Slow Scan and Unable to Remove

Thanks

I dont see anything out of line, except that Panda even if not running should be uninstalled.
we can see as
Panda Process Protection Driver: \??\C:\WINDOWS\system32\DRIVERS\PavProc.sys (autostart)
Panda Process Protection Service: "C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe" (autostart)
Its best to never have more that one av program installed much less running at the same time

Updates were out friday have you checked for problems since then ?
 
In my control panel, add/remove programs, it does not show any Panda program. How would I go about uninstalling it, or should I just delete the files/folder from C:/Program Files?

I ran Spybot on Friday but NOT after updating (as I ran from safe mode and couldn't update from there). I would love to have the slow scan issue resolved so that scanning should not be such a big deal for me anymore, should I post to the thread dedicated to that, as you don't seem to think there are any more malware issues on my pc?
 
This topic will now be archived to prevent others with similar issues posting in it.
If you need it re-opened please send me or Lonny a pm.

Glad we could help.
 
Thank you!

Thanks for re-opening, Lonny. (AND thanks for all your help.)

My remaining issues are:

1. (minor issue) I cannot un-install Panda, it is not showing in my control panel and when I re-downloaded it to re-install it, it did not let me install unless I first un-install NAV (which I prefer not to do).

2. (larger issue) My computer freezes up pretty often, I would say average once a day -- sometimes even a few times a day -- freezes to the point where I have to turn the whole thing off manually by switching the surge protector off (shutting down doesn't even work). The program varies, sometimes it is Outlook which will freeze, other times Word, Firefox, Visual Studio -- I can't tell a pattern.

3. (large issue) My Spybot S&D scans still take forever.

Thanks!
 
Nina98765: Please completely uninstall Panda first as Lonny suggested above, since that may fix the problem with Spybot too. But if it doesn't, see the rest of my post.

LonnyRJones & Nina98765: Regarding the slow Spybot scans, I'd like to try something that sounds a bit radical, but I'm aware of one case that this has worked.

Please make a copy of the entire Spybot - Search & Destroy folder somewhere else, such as on the desktop or even on a flash drive or writeable CD if you have one. The folder is typically less then 25MB, including all sub-folders.

Do not move the folder, leave the original where it is, make certain it's a copy. Using Windows Explorer to right-click and drag the folder from C:\Program Files\ to the new location and drop it, then selecting 'Copy Here' is the easiest method.

Once the entire set of Spybot folders have copied, browse to that new folder, find SpybotSD.exe and double-click it to run the new copy of Spybot. Try a scan as you normally would and tell us what happens.

Please don't destroy the original Spybot - Search and Destroy folder if this works, since we may want you to get us some information about it. Again, I know it sounds strange, but this entire problem is both rare and strange, so it's worth a try based on what I've heard.

Thanks for taking time to try it and give us feedback.
Bitman
 
Lonny: I successfully un-installed Panda.

Bitman: I tried what you suggested... copied my C:\Program Files\Spybot - Search & Destroy folder to the desktop, and ran the program from there... it did not help -- same problem. I can pinpoint the spot where the program slows, if that helps... it is at #7255... I can hear my CPU start to grind away when it gets to that spot; it seems to be working very hard.

Where do I go next?
 
Hi Nina

Do another Hijackthis ADS spy scan, place a check next to these
C:\WINDOWS\$NtServicePackUninstall$\twain_32.dll : ehjamu (11592 bytes)
C:\WINDOWS\$NtServicePackUninstall$\winhlp32.exe : fqubm (10752 bytes)
C:\WINDOWS\$NtUninstallKB896358_0$\hh.exe : cfbfi (3347 bytes)
C:\WINDOWS\$NtUninstallKB896358_0$\hh.exe : fdfsgu (11592 bytes)
C:\WINDOWS\$NtUninstallKB896358_0$\hh.exe : fgneos (10752 bytes)
C:\WINDOWS\$NtUninstallKB896358_0$\hh.exe : myobej (11592 bytes)
C:\WINDOWS\$NtUninstallKB896358_0$\hh.exe : wmdoe (29696 bytes)
C:\WINDOWS\pss\system.ini.backup : jwrhq (10752 bytes)
C:\WINDOWS\pss\system.ini.backup : xdjle (99626 bytes)
C:\WINDOWS\SYSTEM32\msjet40.dll : SummaryInformation (88 bytes)
C:\WINDOWS\SYSTEM32\msjet40.dll : {4c8cc155-6c1e-11d1-8e41-00c04fb9386d} (0 bytes)
=====================
click remove selected

Purge system restore
Turn off System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.
Then Reboot. < Dont skip that step.
Turn ON System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
UN-Check Turn off System Restore.
Click Apply, and then click OK.

=============================
Now let us know of any problems please
 
Hi,

I followed all the directions.

I then tested Spybot S&D -- it still takes forever (I aborted it). As to whether my computer will stop freezing, I guess only time will tell... so far, no other issues to report.

Thanks.
 
If your willing try this

C:\Documents and Settings\All Users\Application Data\Microsoft\Windows NT\MSFax\SentItems
Copy the contents of the sentitems folder first then run Hijackthis ads spy and fix all item in that same folder
 
Hi,

I tried what you said and then tried to run Spybot S&D. It "hung" at the same place. I had noticed that the HJT also "found" all my backed-up files. So I burned them to a CD and deleted them entirely from my hard drive and tried Spybot again, I got excited 'cause it didn't hang in the same place... but it hung a little further down (still while searching for CoolWWWSearch.Feat2DLL).
 
I ran HJT again, here is the log:

C:\CNHS\Misc Docs\317113 - HOW TO Automate Microsoft Access From Visual Basic _NET_files\Thumbs.db : encryptable (0 bytes)
C:\CNHS\vbnetnewnew\bin\graphics\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Matti Marcus\Local Settings\Temporary Internet Files\Content.IE5\WBPV6MV9\statement[1].qfx : Zone.Identifier (26 bytes)
C:\Documents and Settings\Matti Marcus\My Documents\My Pictures\LOW_RES\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Matti Marcus\My Documents\My Pictures\Microsoft Clip Organizer\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Matti Marcus\My Documents\My Pictures\New Folder\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Matti Marcus\My Documents\My Pictures\ProfessionalPicsAdar5765\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Matti Marcus\My Documents\My Pictures\purim\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Matti Marcus\My Documents\My Pictures\Summer05\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Matti Marcus\My Documents\My Pictures\Teves5765\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Matti Marcus\My Documents\My Pictures\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Matti Marcus\My Documents\My Pictures\tripWithAbba\Thumbs.db : encryptable (0 bytes)
C:\RECYCLER\S-1-5-21-381763778-2665951338-1883327859-1008\Dc924.exe : Zone.Identifier (26 bytes)

Should I just clean these out? None of them look important to me.

I can't think of any other problems besides for the slow scanning, and the computer freezing up and acting slow.

Thanks a lot.
 
You must log in or register to reply here.
Back
Top