XP Pro w/Unusually high CPU usage (CPU fans stays on high) - Logs attached

axlmastr · Sep 27, 2012

I got this machine to look at as it had unusually high CPU usage and the CPU fan tends to stay on high speed though the machine isn't running any applications or visible tasks- just idling. I note that it has Norton Internet Security on it with a full year subscription though I'm not a big fan of Norton or McAfee. I had some program called Internet Security 2009 in the language of German on it but used Add/Remove Programs to get rid of it- likely malware or rogue AV. I also see a CA eTrust Internet Security Suite installed in the systray though upon opening it says nothing is installed- this being after I click OK to a popup message "eTrust Security Center: calSS.exe - Unable to Locate Component - This application has failed to start because ISafeIf.dll was not found reinstalling the application may fix this problem". I don't have a copy of the application and AppRemover was unable to find it in its scan so I could remove it. Any suggestions on that one?

I have gone thru the registry and removed quite a lot of items that load at startup so the systray is pretty light now and some things have improved. I removed all of the Java and will put updated versions on after you give the "all clear". I just wanted to have some eyes on the logs to see if anything else needs to go and if someone has a suggestion of how to get this CA Security Suite off of here as I know too many of these programs is more harmful than good. As I said it's not my machine I'm just tuning it up for someone. Thanks in advance.

TimW · Sep 28, 2012

You can allow RogueKiller to fix the items it found, but I am not finding any malware in your logs. I suggest you post in the software forum for further assistance.

Since you are not having any malware problems, it is time to do our final steps:

We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware. You can uninstall RogueKiller and HitManPro.

Go back to step 6 oof the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If running Vista or Win 7, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
related to MGtools and some other items from our cleaning procedures.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Malware removal from a National Chain = $149
Malware removal from MajorGeeks = $0

axlmastr · Dec 21, 2012

I performed the tasks as recommended and things improved. As far as the eTrust Internet Security Suite error in the systray- I found where that was coming and removed the offending associated file. Thanks again for the help and we will call this thread closed.

TimW · Dec 22, 2012

You are most welcome. Safe surfing.

Log in or Sign up

XP Pro w/Unusually high CPU usage (CPU fans stays on high) - Logs attached

axlmastr Private E-2

Attached Files:

mbam-log-2012-09-27 (12-33-24).txt

HitmanPro_20120927_1749.log

RKreport[1].txt

TDSSKiller.2.8.10.0_27.09.2012_14.25.12_log.txt

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

axlmastr Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member