cpu usage goes 100%

sandman

we found where the files are already hehe
ok, i'll try making i new user and try downloading malwarebytes

sandman

i'm back!
so sorry for the delay a lot of things just came up hehe
so, i did the suggestion that i install malwarebytes from another user account and it did clear up some malwares, however the desktop in my main account still hasn't change, any suggestion guys? thx!

bakuryu

in that case open command prompt and type :
Use killbox to delete the file : c:\windows\system32\lkupbh.dll
if present.

__________________
Please don't click here

Hatrix

exactly, tht should fix it. it's all in the registry that's why a new account would have no problem!

__________________
Mawarebytes
Ccleaner
KillBox

Wolfie276

Computers that are running Windows XP Service Pack 2 and that are equipped with multiple processors that support processor power management features may experience decreased performance ?

__________________
(\__/)
(='.'=) This is Bunny. Copy and paste bunny into your
(" )_(" ) signature to help him gain world domination.

http://www.youtube.com/watch?v=ZXD4N_Mi1iE&fmt=22# Freelancer Evolving

sandman

sorry again guys i've not been able to access my pc this past week, anyway

update:
i typed command instead of command prompt in "Run..." will that make a difference?

when i type the things bakuryu told me to only some of the things where found, those with asterisks are the only ones that were deleted.

reg delete HKCU\software\microsoft\windows\currentversion\exp lorer\mountpoints2\{2b7962b0-641d-11dd-8765-0008a1ba4631} /f
reg delete HKCU\software\microsoft\windows\currentversion\exp lorer\mountpoints2\{440767cb-3c21-11dd-8625-0008a1ba4631} /f
*reg delete HKCU\software\microsoft\windows\currentversion\exp lorer\mountpoints2\{55861e9a-38d1-11dd-85f0-e86e6e02f575} /f
reg delete HKCU\software\microsoft\windows\currentversion\exp lorer\mountpoints2\{58bfcc3e-7ee2-11dd-8829-0008a1ba4631} /f
reg delete HKCU\software\microsoft\windows\currentversion\exp lorer\mountpoints2\{5d7d410a-11df-11de-8c26-0008a1ba4631} /f
*reg delete HKCU\software\microsoft\windows\currentversion\exp lorer\mountpoints2\{6025168a-3827-11dd-85e6-c37eda4963ee} /f
reg delete HKCU\software\microsoft\windows\currentversion\exp lorer\mountpoints2\{7f633f8a-12a2-11de-8c32-0008a1ba4631} /f
*reg delete HKCU\software\microsoft\windows\currentversion\exp lorer\mountpoints2\{ae77cd70-6a39-11dd-87a0-0008a1ba4631} /f
reg delete HKCU\software\microsoft\windows\currentversion\exp lorer\mountpoints2\{c4f42d94-52b7-11dd-86f0-0008a1ba4631} /f
reg delete HKCU\software\microsoft\windows\currentversion\exp lorer\mountpoints2\{d63d6cb2-b5a6-11dd-897e-0008a1ba4631} /f
*reg delete HKCU\software\microsoft\windows\currentversion\exp lorer\mountpoints2\{e4122eef-6ce7-11dd-87b4-0008a1ba4631} /f
*reg delete HKLM\System\ControlSet002\Services\Iraccess /f <- it says access is denied

c:\windows\system32\lkupbh.dll killbox wasn't able to find it

bakuryu

Open task manager, maxmimize it and keep the Process tab open and click on the 'cpu' column so as to sort descending according to cpu time taken and note down the processes still taking more cpu and for how long.

sandman

thanks dude,

these are taking the most space:

System Idle Process
taskmgr.exe
wauclt.exe
realsched.exe
ymsgr_tray.exe
epmworker.exe
jucheck.exe
Generic.exe
CCC.exe
Monitor.exe
msmgs.exe
Logitechdesktopmanager


i don't know how to find out the 'for how long' part, should i just look at the taskmanager for like 10 mins and see which ones are taking the most space?

bakuryu

Ignore System idle Process
taskmgr.exe is due to the task manager running.

Is the process name wauclt.exe or wuauclt.exe ? The former is a known worm, the latter is the Windows auto update client.

what you need to see is which process uses maximum cpu time say for 10mins and ignore System idle process.

sandman

it's wuauclt.exe , ok i'll check which ones are taking the most space for 10 mins. then i'll post it here