Author Topic: High CPU usage(100%)+explorer  (Read 6061 times)

Offline tlrsa

  • Newbie
  • *
  • Posts: 12
  • Karma: +0/-0
    • View Profile
High CPU usage(100%)+explorer
« Reply #20 on: November 25, 2005, 05:01:52 PM »
Here is the result of the Rootkit scan

HKLM\SOFTWARE\Classes\webcal\URL Protocol   11/3/2005 8:05 AM   13 bytes   Data mismatch    between Windows API and raw hive data.

HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed   11/27/2005 4:40 PM   80 bytes   Data mismatch between Windows API and raw hive data.

C:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp.edb   11/27/2005 4:41 PM   64.00 KB   Visible in Windows API, but not in MFT or directory index.


And I have 3 users on this comp...The other 2 do not spike the comp as bad as the 3rd one does.. In fact I would even say it is useable, when you compare it to this user...

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
High CPU usage(100%)+explorer
« Reply #21 on: November 26, 2005, 12:47:09 AM »
I would opt to create a new user account and remove this one
But I've seen this problem with corrupt index.dat files
Not that this is your problem, but let's eliminate it

==Download and Install this small program
to help clean your temp folders,cookies, etc...
Windows Cleanup! 4.0

Close all browsers
Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu).
Click on the CleanUp button
When it's done
Reboot the computer
Restart into windows, may be a bit slower as we now cleaned the prefetch folder
That will increase on next bootup

Let me know how everything's running

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline tlrsa

  • Newbie
  • *
  • Posts: 12
  • Karma: +0/-0
    • View Profile
High CPU usage(100%)+explorer
« Reply #22 on: December 05, 2005, 08:57:30 AM »
Thanks so much for all your help on this issue....

I have done as suggested...Deleting the 'user' and creating a new one...Things are MUCH better...Still not as fast as I remember or would like, but def useable...

Thanks again....

Offline tlrsa

  • Newbie
  • *
  • Posts: 12
  • Karma: +0/-0
    • View Profile
High CPU usage(100%)+explorer
« Reply #23 on: December 07, 2005, 10:54:14 AM »
It seems as though I may have been a little premature in my glee....

24 hours later and it back to the same...Spikeing at 100 % again...

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
High CPU usage(100%)+explorer
« Reply #24 on: December 08, 2005, 12:05:26 AM »
Since it's been awhile, can I see a new hijackthis log please
Also, can you post a hijackthis from another user on
your computer
Preferrably an Admin account if they are privileged
« Last Edit: December 08, 2005, 12:05:46 AM by guestolo »

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here