Member Avatar for Stevemorgan200

Hello all you good people.
I have a new problem! I installed broadband on my PC and the connection was being cut and my PC automatically shut itself down. I looked into it and it seems like I had a worm or something so I installed a program that removed it.
However, I'm not sure if it worked correctly.
My PC is now so verrrry slow and my CPU is constantly running at 100% which is obviously the reason programs are running in such a slow manner. Anyone know how to sort it? I reckon there must be a bug somewhere but don't know how to fix it!!??!! Bugger!

  • 9 Contributors
  • 12 Replies
  • 446 Views
  • 6 Months Discussion Span
  • Latest Post Latest Post by psychoman

Dani AI

Generated

Short summary and diagnostic plan. A persistent 100% CPU after removing a worm usually means one of three things remained: (A) active malware components or scheduled tasks that restart themselves, (B) corrupted or missing system files or drivers left in a bad state after the infection, or (C) a legitimate process stuck in a loop because of damaged files. reported an infection and slowdown; several members rightly pointed toward checking running processes and startup items (, ). A calm, ordered diagnosis is the safest route.

Recommended diagnostic checklist:

  1. Isolate the machine (physically disconnect network) to prevent reinfection.
  2. From normal Windows, capture the Processes view (sort by CPU) and note the top 2–3 image names and PIDs; save a screenshot for later comparison.
  3. Boot to Safe Mode (no networking) or use a clean rescue environment on removable media and run a full offline malware/rootkit-capable scan.
  4. Use an advanced process viewer to inspect the file path and digital signature of any high-CPU item; unsigned or oddly located binaries are suspect.
  5. Repair system integrity: run the system file checker with sfc /scannow and review the Application/System event logs for repeated errors.
  6. Check autostart locations (startup folders, run keys, scheduled tasks, services) for recent additions and disable nonessential network-facing services until clean.
  7. If high CPU persists after cleaning and repairs, consider an OS repair-install or a clean reinstall after backing up user data to ensure no hidden remnants remain.

Practical cautions and what helps responders. Back up mail, browser profiles and documents as plain files before tinkering. Keep copies of scanner logs and any suspicious filenames. After a confirmed clean, change online passwords from a different, known-clean machine. For further help in-thread, useful diagnostics to paste are the exact image names/PIDs that were pegging CPU, Safe Mode scan results, and any SFC/log output. References and tool names already mentioned in replies add context; follow the diagnostic order above before trying more invasive steps.

Recommended Answers

All 12 Replies

Member Avatar for Dani

Use ctrl+alt+del and go to the processes screen. What are the top few processes requiring the most cpu usage (dragging it down to 100%)?

Also, go to run and then type "msconfig"
Go to the startup tab and do a print screen of everything you have running at startup

Member Avatar for )BIG"B"Affleck

need to know which windows O.S your using
you probably need this application STARTER Its like a advanced ctrl+alt+delete
Post what CSCgal said first and then will help you turn off some services (resource hoggs)DOWNLOAD HERE

Member Avatar for feigned

need to know which windows O.S your using
you probably need this application STARTER Its like a advanced ctrl+alt+delete
Post what CSCgal said first and then will help you turn off some services (resource hoggs)DOWNLOAD HERE

There's a thread by him right below this one in the forum listing.

I would assume Windows XP.

And there's no reason to download a third party program to disable services. if it's XP, there's an .msc snap-in that lets you do whatever you desire concerning services.

Steve, you've got one (of many) variant of the Blaster worm. When you CTRL+ALT+DEL, go to the "Processes" tab and look for msblast.exe. If that's running (sounds like it) then post back.

Member Avatar for Stevemorgan200

Running XP Pro - think I've sussed it - went to Symnatec(?) and got rid of the worm - I think. Is there any programme or web based thing that anyone knows about so I can test my system to make sure it's running at it's optimum???

Member Avatar for jjorgensen626

You would do well to go to and download all the current critical updates, so you dont keep getting the blaster or welch worm.

If you already have Norton Anti-Virus then keep it updated. If you only used the Norton fix, and don't want to purchase an antivirus program, AVG offers a free version of anti-virus software:

http://www.grisoft.com/us/us_dwnl_free.php

There are also a few programs (PCMark2002-$20, SiSoft Sandra-$39) that you could run to test your performance. Both of these programs have trial versions you can use. They may be a little too much in the way of information (especially Sandra) if you are fairly new to the computer world, but can serve your purpose.

Member Avatar for Stevemorgan200

Yeah - the thing with the automatic updates from windows is....for my sins im using someone elses copy (shock horror!) so I can't download critical updates as (obviously) the product key I'm using has already been registered! I know I'm v v naughty - anyway gettin round this?!?

Member Avatar for jjorgensen626

Yeah there are a few ways (naughty). Shoot me your email address and I'll ffd you the instructions.

I hope i dont get booted for this

Member Avatar for TallCool1

Running XP Pro - think I've sussed it - went to Symnatec(?) and got rid of the worm - I think. Is there any programme or web based thing that anyone knows about so I can test my system to make sure it's running at it's optimum???

I know that I'm coming a little late to this party, but some important new information has come to light. It turns out that even with the MS patches applied, there are still DCOM/RPC vunerabilities. Go to Gibson Research Corp at http://www.GRC.com and download DCOMbobulator and ShootTheMessenger. The first shuts down DCOM, and the second shuts down the Windows Messenger Service, useful only as a source of spam pop-ups, most selling "services" to stop spam pop-ups...

It's also good to use Gibson's UPnP utility to shut off Universal Plug and Play, another useless feature. All of these utilities are reversible, as well.

commented: from big b +1
Member Avatar for christation

Hi all. I am having a somewhat related problem...

Almost every application I open spikes my cpu to 100%, but does not keep it there unless I am using some function of the application. This seems odd to me and has crashed or slowed to a crawl many apps lately.

Also, I have noticed when XP is loading my desktop, my mouse curser moves very slowly, and this happens when loading other apps... which is from the cpu I'm sure.

Is my cpu on the fritz, my motherboard going out, some configuration messed up?

Thanks!!!

Member Avatar for ssnow19741

winlogon.exe is always shooting my cpu up at 99% is there a way to fix that? i am using windows xp pro

Member Avatar for psychoman

Try downloading a program called spybot search and destroy you may well have some spyware that could be hogging the processor.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.