Good Bye Avast - I need my CPU Back

[ArminPasalic!]

You can use: Eset?

[mkis]

Attached is my system information (saved information from dxdiag)

These DxDiag do not give much insight into the run of avast on yr system. better to run one of the following

HijackThis   Click here – (will take direct to download)
http://www.filehippo.com/download_hijackthis/download/8571e06e5eb8ab03c649f3b5d647c599/

Download and run.
Then do scan and save a log file.

Post the log file to this thread. If it is too large you may have to post in two parts.

Or OTL    - see  http://forum.avast.com/index.php?topic=53253.msg451454#msg451454

[tom2112ny]

Here is the HijackThis file

[mkis]

@ tom2112my - yr system appears to be very congested - is this from long time use loading programs and web apps etc...?
perhaps a lot of stuff that you don't actual use anymore, but I'm not going to bother about that just yet cos not priority

Firstly yr HjT log -

O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
Fix this entry - put checkmark in box next to the entry and click Fix Checked in bottom left hand corner of the screen
- after fixed checked, you need to run Scan to bring up a new log - I prefer to fix one entry at a time

O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlsr.cab
This is web app helper from Symantec, but you do not run any Symantec / Norton - so I say fix this as well (see note below)
 
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
This is web app helper from Symantec, but you do not run any Symantec / Norton - so I say fix this as well (see note below)

Note - did you have Symantec / Norton on yr system - if so, then best run the specialist norton uninstall tool if you have not already.
Find the right one here - (someone might have a better site for the Norton uninstall utility)

http://www.symantec.com/norton/support/kb/web_view.jsp?wv_type=public_web&docurl=20080710133834EN

Restart

Okay now a quick cleanup of the desktop
download - http://www.filehippo.com/download_ccleaner/ (top right-hand corner - 3.22MB)

(1)Run the first two cleaners - Windows and Applications
(2)Got down to tools -> Startup - and look at what is set to start in yr system when you boot up, you have too many programs set to start cos if set to manual these programs will start anyway when you click a relevant program in runtime
- if you need help with this, then just do step (1) and see how you go

Reply post here

[tom2112ny]

thanks mkis.  i did as you suggested.  first off, yes, i did have norton until very recently.  i had both norton and avast for a while to compare them and it was always avast that caught any problems.  i guess the uninstall tool i used didn't do a complete job.

after all the cleanup (everything on your list, but i left most of the startup stuff alone for now), i have a cleaner system, but i still have the same issue with avast.  if i try to start up with the wireless router on and the avast firewall active, the system locks up solid.  oh well.  i've been getting around it by booting up with the router off, disabling the avast firewall for 10 minutes, then turning the router on.  that usually works for me.  i see there's a new avast 5.0 version available for beta testing.  i will wait until it is generally available for use, but i am hoping that the new version will help.

[mkis]

tom2112ny

did you see this link to Dgillham and issue with Dell laptops - there have been some good results?

Dgillham - http://forum.avast.com/index.php?topic=45715.msg390432#msg390432

link - http://forum.avast.com/index.php?topic=56876.msg491066#msg491066

[Xil3]

still slows down, cant see anything out of the ordinary...

[mkis]

okay I'm in a bit of a rush at the moment and will have time to look in more depth later

But for now -

Fix this entry, unless there is some specific reason that you know that it should be there   
O13 - Gopher Prefix:
To fix the entry - put checkmark in box next to the entry and click Fix Checked in bottom left hand corner of the screen
- after fixed checked, you need to run Scan to bring up a new log - I prefer to fix one entry at a time

This seems to lead nowhere, so I think best fix checked unless you have specific reason not to - but wait for second opinion this time
O4 - Global Startup: Logitech SetPoint.lnk = ?
perhaps allows for the link to be picked up by another one of yr apps (and prob keylogger involved for yr usage?)

Punkbuster - I think this is some Beta testing app that may now have passed its use-by date
O23 - Service: PnkBstrA - Unknown - C:\Windows\system32\PnkBstrA.exe
you would know better than me about this - but here is an uninstall utility anyway - http://www.evenbalance.com/downloads/pbsvc/pbsvc.exe



O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
Spelling mistake but perhaps nothing sinister to this - wait for second opinion about the entry

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 - Unknown - C:\Windows\system32\lsass.exe (file missing)
I wont make call on this because lsass.exe is involved - probably fix checked - but certainly, wait for second opinion


well I will be back soon Xil3 and have a closer look. Meantime someone else may have more to offer.

Since this machine is a self-build, I am a bit unwilling to rush straight into fix checked option, but certainly the Gopher Prefix entry is known to reduce computers to a crawl if left to persist by its own means

[Xil3]

im not sure what gopher prefix is... so im going to fix that one,

PnkBstrA.exe and PnkBstrB.exe are services used by punkbuster. Punkbuster is an anti-cheat client used in Call of duty series and Battlefield series. Without PnkBstrA.exe and PnkBstrB.exe i wouldnt be able to join online servers. This exe stays.

Pretty sure thats just MS Excel, not sure why its got "E&xport"...

samsrv.dll This file is part of Microsoft Windows Operating System. Samsrv.dll is developed by Microsoft Corporation. It’s a system and hidden file. Samsrv.dll is usually located in the %SYSTEM% sub-folder and its usual size is 415,744 bytes. The samsrv.dll process is safe and disabling it can be dangerous, because programs on your computer need it to work correctly.

New log file attached.

[mkis]

sorry I was out all last night.

Yr HjT log looks okay. lots of programs and apps but seems neat and tidy enough.
none of the guys have commented so seems nothing amiss here.

so still problems after Gopher was removed?
If so, then I think we could take a look at yr avast install. And see if we can right that so runs as it should.

[Xil3]

so what do i do to check the avast install... i suppose im gonna have to screenshot everything?
cause yeah, im still getting it... its clearly something to do with the resident scanning, cause everytime i go to c:\ or my documents it spikes...

[mkis]

try and run  a repair avast install in Safe Mode

Add/Remove programs in Control Panel
scroll down screen when prompted to Repair
repair avst
Restart

Yr HjT looks okay. But there still maybe conflict evident amongst programs.
how about a screenshot of Conflicts/Sharing under Hardware  Resources in System Infomation

Outside that I really have run out of ideas. Have you tried the new Beta update 5.0.504?

[deagle]

hello!i"m a chinese college student.哈哈  我的avast5就很好用啊，CPU和RAM占用也是很低的 If you need any help,pleast sent me an email sxt1988@163.com  .

[Argggggggh]

Before you blame Avast, consider Microsoft.  I just uninstalled IE8 and returned to IE7, and I deleted a bunch of windows updates (the last year) and it's like an all-new system.  Perhaps, if you update windows, you have brought a conflict into the mix. 

[tweedy]

Hello all.


I've just read through all this thread with some interest. I have had for the past couple of weeks an issue with my home pc where the 'system' process has been running at over 90%.

As per usual with pc issues, you head off in the wrong direction looking for the answer. After stumbling across this thread though, my mind is made up.

Upgrading my avast to version 5 has created this problem. The time line fits exactly and moreover, disabling the behaviour shield fixes it.

Too many users reporting this problem for it not to be an issue with avast. Thankyou to the posters who posted up the fix with the behaviour shield. I'd rather have it switched back on, but my main concern is being able to use my pc!!