Re: taskmgr.exe accessing internet
From: Kevin G (keving98_at_juno.com)
Date: 10/09/04
- Next message: Gerd Schwarzer: "Explorer lässt sich nicht mehr starten - winsync(1).exe"
- Previous message: DLOPEZ00021: "POP UP MESSAGE"
- In reply to: David H. Lipman: "Re: taskmgr.exe accessing internet"
- Next in thread: Kevin G: "Re: taskmgr.exe accessing internet"
- Reply: Kevin G: "Re: taskmgr.exe accessing internet"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 9 Oct 2004 02:48:52 -0700
I meant Safe Mode. I don't believe any of the programs mentioned would run in DOS.
Kevin G
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message news:<#eyokbYrEHA.1644@tk2msftngp13.phx.gbl>...
> Who said to run the utilities in DOS ?
>
> The objective is to run the utilities in Safe Mode, not DOS.
>
> Those utilities are Adaware and Sysclean. Please run both in Safe Mode.
>
> Dave
>
>
>
>
> "Kevin G" <keving98@juno.com> wrote in message
> news:f3e2f91a.0410081419.cf9f20d@posting.google.com...
> | David,
> |
> | I can't believe after all the time I spent writing that short posting
> | that I neglected to mention that all client machines were scanned for
> | viruses with Trend Micro (I even used Trend Micro "House Call"), and
> | scanned for spyware with both Adaware and Spybot S&D; same with the
> | server. I didn't, however, use the Sysclean Package and I can't be
> | sure I ran Adaware and Spybot in DOS as well as Windows.
> |
> | I'll give your suggestion a try and let you know how it goes.
> |
> | Thanks.
> |
> | Kevin G
> |
> | "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
> news:<uJDoYWSrEHA.332@TK2MSFTNGP14.phx.gbl>...
> | > 1) Download the following three items...
> | >
> | > Trend Sysclean Package
> | > http://www.trendmicro.com/download/dcs.asp
> | >
> | > Latest Trend signature files.
> | > http://www.trendmicro.com/download/pattern.asp
> | >
> | > Adaware SE
> | > http://www.lavasoftusa.com/
> | >
> | > Create a directory.
> | > On drive "C:\"
> | > (e.g., "c:\New Folder")
> | > or the desktop
> | > (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
> | >
> | > Download sysclean.com and place it in that directory.
> | > Dowload the signature files (pattern files) by obtaining the ZIP file.
> | > For example; lpt186.zip
> | >
> | > Extract the contents of the ZIP file and place the contents in the same directory as
> | > sysclean.com.
> | >
> | > 2) Update Adware with the latest definitions.
> | > 3) If you are using WinME or WinXP, disable System Restore
> | > http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
> | > 4) Reboot your PC into Safe Mode
> | > 5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
> | > platform and clean/delete any infectors/parasites found.
> | > 6) Restart your PC and perform a "final" Full Scan of your platform using both the
> | > Trend Sysclean utility and Adaware
> | > 7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
> | > System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
> | > 8) Reboot your PC.
> | > 9) If you are using WinME or WinXP, create a new Restore point
> | > 10) Please report back your results
> | >
> | > Dave
> | >
> | >
> | >
> | >
> | >
> | >
> | > "Kevin G" <keving98@juno.com> wrote in message
> | > news:f3e2f91a.0410080154.7e2a5bfb@posting.google.com...
> | > | Our company is running SBS 2000 w/ Exchange Server 2000; ISA Server
> | > | 2000; and Trend Micro Server Protect with all updates and service
> | > | packs installed (save Win2000 sp4). We use SBC as our DSL provider.
> | > |
> | > | Our DSL connection suddenly slowed to a crawl (~30k) and we suspected
> | > | one of the workstations picked up some spyware or a virus. One by
> | > | one we shut down the workstations and tested the connection without
> | > | success. We shut down the Server, DSL Modem, and all the switches and
> | > | restarted. With just the Server connected the DSL stilled crawled
> | > | along. We ran a port scan and saw about 12 instances of taskmgr.exe
> | > | accessing, or being accessed through, the internet. As soon as we
> | > | stopped the Task Manager service it shot back up to 1.5m.
> | > |
> | > | Unfortunately we didn't note whether it was TCP or UDP, what the
> | > | remote IP was, or what port numbers were being used before we disabled
> | > | the service and cut the connections off.
> | > |
> | > | We've checked Trend Micro, Symantec, and Google with no luck. Any
> | > | idea what might have been going on?
> | > |
> | > | Any help would be greatly appreciated.
- Next message: Gerd Schwarzer: "Explorer lässt sich nicht mehr starten - winsync(1).exe"
- Previous message: DLOPEZ00021: "POP UP MESSAGE"
- In reply to: David H. Lipman: "Re: taskmgr.exe accessing internet"
- Next in thread: Kevin G: "Re: taskmgr.exe accessing internet"
- Reply: Kevin G: "Re: taskmgr.exe accessing internet"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
