Re: winlogon shows cpu at 99% by Anonymous Ghost on January 14th, 2004 01:13:18 PM
Over the last few days I too have had the exact same problem on my IBM T40p laptop after installing Zonelabs firewall. I thought it might be a virus so I checked with Norton but nothing showed. I also did a system restore to before I installed Zonelabs but still no luck. |
Re: winlogon shows cpu at 99% by ono_its_seth on January 27th, 2004 10:46:04 AM
You never mentioned when the meter shows 99% and how long it stays like that.
Winlogon.exe is a VITAL file and should not be tampered with. |
Re: winlogon shows cpu at 99% by Anonymous Ghost on April 15th, 2004 06:40:31 PM
my computer does the samething after 10 minutes of logging into win2k. it stays that way for a long time and i have to manually shut it off or reboot. this started happening this week after i had all these popup/ad issues (which looks like has been taken care of). |
Re: winlogon shows cpu at 99% by Anonymous Ghost on April 15th, 2004 10:19:10 PM
http://www.securitytracker.com/alerts/2004/Apr/1009768.html
that's the site to correct your problem, turns out it is an issue that deals with someone sending a code that sends your pc into a overbuffer on the winlogon. i had the same problem and this one corrected the problem so far haven't gotten the whole 99% cpu usage from Winlogon. Good Luck. |
Re: winlogon shows cpu at 99% by Anonymous Ghost on April 16th, 2004 12:41:22 AM
I am having the exact same problem on my win2k box at work. IT spent over an hour with it but nothing changed (thought they insisted they fixed it). I am looking forward to trying this fix tomorrow am so I might be able to get more than 10min of work done at a time. Thanks! |
Re: winlogon shows cpu at 99% by Anonymous Ghost on April 16th, 2004 03:09:58 AM
Hey guys, it's me the person that sent the link. Now i been testing my pc and have found that the Patch doesn't work all that good. it helps but doesn't solve it. BUT good news i found the reason, After careful searching and debuging of my system i finnaly found out why it's doing that so here it is. It's SpyWare. Yeah, that's right the annoying popups you get while browsing the internet. Turns out that some of those pop-up download a nasty flooder. And the only way to remove it is with a spyware removal program.... Which i happen to have the URL :) http://www.safer-networking.org/index.php?lang=en&page=download there, download the Search and destroy. And don't worry it's free. And obliterate those damn flooders. And if it still doesn't work post something i'll more then likely keep helping to the best of my abilities.. So good luck and i'll keep an eye out.. OH! btw please send something here about your condition and if it worked. If by anychance it still didn't work. i found an article about Norton and 3dMax doing a conflic that ends in the same result as Winlogon overbuffer.
Well good luck and take care.
WhiteKnight. |
Re: winlogon shows cpu at 99% by Anonymous Ghost on April 16th, 2004 11:38:43 AM
Same problem here. Running XP Pro, the winlogon.exe process kicks CPU up to 99% 10 minutes after logging in to the machine.
Have tried all solutions mentioned here, but no go. Not a service pack or hot-fix related issue, nor is it a Spyware or pop-up issue. I'm using Spybot with up-to-date dictionary, and pop-up blocker.
I've swept the registry looking for Netsky.D worm entries or any other entries mentioning winlogon.exe. Nothing out of the ordinary.
Also not running 3DMax - tried scanning using Norton Anti-virus Corporate 8 but it didn't come up with anything.
If this is a virus, it's brand new.
Any more suggestions? |
Re: winlogon shows cpu at 99% by Anonymous Ghost on April 16th, 2004 11:40:46 AM
Oh, and forgot to mention the memory starts getting eaten up at the same time the CPU goes to 99% used. I have 1GB of mem. |
Re: winlogon shows cpu at 99% by Anonymous Ghost on April 16th, 2004 01:09:31 PM
Well, i've been looking arround for you and i have found some things that be a solution to your problem but i need to know a couple of things that may help in your get this problem solved. First. Do you have any autodesk programs. Second do you have any antivirus programs (and what is it). Third do you share a printer which may require a printer spooler.and last but not least do you have did you try running your pc by disconnecting your pc from the network or internet connection?
WhiteKnight. |
Re: winlogon shows cpu at 99% by Anonymous Ghost on April 16th, 2004 07:28:54 PM
I found the following process:
c:\winnt\systemre\ahctres.dll that is mentioned in the registery in a winlogon/notify entry, and causing the problem, could not figure out what it is. Had to reboot from cd and remove the files, than remove the entry from the guardian registery. It looks like a trojan or virus |
Re: winlogon shows cpu at 99% by Anonymous Ghost on April 16th, 2004 07:55:32 PM
more info for previous response:
The process name is actually: c:\winnt\system32\ahctres.dll, 308584 bytes, There is also a file: c:\winnt\system32\ahctres.cpy.dll, 308584 bytes, they must both be removed. (RZ) |
Re: winlogon shows cpu at 99% by scorpio on April 16th, 2004 11:10:44 PM
Do one thing, download and run 'Hijack This' and post your process log here. I will give us a complete picture and will help in solving the problem. |
Re: winlogon shows cpu at 99% by kkh on April 17th, 2004 08:33:29 PM
hi, i have the same problem and i realized that if you let the computer stay on for long enough, at one point, when it runs out of virtual memory, it will go back to normal... but this's absolutely annoying. PLEASE someone PLEASE HELP!
and here's my log from hijack this, please help me!!! please
thank you very much in advance
Logfile of HijackThis v1.97.7
Scan saved at 5:18:25 PM, on 17/04/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\mcafee.com\PERSON~1\MPFSERVICE.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\PROGRA~1\mcafee.com\PERSON~1\MpfTray.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\ctfmon.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\PROGRA~1\mcafee.com\PERSON~1\MpfAgent.exe
C:\Documents and Settings\Kay Kay\Desktop\hijacker check\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.my.yahoo.com/
N2 - Netscape 6: user_pref("browser.search.defaultengine", "http://www.google.com/"); (C:\Documents and Settings\Kay Kay\Application Data\Mozilla\Profiles\default\wlt08jfl.slt\prefs.js)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\mcafee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Exif Launcher.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O9 - Extra button: ICQ (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,74/mcinsctl.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/1,5,0,4348/mcfscan.cab |
Re: winlogon shows cpu at 99% by Anonymous Ghost on April 18th, 2004 05:41:59 AM
Check if this file ahctres.dll, exists somewhere on your system, if it does, you are infected with this new virus. If so it is causing WINLOGON to consume 99% of CPU. You will have to remove it by booting from a CD and than clean the registery. Cleaning the registery first does not work since it updates the registery again. |
Re: winlogon shows cpu at 99% by kkh on April 18th, 2004 07:33:52 AM
i did a virus scan with avg 6.0 and online mcafee anitvirus, none of them found anything suspicious. and when i just tried to look for the file you talked about, i couldn't find it neither... what's going on with my computer! PLEASE HELP! |
Re: winlogon shows cpu at 99% by kkh on April 18th, 2004 11:26:40 AM
btw, i just realized that my computer is infected by vx2betterinternet and i can't get rid of it with just adaware or spybot, can somebody help? maybe that's the problem of 99% CPU... check if you've got the same problem folks, and somebody please help.
(download this http://download.broadbandmedic.com/VbStuff/VX2Finder.exe and have it scanned and create a log, you will see if you have it) |
Re: winlogon shows cpu at 99% by Anonymous Ghost on April 22nd, 2004 02:29:40 PM
Well, I have simmilar problem and i'm fighting with it for a 2 days now. I found that it looks like NetSky.D wirus but non of AV programs have confirm my diagnose :( There are little programs at Symantek and Sophos portals but they don't help neighter. It looks like I have to reinstall a whole system wrrrrr Does anyone knows other way? |
Re: winlogon shows cpu at 99% by kkh on April 23rd, 2004 07:21:39 PM
hi, for netskyD.virus, you can download this thing from here: http://www.pandasoftware.com/download/utilities. this can help you to remove the virus. if you want any detail, you can read this article and this's where i found the info: http://computercops.org/article4905.html, i think this would probably help you |
Re: winlogon shows cpu at 99% by Anonymous Ghost on April 27th, 2004 12:54:21 PM
Hey kkh, I used the VX2Finder program and it seemes like I have it (log below). Did you find out how to remove it? I dont think its as simple as deleting the files:
Log for VX2.BetterInternet File Finder
Files Found---
C:\WINNT\system32\auctres.cpy.dll
C:\WINNT\system32\auctres.dll
Guardian Key---
Asynchronous 000
DllName C:\WINNT\system32\auctres.dll
Impersonate 000
Logon WinLogon
Version 122
ID {AF9FF6D5-AE68-4316-B9B0-646ADC249303}
IDex N0
User Agent String---
{AF9FF6D5-AE68-4316-B9B0-646ADC249303} |
Re: winlogon shows cpu at 99% by Anonymous Ghost on May 02nd, 2004 06:17:30 AM
I have the same problem with winlogon, but the VX2.BetterInternet File Finder
did not find any files! What else can be the problem??
dcs |
Re: winlogon shows cpu at 99% by Anonymous Ghost on May 02nd, 2004 06:47:44 AM
Hi! Have the same prob as u guys and
cant figure out how to solve it.
plz help, spybot didn't work either. |
VX2 Betterinternet by Anonymous Ghost on May 04th, 2004 04:20:53 PM
Anyone out there figured out how to remove from windows yet???? I have windows 2000, and have the ahctres.dll and cpy.dll - need to get rid of it before my IT dept finds it (they might set a policy to not use file sharing or do any downloads here at work, then what the hell would I want to come to work for?!?!?! LOL) - HELP PLEASE!!
biglyd@hotmail.com |
Re: winlogon shows cpu at 99% by Anonymous Ghost on May 05th, 2004 11:36:10 AM
I also have the same problem - and my computer is also a work computer I use at home...I don't want to loose it!
I've deleted a .cpy.dll and the same .dll a couple of days ago but it didn't help.
I also ran the VX2Finder and it gave me a list of about 15 files found..ouch! I haven't deleted them yet (it was late and the computer froze again). If deleting them works, I'll let you know. If not, I'll just keep reading this post...
debs0464
oh, btw, I was finally able to get rid of the sasser worm. Not easy when your computer shuts down in the middle of a download! |
Re: winlogon shows cpu at 99% by Anonymous Ghost on May 07th, 2004 06:05:13 PM
i had the same problem but i know an answer. I found out when your pc is not online you won't have the winlogon problem, but if you do you will. If you download now zone alarm you can solve the problem. zone alarm will actualy ask if winlogon can connect to the internet and say "no" and you won't have the problem anymore |
Re: winlogon shows cpu at 99% by Anonymous Ghost on May 08th, 2004 07:33:19 AM
Well i had the same problem.:)) 1try with the latest version of Ad-aware 6.0. If it doesnt help then the only thing is to repair your windows (xp). It takes 30 min and run this function (just repair. ;)) ok hva a nice day |
Re: winlogon shows cpu at 99% by Anonymous Ghost on May 08th, 2004 05:37:34 PM
i found 2 forums about Vx2.betterinternet. I think we are infected with http://forums.broadbandmedic.com/cgi-bin/ib3/ikonboard.cgi?;act=ST;f=1;t=14;r=1
http://www.askmarvin.ca/forums/index.php?&act=ST&f=20&t=1466 |
Re: winlogon shows cpu at 99% by Anonymous Ghost on May 11th, 2004 09:45:53 AM
I had the same problem. After zone alarm installation I allowed winlogon to the web and I get trouble.
After few test (remove soft and check for virus) I did as below. I reload zone alarm and do not allow winlogon connection. It works perfectly.
Thanks for your help |
Re: winlogon shows cpu at 99% by Anonymous Ghost on May 19th, 2004 04:01:52 AM
Right, I had the problem the first time when I was disconnected from the internet and home-network. No strange installs and it worked perfectly just 30 min. previous, when I was connected. So it goes beyond something network related, the freakin' parasite. Only thing I noticed is that the system reported an error in 'Run DLL as App', I'll try the Vx2 too, because it appears we have a self executing DLL on our hands, hiding under the powerfull arm of Winlogon.exe. Once upon a time we could just start up in DOS and clean house :-( |
Re: winlogon shows cpu at 99% by Anonymous Ghost on May 19th, 2004 04:35:41 AM
Okay, deleting suspicious DLL's with Vx2 seems to have worked. And I denied Winlogon network access to be on the safe side. It's really becoming a jungle out there, every time I use the internet I seem to need an arsenal of combinations of several programs just to restore the damage to my system. This problem also seems to have a lot of different causes (also found a few viruses). I hope it'll stay away now.
Catch ya on the flip side. |
VX2.BetterInternet Fixed! by Anonymous Ghost on June 01st, 2004 01:07:06 PM
The fixes here worked perfectly! Been fighting this for 3 days until I found this site. Thanks to everyone who contributed! |
Re: winlogon shows cpu at 99% by Anonymous Ghost on June 27th, 2004 11:48:18 AM
ok ive downloaded zone alarm and it seems to be working perfectly. no popups. no slow down. now, is there something i can do to fix vx2 so i dont need to run zone alarm? ive tried ad-aware and spybot and neither can get rid of it. ad aware finds it but says it cant delete it. spybot is oblivious. |
Re: winlogon shows cpu at 99% by Anonymous Ghost on July 14th, 2004 04:19:42 PM
I had the same problem. Explanation after the fix I used:
I plugged the hard drive into another machine, and from explorer shift-deleted the C:\windows\csc contents (it is a hidden folder- type it directly into explorer). Hold shift when you hit delete so it SKIPS the recycle bin.
After 20 minutes of explorer deleting what I can only assume was hundreds of thousands of files (could have been millions for all I know), the folder was empty. Plugged the hard drive into the old machine, booted and NO problems. Currently running a virus scan and spybot with 7/14/04 definitions, but expect to find nothing. If I find something I will post again.
Please be very careful shift-deleting ANYTHING on your computer - there is no undo.
It was not spyware and it was not a virus. Winlogon I believe handles the windows synchronization processes. Something went haywire with it and the C:\windows\csc folder had so many files in it - it took explorer a few minutes just to count them. If you frequently use a share, windows sometimes will decide to synchronize the files and cache them incase the server is not available or in case you decide to take a laptop elsewhere... it is handy when it works, I think this is an example of it going wrong. |
Re: winlogon shows cpu at 99% by Anonymous Ghost on July 16th, 2004 04:36:07 PM
i have winxp pro with the same issue. i went to find csc folder in windows directory and can't find it. appreciate if you can explain it well in details for i'm still a dummy on this matter.
thank you very much. |
Re: winlogon shows cpu at 99% by Anonymous Ghost on September 27th, 2004 05:13:57 PM
spoolsv.exe hogging 99% of cpu - the fix
I came into lab to find the printer printing strange ASCII characters, one line per page, and a basically inoperably slow PC. Checking Task Manager, I found the culprit - one spoolsv.exe at 99% cpu which I killed. About 30 seconds later, the cpu was once again clogged by a revived app. Here's the fix. First, get some breathing room - go to Control Panel, Administrative Tools, Services and stop the Print Spooler. Turn off the printer. Now go to C:\WINDOWS\system32\spool\PRINTERS and delete the files there. I found '00020.SHD' and '00020.SPL'. Now turn your printer back on and restart the service. Check task manager, spoolsv.exe should be at 00%. Whew! |
Re: winlogon shows cpu at 99% by Anonymous Ghost on October 05th, 2004 11:38:49 AM
hello
i have the same problem as mentioned by others in this thread, winlogn.exe taking up 99% of time. i ran spybot and deleted all that it found but all it found was cookies. i ran VX2 Finder and it did'nt find anything. i also ran netsky.d utility from panda software it did'nt find anything either. i ran hijack this and theres a bunch of stuff that it found. i have attached here the log that i found.
please help me!
praful
Logfile of HijackThis v1.98.2
Scan saved at 1:39:18 AM, on 10/5/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\cmd.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by America Online
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 146.229.162.234
O1 - Hosts: 195.183.56.12 webpointboston
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINNT\System32\Shdocvw.dll
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {2C8EEB84-6D60-11D4-BD64-0050048A82BF} (eshare communications NetAgent Customer ActiveX Control version 2) - http://billing-b.mhi.aol.com/netagent/objects/custappx2.CAB
O16 - DPF: {2FF18E10-DE11-11D1-8161-00A0C90DD90C} (MSNBC News Menu Control 3.0) - http://www.zdf.msnbc.de/tools/NewsBrowser/nm0713.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/0334a6f46cc68ec45505/netzip/RdxIE601.cab
O16 - DPF: {C4847596-972C-11D0-9567-00A0C9273C2A} - http://bostonwebserver/viewer/activeXViewer/activexviewer.cab
O16 - DPF: {D5989A5B-5638-4C4E-8EBE-CABCCB2BC3C4} (POINTInfo.NewWebClient) - http://bostonwebserver/verizon/POINTInfo.CAB
O17 - HKLM\System\CCS\Services\Tcpip\..\{FE9AF700-CDF9-4795-84AE-4066B6606F2C}: Domain = eng.uah.edu
Log for VX2.BetterInternet File Finder (msg126)
Files Found---
Additional Files---
Keys Under Notify---
crypt32chain
cryptnet
cscdll
NavLogon
sclgntfy
SensLogn
wzcnotif
Guardian Key--- is called:
User Agent String--- |
Re: winlogon shows cpu at 99% by Anonymous Ghost on November 04th, 2004 05:15:51 PM
A couple of useful utilities:
1. Start in safe mode no networking.
Start | Run | msconfig
This allows you to selectively disable any start up service or application (e.g. all non-MS) then selectively re-enable until the point of failure
2. See article 232575 at msdn.microsoft.com for debugging the winlogon process. Disregard the fact that it says NT4 in the title: it applies to NT4/2000/2003/XP |
Rundll32.exe takes 99% of CPU by Anonymous Ghost on November 04th, 2004 11:51:35 PM
cpu suddenly become very slow |
Rundll32.exe takes 99% of CPU by Anonymous Ghost on November 29th, 2004 01:45:24 PM
My computer does this do, at seemingly random times, forcing a reboot. pls help! |
Re: winlogon shows cpu at 99% by Anonymous Ghost on January 04th, 2005 06:33:41 PM
If you have ruled out viruses and spyware try rebuilding your offline files store: http://support.microsoft.com/?kbid=230738
Worked for me. |
Re: winlogon shows cpu at 99% by Anonymous Ghost on January 04th, 2005 06:40:47 PM
I am using offline files and folders and had the same problem. Looked like crazy for viruses and spy ware and could not find anything. The solution that worked for me was to delete the contents of C:\windows\csc which resets the offline files & folders sotore. There is also an alternative method of cleaning up the offline files:
http://support.microsoft.com/?kbid=230738
regards
morgala |
Re: winlogon shows cpu at 99% by Anonymous Ghost on January 25th, 2005 10:54:20 AM
Well i tried everything i could imagine plus a lot of suggestions posted on this site and elsewhere. Needless to say that the Microsoft support Web Site was useless. I followed up o a suggestion from one of the posts and used MSConfig to boot and then by trial and error found that the problem occured with two services: the Microsoft Fax and Microsoft Help & Support Service. I am not sure about the fax but i think that the problem really comes from the H&S Service. Once i disabled that service in Safe Mode, my Notebook is rebooting normally and winlogon is back to SOP.
Sad that it has cost me a new mother board, a new hardrive and about a month of headaches! Mind you the Hardware Support Guys to whom Toshiba referred me to are useless punks! pretty much as bad as Toshiba.
Miguel |
Re: winlogon shows cpu at 99% by Anonymous Ghost on July 13th, 2005 02:30:36 PM
FINALY I DISCOVERED!!!!
Its simple: go to the C:\WINDOWS\CSC folder and delete ALL FILES!!!
I dont know the folder's function (i'm trying to discover) but not affect in the other functions.
!!!!!!! |
