Page 2 of 2

Posted: Wed Feb 07, 2007 7:43 am
by know1
I got a really easy fix...get a mac :D



*hearts* mac

Posted: Wed Feb 07, 2007 3:40 pm
by snowboarded
Ok so here's what needs to be done; REFORMAT!

If you dont feel like reformatting then you will need to get avast antivirus, its free. It can track and remove trojans, which is what i think you have. Also you can try and download a stand alone trojan remover.

Also te fact that you had like 5 or 6 svchost.exe running is kind of bothering me, you shouldnt have more than 3 or 4 under normal circumstances. Its not neccessarilly an issue but is worth taking a look at. Here's what you need to do;

Create a new text file, name it whatever you want to. paste this text into it, but adjusting the desktop location to your computer's profile name. --> Tasklist /SVC > "C:\Documents and Settings\millironsj\Desktop\TaskListOutPut.txt" <--
Then just save it, then change the file extension from .txt to .bat If you don't have file extensions showing you have to change your folder view settings to display known file type extensions.
If you don't want to do all of that then just paste that line of code into a command prompt window. You can access that from the start menu and click on run and then type in cmd to bring it up. This will toss the output into a text file. Copy that and post it here. Then we can figure out what might be the issue.

Posted: Wed Feb 07, 2007 5:57 pm
by thefultonhow
I have five svchost.exe and I know I am clean.

The HijackThis log also contains a task list, so getting another one won't show any more information.

Posted: Wed Feb 07, 2007 6:33 pm
by snowboarded
thefultonhow wrote:I have five svchost.exe and I know I am clean.

The HijackThis log also contains a task list, so getting another one won't show any more information.
Like I said, having several service hosts running isnt the issue, what they are doing is the issue. Hence why the task list would help. Seeing what services are running can help to pinpoint where issues lie. For instance the last windows update has a memory leak that shoots up one of the svchosts up to insane levels, eating up all of your memory. knowing what services are running helps you be able to kill off certain processes until you can figure out a permanent fix.

So my original claim still stands, it will give you more information then what was posted before...

Posted: Wed Feb 07, 2007 6:39 pm
by snowboarded
Image Name PID Services
========================= ======
svchost.exe 1988 DcomLaunch, TermService
svchost.exe 2036 RpcSs
MsMpEng.exe 496 WinDefend
svchost.exe 552 AudioSrv, Browser, CryptSvc, Dhcp,
_ dmserver, ERSvc, EventSystem, helpsvc, HidServ,
_ lanmanserver, lanmanworkstation, Netman,
_ Nla, Schedule, seclogon, SENS, SharedAccess,
ShellHWDetection, srservice, Themes, TrkWks,
W32Time, winmgmt, wuauserv, WZCSVC
svchost.exe 652 Dnscache
svchost.exe 1020 LmHosts, RemoteRegistry, SSDPSRV, WebClient
ccSetMgr.exe 1260 ccSetMgr [/list]

Posted: Wed Feb 07, 2007 11:11 pm
by Manarius
know1 wrote:I got a really easy fix...get a mac :D



*hearts* mac
That's a non-solution. In fact, I'd say that's even worse than reformatting.