But "symlcsvc.exe" is apparently known to be causing trouble, too. Did you try deinstalling Norton entirely? (Merely running uninstall probably doesn't do it!) There is at least one running process left (ccEvtMgr.exe) that seems to be part of Norton's AV.
I quote from http://www.spyany.com/files/ccevtmgr_exe.htmlI'll try removing Norton completely. Will I be able to re-install just the parts of Norton that I use?
What is/was the exact problem with "Search Assistant"? I don't see signs of known malware that uses this string in it's name like 180SearchAssistant or something. If you refer to
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.earthlink.net/AL/Search
this should be pretty normal if Earthlink is your ISP. Can you tell us the whole story what happened and when you took notice of the slowdown?My pc had been running very slow for a couple of weeks and it took forever to load web-sites that I normally don't have trouble with.
This proves a little knowledge is a dangerous thing;) I read all the things to ck for in the hjt log and saw SearchAssistant and assumed it was a bad thing in general. And Earthlink is my ISP:)
Thanks,
Kat lover
Have you read this thread?
http://www.daniweb.com/techtalkforums/thread51015.html
Very similar to your problem and you have Spysweeper running, too
Hi Xpenetrator,
Yes, I read that yesterday and I posted this comment today -
"For what iit's worth, I had terrible problems with the SpySweeper update last month. My pc was unbelievably slow and sometimes would just lockup. My screen would hang, and then would "peel" down just like yours, plus processes wouldn't complete. It drove me mad, and after reading about other peoples many problems with it, I went back to the earlier version and have had no problems with it since. You just have to be alert after going back to the earlier version, because you're constantly being asked by SpySweeper if you want to download the new version - not! My brother found this out the hard way and had to remove the newer version again :twisted:
Good luck
Kat lover"
It still seems like the new SpySweeper + NAV is draining my computer. I'm running without SpySweeper or Ewido now and it seems better.
For what iit's worth, I had terrible problems with the SpySweeper update last month. My pc was unbelievably slow and sometimes would just lockup. My screen would hang, and then would "peel" down just like yours, plus processes wouldn't complete. It drove me mad, and after reading about other peoples many problems with it, I went back to the earlier version and have had no problems with it since. You just have to be alert after going back to the earlier version, because you're constantly being asked by SpySweeper if you want to download the new version - not! My brother found this out the hard way and had to remove the newer version again:twisted:
Good luck
Kat lover
Your log seems to be clean. But I see that you have 2 resident antivirus scanners running (Norton and AVG). This is not recommended since it (amongst other things) can slow down all disk access dramatically.
Hi XPenetrator,
Thanks for your response. So you're saying that the Search Assistant entry is not a problem?
Actually, I'm only using Norton for their Scan Disk and One Button ckup. Their AntiVirus screwed me over royally one time and I'll never use it again:twisted:
Thanks!
Kat lover
Hi everybody,
I'm having a problem with a VERY slow computer. I ran HJT and fixed some 02 NO name-no file entries, and also a RO entry for Search Assistant. When I re-booted, the Search Assistant entry was back. Can anybody help me get rid of it? This is my HJT log.
Logfile of HijackThis v1.99.1
Scan saved at 9:34:35 PM, on 9/6/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Dell Photo AIO Printer 922\dlbtbmgr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Dell Photo AIO Printer 922\dlbtbmon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft Location Finder\LocationFinder.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.earthlink.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.earthlink.net/partner/more/msie/button/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://start.earthlink.net/AL/Search
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.earthlink.net/partner/more/msie/button/search.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.earthlink.net/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.earthlink.net/AL/Search
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - …