CPU Usage High at idle...Please Help..

mmkarimi said:

Hi, again
glad to hear that your cpu have got cool off :)
i remember a time that i forced to install windows 3-4 times because the virus was permeated into all my hard drives partitions and i was tempting to remove it by installing a new windows. each time i was entering the other partions, the story would start again.
this would happen for you too, you should check all of your HDD partitions, all flash drives, any mass storage with a powerful antivirus, especially with the rescue disk and outside your os, otherwise you would be infected again.

about an additional free antivirus you may see this post from here:
free antivirus protection

I personally have nod32 smart security and it works very good. it has a powerful, light antivirus and firewall.

Thanks again for the invaluable info. I am trying to see which antivirus can get rid of these viruses resolutely. I will try a 100 if i have to but im really hoping kaspersky does it outside the OS, as Layback Bear has suggested i will post the results of each scan and state their results.

I have replicated my data to an alternate laptop to allow me to run 2 anti virus programs simultaneously (as i've learnt and heard they interrupt each others processes at times if run on the same system). I will post results shortly.

Please feel free to recommend any additional anti trojan/virus programs.

Thanks!

Layback Bear said:

Malwarebytes Anti Malware does what it's name indicates. Removes malware not virus. The reason more than one program was suggested to scan with by me is no one program finds everything.
Note: Anything that was backed up wile your computer was infected is also infected and should be scanned and infections removed.
Could you please list the programs you scanned with and the results of each?

True, my apologies.

Yes all my backed up date is infected, as per your brilliant suggestion i will begin scanning with several programs and post results progressively. Thanks so much.

I just ran a scan with Microsoft Security Essentials, it first detected several viruses associated with or variants of Win32Sality.AT, however the latest scan just detected ONE Trojan:

TrojanDropper:Win32/FakeFlexnet.A
Alert Level: Severe
Status: Error Encountered

However, It did say that "Your actions were applied successfully (Quarantined)."

I am now rerunning the scan one more time should take a few hours.

Please feel free to comment, thanks.

Just completed another scan and the damn virus still lives:

TrojanDropper:Win32/FakeFlexnet.A
Alert Level: Severe
Status: Error Encountered

Could you guys recommend an antivirus that deals with this one? Kaspersky is one, im waiting on its results but besides that as a backup?

Im on to MS Safety Scanner now.

Thanks so much!

Just finished scan with MS Safety Scanner, and it said that it "partially" removed TrojanDropper:Win32/FakeFlexnet.A, which obviously means its still there.

Moving onto Emsissoft which claims to be able to remove it, will post results shortly.

OK Kaspersky is still running, so will know by tomorrow.

In the meantime, Emsissoft says 18 were detected, a few of these were located in normal exe programs like MS Office.exe and such so im not sure if its an authentic threat. I scanned those same locations with MS Security Essentials, and it said nothing detected.

I am now moving onto MS Defender offline as suggested by Layback Bear and am eager to see what Kaspersky does.

Here is what Emsissoft detected, also i have deleted all file locations as suggested by Emsissoft and am re running the scan to see if it still detects them.

Win.32.Sality.3 (B) - High Risk
Gen.Trojan.Heur.hmW@vPINOQnan (8) - High Risk
Gen.Trojan.Heur.hmW@vbJyz4gan (8) - High Risk
Gen.Trojan.Heur.hmW@vTif5mkan (8) - High Risk
Trojan.Generic.8030859 (B) - High Risk
Gen:Variant.Strictor.17935 (B) - High Risk
Gen:Variant.Kazy.29138 (B) - High Risk
Gen.Trojan.Heur.VP2.dm0@aylimgpi (8) - High Risk
Trojan.Generic.8503813 (B) - High Risk
Gen:Trojan.Heur.PT.emW@b57CcCSk (B) - High Risk
Gen:Variant.Graftor.25063 (B) - High Risk
Gen:Variant.Kazy.68733 (B) - High Risk
Gen:Trojan.Heur.GM.0008050880 (B) - High Risk
Gen:Trojan.Heur.TP.em0@bukSbmji (B) - High Risk

Thank you gentlemen.

Layback Bear said:

Did you use the recommendations of scans in my post #36?

Not yet, but im heading to what you've suggested at this very moment. Thanks!

I know both you gentlemen (Layback Bear and mmkarimi) recommended ESET Nod32 antivirus (64Bit Version), so please review the results:

Probably a variant of Win32/InstallIQ potentially unwanted application
Win32/Agent.QTP trojan
Win32/No4Adware potentially unwanted application
Win32/No4Adware potentially unwanted application
Win32/RegistryBooster potentially unwanted application
a variant of Win32/InstallCore.D potentially unwanted application
Probably a variant of Win32/InstallIQ potentially unwanted application
Probably a variant of Win32/InstallIQ potentially unwanted application
Probably a variant of Win32/MediaGet potentially unwanted application

Please feel free to shed some light on what you may think, i have deleted all of the aforementioned infections and am re-running the scan to see if it re-detects any more.

Looking forward to hearing from you'll, thanks!

it seems no antivirus could remove those viruses.
if i were you, i wouldn't install all those antivirus and then uninstall them. they actually remain in your registry and other part of your computer. after some time you may think your computer gotten slow down and you need to re install your windows.

i haven't tested the nod online system check but i know nod has two different check, one just check and one clean your computer.
try to install nod as a trial, but after cleaning your computer and storage devices with rescue disk.