Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: laptop slower since MSE found a potential threat (and didn't deal??)

29 May 2016   #41
cluberti

Windows 10 Pro x64
 
 

Downloading.


My System SpecsSystem Spec
.
29 May 2016   #42
ajaye

64 bit, Windows 7 Home Premium SP1
 
 

Thanks so much
My System SpecsSystem Spec
29 May 2016   #43
cluberti

Windows 10 Pro x64
 
 

5 seconds are lost due to Winlogon waiting for the audio process (StacSV) to start (5 seconds). There's a delay in explorer.exe starting which appears to track back to Windows Defender scanning D:\Preload\Base.wim (almost 100% of the time spent), along with another large delay due to explorer tray/shell calls due to ObjectDock (DesktopDock64 and ShellEx64). Post-explorer init appears to come mostly from App-V and the Office virtualization handler service (Office 365 installed?), as well as an additional very large disk overhead to the same file mentioned previously.

A couple of questions - is that WIM file mounted and in use? Does this issue reproduce without Office and Object Desktop installed?
My System SpecsSystem Spec
.

29 May 2016   #44
ajaye

64 bit, Windows 7 Home Premium SP1
 
 

Thank you very much for taking time out to look at this for me cluberti. I'll try to answer your questions when I get home from work, but...

Quote   Quote: Originally Posted by cluberti View Post
A couple of questions - is that WIM file mounted and in use? how will I be able to tell?
Quote:
Does this issue reproduce without Office and Object Desktop installed um, I have no idea...??
My System SpecsSystem Spec
30 May 2016   #45
ajaye

64 bit, Windows 7 Home Premium SP1
 
 

So that wim file is the threat that MSE found in the first place, and it's still worried about it? I was never able to locate the file, it's in the recovery drive that I can't get a look into (image in my post 17). Would that explain why I now always get the little green popup box saying detected threats are being cleaned (image in my post 24)?

I've never uninstalled Office. I don't know what Object Desktop is.
My System SpecsSystem Spec
31 May 2016   #46
ajaye

64 bit, Windows 7 Home Premium SP1
 
 

If I installed windows ten might I be able to sidestep this problem, or would it more likely make it worse?
My System SpecsSystem Spec
02 Jun 2016   #47
cluberti

Windows 10 Pro x64
 
 

I would guess in the answer to the .WIM file, the recovery image itself is likely infected (or was), and is unable to be cleaned due to the partition / filesystem. I would in this case (as I would recommend in 99.999% of infection cases) that you back up your data to another drive (removable or otherwise), make sure it's clean there, and then rebuild the PC from scratch. With whatever OS you're comfortable with and are licensed to use.

Then, restore applications, make sure everything is clean with an offline scan, then restore data and offline scan again before committing to use the PC going forward.

What is Windows Defender Offline? - Windows Help
My System SpecsSystem Spec
02 Jun 2016   #48
ajaye

64 bit, Windows 7 Home Premium SP1
 
 

Thanks cluberti.

So I'll back up my files to an external drive.

Then do I do "Return your computer to factory condition"?
My System SpecsSystem Spec
03 Jun 2016   #49
ajaye

64 bit, Windows 7 Home Premium SP1
 
 

Success!

I backed up my files, did a factory restore then scanned and reloaded my files.

And she's working like a dream, starting quickly again and running a lot more quietly too.

Thank you everyone for all your help, I really appreciate it.
My System SpecsSystem Spec
03 Jun 2016   #50
derekimo

Microsoft Community Contributor Award Recipient

 
 

You're welcome, although I think Golden, cluberti and Layback Bear did all the helping.

Glad you got it sorted.
My System SpecsSystem Spec
Reply

 laptop slower since MSE found a potential threat (and didn't deal??)




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
How do I deal with potential malware in Immunet file folder?
I have been using Microsoft security essentials on my compaq 420, 32 bit laptop. On examining it with a second anti virus scanner the following results were found... <Malware (2) Information about malware detected on the computer. Kaspersky Lab recommends...
System Security
ESET Antivirus detected a potential threat in Winzip Utilities
Hi all, there is something that ESET detected as a potential threat and I'm not sure which option to take: disinfect it or to ignore it (as this within Winzip folder) If this within Winzip folder, which I installed from a CD (not downloaded from internet). So it is false or positive ? I was...
System Security
got a proxy link in browser, didn't ask for it, possible threat ?
I recently noticed that when I surf to amazon my address url quickly flashes http://proxy.metalink.net/details.html?r=944&t=1170D1376250577A028650&b=1170&d=http%3A%2F%2Fwww.amazon.com%2F then to the normal amazon.com address. I can surf elsewhere and it does not do that, only when I go to...
System Security
Cant Delete Folder After MSE Found Threat
MSE found a threat on my data drive, I chose to have it removed and it froze permanently. I tried to manually delete that folder but it just says "discovering items" and then nothing happens. No error messages... I have tried going into safe mode to remove the folder without luck. I have even...
System Security
Is Internet Explorer a potential threat to system?
Recently I got to know from two fairly computer savvy people that not only is Internet Explorer full of defects, but it also is a path in which viruses can enter our system without our knowledge. Having known this I retained Chrome as my default browser. How can a virus attack our system through...
Browsers & Mail


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 03:26.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App