Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Svchost.exe acting weird
#16
I now see the problem. You had a Rouge Anti-Virus attack.
  • Step 9

    Please download the OTM File Mover from 'here'.
    • Save it to your Desktop.
    • Please double-click OTM.exe to run it.
    • Copy the lines inside the Code box below to the Clipboard by highlighting all of the content and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

      Code:
      :Processes
      explorer.exe
      Palladium.exe
      z.exe

      :Reg
      [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
      "Palladium"=-
      [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
      "Palladium Pro"=-
      [-HKEY_CURRENT_USER\Software\Palladium Pro]
      [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
      "Palladium Pro"=-
      [-HKEY_CURRENT_USER\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}]

      :Files
      %UserProfile%\Application Data\completescan_pal
      %UserProfile%\Application Data\install_pal
      %UserProfile%\Application Data\palladium.exe
      %UserProfile%\Application Data\uid_pal
      %UserProfile%\Desktop\Palladium.lnk
      %UserProfile%\Start Menu\Programs\Palladium.lnk
      %ProgramFiles%\Palladium Pro
      %ProgramFiles%\Startup\Palladium Pro.lnk
      %AppData%\Palladium.exe
      %AppData%\z.exe

      :Commands
      [purity]
      [emptytemp]
      [start explorer]
      [Reboot]
    • Return to OTM, right-click in the Paste Instructions for Items to be Moved window and choose Paste.
    • Click the red MoveIt! button.
    • Copy everything in the Results window to the Clipboard by highlighting all of the content and by pressing CTRL + C (or, after highlighting, right-click and choose Copy).
    • Paste it in your next reply.
    • Close OTM.

    Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the moving process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start > All Programs > Accessories > Notepad) and click File > Open. In the File Name box enter *.log and press the Enter key, navigate to the C:\_OTM\MovedFiles folder, and open the newest .log file present. Copy and paste the contents of that document back here in your next post.
Reply


Messages In This Thread
Svchost.exe acting weird - by |Z3R0| - 12-30-2010, 01:38 AM
RE: Svchost.exe acting weird - by Quintus - 12-31-2010, 06:45 AM
RE: Svchost.exe acting weird - by |Z3R0| - 12-31-2010, 02:29 PM
RE: Svchost.exe acting weird - by Quintus - 01-01-2011, 08:59 AM
RE: Svchost.exe acting weird - by |Z3R0| - 01-01-2011, 08:46 PM
RE: Svchost.exe acting weird - by Quintus - 01-01-2011, 10:35 PM
RE: Svchost.exe acting weird - by |Z3R0| - 01-02-2011, 01:47 AM
RE: Svchost.exe acting weird - by Quintus - 01-02-2011, 06:32 AM
RE: Svchost.exe acting weird - by |Z3R0| - 01-02-2011, 01:58 PM
RE: Svchost.exe acting weird - by Quintus - 01-03-2011, 07:06 AM
RE: Svchost.exe acting weird - by |Z3R0| - 01-03-2011, 04:20 PM
RE: Svchost.exe acting weird - by Quintus - 01-04-2011, 08:37 AM
RE: Svchost.exe acting weird - by |Z3R0| - 01-04-2011, 09:38 PM
RE: Svchost.exe acting weird - by Quintus - 01-05-2011, 08:43 AM
RE: Svchost.exe acting weird - by |Z3R0| - 01-05-2011, 06:53 PM
RE: Svchost.exe acting weird - by Quintus - 01-06-2011, 10:52 AM
RE: Svchost.exe acting weird - by |Z3R0| - 01-06-2011, 05:43 PM
RE: Svchost.exe acting weird - by Quintus - 01-08-2011, 09:23 AM
RE: Svchost.exe acting weird - by |Z3R0| - 01-08-2011, 12:47 PM
RE: Svchost.exe acting weird - by Quintus - 01-09-2011, 06:53 AM
RE: Svchost.exe acting weird - by |Z3R0| - 01-09-2011, 01:06 PM
RE: Svchost.exe acting weird - by Quintus - 01-11-2011, 09:01 AM
RE: Svchost.exe acting weird - by RRain - 01-14-2011, 10:32 PM
RE: Svchost.exe acting weird - by Quintus - 01-16-2011, 02:30 AM
RE: Svchost.exe acting weird - by |Z3R0| - 01-17-2011, 03:10 PM
RE: Svchost.exe acting weird - by Quintus - 01-18-2011, 04:35 AM

Possibly Related Threads…
Thread Author Replies Views Last Post
  Svchost.exe many of them Miku 11 3,625 01-05-2012, 04:20 AM
Last Post: hackopz
  Computer Acting Up ... Pyratepig 3 1,446 12-23-2010, 08:33 PM
Last Post: Pyratepig
  Server.exe in system 32 folder pobble 7 3,413 11-26-2010, 04:23 AM
Last Post: --([-S7N-])--
  [FIXED]Infected with b.exe `Sharan 26 8,358 10-28-2009, 02:22 AM
Last Post: `Sharan

Forum Jump:


Users browsing this thread: 5 Guest(s)