Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

spoolsv.exe, sychost.exe, svchost.exe


  • Please log in to reply
1 reply to this topic

#1 Denzil

Denzil

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:06:38 AM

Posted 19 January 2005 - 06:02 AM

I am having major problems with my PC. It started with the above attempting to gain access to the internet on my PC and blocking all other access. I have used every method I can including the FAQs on this site to find a virus but nothing has been detected. I cannot use online scans as I now cannot gain access to the internet. Last night I logged on to the internet and was presented with a screen saying REMOVAL COMPLETE in block capitals. The site is http://hsremove.com/done.htm. Now whenever I go online I am taken here and cannot access any other site. Does anyone have any idea what I have got or how I can remove this.

BC AdBot (Login to Remove)

 


m

#2 tg1911

tg1911

    Lord Spam Magnet


  • Members
  • 19,274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Louisiana
  • Local time:05:38 AM

Posted 19 January 2005 - 10:27 AM

sychost.exe:
Added by the LEOX.B WORM!
http://www.sysinfo.org/startuplist.php?filter=sychost.exe

spoolsv.exe( several possibilities):
http://www.sysinfo.org/startuplist.php?filter=spoolsv.exe

svchost.exe( several possibilities):
http://www.sysinfo.org/startuplist.php?filter=svchost.exe

Can you get into safe mode, and run your antivirus?
How to start Windows in Safe Mode

Burn HijackThis to disk, then install it on the infected computer.

Download the latest version of HijackThis (HJT), from here.

Put HijackThis in a Permanent folder:
Click My Computer / C: / File / New / Folder / name the folder; HijackThis
Put HijackThis.exe, in this folder.
This is a mandatory step, for the backup and restore functions, of HijackThis, to be able to work.

Read the pinned post in the HJT forum, here

Then, run a log, and post it in the HJT forum, at this link. Do not, fix anything, yet.
A member, of the HJT Team, will help you out.
It may take a couple of days to get a response, but, the HJT Team are very busy. Please, be patient, these people are volunteers. They will help you out, as soon as possible.

NOTE:
Once you have made the post, please, DO NOT make another post in the HJT forum, until it has been responded to by a member of the HJT Team. The first thing they look for, when looking for logs to reply to, is 0 replies. If you make another post, there will be 1 reply. The team member will assume someone is already helping you out, and will not respond. So, just make your post, and let it sit, until a team member responds. This way you will be taken care of, in the most timely manner.
MOBO: GIGABYTE GA-MA790X-UD4P, CPU: Phenom II X4 955 Deneb BE, HS/F: CoolerMaster V8, RAM: 2 x 1G Kingston HyperX DDR2 800, VGA: ECS GeForce Black GTX 560, PSU: Antec TruePower Modular 750W, Soundcard: Asus Xonar D1, Case: CoolerMaster COSMOS 1000, Storage: Internal - 2 x Seagate 250GB SATA, 2 x WD 1TB SATA; External - Seagate 500GB USB, WD 640GB eSATA, 3 x WD 1TB eSATA

Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users