Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

During Windows Update stall -- dnsclient, svchost issues


  • This topic is locked This topic is locked
1 reply to this topic

#1 intruded_a_lot

intruded_a_lot

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:11:25 AM

Posted 11 September 2014 - 07:45 PM

Hi,

 

Win 8.1

 

This is partly a different issue than posted (and not acknowledged) in Malware forum:

 

I usually disable dnsclient service because of strange connections when it's running.  However I *have* to enable it when I use Windows update -- will not work without it.  Also BITS, winhhtp proxy and WU are disabled until I choose to update.  This is the

reason why.

 

1)Windows update download stalls at 62%.

 

2)Many connections to weird ips - anything from drupal.com to maildesignmedia.com (20+ connections with data)

 

3)Svchost Dcomlaunch  (which also has Plug&Play) shows

--Tiworker -- embedded

--explorer.exe -- immersive and --embedded    C;|windows\explorer.exe  /factory....  (re-enables after process kill)

--dllhosts -- one is Connection Manager Lua Host Object -- netshell.dll

--2 instances of WmiPrvSe.exe running from root/wmi and cimv2 providers.

 

Any help is appreciated. 

 

 



BC AdBot (Login to Remove)

 


m

#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,592 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:25 AM

Posted 11 September 2014 - 08:12 PM

Closed since you have started a new topic here in the Malware Removal Logs forum.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users