[marryan]

Explorer.exe is using up to 99% of my CPU. I read that SP2 was suppose to
correct this problem. I did a complete restore last week, but the problem
still remains. The maker of my computer wants me to send it back and have a
complete diagnostic run on it, but that takes 3 to 6 weeks. Is there a
solution that I can do??/

[PA Bear]

Check for Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/

--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE) & Security

marryan wrote:
> Explorer.exe is using up to 99% of my CPU. I read that SP2 was suppose to
> correct this problem. I did a complete restore last week, but the problem
> still remains. The maker of my computer wants me to send it back and have
> a
> complete diagnostic run on it, but that takes 3 to 6 weeks. Is there a
> solution that I can do??/

[marryan]

I just ran HiJack This......and this is what it shows:

Logfile of HijackThis v1.96.4
Scan saved at 6:20:19 AM, on 6/12/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\eMachines Bay Reader\shwiconem.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\explorer.exe
I:\WinMX\WinMX\WinMX.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Norton AntiVirus\OPScan.exe
C:\Program Files\Messenger\msmsgs.exe
J:\CleanUpApps\HiJackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.charter.net/index.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.emachines.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext =
http://www.lexmark.com/MD/?func=newreg&lang=0&prtr=4476001&ctry=00000409&os=5&src=1
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program
Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection -
{4A368E80-174F-4872-96B5-0B27DDD11DB2} -
J:\CleanUpApps\SpyWareGuard\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} -
J:\CleanUpApps\SpyBot\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program
Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: ToolHelper - {CDEEC43D-3572-4E95-A2A5-F519D29F00C0} -
C:\PROGRA~1\ADVANC~1\Toolbar.dll (file missing)
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} -
C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [RemoteControl] "C:\Program
Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec
Shared\ccApp.exe"
O4 - HKLM\..\Run: [NAV CfgWiz] C:\Program Files\Common Files\Symantec
Shared\CfgWiz.exe /GUID NAV /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunKistEM] C:\Program Files\eMachines Bay
Reader\shwiconem.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor]
C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [Ad-aware] "J:\CleanUpApps\AdAware\Ad-aware
6\Ad-aware.exe" +c
O4 - HKCU\..\Run: [FreeRAM XP] "J:\CleanUpApps\RamFree\FreeRamXPLite\FreeRAM
XP Pro 1.40.exe" -win
O4 - Startup: SpywareGuard.lnk =
J:\CleanUpApps\SpyWareGuard\SpywareGuard\sgmain.exe
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: Backflip (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O14 - IERESET.INF: START_PAGE_URL=http://www.emachines.com
O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) -
https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {FACE8C27-E524-11D3-8CCD-0050DA18E436} (&Backflip Buddy) -
http://www.backflip.com/bin/backflip03.cab

Since my machine came loaded with XP, Microsoft will not talk to
me.......but I know somewhere out there in cyper-space, there is an answer to
this. I have always been told that explorer.exe is the one thing that has to
always run, but I did run across a web site that says you can disable
it..........makes me wonder how Windows will work........... I do thank you
for your reply Pa Bear and perhaps by looking at HiJack, you might see
something else that could be causing the problem

"PA Bear" wrote:

> Check for Hijackware
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/Darnit.htm
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://defendingyourmachine.blogspot.com/
>
> --
> ~Robear Dyer (PA Bear)
> MS MVP-Windows (IE/OE) & Security
>
> marryan wrote:
> > Explorer.exe is using up to 99% of my CPU. I read that SP2 was suppose to
> > correct this problem. I did a complete restore last week, but the problem
> > still remains. The maker of my computer wants me to send it back and have
> > a
> > complete diagnostic run on it, but that takes 3 to 6 weeks. Is there a
> > solution that I can do??/
>
>

[PA Bear]

Hi, Marryan

We do not interpret HijackThis logs in the public newsgroups for a number of
reasons. Here are but a few of the many forums where you might post your
log for expert analysis: http://forums.spywareinfo.com/,
http://castlecops.com/forum67.html or
http://aumha.net/viewforum.php?f=30

Before you post, however, update to the most recent version of HijackThis
(v1.99.1): http://aumha.net/downloads/hijackthis.zip. Close all browser,
messenger, mediaplayer, mail client and Office windows/apps before scanning
with HijackThis, please.

(<whispers> You can have HijackThis "fix" all entries which end with "file
missing" or "no file".)
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE) & Security

marryan wrote:
> I just ran HiJack This......and this is what it shows:
>
> Logfile of HijackThis v1.96.4
> Scan saved at 6:20:19 AM, on 6/12/2005
> Platform: Windows XP SP2 (WinNT 5.01.2600)
> MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
> <snip>
> Since my machine came loaded with XP, Microsoft will not talk to
> me.......but I know somewhere out there in cyper-space, there is an answer
> to this. I have always been told that explorer.exe is the one thing that
> has to always run, but I did run across a web site that says you can
> disable
> it..........makes me wonder how Windows will work........... I do thank
> you
> for your reply Pa Bear and perhaps by looking at HiJack, you might see
> something else that could be causing the problem
>
> "PA Bear" wrote:
>
>> Check for Hijackware
>> http://aumha.org/a/parasite.htm
>> http://aumha.org/a/quickfix.htm
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/Darnit.htm
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> http://defendingyourmachine.blogspot.com/
>>
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-Windows (IE/OE) & Security
>>
>> marryan wrote:
>>> Explorer.exe is using up to 99% of my CPU. I read that SP2 was suppose
>>> to
>>> correct this problem. I did a complete restore last week, but the
>>> problem
>>> still remains. The maker of my computer wants me to send it back and
>>> have
>>> a
>>> complete diagnostic run on it, but that takes 3 to 6 weeks. Is there a
>>> solution that I can do??/

[marryan]

Thanks for the advice Pa Bear.......... I did dowload and fix missing
files(whispering), but nothing has helped my "explorer.exe" problem yet. It
ran all night long and the only way I can stop it is to unplug the computer.
I'm still searching for an answer.


"PA Bear" wrote:

> Hi, Marryan
>
> We do not interpret HijackThis logs in the public newsgroups for a number of
> reasons. Here are but a few of the many forums where you might post your
> log for expert analysis: http://forums.spywareinfo.com/,
> http://castlecops.com/forum67.html or
> http://aumha.net/viewforum.php?f=30
>
> Before you post, however, update to the most recent version of HijackThis
> (v1.99.1): http://aumha.net/downloads/hijackthis.zip. Close all browser,
> messenger, mediaplayer, mail client and Office windows/apps before scanning
> with HijackThis, please.
>
> (<whispers> You can have HijackThis "fix" all entries which end with "file
> missing" or "no file".)
> --
> ~Robear Dyer (PA Bear)
> MS MVP-Windows (IE/OE) & Security
>
> marryan wrote:
> > I just ran HiJack This......and this is what it shows:
> >
> > Logfile of HijackThis v1.96.4
> > Scan saved at 6:20:19 AM, on 6/12/2005
> > Platform: Windows XP SP2 (WinNT 5.01.2600)
> > MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
> > <snip>
> > Since my machine came loaded with XP, Microsoft will not talk to
> > me.......but I know somewhere out there in cyper-space, there is an answer
> > to this. I have always been told that explorer.exe is the one thing that
> > has to always run, but I did run across a web site that says you can
> > disable
> > it..........makes me wonder how Windows will work........... I do thank
> > you
> > for your reply Pa Bear and perhaps by looking at HiJack, you might see
> > something else that could be causing the problem
> >
> > "PA Bear" wrote:
> >
> >> Check for Hijackware
> >> http://aumha.org/a/parasite.htm
> >> http://aumha.org/a/quickfix.htm
> >> http://mvps.org/winhelp2002/unwanted.htm
> >> http://inetexplorer.mvps.org/Darnit.htm
> >> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> >> http://defendingyourmachine.blogspot.com/
> >>
> >> --
> >> ~Robear Dyer (PA Bear)
> >> MS MVP-Windows (IE/OE) & Security
> >>
> >> marryan wrote:
> >>> Explorer.exe is using up to 99% of my CPU. I read that SP2 was suppose
> >>> to
> >>> correct this problem. I did a complete restore last week, but the
> >>> problem
> >>> still remains. The maker of my computer wants me to send it back and
> >>> have
> >>> a
> >>> complete diagnostic run on it, but that takes 3 to 6 weeks. Is there a
> >>> solution that I can do??/
>
>

[PA Bear]

Post your HT log to:

> http://forums.spywareinfo.com/,
> http://castlecops.com/forum67.html or
> http://aumha.net/viewforum.php?f=30
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE) & Security

marryan wrote:
> Thanks for the advice Pa Bear.......... I did dowload and fix missing
> files(whispering), but nothing has helped my "explorer.exe" problem yet.
> It
> ran all night long and the only way I can stop it is to unplug the
> computer.
> I'm still searching for an answer.
>
>
> "PA Bear" wrote:
>
>> Hi, Marryan
>>
>> We do not interpret HijackThis logs in the public newsgroups for a number
>> of reasons. Here are but a few of the many forums where you might post
>> your log for expert analysis: http://forums.spywareinfo.com/,
>> http://castlecops.com/forum67.html or
>> http://aumha.net/viewforum.php?f=30
>>
>> Before you post, however, update to the most recent version of HijackThis
>> (v1.99.1): http://aumha.net/downloads/hijackthis.zip. Close all browser,
>> messenger, mediaplayer, mail client and Office windows/apps before
>> scanning
>> with HijackThis, please.
>>
>> (<whispers> You can have HijackThis "fix" all entries which end with
>> "file
>> missing" or "no file".)
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-Windows (IE/OE) & Security
>>
>> marryan wrote:
>>> I just ran HiJack This......and this is what it shows:
>>>
>>> Logfile of HijackThis v1.96.4
>>> Scan saved at 6:20:19 AM, on 6/12/2005
>>> Platform: Windows XP SP2 (WinNT 5.01.2600)
>>> MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
>>> <snip>
>>> Since my machine came loaded with XP, Microsoft will not talk to
>>> me.......but I know somewhere out there in cyper-space, there is an
>>> answer
>>> to this. I have always been told that explorer.exe is the one thing that
>>> has to always run, but I did run across a web site that says you can
>>> disable
>>> it..........makes me wonder how Windows will work........... I do thank
>>> you
>>> for your reply Pa Bear and perhaps by looking at HiJack, you might see
>>> something else that could be causing the problem
>>>
>>> "PA Bear" wrote:
>>>
>>>> Check for Hijackware
>>>> http://aumha.org/a/parasite.htm
>>>> http://aumha.org/a/quickfix.htm
>>>> http://mvps.org/winhelp2002/unwanted.htm
>>>> http://inetexplorer.mvps.org/Darnit.htm
>>>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>>>> http://defendingyourmachine.blogspot.com/
>>>>
>>>> --
>>>> ~Robear Dyer (PA Bear)
>>>> MS MVP-Windows (IE/OE) & Security
>>>>
>>>> marryan wrote:
>>>>> Explorer.exe is using up to 99% of my CPU. I read that SP2 was suppose
>>>>> to
>>>>> correct this problem. I did a complete restore last week, but the
>>>>> problem
>>>>> still remains. The maker of my computer wants me to send it back and
>>>>> have
>>>>> a
>>>>> complete diagnostic run on it, but that takes 3 to 6 weeks. Is there a
>>>>> solution that I can do??/