Check the Task manager and see how much cpu Ewido is using. I had a look the other day at mine because my browser was freezing and found that Ewido was using 50% + resources. I disabled the guard and everything was fine.
==
You may want to print out these instructions for reference, since you will have to restart your computer during the fix.
Please download AproposFix from here:
http://swandog46.geekstogo.com/aproposfix.exe
Save it to your desktop but do NOT run it yet.
Then please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.
Once in Safe Mode, please double-click aproposfix.exe and unzip it to the desktop. Open the aproposfix folder on your desktop and run
RunThis.bat. Follow the prompts.
When the tool is finished, please reboot back into normal mode.
==
Then please do the following.
===============
Go to
Add/Remove programs and remove(uninstall) the following, if present:
TSCash
The above could appear anywhere within the entry. Be careful not to remove any
personal or
system software.
===============
Let's look for, and delete, any program segments (
prefetches) that might be present, and are associated with the '
problems' we're trying to remove from your PC. To do this, let's:
1) Click "
Start | Search", then search for each of these program's
base name(s), in all files and folders:
wininit32.exe*
2) Then if any are found in the '
prefetch' folder, delete them.
Look closely, since the '
base' name will have a bunch of random numbers and letters attached to it.
===============
Next, Open a
command prompt by:
1. Clicking "
Start", then "
Run...".
2. Enter "
cmd" (
without the quotes).
3. Enter "
services.msc" (
without the quotes).
-
Now, locate and '
stop' the following services, if present:
Microsoft Update 64 BIT ... (
wininit32.exe)
Look carefully, since the name of the service (above) can be anywhere in the entry; also be careful not to 'stop' any required system services. Once stopped, set this service to disabled.
===============
Run
HiJackThis then:
1. Click "
Open the Misc Tools Section"
2. Click "
Open Process manager"
-
Next, while holding down the
CTRL key, locate (
if present) and click on (
highlight) each of the following:
C:\WINDOWS\System32\wininit32.exe
Now double-check and make sure that only those item(s) above are highlighted, then click "
Kill process". Now, click "
Refresh", check again, and repeat this step if any remain.
===============
Still in
HiJackThis, click "
Scan", then check(tick) the following, if present:
O4 - HKLM\..\Run: [SysUpd] C:\WINDOWS\SysUpd.exe
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [Microsoft Update 64 BIT] wininit32.exe
O4 - HKLM\..\RunServices: [Microsoft Windows DLL Services Configuration] windir32.exe
O4 - HKLM\..\RunServices: [Microsoft Update 64 BIT] wininit32.exe
O4 - HKCU\..\Run: [services32] C:\Program Files\Common Files\Windows\mc-110-12-0000080.exe
Now, close
all instances of Internet Explorer and any other windows you have open except
HiJackThis, click "
Fix checked".
===============
Locate and
delete the following item(s), if present. Make sure you are able to
view system and hidden files/ folders:
folders...
C:\WINDOWS\System32\P2P Networking
files...
C:\WINDOWS\System32\wininit32.exe
C:\WINDOWS\SysUpd.exe
C:\Program Files\Common Files\Windows\mc-110-12-0000080.exe
Search for...
windir32.exe
...using "
Start | Search...".
-
Note that some of these file(s)/folder(s) may or may not be present. If present, and cannot be deleted because they're '
in use', try deleting them in "
Safe Mode".
-
Reboot.
===============
After rebooting, rescan with hijackthis and post back a new log, along with the entire contents of the
log.txt file in the aproposfix folder. Please let me know how your pc is now.
Unsolved 
