winlogon.exe 100% cpu usage

[Quickshot55]

I don't know what is going on but for some reason my winlogon.exe started using 100% cpu usage. I had autocad but i deleted it already so now i am trying hijack this. Here is my info

Logfile of HijackThis v1.97.7
Scan saved at 3:22:37PM, on 8/14/2004
Platform: Windows XP (WinNT j5.01.2600)
MSIE: Internet Explorer jv6.00(6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\System32\winlogon.exe
C:\WINDOWS\System32\services.exe
C:\WINDOWS\System32\lsass.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\2Wire\Gateway\2PortalMon.exe
C:\Program Files\2Wire Wireless\Client Manager\Cmtwo.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\WINDOWS\System32\devldr32.exe
D:\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorere\Main,Start Page = http://www.whatsfind.com/page.html
R1 - HKCU\Software\Microsoft\Internet Explorere\Main,Start Page_bak = http://default-homepage-network.com/start.cgi?new-hkcu
R3 - Default URLSearchHook is missing
O2 - BHO: Core Library - {F281FFC7-6C63-4bfq-83F2-AB7A6157B109} - C:\WINDOWS\System32\kdpupd.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [2wSysTray] C:\Program Files\2Wire\Gateway\2PortalMon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Debug] C:\WINDOWS\SMSS.exe
O4 - HKCU\..\Run: [Yahoo! Pager] C:\PROGRA~1\Yahoo!MESSEN~1\ypager.exe -quiet
O4 - Startup: PopUp Ad Stopper.lnk = C:\Documents and Settings\Steve Bierhaus\Stuff\bit torrent files\popup\PAS.EXE
O4 - Global Startup: 2Wire Wireless Client Manager.lnk = ?
O8 - Extra context menuitem: Allow popups from this web page - c:\Program Files\GIANT Company Software inc\PopUp Inspector\allowsite.htm
O8 - Extra context menuitem: Stop popups from this web page - c:\Program Files\GIANT Company Software inc\PopUp Inspector\denysite.htm
O9 - Extra button: Yahoo! Login (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! login (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Yahoo! Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' Messenger (HKLM)
O9 - Extra button: PopUp Inspector (HKCU)
O9 - Extra 'Tools' menuitem: PopUp Inspector (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\cdlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cdlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cdlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cdlsp.dll
)16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) http://download.macromedia.com/pub/shoc ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpop\..\{9B92AEE1-AAD1-4C63-9A22-B6A7SDBCF9C63}: NameServer = 172.16.0.1

[Cactus]

Hi Quickshot55..
Can you please delete the version of HJT that you have now and download the newer version 1.98.2 from

Run the newer version and post a Fresh HJT logfile.

Cactus

[brad]

Also, Download and Run
Check "I know what I'm doing".
Select cdlsp.dll.
Click the right-pointing arrow.
Click "Finished".
Restart your computer.
Delete the following file: %SystemDir%\cdlsp.dll
Note: %SystemDir% is a variable (?). By default, this is C:\Windows\System (Windows 95/98/Me), C:\WINNT\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).

Now post the new HiJackThis Log File.

brad