msmsgs.exe taking up 99% of CPU

Well actually it could be anyone of the below three items depending on where it is running from:

1. Windows Messenger
2. MSN Messenger
3. Malware (often found in C:\Windows\System32 or C:\Windows or a subfolder of C:\Documents and Settings)

Please run the below tool which run very quickly and attach the runkeys.txt log.

Using GetRunKey

 

Then you must not be logged in! Are you using FireFox? If so, try using Internet Explore instead.

 

I see no signs of msmsgs.exe loading at startup. If you are still having problems and suspect malware, you will have to follow the below steps so we can get to the heart of your problem.

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

• Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
• Make sure you check version numbers and get all updates.
• Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

• After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis
​

• When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)
  • Bitdefender
  • Panda Scan
  • HijackThis

.

 

Cookies are not problems to be concerned with. You will get cookies anytime you surf. If they bother you, they are easily removed from your browser. You do not need special tools to remove cookies but you can use Ccleaner and similar to do this too. Just be aware that many cookies serve useful purposes and you could be removing things you want. Your HJT log is clean.

As far as ISTbar being detected by Panda, since it gives no registry location, we cannot do anything to try to fix it. We don't even know if the detection is valid. In most cases when Panda reports something like this, they are just benign left overs that you don't need to be concerned with. However, you can try the below registry patch to see if we can get luck and remove it. All of the below keys are things ISTbar may add to the registry.

Copy the bold text below to notepad. Save it as fixIST.reg to your desktop (yes overwrite the previous one). Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.

 

I discussed this in my last message. You are getting the Tribalfusion cookie from Majorgeeks! They are not issues to be concerned with.

If you are not having any other malware problems, it is time to go back to step 1 of the READ & RUN ME to Disable System Restore which will flush your Restore Points. Then reboot and enable System Restore to create a new clean Restore Point.

After that, you should work thru the below link:

How to Protect yourself from malware!