I have to get this figured out ASAP. the computer is in a Vet. office.
In normal mode, running winxp pro sp2, you cannot even use the computer because winlogon.exe, services.exe and sometimes explorer.exe all use CPU resources up 100%. In safe mode, it works fine. I installed cclean and ran it, installed spybot S&D and ran it, installed HiJack This and ran it, also ran Smitfraud Fix. Still have the same problem, I have been trying to install SuperAntiSpyware in safemode, but its I dont have permission to do so, I believe that has something to do with what is infecting the system.
I need your help!!
please here is the HJT log...
Logfile of HijackThis v1.99.1
Scan saved at 11:22:33 AM, on 5/28/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\LAKE FOREST VET\Desktop\HijackThis.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.d...
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8 Can you upload the hijackthis logfile ?
so we can try to analyze your problem...
**************************************...
EDIT -
the first part that you gave us looks 100% clean and safe...
(waiting for the second part)
**************************************...
EDIT - Check your yahoo mail...
**************************************...
EDIT - Your log looks 100% clean !
try to remove the Norton entry's from the hijackthis..
Remove
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/Share...
And
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/Share...
Other then that i don't know what can bee the problem....
Keep us updated..
**************************************...
EDIT -
There is a new Hijackthis...
http://www.download.com/Trend-Micro-Hija... sometimes this problem is cause by hardisk
try to run chkdsk on safe mode and defrag on safe mode
then check whether it's still running at 100% in normal mode I see from your log your running AVG 7 this has been replaced with AVG 8 now.
Both are rubbish.
Do two free online scans:
http://www.bitdefender.com/scan8/ie.html
http://housecall.trendmicro.com/uk/
Then do a clean up; run:
http://www.ccleaner.com/download
http://www.download.com/Advanced-Windows...
Update:
You still have Norton on your PC run Norton removal tool:
http://service1.symantec.com/Support/tsg... You have NO Virus! ...
You may not be aware of this, but when you install a new application on your computer, most applications automatically place themselves into your windows startup procedure. This is where using MSCONFIG can help by removing unnecessary programs from Startup. Your PC will start faster and run better, as it won't be using resources loading things you don't need.
***If you have to do this in safe mode.***
Simply go to your START MENU, normally on the bottom left corner of your screen. Click RUN, type MSCONFIG in the box and press enter.
This will bring up a screen with numerous options. Go to the tab labeled 'General' and click on it.
Check 'Diagnostic Start Up' then Apply and OK. Choose to reboot now.
On your next Windows restart, a 'System msg box' will appear. Accept the Msconfig changes by checking "Don't show this message,"
Now everything will run OK.
Then you can go back and turn on only a few items that you really need. Not everything because you'll have the same problem! To do this...
Simply go to your START MENU, normally on the bottom left corner of your screen. Click RUN, type MSCONFIG in the box and press enter.
This will bring up a screen with numerous options. Go to the tab labeled STARTUP and click on it.
This brings up a list of all the programs your computer starts when loading windows. Go through them, and check only programs you need to be started with windows. And uncheck those you don't. When you have made all your changes, click APPLY at the bottom, and then click OK. Now it will ask you to choose whether to restart your computer or to exit without a restart.
Choose restart my computer. On your next Windows restart, a 'System msg box' will appear. Accept the Msconfig changes by checking "Don't show this message,"
This should help Windows to load faster on startup.
* Note > What ever you uncheck will still be available.. only won't startup with computer. You won't lose anything.*
*** Then don't re-enable all the services! This is the problem!
To many are eating up your CPU. As I stated your programs will still be there just won't load at start-up. Leave off most of them.***
And the I recommend...
Install and run... Advanced WindowsCare Personal Edition
This Freeware will provide you with a deep scan of both your Registry and Windows core for any Errors and Conflicts, then make a thorough diagnosis and fix all those errors and conflicts in your system. Also give you a complete diagnosis and deep scan of your current performance status and suggest optimizations, then clean out any junk and accelerate the whole system.
Features of this program include:
Ending slow downs, freezes, crashes, and security threats. Scanning and finding what other utilities miss on your PC. Keeping your PC error-free and running more smoothly than ever. Run all parts of this program... And use all suggestions. Get it here: http://www.iobit.com/advancedwindowscare...
You should be OK after that. Good Luck! |
