What is WinXPDisposableZeroConfiguration.exe and why is it utilizing 99% of my CPU

puddlejmpr

Member
Feb 7, 2004
36
0
0
I've just finished my first build and I'm happy with the system. Almost everytime I boot, however, I find that programs are very slow or hang. When I run Task Mgr I find that WinXPDisposableZeroConfiguration.exe is consuming 98-99% of my processor cycles. I looked for it by running msconfig, but find nothing. I use Task Mgr to end WinXPDisposableZeroConfiguration.exe and this fixes everything. I've tried searching this forum as well as the Windows help site and Google search to find information to help me solve this problem, but I've found nothing. Any help would be greatly appreciated.

My System:

WinXP Pro w/SP2 and all the latest updates
AMD 64 FX55
2 gig OCZ Platinum Rev 2
A8N-SLI Deluxe
MSI 6600 PCIe GPU
Zalman 7700 heat sink
WD Raptors 2X74 in Raid 0
300 Gig Maxtor Diamondmax
Belkin 802.11g wireless adaptor
19" Samsung LCD
 

rawbert

Junior Member
Aug 21, 2004
18
0
0
That sounds like it's trying to hide as Microsoft's Wireless Zero Configuration service but that's handled by %SYSTEMROOT%\System32\svchost.exe -k netsvcs which would be the valid executable for it.

I did a quick search on that exe and nothing. I'd assume it's some sort of trojan and I'd check all the places it could hide for auto-startup. I usually check HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion and anything that starts with Run (RunOnce, RunAsService, etc..). I'd also check anything under HKEY_CURRENT_USER as well under the same tree.

If you find nothing there, I'd try looking in Start->All Programs->Startup and check to see if anything is in that folder (you can browse to it from My Computer through 2 different folders. %userprofile%\Start Menu\Programs\Startup and %systemdrive%\Documents and Settings\All Users\Start Menu\Programs\Startup. Make sure your explorer settings aren't set to hide system files or hidden files.

One other thing to check is to see it's a service. There may be a few strange looking services in your services applet but I highly doubt it because you can't end task a service normally.

Let me know how it goes.
 

puddlejmpr

Member
Feb 7, 2004
36
0
0
Thanks Rawbert.
Just as you suggested I ran regedit and found it under HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RUN. The actual program file is located in the C:\Belkin subdirectory in the "Tool" folder.
I use Windows to manage my wireless configuation. I don't use the Belkin utility to manage or monitor my adaptor, but I use the Belkin driver because the default XP driver sees the adaptor as an 802.11b device, limiting it to 11mbs.
Do I just delete it from the registry or would simply deleting it from the "tool" folder in the Belkin directory do the job?
 

rawbert

Junior Member
Aug 21, 2004
18
0
0
Well, since it appears to be a valid application I wouldn't delete the file. Here's what I would do. I'd go into the registry editor select the HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run folder and go to File-->Export... and make a backup copy of your RUN hive just in case you for some reason need that to launch again in the future. Save it as a .reg file (the defualt is fine) and if everything works out, you don't need to save the .reg file. If in the event you need that to auto-launch again, just double click on that .reg file and it will re-add the key to your registry.

raw
 

puddlejmpr

Member
Feb 7, 2004
36
0
0
Raw. Can't tell you how wonderful it is to see System Idle Process accounting for 99% of CPU usage! Thanks a million!