[mattandme2]

hi
my CPU usage is almost always at 100% for about 3 months now it is making it very annoying to play games and watch vidoes
i have ran my usall virus and anti-malware scans as well as disk clean ups and nothing popped up
i use malwarebytes ANTI-malware Pro, AVG, ashampoo win-optimizer 9

Edited by mattandme2, 24 November 2013 - 09:50 AM.

[Advertisements]

Welcome to GeeksToGo, mattandme2

My name is Machiavelli and I'll try to fix your PC problems. If you are in SafeMode then print my instructions! Removing Malware on a computer can be very complicated. Malware (malicious software) is able to hide and so I may not be able to find it so easily. In order to remove Malware from you Computer, you need to follow my instructions carefully. Don't be worried if you don't know what to do, just ask me! Please stay in contact with me until the problem is fixed.





!NOTE! Please respect my volunteered time and stay with me until I declare your computer clean. If you are going to be delayed for a while, please let me know.

I am currently in training and my posts will need to be reviewed by an expert, so expect a slight delay between posts.

[Machiavelli]

Welcome to GeeksToGo, mattandme2

My name is Machiavelli and I'll try to fix your PC problems. If you are in SafeMode then print my instructions! Removing Malware on a computer can be very complicated. Malware (malicious software) is able to hide and so I may not be able to find it so easily. In order to remove Malware from you Computer, you need to follow my instructions carefully. Don't be worried if you don't know what to do, just ask me! Please stay in contact with me until the problem is fixed.





!NOTE! Please respect my volunteered time and stay with me until I declare your computer clean. If you are going to be delayed for a while, please let me know.

I am currently in training and my posts will need to be reviewed by an expert, so expect a slight delay between posts.

[Machiavelli]

Illegal Software Warning

I noticed that you use illegal sofwate like keygens, cracks or something like that. We don't support illegal machines and because of that we will remove all the illegal Software in the Malware Removal Process. Believe me, I'll find ALL of the illegal software. If you don't like that I remove the illegal software, just tell me! The consequence will be that I won't support you anymore! If you accept this we will remove all the illegal software and I'll guarantee further support.

Illegal entries:

• O1 - Hosts: 127.0.0.1 3dns.adobe.com 3dns-1.adobe.com 3dns-2.adobe.com 3dns-3.adobe.com 3dns-4.adobe.com activate.adobe.com activate-sea.adobe.com activate-sjc0.adobe.com activate.wip.adobe.com
• O1 - Hosts: 127.0.0.1 activate.wip1.adobe.com activate.wip2.adobe.com activate.wip3.adobe.com activate.wip4.adobe.com adobe-dns.adobe.com adobe-dns-1.adobe.com adobe-dns-2.adobe.com adobe-dns-3.adobe.com adobe-dns-4.adobe.com
• O1 - Hosts: 127.0.0.1 adobeereg.com practivate.adobe practivate.adobe.com practivate.adobe.newoa practivate.adobe.ntp practivate.adobe.ipp ereg.adobe.com ereg.wip.adobe.com ereg.wip1.adobe.com
• O1 - Hosts: 127.0.0.1 ereg.wip2.adobe.com ereg.wip3.adobe.com ereg.wip4.adobe.com hl2rcv.adobe.com wip.adobe.com wip1.adobe.com wip2.adobe.com wip3.adobe.com wip4.adobe.com
• O1 - Hosts: 127.0.0.1 www.adobeereg.com wwis-dubc1-vip60.adobe.com www.wip.adobe.com www.wip1.adobe.com
• O1 - Hosts: 127.0.0.1 www.wip2.adobe.com www.wip3.adobe.com www.wip4.adobe.com wwis-dubc1-vip60.adobe.com crl.verisign.net CRL.VERISIGN.NET ood.opsource.net

OTL Fix

• Run OTL.
• Copy (Ctrl+C) and Paste (Ctrl+V) all of the following text into the Custom Scans/Fixes box:
  
  
  

  :Commands
  [CreateRestorePoint]
  
  :OTL
  SRV - File not found [Auto | Stopped] -- C:\Program Files\Yontoo\Y2Desktop.Updater.exe C:\Users\Matt\AppData\Roaming\Yontoo\YontooDesktop.exe -- (Yontoo Desktop Updater)
  IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://start.mysearc...cr=38300765&ir=
  IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://start.mysearc...cr=38300765&ir=
  FF - prefs.js..browser.search.defaultenginename: "Mysearchdial"
  FF - prefs.js..browser.search.defaultthis.engineName: "WhiteSmoke New Customized Web Search"
  FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3289847&CUI=UN14575276994848118&UM=2&SearchSource=3&q={searchTerms}&sspv=TB_TS3"
  FF - prefs.js..browser.search.selectedEngine: "Mysearchdial"
  [2013/11/14 14:47:42 | 000,000,000 | ---D | M] (WhiteSmoke New) -- C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\8gghl8tn.default\extensions\{739df940-c5ee-4bab-9d7e-270894ae687a}
  [2013/08/04 02:47:09 | 000,000,000 | ---D | M] ("MySearchDial" />) -- C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\8gghl8tn.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}
  [2013/06/24 01:01:46 | 000,000,000 | ---D | M] (cOentinuaetosaeve) -- C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\8gghl8tn.default\extensions\[email protected]
  [2013/06/30 08:44:04 | 000,239,491 | ---- | M] () (No name found) -- C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\8gghl8tn.default\extensions\[email protected]
  O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
  O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
  O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
  O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
  O15 - HKCU\..Trusted Domains: vizzed.com ([www] * in Trusted sites)
  [2013/07/31 15:28:28 | 000,423,709 | ---- | C] () -- C:\Users\Matt\AppData\Local\mysearchdial_speedial_v9.0.2.crx
  @Alternate Data Stream - 192 bytes -> C:\Windows:nlsPreferences
  
  :Files
  C:\Program Files\Yontoo
  C:\Users\Matt\AppData\Roaming\Yontoo
  
  :Commands
  [ResetHosts]
  [EMPTYTEMP]
  

• Click the Run Fix button.
• The computer will reboot - after that reboot a textdocument will open - please post that into your next reply

AdwCleaner

Please download AdwCleaner (by Xplode) from the link below and save it to your Desktop:

Download Mirror #1

• Right-click on AdwCleaner.exe and select Run as administrator.
• Click Scan and let the scan run.
• When it finishes, click Clean, following the on screen prompts
• After your computer reboots, a log will open. Please Copy (Ctrl+C) and Paste (Ctrl+V) this into your next post.

Note: The log can also be found in here: C:\AdwCleaner\

JRT Run

Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

CKScanner Run

Download CKScanner from here

Important : Save it to your desktop.

• Doubleclick CKScanner.exe and click Search For Files.
• After a very short time, when the cursor hourglass disappears, click Save List To File.
• A message box will verify that the file is saved.
• Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.

OTL Scan

• Please copy the text in the Quote box below, (Do Not copy the word Quote), and paste it in the box in OTL. To do that:
  
  • Highlight everything inside the quote box, (except the word Quote), right click the mouse and click Copy.
    
    

    netsvcs
    BASESERVICES
    %SYSTEMDRIVE%\*.exe
    /md5start
    services.*
    explorer.exe
    winlogon.exe
    Userinit.exe
    svchost.exe
    qmgr.dll
    winsock.*
    /md5stop
    dir "%systemdrive%\*" /S /A:L /C
    CREATERESTOREPOINT
    

• Open on the desktop. To do that:
  
  • XP users: Double click on the OTL icon.
  • Vista / 7 Users: Right click on the icon and click Run as Administrator)
• Make sure all other windows are closed.
  
  • You will see a console like the one below:
    
    
    
    
  • Click the box beside Scan All Users at the top of the console
  • IF you have a 64bit Windows, click the box beside Include 64bit Scans at the top of the console.
  • Make sure the Output box at the top is set to Standard Output.
  • Check the boxes beside LOP Checkand Purity Check.
  • Under Extra Registry please check Use Safe List.
  • Place the mouse pointer inside the box, right click and click Paste. This will put the above script inside OTL
  • Click the button. Do not change any settings unless otherwise told to do so.
  • Let the scan run uninterrupted.
  • When the scan completes, it will open OTL.Txt on the desktop. The Extras.txt file will be minimized on the taskbar. These files is also saved in the same location as OTL (it should be on your desktop).
  • Please copy the contents of these files and paste it into your reply. To do that:
    
  • On the OTL.txt file Menu Bar click Edit then click Select All. This will highlight the contents of the file. Then click Copy.
  • Right click inside the forum post window then click Paste. This will paste the contents of the OTL.txt file in the in the post window.

[/list]Please also post the Extras.txt file.

[mattandme2]

sorry guys my mum has just brought me a new pc so this problem no longer exists
thanks anyway

[Machiavelli]

OK

[Essexboy]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.