Re: svchost Going Crazy !

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 04/23/05


Date: Sat, 23 Apr 2005 17:23:27 -0400

From: "Mike" <Mike@discussions.microsoft.com>

| After i connect to the internet, a process "svchost"
| starts to grow and slows my computer.
|
| it starts from about size 15,000 and grows to 200,000
| and after a few days of downloading, it exeeds 300k
| and my PC is dead and i have to reboot.
|
| This started a few days ago. Never happened before.
|
| thx in advance.

Dump the contents of the IE Temporary Internet Folder cache (TIF)
Start --> Settings --> Control Panel --> Internet Options --> Delete Files

Dump the contents of the Mozilla FireFox Cache
Tools --> Options --> Privacy --> Cache --> Clear

1) Download TrendMicro Sysclean by one of the following 2 methods

Trend Sysclean Method 1
---------------------------------------
Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\sysclean")

Download SYSCLEAN.COM and place it in that directory.
Download the signature files (pattern files) by obtaining the ZIP file.
For example; lpt596.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.

Trend Sysclean Method 2
---------------------------------------
Download the utility SYSCLEAN_FE at the following URL --
http://www.ik-cs.com/got-a-virus.htm
SYSCLEAN_FE automates the download and execution process of the Trend Sysclean Package.
Direct URL --
http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe

2) Download and install Ad-aware SE (free personal version v1.05)
         http://www.lavasoftusa.com/
3) Update Adaware with the latest definitions then exit the software.
4) Disable System Restore
        http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
5) Reboot your PC into Safe Mode and shutdown as many applications as possible
6) Using the Trend Sysclean and Ad-aware SE utilities, perform a Full Scan of your
        platform and clean/delete any infectors found
7) Restart your PC and perform a "final" Full Scan of your platform using both Trend
        Sysclean and Ad-aware SE
8) Re-enable System Restore and re-apply any System Restore preferences,
        (e.g. HD space to use suggested 400 ~ 600MB),
9) Reboot your PC.
10) Create a new Restore point

* * Please report back your results * *

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Relevant Pages

  • Re: Possible Trojan/Worm
    ... | On my main XP Home PC, which is providing Internet access to another PC ... | trying again, which eventually means XP reaches it's port limit, gives ... Download TrendMicro Sysclean by other of the following 2 methods ... Trend Sysclean Package ...
    (microsoft.public.security.virus)
  • Re: Virus or?
    ... Trend Sysclean Method 1 ... Download SYSCLEAN.COM and place it in that directory. ... Restart your PC and perform a "final" Full Scan of your platform using both the ... Re-enable System Restore and re-apply any System Restore preferences, ...
    (microsoft.public.windowsxp.general)
  • Re: Antivirus & spy remover software
    ... | software, that can be able to protect my pc from known virus., i am using ... Trend Sysclean Method 1 ... Download SYSCLEAN.COM and place it in that directory. ... Re-enable System Restore and re-apply any System Restore preferences, ...
    (microsoft.public.windowsxp.general)
  • Re: Trojan DyFuCA problems
    ... | I have Trojan DyFuCA and no antitrojan remove it. ... Trend Sysclean Method 1 ... Download SYSCLEAN.COM and place it in that directory. ... Re-enable System Restore and re-apply any System Restore preferences, ...
    (microsoft.public.windowsxp.general)
  • Re: Trojan Infection
    ... Trend Sysclean Method 1 ... Download SYSCLEAN.COM and place it in that directory. ... Re-enable System Restore and re-apply any System Restore preferences, ...
    (microsoft.public.windowsxp.security_admin)

Quantcast