Buenas
tengo un equipo que contínuamente tiene un proceso al 100% y me deja el ordenador bloqueado.
he estado revisando el equipo por si tuviese algún troyano y no me han detectado nada y el proceso wmiprvse.exe que me detecta es el correcto de windows...
ya no se me ocurre otra cosa que hacer

este es el log que he sacado del hijackthis, si me podéis ayudar, por favor

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:36:35, on 14/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WIN\System32\smss.exe
C:\WIN\system32\winlogon.exe
C:\WIN\system32\services.exe
C:\WIN\system32\lsass.exe
C:\WIN\system32\svchost.exe
C:\WIN\System32\svchost.exe
C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odClientService.exe
C:\Program Files\Cisco Systems\SSL VPN Client\agent.exe
C:\WIN\system32\spoolsv.exe
C:\Program Files\Fujitsu Siemens\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Symantec\Backup Exec\DLO\DLOChangeLogSvcu.exe
C:\Program Files\iPass\iPassConnect RLA\iPCAgent.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\OfficeScan NT\ntrtscan.exe
C:\WIN\System32\svchost.exe
C:\Program Files\OfficeScan NT\tmlisten.exe
C:\WIN\System32\CCM\CcmExec.exe
C:\Program Files\OfficeScan NT\CNTAoSMgr.exe
C:\WIN\TEMP\HIED29.EXE
C:\WIN\Explorer.EXE
C:\WIN\System32\igfxtray.exe
C:\WIN\System32\hkcmd.exe
C:\WIN\AGRSMMSG.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WIN\System32\taskswitch.exe
C:\Program Files\OfficeScan NT\pccntmon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
C:\Program Files\CryptoEx\Common\CexTray.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
D:\temp\ctrlAT15.exe
C:\Program Files\Support.com\bin\tgcmd.exe
C:\WIN\System32\spool\DRIVERS\W32X86\3\E_FATIBEE.E XE
C:\WIN\system32\ctfmon.exe
C:\Program Files\CryptoEx\Common\EASServer.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
C:\WIN\AntSwitch.exe
C:\Program Files\Fujitsu Siemens\Bluetooth Software\BTTray.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\OdTray.exe
C:\Program Files\Symantec\Backup Exec\DLO\DLOClientu.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\iPass\iPassConnect RLA\downloader\ipccheck.exe
C:\Program Files\Cisco Systems\VPN Client\vpngui.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\PROGRA~1\FUJITS~2\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\WinRAR\WinRAR.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://my.fsc.net/spain
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://my.fsc.net/spain
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = 172.24.100.46:81
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = localhost;localhost.*;127.0.0.*;*.fsc.net;fireball .cognitas.de;141.29.*;149.202.90.*;149.202.148.*;1 0.*;172.*;192.168.*;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O1 - Hosts: 172.25.158.10 abgs050a.abg.fsc.net
O1 - Hosts: 172.25.158.11 abgs051a.abg.fsc.net
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\sw g.dll
O3 - Toolbar: Barra Yahoo! con bloqueador de ventanas emergentes - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WIN\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WIN\System32\hkcmd.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [SchedulingAgent] mstinit.exe /firstlogon
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [CoolSwitch] C:\WIN\System32\taskswitch.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WIN\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [IO-Monitor] "C:\Program Files\OfficeScan NT\pccntmon.exe" -HideWindow
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [CryptoExTrayV3] "C:\Program Files\CryptoEx\Common\CexTray.exe" /ShowTrayIcon
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [CtrlMod15] D:\temp\ctrlAT15.exe -m 56 -p"E:"
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\Support.com\bin\tgcmd.exe" /server /startmonitor
O4 - HKLM\..\Run: [EPSON Stylus DX4000 Series] C:\WIN\System32\spool\DRIVERS\W32X86\3\E_FATIBEE.E XE /FU "C:\WIN\TEMP\E_S162.tmp" /EF "HKLM"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WIN\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [now2_proxyscript] C:\WIN\system32\wscript.exe C:\WIN\CmdFSC\proxy_onoff.vbs
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WIN\System32\CTFMON.EXE (User 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [NewUser] cmd /c if exist %SystemRoot%\newuser.bat %SystemRoot%\newuser.bat (User 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WIN\System32\CTFMON.EXE (User 'Servicio de red')
O4 - HKUS\S-1-5-20\..\RunOnce: [NewUser] cmd /c if exist %SystemRoot%\newuser.bat %SystemRoot%\newuser.bat (User 'Servicio de red')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WIN\System32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [NewUser] cmd /c if exist %SystemRoot%\newuser.bat %SystemRoot%\newuser.bat (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WIN\System32\ctfmon.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [NewUser] cmd /c if exist %SystemRoot%\newuser.bat %SystemRoot%\newuser.bat (User 'Default user')
O4 - Startup: Epson Printer Status Agent2.lnk = C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AntSwitch.lnk = C:\WIN\AntSwitch.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WIN\system32\spool\drivers\w32x86\3\E_SRCV02.EX E
O4 - Global Startup: OdTray.lnk = ?
O4 - Global Startup: Symantec Backup Exec Desktop Agent.lnk = C:\Program Files\Symantec\Backup Exec\DLO\DLOClientu.exe
O4 - Global Startup: VPN Client.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WIN\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WIN\System32\msjava.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://my.fsc.net/spain
O15 - Trusted Zone: fujitsu-siemens.amdahl-autinform.de
O15 - Trusted Zone: *.bahn.de
O15 - Trusted Zone: *.confarchives.com
O15 - Trusted Zone: *.conferencing.com
O15 - Trusted Zone: kallisto.cytric.net
O15 - Trusted Zone: v7.e-tmm.com
O15 - Trusted Zone: *.englishtown.com
O15 - Trusted Zone: *.fsc-opal.sbs.siemens.com
O15 - Trusted Zone: ecrm.fujitsu-siemens.com
O15 - Trusted Zone: ecrm.fujitsu-siemes.com
O15 - Trusted Zone: *.iconf.net
O15 - Trusted Zone: components.viewpoint.com
O15 - Trusted Zone: fujitsu-siemens.webex.com
O15 - Trusted Zone: www.wwworkplace.com
O15 - Trusted Zone: fujitsu-siemens.amdahl-autinform.de (HKLM)
O15 - Trusted Zone: *.bahn.de (HKLM)
O15 - Trusted Zone: *.confarchives.com (HKLM)
O15 - Trusted Zone: *.conferencing.com (HKLM)
O15 - Trusted Zone: kallisto.cytric.net (HKLM)
O15 - Trusted Zone: v7.e-tmm.com (HKLM)
O15 - Trusted Zone: *.englishtown.com (HKLM)
O15 - Trusted Zone: *.fsc-opal.sbs.siemens.com (HKLM)
O15 - Trusted Zone: *.iconf.net (HKLM)
O15 - Trusted Zone: components.viewpoint.com (HKLM)
O15 - Trusted Zone: fujitsu-siemens.webex.com (HKLM)
O15 - Trusted Zone: www.wwworkplace.com (HKLM)
O16 - DPF: {01111F00-3E00-11D2-8470-0060089874ED} (Support.com Installer) - http://abgzsu1a.abg.fsc.net/sdccommon/download/tgctlins.cab
O16 - DPF: {4B0999FD-6937-11D5-8FEC-00606779369C} -
O16 - DPF: {4D675B26-6F56-4410-B20F-AE6BF305D696} (Siebel Email Support for Microsoft Outlook and Lotus Notes) - http://ecrm.fujitsu-siemens.com/fsc_ecrm_esn/19221/applets/SiebelAx_OutBound_mail.cab
O16 - DPF: {8C244272-1DC1-4CE7-9C6C-FABCA09EB543} (Siebel Desktop Integration) - http://ecrm.fujitsu-siemens.com/fsc_ecrm_esn/19221/applets/SiebelAx_Desktop_Integration.cab
O16 - DPF: {9FE53AD1-6AC3-4C41-927D-1BEE9E4F683E} (Siebel High Interactivity Framework) - http://ecrm.fujitsu-siemens.com/fsc_ecrm_esn/19221/applets/SiebelAx_HI_Client.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = mad.fsc.net
O17 - HKLM\Software\..\Telephony: DomainName = mad.fsc.net
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = mad.fsc.net
O20 - Winlogon Notify: CexTrayWinLogon - C:\Program Files\CryptoEx\Common\CexTrayWinLogon.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\Fujitsu Siemens\Bluetooth Software\bin\btwdins.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Lector del diario de cambios del agente DLO para Backup Exec (Backup Exec DLO Agent Change Journal Reader) (DLOChangeJournalSvc) - Symantec Corporation - C:\Program Files\Symantec\Backup Exec\DLO\DLOChangeLogSvcu.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPassConnectEngine - iPass - C:\Program Files\iPass\iPassConnect RLA\iPassConnectEngine.exe
O23 - Service: iPCAgent - iPass, Inc. - C:\Program Files\iPass\iPassConnect RLA\iPCAgent.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: OfficeScanNT RealTime Scan (ntrtscan) - Trend Micro Inc. - C:\Program Files\OfficeScan NT\ntrtscan.exe
O23 - Service: Odyssey Client for Fujitsu Siemens Computers (odClientService) - Funk Software, Inc. - C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odClientService.exe
O23 - Service: Cisco Systems, Inc. STC Agent (STCAgent) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\SSL VPN Client\agent.exe
O23 - Service: OfficeScan NT Listener (tmlisten) - Trend Micro Inc. - C:\Program Files\OfficeScan NT\tmlisten.exe

--
End of file - 11895 bytes


gracias por todo

un saludo

Hola carlosfsc

Tu log de HijackThis esta limpio y mas bien parece ser problema de Windows o sus actualizaciones.

Descarga CCleaner y ejecútalo usando primero su opción de "Limpiador" para borrar cookies, temporales de internet y todos los archivos que este te muestre como obsoletos, y luego usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).

Una vez que este termine de limpiar todo, actualiza "Java", hace una Desfragmentación del disco con la opción de Windows y pasa por www.windowsupdate.com para descargar todos los parches disponibles (si tu sistema lo permite)

• Descarga y ejecuta la utilidad Advanced WindowsCare, para reparar y optimizar a fondo tu PC.

Reinicia y nos contas los resultados.

Salu2

Articulo de interés: "Eliminar lentitud en Windows"