CPU usage 100%, Pop-ups, & poss Virus...PLEASE HELP!!

meep_2

Please select csrdeu32.exe from the list tick the box and remove it:

http://www.liutilities.com/products/wintaskspro/processlibrary/csrdeu32/

Please select mousehs.exe from the list tick the box and remove it:

http://www.superadblocker.com/definition/mousehs/

You also have a problem, it appears you are running Norton and AVG on the same computer, only ever run one antivirus, multiple spyware programs are allowed.

Once you have removed these (look at the links for help) please repost another log.

Meep

pchelpman

I'm a bit late to this thread but I have to agree with meep...in particular that csrdeu32.exe file is dangerous. You are lucky you haven't been able to get to your online banking etc. Your passwords etc. may all now be stolen.

Change all your passwords, logins etc. on any online financial sites you deal with and DO IT NOW.

You should also check all your account balances etc. to ensure you still have all your money safely.

Run a full system-wide search for this file: csrdeu32.exe

Note any and all locations where it is found. Go to every one of those locations and manually delete every instance of that file from your system.

I see your XP is out of date. This is one of your problems. You must update to Service Pack 2. Without that any fixes we might recommend would be useless. We are all wasting our time. As soon as you fix it you will get infected again.

In addition to using HJT to fix these entries (as meep recommended) there are other things you must do. HJT won't necessarily do the whole job just by ticking entries.

It is vital you update to SP2 and repost with another HJT log as meep asks. There will be other things to do to get you fully clean.

meep_2

for some reason I always forget to look at the version/sp number

intel

How to remove csrdeu32.exe

http://www.bleepingcomputer.com/startups/csrdeu32.exe-13656.html

pchelpman

meep wrote:

for some reason I always forget to look at the version/sp number

As do we all from time to time. I was just lucky in this instance.

highguyuk

Just a really basic tip that I cant find anyone else has suggested.

Go to your System Tools from the Start>Programs>Accessories>System Tools. Just click Disk Cleanup and find any programs on there you dont use/need to free up general memory. Whilst your there you might as well let it get rid of temp files etc.

Also, run the disk defragmenter - some people may have better defrags but Windows built in one will do a fair job.

In future, you need to watch what your downloading, and what websites your going on. Im not majorly up on my computers, but there is alot of processes that would slow down most computers! Download the updates from Windows, someone may be able to show you how to set it up to do this automatically so you dont have to worry about getting them each time (I cant remember how to do this :-S). Also, now you have all these programs installed, keep using them. Every week/fortnight/month sit down and have a clean of your computer - your computer will appreciate you for it :-)

jordan_matthews

And I thought I was sorted! You do have me a little worried though!

I struggled to remove the csrdeu32.exe file using the links meep suggested and dont know how to do a system wide search to manually delete them.

Also, how do I update to Servis Pack 2??

Sorry to be such a dim-wit but I think I need my hand holding to some extent.

Thanks again for the time again guys

meep_2

No worries jordon:

http://www.microsoft.com/windowsxp/sp2/default.mspx

basically it uses your windows update.

To do a system wide search all you need to do is go start> search > files and folders, then type in the name, and in the options look for something like search hidden files etc too.

Don't worry well all get it sorted

jordan_matthews

RIght,

SP2 updates done via the link meep (it took 5 mins on a 1MB connection)

The search found 4 results. 2 linking to websites above and 2 txt files (ZALog2005.12.07 & ZALog2005.12.08)

Do I just right click and delete them? Is that it??

Thanks again - should I still be worried?!?!

meep_2

Ok, firstly do ctrl + alt + delete to bring up the processes, secondly find the file and do end process.

Optional: you may also want to disable system restore.

Delete the entries, ensure that you have only one antivirus program installed, and it is upto date, and scan.

Once done please restart your computer and repost another log (you may want to enable system restore)

once the infection if removed and the log is clean then your ok, I would be slightly worried, but not majorly panic attack worried