Network traffic from 220.127.116.11 matches the signature of a known attack. The attack was released from \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\SVCHOST.EXE.
I receive one of these alerts every 15-30 minutes, and even though Norton claims they have been blocked I have noticed a lot of changes in my computer's performance.
***How I Got This Problem***
I downloaded the new version of Ad-Aware after deciding to clean up a bit of my computer's hard drive, and like an idiot I decided it would be a good idea to google for the serial number. After finding some Russian site (I still don't know what I was thinking) I downloaded a .rar file which apparently contained the serial number. After I downloaded the .rar I scanned it using Malwarebytes' Anti-Malware and Norton Antivirus and it came up clean, so I decided to open it up and from there Norton alerted me of the invasion.
***What I did in the Attempt To Fix the Problem***
*My first step was that I ran Norton Antivirus, which came up with nothing, then I downloaded Malwarebytes' Anti-Malware software which located several trojans and a worm which were deleted.
*After those files were deleted I attempted to run Ad-Aware which found some spyware which was deleted followed by RegistryFix v8 which seemed to bring my performance up quite a bit.
*However, svchost.exe was still eating up my CPU, so I did some googling to fix this problem and I came up with this: http://www.technibble.com/how-to-fix-svcho...pu-memory-leak/. Following the steps correctly I ran the fix.bat and the svchost.exe no longer eats up CPU.
*Earlier today my CPU was being eaten up apparently by the System Idle Process, which I attempted to fix by assuming it was more spyware and other malwares, so I ran my computer in Safe Mode and scanned my computer using Norton Anti-Virus, Malwarebytes' Anti-Malware, and Ad-Aware. This scan found 1 trojan and 1 "rogue executable file" which were deleted.
After rebooting Norton once again alerted me of the issue (as seen above), so I believe I'm dancing around the problem and not really solving anything.
***Another Minor Issue***
When using Firefox and/or Opera, I will get random popups in tabs which take me to really random websites, such as childadoption.org or interesting sites like this. I assumed it was spyware/malware, but after the continuous scans and clearing of infected files with the scanners this problem continues.
Any and all help will be appreciated, thank you.
Edited by elise025, 18 March 2010 - 06:13 AM.
Moved from XP forum to a more appropriate place ~ Elise