Unusually hig CPU usage! Plz help!

[Kilobyte70]

Hi I have had an unusually high cpu usage for the past 2 days. Especially when using firefox or safari or similar programs. I have over 300GB of hard disk space and almost 3gb of ram. I have never had over 80% cpu usage even even using high-end games but now the cpu usage is over 95% at times with just firefox open. I have ran multiple scans using norton, spybot, avg, ccleaner, super anti-spyware and still the problem presists. I even dismantled my system and cleaned out both the fans to no avail. I am a bit hesitant about reformatting as I have abt 200gb of data on my drives. Now as a last resort I am asking for outside help. I am posting the hijackthis log below:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 09:58:47, on 11/06/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

C:\WINDOWS\eHome\ehRecvr.exe

C:\WINDOWS\eHome\ehSched.exe

C:\WINDOWS\system32\HPZipm12.exe

C:\WINDOWS\System32\snmp.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe

C:\PROGRA~1\AVG\AVG8\avgrsx.exe

C:\WINDOWS\system32\dllhost.exe

C:\WINDOWS\Explorer.EXE

C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\PROGRA~1\AVG\AVG8\avgtray.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Stardock\ObjectDock\ObjectDock.exe

C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe

C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe

C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe

C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe

C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe

C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe

C:\Program Files\Mozilla Firefox 3 Beta 5\firefox.exe

C:\WINDOWS\system32\taskmgr.exe

D:\Program Files\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.windowstreams.com/

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = local

O1 - Hosts: 66.98.148.65 auto.search.msn.com

O1 - Hosts: 66.98.148.65 auto.search.msn.es

O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - D:\Program Files\Internet Download Manager\IDMIECC.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL

O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.ex e"

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\RunOnce: [] C:\Program Files\Internet Explorer\iexplore.exe http://www.symantec.com/techsupp/ser...00046.000000b7

O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe

O4 - Startup: Yahoo! Widgets.lnk = C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe

O8 - Extra context menu item: &Search - ?p=ZKfox000

O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 4.00\AMVConverter\grab.html

O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.05\AMVConverter\grab.html

O8 - Extra context menu item: Download all links with IDM - D:\Program Files\Internet Download Manager\IEGetAll.htm

O8 - Extra context menu item: Download FLV video content with IDM - D:\Program Files\Internet Download Manager\IEGetVL.htm

O8 - Extra context menu item: Download with IDM - D:\Program Files\Internet Download Manager\IEExt.htm

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.05\MediaManager\grab.html

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

O9 - Extra button: Encarta Search Bar - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)

O14 - IERESET.INF: START_PAGE_URL=http://dial.blueyonder.co.uk

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll

O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://www-secure.symantec.com/tech...bs/tgctlsr.cab

O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-GB/.../GAME_UNO1.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll

O20 - AppInit_DLLs: avgrsstx.dll

O20 - Winlogon Notify: !SASWinLogon - D:\Program Files\SASWINLO.dll

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe

 

--

End of file - 7601 bytes

 

Any help will be much appreciated. Thanks.

[Seth]

Welcome to Extreme Tech Support - Free PC Help Kilobyte.

 

Before I address the log, click on the processes tab in Task Manager and post back with the name of the process that is draining the cpu.

[Kilobyte70]

I am posting a screen shot of the task manager. But it has been much higher than this at time.

[Seth]

I can't read it, the resolution is too low.

 

As far as the log goes, there are two or three entries that can be removed, but they don't account for the high cpu.

 

Run HT, put a check on only the following, and click on Fix Checked:

 

O1 - Hosts: 66.98.148.65 auto.search.msn.com

 

O1 - Hosts: 66.98.148.65 auto.search.msn.es

 

O8 - Extra context menu item: &Search - ?p=ZKfox000

 

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)

 

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)

[Kilobyte70]

Here's list of the top 5 services running. firefox has at time gone upto 250mb when it was usually not over 75mb.

Firefox - 175,512

avgrsx - 47,392

svchost - 22,464

iexplorer.exe - 21,696

explorer.exe - 21,344

[Seth]

Those are within range, but it shows the memory used, not the cpu percentage.

[Kilobyte70]

Ok, here is the data from the performance monitor:

Totals

Handles - 11229

Threads - 510

Processes - 40

 

Commit Charge (K)

Total - 453628

Limit - 3908356

Peak - 456888

 

Physical Memory (K)

Total - 2030956

Available - 1368840

System Cache - 581484

 

Kernel Memory (K)

Total - 60580

Paged - 43736

Nonpaged - 13844

 

Processes - 40

CPU Usage - 89%

Commit Charge (PF Usage) - 442M/3816M)

 

Windows open - Mozilla Firefox & Task Manager.

 

Hope this helps.

[Seth]

I need to see what process is using the high cpu percentage (from the processes tab), and not the memory.

 

Try the screen shot again, but try to save it in a higher resolution, or just find the culprit process and post back with its name.

 

I have to leave for a while, so another mod will take over.

 

Good luck.

[Kilobyte70]

Here is a higher res but it's hard to get the more processes to fit in as the site will only let me upload upto 620x240 res bmp files

New Picture (6).bmp

Edited June 11, 2008 by Kilobyte70

[Goku]

Hello Praveen and Welcome to Extreme Tech Support - Free PC Help. :)

 

I see that Firefox is taking up an extraordinary amount of RAM. In normal conditions, it should not take more than 48,000 KBs or 48 MBs of RAM. Yours seems to exceed 128,000 KBs that is to say 128 MBs. Do you have a lot off add-ons in Firefox? Also, AVG seems to be taking a fairly large amount of RAM. Please consider a more efficient and light alternative Avira AntiVir. Also, can you please post your system specifications. As Seth did not find anything nasty, he will take back later for any Malware issues or any other issues. Please reply as soon as possible. :)

 

-- Goku

[Kilobyte70]

Here is the list of add-ons on firefox:

Avg safesearch

Avg security toobar

Fast dial

IDM CC 5.3

Stumble Upon

RealPlayer Browser Plugin

 

Btw I am not sure that this problem is confined to firefox. I have had the same results in safari and IE.

[Guest Wolfeymole]

Here is a higher res but it's hard to get the more processes to fit in as the site will only let me upload upto 620x240 res bmp files

 

Do the image again Kilobyte and save it as either .jpeg or .png and upload it.

[Goku]

Here is the list of add-ons on firefox:

Avg safesearch

Avg security toobar

Fast dial

IDM CC 5.3

Stumble Upon

RealPlayer Browser Plugin

 

Btw I am not sure that this problem is confined to firefox. I have had the same results in safari and IE.

Remove the AVG Safesearch and AVG Security Toolbar. AVG already has an inbuilt real-time protection and therefore you do not necessarily need its protection. That is also the major reason of hte lag and hogging of RAM according to me. Uninstall them and restart Firefox. See if it makes any difference. Also, please post your System Specifications so that we may be able to help you more effectively. :)

 

Ways of locating hardware and other system specifications.

 

How do I find my system specifications?

 

Post them as soon as you can. :)

 

-- Goku

[Kilobyte70]

I should tell you that i had norton when the problem first appeared. It was only after norton failed to fix it that I uninstalled and installed AVG. But I have disabled both add-ons as you said but the firefox usage is till high (185,000kb with 4 tabs open)

 

System Specs:

Windows XP Media Center Edition

Version 2002, Service Pack 2

Pentium® 4 CPU 3.06 GHz

2.63 GB Ram

Master Hard Drive - 80GB

Slave Hard Drive - 300 GB

Video Diver - ATI Radeon (256MB)

Audio Driver- Realtek HD Audio

[Goku]

I should tell you that i had norton when the problem first appeared. It was only after norton failed to fix it that I uninstalled and installed AVG. But I have disabled both add-ons as you said but the firefox usage is till high (185,000kb with 4 tabs open)

 

System Specs:

Windows XP Media Center Edition

Version 2002, Service Pack 2

Pentium® 4 CPU 3.06 GHz

2.63 GB Ram

Master Hard Drive - 80GB

Slave Hard Drive - 300 GB

Video Diver - ATI Radeon (256MB)

Audio Driver- Realtek HD Audio

You have a considerable amount of RAM in your computer. Therefore it might not be entirely caused by AVG. Can you please download the Antivirus I provided the link to in my previous post. After you have downloaded it, please update it and run a Full System Scan and Quarantine any item it detects. Also, it might be a good idea to remove remnants of Norton that might be leftover in the registry.

 

How to Uninstall Norton

 

Note: Please temporarily disable AVG while you are running Avira's full system scan. Not doing so, might result in slowing down of computer or other such conflicts.

 

Post back the results as soon as you can. :)

 

-- Goku

[Seth]

AVG and Firefox are in proper memory range.

 

All you need to do right now is look at the cpu usage percentages and right down any processes that are taking up more than 30% of the cpu. The process name is right under "Image Name". Now please post back with the Image Names of the processes taking up more than that 30%.

[Kilobyte70]

Sorry I was at work and just got back.The highest cpu usage I could find was:

System idle - 75-85

Avscan - 15-30

Avgrsx.exe - 20-30

Firefox.exe - 2-10

 

This was while I had 2 firefox windows with a total of 5 tabs open and had the avira scan running and task manager window open. The AVG antivirus was on and I had several widgets which are usually on the desktop.

[Seth]

You can't run two antivirus programs at the same time. You have to remove one of them. I suggest removing AVG and keeping Avira.

 

The "System idle" percentage, is the percentage of cpu that is "idle" (not in use). In other words, if the system idle process is 90%, that means that only 10% of the cpu is in use....which is good.

 

Do exactly what you did in your last post, but do so when the cpu usage is very high (System Idle percentage will be very low).

[Kilobyte70]

I removed AVG as suggested. Here is the CPU usage when usage graph was high:

avscan.exe - 35-45

firefox.exe - 35-35

System Idle Process - 10-15

System - 10-15

[Seth]

Ok good. Now we're getting somewhere.

 

The avscan.exe is Avira running a scan. When it does so, that cpu usage percentage is normal. Firefox using 35% of the cpu is way out of range. Normally, it would use between 0% and 5%.

 

With that being said, the Firefox percentage may not be accurate as Avira was running a scan when you checked the cpu usage. Do exactly as you did, but do so when Avira isn't scanning.

 

Also as a test, don't use Firefox for now. Use Internet Explorer and see if the problem persists.

[Kilobyte70]

Ok the scan is complted and 13 infections were found and quarentined. Here is the cpu usage while watching video on youtube:

System Idle Usage - 50 -70

firefox.exe - 20-40

 

Rest all 1 or 0

Edited June 11, 2008 by Kilobyte70

[Seth]

Ok we're getting closer to the problem.

 

Firefox is way too high, but that could be either a problem with Firefox itself, or a symptom of the problem.

 

I suspect the latter, so run the system through our clean up procedure:

 

• Malware is software designed to infiltrate or damage a computer system without the owner's informed consent.
  It is a combination of the words malicious and software.
  The expression is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software or program code.
  

• Required Cleanup Steps
  1. Disable the Spybot Search & Destroy TEA TIMER if you use it and if it is enabled
     
  2. Run a Temporary file and cache cleaner (ATF)
     
  3. Run 2 Anti-Malware scanners (Listed Below)
     
  4. Run an Online Anti-Virus / Anti-Malware Scanner (Listed Below)
     
  5. Clear out old System Restore points
     
  6. If continued Malware type activity is present you may be asked to post a TrendMicro™ HijackThis™ Log file, do not do so unless requested.
     

The reason to run multiple scanners is to ensure that no single scanner is missing something.

The time it takes will vary depending on your system and your internet connection speed.

Typically the SUPERAntiSpyware and Malwarebytes scanners will take between 10 to 90 minutes.

The ESET online scan should take between 1 to 3 hours.

In most cases, these scans will suffice to clean and disinfect your computer.

Heavily infected systems or slower PCs can take much longer to scan and clean.

 

For best results print the following instructions and bookmark this Web page

To keep this guide printer-friendly, use your cursor to highlight the contents below.

From your browser select File - Print and in the printer dialog box under "Print range"

click the

Selection

choice to print out these instructions for removal of malware.

http://kixhelp.com/wr/images-freepchelp/printer-selection.gif

__________________________________________________

STEP 1

• Disable Spybot Search & Destroys' TEA TIMER: (if installed)
  1. Run Spybot-S&D in Advanced Mode.
     
     
  2. If it is not already set to do this Go to the Mode menu select "Advanced Mode"
     
     
  3. On the left hand side, Click on Tools
     
     
  4. Then click on the Resident Icon in the List
     
     
  5. Uncheck "Resident TeaTimer" and OK any prompts.
     
     
  6. Restart your computer.
     
     

__________________________________________________

STEP 2

• Follow these instructions carefully.
  
  
• Download ATF-Cleaner from
  Snapfiles.com
  to remove un-needed temporary files from your computer that may contain malware.
  
  
• You can also download it from
  Majorgeeks.com
  
  
• When you run ATF-Cleaner, check the items as shown below for Main.
  
  
• For FireFox, be sure to click on the FireFox tab on top and check the items as shown below for FireFox
  
  
• NOTE:
  If you don't have FireFox or Opera installed then they will be grayed out and can be ignored
  
  
• Then click on "Empty Selected".
  
  

http://kixhelp.com/wr/images-freepchelp/atf-cleaner01.gif

.

http://kixhelp.com/wr/images-freepchelp/atf-cleaner02.gif

__________________________________________________

STEP 3

• Install and run the free version (not the Professional version) of SUPERAntiSpyware from
  SUPERAntiSpyware.com
  
  
  • Accept any prompts to allow SUPERAntiSpyware to install the latest rules and infection definition files.
    
    
  • You do not have to send them your e-mail address, just click next.
    
    
  • You can leave the automated check for updates on.
    
    
  • You can uncheck "Send a diagnostic report to research center" if you don't want to send the information.
    
    
  • DO NOT
    allow SUPERAntiSpyware to protect your Home Page settings.
    
    
  • On the
    Top Left
    select the
    Scan your computer
    button.
    
    
  • Make sure there is a CHECK MARK on all
    Fixed Drives
    .
    
    
  • Click "Perform a Complete Scan". Click "Next" to Repair issues found and reboot the computer when prompted to do so.
    
    

__________________________________________________

STEP 4

• Install and run
  Malwarebytes' Anti-Malware
  from
  Malwarebytes - (direct download)
  
  
  • Accept all defaults for the installer
    
    
  • Allow the program to update the definitions
    
    
  • Click on the
    Quick Scan
    and click Next.
    
    
  • If any items are found allow it to clean them and then Reboot your computer.
    
    

__________________________________________________

STEP 5

• Run an online scan with ESET from
  Free Virus Scan: Use ESET's Online Antivirus Scanner
  
  
  • You
    must
    use Internet Explorer for this online scan. FireFox, Opera, etc will not work for this scan.
    
    
  • If your computer is running Window's Vista, then you
    must first
    start Internet Explorer as an Administrator. To do so, right-click on the
    Internet Explorer
    icon in the Start Menu and select "
    Run as administrator
    " from the popup context menu.
    
    
  • Accept the terms and click "Start".
    
    
  • Once the scanner is ready, check "Remove found threats" AND "Scan unwanted applications".
    
    
  • Click "Start" to begin the scan.
    
    
  • When completed restart your computer
    
    

__________________________________________________

Make sure your internet firewall security is enabled, and then please return to

Extreme Tech Support - Free PC Help

and tell us how the computer seems to be operating.

[Kilobyte70]

Thanks for the reply. I will go through all the steps as directed and post the result. Once thanks for all your help. Going to bed now.lol. So will have to do the scans tomorrow.

[Kilobyte70]

Ok I went through all of the above steps and restarted the computer. The startup speed has improved drastically but the computer still gets frantic when I am using the internet. I checked the cpu usage and the usage is pretty normal when I am off the net but the minute I use heavy flash sites on any browser (safari, firefox and IE), the cpu usage rockets to rediculous levels (85-95%).

[maynardvdm]

Please download the latest version of HijackThis from Trend Micro and click on Download Hijack This Installer and save it to your desktop.

• Doubleclick HJTInstall.exe to install HijackThis.
  
• By default it will install to C:\Program Files\Trend Micro\HijackThis .
  
• Click on Install.
  
• It will create a HijackThis icon on the desktop.
  
• Once installed, it will launch Hijackthis.
  
• Click on the Do a system scan and save a logfile button. It will scan and the log should open in Notepad. Include this log in your next reply.
  

Notes:

Do not use the AnalyseThis button, its findings are dangerous if misinterpreted.

Do not have Hijackthis fix anything yet. Most of what it finds will be harmless, or required for your computer to run like it should.