I can however post a Hijackthis log if you need
Current problem:Compaq with 2Ghz processor on win XP has 100% cpu consumption by svchost.exe
no security programs are installed.
by running msconfig in the startup section I can see 2 known malware:cpu av_md.exe and siszyd32.exe
of course I am unable to remove them by simply unchecking them from the list.
I press f8 and go to safe mode w networking
I tried to install superantispyware in safe mode
In safe mode I can't install superantispyware.It says that "The system administrator has set policies to prevent this installation"
I tried "Run as..." but it says "A device attached to the system is not functioning"
I did some googling on how to install in safe mode and in command prompt I tried:
REG ADD HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer/VE/TREG_SZ/F/D %Service%
it says "too many command-line parameters"
should I replace %service% with something else?I don't get it
What do i do?
History:Compaq on XP,brought to me by a friend due to slowdown reasons.When no programs were running,CPU was normal,at 0-2 %.
I have already done a registry cleaning(10000 items deleted),defrag(took 24 hours),chkdsk with surface scan(fixed a problem or two),and scan with spyware doctor(scan took 12 hours),windows live one care,trend micro housecall and bit defender.No threats found,apart from 2 which were cleaned with the first scan.I also uninstalled an hp data protection utility in case it was causing a conflict.I have also uninstalled every antispyware/antivirus program.
After all these actions the pc's speed was largely enhanced to a point were I thought I had fixed it.The only weird thing was that when internet explorer was running,for the first minute CPU consumption was at 40% while simultaneously System Idle process was at 90% (weird?)
Until today,when a new problem presented.When I open the pc,svchost.exe is stuck at 100% cpu
I checked again the msconfig startup programs and i saw the 2 viruses.
I don't have a clue why all these antipsyware programs didn't see them when I scanned.
Help us help you.
Please read this article and follow the protocol.
Then submit a fresh HijackThis log. One of our helpers will take care of you. It's the only way we can give you sound advice.
Edited by nasdaq, 09 December 2009 - 11:42 AM.
HijackThis log requested.