Defender hangs out

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi.
I'm experiencing following problem with using Windows Defender:
When I start Full Scan after few minutes it stops, time in field time passed
also stops.
I've notices that problems are always with files in RECYCLER\... on every
drive.
There are no problems with Quick Scan .

I'm using WinXP SP2, ZoneAlarm (free firewall) and Avira AntiVir Personal
Edition.

How can I solve this problem?
 
Hello Tomas,

Have you tried the scan operation running in safe mºde?
http://www.computerhope.com/issues/chsafe.htm

Have you try to clean your System?
Try to use Ccleaner
http://www.ccleaner.com/downloadbuilds.asp
Note, When you install Ccleaner, uncheck the Yahoo toolbar option.
Note, in Options, Settings, Advanced, uncheck - Only delete files in Windows
folders older than 48 hours.
Note: uncheck Windows Defender in the applications.
Run twice Ccleaner, the same as below,until you get “0 bytes to be removedâ€.
Open Ccleaner and press "Windows" "Aplications" and "Run Cleaner" from the
menu choose 'Issues' and then press scan for issues, Repair any fºund.


Also the way to dig into this:
Windows Defender records, in the System event log, at the time of the scan,
the precise path and filename of each detection.

So--right click My Computer, choose Manage.
Click on the plus sign in front of Event Viewer.
Click on the System events log, in the left column.
Click on View (top menu), filter.
Click the down-arrow at the right of Event Source, and choose "WinDefend."
Click apply, click OK.

Now--in the right window, scroll back to the time of the original detection,
and look for yellow-triangle marked records for those original detections.
Double-click a record in the right window to open it and see the full
detail. You can cut and paste, via a button--back to this thread.

For the benefit of the community reading this post, please rate the pºst.

I hope this post is helpful.

Let us know how it works ºut.

Еиçеl
 
In safe mode it works fine, so I guess it's not fault of Defender itself.
I've cleaned system like you advised but results are the same.

====
Windows Defender Real-Time Protection agent has detected changes. Microsoft
recommends you analyze the software that made these changes for potential
risks. You can use information about how these programs operate to choose
whether to allow them to run or remove them from your computer. Allow
changes only if you trust the program or the software publisher. Windows
Defender can't undo changes that you allow.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=74409
Scan ID: {C51E0FD7-F422-472D-8447-5777A52FB8F7}
User: TOMEK\Player
Name: Unknown
ID:
Severity: Jeszcze niesklasyfikowane
Category: Jeszcze niesklasyfikowane
Path Found:
usershellfolder:HKCU@S-1-5-21-606747145-688789844-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\\Personal
Alert Type: Oprogramowanie nieklasyfikowane
Detection Type:
====
Windows Defender Real-Time Protection agent has detected changes. Microsoft
recommends you analyze the software that made these changes for potential
risks. You can use information about how these programs operate to choose
whether to allow them to run or remove them from your computer. Allow
changes only if you trust the program or the software publisher. Windows
Defender can't undo changes that you allow.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=74409
Scan ID: {2A2EB0C3-50CD-4ADF-BD81-115950D0DF3D}
User: TOMEK\Player
Name: Unknown
ID:
Severity: Jeszcze niesklasyfikowane
Category: Jeszcze niesklasyfikowane
Path Found:
usershellfolder:HKCU@S-1-5-21-606747145-688789844-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\\Personal
Alert Type: Oprogramowanie nieklasyfikowane
Detection Type:
====
Windows Defender Real-Time Protection agent has detected changes. Microsoft
recommends you analyze the software that made these changes for potential
risks. You can use information about how these programs operate to choose
whether to allow them to run or remove them from your computer. Allow
changes only if you trust the program or the software publisher. Windows
Defender can't undo changes that you allow.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=74409
Scan ID: {18CA29C3-6075-41EF-9B74-77631B9E33E7}
User: TOMEK\Player
Name: Unknown
ID:
Severity: Jeszcze niesklasyfikowane
Category: Jeszcze niesklasyfikowane
Path Found: driver:VClone;file:C:\WINDOWS\system32\DRIVERS\VClone.sys
Alert Type: Oprogramowanie nieklasyfikowane
Detection Type:
====
Windows Defender Real-Time Protection agent has detected changes. Microsoft
recommends you analyze the software that made these changes for potential
risks. You can use information about how these programs operate to choose
whether to allow them to run or remove them from your computer. Allow
changes only if you trust the program or the software publisher. Windows
Defender can't undo changes that you allow.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=74409
Scan ID: {BDEF36F9-51BD-412A-9B86-CCFF0C4C9B43}
User: TOMEK\Player
Name: Unknown
ID:
Severity: Jeszcze niesklasyfikowane
Category: Jeszcze niesklasyfikowane
Path Found: driver:ElbyCDIO;file:C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
Alert Type: Oprogramowanie nieklasyfikowane
Detection Type:
====

....and about twenty more warnings.

I'm thinking of formatting all partitions including windows one.
Can you tell me in which order I should install WinDefenfer, Avira AntiVir
and Zone Alarm Firewall so they won't affect Defender?
 
Have you tried removing the old restore points?

If your system is operating optimally as far as you can tell, and has had no
recent changes to software or hardware, consider removing old restore
points.

Go to start, all programs, accessories, system tools, disk cleanup. Select
a drive and allow it to scan for files to be compressed or removed.

When that scan completes, select the tab for More Options.
Wording varies between OS versions, but on that tab there should be a
section for System Restore and Shadow Copies--and if you click Clean up on
that section, it will remove all but the most recent restore point, as well
as associated shadow copies, if applicable (shadow copies will only exist on
some Vista editions, I believe.)
 
I've turned off System Restore about one month ago, after reinstalling
Windows becouse I never use that tool...
Do you have more ideas? :)
 
Have you emptied the recycle bin?

TomaszK said:
I've turned off System Restore about one month ago, after reinstalling
Windows becouse I never use that tool...
Do you have more ideas? :)
Click to expand...
 
Have you run a root kit detector on this system?

AVG has a free one which should be competent.

You might want to run it in safe mode.

It seems to me that if the recycle bin has been emptied, and if you are not
using System Restore, there shouldn't be anything in the RECYCLER
subfolders.

You might try going into that folder at a command prompt and seeing what is
there and deleting it.
 
I mean defender crushes on different files in other folders for example
"C:\System Volume Information\MountPointManagerRemoteDatabase"
 
Formatting is work...

You might want to install Defender before the antivirus. but, in general.
there are no known issues between Defender and antivirus apps, or Zone Alarm
that I'm aware of. They do recommend turning off antivirus real-time
protection during the installation of Windows Defender, but very few folks
find that necessary.
 
Back
Top