for Users - by Users
You are not logged in.
Since recently my hard drive has been having a lot of unusual heavy activity and the whole PC is quite slow despite being a Core2 Quad.
After investigation, i notice that the process rps.exe is very active and uses up to 30% CPU usage (plus lots of spikes) with only Firefox running. Normally i get 1% to 2% with several applications running at the same time.
I know that Rps.exe is a PC Guard process but why the big load lately?
I tried disabling PC Guard out of curiosity and after the "your PC will not be protected" message it tells me that an anti-spyware scan is in progress even though i haven't got anti-spyware activated (my PC Guard package doesn't come with this service).
I tried the whole modem re-booting sequence but still the same problem.
Anyone having the same problem?
Any help would be much appreciated.
Many thanks,
Fabrice
Abit IP-35 Pro mobo with
Intel Core2 Quad 6600 2.45Ghz
2 GB RAM
GeForce 85GT
Windows XP pro SP2
Firefox v2
Offline
Can you check if your hard drive is running in DMA mode? I have seen similar behaviour when drives were running in PIO due to driver corruption etc.
Silkie
Offline
Thanks for replying Silkie.
Windows runs on a Barracuda S-ATA 80GB
I have 2 extra HD's:
1 Barracuda S-ATA 120GB
1 Barracuda A-ATA 200GB
All 3 on native S-ATA busses and all 3 running in Ultra DMA 5.
Firefox 2, IE7 or no browser running makes no difference.
Thanks
Offline
How I would deal with this is to download 'Spybot search and destroy' (only from Safer Networking, there are others who masquerade as Spybot), and run it to get all the latest updates. http://www.safer-networking.org/en/mirrors/index.html
Download Ccleaner (free) http://www.ccleaner.com/
and Cyberscrub Privacy Suite (15 day trial) http://affiliates.cyberscrub.com/
and Windows Defender http://www.microsoft.com/windows/produc … fault.mspx
Before running any of those, go here http://onecare.live.com/site/en-us/default.htm and click the 'Full Scan' button.
When the scan is complete, disconnect from the net by unplugging the modem and reboot into 'Safe Mode' (Usually F8 just before windows starts).
When is safe mode run Spybot. On completion reboot, run MSCONFIG and disable EVERYTHING in the Startup Tab and then click the Service Tab and down the bottom you will see a tickbox labeled 'Hide all Microsoft services".
When you have done that you will be left with all the non windows things that are running, disable them all.
Come out of MSCONFIG and reboot as recommended and see what the boot speed is like now. When you have booted ans windows has settled down, have a look and see if the drive light is still indicating activity.
Now run Ccleaner, tick The 4 boxes 'Internet Explorer, Windows Explorer, System, Advanced which will tick all the indivdual boxes, (Advanced will want confirmation), so the old stuff in the prefetch and a million other places are cleaned.
When that is done, click on the Registry cleaner (under cleaner) and run that.
When that has all completed, run Cyberscrub. This is a cleanup and disc erase program that will wipe beyond recovery all the rubbish that has been deleted but as we know is still there, it's just had it's name changed.
I got rid of PcGuard as I wasn't too happy that it was doing the job properly. I now run Windows One Care, this is a pay for program, but it does have a 90 day trial if you want to do full scans/backups/tuneups for three months, (worth the 90 day trial),
http://onecare.live.com/standard/en-us/default.htm
If you don't want to pay for security, AVG (free edition) http://www.vnunet.com/vnunet/downloads/ … ee-edition
It is well respected and has a lot of good features included.
When you have completed all that, you can plug in your modem again and give it a go, doing a reboot to see if the startup and closedown are quicker.
You can leave all the things in MSCONFIG disabled as there are icons on the desktop or in the program list if you should want to run a program. Things like Adobe reader are almost virus like and run all the time, which isn't required, and hog an awful lot of the system.
[b]When you have done that lot, if you still have a problem, then you can start looking for it knowing that it is not outside influences or spyware that is causing the problem.
I used to do this in XP and it kept me fast and problem free.
Last edited by Bengie (04-10-2008 11:10:56)

Offline
Hi Bengie,
This seems quite a lot to go through and i'm wary about messing with msconfig and disabling all those sevices.
I have had no troubles whatsoever with PC Guard. Anti-virus, Firewall, Popup Blocker and Privacy Manager have served me well so far.
I use Firefox exclusively because of its security features.
I wrote:
I tried disabling PC Guard out of curiosity and after the "your PC will not be protected" message it tells me that an anti-spyware scan is in progress even though i haven't got the anti-spyware service (my PC Guard package doesn't come with it).
I'm definitely baffled with this.
Would you recommend Spyware doctor (as i can have it free with my Google account)?
Windows defender is not available for Firefox.
Many thanks.
Offline
All Msconfig does is to run what are called 'TSRs'. That is little programs that make other programs and things like your printer/office etc start up quicker, stopping them will only add a second or two to the startup of any programs and will have no effect on any of them.
When you click on a pdf file, adobe will still start so you can read it, but it wont be running in the background all the time.
If you are happy with PcGuard, then when you have done your cleanup, go back into Msconfig and tick the PcGuard boxes again so that starts on boot.
I would really recommend at least that you go to the One Care http://onecare.live.com/standard/en-us/default.htm site as this will do a full tune up and being by the same company that wrote XP should know where all the naughties and junk is hiding.
You should also have Ccleaner as well as Spybot and do regular scans.
If you really are afraid of the Msconfig, go in and disable 'all' and then when you have finished go back in and 'enable' again.
I know it seems like a lot to do, but it really is worth doing.
Syware doctor is a good program and I certainly wouldn't say no.
Do you have any toolbar add ons running ie google or yahoo, they aren't required and take resources and slow you down.
If you want to put a screenshot of Msconfig up or list everything that is there, we can tell you what to disable for your benefit.
Last edited by Bengie (04-10-2008 11:25:07)

Offline
Offline
Is there anything odd showing up in the system error logs?
Silkie
Offline
Is identity theft protection on? People have said this can cause large amounts of slowdown.
Offline
I am kind of wondering if something has slipped through, see if you can get Spybot going as sometimes spyware can get past some AV packages.
Silkie
Offline
I'm downloading Spybot now and will try a scan with it. I'm going to try Spyware Doctor too.
I've already tried Windows Defender and CCleaner but nothing abnormal.
Rps.exe is the process that start when launching PC Guard. If PC Guard is not running (in the background) i don't get the problem at all.
Is it worth calling Virgin technical support?
Thanks
Offline
Fabrice wrote:
Is it worth calling Virgin technical support?
Not really as they will most likely tell you the same things as you've been told here 
Could you run HijackThis and post back the report it generates, you can download it from Trend Micros website here.
Offline
Cheers TazUk.
I tried Spybot and Spyware Doctor. Since installing those spyware removal tools, pc guard doesn't load properly and the anti-virus service is not there, and quite a few strange error thingies happening and i don't like it at all.
Anyway, I run Hijackthis and i got this log i hope that's what you're referring to:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:37:52, on 06/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virgin Broadband\PCguard\Fws.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\digi96.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Mediafour\MACVNTFY.EXE
C:\WINDOWS\vVX1000.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Virgin Broadband\PCguard\RPS.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\U-ABIT\uGuru\uGuru.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Sun\StarOffice 8\program\soffice.exe
C:\Program Files\Sun\StarOffice 8\program\soffice.BIN
C:\WINDOWS\ALCFDRTM.EXE
C:\WINDOWS\System32\wbem\wmiprvse.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
C:\Program Files\Virgin Broadband\PCguard\rpsupdaterR.exe
C:\WINDOWS\system32\MsiExec.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/ig?hl=en&source=iglk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://selfcare.blueyonder.co.uk/IIPSC … assword.do
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Pop-Up Blocker BHO - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\Virgin Broadband\PCguard\pkR.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [RMETray] digi96.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [-FreedomNeedsReboot] "C:\Program Files\Virgin Broadband\PCguard\ZkRunOnceR.exe"
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Mediafour Mac Volume Notifications] "C:\Program Files\Common Files\Mediafour\MACVNTFY.EXE" /auto
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [PCguard] C:\Program Files\Virgin Broadband\PCguard\RPS.exe
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\RunOnce: [IndexCleaner] "C:\Program Files\Virgin Broadband\PCguard\IdxClnR.exe"
O4 - HKCU\..\Run: [ABIT uGuruIII] C:\Program Files\U-ABIT\uGuru\uGuru.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\RunOnce: [IndexCleaner] "C:\Program Files\Virgin Broadband\PCguard\IdxClnR.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: StarOffice 8.lnk = C:\Program Files\Sun\StarOffice 8\program\quickstart.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resour … se5036.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s … wflash.cab
O20 - Winlogon Notify: MacDrive-iTunes compatibility - C:\Program Files\Common Files\Mediafour\MacDriveiTunesPatch.dll
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: Virgin Broadband PCguard Update Service (RPSUpdaterR) - Radialpoint Inc. - C:\Program Files\Virgin Broadband\PCguard\rpsupdaterR.exe
O23 - Service: PCguard Firewall (RP_FWS) - Virgin Media - C:\Program Files\Virgin Broadband\PCguard\Fws.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
--
End of file - 8444 bytes
Offline
Nothings leaping out so far but to clarify are you running a MAC hard drive or partition?
Silkie
Offline
Nothings leaping out so far but to clarify are you running a MAC hard drive or partition?
No Silkie, I just have Mediafour's MacDrive which is an application that can read / write Mac formatted hard drives.
F.
Offline
The log looks fine 
Could be a recent Windows update that's causing the problem 
Offline
I still think you have too many things running and need to shut down all those msconfig startup progs except the PcGuard. They are all hogging your memory and using chip functions and not one of them are required for running.
Your only other choice is to do a clean reinstall.
Last edited by Bengie (07-10-2008 00:00:47)

Offline
Bengie wrote:
I still think you have too many things running and need to shut down all those msconfig startup progs except the PcGuard. They are all hogging your memory and using chip functions and not one of them are required for running.
Hi Bengie,
I don't think that's the problem. I have already streamlined it and got rid of many un-needed processes.
You should see my computer at work, it has an enormous amount of services and applications running in the background and it's a Core2 Duo only. It performs miles better than this one (a Quad with 2GB of RAM) and looking at the memory usage it's not an issue at all.
Honestly, it really is just the rps.exe that is hogging the system, nothing else.
Since i can't make sense of it, i'm wondering if other pc guard users are having this exact problem?
Thanks,
F.
Offline
Bengie wrote:
Have you check the Task Manager to see what processes are hogging?
Yes, Rps.exe only
If that's showing 99% idle, then there could be an overheating problem, are all the fans running?
You're confusing things here Bengie.
The process System Idle Process means the system is in almost 100% idle state = completely normal at 99% (thank god for that!)
I've got a system that is running really cool with CPU temperature below 30°C and motherboard below 40°C all the time.
Fabrice
Offline
Without trying to muddy the waters here, might I suggest uninstalling PC Guard.
If you want it back download a new copy, and do a fresh install from that. It is possible that your version has a problem.
Sadly I would suggest that if the above doesn't work then contacting VM support may be the only way to go BUT first level support won't be able to help in any way shape or form. You'll probably need second level support, so it will all depend on whether first level recognise that.
also:
Bengie wrote:
Your only other choice is to do a clean reinstall.
never ever suggest this unless you are 100% sure it needs to be done.
Offline