i need some help, i am working on a neighbiors computer ibm thinkpad z61p
(windows xp pro) i installed avast 4.7 ashserv.exe is using half of the system resources all the time, whether connected to internet or not. help, what should i do? i install it on lots of computers but have never encountered this? thanks in advance.
Have you checked to be sure there is no other anti-virus on the laptop? Did you run an uninstaller for previous anti-viruses such as the Norton uninstaller tool?
Uninstall avast! & run the avast! uninstaller as well uninstall any other av. Run a good registry cleaner such as CCleaner before reinstalling avast!.
i did all that and ashserv.exe is still eating at least 50 % of the system resources at all times
what else should i do? thanks
i find that the ibm access connection (AccConnAdvanced.html) is the likely cause of the problem although i have searched ibm’s website and can’t find if this is a needed program.
When the CPU use is at 50% is the avast icon rotating ?
If so what is it scanning ?
This option, ‘Show detailed info on performed actions’ will display the files being scanned and although they aren’t there long, but it should give an idea of what is causing the activity.
http://img.photobucket.com/albums/v325/for-dwr/ShowDetailedAction.jpg
You said they had another AV installed in this system, if so what was it and how did you get rid of it ?
Some are a right pain to remove.
this machine had avast before w/o any problems, he didn’t register avast and it expired. I went and registered it for him and it updated to the newest version and that when i noticed the problems.
there was no other antivirus running on machine, norton came from factory, but i removed it with the cleaner symantec has. i also ran cc cleaner, i truly believe it has to do with the program i listed above. avast icon was spinning all the time. had numerous shutdown issues with avast running, disabled avast no shutdown issues or long startup times incurred. i went ahead and uninstalled avast from this machine and installed a different av program and its running fine. i hate not being able to use avast this time, b/c i have installed it on numerous machines without any problems. thanks for the help
But what about the questions I asked this may point to a possible cause.
If the CPU % is high but there are no files being scanned it would tend to point to a possible conflict. Enabling the ‘Show detailed info on performed actions’ can be very helpful.
But, having uninstalled avast we are unlikely to get to the bottom of the problem.
I didnt check the box, but (AccConnAdvanced.html) is the file being scanned constantly or at least that what it shows it what it is scanning when you click on the icon in the sys tray. the icon was constantly turning and when i disabled access connections from starting up, everything seemed to work fine for the most part. so thats what i narrowed it down to. i didn’t want to start uninstalling software on a machine that wasn’t mine and i had to get it finished for him. i can try other things I’m suppose to look at his desktop later today. thanks again.
The rotation is indicating activity so that would account for some of the CPU % but I would have thought if it were 50% that would be for peeks and not constant. What had to be found was what was responsible for that activity.
Do you have a firewall and if so what is it ?
A search for AccConnAdvanced.html returns many hits and some indicate that this may be as a result of a worm and since it isn’t detected possibly hidden by a rootkit. This could account for the additional activity. For some reason this file was located in the windows\system32\ folder, most unusual, does this file exist in that location (?) do a search of your C: folder just in case.
I would suggest checking out the rootkit side first:
- BlackLight - It can detect rootkits like Rootkit Revealer but can also remove them. http://www.f-secure.com/blacklight/
- Panda Rootkit Cleaner - http://research.pandasoftware.com/blogs/images/AntiRootkit.zip also see http://research.pandasoftware.com/blogs/research/archive/2007/04/02/Panda-AntiRootkit-Released.aspx or http://www.pandasoftware.com/.
- AVG ANTI-ROOTKIT - AVG Anti-Rootkit http://free.grisoft.com/doc/avg-anti-rootkit-free/lng/us/tpl/v5.
Also see, anti-rootkit, detection, removal & protection http://www.antirootkit.com/software/index.htm.
Then other anti-spyware tools.
If you haven’t already got this software (freeware), download, install, update and run it, preferably in safe mode.
- If using winXP AVG anti-spyware (formerly Ewido). Or SUPERantispyware Or Spyware Terminator. Or a-Squared free if using win98/ME.
that program is part of ibm’s software. its a connection manager that you can set locations or profiles for how that particular one is to connect. its a legit program that comes on lenovo notebooks. it might contain some sort of tracking software, i have never read the license. my neighbor is not the most computer saavy, so i didnt want to remove software that he might make it easier for him to connect to the internet.
Where is it located on the hard disk ?
It is strange to have what may amount to a data file being stored in an html format. If you are sure it isn’t a problem then it can be excluded from scans.
Add it to the exclusions lists (Standard Shield, Customize, Advanced, Add and
Program Settings, Exclusions)
Having said that the problem would only lie in the standard shield on-access scan, so it could be left of the Program Settings, Exclusions, so it would be scanned on on-demand scans at least confirming it is clean periodically.
thanks i will try it, i know what you are saying about the html file format , but like i said i just clicked on the icon and thats what kept scanning, i will go and change options to show the files being scanned and double check and i will let you know.
Your welcome, though I’d be surprised if this ‘single’ html file is responsible for the 50% CPU use.