CPU usage 100%???

scotty

When you say 128 and 64, does this refer to main memory being 128MB and graphics memory being 64MB? Do you have a separate graphics card or do you use onboard graphics?

In either case, if your main memory is only 128MB you will have problems running XP.

shellyd_3

Scotty, It is 128mb, sorry I don't know about the graphics card,
I used to get a message saying that not enough disk space of xp to opperate so I deleted all the kids games, so at least we can use the internet.

Can anyone advise a good plan of security for me to follow, I just put on what is advised on this board not knowing if I need them or not.

Just looked at cpu and edwido is top and next is CSRSS.exe this is 25 sorry I don't know what this stands for. the others are explorer. exe three seperate entries of 2-5cpu. and a few others using 1-3 cpu. at the bottom of the page
it say cpu usage 100% and commit charge 1711724k/315408k

will I still be protected if I detete ewido?

Michelle

PS, I should say the all the pc is used for now is internet and my sons Itunes, and football manager. although we do have some photos and other information stored on it.

pchelpman

CSRSS usually looks after Windows graphics & related commands. It's normally OK but maybe not in your case. The process is also known to have connections with worms and Trojans. On my own machine it's running at 0%.

Do a system-wide search of your PC for "csrss" [without the quotes] and make a note of any/all files with that name and their full address.

What we would like to know is how many of them you have and, most importantly, WHERE it is/they are runnning from.

The correct address for this process is C:\windows\System32\csrss.exe. If you find it anywhere else there could be trouble.

Let us know what you find out.

shellyd_3

Pchelpman, Thank-you, glad to do this, please could you tell me how to do a system-wide search. or do I just have to look ,if so could to point me in the right direction.

Thank-you

Michelle

windym_2

I think he means

Start, Search, All files and folders, then in top box put the file you are searching for which is csrss then make sure the last box says it is searching (look in) the C drive.
Select 'more advance options' if you see that, and tick 'search system folders' and 'hidden folders' and 'subfolders'. Then hit the search key. You will then have to take a note of the results (in the right hand side) and copy and paste them as a reply here. Hope that helps.

shellyd_3

Results (sorry it won't copy and paste)

3 Found

csrss in folder c:/windows/system32 4kb application

csrss.exe-12B63473.pf in folder c;/windows/prefetch 2kb pf file

csrss in folder c:windows/softwaredistribution/download/6ca7b3a8 6kb application


thank-you

Michelle

Chippy_Minton

pchelpman wrote:

Do a system-wide search of your PC for "csrss" [without the quotes] and make a note of any/all files with that name and their full address.

What we would like to know is how many of them you have and, most importantly, WHERE it is/they are runnning from.

The correct address for this process is C:\windows\System32\csrss.exe. If you find it anywhere else there could be trouble.

Or download Process Explorer from Sysinternals and use it instead of Task Manager. It shows the path name of all running processes so there's no need to search the file.

Juni_3

I've seen very high csrss.exe usage on Windows server that have a lots of small packets going over several different TCP connections.

Could possibly be caused by worms on your PC trying to spread to other computers as these do try several ip's over several threads.

You really must get up to date with SP2 asap. Personally I'd trash it and rebuild it from scratch.

shellyd_3

all my virus scans are ok, what else can i try to find the worms or is there nothing else I can do. I will try the sp2 again but the pc is that slow it take an age to get from page to page.
I would love to start again with a new PC, I am waiting to see if dell have a good offer after xmas. ( no money now).


Thank-you to eveyone who replied, and if you have any other Ideas please pass them on.

Thank-you

Michelle

PS, just one last thing I would like to ask if I did get a new PC am I right thinking I shouldn't xfer my photos(very special of my baby who died) to the new PC incase it passes the infection on. I really don't want to lose them.

pchelpman

OK, shellyd. You ask what else you can do. I think it's time to have a look at HijackThis.

Download the program here....

http://www.spywareinfo.com/~merijn/files/HijackThis.exe

(You can either download it directly to your PC OR download it to a floppy disk on a different PC then put the floppy into your own PC).

Unzip/open the HJT file and you will be presented with a menu of options.

Choose the first option "Do a system scan and save a logfile". Two things will happen.....HJT will scan your PC then, after a few seconds, it will give you a logfile report in Notepad.

Copy & paste that Notepad log report to this thread. I'll have a look at it and make more suggestions.