Hi.
I'm experiencing following problem with using Windows Defender:
When I start Full Scan after few minutes it stops, time in field time passed
also stops.
I've notices that problems are always with files in RECYCLER\... on every
drive.
There are no problems with Quick Scan .

I'm using WinXP SP2, ZoneAlarm (free firewall) and Avira AntiVir Personal
Edition.

How can I solve this problem?

Hello Tomas,

Have you tried the scan operation running in safe mºde?
http://www.computerhope.com/issues/chsafe.htm

Have you try to clean your System?
Try to use Ccleaner
http://www.ccleaner.com/downloadbuilds.asp
Note, When you install Ccleaner, uncheck the Yahoo toolbar option.
Note, in Options, Settings, Advanced, uncheck - Only delete files in Windows
folders older than 48 hours.
Note: uncheck Windows Defender in the applications.
Run twice Ccleaner, the same as below,until you get “0 bytes to be removed”.
Open Ccleaner and press "Windows" "Aplications" and "Run Cleaner" from the
menu choose 'Issues' and then press scan for issues, Repair any fºund.


Also the way to dig into this:
Windows Defender records, in the System event log, at the time of the scan,
the precise path and filename of each detection.

So--right click My Computer, choose Manage.
Click on the plus sign in front of Event Viewer.
Click on the System events log, in the left column.
Click on View (top menu), filter.
Click the down-arrow at the right of Event Source, and choose "WinDefend."
Click apply, click OK.

Now--in the right window, scroll back to the time of the original detection,
and look for yellow-triangle marked records for those original detections.
Double-click a record in the right window to open it and see the full
detail. You can cut and paste, via a button--back to this thread.

For the benefit of the community reading this post, please rate the pºst.

I hope this post is helpful.

Let us know how it works ºut.

Еиçеl
--


FAMILY
Accidents will occur in the best regulated families. —-Dickens





"TomaszK" wrote:

> Hi.
> I'm experiencing following problem with using Windows Defender:
> When I start Full Scan after few minutes it stops, time in field time passed
> also stops.
> I've notices that problems are always with files in RECYCLER\... on every
> drive.
> There are no problems with Quick Scan .
>
> I'm using WinXP SP2, ZoneAlarm (free firewall) and Avira AntiVir Personal
> Edition.
>
> How can I solve this problem?
>

In safe mode it works fine, so I guess it's not fault of Defender itself.
I've cleaned system like you advised but results are the same.

====
Windows Defender Real-Time Protection agent has detected changes. Microsoft
recommends you analyze the software that made these changes for potential
risks. You can use information about how these programs operate to choose
whether to allow them to run or remove them from your computer. Allow
changes only if you trust the program or the software publisher. Windows
Defender can't undo changes that you allow.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=74409
Scan ID: {C51E0FD7-F422-472D-8447-5777A52FB8F7}
User: TOMEK\Player
Name: Unknown
ID:
Severity: Jeszcze niesklasyfikowane
Category: Jeszcze niesklasyfikowane
Path Found:
usershellfolder:HKCU@S-1-5-21-606747145-688789844-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\\Personal
Alert Type: Oprogramowanie nieklasyfikowane
Detection Type:
====
Windows Defender Real-Time Protection agent has detected changes. Microsoft
recommends you analyze the software that made these changes for potential
risks. You can use information about how these programs operate to choose
whether to allow them to run or remove them from your computer. Allow
changes only if you trust the program or the software publisher. Windows
Defender can't undo changes that you allow.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=74409
Scan ID: {2A2EB0C3-50CD-4ADF-BD81-115950D0DF3D}
User: TOMEK\Player
Name: Unknown
ID:
Severity: Jeszcze niesklasyfikowane
Category: Jeszcze niesklasyfikowane
Path Found:
usershellfolder:HKCU@S-1-5-21-606747145-688789844-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\\Personal
Alert Type: Oprogramowanie nieklasyfikowane
Detection Type:
====
Windows Defender Real-Time Protection agent has detected changes. Microsoft
recommends you analyze the software that made these changes for potential
risks. You can use information about how these programs operate to choose
whether to allow them to run or remove them from your computer. Allow
changes only if you trust the program or the software publisher. Windows
Defender can't undo changes that you allow.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=74409
Scan ID: {18CA29C3-6075-41EF-9B74-77631B9E33E7}
User: TOMEK\Player
Name: Unknown
ID:
Severity: Jeszcze niesklasyfikowane
Category: Jeszcze niesklasyfikowane
Path Found: driver:VClone;file:C:\WINDOWS\system32\DRIVERS\VClone.sys
Alert Type: Oprogramowanie nieklasyfikowane
Detection Type:
====
Windows Defender Real-Time Protection agent has detected changes. Microsoft
recommends you analyze the software that made these changes for potential
risks. You can use information about how these programs operate to choose
whether to allow them to run or remove them from your computer. Allow
changes only if you trust the program or the software publisher. Windows
Defender can't undo changes that you allow.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=74409
Scan ID: {BDEF36F9-51BD-412A-9B86-CCFF0C4C9B43}
User: TOMEK\Player
Name: Unknown
ID:
Severity: Jeszcze niesklasyfikowane
Category: Jeszcze niesklasyfikowane
Path Found: driver:ElbyCDIO;file:C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
Alert Type: Oprogramowanie nieklasyfikowane
Detection Type:
====

....and about twenty more warnings.

I'm thinking of formatting all partitions including windows one.
Can you tell me in which order I should install WinDefenfer, Avira AntiVir
and Zone Alarm Firewall so they won't affect Defender?

Have you tried removing the old restore points?

If your system is operating optimally as far as you can tell, and has had no
recent changes to software or hardware, consider removing old restore
points.

Go to start, all programs, accessories, system tools, disk cleanup. Select
a drive and allow it to scan for files to be compressed or removed.

When that scan completes, select the tab for More Options.
Wording varies between OS versions, but on that tab there should be a
section for System Restore and Shadow Copies--and if you click Clean up on
that section, it will remove all but the most recent restore point, as well
as associated shadow copies, if applicable (shadow copies will only exist on
some Vista editions, I believe.)


"TomaszK" <(E-Mail Removed)> wrote in message
news:E2280C93-D9BF-4C72-9A59-(E-Mail Removed)...
> In safe mode it works fine, so I guess it's not fault of Defender itself.
> I've cleaned system like you advised but results are the same.
>
> ====
> Windows Defender Real-Time Protection agent has detected changes.
> Microsoft
> recommends you analyze the software that made these changes for potential
> risks. You can use information about how these programs operate to choose
> whether to allow them to run or remove them from your computer. Allow
> changes only if you trust the program or the software publisher. Windows
> Defender can't undo changes that you allow.
> For more information please see the following:
> http://go.microsoft.com/fwlink/?linkid=74409
> Scan ID: {C51E0FD7-F422-472D-8447-5777A52FB8F7}
> User: TOMEK\Player
> Name: Unknown
> ID:
> Severity: Jeszcze niesklasyfikowane
> Category: Jeszcze niesklasyfikowane
> Path Found:
> usershellfolder:HKCU@S-1-5-21-606747145-688789844-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\User
> Shell Folders\\Personal
> Alert Type: Oprogramowanie nieklasyfikowane
> Detection Type:
> ====
> Windows Defender Real-Time Protection agent has detected changes.
> Microsoft
> recommends you analyze the software that made these changes for potential
> risks. You can use information about how these programs operate to choose
> whether to allow them to run or remove them from your computer. Allow
> changes only if you trust the program or the software publisher. Windows
> Defender can't undo changes that you allow.
> For more information please see the following:
> http://go.microsoft.com/fwlink/?linkid=74409
> Scan ID: {2A2EB0C3-50CD-4ADF-BD81-115950D0DF3D}
> User: TOMEK\Player
> Name: Unknown
> ID:
> Severity: Jeszcze niesklasyfikowane
> Category: Jeszcze niesklasyfikowane
> Path Found:
> usershellfolder:HKCU@S-1-5-21-606747145-688789844-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\User
> Shell Folders\\Personal
> Alert Type: Oprogramowanie nieklasyfikowane
> Detection Type:
> ====
> Windows Defender Real-Time Protection agent has detected changes.
> Microsoft
> recommends you analyze the software that made these changes for potential
> risks. You can use information about how these programs operate to choose
> whether to allow them to run or remove them from your computer. Allow
> changes only if you trust the program or the software publisher. Windows
> Defender can't undo changes that you allow.
> For more information please see the following:
> http://go.microsoft.com/fwlink/?linkid=74409
> Scan ID: {18CA29C3-6075-41EF-9B74-77631B9E33E7}
> User: TOMEK\Player
> Name: Unknown
> ID:
> Severity: Jeszcze niesklasyfikowane
> Category: Jeszcze niesklasyfikowane
> Path Found: driver:VClone;file:C:\WINDOWS\system32\DRIVERS\VClone.sys
> Alert Type: Oprogramowanie nieklasyfikowane
> Detection Type:
> ====
> Windows Defender Real-Time Protection agent has detected changes.
> Microsoft
> recommends you analyze the software that made these changes for potential
> risks. You can use information about how these programs operate to choose
> whether to allow them to run or remove them from your computer. Allow
> changes only if you trust the program or the software publisher. Windows
> Defender can't undo changes that you allow.
> For more information please see the following:
> http://go.microsoft.com/fwlink/?linkid=74409
> Scan ID: {BDEF36F9-51BD-412A-9B86-CCFF0C4C9B43}
> User: TOMEK\Player
> Name: Unknown
> ID:
> Severity: Jeszcze niesklasyfikowane
> Category: Jeszcze niesklasyfikowane
> Path Found: driver:ElbyCDIO;file:C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
> Alert Type: Oprogramowanie nieklasyfikowane
> Detection Type:
> ====
>
> ...and about twenty more warnings.
>
> I'm thinking of formatting all partitions including windows one.
> Can you tell me in which order I should install WinDefenfer, Avira AntiVir
> and Zone Alarm Firewall so they won't affect Defender?

I've turned off System Restore about one month ago, after reinstalling
Windows becouse I never use that tool...
Do you have more ideas?

"Bill Sanderson" wrote:

> Have you tried removing the old restore points?
>
> If your system is operating optimally as far as you can tell, and has had no
> recent changes to software or hardware, consider removing old restore
> points.
>
> Go to start, all programs, accessories, system tools, disk cleanup. Select
> a drive and allow it to scan for files to be compressed or removed.
>
> When that scan completes, select the tab for More Options.
> Wording varies between OS versions, but on that tab there should be a
> section for System Restore and Shadow Copies--and if you click Clean up on
> that section, it will remove all but the most recent restore point, as well
> as associated shadow copies, if applicable (shadow copies will only exist on
> some Vista editions, I believe.)

Have you emptied the recycle bin?

"TomaszK" <(E-Mail Removed)> wrote in message
news:58976356-502D-47F9-95FF-(E-Mail Removed)...
> I've turned off System Restore about one month ago, after reinstalling
> Windows becouse I never use that tool...
> Do you have more ideas?
>
> "Bill Sanderson" wrote:
>
>> Have you tried removing the old restore points?
>>
>> If your system is operating optimally as far as you can tell, and has had
>> no
>> recent changes to software or hardware, consider removing old restore
>> points.
>>
>> Go to start, all programs, accessories, system tools, disk cleanup.
>> Select
>> a drive and allow it to scan for files to be compressed or removed.
>>
>> When that scan completes, select the tab for More Options.
>> Wording varies between OS versions, but on that tab there should be a
>> section for System Restore and Shadow Copies--and if you click Clean up
>> on
>> that section, it will remove all but the most recent restore point, as
>> well
>> as associated shadow copies, if applicable (shadow copies will only exist
>> on
>> some Vista editions, I believe.)

Yes it was first thing I did, but scan crushed again on different file(s)

"Bill Sanderson" wrote:

> Have you emptied the recycle bin?

Have you run a root kit detector on this system?

AVG has a free one which should be competent.

You might want to run it in safe mode.

It seems to me that if the recycle bin has been emptied, and if you are not
using System Restore, there shouldn't be anything in the RECYCLER
subfolders.

You might try going into that folder at a command prompt and seeing what is
there and deleting it.

"TomaszK" <(E-Mail Removed)> wrote in message
news:08089748-B672-4407-A37F-(E-Mail Removed)...
> Yes it was first thing I did, but scan crushed again on different file(s)
>
> "Bill Sanderson" wrote:
>
>> Have you emptied the recycle bin?

I mean defender crushes on different files in other folders for example
"C:\System Volume Information\MountPointManagerRemoteDatabase"

> I'm thinking of formatting all partitions including windows one.
> Can you tell me in which order I should install WinDefenfer, Avira AntiVir
> and Zone Alarm Firewall so they won't affect Defender?

Hi TomaszK,

I can suggest is that you run CHKDSK

How to Run Chkdsk F in Windows XP
<http://www.ehow.com/how_2052292_run-chkdsk-f-windows-xp.html>

Also, have a look to this post:
http://www.microsoft.com/communities...d-813256b20676

I don't know if this can in some way apply in your case, Doesn't hurt to try
the links

Good luck
- -- ---


FATE
There is no such thing as accident; it is fate misnamed.— Napoleon





"TomaszK" wrote:

> I mean defender crushes on different files in other folders for example
> "C:\System Volume Information\MountPointManagerRemoteDatabase"
>
> > I'm thinking of formatting all partitions including windows one.
> > Can you tell me in which order I should install WinDefenfer, Avira AntiVir
> > and Zone Alarm Firewall so they won't affect Defender?