iexplore.exe takes up to 98% cpu time

Question

akoloff 0 Newbie Poster

19 Years Ago

i have search the forums and although this problem is nothing new, i have not found any solution to it. If anybody knows the solution please reply.

the problem started with ie6 and i have downloaded and installed ie7 in attempt to fix it but the problem is still there. as it was suggested on some forums i tried to change settings like disabling phishing filters or disabling add-ons. nothing worked. the following is the latest HJT logfile. If anyone can help I would really appreciate that.

Logfile of HijackThis v1.99.1
Scan saved at 3:28:28 PM, on 5/27/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\SYSTEM32\astsrv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\MATLAB6p5\webserver\bin\win32\matlabserver.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Unzipped\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.2.7.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {81A35F39-4850-474E-92C9-B4CF283207E0} - c:\windows\system32\iegfilt.dll (file missing)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MSN Messenger] C:\WINDOWS\explorer..exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSN Messenger] C:\WINDOWS\explorer..exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WeatherWatcher] C:\Program Files\Weather Watcher\ww.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart17.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Broken Internet access because of LSP provider 'c:\program files\newdotnet\newdotnet7_22.dll' missing
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{F2D584EB-88CE-45E3-892B-C6B033616E20}: NameServer =
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AST Service (astcc) - Advanced Software Technologies - C:\WINDOWS\SYSTEM32\astsrv.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MATLAB Server (matlabserver) - Unknown owner - C:\MATLAB6p5\webserver\bin\win32\matlabserver.exe

microsoft:windows virus-malware

4 Contributors
12 Replies
260 Views
3 Days Discussion Span
Latest Post 19 Years Ago Latest Post by agogddy

Dani AI

Generated 9 Months Ago

Brief recap and outcome: this thread documents Internet Explorer pegging the CPU (~98%). After AV scans and network/LSP checks, recommended inspecting connections and DLLs; ultimately booted to Safe Mode, deleted the IE index.dat files and cleared the browser cache — that restored normal CPU use.

Why that helps and a concise troubleshooting recipe:

index.dat files are IE’s internal cache/history databases. Corruption or pathological entries can cause repeated file access or locking that drives CPU use while IE tries to read/rebuild them. Removing those files forces IE to recreate clean DBs.
Quick diagnostic checklist (non-addressing style): confirm the high-CPU process is an iexplore.exe instance; run IE without add-ons (iexplore.exe -extoff) to see if add-ons/toolbars are implicated; inspect iexplore with a process inspector to view threads and loaded DLLs (look for unsigned or third-party BHOs); clear Internet Options -> Browsing history; if the problem persists, reboot to Safe Mode and remove index.dat files in the profile’s Temporary Internet Files, History and Cookies locations (make a System Restore point and back up the index.dat files first); if a broken LSP/proxy is suspected, reset the Winsock catalog (netsh winsock reset) and reboot; follow with thorough on-demand anti‑malware scans.

Notes and prevention:

Avoid keeping unnecessary toolbars or startup helpers, and clear the cache periodically. Deleting index.dat in Safe Mode is a known, practical fix for this exact symptom under XP/IE6–7, but always back up and use a restore point before manual deletions. If the condition returns, capturing the process inspector’s loaded-DLL list and thread CPU stacks while IE is pegged supplies the diagnostic data needed to identify a recurring culprit.

All 12 Replies

gerbil 216 Industrious Poster

19 Years Ago

==Download Lspfix.exe from http://cexx.org/lspfix.htm -start it by dclicking the .exe, and press Finish.
Post another hjt log.

gerbil 216 Industrious Poster

19 Years Ago

Go to this page: http://www.microsoft.com/technet/sysinternals/Networking/TcpView.mspx
and dl TCPView. Install it, run and see what address IE is contacting [if it is using TCP]

gerbil 216 Industrious Poster

19 Years Ago

And on that note, i went out of my depth.. :)
All i can see is that you established a connection [do you have a mail account with your IP?], and that then a webpage loaded and your connection just sat there idly with the page displayed. I see no more iexplore traffic. That is not much use to you, I'm afraid. Does Task manager show even after the page loads Iexplore.exe at 98% CPU time? Beats me.
HELP!

Reply to this topic

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.

akoloff 0 Newbie Poster · Answer 1 · 2007-05-28T11:21:41+00:00

I have run LSPFix but IE's still at 98% cpu time. I have noticed that it yeilds to cpu intense apps like BitComet, but given the chance it takes all the cpu time and runs at 98%. I have completed full scan with Kaspersky AV, and MicroTrend online virus scan for what it worth.
Here is the new HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 1:15:45 AM, on 5/28/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\SYSTEM32\astsrv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\MATLAB6p5\webserver\bin\win32\matlabserver.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Unzipped\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.2.7.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MSN Messenger] C:\WINDOWS\explorer..exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSN Messenger] C:\WINDOWS\explorer..exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WeatherWatcher] C:\Program Files\Weather Watcher\ww.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart17.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{F2D584EB-88CE-45E3-892B-C6B033616E20}: NameServer =
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AST Service (astcc) - Advanced Software Technologies - C:\WINDOWS\SYSTEM32\astsrv.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MATLAB Server (matlabserver) - Unknown owner - C:\MATLAB6p5\webserver\bin\win32\matlabserver.exe

akoloff 0 Newbie Poster · Answer 2 · 2007-05-28T13:19:47+00:00

it is using UDP not TCP
firefox is using TCP though. is it good or bad?
here is snapshot of TCPView

alg.exe:1996 TCP 127.0.0.1:1026 LISTENING
avp.exe:1364 TCP LISTENING
firefox.exe:3228 TCP 127.0.0.1:3147 127.0.0.1:3148 ESTABLISHED
firefox.exe:3228 TCP 127.0.0.1:3148 127.0.0.1:3147 ESTABLISHED
firefox.exe:3228 TCP 127.0.0.1:3149 127.0.0.1:3150 ESTABLISHED
firefox.exe:3228 TCP 127.0.0.1:3150 127.0.0.1:3149 ESTABLISHED
iexplore.exe:2872 UDP 127.0.0.1:3213 *:*
LEXPPS.EXE:1216 TCP LISTENING
lsass.exe:624 UDP *:*
lsass.exe:624 UDP *:*
matlabserver.exe:1428 TCP LISTENING
svchost.exe:1036 UDP 127.0.0.1:1900 *:*
svchost.exe:1036 UDP *:*
svchost.exe:832 TCP LISTENING
svchost.exe:896 UDP 127.0.0.1:123 *:*
svchost.exe:896 UDP *:*
svchost.exe:948 UDP *:*
svchost.exe:948 UDP *:*
svchost.exe:948 UDP *:*
System:4 TCP LISTENING
System:4 UDP *:*

akoloff 0 Newbie Poster · Answer 3 · 2007-05-28T14:08:48+00:00

after having a closer look at TCPView i have noticed that IE does use TCP protocol when establishing connection to the site, but after connection is established it drops TCP and uses only UDP

here is TCPView snapshot just after i tried to open new webpage

firefox.exe:3140 TCP 127.0.0.1:3531 127.0.0.1:1110 ESTABLISHED
firefox.exe:3140 TCP 127.0.0.1:3533 127.0.0.1:1110 ESTABLISHED
firefox.exe:3140 TCP 127.0.0.1:3535 127.0.0.1:1110 ESTABLISHED
iexplore.exe:2140 UDP 127.0.0.1:3528 *:*
iexplore.exe:2140 TCP 127.0.0.1:3537 127.0.0.1:1110 ESTABLISHED
iexplore.exe:2140 TCP 127.0.0.1:3539 127.0.0.1:1110 ESTABLISHED
iexplore.exe:2140 TCP 127.0.0.1:3541 127.0.0.1:1110 ESTABLISHED
iexplore.exe:2140 TCP 127.0.0.1:3543 127.0.0.1:1110 ESTABLISHED

akoloff 0 Newbie Poster · Answer 4 · 2007-05-29T04:19:03+00:00

exactly, it's strange. it's not a virus or spyware, at least i can't detect any and it's still at 98% even after the page is loaded. i guess i would use firefox from now on, so much for microsoft ... shouldn't they take care of things like that? oh well, thanks for the help

jbennet 1,618 Most Valuable Poster Team Colleague Featured Poster · Answer 5 · 2007-05-29T05:21:12+00:00

jbennet 1,618 Most Valuable Poster

19 Years Ago

What CPU do you have

gerbil 216 Industrious Poster · Answer 6 · 2007-05-29T09:00:17+00:00

TCP is a protocol that guarantees the accuracy of interchanged data [accuracy is verified by two-way checks], whereas UDP is unchecked - you ask for, you get a data transmission in reply. Once a UDP page is transmitted to you there is not necessarily any more traffic betweeen the two sites. So IE should go quiet.
Go back to that same site and get Process Explorer; set it up with two panels, in the lower panel show DLL's. If you then lclick Iexplore.exe you will get a list of DLL's involved with it - they should all be microsoft signed, plus maybe a Sun java one and ones from any site blocker you may run, and toolbars or browser helpers . See if you can see any duds. The only other thing i can suggest is that you temporarily at least remove your toolbars/helpers. Yahoo, acrobat, bit comet. You could remove the installshield updater also - totally unnecessary to have it. These two:
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
These two are RAM wasters also:
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
...and this one - you can start it when you need to know if the sun is shining.. :) :
O4 - HKCU\..\Run: [WeatherWatcher] C:\Program Files\Weather Watcher\ww.exe

Say how you get on, please.
One other thing - I dunno if you use Adobe Acrobat professionally [paid up] or just use it to read docs.... I was astonished when i noticed how it bloats when installed, a 22MB dl becomes a 105MB behemoth when it hits your HD. I dumped it [ because it's slow with graphics, crashes and wipes your dl's....], scraped it carefully outta my sys cos the uninstaller leaves about 30MB behind, and got Foxit. Small, clean, fast, does everything better. A 2.5Mb dl, 5MB on the HD when installed.

akoloff 0 Newbie Poster · Answer 7 · 2007-05-30T05:22:27+00:00

i looked at the dll files in Process Explorer and among other things i saw few index.dat files which gave me an idea. i went into the safe mode and deleted all index.dat files related to iexplore and cleaned all the internet temp files, cookies and history. and guess what, it did the trick. it's all back to normal again. amazing.

thanks for all the help and for your time. i hope this thread will help others with the same problem.

CASE CLOSED!!!

gerbil 216 Industrious Poster · Answer 8 · 2007-05-30T12:42:50+00:00

Oh boy..... I dunno what to say about that... the index file bit.... but what the heck, they are rewritten as needed. Glad you're firing again. Cleaning is good, and CCleaner is a good cleaner...
==Get CCleaner from http://www.ccleaner.com/ - and put it in a new folder. You should aim to keep this one for general use. I set it from the installation checkboxes to only open from the recycle bin. It's neater that way.
Now run CCleaner from the recycle bin rclick menu using its default settings [if you set up CCleaner as i suggested, rclicking the bin icon should give you the Open CCleaner option...]. Select the Cleaner icon and the Windows tab; press Run Cleaner. Next select the Applications tab and Run Cleaner again.
[For future quick temp file cleaning select the options you wish to use. Note that CCleaner is also a free registry cleaner. Explore all its options, but skip the prefetch folder cleaning option. That one is a furphy, much loved on some websites, but cleaning it is unnecessary because windows automatically dumps old unused entries anyway, they can do no harm, and further, if there is no prefetch entry for an app you wish to load then your sys will just be a lil bit slower loading it. And an entry will then be generated anyway.]

agogddy 0 Newbie Poster · Answer 9 · 2007-05-31T10:06:00+00:00

worth a look, thanks

---------------------------------
Free Download

iexplore.exe takes up to 98% cpu time

Dani AI

Recommended Answers Collapse Answers

All 12 Replies

Recommended Answers