In the Task Manager, switch to the "Processes" tab. Click on the "Mem Usage" column header. You may need to click on it again to have the programs using the most memory to appear at the top of the list.
What are the names of the first four or five programs, and how much memory are they using?
Services.exe - The
legitimate one is Microsoft's, but there's a Trojan that gets installed in a directory other than C:\WINNT\system32. Possibly the Trojan, if you find a file named services.exe in a directory other than C:\WINNT\system32.
So except for a possibly rogue copy of services.exe, which can be detected by searching for all instances of the file "services.exe" on your hard drive, and the Yahoo messenger component, everything else is related to Norton Antivirus.
You should check for malware using Ad-Aware and Spybot, as described in
this article. The only malware suspect in the list is services.exe, but it may well be Win2K's file.
I'm not sure why there's a Yahoo messenger component still running, given what you've already done. Regarding Norton, you might want to consider an antivirus product with a smaller memory footprint like
NOD32, which is what I'm using on my Win2K laptop.
Increasing the memory size to 512K will improve things considerably. That's what I consider the workable minimum for Win2K and XP to be.
jwatt
4.4K Posts
0
December 3rd, 2004 21:00
In the Task Manager, switch to the "Processes" tab. Click on the "Mem Usage" column header. You may need to click on it again to have the programs using the most memory to appear at the top of the list.
What are the names of the first four or five programs, and how much memory are they using?
Jim
JElliott3
7 Posts
0
December 3rd, 2004 23:00
jwatt
4.4K Posts
0
December 4th, 2004 04:00
There's an extremely useful Web site, www.lutilities.com, that allows program descriptions to be looked up easily.
Here's a link to its description of ccapp.exe from that site. It's part of Norton Antivirus 2003.
The others...
explore.exe - The Windows Explorer (Microsoft)
NAVAPSVC.exe - Also part of NAV.
Services.exe - The legitimate one is Microsoft's, but there's a Trojan that gets installed in a directory other than C:\WINNT\system32. Possibly the Trojan, if you find a file named services.exe in a directory other than C:\WINNT\system32.
ycommon.exe - A Yahoo messenger component. You may or may not need it running, according to lutilities.com.
So except for a possibly rogue copy of services.exe, which can be detected by searching for all instances of the file "services.exe" on your hard drive, and the Yahoo messenger component, everything else is related to Norton Antivirus.
You should check for malware using Ad-Aware and Spybot, as described in this article. The only malware suspect in the list is services.exe, but it may well be Win2K's file.
I'm not sure why there's a Yahoo messenger component still running, given what you've already done. Regarding Norton, you might want to consider an antivirus product with a smaller memory footprint like NOD32, which is what I'm using on my Win2K laptop.
Increasing the memory size to 512K will improve things considerably. That's what I consider the workable minimum for Win2K and XP to be.
(edit) You may find this discussion from TheElderGeek.com helpful in interpreting task manager memory usage reports.
Jim
Message Edited by jimw on 12-03-2004 10:52 PM