XP extremely slow. (Solved! Waiting on Panda CS answer)

[OldJoe]

Hey.

 

 

 

I got a problem with XP. It's terrible slow. According to task manager, my CPU usage is 50%:

 

[hide=][/hide]

 

[hide=][/hide]

 

 

 

It's been like this for about 10 days or so.

 

I haven't done anything that would make it so slow. I had a backdoor-virus on this partition before, but it's been removed and both the XP and Vista partition is clean. Scanned with Panda, Spybot: Search... and Ad-Aware.

 

XP was installed first, then Vista.

 

Logging into XP until those two screenshots were finished, 15 minutes elapsed!

 

I can access XP from Vista, and accessing files is no problems.. no 15min waiting. So the partition is ok. Which means it must be a problem that has occurred with XP.

 

I've also tried system restore, but with no luck. It fails to load older restore points.

 

C2D [email protected]... 2gb ram.

[swordfight]

You could try running the disk defragmenter.

[The Observer]

Try running the disk defragmenter and also do tests on your video card and other hardware to see if it's hooked up correctly, because since my video card is damaged, if I installed the full graphics card acceleration drivers, the CPU usage would be at 100%. However, if you don't know what to do, don't do it yourself, and this would be the very last thing you would do as there are other methods for diagnosing simpler problems.

[OldJoe]

Defrag haven't helped a bit, tried it a week ago - no result, tried it today - no result.

 

No, my hardware is working properly. As it's running fine with Vista.

[thrash-boy]

weird.

 

try running a virus scan in safe mode

 

make a hijack this log and post it here so someone who is good at it can look through it

[lordkafei]

Hit Ctrl-Alt-Del to bring up the Task Manager.

 

 

 

Then click on the CPU column twice to sort it. Tell us what process is using your CPU cycles.

[OldJoe]

Hit Ctrl-Alt-Del to bring up the Task Manager.

 

 

 

Then click on the CPU column twice to sort it. Tell us what process is using your CPU cycles.

 

 

 

If you click the two hidden pictures in my first post you'll see.

 

It's just the usual system idle process and the other one, TPSrv[Caution: Executable File] belongs to my Panda AV.

 

Hm, TPSrv on XP is 50 for the cpu, but 0 on Vista. So maybe i should try re-installing my Panda on XP.

 

 

 

@thrash-boy - i'll make a hijack log tomorrow.

[lordkafei]

Hit Ctrl-Alt-Del to bring up the Task Manager.

 

 

 

Then click on the CPU column twice to sort it. Tell us what process is using your CPU cycles.

 

 

 

If you click the two hidden pictures in my first post you'll see.

 

It's just the usual system idle process and the other one, TPSrv[Caution: Executable File] belongs to my Panda AV.

 

Hm, TPSrv on XP is 50 for the cpu, but 0 on Vista. So maybe i should try re-installing my Panda on XP.

 

 

 

@thrash-boy - i'll make a hijack log tomorrow.

 

 

 

My bad (I have *.photobucket.com blocked).

 

 

 

I am reading a lot of complaints about Panda Software slowing computers down, such as this exchange with Panda customer support.

[D. V. Devnull]

(Nevermind ... Missed the link in the post above until after I'd posted. -.- ~D. V. Devnull)

[OldJoe]

It's my third year running Panda software, i'm very satiesfied with the product and customer support (they gave me 1month free prolonged lisence on Panda 2008 when i was waiting for 2009 to come out). And i got Panda IS 09 on two other computers in this house, got no problems with them, one on xp one on vista. I got Panda on my vista partition too, and it's working good.

 

Maybe i've run into a bug that only happens to very few...

 

TPSrv shouldn't use 50%, so i think it's a seldom seen bug that i've encounterd. Since it's the only thing that i can think of that would cause this problem.

 

I tried to uninstall Panda earlier but got an error. At the moment when writing this, i've clicked on uninstalling once more... But the application haven't appeard yet, so i will see if i can manage to uninstall it. I will come with an update on how it's going if it succseeds.

 

 

 

I also got a problem with HJT, it hangs every time i run it on the xp partition. But the files that i see before it hangs, were clean and normal files.

 

 

 

If nothing of this works, i will ask about one other thing later.

 

 

 

Also, i got so frustrated waiting on the things on xp to load so i went to the store and bought snus (tobacco), been off it for 3 weeks... God damn it.

 

 

 

EDIT: Uninstalling - Waited for an hour now, it's stuck on circa 20%. But Panda icon is gone in the activity field. I'm restarting and i'll see if it's been properly removed (i guess not).

 

 

 

I must ask, can i change the primary partition from xp to vista?

[sloter]

You could just reinstall the OS. 99% of the time that fixes it. I don't know that it needs to be taken to that extent but you could have had it reinstalled already.

[OldJoe]

You could just reinstall the OS. 99% of the time that fixes it. I don't know that it needs to be taken to that extent but you could have had it reinstalled already.

 

 

 

Yes i know, but i've tried to avoid doing that.

[sloter]

You could just reinstall the OS. 99% of the time that fixes it. I don't know that it needs to be taken to that extent but you could have had it reinstalled already.

 

 

 

Yes i know, but i've tried to avoid doing that.

 

Yes i know and it isn't the funnest thing to do. Think about it though instead of sitting here try to find a solution your could just reinstall the OS and get it over with then just try to find a solution that you may never find.

[OldJoe]

You could just reinstall the OS. 99% of the time that fixes it. I don't know that it needs to be taken to that extent but you could have had it reinstalled already.

 

 

 

Yes i know, but i've tried to avoid doing that.

 

Yes i know and it isn't the funnest thing to do. Think about it though instead of sitting here try to find a solution your could just reinstall the OS and get it over with then just try to find a solution that you may never find.

 

 

 

I found out=)

 

It was the panda service that was messing up.

 

I deactivated panda, uninstalled, installed again (updated too); running as normal again.

 

I'm going to mail them about this and ask how this could have happend and if they've heard about it. I'll post the answer here when i get it from them.

 

 

 

Well, i might as well add the HJT log (got the full log), but i didn't see anything suspicious.

 

 

 

[hide=HJT - XP]Logfile of Trend Micro HijackThis v2.0.2

 

Scan saved at 00:37:30, on 2008-10-02

 

Platform: Windows XP SP3 (WinNT 5.01.2600)

 

MSIE: Internet Explorer v7.00 (7.00.6000.16705)

 

Boot mode: Normal

 

 

 

Running processes:

 

C:\WINDOWS\System32\smss[Caution: Executable File]

 

C:\WINDOWS\SYSTEM32\winlogon[Caution: Executable File]

 

C:\WINDOWS\system32\services[Caution: Executable File]

 

C:\WINDOWS\system32\lsass[Caution: Executable File]

 

C:\WINDOWS\system32\svchost[Caution: Executable File]

 

C:\WINDOWS\system32\svchost[Caution: Executable File]

 

C:\Program\Panda Security\Panda Internet Security 2009\TPSrv[Caution: Executable File]

 

C:\WINDOWS\system32\svchost[Caution: Executable File]

 

C:\Program\Lavasoft\Ad-Aware\aawservice[Caution: Executable File]

 

C:\WINDOWS\system32\spoolsv[Caution: Executable File]

 

C:\WINDOWS\system32\svchost[Caution: Executable File]

 

C:\Program\Delade filer\LightScribe\LSSrvc[Caution: Executable File]

 

C:\Program\NVIDIA Corporation\nTune\nTuneService[Caution: Executable File]

 

C:\WINDOWS\system32\nvsvc32[Caution: Executable File]

 

C:\Program\Panda Security\Panda Internet Security 2009\PsCtrls[Caution: Executable File]

 

C:\Program\Panda Security\Panda Internet Security 2009\PavFnSvr[Caution: Executable File]

 

C:\Program\Delade filer\Panda Security\PavShld\pavprsrv[Caution: Executable File]

 

C:\Program\Panda Security\Panda Internet Security 2009\PsImSvc[Caution: Executable File]

 

C:\Program\Panda Security\Panda Internet Security 2009\PskSvc[Caution: Executable File]

 

C:\WINDOWS\System32\svchost[Caution: Executable File]

 

C:\Program\NVIDIA Corporation\System Update\UpdateCenterService[Caution: Executable File]

 

C:\Program\Panda Security\Panda Internet Security 2009\pavsrv51[Caution: Executable File]

 

C:\Program\Panda Security\Panda Internet Security 2009\AVENGINE[Caution: Executable File]

 

c:\program\panda security\panda internet security 2009\firewall\PSHOST[Caution: Executable File]

 

C:\PROGRAM\PANDA SECURITY\PANDA INTERNET SECURITY 2009\WebProxy[Caution: Executable File]

 

C:\WINDOWS\Explorer[Caution: Executable File]

 

C:\Program\Java\jre1.6.0_07\bin\jusched[Caution: Executable File]

 

C:\WINDOWS\RTHDCPL[Caution: Executable File]

 

C:\WINDOWS\system32\RUNDLL32[Caution: Executable File]

 

C:\Program\Panda Security\Panda Internet Security 2009\APVXDWIN[Caution: Executable File]

 

C:\WINDOWS\system32\ctfmon[Caution: Executable File]

 

C:\Program\AceLogix\Free Ram Optimizer\fro[Caution: Executable File]

 

C:\Program\Delade filer\Ahead\Lib\NMBgMonitor[Caution: Executable File]

 

C:\Program\Delade filer\Ahead\Lib\NMIndexStoreSvr[Caution: Executable File]

 

C:\Program\Personal\bin\Personal[Caution: Executable File]

 

C:\Program\Panda Security\Panda Internet Security 2009\SRVLOAD[Caution: Executable File]

 

C:\Program\Panda Security\Panda Internet Security 2009\PavBckPT[Caution: Executable File]

 

C:\Program\Delade filer\Ahead\Lib\NMIndexingService[Caution: Executable File]

 

C:\Program\Customer\Wireless PCI_CardBus utility V1.01\Wireless PCI_CardBus utility V1.01[Caution: Executable File]

 

C:\Documents and Settings\Ägaren\Mina dokument\HiJackThis[Caution: Executable File]

 

 

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

 

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar

 

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program\Delade filer\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

 

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program\SPYBOT~1\SDHelper.dll

 

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program\Java\jre1.6.0_07\bin\ssv.dll

 

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

 

O2 - BHO: Windows Live inloggningshjälpen - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program\Delade filer\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

 

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program\Java\jre1.6.0_07\bin\jusched[Caution: Executable File]"

 

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL[Caution: Executable File]

 

O4 - HKLM\..\Run: [Alcmtr] ALCMTR[Caution: Executable File]

 

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program\Adobe\Reader 9.0\Reader\Reader_sl[Caution: Executable File]"

 

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32[Caution: Executable File] C:\WINDOWS\system32\NvCpl.dll,NvStartup

 

O4 - HKLM\..\Run: [nwiz] nwiz[Caution: Executable File] /install

 

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32[Caution: Executable File] C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

 

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program\Delade filer\Ahead\Lib\NeroCheck[Caution: Executable File]

 

O4 - HKLM\..\Run: [APVXDWIN] "C:\Program\Panda Security\Panda Internet Security 2009\APVXDWIN[Caution: Executable File]" /s

 

O4 - HKLM\..\Run: [sCANINICIO] "C:\Program\Panda Security\Panda Internet Security 2009\Inicio[Caution: Executable File]"

 

O4 - HKCU\..\Run: [CTFMON[Caution: Executable File]] C:\WINDOWS\system32\ctfmon[Caution: Executable File]

 

O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program\NVIDIA Corporation\nTune\nTuneCmd[Caution: Executable File]" boot "C:\Documents and Settings\Ägaren\Lokala inställningar\Application Data\NVIDIA Corporation\nTune\Profiles\osbootpf.nsu"

 

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program\Windows Live\Messenger\MsnMsgr[Caution: Executable File]" /background

 

O4 - HKCU\..\Run: [Free Ram Optimizer] C:\Program\AceLogix\Free Ram Optimizer\fro[Caution: Executable File]

 

O4 - HKCU\..\Run: [Creative WebCam Tray] "C:\Program\Creative\Shared Files\CamTray[Caution: Executable File]"

 

O4 - HKCU\..\Run: [steam] "C:\Program\Steam\Steam[Caution: Executable File]" -silent

 

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program\Delade filer\Ahead\Lib\NMBgMonitor[Caution: Executable File]"

 

O4 - HKUS\S-1-5-19\..\Run: [CTFMON[Caution: Executable File]] C:\WINDOWS\System32\CTFMON[Caution: Executable File] (User 'LOKAL TJÄNST')

 

O4 - HKUS\S-1-5-20\..\Run: [CTFMON[Caution: Executable File]] C:\WINDOWS\System32\CTFMON[Caution: Executable File] (User 'NETWORK SERVICE')

 

O4 - HKUS\S-1-5-18\..\Run: [CTFMON[Caution: Executable File]] C:\WINDOWS\System32\CTFMON[Caution: Executable File] (User 'SYSTEM')

 

O4 - HKUS\.DEFAULT\..\Run: [CTFMON[Caution: Executable File]] C:\WINDOWS\System32\CTFMON[Caution: Executable File] (User 'Default user')

 

O4 - Global Startup: Personal.lnk = C:\Program\Personal\bin\Personal[Caution: Executable File]

 

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_07\bin\ssv.dll

 

O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program\Java\jre1.6.0_07\bin\ssv.dll

 

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program\SPYBOT~1\SDHelper.dll

 

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program\SPYBOT~1\SDHelper.dll

 

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag[Caution: Executable File]

 

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag[Caution: Executable File]

 

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs[Caution: Executable File]

 

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\msmsgs[Caution: Executable File]

 

O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} (Creative Software AutoUpdate) - http://www.creative.com/softwareupdate/ ... TSUEng.cab

 

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 8015212906

 

O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program\Lavasoft\Ad-Aware\aawservice[Caution: Executable File]

 

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program\Delade filer\InstallShield\Driver\11\Intel 32\IDriverT[Caution: Executable File]

 

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program\Delade filer\LightScribe\LSSrvc[Caution: Executable File]

 

O23 - Service: NMIndexingService - Nero AG - C:\Program\Delade filer\Ahead\Lib\NMIndexingService[Caution: Executable File]

 

O23 - Service: Performance Service (nTuneService) - NVIDIA - C:\Program\NVIDIA Corporation\nTune\nTuneService[Caution: Executable File]

 

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32[Caution: Executable File]

 

O23 - Service: Panda Software Controller - Panda Security, S.L. - C:\Program\Panda Security\Panda Internet Security 2009\PsCtrls[Caution: Executable File]

 

O23 - Service: Panda Function Service (PAVFNSVR) - Panda Security, S.L. - C:\Program\Panda Security\Panda Internet Security 2009\PavFnSvr[Caution: Executable File]

 

O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Security, S.L. - C:\Program\Delade filer\Panda Security\PavShld\pavprsrv[Caution: Executable File]

 

O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) - Panda Security, S.L. - C:\Program\Panda Security\Panda Internet Security 2009\pavsrv51[Caution: Executable File]

 

O23 - Service: Panda Host Service (PSHost) - Panda Software International - c:\program\panda security\panda internet security 2009\firewall\PSHOST[Caution: Executable File]

 

O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - C:\Program\Panda Security\Panda Internet Security 2009\PsImSvc[Caution: Executable File]

 

O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - C:\Program\Panda Security\Panda Internet Security 2009\PskSvc[Caution: Executable File]

 

O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - C:\Program\Panda Security\Panda Internet Security 2009\TPSrv[Caution: Executable File]

 

O23 - Service: Update Center Service (UpdateCenterService) - NVIDIA - C:\Program\NVIDIA Corporation\System Update\UpdateCenterService[Caution: Executable File]

 

 

 

--

 

End of file - 9010 bytes[/hide]

[Sinkhan]

Since you seem to be happy with Panda, I'm not going to suggest getting AntiVir, even though it's cheap, has one of the best detection rates around, is light on resources, and has a paid version where 5 euros of every yearly subscription goes towards a charitable organization... :roll:

 

 

 

But blimey, looking at your HJT log and it seems Panda is running a huge boatload of processes which are probably chewing up resources anyway.

[D. V. Devnull]

<<<Quote Snip>>>

 

 

 

But blimey, looking at your HJT log and it seems Panda is running a huge boatload of processes which are probably chewing up resources anyway.

Yeah... :o ....... Even NOD32 doesn't have that many processes running! With NOD32, there's just two processes. The first is the core AV, and the other is the interface program... nothing else is needed. (Well, except the obvious case of its' hard disk files, but it loads those within the memory space of the processes.) And it still keeps the PC safe. :geek:

 

 

 

OldJoe, call me crazy/mad/nuts/etc., but you seem to be in need of a new piece of PC protection software. :|

 

 

 

~D. V. Devnull

[OldJoe]

The panda processes only uses about 40mb memory together. And no i won't get another AV at the moment, i'm happy with it and i got 11 months left on my license.

[D. V. Devnull]

The panda processes only uses about 40mb memory together.

Got ya beat there... NOD32 only uses 30 MB, 2.5 for the interface, 27.5 for the core with definitions loaded and everything else. :D

 

 

 

And no i won't get another AV at the moment, i'm happy with it and i got 11 months left on my license.

I don't suggest tossing away the remainder of the subscription anyway. Use it, then switch AVs after. :

 

 

 

~D. V. Devnull

[OldJoe]

I'm happy with Panda, ok? It's the first time something like this has happend with it, and i've had them for 3 years now.

 

Common sense is maybe the best protection. If you're torrenting and visiting dodgy sites, of course you'll get crap. I'm happy with this anti-virus, and no av is perfect, not even your nod32.

 

 

 

I'm waiting for their reply on my mail, usually takes 1-3 days.

[Doomster]

When you see 50% on a Dual core or even a Hyperthreaded P4, what it usually means is that something is actually on 100%, seen as 50% as it is bouncing between the two cores or threads.

 

 

 

Something can either be genuinely using 100% - some antiviruses seem to do this if a lot of files pass through the on-access scanner in a short time, or can be in a useless runaway state.

[OldJoe]

When you see 50% on a Dual core or even a Hyperthreaded P4, what it usually means is that something is actually on 100%, seen as 50% as it is bouncing between the two cores or threads.

 

 

 

Something can either be genuinely using 100% - some antiviruses seem to do this if a lot of files pass through the on-access scanner in a short time, or can be in a useless runaway state.

 

 

 

So it may be, but I'm sure that it's a bug that I've encountered. I've used Panda for a long time, and also other AV's - Never gotten this much usage from an AV.