Home > High Cpu > High CPU Usage Problem: HighJackThis Log

High CPU Usage Problem: HighJackThis Log

My BIOS recognizes that the drive is there, even displaying the name and model number, but under the drive properties, it says that it is a 0MB drive and all other Please choose YES. Here is my Hijack log: Logfile of HijackThis v1.99.1 Scan saved at 3:48:19 PM, on 1/30/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0011) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe Click Yes when prompted to restart your computer. Check This Out

licia View Public Profile Find all posts by licia #6 July 5th, 2006, 10:25 PM Jintan Malware Removal Team Advisor Join Date: Dec 2004 Posts: 51,297 Howdy licia, One last question, pramitroy: Were do you guys learn this stuff? O29:64bit: - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! https://www.bleepingcomputer.com/forums/t/367407/rundll32exe-cpu-usage-extremely-high-hijackthis-log/

When the scan completes, it will open two notepad windows. Note: If the log files are clean and the scan is still not working, uninstall, then reinstall your Trend Micro Security. Wait for the program to install. OTL.Txt and Extras.Txt.

ic144 Newbie Posts: 5 3+ Months Ago Hello pramitroy, Thanks for the advice. Both of you seemed to be reluctant on the use of the Uniblue Suite (spy eraser, speed up my PC, and registry booster 2). Recently, I've had this problem with winlogon.exe. If not, then remove the following.Quote:O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = TerminalRailroad.comO17 - HKLM\Software\..\Telephony: DomainName = TerminalRailroad.comO17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = TerminalRailroad.comO17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = TerminalRailroad.comAre you familiar with Monocle.SystemAgent.Service.exe?

Is there a reason for this? Thanks Again! 0 Back to top #6 quietman7 quietman7 Elder Janitor & Bug Exterminator Admin 11,543 posts Gender:Male Location:Virginia, USA Posted 06 July 2008 - 06:23 AM SpyEraser is prone to General questions, technical, sales and product-related issues submitted through this form will not be answered. Have not been able to isolate it yet.

For the record, this started happening after I finished downloading files off mIRC. To see product information, please login again. Tonight, it seemed like you've fixed this before and had the procedure memorized or something. Trend MicroCheck Router Result See below the list of all Brand Models under .

Wait as Trend Micro checks if your computer is compatible for installation. We encourage all of our users to upgrade their PCs to a more modern operating system which will provide greater stability and security. That will be there for the next person who has a similar problem. The solution did not provide detailed procedure.

Please do the following. his comment is here ch/ie.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://ca.red.clientapps.yahoo.com/cust ... .yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://ca.red.clientapps.yahoo.com/cust ... .yahoo.com Scan "Local Disks" and when finished save the scan log and then post the log here. dropa.html And many trojans hook in that Winlogon shell.

The CoreServiceShell.exe is the main process of your Trend Micro Security program. Quote:R3 - Default URLSearchHook is missingO16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cabO20 - Winlogon Notify: msctl32.dll - C:\WINDOWS\system32\msctl32.dll Now open killbox and type or paste from here this I've installed Windows 4 times this weekend and it keeps happening! http://filealley.com/high-cpu/high-cpu-usage-by-iexplore.html Wait for the installer to extract the files needed for the installation.

Go here for an online AV scan (requires IE to run). ection.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 0116306671 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... It does the following: Interface with the operating system's Service Control Manager (SCM) Receives various service requests such as start service or service status request Loads the Trend Micro Security program's

I replaced winlogon.exe with a copy from another computer and that still didn't fix the problem.

Some adware and unwanted items showing there, but not usually such that would cause those problems. Let's get a more detailed look. ch/ie.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ca.red.clientapps.yahoo.com/cust ... .yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://rogers.yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - Please someone help!

Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site. wflash.cab O16 - DPF: {E7C44C86-0CD3-11D2-9311-00A0247A4E65} (SEAGULL J Walk ActiveX Client) - http://trra.railconnect.com/JWALK/JWalkX/JWalkX.cab O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = TerminalRailroad.com O17 - HKLM\Software\..\Telephony: DomainName = TerminalRailroad.com O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = TerminalRailroad.com O17 I have been busy outdoors and haven't had time to get on the home computer. navigate here You can also review this thread.Let us know how it goes with the MBAM scan . 0 "A computer beat me in chess, but it was no match when it came

You can use separate posts if needed. I did everything you suggested. I had tried a number of virus scans, including Kaspersky and AVG, as well as registry boosters and spyware programs... It contains information and settings for all hardware, software, users, and preferences.

I have 2 users on my computer, so by default after no activity, it goes back to that screen where you can select the user to login as. Register now!