Solved I got sounds like when scanning for viruses

September 11, 2011 at 11:29:42
Specs: Windows XP, 2.50 GHz / 2,06 RAM
Out from my PC I got sounds like when scanning for viruses (continuous and irregular sound) but I'm doing nothing.

Task Mgr indicates 99% System Idle Process, and start up programs are the few I allow.

This is running me crazy and I'm worried about my disc lifetime.


See More: I got sounds like when scanning for viruses

Report •


✔ Best Answer
September 11, 2011 at 15:25:06
Here are a few possibles.

Don't Optimize hard disk when idle
http://malektips.com/xpwtw0015.html

Unknown hard drive activity.
Right click an empty part of your desktop > Properties > Display Properties > Desktop > Customize Desktop > Desktop Items.
Down the bottom of that screen, uncheck > Run Desktop Cleanup Wizard every 60 days.

Disable Indexing Services
http://www.tweakxp.com/article37006...
http://mywebpages.comcast.net/Suppo...
http://www.smartcomputing.com/edito...

Go to Start > Run, type > services.msc /s ( or copy & paste ) press Enter and make the following Manual by Right clicking > Properties.
Automatic updates
Background Intelligent Transfer Service
Windows Installer



#1
September 11, 2011 at 12:20:22
http://www.malwarebytes.org/product...

Sounds like you're infected, Download and install this free program and see what it comes up with. I use it regularly.


Report •

#2
September 11, 2011 at 13:47:42
Thanks, Grasshopper, but I already run several anti-malware programs, like:

• Malwarebytes’
• SUPERantimalware
• ESET online
• BitDefender online
• Kasperspy online
• ClamWin Portable
• Trend Micro House Call
• Etc.

and no one found nothing. According to all of them my PC is malware free.

• Discs have a lot of free space (C, 30 GB; D, 40 GB; E, 25 GB; F, 110 GB). I defragmented them, run the Error Checking, and even remove from my PC the Outlook pst files --to prevent Outlook to start compacting them automatically-- and leave the PC with no program open.

• I got my PC off network.

• Using the Windows XP CD I run the Systems Files Checker. Everything is OK.

... but problems continues. Windows Task Mgrs > Processes always shows 95 to 98 CPU Usage


Report •

#3
September 11, 2011 at 14:55:12
This might be a dumb question, but did you install SP 3.

Report •

Related Solutions

#4
September 11, 2011 at 15:01:00
Yes, My Windows XP Professional is up-to-dated.

Report •

#5
September 11, 2011 at 15:25:06
✔ Best Answer
Here are a few possibles.

Don't Optimize hard disk when idle
http://malektips.com/xpwtw0015.html

Unknown hard drive activity.
Right click an empty part of your desktop > Properties > Display Properties > Desktop > Customize Desktop > Desktop Items.
Down the bottom of that screen, uncheck > Run Desktop Cleanup Wizard every 60 days.

Disable Indexing Services
http://www.tweakxp.com/article37006...
http://mywebpages.comcast.net/Suppo...
http://www.smartcomputing.com/edito...

Go to Start > Run, type > services.msc /s ( or copy & paste ) press Enter and make the following Manual by Right clicking > Properties.
Automatic updates
Background Intelligent Transfer Service
Windows Installer


Report •

#6
September 11, 2011 at 16:09:36
Thanks, Jonhw. In My PC,

• "Optimize hard disk when idle" was unchecked
• Run desktop cleanup every 60 days" was unchecked.
• "Indexing services" was unchecked.

But I knew about Diskeeper, which seems to be an useful program.


Report •

#7
September 11, 2011 at 16:20:36
"But I knew about Diskeeper, which seems to be an useful program"

I use Auslogics Disk Defrag Screen Saver
http://www.softpedia.com/get/System...
http://www.softpedia.com/progScreen...
http://www.auslogics.com/en/softwar...


Report •

#8
September 11, 2011 at 16:31:58
I use Auslogic too, although not screen saver, but I didn't know about diskeeper. However, this is going to do what is running me crazy now: get disks working when I'm doing nothing.

Report •

#9
September 11, 2011 at 16:42:04
Hard disks do not turn off after your computer has been idle
http://support.microsoft.com/kb/313300

Report •

#10
Report •

#11
September 11, 2011 at 16:50:29
Just in case you missed these.

Go to Start > Run, type > services.msc /s ( or copy & paste ) press Enter and make the following Manual by Right clicking > Properties.
Automatic updates
Background Intelligent Transfer Service
Windows Installer


Report •

#12
September 11, 2011 at 17:13:11
Filemon for Windows
http://www.softpedia.com/get/Progra...
http://www.softpedia.com/progScreen...
As soon as you hear your hard disk thrashing when you think it shouldn't be, press CTRL+E in FileMon to stop the capture. The last few screens should be full of disk access by the offending application.

Report •

#13
September 11, 2011 at 17:22:10
Also, check your pagefile settings.

http://support.microsoft.com/kb/308417

http://www.microsoft.com/resources/...


Report •

#14
September 11, 2011 at 17:46:03
I adjusted pagefile and virtual memory time ago, and according to MS instructions.

Report •

#15
September 11, 2011 at 19:13:09
In your original post you said:
"Task Mgr indicates 99% System Idle Process".

In post #2 you said:
"Windows Task Mgrs > Processes always shows 95 to 98 CPU"

I'm a tad confused because 99% System Idle Process means it is doing very little. Does task manager indicate what process is peaking?

Have you tried "Process Explorer"? This gives more useful information on activity.

There are a few things that don't show. For instance, if your iconcache is rebuilding it can keep it busy for a while after bootup.

I assume you are absolutely certain it's HD activity and not a noisy fan or HD?

Always pop back and let us know the outcome - thanks


Report •

#16
September 11, 2011 at 20:13:42
In both cases percentages refer to System Idle process.

Yes, I've tried Process Explorer but, as log as I can understand it, it shows same thing than Task Mgr. It's very complicated for me to understand rest of indications.

That noise is not for a while, it's constant. When I doing something in my PC, the noise is accompanied by the disks red light, like it should b. When I'm doing nothing, and no program is open, there's no light but disc noise only,... and this is the problem: it never stops.

In the background I can here the fan noise, which is completely different. Fan's is regular but disk's is irregular and have different tones.

Since those two are the only movable pieces inside my desktop box, I'm sure that both are emitting sound ALL THE TIME.

When I run ESET Smart Security 4 to scan my PC for malware, the noise I hear --in this case, accompanied by the disks red light-- is exactly the same I hear when my PC is doing nothing.

By the way, my PC shutting down process is a bit long and and the disc noise sounds till the very last moment.


Report •

#17
September 11, 2011 at 23:38:20
"By the way, my PC shutting down process is a bit long and and the disc noise sounds till the very last moment"

Do you have Google desktop installed?

Do you have any search programs installed, such as Windows Search that index.
http://www.microsoft.com/windows/pr...

Check your settings on other programs that automatically update.

Windows Forensics: Have I been Hacked?
http://www.bleepingcomputer.com/tut...

Do you have a backup program installed?


Report •

#18
September 12, 2011 at 00:48:18
Install Microsoft Security Essentials to remove viruses from your PC.

Report •

#19
September 12, 2011 at 05:16:35
Maybe a defect HDD?

Happy is ONE who says I am an OttoMAN.


Report •

#20
September 12, 2011 at 09:16:14
Thanks to you all. Here are my answers to last kindly suggestions.

• I don't have Google Desk installed but Lookeen, which is a program that runs with Outlook and only when Outlook is open, but even when Outlook is closed the noise persists. Anyway, I uninstalled Lookeen and noise continued.

• As far as I know, Microsoft Security Essentials is not compatible with ESET Smart Security. Is it?

• I have 3 hard discs installed in my PC, all of them are Western Digital (WDC), and according with WDC program, and Seatools program, all are fine.

• I've run anti Rootkit programs, like F-Secure Flashlight, and found nothing.

However, I couldn't run FPort, Whenever I tried, a kind of DOS screen appears momentarily but disappears immediately.

Just in case this could be an indication that I've been hacked and my PC is being used through a specific port, I clock all network traffic but the disc noise continues.

I've just run Filemon and did what Johnw suggested. All programs running are known but two: and

I've just disabled the jps.exe but found something estrange related to .

• These file should be in System/32. However, most Filemon instances where csrss.exe is associated with System/32 QUERY INFORMATION indicate "Attribute: error", but there are other instances NOT associated with System/32 but with "WinSxS\Manifest\x86" or "Assembly\GAC" with not always with the error indication.

• Besides that, I also read that in Task Mgr should appear TWO csrss.exe entrance but in mine there is only one, and it is a critical system process.

Does that indicating that there's a problem with my csrss.exe?


Report •

#21
September 12, 2011 at 09:51:44
Just to say I have only one csrss.exe running on my system.

What happens if you temporarily disable your virus scanner?

I assume you have only one virus scanner running in the background all the time. More than one can cause undue activity.

You could type msconfig in the Run box then disable things in startup to see if you can find the culprit.

Always pop back and let us know the outcome - thanks


Report •

#22
September 12, 2011 at 09:59:49
Yes, I've only one antivirus running, which is ESET Smart Security 4, and I've already disabled it but was not solution at all.

Report •

#23
September 12, 2011 at 15:13:42
"I've just disabled the jps.exe but found something estrange related to"
Any file that is installed in the wrong place, or misspelled, can be a virus.
http://www.iobit.com/exedll/jqs-exe...

"I also read that in Task Mgr should appear TWO csrss.exe entrance but in mine there is only one, and it is a critical system process"
No, I only have one.
http://www.iobit.com/exedll/csrss-e...

How to deal with startup processes – do not use MSconfig
Why you should not be using MSconfig to control startups!!
http://forums.majorgeeks.com/showth...
How to troubleshoot configuration errors by using the System Configuration utility in Windows XP
http://support.microsoft.com/kb/310560
"It does not manage the programs that run when Windows starts"


Report •

#24
September 12, 2011 at 15:53:19
Another to try.

Turn off or reduce system restore to save hard drive space in XP
http://www.windowsreference.com/win...
http://www.online-tech-tips.com/com...
Start > My Computer > right click & select Properties.
Select System Restore & untick > Turn off System Restore on all drives.
Select the drive with the operating system on, click Settings & set it on Min or slightly higher.
Any other drive or partition, click Settings & tick > Turn off System Restore on this drive.
http://img858.imageshack.us/g/syste...


Report •

#25
September 12, 2011 at 16:50:11
Just to be sure.

According to Task Manager, I have one csrss.exe file only.

But according to Filemon there's one csrss.exe in System/32 and another in "WinSxS\Manifest\x86" and "Assembly\GAC".

The ones in "WinSxS\Manifest\x86" or "Assembly\GAC", are legitimate?


Report •

#26
September 12, 2011 at 16:51:09
Johnw, I've already done that several times. No solution at all.

Report •

#27
September 12, 2011 at 16:52:50
Do you have a program installed, that is using Task Scheduler.

How to use the Windows Task Scheduler
http://www.iopus.com/guides/winsche...
To stop a scheduled task that is running
http://www.microsoft.com/resources/...
How to Schedule a Program Using Task Scheduler
http://support.microsoft.com/kb/178706
How to troubleshoot scheduled tasks in Windows XP and in Windows Server 2003
http://support.microsoft.com/kb/308558


Report •

#28
September 12, 2011 at 17:00:27
"The ones in "WinSxS\Manifest\x86" or "Assembly\GAC", are legitimate?"

No idea.

http://lmgtfy.com/?q=xp+WinSxS%5CMa...

http://lmgtfy.com/?q=xp+Assembly%5CGAC


Report •


Ask Question