siliconman01
Global Moderator
    
 Trojans! Chew 'em Up, Spit 'em Out...
Gender: 
Posts: 5467
|
 |
Re: TrojanGuard Starts Disabled
« Reply #10 on: Nov 20th, 2006, 9:59am » |
Quote Modify
|
Hmmm... THGuard is not a service in the Windows definition of "Services". It's just a normal application starting up through the RUN registry entries/keys. I have a sneaky suspicion that it is Venus FlyTrap in TrendMicro AS that is bogging down your reboot. When I was playing around with this AS, I found that the FlyTrap took a long time to release CPU utilization time on a reboot. There is a file that gets very large (200+ megabytes) in TrendMicro AS over time. I cannot remember the name of the specific file at the moment. Can you take a look in the C:\Program Files\TrendMicro folder and its subfolders and see if you have a file that is very large. It will have a .dat extension. If you have such a file, please post back the name of it and I feel I will recognize it by name. I don't know of any way to order the startup of System Services; however, there are programs that do permit staging the startup of normal programs. Pgm StartUp Delayer at http://www.r2.com.au/software.php?page=2&show=startdelay is one that I have used. One utility that will help you monitor programs to see if any are hogging cpu cycles is Process Explorer by SysInternals (now owned by Microsoft). http://www.microsoft.com/technet/sysinternals/utilities/ProcessExplorer. mspx To get the full benefit of this program, you also need to install Windows Debugging Tools from http://www.microsoft.com/whdc/devtools/debugging/default.mspx The thing I like about Process Explorer is that it has an option to load a CPU utilization display in your Systray that continuously graphs the CPU utilization so that you can watch it to see if you are getting spikes. I have this set up to startup automatically on reboot. It's amazing how long it takes certain programs to stabilize and release memory on a reboot...quite an eye opener, particularly on security type programs. BTW, are you sure Ad-Watch is not blocking needed registry changes of THGuard? I know there are registry guard options in Ad-Watch that can do this. Perhaps if you turn off the registry guard options in Ad-Watch, set THGuard the way you want it, reboot, and then turn the Ad-Watch guards back on, the problem will go away.
|