Need Help With Spy Sweeper

I have already opened, reopened, reopened, and reopened a ticket with Webroot about this problem. I am starting to believe that it is not SS 5.5 that causing the real problem. The main reason for this belief is because my cousin has it and has no problems with SS. Spy Sweeper is using up to 70% of a 3.06 GHz processor (50% on average). With SS shut down, my processor usage is 10%-15%. With SS uninstalled, my processor usage is 5%-8%. My cousin's processor usage with SS active in the background is 10%-15% of a 1.36 GHz processor. The major differences between our computers are: Mine has 1.5 GB of RAM, NAV 07, 3.06 GHz Pentium 4 w/HT, and is a laptop. His has 2.0 GB of RAM, CA AV, 1.36 GHz AMD, and is a desktop. I think something is keeping SS in startup but I do not know what. I posted here first to see if it was something simple, before I posted a HijackThis log. Any help would be appreciated. Thinks in advance to any and all help. PS. Spy Sweeper use to run normally before v5.0.

You can manage "real-time protection" of SpySweeper, from inside of its own options.
or
You can "disable" SpySweeper" real-time protection from your Windows System Configuration Utility
Start - Run - (type)MSCONFIG - Enter - StartUp(tab) - remove the checkmark/tick from in front of the SS active item.
You'll probably get an "alert" warning you that your machine is not being protected, and prompting you to re-enable SS
You will still be able to use SpySweeper as a manual scanner.
Each time you use SpySweeper as a manual scanner, it will try to put itself back into your StartUp List, and you can easily use the MSCONFIG procedure to "disable" it each time after use.

Both SpySweeper and NAV are heavily resource intensive and probably contributing to the CPU load.
From your comparison to your friend's machine that also has SpySweeper, it would be the NAV that is most likely making the difference.
———-

However, those CPU load % numbers are pretty darn high, and should be much closer to 0% at all times unless you are running intensive applications or have an AntiVirus Scan or some other Scan running in the Background.

Have a look at the other items in your MSCONFIG StartUp list for additional culprits hogging your resources.
You can safely "disable" any/all items in the StartUp list, (except your AntiVirus and Firewall)

Best Regards

Thanks for the help. Ihave already stopped SS loading on startup and keep it shut down unless I need it to scan. It has been that way for about a week. I am still playing message tag with Webroot so if I finally get a solution from them, I am most definatlly going to post it here.

You can run a Full Tests at http://www.pcpitstop.com for an excellent overview of your manchine's current functioning.
Register with a valid email address and create a Password. then accept the ActiveX component to enable the Tests.
Both Registering and ActiveX are safe and FREE!

When you get your Results, post the TechExpress Link back here and we can have a look to see if there are other steps that could be helpful to your machine's proper function.

Best Regards

Here you are Doug: http://www.pcpitstop.com/techexpress.asp?id=SJQ3HWEDDSVSMQKW

If you are now generally happy with your machine's performance you can get by with simply following the Pit Test "Tune Up Tips".

If the machine still loads slower than you would expect and/or applications are not as brisk as you would prefer, then:
Consider disabling the following, via MSCONFIG:

Realplayer RealNetworks, Inc. C:\Program Files\Common Files\Real\Update_OB\realsched.exe
Sun Java Update Sun Microsystems, Inc. C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
Intel Hotkeys Intel Corporation C:\WINDOWS\system32\hkcmd.exe
InstallShield Update Service Macrovision Corporation C:\Program Files\Common Files\InstallShield\U … \ISUSPM.exe
AppSvc32.exe Symantec Corporation C:\Program Files\Common Files\Symantec Shared … \AppSvc32.exe
ccSvcHst.exe Symantec Corporation C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
PictureProject Monitor Nikon Corporation C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
WinMemOpt.exe Businesss Logic Corporation C:\Program Files\WinCleaner Memory Optimizer\WinMemOpt.exe
Hewlett-Packard Co. C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
Broadcom Corporation. C:\Program Files\IOGEAR\Bluetooth Software\bin\btwdins.exe <– unless you're running bluetooth connected gear
Yahoo! Inc. C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe

this one:

Office XP speech Microsoft Corporation C:\WINDOWS\system32\ctfmon.exe

Needs to be disabled via
Control Panel - regional and Language Options - Language - Details - Advanced - then put a Checkmark/tick in "Turn off advanced text service"
________

It is strongly recommended that you follow the Following Tune-Up Tips as indicated on the Pit Test:

–Reduce space reserved on your C:\ for System Restore to approximately 3% or approximately 1000mb - 1500mb
–Defrag your C:\ drive
(with a machine as strong as yours, I would be very dissatisfied with the C:\ performance of 12mb\s)
(That performance will very likely improve after Defrag)

The Browser Cache size is "less critical", but you are dragging alot of temps and cookies to each and every site that you visit. Reduce the Cache Size to about 100mb.
__________

You have more than one "very outdated" JRE version, the two that I can see do have vulnerabilities and should be removed.
Use Add\Remove to Uninstall "all" versions of JAVA Runtime Environment, and then download/install the most recent from here:
this is the one you want: Java Runtime Environment (JRE) 6u1

Post back with your progress.

Best Regards

Thanks Doug for all of your help. I think I have figured out the problem. When I put NAV and SS on active protection, they use to play nice with each other. Now SS is no longer compatible with NAV. NAV is blocking SS's attemps to scan NAV's files. SymProtect Event Details: Actor: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE (PID=1916) Target: C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe Action: Unauthorized access Reaction: Unauthorized access stopped I am guessing that SS is no longer in NAV's Trusted Apps List. I am going to let Webroot know and see if that is it. Thanks agian. P.S. My computer is running a lot faster now because of following your advice and by doing the self help before you post a HJT log.

Nice work following up on the SpySweeper - NAV situation. Please do let us know if either company gives you any useful feedback. Glad you generally got the rest of the machine sorted to the point that it is running satisfactorily for you. Doug