run away programs

Buzin2 · Feb 20, 2011

I have had some problems with programs running away with my CPU, , , FireFox does it and Avast did it, , even if you are not using it,, sometimes if runs it self up to 99% CPU usage, and some time it does it when you shut it down, and takes memory with it sometimes, , seen 400,000 (which ever) men usage but program is doing nothing, , oh and malware finds the same two trojans in the same place no matter how often i run it and one more, , , is there a program that removes unnecessary running programs, kind of like the game booster XP AMD 2000+ 2g RAm

Caliban · Feb 20, 2011

Greetings, Buzin2.

The intense CPU usage (especially by avast! and Firefox) coupled with the "malware finds the same two trojans in the same place no matter how often i run it and one more" statement leads me to believe that you should go through the Malware Forum's Read & Run Me First thread, perform all of the suggested steps, and attach the requested logs to a new thread in that forum, just to be safe.

Once the Malware gurus clear you, if you still experience the issues we'll be glad to help.

Buzin2 · Feb 21, 2011

well I did, followed steps closely, (i believe) altho "JAVA(tm) 6" would not delete, forget error, so I rebooted to try again, , , now will not boot in any mode, safe or even last know good boot configuration, so computer in now useless, maybe i should do a repair from disk boot? I NeEd My CoMpUtEr

Buzin2 · Feb 22, 2011

after spending 2 3/16 hours inside the guts of my computer, scaring knuckles on data cables, power cables, i/o card and other useless stuff, I with drew my hands flicking off the last of the St. Elmo's fire, and quietly closed the case, calling a conference with me and my self (I was there) we determined patient was unable to with stand more operations. Calling all the VOICES, and consulting a Dr. ( have a Ph.D in mushroom farming) and watching the blinking cursor for 34 15.16 hours, we decided patient was brain dead, pulling the plug and watching blinking cursor poof, we exclaimed diagnoses proved "TRUE".. services are Saturday next, proper atire required, (no visiable pocket protectors, belly buttons Hawaiian shirt or sandals /w w/o socks, in leau of flowers donations can be made to Computer ignominious, homeless computers, and feed the computers all at my bank, , , you all have my condolences Buzz

Caliban · Feb 22, 2011

Ha! Let me guess - you're upset with your machine, yes?

Does anything work? If and when you want to try to troubleshoot this thing, I'd suggest starting from scratch - disconnect the hard drive and pull any peripherals, so that the only thing powered is the motherboard with processor and RAM installed. Flip the switch - does anything happen?

Buzin2 · Feb 22, 2011

at machine, well yeah, but also at your advise, , ,which I was FOLLOWING, , but luckily about 60 days ago I used SeaGate Disk Wiz to copy my c: drive and related logical drives to a larger drive,,, which is the one that screwed up so all I have to do is save the database updates and other files to disk and redo the COPY, , , heheheh am smarter than the average bare knuckled fighter

Caliban · Feb 22, 2011

My "advise" [sic] was to:

...go through the Malware Forum's Read & Run Me First thread, perform all of the suggested steps, and attach the requested logs to a new thread in that forum...
Click to expand...

Did you do that? I could not find your Malware Forum thread with the attached logs.

If the Read & Run Me First steps caused further problems for your machine, then I apologize for suggesting what I thought was the proper procedure indicated by your posted symptoms.

Glad you're getting things sorted, thanks for the feedback, and good luck to you. :major

Buzin2 · Feb 23, 2011

didn't get that far,, only got to delete all "old" copies of jave and are you attending the funeral? :confused

Buzin2 · Feb 24, 2011

not mad at no body, cause if this could happen to anybody it'll happen to me first

Buzin2 · Feb 26, 2011

s following all steps and got to MGtools - download and on arrtmpting to down load a
box shows up and says "Authentication required
Site: forums.majorgeeks.com requires Username &
Password" and alto it looks like download nothing is downloaded

TimW · Feb 26, 2011

Try it here:

MGtools

Buzin2 · Feb 27, 2011

sry Tim same thing "Authentication required" I hear "cry Me a River " playing in the back ground?

TimW · Feb 27, 2011

Try doing this first:

eSet Online Scan.

Buzin2 · Mar 1, 2011

ok Tim I did that, and here's the log, now where does that put me in the list of things Caliban told em to do, in a certain order, , and I posted this yesterday but it is not here, , humm i am moving, , from insanity to insanity :drool

satrow · Mar 1, 2011

Looks like Eset found and removed some infections.

Can you run MGtools now?

Buzin2 · Mar 1, 2011

no, get same box, I attached a screen shot of it; are these rails greased?? am I going down hill??

satrow · Mar 1, 2011

Ok, can you get access to another computer to download it?

TimW · Mar 1, 2011

You obviously have malware. Question is can we find it? Try doing this:

Please download and run the below tool named Rkill (courtesy of BleepingComputer.com) which may help allow other programs to run.

There are 4 different versions. If one of them won't run then download and try to run the other one.

Vista and Win7 users need to right click and choose Run as Administrator

You only need to get one of them to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

Rkill.exe

Rkill.com

Rkill.scr

Rkill.pif

* Double-click on the Rkill desktop icon to run the tool.
* If using Vista or Windows 7 right-click on it and choose Run As Administrator.
* A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
* If not, delete the file, then download and use the one provided in Link 2.
* If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
* Do not reboot until instructed.

If you are having problems running Rkill, you can download iExplore.exe or eXplorer.exe, which are renamed copies of Rkill.com, and try them instead.

* If the tool does not run from any of the links provided, please let me know.
Once you've gotten one of them to run then try to immediately run the following.

Now download and Run exeHelper from Raktor

Please download exeHelper to your desktop.

Double-click on exeHelper.com to run the fix.

A black window should pop up, press any key to close once the fix is completed.

A log file named log.txt will be created in the directory where you ran exeHelper.com

Attach the log.txt file to your next message.

Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).

If you already have them installed, be sure to update Malwarebytes and SUPERAntiSpyware before the scan!

Now run this: Using Malwarebytes Anti-Malware

Now run this: SUPERAntiSpyware - running & getting a log

Now run this: Using MGtools

Now you need to attach (See: HOW TO: Attach Items To Your Post ) the below logs created while running the above scans

RKill log

exeHelper log

Malwarebytes Anti-Malware log

MGlogs.zip - normally it is C:\MGlogs.zip - only attach this log from MGtools.exe DO NOT attach any logs seen in the MGtools folder.

Buzin2 · Mar 6, 2011

ok I did it, , , maybe and I hope the logs I was tempted to keep the logs, , it is COLD here :-D

TimW · Mar 7, 2011

Are you now able to get MGTools to download and run? If so, please attach the log: C:\MGLogs.zip.

Buzin2 · Mar 8, 2011

no same data box appears, it has name and password already installed, , , and says it is coming from you I attached it again just in case

TimW · Mar 8, 2011

Download OTL by Old Timer. and save it to your Desktop.

* Double click on OTL.exe to run it.
* Under Output, ensure that Minimal Output is selected.
* Under Extra Registry section, select Use SafeList.
* Click the Scan All Users checkbox.
* Click on Run Scan at the top left hand corner.
* When done, two Notepad files will open.
o OTListIt.txt <-- Will be opened
o Extra.txt <-- Will be minimized
* Please post the contents of these 2 Notepad files in your next reply.

Buzin2 · Mar 9, 2011

pages n pages of pages got cross eyed reading, , :zzz

Buzin2 · Mar 9, 2011

opss other file didn't upload :cry

Buzin2 · Mar 11, 2011

the other log said it uploaded but when I looked it didn't , ,. , , oh well i got that MGtools file to load and run, , I input it from a CD, ,
:zzz so here is the log from that I lost my insanity, , , if you c it please send it home??

run away programs

Buzin2 Private E-2

Caliban I don't need no steenkin' title!

Buzin2 Private E-2

Buzin2 Private E-2

Caliban I don't need no steenkin' title!

Buzin2 Private E-2

Caliban I don't need no steenkin' title!

Buzin2 Private E-2

Buzin2 Private E-2

Buzin2 Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Buzin2 Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Buzin2 Private E-2

Attached Files:

satrow Major Geek Extraordinaire

Buzin2 Private E-2

Attached Files:

satrow Major Geek Extraordinaire

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Buzin2 Private E-2

Attached Files:

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Buzin2 Private E-2

Attached Files:

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Buzin2 Private E-2

Attached Files:

Buzin2 Private E-2

Buzin2 Private E-2

Attached Files: