comp help!!!!

OK, I've done an adaware scan, 19 files deleted. I did a norton scan could not delete files. Went in and manually deleted them. even did disk clean up and defragmnter. CPU still at %100 and I have no programs running!!!! Did I mention how scared to death I am of touching mostly everything on my comp. I don't know what any of this stuff is 😞

Processes doesn't show much, my msn is on top but only at around 9000K . some of the bigger running programs are going at about 21-25 000K but I have no idea what they are. What do I do now? Oh ya and it is windows xp home edition.

Originally posted by mokko
OK, I've done an adaware scan, 19 files deleted. I did a norton scan could not delete files. Went in and manually deleted them. even did disk clean up and defragmnter. CPU still at %100 and I have no programs running!!!! Did I mention how scared to death I am of touching mostly everything on my comp. I don't know what any of this stuff is 😞

Processes doe ...[text shortened]... 00K but I have no idea what they are. What do I do now? Oh ya and it is windows xp home edition.

Could you do a ctl-alt-del again, and post all the different processes running? its a pain, but that will help us in determining if you have some adware running.. sometimes when they are running, the spybot programs won't pick them up. If we see the list, we can look them up.. Alternately, you could search each one on google.. thats what I do to try to determine if I have any spyware issues.

Also, in your list of processes, do any say that they belong to your user id login? (I forgot what it looks lie though.. like a drop down ).., or, processes that look like random numbers?
MIODude

Alright, under the process tab I have 4 columms...All cpu is 00, which makes no sense to me but mabye somebody else can make sense of this.

Image Name User Name
realsched.exe HP_Owner
msnmsgr.exe HP_OWner
hpzeng10.exe SYSTEM
Ymsgr_tray.exe HP
IEXPLORE.EXE HP
taskmgr.exe HP
ctfmon.exe HP
iPodService.exe SYSTEM
GameDrvr.exe HP
CCAPP.EXE HP
monitor.exe HP
iTunesHelper.exe HP
MWSOEMON.EXE HP_
qttask.exe HP_
igfxtray.exe HP_
ALCXMNTR.EXE HP_
AGRSMMSG.exe HP_
kbd.exe HP_
hphmon06.exe HP_
hkcmd.exe HP_
hpsysdrv.exe HP_
jusched.exe HP_
explorer.exe HP_
symlcsvs.exe SYSTEM
svchost.exe SYSTEM
NAVAPSVC.EXE SYSTEM
MDM.EXE SYSTEM
KodakCCS.exe SYSTEM
spoolsv.exe SYSTEM
alg.exe LOCAL SERVICE
CCEVTMGR.EXE SYSTEM
EasyShare.exe LOCAL SERVICE
SPBBCSvc.exe SYSTEM
SNDSrvc.exe SYSTEM
ISSVC.exe SYSTEM
CCSETMGR.EXE SYSTEM
CCPROXY.EXE SYSTEM
WZQKPICK.EXE HP_
svchost.exe LOCAL SERVICE
svchost.exe NETWORK SERVICE
svchost.exe SYSTEM
svchost.exe NETWORK SERVICE
svchost.exe SYSTEM
lsass.exe SYSTEM
services.exe SYSTEM
winlogon.exe SYSTEM
csrss.exe SYSTEM
smss.exe SYSTEM
hpqtra08.exe HP_
symwsc.exe SYSTEM
mDNSResponder.... SYSTEM
WToolsS.exe SYSTEM
wdfmgr.exe LOCAL SERVICE
System SYSTEM
System Idle Process SYSTEM


Don't know what any of this means?! But hopefully somebody does and can help me figure this out before I go insane!

Originally posted by mokko
Alright, under the process tab I have 4 columms...All cpu is 00, which makes no sense to me but mabye somebody else can make sense of this.

Image Name User Name
realsched.exe HP_Owner
msnmsgr.exe HP_OWner
hpzeng10.exe SYSTEM
Ymsgr_tray.exe HP
IEXPLORE.EXE HP
taskmgr.exe HP
ctfmon.exe HP
iPodService.exe ...[text shortened]... HP_
hkcmd.exe HP_
hpsysdrv.exe HP_
jusched.exe HP_
explorer.exe

Originally posted by MIODude
I don't see anything that isn't part of a normal program.. don't see any spyware or spam programs running.. .. hmmmmm..
Do you have multiple user ids on the system? maybe try logging in as another one of those user ids and see if the same problem persists? I've seen where one user profile was messed up, and just using another user id was fine..

EDIT: ohh, I see you added some more.. let me continue searching those then

only the one user. As I was manualyy deleting spyware I noticed a whole file on AOL. I have never used AOL so I'm assuming it's safe to delete the whole file?

hit the CPU column header two times, to put the Idle process at the top ... the column should not be all zeros, the Idle process should be high and all the other values should be low but not zero all the time.

are you up-to-date with your Windows Updates? might be missing a lot of security patches if not.

EasyShare.exe?

EDIT: have you looked through your add/remove programs menu? I found a bunch of crap there a few times. Back when my computer was... messed. (desktop wouldn't work, start menu wouldn't work, memory leaks)

9000K is memory usage you want to look at CPU usage (processing time).

Easyshare is part of the kodak software that comes with a digital camera.
I do see one adware program..
WToolsS.exeAdware.Huntbar
wtoolss.exe is registered as the Adware.Huntbar. is an advertising program. This process monitors your browsing habits and distributes the data back to the author's servers for analysis. This also prompts advertising popups. This program is a registered security risk and should be removed immediately. Please see additional details regarding this process

Will it let you end the task on wtoolsS.exe ?

And, I couldn't find what symlcsvs.exe was anywhere, but possibly part of symantec antivirus you have installed..

Originally posted by zeeblebot
hit the CPU column header two times, to put the Idle process at the top ... the column should not be all zeros, the Idle process should be high and all the other values should be low but not zero all the time.

are you up-to-date with your Windows Updates? might be missing a lot of security patches if not.

Originally posted by mokko
All I get is spoolsv.exe SYSTEM at 99 cpu. ????????
I have alot of automatic updates preset so I'm not really too sure about that either. I never knew having a comp. would be this hard. Lol

Originally posted by MIODude
Easyshare is part of the kodak software that comes with a digital camera.
I do see one adware program..
WToolsS.exeAdware.Huntbar
wtoolss.exe is registered as the Adware.Huntbar. is an advertising program. This process monitors your browsing habits and distributes the data back to the author's servers for analysis. This also prompts advertising popups. ...[text shortened]... ind what symlcsvs.exe was anywhere, but possibly part of symantec antivirus you have installed..

personally I like spybot
http://www.safer-networking.org/en/mirrors/index.html