There is an an established complaint about PCcillin 2007 causing drastic system slowing with the new 2007 program. The culprit is PCScnSrv.exe (33,628k) which loads on boot. Nobody at this point is totally sure what this does. TM blames Spybot Search and Destroy's immunization list for causing their spyware scan to constantly activate, but there is no way I am going to remove Spybot S&D from my computer!

At this point Trend Micro acknowledges it has a problem and is working on it, so look for a patch being released in the future. In the meantime, I suggest a workaround to help: when you boot, enter Task Manager and End Process on the above entry. You will notice an immediate jump in performance and speed. I tried renaming the actual entry in Explore to PCScnSrv.OLD. It did it, but on next boot the .exe was back, so that isn't going to work.

Here is a link to TM's suggested workaround, but it's "iffy" at best. Workaround

Also, TrendMicro related in their knowledge base that PC-Cillin AntiFraud Toolbar is not yet compatible with IE7.

Chris

Thanks Chris, this is news to me.


I checked the support page and got this . Same as your workaround page. I think it is ok solution.
http://esupport.trendmicro.com/support/vie...entID=en-126724
Seems it is up to the user 9as I have stated before most users don't know much about security and that is sad!) Chris I am satisfiied with this as it hasn't happened to me. And all my thingys are turned on and running. But if you might monitor this situation keep me posted please.

THE ANSWER:(?) it comes down to this as you all know; Pcscnsrv.exe.

On my computer this has shown to be upto 100,000K on my task list! I tried the solution from Trend (http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1033903&id=EN-1033903) and this did not work - the reason (I think at least) is below (at the bottom) but first my idea to fix this:

After this solution failed, I looked at the file mentioned; usrwl.dat in more detail. This was for me 40.2MB in size.

Open the file (will open a notepad text document) - will take some time (3-4 minutes for me perhaps) as it may be extremely long/large - and see where the problems lie in your system by simply reading the entries - it is not perhaps crystal clear but some common sense should prevail - mine were traceable to registry entries as shown below : I decided to delete these as they appear fairly useless, So to do this; (I take no responsability if you destroy your machine, this is only information to what I have done to try and fix the problem and it seems to work for me, and to me; makes sense with regards to the fault)

Click START, then RUN and enter “regedit” and press enter, locate your culprits by going to relevant folders. I traced mine to here (as well as some others, read your usrwl file to find them)

HKEYUSERS:S-1-5-18 : SOFTWARE : MICROSOFT : WINDOWS : CURRENTVERSION : INTERNETSETTINGS : ZONEMAP : DOMAINS.

In here (and others) are all the blocked websites in internet explorer, I just deleted these and the others, as appeared to be maybe from Spybot (who knows they could be from Trend/PC-Cilin?) I then deleted the file usrwl.dat again and restart your machine. The file size is now 156Kb rather than 40.2MB. I’m not sure how cosher this is, so perhaps it is up to you if you think this is safe and correct? Post/mail if you want any help.

The reason:??? (I assume)

Trend tell you (in their solution) to update and THEN undo spybot, but when you update you are forced to uninstall spybot. But because spybot adds bad sites to immunize i.e. at first it is approximately 1000 sites whenever you first install, then in a week they add another 700, and so on, you never actually download all of the bad sites - for whatever reason. Previously, before uninstall I had about 18,000 blocked or something ridiculous because I had had the programme on for some time, after the reinstall it was only 1,000 or so and I could not “System Restore” because of Trends poorly worked update and conflicts between old version and new it became apparant. So after undoing the immunize as insructed I was only undoing 1060 blocked sites and so the solution failed. I then read the file as described and so on.

Hopefully this makes sense?
Good luck.

Thank you very much Bob, for posting the workaround

Click to view attachment What a differance...

I had upgraded to PCcillin 2007 Feb. 3ed and I didn't really noticed any difference until about two weeks ago, that my computer was getting slow, but not all at once, than last week, it was so slow, that I was getting ready to do a Hijack This log. It was a lot slower especially if I had more than one window up. I saw your post, but didn't think anything about it until last night when I was getting ready for bed. Than I checked it out again today, so I thought I would try that first, before dong the Hijack this.

Well the out come was what you described "immediate jump in performance" You were right, I shut the computer down a couple times, and the .exe came back.

I hope they find a fix for it, so we don't have to do 'End Process' on it all the time.

Thanks again Bob

Lorraine

Welcome, Lorraine! The reason that I suggest this is that there is far less chance of damaging anything than Trend's suggestion, and Trend's doesn't work many times anyway. It only take 5 seconds to do.

I think I do..

It's for the automatic scanning for PC-cillin. This is what I got, when it came up to do the scanning.

But I'm going to make sure, and shut down the computer, and restart, and not End Process on the above entry (PCScnSrv.exe) and will let you know what happens.


Click to view attachment


Click to view attachment

Yep, that was it, the scan went fine, so now I'll reboot and End Process on (PCScnSrv.exe) again.

I've tried it with and without that service running, and haven't seen any difference in the operation of the system, other than the auto-scan not running when that service was off.

That's because you have a great computer there Jim

It does make a big differents on my computer though.

I can't even scan manually with the service turned off, but that's ok, I'll turn it back on when I want to scan again, and off when I'm finished.

Lorraine this all happened with the newer Trend Micro PC-cillion 2007 Internet Security utility.
I think I shall stick with their 2006 as it works. But I do get a lot of build up (when I analyze with the system defrag tool, the largest amount is from Trend Mirco's utility) so I have to Defrag more often than before I got it. But the defrag process is quick and cleans up the machine nicely.

I'm not sure I follow this. Are you saying that you deleted all the entries under Domains here? Otherwise, what selection criterion did you use?

Also, how about in P3P History just above Domains??

I deleted all (or tried to) of the domains listed under Restricted Sites in IE and this had no effect.....

Man I am on the laptop and it is running PC-cillin, Internet Security 2007 and SpyBot. While on the desktop it deleted Spy Bot and still didn't install the 2007 version. I e-mailed trend Mirco about this. $57.97 and nothing but they are paid and digitalriver is the go between. Trend Mirco best get it right the first time or I shall get another AV/Firewall.
Now I need to ask why on the laptop I can use SpyBot and not on the desktop. Stupid and time consuming when I have so little time to waste right now.
Anyone else have experiences like this?