New virus? DNS errors / unkillable process

  • Thread starter Thread starter Jeff
  • Start date Start date
J

Jeff

cannot ping anything but self and DNS servers while
connected through modem or NIC; DNS servers ok; all other
machines ping and connect fine. List of processes in Task
Manager shows Lxtgyw2.exe - end process - and it
immediately returns as either Wtws09.exe or qbs4.exe or
ocn67i.exe or zhdmmv4l.exe or yisz12.exe or a couple of
other not so random names; with no description. Updated
Norton to Aug29 '03 pattern - says system is clean. Can
connect but not browse internet or access any service
that involves resolving a host name. Reset TCP/IP in
WinXP as per MS knowledge base article - no help...

Smells like a virus, but all scans say not...
 
Try running the virus scan in safe mode. Sometimes a virus is not seen if it
has gone active.
Dave
 
Thanks, but we've tried that as well and removed many
adware, spyware, etc, but that hasn't killed this thing.

run MSCONFIG.EXE to see what starts when computer is started. Anything
suspicious there?

Also check out what "SERVICES" you have running/started. Start => Programs
=> Administrative Tools => Services (if i recall that right, now i am not
using english windows XP so can't check it out), in different windows
versions it might be other places :)

and ofcoz in command promt you can type TASKLIST /SVC to see what services
are running in svchost.exe etc.

Considering that exe appears, after termination, on different names, I think
there might be some service (or other .EXE etc) that keeps it alive.
 
Back
Top