection - Unknown (many Constant Ad Pop-ups)

Hello Xander1969 and welcome to BleepingComputer,1. * Clean your Cache and Cookies in IE:Close all instances of Outlook Express and Internet Explorer Go to Control Panel > Internet Options > General tabUnder Browsing History, click Delete. Click Delete Files, Delete cookies and Delete historyClick Close below.* Clean your Cache and Cookies in Firefox (In case you also have Firefox installed):Go to Tools > Options.Click Privacy in the menu..Click the Clear now button below.. A new window will popup what to clear.Select all and click the Clear button again.Click OK to close the Options window* Clean other Temporary files + Recycle bin Go to start > run and type: cleanmgr and click ok. Let it scan your system for files to remove. Make sure Temporary Files, Temporary Internet Files, and Recycle Bin are the only things checked.Press OK to remove them.2. Please download Malwarebytes' Anti-Malware from Here or HereDoubleclick mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.Once the program has loaded, select "Perform Quick Scan", then click Scan.The scan may take some time to finish,so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is comple... Read more

1 more replies
Relevance 70.93%

We have a laptop on our domain which has apparently been getting very slow over the past few weeks/months but the user has only now raised it as a problem as it is taking a huge amount of time logging in, even in Safe Mode. The hard drive indicator is almost constantly lit but memory and CPU usage are low when I do eventually get logged in and am able to open Talk Manager.
 
I have tried using 'Last known good Configuration' without any effect.  Hard drive space in use is around 40%.
 
Although I have not timed it I have as I write this been waiting now about 30 minutes for it to load into Safe Mode from switch on.  At present I have a mouse pointer on a black screen, 'Safe Mode' in the four corners and 'Microsoft ® Windows ® (Build 7601: Service Pack 1) at the top of the screen.  There is presently no Task Bar or anything else on screen.  There is no hour-glass by the mouse pointer,  Just as I finished typing that sentence the Task Bar appeared.  After 5 minutes the 'Windows Help and Support' window opened and the desktop icons appeared.  The System Tray clock had not updated for the 5 minutes prior to the Help window opening.
 
The machine is a Dell Latitude E6410 running Windows 7 Professional x64.
 
There is a network share mapped to drive letter S: (with CSC-CACHE).
 
It is currently after 1am here.  I am hoping to run 'SFC /scannow', and start off an Emsisoft Emergency Kit scan also  befo... Read more

Answer:Windows 7 constant disk activity and maexceedingly slow logging in and generally

Quick update - 'sfc /scannow' run from elevated command prompt in Safe Mode gives the error: 'Windows Resource Protection could not start the repair service'.
 
Bed beckons ..........

4 more replies
Relevance 70.11%

Purchased from Amazon 2 months ago and worked perfectly without a hitch until a few days ago when I got on the receiving end of  the win8 equivalent of the BSOD with the . From them on I ended up with slow boots random pauses etc. I opted to refresh the PC without affecting any files but toward the end of the reinstall the BSOD appears and now all I had was a black background with only a white cursor. Left that for over a hour, nothing happened so held down the power button to force shutdown.  Found that Z500 no longer boots into win8 so eventually decided to do a clean reinstall with the onekeyrecovery via the help of the NOVO button. This should have been the end of all the problem I was having but unbelievably the problem is still there. Research what I could about this and found that the slow boot is caused by hard disk constantly being thrashed about by a system file ntoskrnl.exe. I tried updating the wifi driver and it appeared to have done the trick until the next day when I booted up the system again. It appear that the constant hd activity goes away after a few hours of leaving the PC on. Anyway I have drawn a blank as to what's going on especially as everything was working perfectly until up to that point with no signs of system conflict. Would appreciated if anyone can shed any light into this?













Solved!

Go to Solution.

Answer:Ideapad Z500 incredibly slow startup due to constant hard disk activity

http://www.nirsoft.net/utils/blue_screen_view.htmlUse BSOD Viewer to post the last three BSODs here. It contains detailed information how and why the BSOD happened.Or some screenshots if that is easier.

5 more replies
Relevance 68.47%

Hi,

Since a few days ago, I've noticed unusual continuous hard disk activity on my laptop.
I'm using Windows 7 Ultimate + Firefox + Avira Antivirus.

Using process explorer, it seems to be caused by services.exe. I/O Other Delta is 10-40 KB/s for services.exe.
Both Windows Resource Monitor and procmon say services.exe is enumerating all files on all my drives alphabetically, even my external hard disk! (confirmed by it's blinking LED)

I have sptd driver installed.

A little investigation by myself:
I'm a little familiar with ollydbg and stuff, so I debugged services.exe and noticed an unnamed module loaded at 0x10000000 which contains executable code suspected for causing hard disk activity(CreateFileW was called many times in there). I have dumped that area and I can provide it if needed(Interesting that it is packed with UPX!).

Thanks for your help.

More replies
Relevance 61.5%

Hi. I seem to be losing massive amounts of disk space extremely fast. All the problems started last week when my computer got drastically slower all of the sudden. I ran diskeeper and it said I was dangerously low on disk space and I couldn't figure out why. I ran a boot-time scan using Avast! antivirus and it found Win32:Trojan-gen {Other} in C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe. It failed to repair the file and so I deleted it and when I went back into Windows Vista after the scan, I had an extra 23GB of free space. At first I thought that everything had been fixed and so I proceeded to tighten my security so an incident like this wouldn't happen again. I turned on UAC and also downloaded Comodo Firewall (and turned off the builtin windows firewall that I had been using). Well unfortunately, I've noticed the disk space problem isn't gone because I've lost about 5 GB of free space just today. I've tried scanning again with AVG, Spybot, Ad-Aware, SuperAntiSpyware, Comodo's malware detection tool and they all came back clean. I tried freeing disk space with CCleaner but it only freed up about 300 MB. I then tried HijackThis for the first time and started deleting entries that seemed suspicious but it didn't help. Then I found this site and it mentioned to not delete entries until someone can analyze the log. I've managed to restore all the backups except 3 because I deleted Bonjour and CVSNT and so the deleted serv... Read more

Answer:Losing massive disk space - Urgent unknown infection

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

2 more replies
Relevance 56.58%

Windows XP Pro
Constant HD noise and intermitant HD light (cant say if the light activity is normal, but noise is definatly not)

I use spywareblaster, NOD32 av, spybot, adaware, zonealarm. No threats detected.

Scanned with SpeedFan: "disk Spin Up Time(171) is below the normal range (172-252)...seems to indicate some kind of drive's mechanic poorer performace is ocurring. Usually this attribute is not so relevant by itself..."

Noise persistant throughout boot sequence, re-boot, and safe-mode.
 

Answer:Constant HD Activity

Hiya and welcome envirotech69

Are you still having this problem? If so, can we see a fresh Hijackthis log please

Regards

eddie
 

1 more replies
Relevance 56.58%
Question: constant activity

Hi, my laptop seems to be in a state of constant activity when i try to boot it normally. I can click on things and all but nothing happens, it only continues to show constant activity (with the occasional freeze up). The only use I have been able to get out of it recently it booting in safe mode. My comp was seriously corrupted (or so I was told) about a month back so i nuked it and installed windows seven fresh (or so I thought). For the first week or two after doing so it worked fine. Then after leaving it on for a few days by accident it starting acting up and now it is to the point where i cannot even run it normally. Any help would be greatly appreciated, thanks.
 

Answer:constant activity

by constant state of activity do you mean your processor is at 100% constantly, or you get the activity cursor? does anyone else have access to this computer? what new software did you install when this started? what are your system specs (ram amount, processor speed, etc)
 

2 more replies
Relevance 56.58%

I upgraded from Vista to W7 Home Premium about 3 months ago and in the last few weeks my PC is showing constant HD activity (not flickering, on permanently). This causes all programs to regularly show "not responding" for up to a minute before coming back. Everything is very very slow. My PC is a Dell precision 490 with dual processors so should be fast. Two 500Gb HD's, one for OS only. Both have plenty of space available.

I have checked defragmentation on the C: drive and this is 0% (runs every week).

I have turned off all I know but even with no applications running the disk light just keeps on going....help!!

Any suggestions?

C

Answer:Constant HD Activity

Right click on the task bar.
Click on the task manager.
open the performance tab.
Click Performance managerresource monitor.
Click the Disk Tab.
See what the root of all evil is.... Chances are here its not money

5 more replies
Relevance 56.58%
Question: Constant Activity

My hard drive activity light is constantly on. I don't even have any programs running, at least I don't think that could cause any problems. Why is this happening? The disk performance is rapidly degrading.
Logfile of HijackThis v1.99.1
Scan saved at 4:13:05 PM, on 7/15/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\BioALock.exe
C:\WINDOWS\system32\BioSAMon.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LAuthsnt.exe
C:\WINDOWS\system32\lrbsrvnt.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\XPAudio\csrss.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSGTAG\MSGTAG.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Skype\Phone\Skype.exe... Read more

Answer:Constant Activity

12 more replies
Relevance 56.58%
Question: Constant Activity

OK This is for my work computer. It has DSL with WinXP Firewall turned on and Zonealarm. Yet the activity light on the modem still blinks away for now reason. I have removed as much spyware as I could find with about 3 scanners. It has Norton Coporate Anti-Virus and was scanned yesterday. I ran netstat and this is all the shit I get. Can someone please explain to me what going on.

Active Connections

Proto Local Address Foreign Address State
TCP allentown:3053 dyn-83-155-55-63.ppp.tiscali.fr:microsoft-ds TI
ME_WAIT
TCP allentown:3153 dyn-83-155-123-73.ppp.tiscali.fr:microsoft-ds T
IME_WAIT
TCP allentown:3174 38-134-37-213.libre.auna.net:microsoft-ds ESTAB
LISHED
TCP allentown:3202 35.103.236.48:microsoft-ds ESTABLISHED
TCP allentown:3211 bzq-218-161-42.red.bezeqint.net:microsoft-ds ES
TABLISHED
TCP allentown:3212 155.198.121.100:microsoft-ds SYN_SENT
TCP allentown:3213 85-63-37-213.libre.auna.net:microsoft-ds SYN_SE
NT
TCP allentown:3214 77-63-37-213.libre.auna.net:microsoft-ds SYN_SE
NT
TCP allentown:3215 dsl-201-135-215-88.prod-infinitum.com.mx:microso
ft-ds SYN_SENT
TCP allentown:3216 81.218.227.0:microsoft-ds SYN_SENT
TCP allentown:3217 dyn-83-155-56-81.ppp.tiscali.fr:microsoft-ds SY
N_SENT
TCP allentown:3218 218-167-195-0.dynamic.hinet.net:microsoft-ds SY
N_SENT
TCP allentown:3219 dsl-201-135-40-1.prod-infinitum.com.mx:microsoft
-ds SYN_SENT
TCP allentown:3221 218-167-86-229.dynamic.hinet.net:microsoft-ds S
YN_SENT
TCP allentown:3223 dsl-201-135-123-199.prod-infinitum... Read more

Answer:Constant Activity

You might have stuff being redirected off your computer, Download HijackThis, just google for it, and post the results and I can take a look at them.
 

3 more replies
Relevance 56.58%

Asus A7N8X / Win ME / DDR / Athlon etc /CD Rom / CD-RW / My LED activity light is constantly blinking perhaps telling me that the 60 Gb is forever being addressed.History.....Fitted the new MB and reformatted the HD, did a clean load of Win98 followed by an upgrade to ME have no question marks in Device Manager, loaded up all programmes along with Roxio "Backup". Ran System Mechanic to clean up folder,files and registry. It appears to be running quite well but trying to get further programmes loaded into one of the two CD units is proving difficult because of this, so-called, HD activity.I've "Disc Checked" the HD and defragged it twice, I have no startup programmes running.Left the PC running on desktop with a screen saver for four hours...and still it's 'active'.Help please when convenient Kind regards DM.

Answer:Constant HDD Led activity ?

Have you tried alt-ctrl-del to see what processes are running?Also I downloaded a freeware prog the other day that "kills" all unnecessary running applications - you could try that from click hereSorry if I'm wasting your time - only things I could think of

10 more replies
Relevance 56.17%

hello, I have a lenovo v570 running windows 7 h.p 64bit.. 6gb ram I5-2450m cpu. I did a reload using the recovery disk. once the pc finishes the reload my hdd light is constant causing the machine to run @ a snails pace.. taking several minutes to open anything. I thought maybe it was the biometrics so I reloaded using a oem disk. same thing with the constant hdd.. open task manager it says 0-1 on the cpu but 28% on physical memory.. thanks for ant help I am @ a loss

Answer:constant hdd activity following a reload

Well...did you run a hard drive diagnostic?
 
Louis

7 more replies
Relevance 56.17%

My hard drive runs constantly. This has been happening for at least a year. IE hangs up frequently now. It had been happening for a few months but recently got worse. Another symptom I have is the special icons in website addresses are not there (ie default "e" for Yahoo, Google, etc.) or are the wrong ones completely. Also the little arrow icon for some shortcut links are weird (rounded blue squares with white double ">>" arrows in them). I suspect that I have a spam mailbot worm or some internet connection hijacking virus:confused.

I have been using Symantec products (probably not a good choice) for a few years and I upgraded to Norton 360 a few months ago. Quite some time ago I think I did something stupid. I allowed a registry change that SDHelper warned me about. The warning said something about Symantec, startup list, and author named Paul Collins. Since that time the Norton product icons appeared last or much later than the internet connection icon in the system tray.

I have done all the steps in chaslang's READ & RUN ME FIRST. Malware Removal Guide. The log files are attached. Any help by your expert helpers would be greatly appreciated.
 

Answer:Constant drive activity et al

Here is the MGlogs.zip attachment
 

10 more replies
Relevance 56.17%

I've searched around various places and I have found different problems with hard disk lights blinking and constant hard disk activity, but I have not found one that matches my exact problem. I have a fairly newish computer, with an Asrock x58 Xtreme 3 motherboard, Intel Core i7 930, and an OCZ Vertex LE SSD. When I first installed Windows, I disabled things like auto disk defragmentation, prefetch or superfetch (whichever the one is that most people disable when they have SSDs, I don't exactly remember), and so on. After this, my hard drive light would blink probably once per second.

I'm not sure what happened, I don't even know WHEN it happened, but my hard drive light started being on constantly. 100% of the time. The light doesn't even blink, it's just on solid. I went into Resource Monitor to try to track down which program was doing it. Sadly, the process that looked like it was the problem was "System". It is constantly reading and writing about 87,000,000 Bytes per second 100% of the time every day. I am worried this is going to ruin my SSD, and I would really like to figure out what is causing this problem. This screenshot shows my Resource Monitor. I ran a full computer scan with AVG and it didn't seem to find any problems. I was hoping someone could help me troubleshoot this. It didn't used to be like this. Thanks.

Answer:Constant 100% HDD Activity Light

No answer but have you seen this topic?
Your description of "System" being the culprit sounds similar.

Something is making ~15GB of .TMP files every few hours

Ap

6 more replies
Relevance 56.17%

Hi All, I have a problem with my newly installed SL500 laptop. The harddisk led blinks every second, even without any software open.I have used process explorer to find what executable is generating this I/O. Process explorer tells me it's caused by CSS authentication provider (cssauth.exe) and/or password manager (password_manager.exe). These are the executables that have their "I/O other" increase ecery second. Both installed by Lenovo by default. Is there any info on if this is a known problem, better yet, a solution? I'm running 32-bit Vista.Thanks, Erik

Answer:constant harddisk activity

I have some more info; I have looked on the internet and found several suggestions like disabling autorun on the dvd drive, or selectively killing processes. I have done so, but it doesn't seem to help. Even closing the two programs mentioned above just keeps the LED blinking every second. Yesterday evening I killed all processes in process explorer that didn't deny access, and even then the LED kept on blinking.It's propably not something critical, but it annoys me to constantly see it blinking, with no appearant reason. Erik 

1 more replies
Relevance 56.17%

Greetings,

I am new here and have a question. I have a PC with XPP Sp2 that was working fine for several years. Eventually I managed to hose XP up due to
program installs and un-installs. Upon reinstalling XPP I noticed constant ethernet traffic as soon as the integrated NIC was installed. Tried re-installing
the NIC with no change. Tried a differant NIC with the same results. Tried re-installing XPP again with the same results. MY DSL modem also indicates
the constant activity as long as the ethernet cable is connected. This is a new XPP install but I scanned the PC for viruses (Symantec) and none were
found. Does someone have an idea what might be the cause?

Answer:Constant network activity

Hit Ctrl+Alt+Del (Task Manager) and list the processes in order of CPU use, from highest (at the top) to lowest.

What process is using the most CPU Resources ?

Do the same thing for RAM.

11 more replies
Relevance 56.17%

Ok im on 56k and there is constant internet activity when i bring up the connection and when i look down at the little zonealarm icon. When ever I bring up zone alarm then thing up at the top that is blinking say Generic host process for win32 services. I think its slowing down my connection and giving me pinging problems in games, I tryed blocking it but then IE and msn messanger dont work. Thank you for any help.
 

Answer:Constant internet activity!!!!

Have you got any P2P apps open? These are a common problem to net activity, especially when uploading files.
 

2 more replies
Relevance 56.17%

I almost posted this last night(well this morning, I'm a day sleeper):
_______

I've searched high and low here, google, and all sorts of other tech guides for 2 days, and still can't find what I'm looking for, or what i've found I tried and nothing worked.

I got a virus/spyware a couple of days ago, it's my fault totally, and I knew the risks, but i've never had a problem this persistant before.

I run XP and for tools, I use AVG free, Spybot S&D(not the resident shield, that's too much protection for someone who likes to....fiddle with things...)Lavasoft, and DoctorWeb*Cureit at certain times.

No viruses found, or they were found and removed, repeated multiple scans untill everythign comes up clean, use a registry cleaner(easy cleaner, reg scrub-majorgeeks.com).

Couldn't reach google. Deleted the 4 or 5 entries in my Host file in system32/drivers/etc folder.
Can reach google now, as it was one of them.

All seems to be runing fine now, but my network icon(lower left corner by clock) is showing constant internet activity(except for exactly just now, go figure).

Used TCPview.exe to monitor what's going on, vast amounts of sites and IP's talking to my computer, and I mean VAST.

Find a good thick copy of the host file(or hosts, whichever it is) and that doesn't seem to help, so I take about 1000 entries from TCP view and add them to host file.

I'm still getting activity, but alot less varying websites a... Read more

More replies
Relevance 56.17%

I've been having this problem for at least a year and a half now. I hear constant HDD activity. When I leave the computer alone it'll just go CHH...CHH....CHH....CHH....CHH. It almost the seconds ticking by on a clock. When I'm using it it's basically just constant erratic drive noise. Sometimes it's directly linked to what I'm doing. I was moving an AIM window today and the hard drive was making noise in direct relation to my movement. It was almost like I was scraping the window across the desktop only the noise was my HDD. I could even scrape out little rhythms. Here's some info on the machine

Dell Precision 330.
P4 1.5 GHz.
500 MB RDRAM.
18 GB 15,000 RPM SCSI HDD
Win XP

I know it's a little low on RAM but it shouldn't have to be constantly accessing the drive even when idle. I've run Adaware and a virus scanner to see if there's some unwanted program in there but it's never turned up a solution. Any help would be greatly appreciated.

Scott

Answer:Constant HD activity - can't track it down

Welcome to TSF.

If you have a fast internet connection (broadband), run an online virus scan at TrendMicro. Make sure to select the Autoclean option. Otherwise, make sure your antivirus program has the latest definitions and run a full system scan.

Please download HijackThis. Create a folder at C:\HJT and move HijackThis.exe there. Run a scan and save the log file. Post the whole log file here. Do not fix anything since most of them listed there are harmless (some are system required). This program will help us determine if there is any spyware/malware on your computer.

7 more replies
Relevance 56.17%

Get a click and the HD activity light about every second.

I've seen this covered before and it's always explained away as being
caused by Vista services. But I've turned everything off, it even happens in Safe Mode.

DComLaunch is the top process accessing the hard drive via svchost. Apprently I don't really need it, but I can't disable it in services. Also there is a lot of data being written to c:/$LogFile. Another system process writing to the disk is just marked '-'.

Help please, it's really annoying.

Answer:Constant HDD activity in Vista

scan for malware etc

19 more replies
Relevance 56.17%

I have continuous Internet activity. It always starts the same way: info is sent for a few seconds followed by continuous activity back and forth at anywhere from 10K to 40K a second. I have windows update to notify me and my AV is up to date. Nothing else should be getting updates. The activity will continue for as long as I leave it connected (hours). Does not happen when in Safe Mode. I have tried Norton, spysweeper, Malwarebytes, Spybot S&D, and Ad-aware to name a few, but no luck. I tried System Restore, but no luck.

I noticed it after doing some online shopping for, of all things, toy trains.

Windows XP pro SP3. Motorola DSL modem with Link sys router. IE 7. I have one other computer connected to my modem and it is fine.

I do not have the reinstall discs for the OS.

Thanks.

Here is my DDS log:

DDS (Ver_10-12-12.02) - NTFSx86
Run by Barry at 16:33:37.93 on Thu 12/30/2010
Internet Explorer: 7.0.5730.11
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.1214 [GMT -5:00]

============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\Program Files\Norton... Read more

Answer:Constant Internet Activity

BUMP, please.

2 more replies
Relevance 56.17%

I have constant internet activity on my pc. My desktop widget and modem activity lights are always working. It's non-stop as long as my pc is on. I've scanned with Avira, Kaspersky, Sophos Anti-Rootkit and found nothing. Is there a way to learn whats going on?Here's my widget:

Answer:Constant internet activity

Welcome aboard Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsList content of HostsList IP configurationList last 10 Event Viewer logList Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download and install the latest version. * Once the program has loaded, select Perform quick scan, then click Scan. * When the scan is complete, click OK, then Show Results to view the results. * Be sure that everything is checked, and click Remove Selected. * When completed, a log will open in Notepad. * Post the log back here.Be sure to restart the computer.The log can also be found here:C:\Documents and Set... Read more

7 more replies
Relevance 56.17%

I have recently noticed that my network lights are constantly lit and when I do properties the traffic is flowing on this port eventhough I have no applications running.!
Does anyone know how I can tell which App or process is sending or receiving data.?
I have checked all the startups and run apps, even checked the run in the registry but to no evail.
 

Answer:Constant network activity on XP

7 more replies
Relevance 55.35%

maybe someone could help me...have only just started to notice this really but when my computer is on the hard drive activity light flickers on about twice a second no matter how long the computer has been on for and am sure that it is affecting gameplay...have asked in other forums but people seem to think that i need more ram..i currently have 512 mb ddr ramhave checked task manager but it says that nothing is runningany help or comments would be very much appreciated as i dont know where to look to find out whats causing the hard drive to do this.many thanks all

Answer:constant hard drive activity

You don't have something like Norton Goback installed, do you?I did, but decided to get rid of it afetr a while because of the constant disk activity.

5 more replies
Relevance 55.35%

Greetings, all!
I'm a computer technician in Ohio. I deal with the daily grind of fixing computers five days a week, but this one is puzzling me.
I've found a couple things that annoyed me so far and turned them off (LLMNR, since IPV6 doesn't exist on my network... yet. For example, anyway.) However... I don't care what I'm doing, I can be sitting without anything open, just on my desktop, and my HDD activity light is spazzing out 24/7.
 
Now, I deal with malware daily. I'm nowhere near the expert, but this was a fresh installation of Win 7 Pro a couple months or so ago, all data scanned as it was going back. Constant drive activity light flashing. I want to resolve this ASAP.
 
What I've got:
Board: Biostar MCP6P M2+ Ver. 6.x, AM2+
Processor: AMD Phenom 9550 quad-core 2.20 ghz
RAM: 4GB Kingston HyperX DDR2-800
HDDS: Primary: Hitachi Deskstar  500GB (This is getting cloned to a better drive soon, so long as cloning will work)
           Secondary: Western Digital Caviar Black 1TB newly purchased less than two months ago.
           Tertiary:  Maxtor 200GB IDE drive (this will soon be replaced with another WD SATA DRIVE, sooner if this one is my issue)
 
I've done some looking and found a few small issues, but nothing that points me in the right direction.
 
As far as security software, Kaspersky Internet Security 2013.
Browsers: IE 9, Chrome, Firefox, Opera, Safari (I'm working on a... Read more

Answer:Hard drive activity is CONSTANT!

Perhaps Process Monitor can help narrow down the problem.

1 more replies
Relevance 55.35%

Hi My computers harddrive is pretty much contantly running when I look at resource monitor it shows that sometimes even 100% of hardrive activity is goin full blast when my pc is just sitting at desktop with no big programs even running I downloaded hijackthis and have the log but I don't know what to make of it if anyone who knows could take a lok id really appreciate it thx .

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:24:39 PM, on 10/21/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18975)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\WINDOWS\RtHDVCpl.exe
C:\WINDOWS\System32\wpcumi.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\System32\perfmon.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Falzone.Falzone-PC\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Pa... Read more

Answer:constant harddrive activity, hijackthis log

Hello FalzoneWelcome to BleepingComputer ==========================Download OTL to your desktop.Double click on OTL to run it.Check the boxes beside LOP Check and Purity Check.Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.====================Please download Rootkit Unhooker and save it to your desktop.Double-click RKUnhookerLE.exe to run it.Click the Report tab, then click ScanCheck Drivers, Stealth Code, Files, and Code HooksUncheck the rest, then click OKWhen prompted to Select Disks for Scan, make sure C:\ is checked and click OKWait till the scanner has finished then go File > Save ReportSave the report somewhere you can find it, typically your desktop. Click CloseCopy the entire contents of the report and paste it in your next reply.Note - You may get this warning it is ok, just ignore it."Rootkit Unhooker has detected a parasite inside itself!It is recommended to remove parasite, okay?"

1 more replies
Relevance 55.35%

I know this has been posted time and time again, but I have not found any solution to my problem. I do not know which drive it is, but one of them (I have 4) will sometimes spike to 100% activity, and the only way to resolve that is by rebooting.
Now I know that doesn't sound so bad, but when you're in the middle of photoshopping something, doing some homework, or gaming, it gets to be a real pain, very quickly.
I can imagine that having a hard drive at 100% activity for hours on end will take a very large toll on its life span.

Here are my system specs:
ASUS M3A32-MVP Deluxe motherboard
AMD Phenom x4 9950 BE 2.6 GHz
2GB DDR2 1066 MHz RAM
160GB HDD
250GB HDD
300GB HDD
500GB HDD

I read on another thread that indexing or scheduled defrags may be the cause, but I have already disabled index since I installed 7. My defrags are scheduled for 1AM every wednesday (but that has long passed, and I have already had to reboot).
I also read somewhere that it could be a missing AMD processor driver, which indeed I had no luck finding.

Please guys, I don't know why it's doing this, and I'm fed up with rebooting every 2 hours.

Answer:Constant 100% Hard Drive Activity

try opening up "task manager" on the top choose the process tab, and then click on the "cpu" column, and see what is taking most of your cpu.

9 more replies
Relevance 55.35%

over the last week or so, the activity lights on our modem are almost always flashing and the microsoft resource monitor definitely indicates some kind of network/internet activity is occurring and that's the case even when no one is using the laptop; I'm not entirely sure what to make of it, though. I think it started after I downloaded and installed the latest windows updates; uninstalling the ones that could be uninstalled hasn't helped. and I've done full scans with both windows defender and malwarebytes and they did not find anything
any help provided will be totally appreciated
thanks

Answer:there's almost constant internet/network activity

You may have a fair number of programs constantly checking for updates, "phoning" home, etc.  I think System Internals and Windows OS has a utility that can give you an idea of what is running; can't remember the name.

8 more replies
Relevance 55.35%

Just installed Xp onto a new hard drive and now the drive is constantly working. Possibly after Critical updates have been downloaded. I have run Anti virus and Spyware nothing showing there.Found this in Task manager - "system idle process" showing 99%I've a look on tinternet and this came up click hereSome people say it's normal but can anybody explain the constant disk activity?Thanks Ps Sorry for looking elseware for help.

Answer:Constant Hard drive activity!!!!!

System idle process is a special process which just uses up spare time on the CPU. It doesn't do anything, so it is unlikely that this is the source of the problem. Could be something like antivirus running a background scan or something like that. Norton and Sophos are particulary bad at continuous disk usage.HTHChris

8 more replies
Relevance 55.35%

can any one help I dont know if this is normal or not but my hard drive light flashs about once a secound and sometimes stays on for longer periods I also notice the floppy drive light is on at times even when the system is idle with no programs runing. I am using window xp and have run a virus scan with the latest updates.

Answer:constant hard drive activity

Hi archerman .......what O/S and how much memory have u got?regardsobbit

10 more replies
Relevance 55.35%

Hi there,I'm having some recent trouble where my computer seems to have constant harddrive activity. I can't tell why its doing it and was hoping someone could help me see if its malware.DDS Below. Attach and GMER log attached (*NOTE* I ran GMER and the log was completely empty):The gmer link from the preparation link didn't seem to allow me to choose all the options. Only Services, Registry, and Files, So that may be why its empty?DDS (Ver_09-12-01.01) - NTFSX64 Run by Johnny at 12:55:34.38 on 13/03/2010Internet Explorer: 8.0.6001.18882 BrowserJavaVersion: 1.6.0_17Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.2.1033.18.4094.2226 [GMT -8:00]SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\nvvsvc.exeC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k secsvcsC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\system32\svchost.exe -k GPSvcGroupC:\Windows\system32\SLsvc.exeC:\Windows\system32\svchost.exe -k LocalServiceC:\Prog... Read more

Answer:Constant Harddrive activity (possible malware?)

Hi again,I think I figured out the noise problem. A hardware fan issue, but if someone does happen to take a look at these logs it would be appreciative to know what they tell.

4 more replies
Relevance 55.35%

My laptop has constant HDD activity whether I am simply browsing the internet or leaving the computer idle with no programs open. The laptop becomes extremely hot to the touch, especially where the HDD resides. I am able to rest the back of my hand on the area, but any hotter and it would be fairly uncomfortable. The laptop did not always operate like this. I disabled the indexing service in Vista, but this has not helped.

Thank you in advance for taking the time to look over my log files.

DDS:

DDS (Ver_09-05-14.01) - NTFSx86
Run by Mark at 3:21:13.93 on Tue 05/26/2009
Internet Explorer: 8.0.6001.18372 BrowserJavaVersion: 1.6.0_13
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.2046.894 [GMT -4:00]

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C... Read more

Answer:Constant HDD activity...please analyze my log files

Hello and to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.-----------------------------------------------------------We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, ... Read more

2 more replies
Relevance 55.35%

Does anyone know what causes constant network activity in Windows 7? I'm seeing what looks like constant pings that make the lights on my switches flash every few seconds. I think it has something to do with Windows 7 file sharing. Is there a service I can turn off to stop the network activity? Are there any tools I can use to determine where the network activity is coming from? Any help would be appreciated. Thanks.
 

Answer:Windows 7 constant network activity

Resource Monitor.
 

2 more replies
Relevance 55.35%

I have constant background internet activity that's all stemming from Generic Host Process for Win32 Services. It's actually stopped doing it for about the last 20 minutes, but before it was constantly active, both in and out. Now, the constant activity happened even when I didn't have a browser, or updates of any kind happening. The blocked intrusions count from Zone Alarm keeps going up pretty fast. So I thought I could post my log and see what's going on. I appreciate what you guys do here.

EDIT: And the activity started back up again.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:56:50 PM, on 4/13/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\System32\Drivers\WTSRV.EXE
C:\Program Files\VDOTool\TBPanel.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\carpserv.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Common F... Read more

Answer:Constant Unwanted Internet Activity

Welcome to the TSF.

Sorry for the delayed response. If you have not received help elsewhere and still need help please follow the instructions in IMPORTANT - Read This Before Posting A Log and post the two text files, main.txt and extra.txt produced by the Deckard's System Scanner (formerly Comboscan), as it has been a while since you posted.

1 more replies
Relevance 55.35%

Hello. My computer seems to always have hard drive activity even when doing nothing. I have defragged and also run spybot. I have also ran malwarebytes but found nothing. Could someone possibly take a look at my hijackthis log and see if there is something wrong causing the activity. IE8 and Firefox are very slow to open also. I have windowsXP and 512 mb of ram. Thanks so much

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:48:04 AM, on 3/17/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\anyone\Application Data\mjusbsp\magicJack.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Fi... Read more

More replies
Relevance 55.35%

Hi,

I installed Windows 7 RC. When ever I am booted into Win7 one of my hard drives (probably not system drive - sounds like my secondary storage drive) is constantly working. Not very much but still making sounds.

I have completely turned off indexation, there is no automatic defrag going on. I have set a constant size to the paging file and there is no antivirus activity going on. The hard drive is making noise even when the system is idle for a long time and also when I am using it.

The processes tab in the task monitor shows no process that is using CPU.

What can this hard drive activity be?

Thanks!

Answer:Constant hard drive activity?

Windows Search service perhaps?

9 more replies
Relevance 55.35%
Relevance 55.35%

The activity LED on both my router and my network modem are constantly flashing, indicating activity even when all my computers are off. I checked the router device list and I don't see anything unusual:

2 computers were connected when I took the screenshot, one through wireless, one through CAT5. vlan1 is the router right?

I have a Linksys WRT54G with Tomato Firmware v1.25, WPA2 encryption is enabled.
ISP is Shaw High Speed Extreme 15Mbps.

Whats going on with the activity indicator?
 

Answer:Solved: Constant Network Activity

8 more replies
Relevance 55.35%

Hi, I constantly have my network activity light lit and am receiving and sending data, how can I find out what program ot process is doing this.??
 

Answer:Constant activity on network connection

Do you a network packet sniffer or a personal firewall that logs all packets?
 

2 more replies
Relevance 55.35%

Just noticed one of my folders, running Ubuntu 5.1 (upgrading to 6.06 LTS as I type). The hard drive activity light has been going crazy for the last hour or so. I have not been using the computer, except for folding. It also seems 'sluggish' lately, so evidently the CPU is doing something. I checked the System Monitor, well, not sure what to look for there.

I did see one thing odd, at least to me, gam_server would change from sleeping to uninteruptable every few seconds. Being unfamiliar with Linux, what should I look for if the update does not solve the issue.

The computer is an AMD Athlon 2800XP, Abit NF7-s mobo, 512megs of RAM, 80Gig hard drive, ATI 9800XT video. I don't think it is a hardware issue, but never hurts to post the specs... No problems or errors previously, and the computer 'seemed' much faster yesterday. Any ideas?

E
 

Answer:Constant hard drive activity?

Fred_G said:





Just noticed one of my folders, running Ubuntu 5.1 (upgrading to 6.06 LTS as I type). The hard drive activity light has been going crazy for the last hour or so. I have not been using the computer, except for folding. It also seems 'sluggish' lately, so evidently the CPU is doing something. I checked the System Monitor, well, not sure what to look for there.

I did see one thing odd, at least to me, gam_server would change from sleeping to uninteruptable every few seconds. Being unfamiliar with Linux, what should I look for if the update does not solve the issue.

The computer is an AMD Athlon 2800XP, Abit NF7-s mobo, 512megs of RAM, 80Gig hard drive, ATI 9800XT video. I don't think it is a hardware issue, but never hurts to post the specs... No problems or errors previously, and the computer 'seemed' much faster yesterday. Any ideas?

EClick to expand...

Are you using Gnome or do you have a server installed with the folding software? Is the box used exclusive for folding?
 

6 more replies
Relevance 55.35%

For about the last week the computer has been working some of the time and others it has constant hard drive activity and is very slow to respond. I tried restoring to a earlier saved configuration but it only help for a short while.
No new applications or hardware have been added.
I ran the procedures outlined for the malware recovery and have attached the logs.
Hope someone can help.
Thanks in advance.
 

Answer:Constant HD activity and slow performance

Hi norton47,
Welcome to Major Geeks!

The problem you've described may not be malware. I have only glanced through your logs, but what I noticed is that you had a lot of cookies and I expect there were a lot of temp files in your computer before you ran CCleaner. Also you have a lot of programs from McAfee and HP which use a lot of resources. There is also the possibility that your harddrive has a bad sector, or that there is a problem which is causing Dr. Watson to run. I would like to ask that you post in parallel in the Hardware Forum and or Software Forums and describe the kind of symptoms you're having. I'll check your logs more thoroughly for malware and using the different expertise of each forum, I you should get the help you need. You may want to make sure you have your data backed up in case there is a problem with your harddrive.

abri
 

3 more replies
Relevance 55.35%

I installed vista on my machine and at boot when you first reach the desktop, the hard drive just goes on and on. And then through out, its constantly access it not a solid just here and there. Is there something its doing that i could just turn off? Heres my specs

Amd 5200+
2 gigs of ram
abit kn9 board
nvidia 7900GS
36GB raptor
 

Answer:Constant hard drive activity

Oh dear...are people allergic to the Search button?

This is perfectly normal for a new install of Vista. It's indexing your drive and optimizing it, and should go away in a week or so.
 

5 more replies
Relevance 55.35%

Hey,

Hoping you can help me figure this out. This machine has constant HDD and internet activity, and as a result, loading of every program and browser is verrry slow. I was chalking it up to an older install of Windows, but I would like to confirm that there is no malicious activity going on with this machine.

Anything you can do to help me confirm if this machine has malware or a virus, or how it can be cleaned up/sped up without a clean install of XP is much appreciated. Thank you in advance for your help!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:28:16 PM, on 02/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\Intel\Wi... Read more

Answer:Infected? Constant HDD and Internet Activity..

Hey - following up on this one - can I give more info to get help on this? I'd like to avoid a clean install of XP on this machine if I could, which is the only thing I can think would make it fast again. Thanks!
 

2 more replies
Relevance 54.94%

Not the virus one!

If I open up task manager and enable the I/O columns, this Lsass.exe keeps reading and writing onto my hard drive. What's causing this and is it normal? I have Windows xp SP2. I'm always been checking for viruses and spyware, so i'm positive some windows service is writing some logs or doing something! Am I the only one?!
 

Answer:Lsass.exe constant hard drive activity!

I had a similar problem on a laptop at work. The user was having the internet sessions hang; seemingly going no where. Then the machine would get really slow for everything.

Take a closer look through the Task Manager Processes to see if you can find a Webassist. If you see it running after you've connected to the internet this may be what is happening.

The real problem for the machine referrenced above was Webassist which would start chewing up CPU time any time IE (internet) was started. You can end Webassist and Lsass will continue to chew away at the CPU time. Webassist is some spyware. You can run SpyBot (its freeware) and it may correct the problem. I finally just rebooted the machine, immediately went to webassist and renamed it something else. Poof, problem gone. There doesn't seem to be any issues without Webassist enabled and this user/machine doesn't need it for any programming, etc.
 

2 more replies
Relevance 54.94%

I have Bitdefender 2008 trial running and have used Uniblue SpeedupMyPC. Can anyone help me please? My pc stands in the living room and the sound of my hard drive is rather disturbing... Please find here my HiJackThis log:

Logfile of HijackThis v1.99.1
Scan saved at 21:01:41, on 9/11/2007
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16546)

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\CTHELPER.EXE
C:\Windows\System32\CTXFIHLP.EXE
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\Windows\CNYHKey.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\CTXFISPI.EXE
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc.exe
C:\Wi... Read more

Answer:constant hard drive activity driving me mad!!

I don't see any malware in your HJT log. You do have a lot of programs running in the background that could be started manually.
Check your enabled services (type services.msc in the run box, click ok) with the list Blackviper suggests:
http://www.blackviper.com/WinVista/servicecfg.htm

Rescan with HJT, check this item:
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

Close all windows except HJT, then click 'fix checked'. Exit HJT and reboot/restart your computer.
 

2 more replies
Relevance 54.94%

Hi guys, 
 
For ages now our internet connectivity has been incredibly unstable. Sometimes it works for a few days in a row and then some days I can barely keep a connection for 5 minutes before I have to reset everything again. We've had this with several different modems and routers, and yesterday we got a new one from Ziggo. Currently I am the only one connected to our router/modem, aside from an Ipad and a printer.
 
Currently I am only using Chrome and Skype, but I can still see my total I/O speed go up to 200-300 kbps.
I tried to play 2 game of League of Legends earlier, where I (on good days) normally have a ping of up to 50ms, but today it kept going up and down between 50-ish and 1500-ish, making it just impossible to play (well). I don't really know if these are related, but I can't really find any reason why this is happening.
 
I am using Windows 7 Ultimate.
Our new modem is a new combined router/modem, Ubee evw321b.
 
Thanks in advance, 
 
Thibauld
 
.

Answer:Constant huge spikes in network activity

Hello,I will be helping you with your problems. Please be patient while I assist you.Some points for you to keep in mind while I am helping you to make things go easier and faster for both of us Please do NOT run, install or uninstall any programs,  unless instructed to do so. We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.    Please do not attach logs or use code boxes, just copy and paste the text. Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.    Please read every post completely before doing anything.  Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.    Please provide feedback about your experience as we go.  A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous p... Read more

16 more replies
Relevance 54.94%

Hi everyone,

I'm posting because I have a strange problem with windows 7 in recent days. I have a NAS on my network (D-link 323) and recently windows is constantly transferring either to or from it. I'm not sure what's going on and the level of utilization seems to vary. I've included a screenshot of resource monitor which shows that it's a system process transferring to the NAS. Any ideas would be much appreciated because I'm not sure how to go about finding out what's causing this problem.

Thanks for your help!
Sano

Answer:Unwanted Network Activity - Constant Usage

Sidebar.exe has to do with Windows' gadgets. Any gadgets running?

6 more replies
Relevance 54.94%

I just bought a new computer and installed a graphics card for it(Ati Radeon X1300). I installed Norton Systemworks 2006 Premier. The hard drive has almost constant activity, but no apparent reduced performance. Any ideas?
 

Answer:New computer, constant hard drive activity

12 more replies
Relevance 54.94%

Not sure if I have a spyware/virus issue or just a HD that's on its way out, but recently the HD light has been on constantly and or near constantly and the response time is terrible. Twice I waited 10 mins or so and finally did a hard reboot. I run Norton 360 but it hasn't detected any threats. I ran a defrag and that seems to have helped minimally but I wonder if something has intruded my system.Attached is my hijackthis log file which I just ran.Thanks in advance for any advice you can offer.

Answer:constant HD activity, slow response time

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

11 more replies
Relevance 54.94%

Hi folks. My hard drive appears to be working almost constantly. I have cleaned the pc with ccleaner, defragged and Malwarebytes reports no infections. Any help is appreciated!

Answer:XP SP3 Hard Drive Light indicates almost constant activity

1) Does this happen only shortly after boot or all the while the system is up?
2) What is new or different since the last time everything worked properly (ie, new hw, new sw, virus, error, etc)?
3) Open Task Manager to the Processes Tab and sort on the cpu column with highest usage at the top. Which process is using the cpu cycles?

40 more replies
Relevance 54.94%

Hello everyone!

I've got an issue with my computer that has made it pretty painful to shutdown/restart. The issue that I have is constant drive activity on the primary drive that lasts up to 10 minutes after startup. I timed it this morning and here's the breakdown:

Startup ~> Windows logo: 17 seconds
Win Logo ~> Desktop: 1:29
Desktop ~> Idle drives: 9:14

So all told, I'm almost 11 minutes to idle drives.

When I say constant drive activity, I really mean that in the most severe sense: the primary drive is running so much that trying to start an app takes a very long time. I started the task manager for the following screenshot and it took almost a minute to bring it into view after starting it.

Here's my taskmanager and resource monitor:

Could someone help me figure out a way to get the PC to the point that it's usable in less time than it takes to cook dinner(my dinners are simple). I'd love to have the computer start up and be able to use it in a minute or so, even if it's not completely up to speed.

Thanks for your time!

Answer:Prolonged constant drive activity on startup

Hi, start with a couple of simple tests on your disk (what sort of disk is your system disk? SSD? HDD? SSHD?)

Download these two free programs
CrystalDiskinfo - SMART params check
CrystalDiskMark - benchmark

(easy to find)

Run each, and post a screenshot of each (use the icon above your text to the left of the video icon 'Insert Image').

If your disk read-write speed is degraded, that could cause such problems.

If that's not so, then please
a. try booting to Safe Mode and report how that behaves
b. do a clean boot, and report how that behaves
Perform a Clean Boot in Windows 10 to Troubleshoot Software Conflicts
1st part only.

7 more replies
Relevance 54.94%

I noticed my problem this morning, and have looked around the net to try and solve it as I have in the past, but I can't seem to fix it this time. I will include a HiJackThis log with this posting and hopefully someone will see something that doesn't belong.I did update my BitComet program last night, but have been running the older version for years with no problems. I have an HP Laptop running win xp SP3 Home Media Center edition. I really hope someone can get to the bottom of this... also running a ad-aware check right now.Here is teh Hijackthis log... if its helpful.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 1:12:05 PM, on 8/3/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware\AAWService.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\ehome\ehtray.exeC:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\Program Files\AVG\AVG9\avgwdsvc.exeC:\WINDOWS\eHome\ehRecvr.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\WINDOWS\eHome\ehSched.exeC:\Program Files\HP\Qui... Read more

Answer:Constant activity on LAN icon in system tray.

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

5 more replies
Relevance 54.94%

I finally had to set up a dual boot with Ubuntu so that I could browse the net in peace. The constant clicky-clack of my hard drive drove me nuts. Windows lately has not given it a rest. Ubuntu on the other hand hardly ever causes overuse of the hard drive. Windows needs to get a handle on this problem..

Answer:No relief from constant hard drive activity

"It is not a bug, it is a feature."

Seriously, Windows has many tasks to improve functionality, which cause HDD activity, like indexing, superfetch, cortana/search, windows defender, smart filter, not to mention various logging being sent to MS to improve user's experience. You have to customize it the way you want it, like in Ubuntu, mine Windows is calm.

3 more replies
Relevance 54.94%

I have a problem caused by constant hard drive activity, and, after some research and work on my part, along with some reading, here is what I learned.

First, I ran Ad-Aware, then Spybot, then I went to TrendMicro for a free online scan, then Symantec. I run NOD32 from Eset as my scanner. None of these solved the problems mentioned, although some minor cookies were found. I noticed this problem after installing a Blackberry Storm, but I'm not 100% sure this was the root cause. Anyway, I changed phones again, and installed Mobile Sync 6.1 for this, and removed the Blackberry software, but the problem continued. I then did a system restore, and at this point, the problem disappeared, until the first time I connected the new phone, a HTC Touch Pro. At this point, the problem started again. Finally, the problem did not occur in Safe Mode.

I will attempt to describe the problem in some detail, at this point. The constant disk access would cause the computer to lose focus whenever it hit the harddrive. What this meant for me was every time I would try to access a file located in the All Programs folder off the Start button, the list would disappear. If I opened the Control Panel in the Start list, which on my computer is set as an expansion folder, the open list would "blink" on and off constantly, but I could access it. As to typing anything into the Run Program screen, I too would get about two to four letters typed, then the flicker would happen, and the letters I... Read more

More replies
Relevance 54.94%

Hi everyone.

I've been fighting with this issue for what seems like forever at this point. I've been able to get by ignoring it or trying occasional tweaks, but after having it crash multiple times during my conquest of northern Europe in CK2 as the Empire of Scandinavia, well... My patience is shot.

These BSOD's tend to arise from ntoskrnl.exe, with the usual BCC being 3b or 1e. They can happen while I'm just using the Internet, they can happen when I'm playing CK2... Really any time my computer decides it's time to shit the bed. I've not been able to identify the underlying cause as it happens so randomly.

Here are the steps I've taken to try and resolve this:Downgrade driver from latest to 314.22 (read somewhere that it's more stable for my graphics card)
Update NIC and wireless adapter drivers (had earlier issues with the network .sys)
Run disc checks and Memtest, disc check found a few errors, Memtest was clean.
Run Malwarebytes and Spybot in regular and safe mode, completely clean
Upgraded my CPU cooler to the Coolermaster EVO 212 (this was mostly done because the stock was just crappy)
Reset BIOS values

I'm just completely stumped. Please let me know if I can provide any further information; I would really love to get a definite answer or to have someone more experienced look over the logs to see if they can spot any issues. Whoever resolves this for me, the next child born to my dynasty will be named after you in-game (and I will post a screenshot to prove ... Read more

Answer:Constant BSOD during any activity, typically with ntoskrnl.sys

Had another one last night, uploading the latest Diagnostic Tool report.

3 more replies
Relevance 54.94%

Hi There,

I'm rather worried that my laptop has been "got-at". The Belkin router has an LED which flashes constantly indicating traffic (I presume); it's the one associated with the channel to which the laptop is connected, and it flickers away all the time. I'm getting paranoid wondering to whom it may be chatting.

I've noticed that coincident with this activity is a file (PFIREWALL.LOG) which is constantly being updated, and its contents are of the following form:

2008-01-03 05:38:03 OPEN UDP 192.168.2.2 24.87.165.142 56168 60313 - - - - - - - - -
2008-01-03 05:38:03 OPEN UDP 192.168.2.2 84.211.9.251 56168 9213 - - - - - - - - -
2008-01-03 05:38:05 OPEN UDP 192.168.2.2 125.27.73.45 56168 8345 - - - - - - - - -
2008-01-03 05:38:08 OPEN UDP 192.168.2.2 121.23.89.192 56168 11381 - - - - - - - - -
2008-01-03 05:38:08 OPEN UDP 192.168.2.2 140.135.254.9 56168 15352 - - - - - - - - -
2008-01-03 05:38:08 OPEN UDP 192.168.2.2 71.123.210.223 56168 26749 - - - - - - - - -
2008-01-03 05:38:10 OPEN UDP 192.168.2.2 99.244.77.88 56168 24869 - - - - - - - - -
2008-01-03 05:38:11 OPEN UDP 192.168.2.2 58.209.158.39 56168 10849 - - - - - - - - -
2008-01-03 05:38:11 OPEN UDP 192.168.2.2 220.191.23.140 56168 25598 - - - - - - - - -
2008-01-03 05:38:12 OPEN UDP 192.168.2.2 222.20.224.107 56168 16001 - - - - - - - - -
2008-01-03 05:38:14 OPEN UDP 192.168.2.2 89.103.133.137 56168 13171 - - - - - - - - -

I have also noticed that the "used" level of my har... Read more

Answer:Constant Router/Hard-Drive Activity

Please download and run HijackThis, available here:
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis

And copy and past the log produced here. Someone with a golden shield will have to help you out.

Do you run any peer to peer file sharing program ?
 

3 more replies
Relevance 54.94%

Hello guys, For about a week now I have searched through endless forums looking for an answer... but to no firm conclusion.Problem:On startup, I have constant hard drive activity. The desktop does load eventually but is so unstable I haven't a clue what to do. It works perfectly in safe mode, so it is obviously nothing to do with core drivers etc.DDS.txt log ______________________________________________________________________DDS (Ver_10-03-17.01) - NTFSx86 NETWORK Run by Euan at 15:10:26.25 on 01/06/2010Internet Explorer: 8.0.7600.16385Microsoft Windows 7 Ultimate 6.1.7600.0.1252.44.1033.18.1012.624 [GMT 1:00]SP: Spybot - Search and Destroy *enabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k RPCSSC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k LocalServiceC:\Windows\system32\svchost.exe -k NetworkServiceC:\Windows\system32\svchost.exe -k LocalServiceNoNetworkC:\Windows\Explorer.EXEC:\Windows\system32\ctfmon.exeC:\Program Files\Trend Micro\H... Read more

Answer:On startup, constant hard drive activity

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

3 more replies
Relevance 54.94%

Does anyone have insight into why drive avtivity light is flashing about once per second when no prgrams are running. How do I find the culpit, I've been running Linux for the last 10-15 years so I'm sure what to look for. I've had this unit for about 3 weeks now and am ver y happy so far. Any suggestions would be appreciated,   Thanks, Bob

Answer:4313/win7 constant drive activity

Watch the Disk tab under Resource Monitor, that'll help you pin down which process is causing disk activity.Sometimes it'll be something unhelpful such as System or one of the svchosts, in which case you might need to use Process Monitor.

1 more replies
Relevance 54.94%

does having raid 0 (data striping) mean that the hard drives run constantly (light and noise every 3seconds, since forever)?
 

Answer:constant hard drive activity and raid 0

First and formeost, it could be nothing; Windows is most likely moving apps around, usually when idle, so if you notice hard drive activity while your doing nothing, then yes it is normal.

I was told you could disable it with Powertoys, but I can not confirm this. If you use XP and want to tinker, we zipped all the toys up: http://www.majorgeeks.com/Microsoft_Windows_XP_PowerToys_d710.html

Drive indexing could cause this as well, if you dont use search much disable it by right clicking a drive or managing its service. Frankly, I dont really think this would cause it constantly, but i disable it for performance because I dont use search.

Finally, we can go old school and blame malware, but you should know if that is a risk or not.
 

3 more replies
Relevance 54.12%

Hello,
 
I've tried all the methods I am aware of to remove the bad guys from my system, but I suspect there are some remaining (rootkits?) that are causing the HDD to have constant activity.  No errors reported by the OS (win7/sp1).  The HDD can be seen/heard doing its thing constantly, and the system is quite slow.
 
I would give more info on the bad guys that were detected by MBAM, MSE, HitmanPro, et al, but I deleted the logs when cleaning up the system.  Every tool I've used has detected something, but the system still spins up the HDD to constant activity about 5 minutes after booting up.
 
Thanks in advance for the help.
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-06-2015 01
Ran by SKYLINE (administrator) on SKYLINE-PC on 02-07-2015 13:38:16
Running from C:\Users\SKYLINE\Downloads
Loaded Profiles: SKYLINE (Available Profiles: SKYLINE)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Andrea Electronics Corporation) C:\Program Files\Re... Read more

Answer:HDD activity constant, bad guys detected but unsure of removal

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below.

start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-14775525-2439065268-141108290-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-14775525-2439065268-141108290-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled
ProxyServer: [.DEFAULT] => http=127.0.0.1:51185;https=127.0.0.1:51185
cmd: ipconfig /flushdns
URLSearchHook: HKLM-x32 - (No Name) - {9dbb9aeb-5a16-4989-a66f-c0f1c909d647} - No File
URLSearchHook: HKLM-x32 - (No Name) - {54d0da58-64e7-4408-be1f-72659f70fcbe} - No File
URLSearchHook: HKLM-x32 - (No Name) - {f7e4b48a-9940-48d8-a732-246a2fdb7b40} - No File
URLSearchHook: HKLM-x32 - (No Name) - {9427041a-a8dc-4d06-9a68-93873486e957} - No File
SearchScopes: HKU\S-1-5-21-14775525-2439065268-141108290-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
Toolbar: HKU\S-1-5-21-14775525-2439065268-141108290-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
FF Plu... Read more

6 more replies
Relevance 54.12%

My computer has become very slow to the point where it is very frustrating to use.  Its been happening over the course of probably 6 months now but I have just been putting up with it.  There is almost constant HDD activity.  I'm still running XP but would like to see if I can fix this up one more time before I upgrade.
 
Thanks
Mike
 

More replies
Relevance 54.12%

Hey all,

So I've been having this problem where my computer is constantly laggy and I noticed that my computer tower is constantly "loading". I'm not sure if thats the correct term but the yellow light that shows processing activity is constantly blinking and you can always hear certain sounds coming from it, even if I'm doing nothing at all. Even at startup, I will constantly get clicking sounds from the tower and I noticed that a disk boot sound comes on once after I login to my user name. This had never happened before, and usually only get a disk boot sound directly after turning on the computer or when scanning for viruses. I dont know if its a virus or just a system problem but I remember getting viruses which will constantly cause activity the computer.

This started when my virus scanner McAfee expired. I uninstalled it and installed Trendmicro. I had to uninstall Spybot and Malwarebytes prior to installing Trendmicro but reinstalled it after. I also installed AV antivirus because I thought it was similar to Spybot and Malwarebytes where it would be like a secondary program I can use as backup. But when I installed AV, it started automatically and interefered with my Trendmicro and I had to do a bunch of things to uninstall it or disable it. On Trendmicros first scan, it found one virus, Malwarebytes found nothing and Spybot found a couple things. I had not run Spybot in a while though, but usually only get cookies. This time it found cookies but also ... Read more

Answer:Computer acting weird, slow and constant activity

Hello and welcome.

I think the issues stem from remnants of multiple antivirus programs.

For AVG

After uninstalling AVG from the Control Panel, also run the AVG remover from their site.

AVG - Download tools

direct link to the AVG Remover:

http://download.avg.com/filedir/util..._2011_1184.exe


For McAfee


Download the McAfee Removal Tool
http://download.mcafee.com/products/...tches/MCPR.exe


Double click on MCPR.exe to launch it, then Click Run. A window should appear and disappear, this is normal. A new window should popup and begin the uninstall. When prompted to reboot your computer type Y


After running both tools, post new DDS logs.

13 more replies
Relevance 54.12%

My motherboard came with a "fastlan" tool that is constantly showing my upload/download speeds over the network.
The computer is freshly built and the first things I did after getting windows 7 up and running were to install symantec and maleware bytes. I tried out zonealarm but it was freezing the system on boot so I just went with the windows firewall. I am also behind an airport express router.
I also installed peerblock more recently and block the microsoft list - so I could rule out background connections to the microsoft servers.

Still, im seeing constant network activity even when the system is idle after a fresh boot.
It isn't something that is only happening at the beginning - it is constant throughout the computer being on.
I do not run any stupid windows widgets or anything like that.

Here is my highjackthis log.

I am extremely grateful for any help/analysis/comments
-------------------------------------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:11:24 AM, on 8/22/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16448)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\ProtectionUtilSurrogate.exe
C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\XFastUSB\XFastUsb.ex... Read more

Answer:Constant network activity when idle - hijack this log attached

Can a mod please remove or lock this post?

I am not allowed to ask for help up here.
My apologies

1 more replies
Relevance 54.12%

Infection and Symptoms...

I was sent an .EXE file by someone I trust, it passed scans with AVG, Malwarebytes so I assumjed it was OK so ran it (Yes I know that was dumb).

.EXE opened a command window, asked for b.exe and msa.exe to be granted access to the web via ZoneAlarms (it was at this point I got suspicious, denied access and assumed I had a problem on my hands).

On rebooting a program called loginsys.exe again runs in a command window, and asks for access.
Actions taken...

I uploaded the .exe that caused the problems to www.virustotal.com and it reports back these results from the 5 programs (out of 41) that actually recognised it as a problem file...

DrWeb 5.0.0.12182 2009.08.02 - Trojan.DownLoad.41985
F-Secure 8.0.14470.0 2009.08.01 Suspicious -W32/Malware!Gemini
Kaspersky 7.0.0.125 2009.08.02 - Trojan.Win32.FraudPack.pvn
McAfee 5695 2009.08.01 - Generic Dropper.bw
Prevx 3.0 2009.08.02 - Medium Risk Malware Dropper

Also similarly tested the msa.exe file that was created by the installer...

McAfee 5695 2009.08.01 FakeAlert-EL
Microsoft 1.4903 2009.08.02 TrojanDownloader:Win32/Renos.JJ
Sophos 4.44.0 2009.08.02 Mal/EncPk-HW
The logonsys.exe appears to be clean, which struck me as odd - this file has only started asking for web access since this problem began, so is I assume linked to the problem in some way.

Following the checks detailed in previous post I ran Malwarebytes, log below....

Malwarebytes' Anti-Malware 1.39
Database version: 2547
Wind... Read more

Answer:Trojan.DownLoad.41985 - constant HDD activity - log attached

May have fixed it, certainly the constant HDD activity has stopped.Actions taken...Deleted AVG Free and Zonealarms, replaced with a-squared free scanner and Online Armour firewall.a-squared scan found and quarantined these files:C:\Program Files\Windows\patch.exe Trojan-Spy.Win32.Banbra!IKC:\Program Files\Acer Arcade Deluxe\PlayMovie\NavFilter\CLBDRENav.ax Trojan-Dropper.Agent!IKC:\Program Files\Acer Arcade Deluxe\PlayMovie\VideoFilter\CLVSD_HBD.ax Virus.Win32.Trojan!IKC:\Program Files\Acer Arcade Deluxe\PlayMovie\VideoFilter\cldorz.dll Packer.RLPack!IKCurrent HJT log...Logfile of Trend Micro HijackThis v2.0.2Scan saved at 15:50:14, on 04/08/2009Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18813)Boot mode: NormalRunning processes:C:\Windows\system32\taskeng.exeC:\Windows\Explorer.EXEC:\Windows\System32\mobsync.exeC:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exeC:\Windows\RtHDVCpl.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exeC:\Program Files\Tall Emu\Online Armor\oaui.exeC:\Users\Marc\AppData\Local\Google\Update\GoogleUpdate.exeC:\Program Files\Tall Emu\Online Armor�... Read more

3 more replies
Relevance 54.12%

I've always had a problem with Vista suddenly going haywire with hd activity, which can be quite frustrating if I'm capturing video from my tv tuner, but it's always only lasted a couple of minutes. From what I understand, it's from Vista's new defrag system, which defrags as you go along instead of waiting for it to get all fragmented before doing it (but correct me if I'm mistaken).

Suddenly as of two days ago, though, it's made the computer unusable when it's at its worst. My internal hd will go nuts, then suddenly my external will go nuts. Then it goes back to my internal, and back and forth; meanwhile I can't open any programs because the system resources are completely used up, and this lasts for hours. There are periods when the hd activity stops temporarily, but then it suddenly starts up again, with no open programs. When this happens, WMP takes two or three minutes just to open, and five to start playing something. Firefox just freezes up. I can't open up virtual machines because the system resources are being sucked up. One time I hit Ctrl+Alt+Del, and it went blank for about five minutes before giving me an error message. It's not always that bad, but it's off-and-on becoming worse and worse.

I checked for spyware and viruses and found nothing. I'm extremely reluctant to think that it's a hacker, because it doesn't happen when I boot XP.

Whatever it is, the Task Manager isn't pickin... Read more

Answer:Solved: Constant HD activity has made computer nearly unusable

6 more replies
Relevance 54.12%

There is something wrong with my DVD-drive after it comes out of sleep mode. I have the default power option of "balanced" which puts the computer to sleep after 30 minutes. However, when it wakes up, the DVD makes a sound like a disk spinning up (note: the drive is empty), and it keeps making the noise. Also the green light comes on. The only thing that I have found to stop the noise and activity on the drive is a reboot. I found this old post, Gotta say Im disapointed in the "Internet TV" - The Green Button, and it sounds similar, only my drive door isn't opening, just the noise (spin up?). However, I updated to my latest firmware, and that didn't fix it. I'm out of ideas. Do you have any?

The drive is a SONY Optiarc AD-7240S. Also, I thought this was just a bug in the RC 7100, but I've since updated to the official release, and it hasn't been fixed. Strange, especially that it seems like no one else is really experiencing the same thing when I've searched for fixes for the issue. Thanks!

Answer:DVD drive noise, constant activity after sleep mode

Install this bios ---> M3A78-EM BIOS 2002
Install chipset drivers ---> AMD Chipset Driver V1.3.0.49 for Windows Vista 32bit/Vista 64bit & Windows 7/7 64bit--(WHQL).

http://usa.asus.com/Product.aspx?P_ID=KjpYqzmAd9vsTM2D

9 more replies
Relevance 54.12%

WinXP, SP1 was fine until today when I installed 32 SP1 Windows updates. Now the hard drive shows almost constant activity, and Windows take a bit longer to start than before.

I ran a full system scan in Norton, which found adwares Crack.exe and NNEZTA388.exe, which it did not delete. I also ran AdAware and SpyBot, which turned up nothing.

What types of things can cause the hard drive activity? Where do I start to diagnose and fix the problem? I want to install SP2 and a wireless network adapter to go with my DSL.
 

Answer:WinXP Home--Constant Hard Drive Activity

jazzleighe said:



I ran a full system scan in Norton, which found adwares Crack.exe and NNEZTA388.exe, which it did not delete.

What types of things can cause the hard drive activity? Where do I start to diagnose and fix the problem? I want to install SP2Click to expand...

Crack.exe I think is "Reddw Worm" or variant, Look here:
http://www.auditmypc.com/process/crack-crack-exe.asp
Here some other related links:
http://www.comcast.net/qry/websearch?cmd=qry&safe=on&query=Crack.exe&x=14&y=5

The other NNEZTA388.exe Look Here:
http://www.2-spyware.com/file-nnezta388-exe.html

The first thing to do is remove the Bugs/Virus/Spyware/Worms that Norton couldnt!

If your going to install SP2, the Best way is starting with fresh install of Windows XP.

If your going to run wireless, Ya might want to beef if your security knowledge.

This Thread probably should be in the Spyware Section as it's the root of your problems, Maybe the Mod's will move it there
 

1 more replies
Relevance 54.12%

I have recently loaded bit torrent software, but although this is switched off and not running, my floppy drive activity led comes on every 20 seconds, and I can hear the PC constantly accessing in the background.
Anyone have any idea what is happening.
Chrissib

Answer:PC constant activity and floppy drive continuously being accessed

OP system?
sounds as if something is searching for files, it could be windows indexing.

1 more replies
Relevance 54.12%

My computer has become very slow to the point where it is very frustrating to use.  Its been happening over the course of probably 6 months now but I have just been putting up with it.  There is almost constant HDD activity.  Over the past couple of days I have uninstalled AVG Free virus scanner and installed Avast as I thought it was something to do with AVG as when I disabled it things were slightly better.  However it is back to its usual slow self.  I've also run a defrag on C drive which didn't really seem to improve anything.
When I look in Task Manager the file lsass.exe is always at the top with the most I/O reads and always increasing - not sure if thats useful info or not ?
 
I'm at a loss as to what to do next so really need some help please.
 
Cheers
Mike 

Answer:Constant Hard Drive Activity, computer very slow

First do a scan using MBAM Free and allow it to remove all that it finds. Malwarebytes Anti-Malware Free
In the settings, allow scanning for PUPS and Rootkits.
 
Run a scan using Windows Repair (All In One) Download and allow it run Check Disk as seen in Step 3.
Check all the options for repair.

30 more replies
Relevance 54.12%

Hello to all,
I have a problem w/ HD being active almost all the time... system has become very slow, especially browsing. Ran spyware removal tools & I was infected with something. (don't remember, but was removed, so claimed) I believe is was in my daughters music files I backed up to a secondary partition on my drive. I had scanned these files before back-up but appeared to be ok.
Before I format & install I want to try & clean the system.
Thanks in advance for all that help.

System configuration: Win XP Pro SP 2, Pentium 4 1.3 GHz w/512 MB RAM
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:01:35 AM, on 5/2/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Diskeeper Corporation\Diskeep... Read more

Answer:hard drive w/ constant activity - system slow

16 more replies
Relevance 54.12%

For quite some time now my computer has been running very slow and the HDD seem to constantly be busy for days on end.  Someone else on Bleeping Computer has had a quick look at it and has suggested I make a new post in here.
 
Many thanks
 
Here are the logs:
 
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-11-2016
Ran by Markwell Kennels (administrator) on MARKWELL-KENNEL (12-11-2016 14:12:11)
Running from E:\Cleanup2016
Loaded Profiles: Markwell Kennels (Available Profiles: Markwell Kennels & MB & Administrator & Guest)
Platform: Microsoft Windows XP Home Edition Service Pack 3 (X86) Language: English (United States)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(brother Industries Ltd) C:\WINDOWS\system32\brsvc01a.exe
(brother Industries Ltd) C:\WINDOWS\system32\brss01a.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Brother Industries, Ltd.) C:\WINDOWS\system32\Brm... Read more

Answer:Constant Hard Drive Activity, computer very slow

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/632048 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

38 more replies
Relevance 54.12%

For quite some time now my computer has been running very slow and the HDD seem to constantly be busy for days on end.  Someone else on Bleeping Computer has had a quick look at it and has suggested I make a new post in here.
 
Many thanks
 
Here are the logs:
 
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-11-2016
Ran by Markwell Kennels (administrator) on MARKWELL-KENNEL (12-11-2016 14:12:11)
Running from E:\Cleanup2016
Loaded Profiles: Markwell Kennels (Available Profiles: Markwell Kennels & MB & Administrator & Guest)
Platform: Microsoft Windows XP Home Edition Service Pack 3 (X86) Language: English (United States)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(brother Industries Ltd) C:\WINDOWS\system32\brsvc01a.exe
(brother Industries Ltd) C:\WINDOWS\system32\brss01a.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Brother Industries, Ltd.) C:\WINDOWS\system32\Brm... Read more

More replies
Relevance 54.12%

Win xppro, sp3. ie8

I REALLY WILL STOP SURFING PORN NOW

pops up new ie windows (not tabs) that link to random sites, often unknown search engines showing results for last string searched on google, often for other random things (news 6 live, adfat, sals barbershop). seemingly benign.

After some time of this, more serious infections occur, including antivirus soft, many others.

Malabytes will knock out what it brings in, but not kill the initial infection.

have run malabytes in safe mode, safe mode + neworking, and mutiple times after knocking out later more malicious infections in both safe mode and regular. Sometimes picks up a few stragglres, sometimes not. But in all cases I still have the original thing which pops up a new ie window to some odd thing and presumably opens the door for the rest.

Any help greatly appreciated, and, really, despite any other sex life to speak of, sad though that may be, I will leave the porn sites alone after this.

Answer:unknown infection, seemingly benign popups to unknown sites, followed by more extensive problems

Ok let's do this and see some logs please.*************************************>>>> Download this file and doubleclick on it to run it. Allow the information to be merged with the registry.RKill....Please download Rkill by Grinler and save it to your desktop.Link 2Link 3Link 4Double-click on the Rkill desktop icon to run the tool.If using Vista, right-click on it and Run As Administrator.A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.If not, delete the file, then download and use the one provided in Link 2.If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.If the tool does not run from any of the links provided, please let me know.Do not reboot your computer after running rkill as the malware programs will start again.^^If you get an alert that Rkill is "infected", ignore it. The alert is just a fake warning given by the rogue software which tries to terminate programs that try to remove it. If you see such a warning, leave the warning on the screen and then run Rkill again. By not closing the warning, this sometimes allows you to bypass the malware's attempt to protect itself so that Rkill can perform its routine. Rerun MBAM (MalwareBytes) like this:Open MBAM in normal mode and click Update tab, select Check for Updates,when doneclick Scanner tab,select Quick scan and scan (normal mode).After scan click Remove Selected, Post new ... Read more

15 more replies
Relevance 53.71%

For as long as I've had this machine (a little over a year) the HDD light is constantly going wild. (Erratic blinking, but ALWAYS blinking)

After purchasing it, I had to send it in for a warranty claim on a bad mother board.

Got it back, works fine. Used it for a few months, light still blinking.

I've always viewed it as bothersome, but nothing serious.

But now I can HEAR the hard drive making little noises. And I'm worried it's going to fail.

Disk check shows everything is OK. Ran Malwarebytes, Spypot S&D, and Avast! Virus Scan, no issues. I've defragged, tried disabling indexing and the DVD drive. Still blinking.

I've looked at Resource Monitor to see what is using the hard drive, and the list updates so often I can't even see what's doing what. It appears to be mostly activity from Firefox and system processes.

I'm all out of ideas. I'm thinking of upgrading to an SSD with a fresh Windows 8 install, but I don't want to do that and have the light STILL blink.

Could it be a still faulty motherboard? Does anyone have any ideas?

Answer:Constant Hard Drive Activity Light Gateway DX4860

  
Quote: Originally Posted by Barndtron


For as long as I've had this machine (a little over a year) the HDD light is constantly going wild. (Erratic blinking, but ALWAYS blinking)

After purchasing it, I had to send it in for a warranty claim on a bad mother board.

Got it back, works fine. Used it for a few months, light still blinking.

I've always viewed it as bothersome, but nothing serious.

But now I can HEAR the hard drive making little noises. And I'm worried it's going to fail.

Disk check shows everything is OK. Ran Malwarebytes, Spypot S&D, and Avast! Virus Scan, no issues. I've defragged, tried disabling indexing and the DVD drive. Still blinking.

I've looked at Resource Monitor to see what is using the hard drive, and the list updates so often I can't even see what's doing what. It appears to be mostly activity from Firefox and system processes.

I'm all out of ideas. I'm thinking of upgrading to an SSD with a fresh Windows 8 install, but I don't want to do that and have the light STILL blink.

Could it be a still faulty motherboard? Does anyone have any ideas?


I have four computers, none with an SSD, and everyone of them has almost constant HD activity; there are some pauses. I don't really know why the HD's are so busy, but I don't really care either.

HTH

3 more replies
Relevance 53.71%

Hi Peeps! (It technically is still easter time)
I was running a RAIO0 and ended up dropping that rig to go with a 10krpm baracuta drive because I was having the same problem as I'm about to explain to you now...

For whatever reason when you go to processes explorer constantly is counting "Page Faults" and is always 1 or 2 in PF Delta. I did a little research on that but from what I found it seemed to be more along the lines for NT Server. Anyway if I let my computer run (which I normally do), for days at a time the count gets ridiculously high. When I checked just before reboot I was up at 4million mark. So I rebooted and ran "HijackThis", Also I am running AVG (which runs on a nightly basis) and I have nothing in any of the logs. This is a pretty fresh install of xp - maybe 2 weeks old like I said I dropped the RAID0 setup because I thought that maybe a drive was going, now it doesn't seem like thats the case.

Any help would greatly be appreciated, I'm tired of watching the reflection of the blue harddrive light off of the wall.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:19:53 PM, on 3/25/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system... Read more

Answer:Constant HD activity, Process shows explorer.exe constantly counting.

Try running perfmon and see if that sheds any light on it....
 

1 more replies
Relevance 53.71%

Hello,
I have a HP G60-443CL Notebook, 64 Bit Vista, lately is been slowed down considerably and the fan is running constantly and the hard drive light is almost constant. When I open an application such as browser, after a bit the hard drive begins to run constantly and slows the computer down to a crawl. The fan is always running loud. I do not notice anything under Task manger that appears to be hogging memory, but I may not know quite how to look more extensively. It has become very annoying and quite a hindrance to my work environment. If I try to run more than one application, everything on the computer just slows down tremendously. Any help would be greatly appreciated.

thanks
 

Answer:Slow Computer, Hard drive light constant, fan activity

16 more replies