[lpalermo]

Hello,

Any help would be greatly appreciated. I have had an issue with my Windows 2000 Pro environment for over 2 weeks now and I am losing my mind. Here is some background information on the environment I am working on. The OS is Windows 2000 Pro running on VMWare environment. All Windows Updates have been applied. I have run Spyware Sweeper, CA Antitrust and HijackThis. I have post my log below, though I do not see anything in the log. My CPU is constantly at 100%, taskmgr.exe and Explorer.exe taking up any available usage.

Thank you so much for your help!!

-Lisa

Logfile of HijackThis v1.99.1
Scan saved at 7:20:50 AM, on 06/06/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\McKesson\HRPServices\bin\tomcat.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.exe
C:\Program Files\CA\eTrust Antivirus\InoTask.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\Program Files\VMware\VMware Tools\VMwareService.exe
C:\Program Files\Crystal Decisions\Enterprise 10\win32_x86\WebCompServer.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Crystal Decisions\Enterprise 10\win32_x86\cacheserver.exe
C:\Program Files\Crystal Decisions\Enterprise 10\win32_x86\EventServer.exe
C:\Program Files\Crystal Decisions\Enterprise 10\win32_x86\inputfileserver.exe
C:\Program Files\Crystal Decisions\Enterprise 10\win32_x86\CrystalMS.exe
C:\Program Files\Crystal Decisions\Enterprise 10\win32_x86\outputfileserver.exe
C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb07.exe
C:\Program Files\VMware\VMware Tools\VMwareTray.exe
C:\Program Files\VMware\VMware Tools\VMwareUser.exe
C:\Program Files\Crystal Decisions\Enterprise 10\win32_x86\ProgramServer.exe
C:\PROGRA~1\CA\ETRUST~1\realmon.exe
C:\Program Files\Common Files\Crystal Decisions\2.5\bin\crystalras.exe
C:\WINNT\system32\inetsrv\inetinfo.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\Crystal Decisions\Enterprise 10\win32_x86\JobServer.exe
C:\PROGRA~1\MICROS~3\MSSQL\binn\sqlagent.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\msdtc.exe
G:\Host Folders\HijackThis.exe
C:\WINNT\system32\taskmgr.exe
C:\WINNT\explorer.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [VMware Tools] C:\Program Files\VMware\VMware Tools\VMwareTray.exe
O4 - HKLM\..\Run: [VMware User Process] C:\Program Files\VMware\VMware Tools\VMwareUser.exe
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\msjava.dll
O16 - DPF: WebWorks Help 3.0 - http://localhost:710...elp/wwhelp3.cab
O23 - Service: beasvc HSMprod_hrpsales - BEA Systems, Inc. - C:\Mckesson\HSMProd\server\bin\beasvc.exe
O23 - Service: Crystal Cache Server (CacheServer) - Crystal Decisions - C:\Program Files\Crystal Decisions\Enterprise 10\win32_x86\cacheserver.exe
O23 - Service: Crystal Event Server (CrystalEventServer) - Crystal Decisions - C:\Program Files\Crystal Decisions\Enterprise 10\win32_x86\EventServer.exe
O23 - Service: Crystal Input File Repository Server (CrystalInputFileServer) - Crystal Decisions - C:\Program Files\Crystal Decisions\Enterprise 10\win32_x86\inputfileserver.exe
O23 - Service: Crystal Management Server (CrystalMS) - Crystal Decisions - C:\Program Files\Crystal Decisions\Enterprise 10\win32_x86\CrystalMS.exe
O23 - Service: Crystal Output File Repository Server (CrystalOutputFileServer) - Crystal Decisions - C:\Program Files\Crystal Decisions\Enterprise 10\win32_x86\outputfileserver.exe
O23 - Service: Crystal Program Job Server (CrystalProgramServer) - Crystal Decisions - C:\Program Files\Crystal Decisions\Enterprise 10\win32_x86\ProgramServer.exe
O23 - Service: Crystal Report Application Server (CrystalReportApplicationServer) - Crystal Decisions - C:\Program Files\Common Files\Crystal Decisions\2.5\bin\crystalras.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: HRP Services - Alexandria Software Consulting - C:\McKesson\HRPServices\bin\tomcat.exe
O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
O23 - Service: Crystal Report Job Server (JobServer_Report) - Crystal Decisions - C:\Program Files\Crystal Decisions\Enterprise 10\win32_x86\JobServer.exe
O23 - Service: Crystal Page Server (pageserver) - Crystal Decisions - C:\Program Files\Crystal Decisions\Enterprise 10\win32_x86\pageserver.exe
O23 - Service: Engine - phs (phs) - Unknown owner - C:\ENGINES\phs\engine.exe
O23 - Service: VMware Tools Service (VMTools) - VMware, Inc. - C:\Program Files\VMware\VMware Tools\VMwareService.exe
O23 - Service: Crystal Web Component Server (WebCompServer) - Crystal Decisions - C:\Program Files\Crystal Decisions\Enterprise 10\win32_x86\WebCompServer.exe