Is this right ?

[blacksea]

As I saw on other threats I the file svchost seemed to be suspicious. I did a hijack scan and see that I am running 6 kinds of them (at my first peek to task manager it was 4, after I wanted to take a screenshot it was 6 as you can see). I searched on the internet for more information.

 

At this site most of them say it can be a virus, but also many say it is a OS part.

http://www.neuber.com/taskmanager/process/svchost.exe.html

 

And at systemlookup it is classified as malware.

http://www.systemlookup.com/search.php?type=filename&search=svchost.exe&s=

 

But it also says : Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\System32\ - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

 

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\COMODO\COMODO Internet Security\cfp.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\IObit\IObit Security 360\IS360tray.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\WINDOWS\system32\ctfmon.exe

C:\program files\steam\steam.exe

C:\Program Files\IObit\IObit Security 360\IS360srv.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\WINDOWS\System32\alg.exe

C:\Program Files\Windows Live\Contacts\wlcomm.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Documents and Settings\Akcay\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Akcay\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Program Files\IObit\IObit Security 360\is360.exe

C:\Documents and Settings\Akcay\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: AcroIEHelperStub - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [steam] "c:\program files\steam\steam.exe" -silent

O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe

O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [iObit Security 360] "C:\Program Files\IObit\IObit Security 360\IS360tray.exe" /autostart

O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1253299216203

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in 1.6.0_17) - http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} (Java Plug-in 1.6.0_17) - http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Plug-in 1.6.0_17) - http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: (Ati HotKey Poller) - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe

O23 - Service: IS360service - IObit - C:\Program Files\IObit\IObit Security 360\IS360srv.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

[blacksea]

You can see that svchost was running 4 times in the hijack scan. After 5 min it was 6 of them running on procces.

[wrexe]

I have 12 running :lol:

 

Ever since i have had this pc it has had 12, so i think it's normal.

 

I think there are more svchost in windows 7, which i have.

 

What OS are you running? task manager looks like XP?

[jelrikj]

Reply

 

I think its right don't need to worry :-)

i checked on 3 computers one with Windows 7 and 2 with Windows XP

the result is 4 or 5 some times 6 svchost.exe processes running.

but if you ghad problems or something with your computer then defnitley check on Spyware.

[blacksea]

Yes I have XP sp2.

Wel okay then, thank you both!

But sometimes my fan(cooler) gives some weird noise, I didn't had it before and I had never heard of svchost. So I thought maybe it has something to do with it.

 

Peace blacksea

[jelrikj]

Reply

 

Don't worry about that fan cooler thats not the first what usally Spyware is gonna controll :-P

but i woud let check that Fan cooler in a PC Store or weather replace it.

[blacksea]

Ty jelrikj !

[Melvin_Deal]

Make sure fan is unobstructed!

 

Hi Blacksea!

 

Make sure that your cooling fan is clean and free of dirt and lint, and that the body vents on your PC are unobstructed. If it is a laptop or notebook... make sure it is on a flat firm surface, not soft like carpet or other cloth that can obstruct proper venting.

[jimczyz]

Try using some compressed air to blow out the dirt from the cooling fan. That usually stops the fan noise.

[blacksea]

Hi Melvin_Deal,

 

My cooling fan is probably not unobstructed. I have this computer for 3 months now and it began with weird noises 1 week ago. Also I don't think that there is no big dirt in there because it's just 3 month old computer. I had a computer over 2 year and it had some dirt but never made weird noise. This one makes that noise only at boot up. But I will look for dirt and clean dirt everywhere.

 

And I also heard that dropping a little oil can help too, but I don't know maybe it can be risky so I left that behind.

[wozofoz]

Brand and model ?

 

What brand and model do you own ?

Some NoteBooks are well known for fan noise and there is software that can regulate the fan better than the inbuilt system but the software is usually specific to a certain model so not just any fan regulator will do.

 

All the best, woz of oz

[blacksea]

What brand and model do you own ?

Some NoteBooks are well known for fan noise and there is software that can regulate the fan better than the inbuilt system but the software is usually specific to a certain model so not just any fan regulator will do.

 

All the best, woz of oz

 

Hi wozofoz,

 

I'm not using a Notebook but a Computer. And actually the new computer I bought was from a good friend of my father who sells computers. He used this computer for his own for games and sold it for a very cheap price. I can't see the brand or model of the computer but here are some specifications. Maybe this will give you enough info.

 

Ati Radeon x1650 pro 512 mb

AMD athlon 64 x2 2.0 ghz

Core prossesor 3800+

Os: windows XP sp2

[wozofoz]

Ah, I see

 

Ok, if it's a DeskTop computer and not a Notebook then that's a whole different story.

It's just that I own a NetBook and when I first started cruising the forums looking for info etc I came across numerous threads about fan noise in NoteBooks and NetBooks.

I have been lucky, I got a good one. A few of my friends had fan noise problems from the moment they opened the box :sad:

 

I think the fan noise happening after you saw svchost (I have many too) was just a coincidence and it's more likely your fan needs a cleanup or replacing.

It seems replacing the fan on a desktop computer is relatively cheap and easy to do plus you can put in a better one than the original :wink:

 

All the best, woz of oz

[blacksea]

Yes, your right !

Thank you wozofoz.

[PeterDomsculttut]

Is this right

 

Rules have been updated copied from Mavidos added rule in the Open Forum.

 

When a thread is started, the first post must contain content relevant to the thread. A simple "title says all" will not do. If you are asking for an opinion, please provide your own. Please provide some information. Threads which the original post does not contain any relevant information will be closed and the thread creator will be given an "extra words" warning.

 

 

If you have a question or problem with this, please PM me (Nobody is going to PM you) or one of the other mods of this forum. (You are not a Mod on this forum)

 

If you are creating a thread, and are curious about your original post being possibly against this rule, feel free to PM a mod to ask if its ok.

Here is a sample of a website I developed for Link Removed - Advertising is not allowed - Banning offense

All Forum Members: Please Read

You have been warned before and now you are Banned

[enoskype]

Yeah that's right.:evil:

 

Thanks wozofoz.

 

Cheers.

[itsmejjj]

1. Any user posting 2 or more spam posts will be banned for 30 days.

 

i am still a bit vague, about this spam thing, having just read this again..

so what is it that is a banned offense?

i leave it there for a proper answer .in case i get it wrong..

 

jjj

[So_sad]

Ban this one for life, please ; it's a spam bot.

 

Just Google Mavidos open forum and you'll find this bot all over the forums ; different nick, same bull. While you're at it, ban the IP and the email.

 

===

[wozofoz]

Professional Spammers

 

1. Any user posting 2 or more spam posts will be banned for 30 days.

 

i am still a bit vague, about this spam thing, having just read this again..

so what is it that is a banned offense?

i leave it there for a proper answer .in case i get it wrong..

 

jjj

I didn't give the first warning to PeterDomsculttut so I don't know what the link in his previous post was to but the link in the post above was to a money loan site. This was quite possibly a scam site, I don't know and I don't see the need to find out for sure.

Advertising, and most definitely shonky money lending advertising, is not welcome or allowed here.

 

Any user posting 2 or more spam posts will be banned for 30 days.

My opinion:

In circumstances like this where the member is obviously only here to spam and try to sell something, then a 30 day Ban is a waste of time for everyone.

I don't waste my time explaining the rules to these professional spammers, I just give them the link.

The professional spammers know what they have done wrong, I know what they have done wrong, so why bother with a lot of chit-chat.

 

This is the first spam post I have replied to and usually just give them a Permanent Ban with just the explanation Professional Spammer or whatever and delete the post.

I left the post this time because the topic was solved and I wanted other members to see an example of the sort of spam this site gets and how we deal with it.

 

Not all 'spammers' are professional, some are good folks who have a website and just want to share, after reading the rules they abide by them and are more than welcome in the forum

PeterDomsculttut is a professional spammer and now has got a Permanent Ban which is Never to be lifted

 

Some may call me hard, I don't think that is correct, when it comes to professional spammers I prefer the term ruthless :wink:

 

So don't worry jjj I am not patrolling the corridors of the IObit forum, broadsword in hand, chopping off the heads of spammers. (some silly law won't let me :mrgreen: )

Helpful and considerate members are always welcome :smile:

 

All the best, woz of oz

[So_sad]

"PeterDomsculttut" is not a person. "It" is a spam bot, which means an automated spam machine.

 

You can remove these links if you feel they are against the rules here :

 

http ://www.planetphotoshop.com/forum/showthread.php?p=10625

http ://www.jewelkilcherforum.com/showthread.php?p=34715

http ://www.k20a.org/forum/showthread.php?p=928390

http ://www.theblackberryzone.com/forums/showthread.php?p=21735

http ://board.mezco.net/showthread.php?p=307479

http ://www.lacrosseforums.com/showthread.php?t=39522

 

Most other posts linked by Google have been removed.

 

Spam Bots won't read your replies, but they will come back if you don't ban them ;)

 

===

[Melvin_Deal]

HI So_sad!

 

What powerful tools you have! Will I take the one thats just right (Little red riding hood of course).

[blacksea]

Well well. As I see now after downloading Avast 5.0, svchost is was really a threat. You can see it on the attachment.

 

Blacksea

[Melvin_Deal]

Carefull Blacksea!!!

 

Svchost is a common component of windows!! Before you go fixing make sure you have a good backup image!!! It is not uncommon for Windows users to have many svchost running at the same time!!!

 

I'm just saying thats all!!

[enoskype]

Hi blacksea,

 

In your case, A0056648.exe executable file was using svchost process for Win32:Mirc-Z [PUP] infection. Although it is not active on the PC, with a System Restore of {B4F2.........}, it could be running in the PC again.

 

Deleting the past Restore points will get rid of that specific malicious item and others if they exist in System Restore.

 

Cheers.

[blacksea]

Hi blacksea,

 

In your case, A0056648.exe executable file was using svchost process for Win32:Mirc-Z [PUP] infection. Although it is not active on the PC, with a System Restore of {B4F2.........}, it could be running in the PC again.

 

Deleting the past Restore points will get rid of that specific malicious item and others if they exist in System Restore.

 

Cheers.

 

Hi enoskype,

 

So you mean that I could have an infection that is still running in my computer?

 

Blacksea.