Tech Support Guy banner
  • IMPORTANT: Only authorized members may reply to threads in this forum due to the complexity of the malware removal process. Authorized members include Malware Specialists and Trainees, Administrators, Moderators, and Trusted Advisors. Regular members are not permitted to reply, and any such posts will be deleted without notice or further explanation. Notice
Status
Not open for further replies.

Svchost and/or Explorer at 50% CPU = lags/freezes

5K views 38 replies 3 participants last post by  cyru 
#1 · (Edited)
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows XP Home Edition, Service Pack 3, 32 bit
Processor: Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz, x86 Family 6 Model 15 Stepping 13
Processor Count: 2
RAM: 2046 Mb
Graphics Card: NVIDIA GeForce 8600 GT, 256 Mb
Hard Drives: C: Total - 152586 MB, Free - 109055 MB; E: Total - 149158 MB, Free - 76016 MB;
Motherboard: Dell Inc., 0CU409
Antivirus: Avast Antivirus, Updated: Yes, On-Demand Scanner: Enabled

Hi there,

I hope someone can guide me a little on how to sort out my PC. I can't see a direct issue, i.e popups, alerts etc but I have noticed severe performance drops that occur leading to almost windows freezes, where I've had to "End Program" particularly in Windows Explorer itself. Some recent examples:

i.e I tried opening some mpegs and in WMP and it just hangs. Opening My Computer, and the searchlight/torch thingy kept going back and forth. Opened some document folders while I was copying others to a flash drive and everything started lagging so I ended that process and so it ended the Windows copying procedure too, as on the USB flash stick the last image was "half" a photo, i.e bottom half of photo was just all grey!

I also had a look on Sysinternals Process Explorer and took some screenshots but I don't understand what these threads/stacks mean anyway, I could select the thread and "Suspend" it then the CPU dies right down and the PC is responsive again. It's always a thread on either Svchost.exe or Explorer.exe. I don't understand what these process/threads/stacks mean but I took some screenshot so you can see with graphs too. As I'm typing my CPU fan is whirring up again, and this time I see it's Explorer at 50%...

I'm not sure exactly when the problems began but I do remember AVAST's real time protection alerting me to a URL:Mal about 2-3 weeks ago after visiting this webpage and then clicking the Submit button at the bottom:

http://www.insolvencypractices.org.uk/pages/contact.htm

This might be nothing to do with it, as I figured AVAST intercepted whatever it was anyway if was actually anything at all... I didnt think that site could be a danger :eek:

Anyway I've just an Avast Boot Time Scan - aswboot log attached.
Process Explorer screenshots too, one is after I clicked "Suspend" and you can see things seem to calm down...for a while anyway.

(I know know its an XP system...but I really wanna keep running XP, so perhaps on a side note, do you guys/gals know of some guide I could read on the safest way to continue using it... I read online that I'm best to uninstall Java altogether, and replace OE with Thunderbird as a mail client but there may be other vulnerabilities to counter? I disabled IE 7/8 years ago and switched to Firefox with ABP and NoScript!)

Thanks for any help forthcoming, cuz I know you guys are volunteers so I'm real grateful for your time!

Cy
 

Attachments

See less See more
4
#4 ·
I'm going to move this to the xp forum, as I'm not certain this is caused by a virus, and if it is, we can always move it back. Also, only about 1% of the people here are allowed to respond in the malware removal forum, as you have to be qualified.

thanks,

v
 
#7 ·
Tag: CNJTC3J
Service Code: 27545391487
It's a Vostro 200 (I added the gfx card later)
You have THIS Dell Vostro 200 desktop.
It shipped in January 2008 in the U.K. and was designed for Windows XP and Windows Vista 32-bit.
You should add and save this site in your browser's favorites/bookmarks list so you can quickly refer to it when needed.

You're running your desktop with only 2 GB of RAM, so you might consider adding another 2 GB and run it with 4 GB.

You've had your desktop for about 7-1/2 years, so I'm sure it's accumulated a lot of debris and some issues during that time.
Doing a clean reinstall and getting a fresh start would breathe new life in it, but most people don't like to or don't know how to do it.

Let's see what the startup list and services list looks like, then we'll go from there.
The following is my "canned instructions", but you can submit images instead if you want to.

-------------------------------------------------------------

Click Start, then type MSCONFIG in the search or run box, then press the Enter key.
When the small "System Configuration Utility" window appears, click the "Startup" tab.
Write down ONLY the names in the "Startup Item" column that have a checkmark next to them.
If the "Startup Item" column isn't wide enough to see the entire name of any of them, widen the column.
Submit those names here in a vertical list.
Make sure to spell them EXACTLY as you see them there.

Click Start, then type SERVICES.MSC in the search or run box, then press the Enter key.
When the "Services" window appears, expand it so you can see the list more clearly.
Write down ONLY the names in the "Name" column that have their startup type set on Automatic and Automatic (Delayed Start).
If the "Name" column isn't wide enough to see the entire name of any of them, widen the column.
Submit those names here in a vertical list and in alphabetical order.
Make sure to spell them correctly.

-------------------------------------------------------------
 
#8 ·
Ok Frank I've attached the images of MSCONFIG and services.msc. I'm slightly panicking now; so I haven't connected it to the internet since originally posting this topic 11 days ago (I'm using a tablet to bump and respond now...took screenshots, saved to USB stick and put onto tablet, etc) but I still went on the PC since a few times, mostly to back up my data for obvious reasons.... yet the symptoms remained constant until yesterday when I booted up to gather the MSCONFIG and services.msc images, and the PC started behaving very weird!! Now I'm doubly afraid to go online on my PC!

I took further screenshots to show what happened but basically, the first thing was that Windows Security Center alerted me that Virus Protection was turned OFF once the PC booted up...even though Avast showed everything as OK! Then a little later the taskbar changed color to grey all by itself. (screenshot attached) I "fixed" this by going to Control Panel > Display and switching to Classic Style and then back to XP style which cleared the problem up... (however I noticed very brief flickering of the taskbar and window surrounds back to a grey style from time to time afterwards as if PC couldnt make its mind up) Then a short while later I minimized a window to find that my wallpaper had disappeared to be replaced with just a plain blue background!! (screenshot attached)
Finally I noticed that the audio had stopped working: I should clarify...I loaded an old FPS game and there was no game audio. I then checked my Realtek driver software and played the 3D Audio Demo... success I could hear it fine. I then tested WMP to play some music but again no sound, just error message (screenshot attached) so the actual Realtek control panel produces demo sound but nothing within Windows does...:O Device Manager showed no issues with the audio hardware in contrast to the WMP error message! I rebooted and the problems still remain :/

[MAY BE IRRELEVANT:- I opened up Process Explorer again and noticed there were two wuauclt.exe listed, but one had a white background color (as all other processes are red or blue background), not sure what the white background means for that entry?... sorry if I'm confusing things! Also Task Manager had just "System" listed, again this may be normal too (screenshot attached)]

Ok now I'm sorry to confuse things even more but I forgot to mention the following because I thought it was entirely unrelated, and still kinda do but thought best to mention it. A few weeks back when I tried to boot up the PC it wouldn't boot and gave a BIOS error message saying "Diskette drive 0 seek failure" Pressing F1 didn't help it load, so restarted and pressed F2 to enter the BIOS settings. I noticed that everything in the BIOS was reset, i.e time, boot order, etc... so I set the time and changed my boot priority and HDD order (as I boot into the Windows on Sata-1 not Sata-0.) and hey presto saved settings and it booted up back into XP! Now I just assumed that the CMOS battery had failed again, even though I only replaced it two years ago... but what's weird is that all of a sudden the bios is now remembering its settings fine even when I've unplugged and not used the PC for say 4/5 days... so I still get that black screen error message (screenshot attached) however can I now just hit F1 and the PC boots up correctly... a new battery would clarify this of course but I've not got round to buying one yet!

Thanks for your help Frank!
 

Attachments

#9 · (Edited)
Double-click these service entries, one at a time, to open its properties window.
Computer Browser
Error Reporting Service
Help And Support
Java Quick Starter
Secondary Logon
Windows Media Pla...

Change "Startup Type" to Manual, then click Apply.
After you're done, close the services window.

Uncheck these startup entries:
nwiz
NvMcTray
NvCpl
jusched
mbam
ALCMTR

After you're done, click Apply - OK/Close - Restart.

When the System Configuration Utility window appears during restart, ignore its message about the computer being in selective/diagnostic startup mode.
Do NOT change it to normal startup mode!
Put a checkmark in the box in the lower left before you click OK to close that window.

-------------------------------------------------------------
 
#10 ·
I'm going to give you some advice and suggestions about Windows XP and how I use it.
You may or may not agree with some or all of it, but that'll be your decision.

I disable the Security Center so I don't keep getting pop-up alerts.

I remove Windows Media Player from the add/remove windows components list.
I then do a "full" install of VLC Media Player 2.2.4 and use it for playing music and video files.

I don't install and use an antivirus program.
I install and run a scan with AdwCleaner and Malwarebytes Anti-Malware and SUPERAntiSpyware (all free) every 7 - 14 days and allow them to remove/quarantine anything they find.

--------------------------------------------------------------
 
#11 ·
Thanks for your tips! I'll get onto it tomorrow once I'm back on the PC. At this stage though do you suspect all the behaviour I mentioned above is due some virus or a dreaded rootkit, etc or can be explained just by some Windows glitches/software conflicts! I know its early to ask but I just wondered if it might be serious?! Thanks
 
#12 ·
It's difficult to answer all of your questions without being there to see your computer and browse through it.
And you're using some programs that I've never heard of or used, so that complicates things.

--------------------------------------------------------------
 
#13 ·
So Frank I followed all the instructions in post #9, then rebooted but still no change. I opened Process Explorer again, and yep svchost.exe is constant running at 50% as in the original post image I attached where it shows those red spikes on the Process Explorer graph screenshot I took :( The only thing that's different is now when I kill the process, although it still reports the CPU usage dropping back to normal...the noise of the fan (CPU fan?) is still constantly higher whereas originally the fan died down right away once I killed that process ... :O

The PC still has those lagging problems in the same weird way... like for a few mins it feels real snappy when browsing Windows Explorer, folder/files etc... but then itll start lagging real bad, when opening the same folders as before :eek:

Thanks for sticking with me Frank!
 
#14 ·
OK so this time I opened a music mp3 in foobar2000 and just like WMP there was no sound... but the default audio was "Primary Sound Driver".. I changed this in foobar2000 to Realtek HD Output and voila music is now playing thru speakers!

So something has altered that audio setting, also took my wallpaper to a blue screen and I still notice individual window surrounds occasionally changing from the Blue XP style to the old Windows 98/2000 look! This is all happening offline btw, so I have no idea if it is/was malware or explainable my something corrupting in XP or I dunno?!
 
#15 ·
Do the following in the order that its listed.

Go here, then click the "Download Now @ Author's Site" button to download and save TFC.exe (Temp File Cleaner by OldTimer) to your desktop.
After it's downloaded and saved, close all open windows.
Double-click it to load its main window.
Click the "Start" button.
If there are a large number of temp files or if there are multiple user accounts, the temp file deletion process may appear to freeze and may take a few minutes, so don't interfere with or abort it.
After it's finished, restart the computer.
Advise how many temp files in MB's were found and removed.

Go here, then click the "Download Now @ Bleeping Computer" button to download and save AdwCleaner.exe to your desktop.
If you get a warning that this file is unsafe, ignore the warning.
Close all open windows first, then double-click AdwCleaner.exe to load its main window.
Click the "Scan" button, then allow the scanning process to finish.
Several seconds may pass before the scanning process starts and completes, so be patient.
Click the "Clean" button, then click "OK".
Allow the cleaning process to finish.
When it's finished, click "OK" in each window that appears.
The computer will restart.
When the log appears during restart, save it.
Return here to your thread, then copy-and-paste the ENTIRE log here.

-------------------------------------------------------------
 
#16 ·
Ok well TFC removed 4448MB!! Quite a lot of crap then :) And here is the AdwCleaner log, but symptoms still remain the same. Frank, I've got to go away for nearly 2 weeks tomorrow so I won't have access to the PC... so perhaps we can resume in a fortnight or so?? I just don't want you thinking I've forgotten and the topic gets closed....Thanks Sir!

# AdwCleaner v6.020 - Logfile created 28/09/2016 at 10:46:09
# Updated on 14/09/2016 by ToolsLib
# Database : 2016-09-14.2 [Local]
# Operating System : Microsoft Windows XP Service Pack 3 (X86)
# Username : David - 4MOTION
# Running from : F:\AdwCleaner.exe
# Mode: Clean
# Support : https://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

[-] Folder deleted: C:\Documents and Settings\All Users\Start Menu\Programs\FLV Player
[-] Folder deleted: C:\Program Files\FLV Player
[-] Folder deleted: C:\Program Files\orbitdownloader

***** [ Files ] *****

***** [ DLL ] *****

***** [ WMI ] *****

***** [ Shortcuts ] *****

***** [ Scheduled Tasks ] *****

***** [ Registry ] *****

[-] Key deleted: HKLM\SOFTWARE\Classes\SdcUser.SdcMailCtl
[-] Key deleted: HKLM\SOFTWARE\Classes\SdcUser.SdcMailCtl.1
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{000123B4-9B42-4900-B3F7-F4B073EFC214}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{1663C10B-0D55-438D-8496-19A3DBAEC0E4}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{3F1D494B-0CEF-4468-96C9-386E2E4DEC90}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{7854F00C-DC77-477E-A10E-603F48442D3B}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{C55BBCD6-41AD-48AD-9953-3609C48EACC7}
[-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{A0880527-DC28-4EBB-BA27-D22102F22A9F}
[-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{BCDDE143-FAE3-4C57-B22B-C4E8678CFDC0}
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000123B4-9B42-4900-B3F7-F4B073EFC214}
[-] Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{000123B4-9B42-4900-B3F7-F4B073EFC214}
[-] Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C55BBCD6-41AD-48AD-9953-3609C48EACC7}
[-] Value deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{C55BBCD6-41AD-48AD-9953-3609C48EACC7}]
[-] Value deleted: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{C55BBCD6-41AD-48AD-9953-3609C48EACC7}]
[-] Key deleted: HKU\S-1-5-21-448539723-261478967-682003330-1004\Software\Orbit
[-] Key deleted: HKU\S-1-5-21-448539723-261478967-682003330-1004\Software\YahooPartnerToolbar
[#] Key deleted on reboot: HKCU\Software\Orbit
[#] Key deleted on reboot: HKCU\Software\YahooPartnerToolbar
[-] Key deleted: HKLM\SOFTWARE\Orbit
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FLV Player
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Orbit_is1
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\FLV Player
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Orbit_is1
[-] Key deleted: HKU\S-1-5-21-448539723-261478967-682003330-1004\Software\Microsoft\Internet Explorer\SearchScopes\{210073B5-670D-4ABE-A7CB-83EDBC77BF35}
[-] Data restored: HKU\S-1-5-21-448539723-261478967-682003330-1004\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[#] Key deleted on reboot: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{210073B5-670D-4ABE-A7CB-83EDBC77BF35}
[-] Data restored: HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Download by Orbit
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Grab video by Orbit
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\MenuExt\Do&wnload selected by Orbit
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\MenuExt\Down&load all by Orbit
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\FLVPlayer.exe

***** [ Web browsers ] *****

*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [3958 Bytes] - [28/09/2016 10:46:09]
C:\AdwCleaner\AdwCleaner[S0].txt - [4004 Bytes] - [28/09/2016 10:43:27]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [4104 Bytes] ##########
 
#18 ·
Hey Frank, I'm back at last sorry for the long delay! So far I haven't connected the PC back online as I'm using a cheap tablet/chromebook thingy to respond here, and I've downloaded those programs such as AdwCleaner etc to it and then used a USB flash drive to take these programs and their produced scan logs, back and forth between the two devices to supply the results here. If/when you need me to stop this clumsy process and just connect the PC directly online again, just say so :)
 
#19 ·
Do the following next in that computer:

Download and save and then install the free version of
Malwarebytes Anti-Malware 2.2.1.1043
SUPERAntiSpyware 6.0.1228

Make sure to uncheck and decline to install any extras, such as toolbars and homepages, they may offer.
Make sure to uncheck and decline to use the "Pro" or "Trial" version, if it's offered.
After they're installed and updated, DON'T do anything else with them yet.
I'll give you detailed instructions for setting them up and using them.

--------------------------------------------------------------
 
#21 ·
Yes, you need to go on-line to update their definition files after they're installed.
You're being paranoid about going on-line, but if it makes you feel better, you can disconnect from the internet after the definition files are downloaded and installed.

--------------------------------------------------------------
 
#23 ·
Here are detailed instructions for setting them up and using them.
You might want to print it off first so you can follow it as you go.

Start Malwarebytes Anti-Malware.
Click "Settings". then click "Detection and Protection".
Make sure all 3 squares in "Detection Options" are checked.
Make sure "Treat detections as malware" is selected in both boxes.
Click "Scan", then select "Threat Scan", then click "Start Scan".
If it wants to update the definition files first, allow it to do so.
If problems are found during the scan, the number of "Detected Objects" will be listed.
When the scan is finished, make sure to select and quarantine EVERYTHING in the list.
If you're prompted to restart the computer to complete the process, do so.
Start Malwarebytes Anti-Malware again.
Click "History - Application Logs".
Double-click on the most recent scan log entry.
When the next window appears, click on the most recent scan log entry.
Select "Export - Text File", then name it mbam, then save it on the desktop.
Return here, then copy-and-paste its ENTIRE contents here.

Start SUPERAntiSpyware.
Click "System Tools".
Click "Preferences", then uncheck "Run in the background (system tray)", then click "Done".
Click "Advanced Settings", then uncheck "Follow shortcuts (*.lnk) during scan", then click "OK - Done".
Click "Click here to check for updates".
When the definition files have updated, click "OK".
Click "Scan This Computer", then click "Quick Scan".
If problems are found during the scan, the number of them will be highlighted in red.
When the scan is finished, click "Continue".
Make sure that EVERYTHING in the list is selected, then click "Continue".
When the removal process is complete, click "Continue".
If you're prompted to restart to finish the removal process, do so.
Start SUPERAntiSpyware again.
Click "System Tools", then click "Scan Logs".
Select the most current scan log, then click on its magnifying glass icon so it can open and be viewed, then save it on the desktop.
Return here, then copy-and-paste its ENTIRE contents here.

----------------------------------------------------------------------
 
#24 ·
OK so I ran MBAM, restarted and my wallpaper returned... but nothing else, no desktop icons, no taskbar, no Start button just my wallpaper and my mouse cursor!! I hit ctrl-alt-del which did bring up Task Manager but that's about all I eas able to do...

So I turned PC on and off again with it's power button... this time wallpaper has gone again but everything else is back as before!! Very weird behaviour, anyway I'll gather the mbam log and will post below...
 
#25 ·
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 29/10/2016
Scan Time: 15:07:38
Logfile: mbam.txt
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.10.29.05
Rootkit Database: v2016.09.26.02
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows XP Service Pack 3
CPU: x86
File System: NTFS
User: David

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 266290
Time Elapsed: 20 min, 22 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 2
PUM.Optional.ProxyHijacker, HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|ProxyServer, http=127.0.0.1:8118;https=127.0.0.1:8118, Quarantined, [3fba3b632f6b47ef0a967b56b15245bb]
PUM.Optional.ProxyHijacker, HKU\S-1-5-21-448539723-261478967-682003330-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|ProxyServer, http=127.0.0.1:8118;https=127.0.0.1:8118, Quarantined, [b742dfbf2a703cfa77296f62c93ad32d]

Registry Data: 2
PUM.Optional.DisableShowSearch, HKU\S-1-5-21-448539723-261478967-682003330-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\ADVANCED|Start_ShowSearch, 0, Good: (1), Bad: (0),Replaced,[36c3643a732765d16731443456aebf41]
Broken.OpenCommand, HKCR\regfile\shell\open\command, "regedit.exe" "Good: (regedit.exe "Bad: ("regedit.exe" "%1"),Replaced,[ffffffffffffffffffffffffffffffff]")", %4, %5

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)

(end)
 
#26 ·
I think the 3 PUM ones are due to the Tor proxy (for Pandora Radio here) and disabling the Start Menu search, but that last one I'm not sure: Broken.OpenCommand ?! MBAM reported 3 Potentially Unwanteds and 1 Malware which must be the last one. However as well as making a Scan Log above, it also creates a Protection Log which reported 2 Malware detections and 6 Non-Malware ones, which is twice the amount shown in that Scan Log. Here's Protection Log too:

Malwarebytes Anti-Malware
www.malwarebytes.org

Update, 29/10/2016 15:05:51, SYSTEM, 4MOTION, Manual, IP Database, 2016.10.27.1, 2016.10.28.1,
Update, 29/10/2016 15:05:59, SYSTEM, 4MOTION, Manual, Domain Database, 2016.10.27.4, 2016.10.28.8,
Update, 29/10/2016 15:06:08, SYSTEM, 4MOTION, Manual, Malware Database, 2016.10.27.7, 2016.10.29.5,
Scan, 29/10/2016 17:21:14, SYSTEM, 4MOTION, Manual, Start:29/10/2016 15:07:38, Duration:20 min 22 sec, Threat Scan, Completed, 2 Malware Detections, 6 Non-Malware Detections,

(end)

So I'm on to the SuperAntiSpyware scan now.
 
Status
Not open for further replies.
You have insufficient privileges to reply here.
Top