Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Svchost.exe acting weird
#6
  • Comments:
    • It appears as if you have a Chinese malware in your system, which I was unable to find. However, that should be logged as outgoing if so. It is safest to assume that you are under attack. That IP Address is known to have done so.
  • Step 5

    Please download Combofix from one of the following locations:

    'Link 1'
    'Link 2'

    **IMPORTANT!**

    Let me give you a warning beforehand. I am instructing you to use one of the most powerful removal tool created. A simple mistake of running ComboFix without a helper's advice might render your machine unbootable. Do note that the steps below are crucial for the success of the clean-up you are currently undergoing. If by any chance you failed to meet any of them, I can almost guarantee a dreadful occurrence happening. See to it that you read the instructions first up to the very end and follow them accordingly after to ensure the best possible performance.
    • Save ComboFix to your Desktop.
    • Disable your anti-virus and anti-spyware applications, usually via a right-click on the System Tray icon. They may otherwise interfere with ComboFix. If you have difficulty properly disabling your protective programs, refer to 'this' link.
    • Double-click ComboFix.exe and follow the prompts.
    • As part of its process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery or repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
    • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
    • If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

      [Image: RcAuto1.gif]
    • Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

      [Image: whatnext.png]

    • Click on Yes, to continue scanning for malware.
    • When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

Reminders:
  1. Do not mouse-click ComboFix's window while it is running. That may cause it to stall.
  2. Do not "re-run" ComboFix. If you have a problem, reply back for further instructions.
  3. ComboFix may reset a number of Internet Explorer's settings, including making it the default browser.
  4. ComboFix prevents autorun of all CD, floppy and USB devices to assist with malware removal and increase security. If this is an issue or makes it difficult for you - please tell me.
  5. ComboFix disconnects your machine from the Internet. The connection is automatically restored before ComboFix completes its run. If ComboFix runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.
  • In your next post, please provide the following:
    • ComboFix Log
  • Format of Response

    Code:
    [color=#00BFFF][b]Step #[/b][/color]
    [color=#FFD700][b]Problems Encountered:[/b][/color]

    [color=#00BFFF][b]Step #[/b][/color]
    [color=#FFD700][b]Problems Encountered:[/b][/color]

    [color=#00BFFF][b]Step #[/b][/color]
    [color=#FFD700][b]Problems Encountered:[/b][/color]

    [color=#00BFFF][b]Link To Requested Logs:[/b][/color]
Reply


Messages In This Thread
Svchost.exe acting weird - by |Z3R0| - 12-30-2010, 01:38 AM
RE: Svchost.exe acting weird - by Quintus - 12-31-2010, 06:45 AM
RE: Svchost.exe acting weird - by |Z3R0| - 12-31-2010, 02:29 PM
RE: Svchost.exe acting weird - by Quintus - 01-01-2011, 08:59 AM
RE: Svchost.exe acting weird - by |Z3R0| - 01-01-2011, 08:46 PM
RE: Svchost.exe acting weird - by Quintus - 01-01-2011, 10:35 PM
RE: Svchost.exe acting weird - by |Z3R0| - 01-02-2011, 01:47 AM
RE: Svchost.exe acting weird - by Quintus - 01-02-2011, 06:32 AM
RE: Svchost.exe acting weird - by |Z3R0| - 01-02-2011, 01:58 PM
RE: Svchost.exe acting weird - by Quintus - 01-03-2011, 07:06 AM
RE: Svchost.exe acting weird - by |Z3R0| - 01-03-2011, 04:20 PM
RE: Svchost.exe acting weird - by Quintus - 01-04-2011, 08:37 AM
RE: Svchost.exe acting weird - by |Z3R0| - 01-04-2011, 09:38 PM
RE: Svchost.exe acting weird - by Quintus - 01-05-2011, 08:43 AM
RE: Svchost.exe acting weird - by |Z3R0| - 01-05-2011, 06:53 PM
RE: Svchost.exe acting weird - by Quintus - 01-06-2011, 10:52 AM
RE: Svchost.exe acting weird - by |Z3R0| - 01-06-2011, 05:43 PM
RE: Svchost.exe acting weird - by Quintus - 01-08-2011, 09:23 AM
RE: Svchost.exe acting weird - by |Z3R0| - 01-08-2011, 12:47 PM
RE: Svchost.exe acting weird - by Quintus - 01-09-2011, 06:53 AM
RE: Svchost.exe acting weird - by |Z3R0| - 01-09-2011, 01:06 PM
RE: Svchost.exe acting weird - by Quintus - 01-11-2011, 09:01 AM
RE: Svchost.exe acting weird - by RRain - 01-14-2011, 10:32 PM
RE: Svchost.exe acting weird - by Quintus - 01-16-2011, 02:30 AM
RE: Svchost.exe acting weird - by |Z3R0| - 01-17-2011, 03:10 PM
RE: Svchost.exe acting weird - by Quintus - 01-18-2011, 04:35 AM

Possibly Related Threads…
Thread Author Replies Views Last Post
  Svchost.exe many of them Miku 11 3,614 01-05-2012, 04:20 AM
Last Post: hackopz
  Computer Acting Up ... Pyratepig 3 1,442 12-23-2010, 08:33 PM
Last Post: Pyratepig
  Server.exe in system 32 folder pobble 7 3,404 11-26-2010, 04:23 AM
Last Post: --([-S7N-])--
  [FIXED]Infected with b.exe `Sharan 26 8,306 10-28-2009, 02:22 AM
Last Post: `Sharan

Forum Jump:


Users browsing this thread: 12 Guest(s)