PDA

View Full Version : System hangs on FIX



mjhampstead
2006-10-22, 02:06
Hi

I have my neighbor's computer with a fresh install of Spybot which I've used on several systems over the years.

Spybot after five hours reports three issues, but when FIX is requested, about 25% of the way through the process, the system hangs.

THis happens in both SAFE MODE and full mode.

What is going on here and what are the remedies?

The miscreants are
Pipas.A
Smitfraud-C.

Thanks for your help

mjhampstead
2006-10-22, 02:26
Hi

Guess my neighbor's system felt threatened. It hung up on FIX 3 entries three hours ago.

Just after I posted my message here, I notice hard drive action.

Lo and behold, FIX completed.

Now, why did this happen? Granted this is a six year old system, BUT.....

Any way to speed up five hour scan times?

Thanks
mjh

spybotsandra
2006-10-23, 11:59
Hello,

There can be various reasons for this problem. At first, there was a problem with HTT.

We originally thought HyperThreading only existed on P4 processors of 2.8Ghz or higher, but it turned out that there are slower and older processors with that technology. We suspect something like this to be the problem with Spybot-S&D, since several users have indicated they have no problems with Spybot-S&D and HTT. If you are running Spybot - Search & Destroy on a system that has Hyperthreading Technology (HTT) please read the following thread:

Spybot will not complete a scan? http://forums.spybot.info/showthread.php?t=110

Here is another post that might help: http://forums.spybot.info/showpost.php?p=390&postcount=4

Cannot Run Certain Programs on Hyper-Threaded or Dual-Processor Computers with a CPU Speed of Greater Than 2 GHz http://support.microsoft.com/kb/327809/en-us

Could also have something to do with CoolWWWSearch. At this time there is no clear explanation for the CoolWWWSearch.Feat2DLL variant myself, I think there may be malware involved in that one, but it may also be HTT in some cases.

It's fairly obvious at this point that the Central24 and other Dialer hangs are caused by RootKits, often Wareout. There were a couple rare C2.lop/GAIN.Gator hangs early on.

A couple of PCs shutdown or reboot are likely cooling fan problems, especially the laptop. Since we are now aware of the SpeedswitchXP program for mobile CPUs, we have a possible solution for laptops. http://www.diefer.de/speedswitchxp/index.html

I think this summarizes all the major variants we have experienced. If this does not match your problem, please report it to us, so we can soon solve this issue.

Best regards
Sandra
Team Spybot

mjhampstead
2006-10-23, 13:17
Good Morning

My neighbor's system is a Celeron based HP 6535.

After running an online scanner than reported six issues (two of which were not) I updated and ran AVGFree and then Spybot again. Still took five hours to complete the Spybot scan. But just a few minutes to FIX and delete the numerous issues found which included CoolWWW. Spybot found many more issues than reported by the online scan.

How can I tell if this system is truly clean now? Two of the six issues were dialers. How can I remove those as I did not see anything that looked like a dialer in the Spybot list.

I still get periods of 100% CPU useage with nothing showing in Task Manager.

Spybot is the last thing I've run and in getting back into SAFEMODE on three occasions the mouse was nonfunctional.

THanks
mjh

LonnyRJones
2006-10-23, 16:00
Pipas.A
Please go here and follow instructions.
http://forums.spybot.info/showthread.php?t=288
Post A Hijackthis log and an online scan report in a new thread in our malware section (not here please).
Someone will then take a look at the system and advise you.

mjhampstead
2006-10-23, 18:06
Going there now.

This will take a while to install and run Panda as we are on dialup.

Thanks
mjh