HELP! High CPU Usage causes very jittery sound. (Laptop)

[evilfantasy]

• Click START then RUN
  
• Now type Combofix /u in the runbox
  
• Make sure there's a space between Combofix and /u
• Then hit Enter.

• The above procedure will:
• Delete the following:
• ComboFix and its associated files and folders.
• Reset the clock settings.
• Hide file extensions, if required.
• Hide System/Hidden files, if required.
• Set a new, clean Restore Point.

[dingbat-dom]

Is that it? Should it be fixed now? And was it bad before?

[evilfantasy]

Is that it?

I don't know, how is the computer doing?

And was it bad before?

Look at the ComboFix log and what was removed...

[dingbat-dom]

Grrr. Still makes the echoey, jittery sound sometimes.

[evilfantasy]

Run the Kaspersky Online Scanner

In Microsoft Windows Vista, you must open the Web browser using the Run as Administrator command. From the Desktop right click the icon to open the browser and choose Run as Administrator.

• Click on SCAN NOW
  
• Click Accept.
  
• The program will then begin downloading the latest definition files.
• Once the files have been downloaded locate the Scan Settings and have it scan My Computer.
  
• The scan will take a while, so be patient and let it finish.

When the scan is done, in the Scan is complete window, any infection is displayed.
There is no option to clean/disinfect, however, we need to analyze the information on the report.

To obtain the report:
Click on: Save Report As

• Next, in the Save as prompt, Save in area, select: Desktop.
  
• In the File name area use KScan, or something similar.
  
• In Save as type: click the drop arrow and select: Text file [*.txt]
  
• Then, click: Save

Copy and paste the Kaspersky Online Scanner Report in your next reply.

Note for Internet Explorer 7 users: If at any time you have trouble viewing the accept button of the license, click on the Zoom tool located at the bottom right of the IE window and set the zoom to 75%. Once the license is accepted, reset to 100%.

[dingbat-dom]

Any idea on how long it will take? I'm not sure how long I've got.

[evilfantasy]

Wait until you have at least an hour.

[dingbat-dom]

OK then. Will do it tomorrow, thanks for all your help so far. 

[dingbat-dom]

I cannot connect to update the source on the second part of the installation. Help?

[evilfantasy]

Run this instead.

Download DrWeb CureIt & save it to your desktop.

Scan with DrWeb-CureIt as follows:

• Double-click on drweb-cureit.exe and then click Start.
  
• An Express Scan of your PC notice will appear.
  
• Under Start the Express Scan Now Click OK to start.
  • This is a short scan that will scan the files currently running in memory.
  • If or when something is found, click the Yes button when it asks you if you want to cure it.
• Once the short scan has finished, Click Options > Change settings
  
• Choose the Scan tab and UNcheck Heuristic analysis and click OK
  
• Back at the main window, select the Complete scan button.
  
• Then click the Green Arrow Start Scanning button on the right and the scan will start.
  • Click Yes to all if it asks if you want to cure/move any file(s).
• When the scan is done.
• In the Dr.Web CureIt menu on top left, click File and choose Save report list.
  
• Save the DrWeb.csv report to your Desktop.
  
• Exit Dr.Web Cureit.

• Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.

[/COLOR]

• After reboot, Right-click the Dr.Web log on the desktop and choose Open With > Notepad
  
• Copy and paste that log in the next reply

[dingbat-dom]

OK so I did the short scan and it didn't find any thing, started the long scan and had to stop because of I ran out of time.

Is there any other suggestions you can have. It still goes funny, and the sound is much more distorted now. I also have 3 cli.exe running at about 90 000k each.

[evilfantasy]

The cli.exe process provides a system tray icon from which you can perform diagnosis on any problems that you are having with your graphics card. If you have an ATI graphics card in the Catalyst range you should leave this process running. If you do not, you can safely stop this process.

cli.exe is an application that does NOT appear to be a security risk

http://www.auditmypc.com/process/cli.asp

[dingbat-dom]

Oh OK. It's just it is taking up 90 000k each, so that 270 000k all together.

Any other help for this wierd virus thing. Have you ever seen anything like this in a PC before?
And also also, what can you suggest about the random proccesses on task manager that aren't found on the internet anywhere. I delteted one and now another one has popped up. It's called US92E2.EXE.

[dingbat-dom]

OK. Loads more just keep keep popping up again but in a different name. They are all different names though. Here are some of the names. GWD0D4.EXE ROBBCD.EXE amd new ones just pop up when I end them.

Any Help?

[evilfantasy]

Please print these instructions as they will be needed later when Internet access is not available.

Download SDFix by AndyManchesta and save it to your desktop.

When using this tool, you must use the Administrator's account or an account with Administrative rights

• Double click SDFix.exe and it will extract the files to %systemdrive%
  
• (this is the drive that contains the Windows Directory, typically C:\SDFix).
  
• DO NOT use it just yet.

Reboot your computer in Safe Mode using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

Open the SDFix folder and double click RunThis.bat to start the script.

• Type Y to begin the cleanup process.
  
• It will remove any Trojan Services or Registry Entries found then prompt you to press any key to Reboot.
• Press any Key and it will restart the PC.
  
• When the PC restarts, the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
  
• Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt.
  
• Copy and paste the contents of the results file Report.txt in your next reply along with a new HijackThis log.