CPU running at 100% - help!

[kboogie323]

Hi,
I am running Windows 2000 Professional, and have been plagued with problems but now I can't take it anymore.
I run Mozilla to access the internet but still get tons of popups through IE despite running SpyBot and AdAware.
Lately my computer is really really slow and when I check, the CPU is running at 100%.
Here's my HijackThis log:

Logfile of HijackThis v1.98.2
Scan saved at 7:21:26 PM, on 11/29/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP2 (5.00.2920.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\WINNT\system32\LEXPPS.EXE
C:\WINNT\System32\3Com_DMI\3CDMINIC.EXE
C:\PROGRA~1\Norton AntiVirus\defwatch.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\Hummingbird\Connectivity\7.00\In etd\inetd32.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\Norton AntiVirus\rtvscan.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\PROGRA~1\Toolbar\TBPSSvc.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\MsgSys.EXE
C:\WINNT\system32\rundll32.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\PROGRA~1\Adaptec\DirectCD\directcd.exe
C:\PROGRA~1\Dimension\D4.exe
C:\PROGRA~1\Norton AntiVirus\vptray.exe
C:\Program Files\Netropa\Multimedia Keyboard\TrayMon.exe
C:\Program Files\Netropa\Onscreen Display\OSD.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\Chameleon Clock\ChamClock.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINNT\system32\midxw.exe
C:\Program Files\MA311 PCI Adapter Configuration Utility\wlanutil.exe
C:\Program Files\Keyspan\Digital Media Remote 2.0\KDMRdmn.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\wuauclt.exe
C:\PROGRA~1\WQUTQR~1\voxpuqrp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Netscape\Communicator\Program\AIM\aim.exe
C:\PROGRA~1\Toolbar\PIB.exe
C:\PROGRA~1\Toolbar\tbps.exe
C:\WINNT\explorer.exe
C:\PROGRA~1\Toolbar\TBPS.exe
C:\PROGRA~1\WQUTQR~1\prqupxov.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Administrator\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://education.dellnet.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.websearch.com/ie.aspx?tb_id=50032
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50032
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = res://C:\PROGRA~1\Toolbar\toolbar.dll/sa
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50032
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = res://C:\PROGRA~1\Toolbar\toolbar.dll/sa
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - C:\PROGRA~1\Toolbar\toolbar.dll
O2 - BHO: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - C:\PROGRA~1\Toolbar\toolbar.dll
O3 - Toolbar: &Search Toolbar - {339BB23F-A864-48C0-A59F-29EA915965EC} - C:\PROGRA~1\Toolbar\toolbar.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [TCASUTIEXE] TCAUDIAG -off
O4 - HKLM\..\Run: [Adaptec DirectCD] C:\PROGRA~1\Adaptec\DirectCD\directcd.exe
O4 - HKLM\..\Run: [Dimension4] C:\PROGRA~1\Dimension\D4.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\Norton AntiVirus\vptray.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\System32\spool\drivers\w32x86\3\hpztsb03. exe
O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [WinTask driver] C:\WINNT\system32\wintask.exe
O4 - HKLM\..\Run: [aqadcup] C:\WINNT\aqadcup.exe
O4 - HKLM\..\Run: [XtTb.exe] C:\WINNT\XtTb.exe
O4 - HKLM\..\Run: [o77U36W] rexvent.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [ZEVJTAUw] C:\PROGRA~1\WQUTQR~1\voxpuqrp.exe
O4 - HKLM\..\Run: [TBPS] C:\PROGRA~1\Toolbar\TBPS.exe
O4 - HKLM\..\Run: [midxw] C:\WINNT\system32\midxw.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\Netscape\Communicator\Program\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - HKCU\..\Run: [HomeAlarm] C:\Program Files\Chameleon Clock\ChamClock.exe
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [Zwo8RWa8R] robdpe.exe
O4 - Global Startup: Configuration Utility.lnk = C:\Program Files\MA311 PCI Adapter Configuration Utility\wlanutil.exe
O4 - Global Startup: Keyspan Digital Media Remote.lnk = C:\Program Files\Keyspan\Digital Media Remote 2.0\KDMRdmn.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\Netscape\Communicator\Program\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINNT\System32\Shdocvw.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O12 - Plugin for .swf: C:\Program Files\Netscape\Communicator\Program\PLUGINS\npswf3 2.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.aol.com
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1408.g.akamai.net/7/1408/995...TunesSetup.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{B405D86C-1D65-4188-8FFF-3FD58275418E}: NameServer = 204.183.80.2,207.245.82.2,128.91.254.4
O18 - Protocol: tpro - {FF76A5DA-6158-4439-99FF-EDC1B3FE100C} - C:\PROGRA~1\Toolbar\toolbar.dll


Please help - you guys are great and I've always been able to solve my problems through your site before but I need more help this time!!!
Thanks!!!

[newguy]

When you are looking at the processes tab in task manager, sort by CPU percentage, what's the process that's taking most of the CPU?

[hudsonsmith]

Go to http://www.hijackthis.de/ , paste your log file and click the analyze button. It will identify all the nasties (you've got lots).

[kboogie323]

cool thanks for the link...I did that, but my internet still disconnects for no reason all the time, but works fine on restart...
Any ideas??
Thanks!!

Go to http://www.hijackthis.de/ , paste your log file and click the analyze button. It will identify all the nasties (you've got lots).

[techleet]

Wow, you have a scary amount of processes running. See which process is hogging all the cpu time and if it's not essential, end the process and rip that baby out of startup

[Kerch]

I am having a similar problem.
I'm running 2000 professional and following advice from another site downloaded msconfig to my machine. Since that time I am averaging about 3.5 hours to restart my machine. Can I safely remove msconfig from my machine and if so will this help?
Thanks!

[hudsonsmith]

Welcome to windrivers kerch. Msconfig is a utility used to manage the processes running at startup. Removing it will not change what is running. Suggest you start here: http://forums.windrivers.com/showthread.php?t=57348 to eliminate malware that may be slowing down your system.

[SolApathy]

http://www.blackviper.com/WIN2K/servicecfg.htm

Here is another useful link. If you go to his main page you will find a lot of helpful information about services, what you need & what you don't need.

[Sp0cK]

Hi,
I am running Windows 2000 Professional, and have been plagued with problems but now I can't take it anymore.
I run Mozilla to access the internet but still get tons of popups through IE despite running SpyBot and AdAware.
Lately my computer is really really slow and when I check, the CPU is running at 100%.
Here's my HijackThis log:

Logfile of HijackThis v1.98.2
Scan saved at 7:21:26 PM, on 11/29/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP2 (5.00.2920.0000)

Running processes:

This will be a quick post, download a program called Giant Antispyware, I use to use adware and spybot, but when I tested Giant's software I noticed it would remove more malware than my old progs. combined w/o missing anything. It is still good to run adware/spybot after, but Giant seems to do it all.. You can't download it from their website anymore (M$ purchased them). You will need to try downloads.com or some P2P(shareaza) program do a search for "Giant Antispyware", it should be about 6.33megs... Good luck and let me know if you can't find it... I will e-mail it to you...

JCC