TurboTax put a similar program on my PC back in 2002 and it really slowed things down. Supposedly it was to keep me from copying the program but it ran all the time and was a resource hog.
Start, Run, services.msc, OK to bring up the services window and look for
C-DillaCdaC11BA service. Doubleclick then set the startup type to Disabled, Apply then Stop the service. See if things run faster. If not or you find some other program no longer works you can change the Startup Type back to Automatic and Start the service again.
Rightclick on the clock and select Task Manager then Processes then click twice on CPU. The top process should now be System Idle with over 95% of the CPU Usage. IF not what are the top three and what % do they have?
IF System Idle was the top process then Start, right click on My Computer and select Manage then Device Manager then find IDE ATA/ATAPI Controllers and hit the + in front of it. Find the first Primary Channel and double click on it then Advanced Settings. IF the Current Transfer Mode for device 0 says PIO then go back to the Primary Channel and right click on it and Uninstall then reboot.
You can also try RootKitRevealer from SysInternals and see if it finds anything:
Made the changes you suggested and System idle was top with over 95% CPU. Current transfer Device 0 was not PIO though - it was Ultra DMA Mode 5. Any idea why I have all the following Hosts listed here ;-
You can remove them if you want. Appears to have been an attempt to hijack connections to a bunch of file sharing programs. Didn't see any running so didn't worry about them.
I doubt it will help or hurt anything to remove them.
Did you run the rootkitrevealer? Did it find anything?
RKinner
2 Intern
•
5.9K Posts
0
November 8th, 2005 00:00
The only think I see that looks at all suspicious is:
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
Rightclick on the clock and select Task Manager then Processes then click twice on CPU. The top process should now be System Idle with over 95% of the CPU Usage. IF not what are the top three and what % do they have?
Motty123
6 Posts
0
November 10th, 2005 19:00
O1 - Hosts: 66.38.215.115 www.kazza.com
O1 - Hosts: 66.38.215.115 kaza.com
O1 - Hosts: 66.38.215.115 www.kaza.com
O1 - Hosts: 66.38.215.115 kaaza.com
O1 - Hosts: 66.38.215.115 www.kaaza.com
O1 - Hosts: 66.38.215.115 kahza.com
O1 - Hosts: 66.38.215.115 www.kahza.com
O1 - Hosts: 66.38.215.115 edonkey.com
O1 - Hosts: 66.38.215.115 www.edonkey.com
O1 - Hosts: 66.38.215.115 emule.com
O1 - Hosts: 66.38.215.115 www.emule.com
O1 - Hosts: 66.38.215.115 suprnova.com
O1 - Hosts: 66.38.215.115 www.suprnova.com
O1 - Hosts: 64.124.166.37 klite.com
O1 - Hosts: 64.124.166.37 www.klite.com
O1 - Hosts: 64.124.166.37 k-lite.com
O1 - Hosts: 64.124.166.37 kazaalite.com
O1 - Hosts: 64.124.166.37 www.kazzalite.com
O1 - Hosts: 64.124.166.37 kazalite.com
O1 - Hosts: 64.124.166.37 www.kazalite.com
O1 - Hosts: 64.124.166.37 kaazalite.com
Motty123
6 Posts
0
November 10th, 2005 19:00
Ron,
Many thanks for a lenghty reply; I'm about to follow your advice - will let you know progress.
Motty
RKinner
2 Intern
•
5.9K Posts
0
November 10th, 2005 21:00
Motty123
6 Posts
0
November 11th, 2005 07:00
Ran rootkit revealer but nothing of any significance there. How would I go about removing them Ron?
Thanks again for responding
RKinner
2 Intern
•
5.9K Posts
0
November 11th, 2005 13:00
Run Hijackthis and check the O1 lines then press Fix Checked.
Ron