[Resolved] CPU usage - Page 2

joe5 · 04-23-2006

Lets also have a look with these two apps for rootkits , there seems to be something hiding there..

http://www.greatis.com/unhackme/downloadbeta.htm

http://www.f-secure.com/blacklight/try.shtml

And report back what the find (if anything ofcourse) please.

Sean.Mathew · 04-23-2006

and ewido log...

Sean.Mathew · 04-23-2006

Ok i did everything that it said in that pre-work thing and heres my stuff...

Hijackthis! log

joe5 · 04-24-2006

You can let Ewido run again and let it fix what it finds this time.

Download and run this tool to disable the windows messenger service:

Please download Shoot The Messenger

Download and run the small (22 kbyte) "ShootTheMessenger.exe" utility. It will display the current status of your system's Messenger Service. The button near the bottom of its window will allow you to set the service to whichever state ? running or disabled ? that you desire.

If, for any reason, you should ever choose to re-enable the Windows Messenger Service, simply re-run ShootTheMessenger to do so.

And this one can be fixed with hjt:

O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe

Have you tried to rootkit scanners i posted? Did they find anything?

And i see you have no service packs installed , i would highly recommend to update windows to atleast sp1 , but preferebly sp2.

Also it seems you have no AV , have a look in our download section for some free ones.

Sean.Mathew · 04-24-2006

ok i did most of that and im running the AV program but no result.. my CPU is still running really high.. ill see what happens after the AV scan

Sean.Mathew · 04-24-2006

ok i ran all the scans and restarted and still my PCU is running high still. i dont know what else to check. when i reformated it wasnt doing this and then when i started installing drivers. i check it after like the 3rd driver and it was doing it again... do you think it could be my drivers?

joe5 · 04-24-2006

It might indeed be a driver problem. Have you made sure you got the latest drivers of the web , and the correct ones?

Do you remember wich 3 drivers you installed before it started? If yes , wich are they?

PS , did you also look with the rootkit scanners? Did they find anything?

04-23-2006	#8
joe5 Elite Member Join Date: Jun 2005 Location: Netherlands Posts: 9,025	Lets also have a look with these two apps for rootkits , there seems to be something hiding there.. http://www.greatis.com/unhackme/downloadbeta.htm http://www.f-secure.com/blacklight/try.shtml And report back what the find (if anything ofcourse) please. __________________ - PCHF Team. - (NL) - Mal-ware Eradicator! - - Online AV Scans - HijackThis! - Bootdisk.com - ATF-Cleaner - Stinger - 'Prework' - 'Afterwork' - PCHF Rules - Donate to PCHF. And get>

04-24-2006	#11
joe5 Elite Member Join Date: Jun 2005 Location: Netherlands Posts: 9,025	You can let Ewido run again and let it fix what it finds this time. Download and run this tool to disable the windows messenger service: Please download Shoot The Messenger Download and run the small (22 kbyte) "ShootTheMessenger.exe" utility. It will display the current status of your system's Messenger Service. The button near the bottom of its window will allow you to set the service to whichever state ? running or disabled ? that you desire. If, for any reason, you should ever choose to re-enable the Windows Messenger Service, simply re-run ShootTheMessenger to do so. And this one can be fixed with hjt: O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe Have you tried to rootkit scanners i posted? Did they find anything? And i see you have no service packs installed , i would highly recommend to update windows to atleast sp1 , but preferebly sp2. Also it seems you have no AV , have a look in our download section for some free ones. __________________ - PCHF Team. - (NL) - Mal-ware Eradicator! - - Online AV Scans - HijackThis! - Bootdisk.com - ATF-Cleaner - Stinger - 'Prework' - 'Afterwork' - PCHF Rules - Donate to PCHF. And get>

04-24-2006	#14
joe5 Elite Member Join Date: Jun 2005 Location: Netherlands Posts: 9,025	It might indeed be a driver problem. Have you made sure you got the latest drivers of the web , and the correct ones? Do you remember wich 3 drivers you installed before it started? If yes , wich are they? PS , did you also look with the rootkit scanners? Did they find anything? __________________ - PCHF Team. - (NL) - Mal-ware Eradicator! - - Online AV Scans - HijackThis! - Bootdisk.com - ATF-Cleaner - Stinger - 'Prework' - 'Afterwork' - PCHF Rules - Donate to PCHF. And get>

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

04-24-2006	#12
Sean.Mathew Bronze Member Join Date: Apr 2006 Posts: 17	ok i did most of that and im running the AV program but no result.. my CPU is still running really high.. ill see what happens after the AV scan