View Single Post
  #12   Spotlight this post!  
Unread 06-08-2006, 17:12
mgreenley
 
Posts: n/a
Re: CPU easily maxes out in WinXp Pro, IE slow loading

First off, I'm surprised Ad-aware and Spybot S&D didn't catch it.
The disclaimer: I'm not a professional or even a compsci major. I'm a first year mechanical engineering student. Treat my advice as such.

Assuming it's malware/spyware, a program that I've used in the past to fix some of my friends computers is Hijack This. It's not an anti-malware/anti-spyware program per se, but I've found it useful (it checks certain registry values for changes). If you run the program it will generate a tagged list with these tags:
Quote:
Originally Posted by netsecurity.about.com
R0, R1, R2, R3 - Internet Explorer Start/Search pages URLs
F0, F1 - Autoloading programs
N1, N2, N3, N4 - Netscape/Mozilla Start/Search pages URLs
O1 - Hosts file redirection
O2 - Browser Helper Objects
O3 - Internet Explorer toolbars
O4 - Autoloading programs from Registry
O5 - IE Options icon not visible in Control Panel
O6 - IE Options access restricted by Administrator
O7 - Regedit access restricted by Administrator
O8 - Extra items in IE right-click menu
O9 - Extra buttons on main IE button toolbar, or extra items in IE 'Tools' menu
O10 - Winsock hijacker
O11 - Extra group in IE 'Advanced Options' window
O12 - IE plugins
O13 - IE DefaultPrefix hijack
O14 - 'Reset Web Settings' hijack
O15 - Unwanted site in Trusted Zone
O16 - ActiveX Objects (aka Downloaded Program Files)
O17 - Lop.com domain hijackers
O18 - Extra protocols and protocol hijackers
O19 - User style sheet hijack
O20 - AppInit_DLLs Registry value autorun
O21 - ShellServiceObjectDelayLoad Registry key autorun
O22 - SharedTaskScheduler Registry key autorun
O23 - Windows NT Services
Deleting some of the items can cause your computer to end up in worse shape than it sounds like it is in now though , and vice-versa (some items that look to be legit. may be the source of the problem). If you've never used HJT before, I'd suggest erring on the side of not deleting something or asking on a security forum, or seeing if someone (more knowledgeable than me) on CD would look at it.

Barring malware/spyware, Sysinternals.com has a process explorer that shows the hierarchy and application each process is running under. Again, I've used it, but I also have an old computer that I have just for experimenting with and can afford to be a little less delicate. (Mark Russinovich has written quite a few programs that may be useful if you've got the time to sift through the computer in an exhaustive search (filemon and regmon), but my opinion is that his programs were written for dissecting your computer to analyze something rather than for quick fixes. My opinion is that Sysinternals is useful, but you'll probably want to use other methods first.
Hope this helps.