winlogon.exe 100% CPU usage at start up

Question

Hi, I have a Inspiron 8200 and running windows xp.  At start up winlogon.exe runs and takes up 100% of CPU usage. It cause me not to be able to use my computer for at lease 45 minutes.  I downloaded hijackthis and don't know what to do next. If someone could please help that would be great.  Here is the hijackthis log: Logfile of HijackThis v1.98.0Scan saved at 10:34:12 PM, on 7/19/2004Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\Program Files\Norton SystemWorks\Norton AntiVirus
avapsvc.exeC:\Program Files\Norton AntiVirus\NISUM.EXEC:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXEC:\WINDOWS\System32
vsvc32.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Norton AntiVirus\SymProxySvc.exeC:\Program Files\Norton AntiVirus\NISSERV.EXEC:\WINDOWS\Explorer.EXEC:\Program Files\AIM\aim.exeC:\Program Files\AWS\WeatherBug\Weather.exeC:\WINDOWS\System32\ctfmon.exeC:\Program Files\Norton SystemWorks\Norton CleanSweep\csinsmnt.exeC:\WINDOWS\system32
tvdm.exeC:\Program Files\Dell\Support\bin\Support.exeC:\Program Files\Common Files\Dell\EUSW\DSLog.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Documents and Settings\Matthew Hunt\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://education.dellnet.com/R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://webmail.umassd.edu/R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://education.dellnet.com/R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1R3 - Default URLSearchHook is missingO1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.comO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dllO4 - HKLM\..\Run: [QuickTime Task] 'C:\Program Files\QuickTime\qttask.exe' -atboottimeO4 - HKLM\..\Run: [DeadAIM] rundll32.exe 'C:\Program Files\AIM\DeadAIM.ocm',ExportedCheckODLsO4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /autoO4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exeO4 - Startup: Norton Disk Doctor.lnk = C:\Program Files\Norton SystemWorks\Norton Utilities\NDD32.EXEO4 - Global Startup: CleanSweep Smart Sweep-Internet Sweep.lnk = C:\Program Files\Norton SystemWorks\Norton CleanSweep\csinsmnt.exeO4 - Global Startup: Norton System Doctor.lnk = C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXEO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exeO9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\IEExtension.dllO9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\IEExtension.dllO9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXEO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXEO9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (HKCU)O16 - DPF: {07637823-C894-4A52-B3F9-5D777FD8E36A} - http://www.mydailyhoroscope.net/mdh/install.cabO16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.webshots.com/html/WSPhotoUploader.CABO16 - DPF: {DDFFA75A-E81D-4454-89FC-B9FD0631E726} - http://www.bundleware.com/activeX/BM2/BM2.cabO16 - DPF: {FDDCE9FF-1FC6-413C-80B1-37B101FDA1D4} - http://download.buddylinks.net/ShellInstaller.cabO20 - AppInit_DLLs: apitrap.dll -Matt

ejn63 · Answer

Is Windows updated on critical patches? Antivirus software current and running? Firewall software current and running? Anything in the event logs?

TechMatt · Answer

Well norton looks like its running but might want to make sure the definition file is up to date.

Safe mode the same?

Did you add any new software recently or download anything? And get all the windows security patches like it was mentioned.

REBELTHROWER · Answer

I have Norton running and a firewall running.  I have the most current definitions and all the winndows patches.  In safe mode start up is normal and winlogon.exe doesn't use 100% of the CPU.  I havent downloaded anything recently.

patzke · Answer

Do you have ad-aware or other spyware tool available to check and see if your system has been hijacked.

REBELTHROWER · Answer

not currently, any suggestions?

TechMatt · Answer

ad-aware is free you can find it on download.com or other similar sites.  Its a great little freebie adware spyware killer

REBELTHROWER · Answer

ad-aware didnt find anything

TechMatt · Answer

Hrmm I dunno man start killin other non critical apps until the cpu usage drops.

Locked Topics – Laptops General

Was this post helpful?