PDA

View Full Version : CPU at 100%, computer locked



kprenger
2006-07-25, 02:50
Computer CPU was running at 100% and computer was running extreamly slow. I deleted all unknown applications and ran tons of adaware and antivirus. I think everything is ok, but my bosses computer at home is doing the same thing. I will send a report from his machine as well. Thanks for looking at this.

Ran Adaware, Spybot, trend anti-spyware, defender.
Ran Symantec, Trend-Micro antivirus

pskelley
2006-07-25, 15:53
Hello and welcome to the forum. I would prefer you copy/paste your log, I personally do not open attachments. There is a little yet to remove including a nasty piece of adware called netster. Let's clean a little while we do it.

You HJT is running from a TIF and backups for safety would be deleted when you clean TIF files, I prefer you move it here: C:\HJT\HijackThis.exe. Here are additional instructions if you need them:
http://russelltexas.com/malware/createhjtfolder.htm
http://www.bleepingcomputer.com/forums/tutorial94.html

Please download ATF Cleaner by Atribune
http://www.atribune.org/public-beta/ATF-Cleaner.exe
Save it to your Desktop. We will use this later.

(Windows Defender and/or TeaTimer may block the fix and may need to be tuned off until you are done)

Open HijackThis and choose "Do a system scan only" then check the box in front of these line items:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://207.188.7.150/0603dec34f6b5ad46f06/netzip/RdxIE601.cab
netster

Close all programs but HJT and all browser windows, then click on "Fix Checked"

Run ATF Cleaner
Double-click ATF-Cleaner.exe to run the program.
Click Select All found at the bottom of the list.
Click the Empty Selected button.
Click Exit on the Main menu to close the program.

Post a last HJT log and let me know how you are running.

Thanks...pskelley
Safer Networking Forums

tashi
2006-07-31, 08:54
As the information requested has not been provided, this topic has been archived.

If you need it re-opened please send me a pm and provide a link to the thread.

Applies only to the original topic starter.