www.ultimatehandyman.co.uk

John,
Once you are pretty sure that your computer is clean:

Remove all SR Points thus removing any contaminated ones:
Turn OFF System Restore then turn it back ON and then set a new restore point.

Follow these instructions
Then set a new restore point by following these instructions

That way you cannot accidentally do a system restore to a point when you were infected.

dave

Dave,

AVG picked the virus up, but I had to use the Kaspersky tool to remove it.

In processes the cpu usage is 0-2 but in performance it peaks between 0-100%.

Done that and got the Tee shirt.

CPU performance graft is still peaking high with no use.

Haven't been able to freeze it since I removed the virus.

There seems to be a load of stuff running in the background.

58 Processes at the moment.

In the Processes pane it only lists 16 items but at the bottom it shows "50 processes and CPU is between 0% and 16%."

Looking at the Performance graphs it does jump occasionally to 50+% but drops straight back down.
Don't worry about it.
Are the fans screaming or just running quietly. Mine are quiet even when the process jumps above 50%.

dave

I have 20 in the processes pane.

2 system and 18 user name.

If I swing the mouse about it shoots up to 50% +

Before when I opened explorer, whatever, and even when it was idle the performance would graft would go to 100% and stay there, after a while it would freeze, couldn't even shut it down.

Seems to be working quite well apart from the high peaks, but I haven't been able to freeze it since, I removed the Trojan.

Sound to be on a winner then.
just keep an eye on it as there may be a process that is running that may not be needed all the time.

dave

Sure there's lots not needed in the start menu.

What is Safari doing on here.

I'm out for a few hours.

When you get back have a look at the list in Ccleaner -> Tools -> Startup and you can disable any that you know that you do not need to run at Start up.

Or better still, make a note of the programs that you do not want running from the list in Ccleaner. As Ccleaner only uses the MSCONFIG Startup list which should not really be used to prevent programs starting, go to Start -> type 'Sevices' in the search box and click on the 'Services that has two gear wheels as its icon.

In the Services pane, double click on the items in your list one at a time and read what it does.

If the 'Startup Type' is 'Automatic' then the program will be running, it will confirm that in the Service status = running
If you do not need it then click Stop and when it has stopped change the Startup type to manual which means that it will only run if and when you click it's shortcut in the Start - All progs list or the shortcut on the desktop.

In the description of the item it may say "If this item is disabled then any program that depends upon it may also fail to run".
If selecting an item means that something will not run in the future, you can always go back to Services and enable it again without causing any damage.

dave

Thanks Dave I have a look later.

Any you are not sure about, you can check on Bleeping Computers Startup List or Google them.

dave

Dave have you disabled DWM.exe on your computer (desktop windows manager)

Also at the bottom I have a message Internet Protected Mode Off, I assume thats a built in job associated with IE.

Joun,
Regarding DWM.exe, on my PC and Laptop it is left as Automatic so runs at bootup.

The Internet Protected Mode is regarding a setting in Internet Explorer. I don't use IE. So not sure if it is on or off but UAC doesn't warn me so it must be on.

This will tell you how to set the Int Protect Mode:
http://www.sevenforums.com/tutorials/63 ... n-off.html

dave

I'll leave it off I think.

Thanks again for your help.

Dave,

Taken the computer back to me mate.

Notice the F keys don't all work is there some buttons to push.

At first the wireless wouldn't work but has come back on now, although the light is still out.

Don't think the sound buttons are working either.

What make of keyboard is it and does he still have the driver disk? If so run the disk to reinstall the drivers.
You should be able to download the drivers from the manufacturer's web site.

Is the FN key held down when trying the function keys? On some keyboards this key will lock the function keys ON until you reboot then they will revert to being locked OFF.

To see if the F keys are working in non-function mode:
Try pressing F3, does it open a 'FIND Bar' at the bottom of the screen?
You can close this bar with the 'X' on it.

Tr pressing F11, does the browser go to Full Screen?
You can revert back by pressing the key again.

dave