SVCHOST.EXE = 98%CPU

  • Foxy
  • Guru
  • Guru
  • User avatar
  • Joined: May 14, 2004
  • Posts: 1038
  • Loc: places..
  • Status: Offline

Post October 7th, 2004, 4:47 pm

is command32.exe "command" inside system32?
  • Anonymous
  • Bot
  • No Avatar
  • Joined: 25 Feb 2008
  • Posts: ?
  • Loc: Ozzuland
  • Status: Online

Post October 7th, 2004, 4:47 pm

  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Joined: May 28, 2003
  • Posts: 23407
  • Loc: Woodbridge VA
  • Status: Offline

Post October 7th, 2004, 4:55 pm

NO .

Make sure you have explorer set to view hidden files and uncheck the option to hide common file extensions.

You need to find command32.exe (not command) and it will probably be hidden (and probably read only).
"There's no place like 127.0.0.1 except for ::1."
Alexandria Networks. Leader in IT consulting for associations/non-profits, and small to medium sized businesses around the northern Virginia and Washington D.C. metro area.
  • Foxy
  • Guru
  • Guru
  • User avatar
  • Joined: May 14, 2004
  • Posts: 1038
  • Loc: places..
  • Status: Offline

Post October 7th, 2004, 4:58 pm

ATNO/TW wrote:
NO .

Make sure you have explorer set to view hidden files and uncheck the option to hide common file extensions.

You need to find command32.exe (not command) and it will probably be hidden (and probably read only).


yea.. i tried to find it, it couldnt be found ...
and not in regestry keys..


anyways heres log



Logfile of HijackThis v1.98.2
Scan saved at 7:56:31 PM, on 10/7/2004
Platform: Windows 2000 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 (5.00.2920.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINNT\System32\svchost.exe
C:\mysql\bin\mysqld-nt.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\HHVcdV5Sys\VC5SecS.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\WINNT\Explorer.exe
C:\Program Files\Abyss Web Server\abyssws.exe
C:\Program Files\Abyss Web Server\abyssws.exe
C:\Documents and Settings\Administrator\Desktop\HijackThis.exe

O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\RunServices: [Norton Personal Firewall] Nisuxm.exe
O4 - HKCU\..\Run: [AbyssWebServer] C:\Program Files\Abyss Web Server\abyssws.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Joined: May 28, 2003
  • Posts: 23407
  • Loc: Woodbridge VA
  • Status: Offline

Post October 7th, 2004, 5:01 pm

Looks like you got it nice and tidy sweetie. (what a difference between that and your first log post, eh?*lol) Cheers!
"There's no place like 127.0.0.1 except for ::1."
Alexandria Networks. Leader in IT consulting for associations/non-profits, and small to medium sized businesses around the northern Virginia and Washington D.C. metro area.
  • Foxy
  • Guru
  • Guru
  • User avatar
  • Joined: May 14, 2004
  • Posts: 1038
  • Loc: places..
  • Status: Offline

Post October 7th, 2004, 5:15 pm

ATNO/TW wrote:
Looks like you got it nice and tidy sweetie. (what a difference between that and your first log post, eh?*lol) Cheers!

thankx! :D
strangly. my ftp server Now works for the first time :|

Post Information

  • Total Posts in this topic: 20 posts
  • Users browsing this forum: No registered users and 152 guests
  • You cannot post new topics in this forum
  • You cannot reply to topics in this forum
  • You cannot edit your posts in this forum
  • You cannot delete your posts in this forum
  • You cannot post attachments in this forum
 
cron
 

© 2011 Unmelted, LLC. Ozzu® is a registered trademark of Unmelted, LLC.