100% CPU

[Barry]

Dear all
I am trying to solve a problem on a friend PC, when trying to run
"Search" the system hang.

When I check through task Manager, it show CPU Usage 100% and that
explorer.exe is using it.

I tried a search in safe mode, no problem. I create a temporary User
with Administration rights, no problem, I can use the Windows search
Facility ok in both instances.

So it appears that the problem is on the main Administrators Profile?

We are using Windows XP home Edition.

Any help appreciated.
Barry

 

[PA Bear [MS MVP]]

There is a very good chance that you are seeing the effects of a hijackware
infection!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums as well.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

 

[db]

since safemode proved
that the system core files
are stable,

then you might try to
initiate a clean boot
for normal mode and
see if the issue gets
resolved.

run msconfig.

under the startup tab
disable all of them and
jot down which ones
they were.

under services, hide all
microsoft service and
disable what remains,

jot them down too.

reboot and try out the
search via normal mode.



--
db·´¯`·...¸><)))º>
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces
- @hotmail.com
"share the nirvana" - dbZen

~~~~~~~~~~~~~~~~~~

 

[PA Bear [MS MVP]]

What's the "real truth" about pcbutts1? Read on...

.. Is he an MS MVP? No!
cf. http://mvp.support.microsoft.com/communities/mvp.aspx

.. If xxx.ms-mvp.org redirects to xxx.pcbutts1.com, why didn't he post that
link to begin with?

.. Is he a proven thief? Yes!
cf.
http://groups.google.com/group/microsoft.public.security.virus/browse_frm/thread/58e6c02dbc6279ad
cf.
http://msmvps.com/blogs/hostsnews/a..._.-the-saga-continues-_2E00__2E00__2E00_.aspx
cf.
http://groups.google.com/group/microsoft.public.security.homeusers/msg/213247814fb4d61e
cf.
http://groups.google.com/group/microsoft.public.security.homeusers/msg/e19fce884897662f

.. What do real experts have to say about him? It ain't pretty.

http://www.siteadvisor.com/sites/pcbutts1.com (Reviews)

http://www.digg.com/security/PCButts1_Under_Attack

http://www.siteadvisor.com/sites/pcbutts1.com

http://bughunter.it-mate.co.uk/PCBUTTS.TXT

http://www.mywot.com/en/scorecard/pcbutts1.com

http://www.mywot.com/en/scorecard/www.ms-mvp.org

.. Does he have all his marbles?
cf. http://en.wikinews.org/wiki/NASA_van_rolls_off_California_mountain

Ignore this MVP imposter!

 

[Barry Schwarz]

Try my Explorer Shell Fix tool. Download it here http://www.ms-mvp.org/

This is not the MVP site despite its fake logos.

The correct MVP site is http://www.mvps.org/.

 

[Twayne]

Huh, just noticed you have a new web site:
http://all-lies.com/

Interesting.