My system is spending a lot of CPU time processing indexing, searchindexer, searchfilterhost, and searchprotocolhost. Having done some googling on the subject, I found a lot of complaints and instructions to shut down the indexing service. After having shut down indexing service, the indexing processes are still running pretty hot.
There was a hint somewhere, that programs like searchfilterhost might have been replaced with something bad, and I want to check them for any kind of problem. Running a scan on all of WINDOWS\System32 for any and all problems would be find with me.
I tried creating a custom scan in BitDefender, but apparently got it wrong. I watched as it scanned, and it certainly didn't stick to WINDOWS\System32. Looked like it was still doing the default quick scan.
So what's the procedure to run the custom scan I've described?
Note: I ran RootkitRevealer from Microsoft right now and getting a long list of MSS....log files in Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows that are "Visible in Windows API, but not in MFT or directory index" - I recognize MSS...log files as being related to search indexing. I also got the same message for a long list of Applications\\Windows\Projects\Systemindex\Indexer\CiFiles\ with extensions .ci, .dir, and .wid.
