View original (French)

Disk memory at 100% + 18 F-Secure processes

Geo1460 Posted messages 8 Registration date   Status Member Last intervention   -  
 Geo1460 -
Hello,

I'm not too sure if I'm in the right forum given the unbelievable amount of choices in the dropdown menu... but anyway!

Here's my problem: as soon as I turn on my PC, it takes less than 2 minutes for the disk memory to be full, and it especially stays full if I don't do anything.
So I went into the processes and noticed that I had 18 instances of F-Secure (antivirus) listed, but all at 0 Mo/s in disk memory. I'm sorting the disk memory-hungry processes, but when I finish sorting, the disk memory sometimes stays at 100% even though all the processes are at 0 Mo/s?! Could it be a virus running in the background that's not listed in the processes?

I've obviously done a virus scan, defragmented, disabled Superfetch, etc.
I have an Everest report and a HiJackThis report if you'd like to take a look; that would be nice :) Thanks in advance!

The Everest and HiJackThis reports:

https://www.cjoint.com/c/HJcnucjAVdL

3 answers

  1.
    Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712
     
    Use FRST, we will see more clearly.

    To check the computer, I invite you to perform this FRST analysis and return the reports:

    Follow the FRST tutorial. ( take the time to read carefully - everything is well explained ).

    Download and run the FRST scan,
    Wait for the scan to finish, a message indicates that the analysis is complete.

    Three FRST reports will be generated:
    • FRST.txt
    • Shortcut.txt
    • Additionnal.txt


    Send these 3 reports to the site https://pjjoint.malekal.com/ to share them.
    In return, provide the 3 pjjoint links that lead to the reports here in a new response so that we can consult them.

    --
    Please press a key to continue the disinfection...
    1
    1. Geo1460
       
      I'm willing to, but it has crashed 5 times after a while, so it's impossible to do a complete analysis. The disk spikes to 100% and stays there. I have to restart each time.
      I tried reducing the swap, which was at 8GB, and lowered it to 3.5GB to see if it made any difference, but it didn't change anything.
      0
  2. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712
     
    Hello,

    To uninstall:
    Java
    McAfee Safe Connect (bloatware)
    pCloud (useful?)
    Power2Go
    Web Companion (bloatware)

    2) Disable/Remove from startup:

    Discord
    Skype
    See: how to remove a program from Windows startup

    After uninstalling, reinstall F-Secure.

    --
    Please press any key to continue the disinfection...
    0
    1. Geo1460 Posted messages 8 Registration date   Status Member Last intervention  
       
      Hello! Thank you for your response!

      pCloud is useful yes, it's for managing data exchanges with the observatory.
      The rest, I'll uninstall it then and I'll disable Skype. However, Discord doesn't launch at startup; I've already disabled it normally.
      I'll do that and come back here!
      0
    2. Geo1460
       
      Well, it’s less easy than expected: McAfee is not in the uninstall menu of programs (in programs and features) and I only have Java 8 update 161. Should I delete it anyway?
      0
      1. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712 > Geo1460
         
        yes.
        0
  3. Geo1460
     
    Re! I've done everything but I'm still at 100%... it doesn't change anything.
    0
    1. leenvol Posted messages 114 Status Member 81
       
      Could you post a new report?
      So that the members of the team can analyze the changes.
      In your previous report, your system seems to be requesting virtual memory at a considerable rate while your RAM is only used at 33%.
      Try to follow this little tutorial to see if your virtual memory is being used and, if so, to what extent.
      The report indicated values, but this can help verify.


      https://www.malekal.com/verifier-windows-swap/
      0
    2. Geo1460 Posted messages 8 Registration date   Status Member Last intervention  
       
      Thank you for your reply! Which report(s) do you want? Hijack, Everest, or both?
      0
    3. Geo1460 Posted messages 8 Registration date   Status Member Last intervention  
       
      However, in the tutorial, I reach the moment when I need to type "perform.msc" in run, but Windows tells me it does not exist!
      0
    4. leenvol Posted messages 114 Status Member 81 > Geo1460 Posted messages 8 Registration date   Status Member Last intervention  
       
      Both are better, it could help members who are much more competent than me.
      Too bad it doesn't work :/
      Well, I'll manage without it, as long as I have the reports to compare the two.
      0
    5. Geo1460 Posted messages 8 Registration date   Status Member Last intervention  
       
      Right now, the disk is running at 25%...without really knowing why!
      That said, it can't keep going like this: 40 minutes at 100% disk usage is frankly sh*t!
      0